Frage bezüglich Virtual Address und Relative VirtualAddress

[RvaVa]

Hallo, wenn ich z.b. einen Exe Datei im Hex Editor öffnen, die Adressen die ich dort sehe werden doch als "Virtual Address" oder vertu ich mich da?

Ich bin mir leider nicht ganz sicher ob ich die Erklärung hier richtig verstanden habe:

RVA (relative virtual address). In an image file, the address of an item after it is loaded into memory, with the base address of the image file subtracted from it. The RVA of an item almost always differs from its position within the file on disk (file pointer).

In an object file, an RVA is less meaningful because memory locations are not assigned. In this case, an RVA would be an address within a section (described later in this table), to which a relocation is later applied during linking. For simplicity, a compiler should just set the first RVA in each section to zero.

VA (virtual address). Same as RVA, except that the base address of the image file is not subtracted. The address is called a “VA” because Windows creates a distinct VA space for each process, independent of physical memory. For almost all purposes, a VA should be considered just an address. A VA is not as predictable as an RVA because the loader might not load the image at its preferred location.

Quelle: http://stackoverflow.com/questions/2170843/va-virtual-adress-rva-relative-virtual-address

[hmmmm]

Dass was Du im Hexeditor siehst ist nur das offset vom Datei Anfang!