Class ModuleInfo

Contains all information relating to a specific module.

Inheritance

System.Object

ModuleInfo

Inherited Members

System.Object.Equals(System.Object)

System.Object.Equals(System.Object, System.Object)

System.Object.ReferenceEquals(System.Object, System.Object)

System.Object.GetHashCode()

System.Object.GetType()

System.Object.MemberwiseClone()

Namespace: ERC

Assembly: ERC.Net.dll

Syntax

public class ModuleInfo

Fields

ModuleFailed

An errpr was encountered whilst processing the module.

Declaration

public bool ModuleFailed

Field Value

Type	Description
System.Boolean

Properties

ModuleASLR

Module supports ASLR.

Declaration

public bool ModuleASLR { get; }

Property Value

Type	Description
System.Boolean

ModuleBase

Module base pointer.

Declaration

public IntPtr ModuleBase { get; }

Property Value

Type	Description
System.IntPtr

ModuleCore

Associated ErcCore object.

Declaration

public ErcCore ModuleCore { get; }

Property Value

Type	Description
ErcCore

ModuleEntry

Module entry point.

Declaration

public IntPtr ModuleEntry { get; }

Property Value

Type	Description
System.IntPtr

ModuleImageBase

Module image base.

Declaration

public IntPtr ModuleImageBase { get; }

Property Value

Type	Description
System.IntPtr

ModuleMachineType

Machine type of the module.

Declaration

public MachineType ModuleMachineType { get; }

Property Value

Type	Description
MachineType

ModuleName

Module name.

Declaration

public string ModuleName { get; }

Property Value

Type	Description
System.String

ModuleNXCompat

Module is DEP enabled.

Declaration

public bool ModuleNXCompat { get; }

Property Value

Type	Description
System.Boolean

ModuleOsDll

Module is an OS dll.

Declaration

public bool ModuleOsDll { get; }

Property Value

Type	Description
System.Boolean

ModulePath

Module path.

Declaration

public string ModulePath { get; }

Property Value

Type	Description
System.String

ModuleProcess

Process where the module is loaded.

Declaration

public Process ModuleProcess { get; }

Property Value

Type	Description
System.Diagnostics.Process

ModuleProduct

Module product.

Declaration

public string ModuleProduct { get; }

Property Value

Type	Description
System.String

ModuleProtection

Memory protection of this module.

Declaration

public uint ModuleProtection { get; }

Property Value

Type	Description
System.UInt32

ModuleRebase

Module can be rebased.

Declaration

public bool ModuleRebase { get; }

Property Value

Type	Description
System.Boolean

ModuleSafeSEH

Module supports SafeSEH

Declaration

public bool ModuleSafeSEH { get; }

Property Value

Type	Description
System.Boolean

ModuleSize

Module size.

Declaration

public int ModuleSize { get; }

Property Value

Type	Description
System.Int32

ModuleVersion

Module version.

Declaration

public string ModuleVersion { get; }

Property Value

Type	Description
System.String

Methods

SearchModule(Byte[])

Searches for a string of bytes within a specific module. Takes a byte array to be searched for.

Declaration

public ErcResult<List<IntPtr>> SearchModule(byte[] searchBytes)

Parameters

Type	Name	Description
System.Byte[]	searchBytes	A byte array to be searched for

Returns

Type	Description
ErcResult<System.Collections.Generic.List<System.IntPtr>>	Returns ERC_Result of pointers to the search term

ToString()

Override of the ToString method. Provides a data associated with the module.

Declaration

public override string ToString()

Returns

Type	Description
System.String	A string containing relevant data.

Overrides

System.Object.ToString()