GetImageUnusedHeaderBytes

The GetImageUnusedHeaderBytes function returns the offset and size of the part of the PE header that is currently unused.

DWORD GetImageUnusedHeaderBytes(
  PLOADED_IMAGE LoadedImage,  
  PDWORD SizeUnusedHeaderBytes  
);

Parameters

LoadedImage

[in] Pointer to a LOADED_IMAGE structure that is returned from a call to MapAndLoad or LoadImage.

SizeUnusedHeaderBytes

[out] Pointer to a variable to receive the size, in bytes, of the part of the image's header which is unused.

Return Values

If the function succeeds, the return value is the offset from the base address of the first unused header byte.

If the function fails, the return value is zero. To retrieve extended error information, call GetLastError.

Requirements

  Windows NT/2000: Requires Windows NT 4.0 or later.
  Windows 95/98: Requires Windows 95 or later. Available as a redistributable for Windows 95.
  Header: Declared in Imagehlp.h.
  Library: Use Imagehlp.lib.

See Also

Image Help Library Overview, ImageHlp Functions, LOADED_IMAGE