He he, forgot to mention this is from an unwrapped/dumped por2Main.exe!
Does this help you crispy, it's from a W32Dasm disassembly:
* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0049FADB(C)
|
:0049FA80 8D8424B8010000 lea eax, dword ptr [esp+000001B8]
* Possible StringData Ref from Data Obj ->"rb"
|
:0049FA87 68BC076B00 push 006B07BC
:0049FA8C 50 push eax
:0049FA8D E84F0E1500 call 005F08E1 <--- NOP this call
:0049FA92 33FF xor edi, edi
:0049FA94 83C408 add esp, 00000008
:0049FA97 3BC7 cmp eax, edi
:0049FA99 7549 jne 0049FAE4
:0049FA9B 8D8C2420010000 lea ecx, dword ptr [esp+00000120]
:0049FAA2 6896000000 push 00000096
:0049FAA7 51 push ecx
:0049FAA8 6815040000 push 00000415
:0049FAAD E8FE96FDFF call 004791B0
:0049FAB2 8D54246C lea edx, dword ptr [esp+6C]
:0049FAB6 6A28 push 00000028
:0049FAB8 52 push edx
:0049FAB9 6814040000 push 00000414
:0049FABE E8ED96FDFF call 004791B0
:0049FAC3 83C418 add esp, 00000018
:0049FAC6 8D442460 lea eax, dword ptr [esp+60]
:0049FACA 8D8C2420010000 lea ecx, dword ptr [esp+00000120]
:0049FAD1 6A05 push 00000005
:0049FAD3 50 push eax
:0049FAD4 51 push ecx
:0049FAD5 55 push ebp
:0049FAD6 FFD6 call esi
:0049FAD8 83F802 cmp eax, 00000002
:0049FADB 75A3 jne 0049FA80
:0049FADD 57 push edi
:0049FADE 57 push edi
:0049FADF E9EF020000 jmp 0049FDD3
* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0049FA99(C)
|
:0049FAE4 50 push eax
:0049FAE5 E8490D1500 call 005F0833 <--- NOP this call
:0049FAEA 8B442414 mov eax, dword ptr [esp+14]
:0049FAEE 83C404 add esp, 00000004
:0049FAF1 3BC7 cmp eax, edi
:0049FAF3 7407 je 0049FAFC
:0049FAF5 50 push eax
This works for a No CD
If you have unsafedisc + a hex editor, you can make your own No CD!!
DrA.