RVA2OFS(1)

📦
version 0.85.1 · 2 versions
, in alpine 3.24, debian trixie, ubuntu noble, ubuntu questing, ubuntu resolute, ubuntu stonking

💖 NAME 💖

rva2ofs — bestie, it converts a PE relative virtual address to a raw file offset ✨

🦋 SYNOPSIS 🦋

rva2ofs rvs pefile

(okay yes, the synopsis literally says rvs and the description below says rva — I'm just the messenger, I promise I did not touch a single character 🙈)

🌸 DESCRIPTION 🌸

So like, rva2ofs takes an RVA (that's a Relative Virtual Address, keep up 💅) and converts it to a raw file offset, if possible. If it's not possible, well. It's not possible. It's part of pev, the PE file analysis toolkit — you know, the whole squad.

rva is a valid PE RVA in decimal or hexadecimal (prefixed with 0x). Decimal girlies and 0x hex girlies are both welcome here 🫶

pefile is a PE32/PE32+ executable or dynamic linked library file.

✨ OPTIONS ✨

  • -V, --version — show version. That's it, that's the whole vibe.
  • --help — show this help. Iconic of it, honestly.

🎀 EXAMPLES 🎀

Get offset from RVA 0x12db of cards.dll:

$ rva2ofs 0x12db cards.dll

Look at that. One line. Ate and left no crumbs 👑

😭 REPORTING BUGS 😭

Please, check the latest development code and report at https://github.com/mentebinaria/readpe/issues

fr fr, check the newest code first before you come for us — maybe it's already fixed, maybe it's a skill issue, we'll find out together 💖

💜 SEE ALSO 💜

ofs2rva(1), pedis(1), pehash(1), peldd(1), pepack(1), peres(1), pescan(1), pesec(1), pestr(1), readpe(1)

Copyright (C) 2012 - 2020 pev authors. License GPLv2+: GNU GPL version 2 or later <https://www.gnu.org/licenses/gpl-2.0.txt>. This is free software: you are free to change and redistribute it. There is NO WARRANTY, to the extent permitted by law.

no warranty bestie, you break it you bought it 💀

🌈 SEE ALSO 🌈

ofs2rva(1)

(the other direction of the same little journey, we love a round trip 🦋)

okay that's the whole page!! this is the rva2ofs page from pev, sitting in section 1 of the General Commands Manual, and the footer just says RVA2OFS(1) because that's literally all it says — no extra date, no extra version, just the name doing main character energy at the bottom of the page ✨ mwah, go convert some addresses, ily 💖

📦 where this page comes from