From aldeid
Jump to navigation Jump to search


NtUnmapViewOfSection and ZwUnmapViewOfSection are two versions of the same Windows Native System Services routine. The NtUnmapViewOfSection routine in the Windows kernel is not directly accessible to kernel-mode drivers. However, kernel-mode drivers can access this routine indirectly by calling the ZwUnmapViewOfSection routine. For more information, see ZwUnmapViewOfSection.