I remember the LAST time you had that in your sig.
But was it also the first?
I doubt....
But was it also the first?
I doubt....
mov xx,yy: xx = yy
add xx,yy: xx += yy
cmp xx,yy: compares xx and yy, always followed by a je, jne, jle, etcetera
jne xxxxxx: jumps to xxxxxx if xx and yy (from above) are not equal
3. opcodes? if you mean the dword stuff, the dword is the size, the ptr ss/ptr ds is unneccesary junk.The movsx instruction is a generalized form of the cbw, cwd, and cwde instructions. It will sign extend an eight bit value to a sixteen or thirty-two bits, or sign extend a sixteen bit value to a thirty-two bits. This instruction uses a mod-reg-r/m byte to specify the two operands.
mov ecx,dword ptr ds:[4A5AD8]
add ecx,dword ptr ds:[4A5AE0]
movsx edx,byte ptr ds:[ecx+1]
cmp edx,58
jne 004251FC
mov eax,dword ptr ds:[4A5AD8]
add eax,dword ptr ds:[4A5AE0]
movsx ecx,byte ptr ds:[eax+2]
cmp ecx,58
jne 004251FC
mov edx,dword ptr ds:[4A5AD8]
add edx,dword ptr ds:[4A5AE0]
movsx eax,byte ptr ds:[edx+3]
cmp eax,31
jne short 004251FC
//actual code
1: list the names of every tsc command and what offset they start at.
2: convert to pseudocode everything they do
3: turn all called functions (macros, whatever) into pseudocode as well, except calls to 421900, because that's a really big and annoying function (it's ascii to hex)
4: format it prettily.