Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

About ept_pt_entry ->all c000005 #96

Open
fgvcbv opened this issue May 6, 2024 · 0 comments
Open

About ept_pt_entry ->all c000005 #96

fgvcbv opened this issue May 6, 2024 · 0 comments

Comments

@fgvcbv
Copy link

fgvcbv commented May 6, 2024

The question that the brother below asked me
The fundamental reason for the occurrence of c000005 exception in ept_pt_entry ->all is that the table is empty
As for why the table is empty
It was the previous layer of MmGetVirtualForPhysical that returned null, which does happen on win 10 22h2. A slightly lower version like 1909 can be retrieved normally
I tried using MmMapIoSpace to map a virtual address and it did run on Win10 22h2
But I know this method is definitely not good enough, and there was a blue screen during uninstallation
I want to know if there are any good brothers who have tested MmGetVirtualForPhysical on Win11 and if there are any issues
Or has anyone tried other methods to obtain a virtual address

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

1 participant