Getting remote PE header

[Telos]

I am looking to get the PE header of another process that is already running

The way I see it I have two options:
1) Map the file to my process address space and get the header using the base address of that mapping
2) Create a thread in the remote process to get the header using the remote process image

Neither is that great a solution so if anyone knows a better way to do this let me know

TIA

[TheMinistered]

Disregard this, as me and telos are already in the address space of the remote process as we are injecting a dll.   I don't think he knew that for some reason??

[Adron]

Neither is that great a solution so if anyone knows a better way to do this let me know

ReadProcessMemory comes to mind.