Fine, I tested it with Crack, recursive 10 without ms... it runs...
Could you develop an option displaying juste the function called with the offset into the *.exe file. Offset relative from the beginning of the file. And, but it's a little omplicated the offset from the real call.
I explain :
CreateFont(...)
is replaced with
jump OffsetCreateFont
.
.
.
OffsetCreateFont : CALL CREATEFONT