NTSTATUS
ZwUnmapViewOfSection(
IN HANDLE ProcessHandle,
IN PVOID BaseAddress
);
ZwUnmapViewOfSection unmaps a view of a section from the virtual address space of a subject process.
Parameters
ProcessHandle
Specifies an open handle of the process that was passed in a preceding call to ZwMapViewOfSection.
BaseAddress
Points to the base virtual address of the view that is to be unmapped. This value can be any virtual address within the view.
Return Value
ZwUnmapViewOfSection can return one of the following values:
STATUS_NORMAL
STATUS_INVALID_PARAMETER
STATUS_NO_ACCESS
Comments
The entire view of the section specified by the BaseAddress parameter is unmapped from the virtual address space of the specified process.
The virtual address region occupied by the view is no longer reserved and is available to map other views or private pages. If the view was also the last reference to the underlying section, then all committed pages in the section are decommitted and the section is deleted.
Callers of ZwUnmapViewOfSection must be running at IRQL PASSIVE_LEVEL.
See Also