[BITS 32]
     
    section .text
     
    global _start
     
    _start:
     
    jmp callstatment
     
    shellcode:
     
    pop esi
    xor eax, eax
    mov byte[esi + 0x9], al
    mov dword[esi + 0xA], esi
    mov dword[esi + 0xE], eax
     
    mov byte al, 11
    mov ebx, esi
    lea ecx, [esi + 0x9]
    lea edx, [esi + 0xE]
    int 0x80
    
    ret ; RETORNO FUNCION.
     
    callstatment:
     
    call shellcode
    ret ; RETORNO.

    shellvariable: db "/bin/bashABBBBCCCC",0

mov al, byte[buf1]
mov bl, byte[replu]

push dword[fs:0x30]
pop eax 

int sa,sb;
int ra,rb;
int ma,mb;
int da,db;

https://www.assembla.com/spaces/Chroalus/wiki/Halo_Engine_DrawText

// Ing. Inversa por Juan fary (mDrinky)
// Funciones que imprimen cadenas de texto y numero por consola
// Halo Custom Edition.
// VSC++ 2008

#include <windows.h>

int * cBlanco = (int*)0x005F3668;
int * cVerde  = (int*)0x005F3748;
int * cRojo   = (int*)0x005F5050;
int * cRosa	  = (int*)0x005F1010;
int * cGris	  = (int*)0x00000000;

DWORD Imprimir = 0x499BD0;

char * tString = "%s";
char * tInt	   = "%i";

char * Cadena = "hola Mundo!";

void ImprimirCadena(char * Cadena,int * Color)
{
	_asm
	{
		push Cadena
		push tString
		mov eax,Color
		call dword ptr [Imprimir]	
		add esp,0x8
	}
}

void ImprimirNumero(int * Numero,int * Color)
{
	_asm
	{
		push Numero
		push tInt
		mov eax,Color
		call dword ptr [Imprimir]	
		add esp,0x8
	}
}

BOOL WINAPI DllMain(HINSTANCE hinstDLL,DWORD fdwReason,LPVOID lpvReserved)
{
	if (fdwReason == DLL_PROCESS_ATTACH)
	{
		ImprimirCadena(Cadena,cBlanco);
		ImprimirCadena(Cadena,cVerde);
		ImprimirCadena(Cadena,cRosa);
		ImprimirCadena(Cadena,cRojo);

		ImprimirNumero((int*)69,cGris);
	}

	return TRUE;
}