was 0xf01e739e really the code that accesses up->qpctry? -- cinap