MemInfo.exe -a Access violation

[kouzhudong]

(62ac.3cd0): Access violation - code c0000005 (!!! second chance !!!)
*** WARNING: Unable to verify checksum for D:\git\personal\zodiacon\WindowsInternals\x64\Debug\MemInfo.exe
MemInfo!PfiInitializePfnDatabase+0x29e:
00007ff602563c8e 48894808 mov qword ptr [rax+8],rcx ds:000001cbb7b54008=????????????????
0:000> kv

Child-SP RetAddr : Args to Child : Call Site

00 000000700b4ff560 00007ff602565441 : 00007ff602570658 00007ff60256ee40 000000700b4ff688 000000700b4ff6b0 : MemInfo!PfiInitializePfnDatabase+0x29e [D:\git\personal\zodiacon\WindowsInternals\MemInfo\MemInfo.cpp @ 223]
01 000000700b4ff850 00007ff602566479 : 0000071800000002 000001cbb45e6d80 0000000000000000 00007ff602567acd : MemInfo!main+0x401 [D:\git\personal\zodiacon\WindowsInternals\MemInfo\MemInfo.cpp @ 1024]
02 000000700b4ffc70 00007ff60256631e : 00007ff60256e000 00007ff60256e220 0000000000000000 0000000000000000 : MemInfo!invoke_main+0x39 [d:\A01_work\12\s\src\vctools\crt\vcstartup\src\startup\exe_common.inl @ 79]
03 000000700b4ffcc0 00007ff6025661de : 0000000000000000 0000000000000000 0000000000000000 0000000000000000 : MemInfo!__scrt_common_main_seh+0x12e [d:\A01_work\12\s\src\vctools\crt\vcstartup\src\startup\exe_common.inl @ 288]
04 000000700b4ffd30 00007ff60256650e : 0000000000000000 0000000000000000 0000000000000000 0000000000000000 : MemInfo!__scrt_common_main+0xe [d:\A01_work\12\s\src\vctools\crt\vcstartup\src\startup\exe_common.inl @ 331]
05 000000700b4ffd60 00007ff9ddcc7034 : 000000700b3db000 0000000000000000 0000000000000000 0000000000000000 : MemInfo!mainCRTStartup+0xe [d:\A01_work\12\s\src\vctools\crt\vcstartup\src\startup\exe_main.cpp @ 17]
06 000000700b4ffd90 00007ff9df9a2651 : 0000000000000000 0000000000000000 0000000000000000 0000000000000000 : KERNEL32!BaseThreadInitThunk+0x14
07 000000700b4ffdc0 0000000000000000 : 0000000000000000 0000000000000000 0000000000000000 0000000000000000 : ntdll!RtlUserThreadStart+0x21
0:000> dv
j = 0x0022f600ccefc36c PfnOffset = 0 BadPfn = 0 i = 0 SuperfetchInfo = struct _SUPERFETCH_INFORMATION Pfn1 = 0x000001cbb7b54000
BitMapBuffer = 0x000001cbb45f0370 PfnDbStart = 0x000001cbb46e2040
PfnCount = 0x22f600
Node = 0x000000700b4ff720 k = 0x22f6a1 ResultLength = 0 Status = 0n-858993460 0:000> dt Pfn1 Local var @ 0x700b4ff608 Type _MMPFN_IDENTITY* 0x000001cbb7b54000
+0x000 u1 : _MMPFN_IDENTITY::
+0x008 PageFrameIndex : ??
+0x010 u2 : _MMPFN_IDENTITY::
Memory read error 000001cbb7b54008
0:000> r
rax=000001cbb7b54000 rbx=0000000000000000 rcx=0022f600ccefc36c
rdx=00000000000117b0 rsi=00007ff6025736d8 rdi=00007ff6025736c8
rip=00007ff602563c8e rsp=000000700b4ff560 rbp=000000700b4ff580
r8=000001cbb45f0370 r9=00000000ffffffff r10=0000000000000000
r11=000000700b4ff101 r12=0000000000000000 r13=0000000000000000
r14=0000000000000000 r15=0000000000000000
iopl=0 nv up ei pl nz na pe nc
cs=0033 ss=002b ds=002b es=002b fs=0053 gs=002b efl=00010200
MemInfo!PfiInitializePfnDatabase+0x29e:
00007ff602563c8e 48894808 mov qword ptr [rax+8],rcx ds:000001cbb7b54008=????????????????
0:000> dq rax+8
000001cbb7b54008 ???????????????? ???????????????? 000001cbb7b54018 ???????????????? ????????????????
000001cbb7b54028 ???????????????? ???????????????? 000001cbb7b54038 ???????????????? ????????????????
000001cbb7b54048 ???????????????? ???????????????? 000001cbb7b54058 ???????????????? ????????????????
000001cbb7b54068 ???????????????? ???????????????? 000001cbb7b54078 ???????????????? ????????????????

[kouzhudong]

[greenozon]

was that fixed in last 2 years or... ?

[zodiacon]

Didn't get around to it...

[kouzhudong]

This is how I solved it.

C:\Users\Administrator>ver

Microsoft Windows [版本 10.0.26200.7171]

C:\Users\Administrator>

typedef struct _PF_MEMORY_RANGE_INFO_V2
{
    ULONG Version;
    ULONG Flags;
    ULONG RangeCount;
    PF_PHYSICAL_MEMORY_RANGE Ranges[ANYSIZE_ARRAY];
} PF_MEMORY_RANGE_INFO_V2, * PPF_MEMORY_RANGE_INFO_V2;

PPF_MEMORY_RANGE_INFO_V2 MemoryRanges;//PPF_MEMORY_RANGE_INFO

NTSTATUS PfiQueryMemoryRanges()
{
	SUPERFETCH_INFORMATION SuperfetchInfo = {};
	PF_MEMORY_RANGE_INFO_V2 MemoryRangeInfo = {};
	MemoryRangeInfo.Version = 2;

	PfiBuildSuperfetchInfo(&SuperfetchInfo, &MemoryRangeInfo, sizeof(MemoryRangeInfo), SuperfetchMemoryRangesQuery);// Build the Superfetch Information Buffer

	ULONG ResultLength = 0;
	NTSTATUS Status = NtQuerySystemInformation(SystemSuperfetchInformation, &SuperfetchInfo, sizeof(SuperfetchInfo), &ResultLength);// Query the Memory Ranges
	if (Status == STATUS_BUFFER_TOO_SMALL) {
		MemoryRanges = static_cast<PPF_MEMORY_RANGE_INFO_V2>(::HeapAlloc(GetProcessHeap(), HEAP_ZERO_MEMORY, ResultLength));// Reallocate memory
		if (!MemoryRanges) {
			return STATUS_INSUFFICIENT_RESOURCES;
		}

		MemoryRanges->Version = 2;

		PfiBuildSuperfetchInfo(&SuperfetchInfo, MemoryRanges, ResultLength, SuperfetchMemoryRangesQuery);// Rebuild the buffer

		Status = NtQuerySystemInformation(SystemSuperfetchInformation, &SuperfetchInfo, sizeof(SuperfetchInfo), &ResultLength);// Query memory information
		if (!NT_SUCCESS(Status)) {
			printf("Failure querying memory ranges!\n");
			return Status;
		}
	} else {
		MemoryRanges = &MemoryRangeInfo;// Use local buffer
	}

	return Status;
}