Hiii playerup today I'll post some class... Code: class CObjectWeapon { public: char pad_0000[4]; //0x0000 D3DXVECTOR3 Bullets; //0x0004 D3DXVECTOR3 Bullets2; //0x0010 char pad_001C[128]; //0x001C D3DXVECTOR3 Tamanho_Model; //0x009C char pad_00A8[56]; //0x00A8 D3DXVECTOR3 CameraCurrentWeaponPos; //0x00E0 char pad_00EC[12]; //0x00EC float Scale; //0x00F8 char pad_00FC[212]; //0x00FC }; //Size: 0x01D0 class PlayerViewManager { public: char pad_0000[4]; //0x0000 CObjectWeapon* pObjectWeapon; //0x0004 char pad_0008[48]; //0x0008 __int32 CurrentWeaponID; //0x0038 You can do WeaponHack char pad_003C[24]; //0x003C float WeaponZoom; //0x0054 char pad_0058[144]; //0x0058 }; //Size: 0x00E8 class PlayerClient //LTClientShell + 0x70 for this acess class... This class have acess for BOT Object too { public: char pad_0000[716]; //0x0000 PlayerViewManager* pPlayerViewManager; //0x02CC char pad_02D0[500]; //0x02D0 float Yaw; //0x04C4 float Pitch; //0x04C8 char pad_04CC[36]; //0x04CC float CameraYaw; //0x04F0 char pad_04F4[428]; //0x04F4 uint32_t iHealth; //0x06A0 char pad_06A4[416]; //0x06A4 }; //Size: 0x0844 Code: #include "SDK\engine\sdk\inc\ltbasedefs.h" #include "SDK\engine\sdk\inc\iltmessage.h" #define ADDR_SERVERBASE 0x117C8A0 //CFBR ADDR #define ADDR_ILTCommon 0x117F020 // CFBR ADDR #define ADDR_LTClient 0x109D8E0 class ILTClient { public: char _0x0000[124]; bool(WINAPIV *IntersectSegment)(IntersectQuery &iQuery, IntersectInfo *Info); //0x007C char _0x0080[412]; void(WINAPIV *RunConsoleCommand)(CHAR *Command); //0x021C char _0x0220[508]; LTRESULT SendToServer(ILTMessage_Read *pMsg, HOBJECT hSender, uint32 flags); //0x041C };//Size=0x042C ILTClient *pLTClient; pLTClient = (ILTClient *)(CShell + ADDR_LTClient ); class ILTServer { public: char pad_0000[152]; //0x0000 virtual LTRESULT GetObjectPos(HLOCALOBJ hObj, LTVector *pPos) = 0; //0x0098 virtual LTRESULT GetObjectPos2(HLOCALOBJ hObj, LTVector *pPos) = 0; //0x009C char pad_00A0[68]; //0x00A0 virtual LTRESULT GetWorldBox(LTVector &min, LTVector &max) = 0; //0x00E4 void* FindObjectIntersections; //0x00E8 char pad_00EC[8]; //0x00EC virtual LTRESULT FindNamedObjects(const char *pName, BaseObjArray<HOBJECT> &objArray, uint32 *nTotalFound = NULL) = 0; //0x00F4 virtual LTRESULT SendToObject(ILTMessage_Read *pMsg, HOBJECT hSender, HOBJECT hSendTo, uint32 flags) = 0; //0x00F8 virtual LTRESULT SendToServer(ILTMessage_Read *pMsg, HOBJECT hSender, uint32 flags) = 0; //0x00FC virtual LTRESULT SetObjectSFXMessage(HOBJECT hObject,ILTMessage_Read *pMsg) = 0; //0x0100 virtual LTRESULT SendToClient(ILTMessage_Read *pMsg,HCLIENT hSendTo, uint32 flags) = 0; //0x0104 virtual LTRESULT SendSFXMessage(ILTMessage_Read *pMsg, uint32 flags) = 0; //0x0108 virtual LTRESULT GetClientPing(HCLIENT hClient, float &ping) = 0; //0x010C char pad_0110[8]; //0x0110 virtual LTRESULT GetClientAddr(HCLIENT hClient, uint8 pAddr[4], uint16 *pPort) = 0; //0x0118 char pad_011C[8]; //0x011C virtual LTRESULT GetObjectName(HOBJECT hObject, char *pName,uint32 nameBufSize) = 0; //0x0124 void* GetNetFlags; //0x0128 void* SetNetFlags; //0x012C char pad_0130[4]; //0x0130 void* GetClassDef; //0x0134 char pad_0138[4]; //0x0138 void* GetClassName; //0x013C char pad_0140[4]; //0x0140 void* ThreadLoadFile; //0x0144 void* UnloadFile; //0x0148 void* GetHPolyObject; //0x014C char pad_0150[1884]; //0x0150 }; //Size: 0x08AC class IServerFileMgr { public: char pad_0000[68]; //0x0000 }; //Size: 0x0044 class IServerShell { public: char pad_0000[1348]; //0x0000 }; //Size: 0x0544 class IServerConsoleState { public: char pad_0000[1589]; //0x0000 }; //Size: 0x0635 class ILTModelClient { public: char pad_0000[68]; //0x0000 }; //Size: 0x0044 class ILTServerBase { public: ILTServer* pLTServer; //0x0000 char pad_0004[480]; //0x0004 IServerFileMgr* pServerFileMgr; //0x01E4 char pad_01E8[216]; //0x01E8 IServerShell* pServerShell; //0x02C0 char pad_02C4[60]; //0x02C4 IServerConsoleState* pServerConsoleState; //0x0300 char pad_0304[88]; //0x0304 ILTModelClient* pLTModelClient; //0x035C char pad_0360[1248]; //0x0360 }; //Size: 0x0840 ILTServerBase *pLTServerBase; pLTServerBase = (ILTServerBase *)(ADDR_SERVERBASE); // acessing class Bye /gewd Credits @dreek1 Google REClass