We read every piece of feedback, and take your input very seriously.
To see all available qualifiers, see ourdocumentation.
nmi stackwalking + module verification
simple project to demonstrate how NMIs can be used to stackwalk. will probs expand to include other detection vectors like start address etc.
Finds theMACHINE_FRAME structure which represents how theiretq instruction returns from an isr to determine the rip that was interrupted by the NMI.
MACHINE_FRAME
iretq
tested on win10 22h2 and win11 22h2
