Cheat Engine

Dr.Disrespect · Posted: Mon Mar 07, 2016 8:10 pm Post subject: "js" and "or eax,-01"

Hi there, what does "js" mean? In the memory viewer, the explanation is "jump short if sign". Does "sign" has the same meaning as it has in "signed integer"?
My second question is: what is the following code usually used for?

hhhuut · Posted: Tue Mar 08, 2016 2:59 am Post subject:

1) jump if signed does exactly mean the signing of integeres (which is expressed by the most significant bit I think).

2) You can write that as an

Zanzer · Posted: Tue Mar 08, 2016 11:42 am Post subject:

or eax,-1 is just a faster way for your computer to perform mov eax,-1

Dr.Disrespect · Posted: Tue Mar 08, 2016 3:21 pm Post subject:

Thanks guys. Smile

gir489 · Posted: Wed Mar 09, 2016 12:34 pm Post subject:

I haven't seen your RETN question answered probably because nobody knows what you're talking about. But you're about to open a can of worms on this if you want this answered properly.

http://marcoramilli.blogspot.com/2011/08/rop-retn-offest-stack-compensation.html
https://courses.engr.illinois.edu/ece390/archive/spr2002/books/labmanual/inst-ref-ret.html

The 4 means it's going to increment the stackpointer by 4 after the Return Near. Why? Probably because the compiler is doing some cleanup.

What is it actually for? Who fucking knows. But ROP programmers abuse it to have it return to an area of code they've injected for RCE. It's really nifty to abuse for pentesting, but really sucks ass for game hacking, I wouldn't bother with it, really. Just ignore it.