THREADSTACK0 address for process

[tqwewe]

When working with cheatengine, you can come across a token called THREADSTACK0.

THREADSTACK0 is explained here: https://forum.cheatengine.org/viewtopic.php?p=5487976#5487976

Does this library have anything similar to address offsets for modifying memory after game restarts?

[sy1ntexx]

You can use https://docs.rs/faithe/0.8.0/faithe/memory/fn.follow_pointer_path.html to address multilevel pointers.

[tqwewe]

Though I need to get the base address of the thread.

Cheat engine does this by using NtQueryInformationThread. https://github.com/cheat-engine/cheat-engine/blob/c97e0a9c0e895a05db3806f451393bdcad156b3c/Cheat%20Engine/CEFuncProc.pas#L3615

[sy1ntexx]

Tell me if this is what you were looking for