Question

when i view pe file in hexeditor value is reversing stored in it but why?
for example :
in pe file header structure 2nd record is referred to Number Of Section
that's value is 0300
but real value is 0003
that's mean for read value from pe file we must read it byte to byte from right !

Was it helpful?

Solution

PE format is Little Endian, so the least-significant byte is first.

Licensed under: CC-BY-SA with attribution
Not affiliated with StackOverflow
scroll top