The question that the brother below asked me
The fundamental reason for the occurrence of c000005 exception in ept_pt_entry ->all is that the table is empty
As for why the table is empty
It was the previous layer of MmGetVirtualForPhysical that returned null, which does happen on win 10 22h2. A slightly lower version like 1909 can be retrieved normally
I tried using MmMapIoSpace to map a virtual address and it did run on Win10 22h2
But I know this method is definitely not good enough, and there was a blue screen during uninstallation
I want to know if there are any good brothers who have tested MmGetVirtualForPhysical on Win11 and if there are any issues
Or has anyone tried other methods to obtain a virtual address
hhuiwang
commented
2 months ago
The question that the brother below asked me The fundamental reason for the occurrence of c000005 exception in ept_pt_entry ->all is that the table is empty As for why the table is empty It was the previous layer of MmGetVirtualForPhysical that returned null, which does happen on win 10 22h2. A slightly lower version like 1909 can be retrieved normally I tried using MmMapIoSpace to map a virtual address and it did run on Win10 22h2 But I know this method is definitely not good enough, and there was a blue screen during uninstallation I want to know if there are any good brothers who have tested MmGetVirtualForPhysical on Win11 and if there are any issues Or has anyone tried other methods to obtain a virtual address