Yes, here is one way.
Take a look on this video:
After you find player address, I recommend you adding +4000 bytes(hexa) to it, and use (Find array of byte) from there on. So you will get less wrong addresses.
This will not work if it is server side fixed. But it might still work on a few servers.
Tested on RFOlympic - Not Working.
