it 加油站

2008年2月27日

Rva2Offset

摘要: /// /// The PE format frequently uses the term RVA (Relative Virtual Address). An RVA is the address of an item /// once loaded into memory, with the base address of the image file subtracted from it (i.e., the offset from the /// base address where the file is loaded). The RVA of an item will almost always differ from its position within /// the file on disk. To compute the file position of an item with RVA r, search all the sections i 阅读全文

posted @ 2008-02-27 12:56 antilope 阅读(377) 评论(0) 推荐(0)