it 加油站

随笔分类 -  .Net

Rva2Offset
摘要: /// /// The PE format frequently uses the term RVA (Relative Virtual Address). An RVA is the address of an item /// once loaded into memory, with the base address of the image file subtracted from it (i.e., the offset from the /// base address where the file is loaded). The RVA of an item will almost always differ from its position within /// the file on disk. To compute the file position of an item with RVA r, search all the sections i 阅读全文

posted @ 2008-02-27 12:56 antilope 阅读(383) 评论(0) 推荐(0)