[gigajew]

Read and write extra data (EoF) of a PE file.

Methods:
public static void SetExtraData(String fileName, Byte[] extraData)
public static Byte[] GetExtraData(String fileName)
public static Int64 GetSizeOfPE(String fileName)

[Ninja]

You can change:

Code

if (information.Exists)
{
    //few lines of code here
}
return -1;

To:

Code

if(!information.Exists)
    return -1
//few lines of code here

Since there is no else statement anyways, and so all the code inside will not be indented anymore. This just makes it a bit nicer to read.

[gigajew]

Yeah that's good advice thanks. Currently working on UDP chat with smileys. Then possibly I'll take on re-creating bahnahnahs netcore project.

[HFDone]

the sizeofoptionalheader is not always 0xE0 its not gonna work with 64bit app.

[gigajew]

the sizeofoptionalheader is not always 0xE0 its not gonna work with 64bit app.

It reads numberofsections and sizeofheader, adds sizeofheader and raw size of each section to calculate the size. Looking at a 64-bit assembly and a 32-bit assembly in CFF explorer the math seems to add up.

[HFDone]

It reads numberofsections and sizeofheader, adds sizeofheader and raw size of each section to calculate the size. Looking at a 64-bit assembly and a 32-bit assembly in CFF explorer the math seems to add up.

stream.Seek((e_lfanew + 0xf8 + (i * 40)) + 0x10, SeekOrigin.Begin);

[gigajew]

stream.Seek((e_lfanew + 0xf8 + (i * 40)) + 0x10, SeekOrigin.Begin);

Ah thanks for the input, I'll change it once i get on my pc