A
A
ADKX2020-11-02 15:44:39
assembler
ADKX, 2020-11-02 15:44:39

How to get address in .rdata?

Can you please tell me how can I link the link from the screenshot (0x028316DC) and the .rdata address with the constant using a regular hex editor?

5f9fff21accd4601783929.png

I apologize in advance, I do not fully understand how to formulate the question correctly.
I will be grateful for help)

Answer the question

In order to leave comments, you need to log in

3 answer(s)
1
15432, 2020-11-02
@15432

The address immediately following this command (0x7FFCA9332358) plus the offset (0x028316DC) = the address to refer to (0x7FFCABB63A34)

J
jcmvbkbc, 2020-11-02
@jcmvbkbc

Add the offset (0x28316dc) to the address of the next instruction (0x7ffca9332358).

F
freeExec, 2020-11-02
@freeExec

Each section has its RVA (relative virtual address) listed in the description table. You subtract it from the address in memory - you get the physical offset from the beginning of this section in the file.
5fa0010517e4d757908213.jpeg

Didn't find what you were looking for?

Ask your question

Ask a Question

731 491 924 answers to any question