The GetImageUnusedHeaderBytes function returns the offset and size of the part of the PE header that is currently unused.
DWORD GetImageUnusedHeaderBytes(
| IN PLOADED_IMAGE LoadedImage, | |
| OUT LPDWORD SizeUnusedHeaderBytes | |
| ); |
Parameters
LoadedImage
A pointer to a LOADED_IMAGE structure that is returned from a call to MapAndLoad or LoadImage.
SizeUnusedHeaderBytes
This receives the size of the image's unused header bytes.
Return Values
If the function succeeds, the return value is the offset from the base address of the first unused header byte.
If the function fails, then the return value is zero. To retrieve extended error information, call GetLastError.
Remarks
The GetImageUnusedHeaderBytes function returns the offset and size of the part of the PE header that is currently unused.