Get RVA for offset in exe

Hardik Shah

•

October 21, 2016

•

1 min read

if you want to know where a particular sequence of byte will be loaded at run time in memory and you only have there offset from 0 position in exe file then use following:

open exe and check sections tables
check which section this offset belong to.
load exe and get base address.
you can calculate offset as below:
1. RVA = offset in exe - rawaddress from section + virtual address + base address of exe

Tags:

Previous dumping flash var[bytearray] to file

Next compiling and testing openssl

Get RVA for offset in exe

Table of Contents

Related Posts