You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
Can reproduce it as well on 24H2 26080.1. The problem seems to be the extra 0x1000 bytes in the page region that contains the module, which doesn't end up matching x64dbg's calculations as to how big the region should be. Here's an example by running calc.exe & checking windows.energy.dll:
The module has 8 sections (not incl. the header), when each section is aligned, the total size comes out to 0x43000 bytes, which is different than the size of the region, which is 0x44000 bytes.
In contrast with earlier builds, the region size always matches the total size calculated by x64dbg, there's no extra memory at the end, which can be seen in the memory view as well.
I don't have time to debug what the extra memory represents, but maybe someone will have a better idea, you can check the dump in the screenshot below. To fix the problem, maybe we can also handle the case where the region is larger than the total size of the sections, and mark the remaining memory in a special way?
Operating System
Windows 11, Build 24h2 26100.1
x64dbg Version
snapshot_2024-04-11_18-47.zip
Describe the issue
Memory map on new windows build on pe's with FileAlignment 0x1000 (almost all modules have it now):
Normally you should see:
Steps to reproduce
Attachments
No response
The text was updated successfully, but these errors were encountered: