From e998082d84f89f41214f6d75d095e9eb6e3a4bf3 Mon Sep 17 00:00:00 2001 From: Mike Auty Date: Tue, 9 Jul 2019 23:34:34 +0100 Subject: [PATCH] Add in HRESULT primative. --- volatility/framework/symbols/windows/mspdb.py | 7 ++++++- 1 file changed, 6 insertions(+), 1 deletion(-) diff --git a/volatility/framework/symbols/windows/mspdb.py b/volatility/framework/symbols/windows/mspdb.py index 9d429d3be..a57c254f7 100644 --- a/volatility/framework/symbols/windows/mspdb.py +++ b/volatility/framework/symbols/windows/mspdb.py @@ -39,7 +39,12 @@ primatives = { "signed": True, "size": 4 }), - # 0x08: ("HRESULT", {}), + 0x08: ("HRESULT", { + "endian": "little", + "kind": "int", + "signed": False, + "size": 4 + }), 0x10: ("char", { "endian": "little", "kind": "char",