Update volatility3/framework/plugins/windows/etwpatch.py

Co-authored-by: ikelos <ikelos@users.noreply.github.com>
2026-09-11 12:17:38 +02:00 · 2025-04-29 13:11:47 +03:00
parent 39b35a3a80
commit cc1df7b461
1 changed files with 1 additions and 2 deletions
@@ -95,8 +95,7 @@ class EtwPatch(interfaces.plugins.PluginInterface):
                    try:
                        opcode = (
                            self.context.layers[proc_layer_name]
-                            .read(func_addr, 1)
-                            .hex()
+                            .read(func_addr, 1)[0]
                        )
                        if opcode in opcode_map:
                            instruction = opcode_map[opcode]