Just use the pointer scanner of CE. Equip a shotgun, search in there for 8. Switch to secondary, then find out those who show now 1. Repeat until you have around 8 addresses. You can narrow them down to the true one too. Also the pointer should have 3 offsets, no more no less. If there are ones that repeat an address in the path then they are invalid. The pointer should point to zero in its path at cases when; you are out of game, your character died or you are watching another character.