Guide To Search For Base Address

1.Open up your CE and target Elementclient.exe

2.Search for your current HP value

3.Do a couple of search by changing your HP value till you obtain 1 or 2 address left

4.Double click it to move it down yo your table and right click on it. right click on it and choose find out what writes on this address(it might takes a while but try changing the HP while finding might speed up)

5.After u got your results choose it and click on more information

6.see that ESI+00000450.DO remember the 450 it will the your offset for HP.
find out what ESI stands for by checking the table down there
for me its 1b1b9048<------will be different since it supposed to be dynamic

7.Search for the pointer tht u found previously.Remember to tick HEX

8.you will probably get more than one result. Just take the first address

click on add address manually then tick pointer insert the address u found and the offset

9.right click on the address you added just now and choose find out what accessed this address

A window will pop up since its a pointer then click on find out what accessed this pointer

10.again bunch of results pop up again select the first one and click on more information

11.like what u saw on step 6 REad the highlighted line. this time the offset is 20
Search for edi which is 03fc9a28<----again might different from each other

12.Search for 03fc9a28 in HEX. see that green static address thats your base address