Problem
In the memory window of vs2010, check that the address is 0x00635878 memory ,.
If I keep the memory storage value of this address as a pointer, what is the value of this pointer?
A. 40b4ca74
B. 47ac4b04
C. 74cab440
D. 044bac47
Answer
C. 74cab440
This involves the concept of little endian.
These two phrases "Big endian" and "little endian" are derived from "big end in" and "little end in." They refer to the way in which memory is stored.
On an Intel computer, the little end is stored first. this means a hex word like 0x1234 is stored in memory as (0x34 0x12 ). the little end, or lower end, is stored first. the same is true for a four-byte value; for example, 0x12345678 wocould be stored as (0x78 0x56 0x34 0x12 ).
"Big end in" does this in the reverse fashion, so 0x1234 wocould be stored as (0x12 0x34) in memory. this is the method used by Motorola computers and can also be used on RISC-based computers. the RISC-based MIPS computers and the DEC Alpha computers are available for big endian or little endian. windows NT works only in the little endian mode on both computers.
Http://support.microsoft.com/kb/102025