4

I'm using IDA Pro to disassemble/modify a PE file. How can I get the file offset in the '.exe' where a specific data/instruction resides. Or how can I get the file offset which is the source of a virtual address?

2
9

At the bottom left of the IDA View, you'll see the location of the cursor, as file offset (red) as well as virtual location (blue).

(Underlines by me, not by Ida).

enter image description here

2
  • Do you also know how can I copy it into clipboard?
    – sasho648
    Feb 13 '15 at 21:32
  • What if it gives me this?
    – c00000fd
    Apr 6 '19 at 23:00
3

To find it using IDAPython:

ida_loader.get_fileregion_offset(ea)

where "ea" is your virtual offset like 0x400000.

1

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Not the answer you're looking for? Browse other questions tagged or ask your own question.