Cheat Engine

[JoneLe86]

I am wondering how to get the stack size of ESP where as i know the address?

bty i did search and i found this answer, somehow i do not get his meaning, here is what he said

The first time you can use the address of any value on the stack to get the base address and size (in bytes) of the committed stack space.

Subtract the size from the base address and call VirtualQuery again. This way you get the space reserved for the stack.

Adding the two sizes you obtain the total stack size.

assuming i have this.. what i should do next?

[Dark Byte]

The stacksize is mbi.baseaddress+mbi.stacksize

But for what purpose do you need the stacksize? (You can't use it for pointers as windows tends to fill in the start of the stack with a random amount of data)

[JoneLe86]

You can't use it for pointers as windows tends to fill in the start of the stack with a random amount of data (interesting!)

hmm I just want to know how some debuggers show that in (Stack window) which has the lowest address of stack and the highest address,,,

maybe i asked a wrong question, cuz one i add mbi.baseaddress+mbi.stacksize a different value than those debugger show?


Ex

stack window show this range 0022E000 to 0022FFFC so now by subtracting
= 1FFC.. 8188

if use

[Dark Byte]

ah yes, I forgot that virtualqueryex returns the base from the base you gave
virtualquerryex on 22fffc will get the region of 22f000 and later

virtualqueryex on 22e000 will get the region of 22e000 and later (that includes 22f000, so at least 8192)

You need to do a virtualqueryex from address 0 and loop till you encounter a region that the target address belongs to

[JoneLe86]

it makes me feel better once i ask in a forum and i get an answer within hours, honestly i know why the hek Dark Byte is a Site Admin.. cuz he is amazing!!! and awesome!!! dude why there are no such people like you in other forums?

Got it thanks!!