You can't just assume that because one opcode uses a particular sized variable that another would do the same.
You would need packet captures of all the cases you are trying to figure out and then you would need to reverse engineer the packets to determine the difference when moving to/from the problem slots.
|