Monday, 1 June 2020

What is a ProcessModule? Ans: An Abstraction of a DLL or EXE file.

.NET uses the term "ProcessModule" to refer to a DLL or EXE file.  

Noting that this "term" is represented by a corresponding "type" we drop the speech marks henceforth.

ProcessModule 
- is defined in System.Diagnostics
- implements IDisposable interface (which means it can be disposed using Dispose within a try-catch or implicitly destroyed within a using block (using in C#, Using in VB.NET)).
- Has interesting properties including BaseAddress which returns an IntPtr (representing the memory address where the pointer was loaded).

IntPtr is defined in System.Runtime dll.

No comments: