search

ralish / DecodeWheaRecord

Decode hex-encoded Windows Hardware Event Architecture (WHEA) records
MIT License
13 stars 1 forks source link

Add support for WheaInit #3

Open oahsiao opened 9 months ago

oahsiao commented 9 months ago 
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
ralish commented 9 months ago

Thanks @oahsiao. I'm also keen to add support for this event, but it's probably the most complex one. That's partly as it's a large and complex structure, but it's also undocumented so will require reverse engineering the relevant parts of the NT kernel.