From aldeid
Jump to navigation Jump to search


The ZwUnmapViewOfSection routine unmaps a view of a section from the virtual address space of a subject process.


NTSTATUS ZwUnmapViewOfSection(
  _In_      HANDLE ProcessHandle,
  _In_opt_  PVOID  BaseAddress


ProcessHandle [in]
Handle to a process object that was previously passed to ZwMapViewOfSection.
BaseAddress [in, optional]
Pointer to the base virtual address of the view to unmap. This value can be any virtual address within the view.

Return value

ZwUnmapViewOfSection returns an NTSTATUS value. Possible return values include:

Return code Description
STATUS_SUCCESS The routine successfully performed the requested operation.
STATUS_ACCESS_DENIED The caller does not have access rights to the process object or to the base virtual address of the view.