Cross Reference: /vbox/src/VBox/HostDrivers/Support/win/SUPHardenedVerifyProcess-win.cpp

Lines Matching refs:MemInfo
1789         MEMORY_BASIC_INFORMATION    MemInfo  = { 0, 0, 0, 0, 0, 0, 0 };
1793                                                   &MemInfo,
1794                                                   sizeof(MemInfo),
1807         if (   MemInfo.Type == SEC_IMAGE
1808             || MemInfo.Type == SEC_PROTECTED_IMAGE
1809             || MemInfo.Type == (SEC_IMAGE | SEC_PROTECTED_IMAGE))
1822             SUP_DPRINTF((MemInfo.AllocationBase == MemInfo.BaseAddress
1825                          MemInfo.BaseAddress, (uintptr_t)MemInfo.BaseAddress + MemInfo.RegionSize - 1, MemInfo.Protect,
1826                          MemInfo.AllocationProtect, MemInfo.Type, pThis->aImages[iImg].Name.UniStr.Buffer));
1834                     int rc = supHardNtVpAddRegion(pThis, &pThis->aImages[iSearch], &MemInfo);
1840                 else if (pThis->aImages[iSearch].uImageBase == (uintptr_t)MemInfo.AllocationBase)
1846                 int rc = supHardNtVpNewImage(pThis, &pThis->aImages[iImg], &MemInfo);
1869         else if (      (MemInfo.Protect & (PAGE_EXECUTE | PAGE_EXECUTE_READ | PAGE_EXECUTE_READWRITE | PAGE_EXECUTE_WRITECOPY))
1872                  && (uintptr_t)MemInfo.BaseAddress >= UINT32_C(0x78000000)
1873                  /* && MemInfo.BaseAddress == pPeb->ReadOnlySharedMemoryBase */
1877             SUP_DPRINTF(("  %p-%p %#06x/%#06x %#09x  XP CSRSS read-only region\n", MemInfo.BaseAddress,
1878                          (uintptr_t)MemInfo.BaseAddress - MemInfo.RegionSize - 1, MemInfo.Protect,
1879                          MemInfo.AllocationProtect, MemInfo.Type));
1885         else if (MemInfo.Protect & (PAGE_EXECUTE | PAGE_EXECUTE_READ | PAGE_EXECUTE_READWRITE | PAGE_EXECUTE_WRITECOPY))
1887             SUP_DPRINTF((MemInfo.AllocationBase == MemInfo.BaseAddress
1890                          MemInfo.BaseAddress, (uintptr_t)MemInfo.BaseAddress - MemInfo.RegionSize - 1,
1891                          MemInfo.Protect, MemInfo.AllocationProtect, MemInfo.Type));
1898                 if (MemInfo.Type == MEM_PRIVATE)
1900                     if (!supHardNtVpFreeOrReplacePrivateExecMemory(pThis, hProcess, &MemInfo))
1906                 else if (MemInfo.Type == MEM_MAPPED)
1909                                  uPtrWhere, MemInfo.AllocationBase, MemInfo.BaseAddress, MemInfo.RegionSize));
1910                     rcNt = NtUnmapViewOfSection(hProcess, MemInfo.AllocationBase);
1913                         PVOID  pvCopy = MemInfo.BaseAddress;
1914                         SIZE_T cbCopy = MemInfo.RegionSize;
1921                                                 MemInfo.AllocationBase, MemInfo.BaseAddress, MemInfo.RegionSize, rcNt, rcNt2);
1927                                         MemInfo.Type, MemInfo.AllocationBase, MemInfo.BaseAddress, MemInfo.RegionSize);
1934                                     uPtrWhere, MemInfo.BaseAddress, MemInfo.RegionSize, MemInfo.Type, MemInfo.Protect,
1935                                     MemInfo.State, MemInfo.AllocationBase, MemInfo.AllocationProtect);
1945             SUP_DPRINTF((MemInfo.AllocationBase == MemInfo.BaseAddress
1948                          MemInfo.BaseAddress, (uintptr_t)MemInfo.BaseAddress - MemInfo.RegionSize - 1,
1949                          MemInfo.Protect, MemInfo.AllocationProtect, MemInfo.Type));
1954         cbAdvance = MemInfo.RegionSize;
1958         uPtrWhere += MemInfo.RegionSize;