Struct Module 

pub struct Module<'a> { /* private fields */ }

immutable reference to a loaded module

Implementations

impl<'a> Module<'a>

pub fn base(&self) -> usize

get module base address

pub fn size(&self) -> usize

get module size in bytes

pub fn entry_point(&self) -> usize

get entry point address (may be 0 if no entry point)

pub fn full_path(&self) -> String

get full path to module

pub fn name(&self) -> String

get module filename only (e.g., “ntdll.dll”)

pub fn name_lowercase(&self) -> String

get name as lowercase for comparison

pub fn contains(&self, address: usize) -> bool

check if address falls within this module

pub fn matches_name(&self, name: &str) -> bool

check if module name matches (case-insensitive)

pub fn as_ldr_entry(&self) -> &LdrDataTableEntry

get raw LDR entry reference

pub fn dos_header(&self) -> Result<&DosHeader>

get DOS header

pub fn nt_headers(&self) -> Result<NtHeaders>

get NT headers

pub fn rva_to_va(&self, rva: u32) -> usize

convert RVA to absolute address

pub fn va_to_rva(&self, va: usize) -> Option<u32>

convert absolute address to RVA

pub fn get_export(&self, name: &str) -> Result<usize>

get export by name

pub fn get_export_by_ordinal(&self, ordinal: u16) -> Result<usize>

get export by ordinal