Finding offsets?

Btw trying to make an aimbot :P just throwing that out there


EDIT: This is what iv'e found so far,am I on the right track? this is for a v5165 private server that I own,When I was jumping around on one of my chars,around another character of mine that had the proccess on her client,these are the addresses that came up,eventually I got down to the last x and last y address,and every jump they were right,but the question is am I doing this right

Heres what I found:

01175390 - proper x coord for other players?

What accesses this address
Code :00511f96 - 8b 91 c8 02 00 00 - mov edx,[ecx+000002c8]
Code :0051039b - 89 86 c8 02 00 00 - mov [esi+000002c8],eax
Code :00529795 - ff b3 c8 02 00 00 - push [ebx+000002c8]
Code :00511535 - ff 37 - push [edi]
Code :00511547 - ff 37 - push [edi]
Code :005103e3 - ff b6 c8 02 00 00 - push [esi+000002c8]
Code :0050fd97 - ff b6 c8 02 00 00 - push [esi+000002c8]
what writes to this address
Code :0051039b - 89 86 c8 02 00 00 - mov [esi+000002c8],eax

Proper y coord for other players -

01175394

What acceses this address?
Code :00511f9e - 8b 89 cc 02 00 00 - mov ecx,[ecx+000002cc]
Code :0052978d - ff b3 cc 02 00 00 - push [ebx+000002cc]
Code :00511530 - ff 77 04 - push [edi+04]
Code :005103db - ff b6 cc 02 00 00 - push [esi+000002cc]
Code :0050fd8f - ff b6 cc 02 00 00 - push [esi+000002cc]
Code :005103a4 - 89 86 cc 02 00 00 - push [esi+000002cc],eax
Code :0051153c - ff 77 04 - push [edi+04]
What writes to this address?
005103a4 - 89 86 cc 02 00 00 - mov [esi+000002cc],eax
Code :00532fc5 - 89 96 cc 02 00 00 - mov [esi+000002cc],edx

You're on the right track. The ESI register holds the player base address at the two functions. The offset for the xcoord is then (PlayerBaseAddress + 0x2C8) and for ycoord it's (PlayerBaseAddress + 0x2CC).

So xcoord offset = 0x2C8, ycoord offset = 0x2CC.

Thanks! I think im getting the hang of it now o.o