exe - Difference between offset and RVA -
what difference between relative virtual address , offset base of file??
the rva relative-virtual address, is, distance preferred base address. preferred base address stated in pe header, , (preferred) virtual address of start of image in memory when executable loaded in memory.
and file offset number of bytes have read beginning of pe file arrive somewhere in file. so, if have section, find both things in section header: rva of section , offset in file; find 2 sizes, 1 how virtual memory section once loaded , 1 merely indicates size of section data in pe file.
many references inside pe given rvas. in such cases, need check in section headers (or have sort of map) offset in pe file of reference.
Comments
Post a Comment