Suppose we have the following in the DATA section: lpstringi BYTE "Norwich", e lpString2 BYTECYBR215, 0 And we have the following code: cld lea esi, 1pstringi lea edi, lpstring2 mov ecx, 3 rep movsb A breakpoint at the rep instruction shows the register contents and memory right before the rep instruction executes Registers EAX = 00000000 EBX # 000C4000 ECx = eeeeeee3 EDX 000C1005 ES! = 000C4010 EDI eeec4018 EIP -eeeC103E ESP . eelCFB14 EBP = 001CFB28 EFL -00000246 Memory: exee00401e 4e 6f 72 77 69 63 68 00 43 59 42 52 32 Norwich.CYBR2 0x000ca01D 31 35 00 00 00 00 00 00 00 00 00 00 00 15NNT