Struct Module

pub struct Module { /* private fields */ }

This structure represents a Windows-specific module

Implementations

impl Module

pub fn handle(&self) -> *const c_void

Return the HMODULE handle as an opaque pointer.

Return a nullptr if the function fails or if the handler can’t be found

pub fn dlsym(&self, name: String) -> *const c_void

Resolve the symbol with the given name for the current module

pub fn parse_from_path(&self) -> Option<Binary>

Parse the PE module from its path on the filesystem

pub fn parse_from_path_with_config( &self, config: &ParserConfig, ) -> Option<Binary>

Parse the PE module from its path on the filesystem and given the parser configuration

pub fn parse_from_memory(&self) -> Option<Binary>

Parse the PE module from memory

pub fn parse_from_memory_with_config( &self, config: &ParserConfig, ) -> Option<Binary>

Parse the PE module from memory with the given configuration

Trait Implementations

impl Module for Module

fn name(&self) -> String

Name of the module (e.g. libc.so.6, kernel32.dll, libsystem_c.dylib)

fn path(&self) -> String

Absolute path to the module file

fn imagebase(&self) -> u64

Base address where the module is loaded in memory

fn size(&self) -> u64

Virtual size of the current module

fn end(&self) -> u64

End address of the module

fn contains(&self, addr: u64) -> bool

Check if the current module contains the given address

fn dump(&self) -> Vec<u8>

Return the content of the module as it is currently mapped in memory.

fn dump_to_file<P: AsRef<Path>>(&self, path: P) -> Vec<u8>

Same as Module::dump but also write the content into the file located at path.