title: PE file section RVA calculation
body: <p>I'm currently looking through a PE file's section table, both from the raw data on the disk, and through a couple of PE analysers.  I'm a little confused over how some addresses are being interpreted.</p>
  
  <p>For example.  From the raw PE image on disk, I see this:</p>
  
  <pre><code>.text    virtualSize: 0x1A0F71  virtualAddress: 0x1000  rawSize: 0x1A1000
  </code></pre>
  
  <p>However, when using some PE analysers (LordPE, pedump.me), I see this:</p>
  
  <pre><code>.text    virtualSize: 0x114d41  virtualAddress: 0x1000  rawSize: 0x114e00
  </code></pre>
  
  <p>I'm not sure how these values are being interpreted.  It is something to do with alignment, and the image's base address?</p>
  
  <p>Any input would be appreciated.</p>
  
  <p>Thanks</p>