1.4.8 Sections and Views

InitializeObjectAttributes

Sets up a parameter of type OBJECT_ATTRIBUTES for a subsequent call to a ZwCreateXxx or ZwOpenXxx routine.

ZwOpenSection

Obtains a handle for an existing section, provided that the requested access can be granted.

ZwMapViewOfSection

Maps a view of an open section into the virtual address space of a given process. Returns an offset into the section (base of the mapped view) and the size mapped.

ZwUnMapViewOfSection

Releases a mapped view in the virtual address space of the given process.