public static IMAGE_OPTIONAL_HEADER64 GetOptionalHeader64(Process process, IntPtr baseAddress, IMAGE_DOS_HEADER dosHeader)
{
var optionalHeaderOffset = dosHeader.e_lfanew + Marshal.SizeOf(typeof(PeParser.IMAGE_FILE_HEADER));
return(PeParser.Deserialize <PeParser.IMAGE_OPTIONAL_HEADER64>(process, baseAddress + optionalHeaderOffset));
}
public static IMAGE_OPTIONAL_HEADER32 GetOptionalHeader32(byte[] dll, IMAGE_DOS_HEADER dosHeader)
{
var optionalHeaderOffset = dosHeader.e_lfanew + Marshal.SizeOf(typeof(PeParser.IMAGE_FILE_HEADER));
return(PeParser.Deserialize <PeParser.IMAGE_OPTIONAL_HEADER32>(dll, optionalHeaderOffset));
}
public static IMAGE_FILE_HEADER GetPeHeader(byte[] dll, IMAGE_DOS_HEADER dosHeader)
{
return(PeParser.Deserialize <PeParser.IMAGE_FILE_HEADER>(dll, dosHeader.e_lfanew));
}
public static IMAGE_FILE_HEADER GetPeHeader(Process process, IntPtr baseAddress, IMAGE_DOS_HEADER dosHeader)
{
return(PeParser.Deserialize <PeParser.IMAGE_FILE_HEADER>(process, baseAddress + dosHeader.e_lfanew));
}
public static IMAGE_DOS_HEADER GetDosHeader(byte[] dll)
{
return(PeParser.Deserialize <IMAGE_DOS_HEADER>(dll, 0));
}