#include <lixmm.h>

Data Fields
LIST_ENTRY	Link
	Linked list entry. More...

QWORD	Gva
	The guest virtual address of the vm_area_struct this structure is based on. More...

QWORD	Start
	Start of the memory described by the VMA. More...

QWORD	End
	End of the memory described by the VMA. More...

QWORD	File
	The Gva of the file this VMA maps to. Can be 0 which means this VMA is not a memory mapped file. More...

QWORD	Flags
	Flags for the VMA. More...

LIX_TASK_OBJECT *	Process
	Process owning the VMA. More...

void *	Hook
	The EPT hook placed on the VMA when it is being protected. More...

Detailed Description

Describes one VMA structure.

Definition at line 14 of file lixmm.h.

Field Documentation

◆ End

QWORD _LIX_VMA::End

End of the memory described by the VMA.

Definition at line 20 of file lixmm.h.

Referenced by IntExceptGetVictimEpt(), IntLixMmFindVmaRange(), IntLixMmListVmasInternal(), IntLixMmPopulateVmasInternal(), IntLixStackDumpUmStackTrace(), IntLixVmaAdjustInternal(), IntLixVmaChangeProtection(), IntLixVmaExpandDownwards(), and IntLixVmaHandlePageExecution().

◆ File

QWORD _LIX_VMA::File

The Gva of the file this VMA maps to. Can be 0 which means this VMA is not a memory mapped file.

Definition at line 23 of file lixmm.h.

Referenced by IntLixCredAnalyzeStack(), IntLixMmListVmasInternal(), IntLixMmPopulateVmasInternal(), and IntLixStackDumpUmStackTrace().

◆ Flags

QWORD _LIX_VMA::Flags

Flags for the VMA.

Definition at line 25 of file lixmm.h.

Referenced by IntLixMmListVmasInternal(), IntLixMmPopulateVmasInternal(), IntLixStackDumpUmStackTrace(), IntLixVmaAdjustInternal(), IntLixVmaChangeProtection(), IntLixVmaExpandDownwards(), and IntLixVmaHandlePageExecution().

◆ Gva

QWORD _LIX_VMA::Gva

The guest virtual address of the vm_area_struct this structure is based on.

Definition at line 17 of file lixmm.h.

Referenced by IntLixMmListVmasInternal(), IntLixMmPopulateVmasInternal(), IntLixVmaAdjustInternal(), IntLixVmaChangeProtection(), and IntLixVmaExpandDownwards().

◆ Hook

void* _LIX_VMA::Hook

The EPT hook placed on the VMA when it is being protected.

Definition at line 29 of file lixmm.h.

Referenced by IntLixMmListVmasInternal().

◆ Link

LIST_ENTRY _LIX_VMA::Link

Linked list entry.

Definition at line 16 of file lixmm.h.

Referenced by IntLixVmaCreate().

◆ Process

LIX_TASK_OBJECT* _LIX_VMA::Process

Process owning the VMA.

Definition at line 27 of file lixmm.h.

Referenced by IntLixVmaHandlePageExecution().

◆ Start

QWORD _LIX_VMA::Start

Start of the memory described by the VMA.

Definition at line 19 of file lixmm.h.