From 3f0f5fb29c6ded93dedb774114b242469bb216ac Mon Sep 17 00:00:00 2001
From: Mike Auty <mike.auty@gmail.com>
Date: Thu, 2 Sep 2021 17:05:35 +0100
Subject: [PATCH] Windows: Reduce the full automagic range *again*  5:\

---
 volatility3/framework/automagic/windows.py | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/volatility3/framework/automagic/windows.py b/volatility3/framework/automagic/windows.py
index fbbbc9222..c86ba02e9 100644
--- a/volatility3/framework/automagic/windows.py
+++ b/volatility3/framework/automagic/windows.py
@@ -132,7 +132,7 @@ class DtbTest64bit(DtbTest):
     def __init__(self) -> None:
         super().__init__(layer_type = layers.intel.WindowsIntel32e,
                          ptr_struct = "Q",
-                         ptr_reference = range(0x1ff, 0x100, -1),
+                         ptr_reference = range(0x1ff, 0x1e0, -1),
                          mask = 0x3FFFFFFFFFF000)
 
     # As of Windows-10 RS1+, the ptr_reference is randomized: