Question

Suppose that there are some hex contents in four-byte memory space.

According to some Internet resources I have, I heard that the contents of the memory should be read backward. So if in 0011AA33 contents are 96223346 in hex, in practical means, should it be rea 46332296? Or does this only apply to EIP>

Was it helpful?

Solution

This depends on how you interpret the data, and how you do the read. It's true that the x86 is a little-endian architecture.

This only matters when you read a multi-byte value, such as a 32-bit integer. Once a value is in the register, it will have the proper endianness if it was loaded using an operation aware of the size.

Licensed under: CC-BY-SA with attribution
Not affiliated with StackOverflow
scroll top