I just want to comment that for anyone what to try doing something like this, check inside the debugger for previous ecx value before using it and beware of loops.
(Okay... for anyone who're able to do this, they must already know they have to check that)