Cheat Engine

RCard · How do I cheat? Reputation: 0 Joined: 25 Jan 2011 Posts: 5

Just having some troubles what are really slowing down my work.
I am replacing some code in binary... but it is not a point.
So, i want to place somewhere in a code "jmp 9000" for example. Of course i can't do it directly through ASM, i need to know it's byte equivalents.
So, what we have for jmp 9000?
e9 14 68 bb ff
e9 is jump short obviously.
FF is... probably kind of zero?
All others are... 9000? What kind of counting it is? It makes completely no sense for me, at least because
9000: 14 68 bb ff
10500: 14 db bb ff
575000: 14 4d c0 ff
14s! Surprise:
123: 39 d7 ba ff
Thats quiet strange for me, i don't even have a single idea how to convert some integer value to this.
Any help or at least hint is very appreciated.

Slugsnack · Posted: Tue Jan 25, 2011 10:18 am Post subject:

There's no consistent pattern. If you want to do translation like this look into intel's manuals.

atom0s · Posted: Tue Jan 25, 2011 12:34 pm Post subject:

Jumps are calculated based on the distance between the jump and the destination.

RCard · How do I cheat? Reputation: 0 Joined: 25 Jan 2011 Posts: 5

Probably a simple example of HOW it is calculated? I don't really know thing about it's calculation methods, thats a really "pitch black" for me.

Slugsnack · Posted: Tue Jan 25, 2011 12:54 pm Post subject:

it's the difference in address - 5