investigate-module

Unknown module investigation is performed by orchestrating automated discovery of strings, RTTI classes, function call graphs, and GUI mapping. This end-to-end process coordinates reconnaissance, cross-reference analysis, and structure mapping to produce a coherent module overview.

Mapping RTTI classes and vtables is achieved through cross-cutting analysis that identifies runtime type information and cross-references. The process annotates discovered structures and functions with bookmarks, presenting findings in a GUI for visualization.

String discovery and function cross-reference analysis are executed through coordinated reconnaissance of the module footprint, imports, exports, and code layout. The investigation guides automated discovery batches and annotates findings with structured bookmarks.

GUI-driven visualization presents module call graphs, vtable analysis, and live structure mappings directly within the ARC Probe interface. Findings from cross-reference analysis and RTTI class discovery are displayed with comprehensive documentation.

No external dependencies are required to run end-to-end module reconnaissance. The investigation operates using ARC Probe capabilities to coordinate footprint discovery, RTTI mapping, and cross-reference analysis on an unknown module loaded in a target process.

A structured report is generated by running the end-to-end investigation, which orchestrates reconnaissance, RTTI discovery, and cross-reference analysis through structured batches. The resulting module overview and mappings are documented comprehensively.