About ept_pt_entry ->all c000005

[fgvcbv]

The question that the brother below asked me
The fundamental reason for the occurrence of c000005 exception in ept_pt_entry ->all is that the table is empty
As for why the table is empty
It was the previous layer of MmGetVirtualForPhysical that returned null, which does happen on win 10 22h2. A slightly lower version like 1909 can be retrieved normally
I tried using MmMapIoSpace to map a virtual address and it did run on Win10 22h2
But I know this method is definitely not good enough, and there was a blue screen during uninstallation
I want to know if there are any good brothers who have tested MmGetVirtualForPhysical on Win11 and if there are any issues
Or has anyone tried other methods to obtain a virtual address

[hhuiwang]

+1