Module

record

record Module

Describes a module loaded in the attached process.

A module exposes its base address and mapped size for bounded memory discovery.

Examples

Discover the main executable module

let executable: Module = await process.mainModule()

Member	Description	Available through
address	Returns the module base address.
size	Returns the mapped module size.

Member	Description	Available through
fileVersion	Reads the file identity from a Windows PE version resource.
path	Returns the module's host-provided filesystem path.
peExport	Resolves a named function exported by a Windows PE module.
pointerSize	Determines the pointer width of a Windows PE module.
productVersion	Reads the product identity from a Windows PE version resource.
readRelative32	Reads a 32-bit relative address at an offset from this module.
scan	Scans a module for a signature.
scanAny	Scans the module for the first of several signatures.
scanRelative32Target	Scans for a signature whose signed relative 32-bit operand resolves to a particular address.
versionInfo	Reads both fixed numeric versions from a Windows PE version resource.