diff --git a/volatility3/framework/automagic/windows.py b/volatility3/framework/automagic/windows.py index f3ad05a92..0cda68332 100644 --- a/volatility3/framework/automagic/windows.py +++ b/volatility3/framework/automagic/windows.py @@ -84,7 +84,7 @@ class DtbSelfRef32bit(DtbSelfReferential): ptr_struct = "I", mask = 0xFFFFF000, valid_range = [0x300], - reserved_bits = 0x80) + reserved_bits = 0x0) class DtbSelfRef64bit(DtbSelfReferential):