diff --git a/de4dot.code/PE/PeImage.cs b/de4dot.code/PE/PeImage.cs index b9a880af..eb9a639a 100644 --- a/de4dot.code/PE/PeImage.cs +++ b/de4dot.code/PE/PeImage.cs @@ -114,7 +114,7 @@ namespace de4dot.code.PE { SectionHeader getSectionHeader(uint rva) { for (int i = 0; i < sectionHeaders.Length; i++) { var section = sectionHeaders[i]; - if (section.virtualAddress <= rva && rva < section.virtualAddress + section.virtualSize) + if (section.virtualAddress <= rva && rva < section.virtualAddress + Math.Max(section.virtualSize, section.sizeOfRawData)) return section; } return null;