mrnobo1024 wrote:
--- Alex Ionescu ionucu@videotron.ca wrote:
I meant that instead of mov edx,[esp+8] mov eax,[esp+4] it could be mov edx,[esp+4] mov eax,[esp+8]. I don't think that would affect instruction pairing.
That wouldn't swap them... you would just be inverting the bytes. Each ULONG must be swapped here.