Originally Posted by Void Way to state the obvious. You don't even need to open CA to find it. Load CShell.dll into ollydebugger ( only the DLL, not all of Engine ). Right click>Search for referenced text strings. Search "L T C lient.default". Follow it in the disassembler. ( Without the spaces ) Right above you should see "PUSH CShell.SomeAddress" "SomeAddress" is the address you're looking for. /Nuff said. /Closed.