go in game and do a unknown val. 32-bit(i think its 32) and then loose health search diff, loose a lil more health search diff, gain some health search diff, gain a lil more health, search diff again, no run around for a little bit(to get rid of fake address, make sure u have the same health) now search again, but this time do a SAME search, repeat process until found(its DMA too, so u gotta un-DMA it)