he is using negative offsets -0x6D0 , -0xDF8Well I don't know, but this part :
can be shortened to:Code:offset = READU32(0x0FFFFBF4); offset += 0xFFFFF930; offset = READU32(0x00000000); offset += 0xFFFFF208;
Code:offset = 0xFFFFF208;
Which will result in an error...