Well, based on the knowledge of how the entitylist work (binary tree) I launched a brut force program trying to build this tree from every possible address in memory.
for address A to B{
try creating the tree, if something has been worked out, keep note of the offset
}
and after that you make more thorough tests for those values.
I ended with 3 values with this method. As some address may result come from some "lucky coincidence", I checked if my Player char. was among the entities of the tree. I ended this time with one address.
If you find out how to do the same without knowing its a binary tree, tell me !
))
