3

I'm using IDA Pro to disassemble/modify a PE file. How can I get the file offset in the '.exe' where a specific data/instruction resides. Or how can I get the file offset which is the source of a virtual address?

9

At the bottom left of the IDA View, you'll see the location of the cursor, as file offset (red) as well as virtual location (blue).

(Underlines by me, not by Ida).

enter image description here

| improve this answer | |
  • Do you also know how can I copy it into clipboard? – sasho648 Feb 13 '15 at 21:32
  • What if it gives me this? – c00000fd Apr 6 '19 at 23:00
1

To find it using IDAPython:

ida_loader.get_fileregion_offset(ea)

where "ea" is your virtual offset like 0x400000.

| improve this answer | |

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Not the answer you're looking for? Browse other questions tagged or ask your own question.