diff --git a/docs/W3-predictions.md b/docs/W3-predictions.md
index 86c4df4..fcf3801 100644
--- a/docs/W3-predictions.md
+++ b/docs/W3-predictions.md
@@ -57,7 +57,8 @@ predicate, and on this save the predicate has **exactly one** solution.
 `TShn == 3` in its high half-word (`(value >> 16) == 3`). `turn3-state.sav` carries `TShn = 3` for
 Spica, so this is a prediction against a known post-state, not against the run.
 
-**P1.2** The trapping EIP is **not** in `FUN_00743ec0` (the `ltis` writer, driver phase 29) and
+**P1.2** The trapping EIP is **not** in `ServerSystem::UpdateLastObservedTurn` `0x00743ec0` (the
+`ltis` writer, driver phase 29) and
 **not** in `ServerSystem::RecordObservation 0x00756300` (which writes `NVE`, at `+0x284`). Spica's
 `ltis` is `0x7fffffff` in all three ref saves — never written — while its `TShn` moves every turn,
 so the two cannot share a writer.