x64遍历VAD

#include <ntifs.h>
typedef struct _MMADDRESS_NODE
{
   
	ULONG64 u1;
	struct _MMADDRESS_NODE* LeftChild;
	struct _MMADDRESS_NODE* RightChild;
	ULONG64 StartingVpn;
	ULONG64 EndingVpn;
}MMADDRESS_NODE, *PMMADDRESS_NODE;
typedef struct _EX_FAST_REF
{
   
	union
	{
   
		PVOID Object;
		ULONG_PTR RefCnt : 3;
		ULONG_PTR Value;
	};
} EX_FAST_REF, *PEX_FAST_REF;
struct _SEGMENT
{
   
	struct _CONTROL_AREA* ControlArea; 
	ULONG TotalNumberOfPtes;
	ULONG SegmentFlags;
	ULONG64 NumberOfCommittedPages;
	ULONG64 SizeOfSegment; 
	union
	{
   
		struct _MMEXTEND_INFO* ExtendInfo;  
		void* BasedAddress; 
	};
	ULONG64 SegmentLock; 
	ULONG64 u1; 
	ULONG64 u2; 
	struct _MMPTE* PrototypePte; 
	ULONGLONG ThePtes[0x1]; 
};
//控制区
struct _CONTROL_AREA
{
   
	struct _SEGMENT* Segment;
	struct _LIST_ENTRY DereferenceList;
	unsigned __int64 NumberOfSectionReferences;
	unsigned __int64 NumberOfPfnReferences;
	unsigned __int64 NumberOfMappedViews;
	unsigned __int64 NumberOfUserReferences;
	ULONG  u; 
	ULONG FlushInProgressCount; 
	struct _EX_FAST_REF FilePointer; 
	
	/*ULONG ControlAreaLock;
	ULONG ModifiedWriteCount;
	ULONG StartingFrame;
	ULONG64 WaitingForD