4 bytes...search 100 with full..then decreased...do this step few times, u will get one addy, but thats not the real one, with CE attach debugger then look at the asm code, reverse and..tadaa u got the real stamina addy (note that u have to bypass debugger detection in op7 to avoid being banned if u attach debugger to the process)