質問

when i view pe file in hexeditor value is reversing stored in it but why?
for example :
in pe file header structure 2nd record is referred to Number Of Section
that's value is 0300
but real value is 0003
that's mean for read value from pe file we must read it byte to byte from right !

役に立ちましたか?

解決

PE format is Little Endian, so the least-significant byte is first.

ライセンス: CC-BY-SA帰属
所属していません StackOverflow
scroll top