I am looking to get the PE header of another process that is already running

The way I see it I have two options:
1) Map the file to my process address space and get the header using the base address of that mapping
2) Create a thread in the remote process to get the header using the remote process image

Neither is that great a solution so if anyone knows a better way to do this let me know

TIA

Disregard this, as me and telos are already in the address space of the remote process as we are injecting a dll. I don't think he knew that for some reason??

[quote author=Telos link=board=30;threadid=5269;start=0#msg44023 date=1076683513]
Neither is that great a solution so if anyone knows a better way to do this let me know
[/quote]

ReadProcessMemory comes to mind.