Fix failing to read IMAGE_NT_HEADERS when it is at an address greater… #1369

Merged
merged 1 commit into from Dec 13, 2016

Projects

None yet

2 participants

@jossgray
Contributor
jossgray commented Dec 13, 2016 edited

… than 0x1000.

Found that x64dbg was failing to open this executable and reporting "Invalid PE file!", http://downloads.dell.com/FOLDER04030973M/1/XPS_9550_1.2.16.exe

The problem was that (size_t)pdh->e_lfanew < readSize was returning false and so x64dbg was unable to read the file architecture correctly.


This change is Reviewable

@mrexodia mrexodia merged commit 9732d3e into x64dbg:development Dec 13, 2016
@mrexodia
Member

Thanks! I made slight changes to support a wider variety of executables and also added support for this in the launcher.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment