MmUnmapViewInSystemSpace

NTSTATUS __stdcall MmUnmapViewInSystemSpace(VOID *MappedBase){
  _MMSESSION *v2; 
  _EPROCESS *Process; 

  if( MiGetSystemRegionType((UINT64)MappedBase) != 1 )
  {
    v2 = &Session;
LABEL_3:
    MiRemoveFromSystemSpace(v2, MappedBase, 1ui64);
    return 0;
  }
  Process = KeGetCurrentThread()->ApcState.Process;
  if( (Process->Flags & 0x10000) != 0 )
  {
    v2 = (_MMSESSION *)((char *)Process->Session + 192);
    goto LABEL_3;
  }
  return -1073741799;
}

Referenced by: