table of contents
RVA2OFS(1) | General Commands Manual | RVA2OFS(1) |
NAME¶
rva2ofs - converts a PE relative virtual address to raw file offsetSYNOPSIS¶
rva2ofs rvs pefileDESCRIPTION¶
rva2ofs converts a RVA (Relative Virtual Address) to raw file offset, if possible. It's part of pev, the PE file analysis toolkit.rva is a valid PE RVA in decimal or hexadecimal (prefixed with 0x).
pefile is a PE32/PE32+ executable or dynamic linked library file.
OPTIONS¶
- -V, --version
- show program version and exit.
- --help
- show help.
EXAMPLES¶
Get offset from RVA 0x12db of cards.dll:- $ rva2ofs 0x12db cards.dll