> In that scenario, offset 4 of Xs save area will no longer contain > FnSA, and can thus be identified as the forward pointer of a 72-bytesave area.
The point that several recent posts have been trying to make is that the contents of word 1 indicate how the registers were saved in the *previous* save area, not this one. You'd have to find the save area *after* X's save area to determine the format of X's save area, and the finding of the next save area is problematic without already knowing the format of X's save area. - mb
