Question

Suppose that there are some hex contents in four-byte memory space.

According to some Internet resources I have, I heard that the contents of the memory should be read backward. So if in 0011AA33 contents are 96223346 in hex, in practical means, should it be rea 46332296? Or does this only apply to EIP>

Était-ce utile?

La solution

This depends on how you interpret the data, and how you do the read. It's true that the x86 is a little-endian architecture.

This only matters when you read a multi-byte value, such as a 32-bit integer. Once a value is in the register, it will have the proper endianness if it was loaded using an operation aware of the size.

Licencié sous: CC-BY-SA avec attribution
Non affilié à StackOverflow
scroll top