From a8d70c065738b3c3691da3ec2a82a6d4a7ca24a6 Mon Sep 17 00:00:00 2001
From: Paul Kermann <paulkermann@tutanota.com>
Date: Tue, 26 Apr 2022 10:11:12 +0300
Subject: [PATCH] fix typo

---
 volatility3/framework/plugins/windows/callbacks.py       | 2 +-
 volatility3/framework/symbols/windows/callbacks-x64.json | 2 +-
 volatility3/framework/symbols/windows/callbacks-x86.json | 2 +-
 3 files changed, 3 insertions(+), 3 deletions(-)

diff --git a/volatility3/framework/plugins/windows/callbacks.py b/volatility3/framework/plugins/windows/callbacks.py
index 5ee11f164..dca17aff7 100644
--- a/volatility3/framework/plugins/windows/callbacks.py
+++ b/volatility3/framework/plugins/windows/callbacks.py
@@ -165,7 +165,7 @@ class Callbacks(interfaces.plugins.PluginInterface):
 
         callback_list = ntkrnlmp.object(object_type = "_LIST_ENTRY", offset = symbol_offset)
         for callback in callback_list.to_list(full_type_name, "Link"):
-            yield "CmRegisterCallbackEx", callback.Function, f"Alltitude: {callback.Alltitude.String}"
+            yield "CmRegisterCallbackEx", callback.Function, f"Altitude: {callback.Altitude.String}"
 
     @classmethod
     def list_registry_callbacks(cls, context: interfaces.context.ContextInterface, layer_name: str, symbol_table: str,
diff --git a/volatility3/framework/symbols/windows/callbacks-x64.json b/volatility3/framework/symbols/windows/callbacks-x64.json
index 5300d28f9..87682cb92 100644
--- a/volatility3/framework/symbols/windows/callbacks-x64.json
+++ b/volatility3/framework/symbols/windows/callbacks-x64.json
@@ -170,7 +170,7 @@
                     },
                     "offset": 40
                 },
-                "Alltitude": {
+                "Altitude": {
                     "type": {
                         "kind": "struct",
                         "name": "nt_symbols!_UNICODE_STRING"
diff --git a/volatility3/framework/symbols/windows/callbacks-x86.json b/volatility3/framework/symbols/windows/callbacks-x86.json
index 52baeb18f..702b68a65 100644
--- a/volatility3/framework/symbols/windows/callbacks-x86.json
+++ b/volatility3/framework/symbols/windows/callbacks-x86.json
@@ -170,7 +170,7 @@
                     },
                     "offset": 28
                 },
-                "Alltitude": {
+                "Altitude": {
                     "type": {
                         "kind": "struct",
                         "name": "nt_symbols!_UNICODE_STRING"