In eax = abc
004478A2 A32CA94400 MOV [0044A92C],EAX
0167:004478A7 C1152CA9440005 RCL DWORD PTR [0044A92C],05
0167:004478AE C1252CA9440009 SHL DWORD PTR [0044A92C],09
004478B5 C12D2CA9440003 SHR DWORD PTr[0044A92C],03
0167:004478BC C11D2CA944005C RCR DWORD PTR [0044A92C],5C
0167:004478C3 C1152CA944000C RCL DWORD PTR [0044A92C],0C
0167:004478CA C1252CA9440003 SHL DWORD PTR [0044A92C],03
0167:004478D1 C12D2CA9440005 SHR DWORD PTR [0044A92C],05
0167:004478D8 C1152CA9440036 RCL DWORD PTR [0044A92C],36
0167:004478DF C1252CA9440002 SHL DWORD PTR [0044A92C],02
004478E6 0FB63514A94400 MOVZX ESI,BYTE PTR[0044A914]


What do you get out


Thanks for helping NeO!

In eax = abc
04478A2 A32CA94400 MOV [0044A92C],EAX ; 0044a92c = 00000ABC
0167:004478A7 C1152CA9440005 RCL DWORD PTR [0044A92C],05 ; 0044a92c = 00015780
0167:004478AE C1252CA9440009 SHL DWORD PTR [0044A92C],09 ; 0044a92c = 02AF0000
004478B5 C12D2CA9440003 SHR DWORD PTr[0044A92C],03 ; 0044a92c = 0055E000
0167:004478BC C11D2CA944005C RCR DWORD PTR [0044A92C],5C ; 0044a92c = 0ABC0000
0167:004478C3 C1152CA944000C RCL DWORD PTR [0044A92C],0C ; 0044a92c = C0000055
0167:004478CA C1252CA9440003 SHL DWORD PTR [0044A92C],03 ; 0044a92c = 000002A8
0167:004478D1 C12D2CA9440005 SHR DWORD PTR [0044A92C],05 ; 0044a92c = 00000015
0167:004478D8 C1152CA9440036 RCL DWORD PTR [0044A92C],36 ; 0044a92c = 05400000
0167:004478DF C1252CA9440002 SHL DWORD PTR [0044A92C],02 ; 0044a92c = 15000000
004478E6 0FB63514A94400 MOVZX ESI,BYTE PTR[0044A914] ; IRRELEVANT TO PREVIOUS CALC


With softIce write d ds:0044a92c. then change the mode of the data window to dword by repeatedly clicking in the upper right margin so you see the numbers in a more human readable format.
Keep an eye on ds:0044a92c as you trace through the code. As I did not have your original code I just reassemble your snippet it in a small asmfile.com using the HIEW assembler capabilities. I started the code with a Int 3 instruction so Sice would break at the begining of the program, then traced it and copied the results for you to see. If you are interested in the little snippet, write me back. The hell if I know how to attach files to postings. Is only 41 bytes:

Ìf¸¼
fÁÐfÁà fÁèfÁØ\fÁÐfÁàfÁèfÁÐ6fÁàÍ

I wroted you email today !i hope you will answer!Because last to email you didnt'!


NeO