Quote:
Originally Posted by hijax
Code:
//
// ...
.text:0040AA37 mov ecx, offset unk_D97D38
.text:0040AA3C call sub_42A790
|
That disassembly suggests that the function is member function.
See

for reference.
To clear my suspection out, the code is moving pointer to ecx,
commonly used for 'this' pointer.
Even with this knowledge you can not use windows detours,
but it will give you a sense of direction.
Hope this helps.