ZwUnmapViewOfSection

NTSTATUS
    ZwUnmapViewOfSection(
        IN HANDLE  ProcessHandle,
        IN PVOID  BaseAddress
        );

ZwUnmapViewOfSection unmaps a view of a section from the virtual address space of a subject process.

Parameters

ProcessHandle

Specifies an open handle of the process that was passed in a preceding call to ZwMapViewOfSection.

BaseAddress

Points to the base virtual address of the view that is to be unmapped. This value can be any virtual address within the view.

Return Value

ZwUnmapViewOfSection can return one of the following values:

STATUS_NORMAL
STATUS_INVALID_PARAMETER
STATUS_NO_ACCESS

Comments

The entire view of the section specified by the BaseAddress parameter is unmapped from the virtual address space of the specified process.

The virtual address region occupied by the view is no longer reserved and is available to map other views or private pages. If the view was also the last reference to the underlying section, then all committed pages in the section are decommitted and the section is deleted.

Callers of ZwUnmapViewOfSection must be running at IRQL PASSIVE_LEVEL.

See Also

ZwMapViewOfSection, ZwOpenSection