ZwUnmapViewOfSection

From aldeid
Jump to navigation Jump to search

Description

The ZwUnmapViewOfSection routine unmaps a view of a section from the virtual address space of a subject process.

Syntax

NTSTATUS ZwUnmapViewOfSection(
  _In_      HANDLE ProcessHandle,
  _In_opt_  PVOID  BaseAddress
);

Parameters

ProcessHandle [in]
Handle to a process object that was previously passed to ZwMapViewOfSection.
BaseAddress [in, optional]
Pointer to the base virtual address of the view to unmap. This value can be any virtual address within the view.

Return value

ZwUnmapViewOfSection returns an NTSTATUS value. Possible return values include:

Return code Description
STATUS_SUCCESS The routine successfully performed the requested operation.
STATUS_ACCESS_DENIED The caller does not have access rights to the process object or to the base virtual address of the view.