Finding address for Range

12/26/2018 11:13 FlyffBestie#1
hey I'm currently playing on Almighty Flyff.
I spend almost all day long to find the range address.
My steps:
1. View referred strings
2. search for "cmd"
3. set breakpoint at call function, so its breaks when character is about to do an attack
4. showing ESP in hexview
5. copy first 4 bytes
6. write 4 bytes backwards to get return address
7. go to this address
8. try to nop

is there any other way to find the range address?
please help me, thanks in advance!