volatility3/volatility/framework/symbols/windows/reg.json

{
  "symbols": {
  },
  "user_types": {
    "__unnamed_114": {
      "fields": {
        "Next": {
          "offset": 0,
          "type": {
            "kind": "base",
            "name": "unsigned long"
          }
        },
        "UserData": {
          "offset": 0,
          "type": {
            "kind": "base",
            "name": "unsigned long"
          }
        }
      },
      "kind": "union",
      "size": 4
    },
    "__unnamed_115": {
      "fields": {
        "Last": {
          "offset": 0,
          "type": {
            "kind": "base",
            "name": "unsigned long"
          }
        },
        "u": {
          "offset": 4,
          "type": {
            "kind": "union",
            "name": "__unnamed_114"
          }
        }
      },
      "kind": "struct",
      "size": 8
    },
    "__unnamed_116": {
      "fields": {
        "u": {
          "offset": 0,
          "type": {
            "kind": "union",
            "name": "__unnamed_114"
          }
        }
      },
      "kind": "struct",
      "size": 4
    },
    "__unnamed_117": {
      "fields": {
        "NewCell": {
          "offset": 0,
          "type": {
            "kind": "struct",
            "name": "__unnamed_116"
          }
        },
        "OldCell": {
          "offset": 0,
          "type": {
            "kind": "struct",
            "name": "__unnamed_115"
          }
        }
      },
      "kind": "union",
      "size": 8
    },
    "_HBIN": {
      "fields": {
        "FileOffset": {
          "offset": 4,
          "type": {
            "kind": "base",
            "name": "unsigned long"
          }
        },
        "Reserved1": {
          "offset": 12,
          "type": {
            "count": 2,
            "kind": "array",
            "subtype": {
              "kind": "base",
              "name": "unsigned long"
            }
          }
        },
        "Signature": {
          "offset": 0,
          "type": {
            "kind": "base",
            "name": "unsigned long"
          }
        },
        "Size": {
          "offset": 8,
          "type": {
            "kind": "base",
            "name": "unsigned long"
          }
        },
        "Spare": {
          "offset": 28,
          "type": {
            "kind": "base",
            "name": "unsigned long"
          }
        },
        "TimeStamp": {
          "offset": 20,
          "type": {
            "kind": "union",
            "name": "_LARGE_INTEGER"
          }
        }
      },
      "kind": "struct",
      "size": 32
    },
    "_HCELL": {
      "fields": {
        "Size": {
          "offset": 0,
          "type": {
            "kind": "base",
            "name": "long"
          }
        },
        "u": {
          "offset": 4,
          "type": {
            "kind": "union",
            "name": "__unnamed_117"
          }
        }
      },
      "kind": "struct",
      "size": 12
    },
    "_LARGE_INTEGER": {
      "fields": {
        "HighPart": {
          "offset": 4,
          "type": {
            "kind": "base",
            "name": "long"
          }
        },
        "LowPart": {
          "offset": 0,
          "type": {
            "kind": "base",
            "name": "unsigned long"
          }
        },
        "QuadPart": {
          "offset": 0,
          "type": {
            "kind": "base",
            "name": "long long"
          }
        },
        "u": {
          "offset": 0,
          "type": {
            "kind": "struct",
            "name": "__unnamed_2"
          }
        }
      },
      "kind": "union",
      "size": 8
    },
    "__unnamed_2": {
      "fields": {
        "HighPart": {
          "offset": 4,
          "type": {
            "kind": "base",
            "name": "long"
          }
        },
        "LowPart": {
          "offset": 0,
          "type": {
            "kind": "base",
            "name": "unsigned long"
          }
        }
      },
      "kind": "struct",
      "size": 8
    }
  },
  "enums": {
  },
  "base_types": {
    "unsigned char": {
      "endian": "little",
      "kind": "char",
      "signed": false,
      "size": 1
    },
    "unsigned short": {
      "endian": "little",
      "kind": "int",
      "signed": false,
      "size": 2
    },
    "long": {
      "endian": "little",
      "kind": "int",
      "signed": true,
      "size": 4
    },
    "char": {
      "endian": "little",
      "kind": "char",
      "signed": true,
      "size": 1
    },
    "unsigned long": {
      "endian": "little",
      "kind": "int",
      "signed": false,
      "size": 4
    },
    "long long": {
      "endian": "little",
      "kind": "int",
      "signed": true,
      "size": 8
    },
    "unsigned long long": {
      "endian": "little",
      "kind": "int",
      "signed": false,
      "size": 8
    }
  },
  "metadata": {
    "producer": {
      "version": "0.0.1",
      "name": "ikelos-by-hand",
      "datetime": "2017-09-04T22:45:22"
    },
    "format": "4.0.0"
  }
}