On Tue Nov 25 16:38:10 2025 +0000, Paul Gofman wrote:
AFAIU this is not some specific corner case but the thing is not going to work at all on old wow64? If that is the case I think it is a bit premature to leave internal functionality broken on old wow. It should probably be possible to detect that in the implementation and get loader data from old wow peb?
what's not supported on the old wow is getting from a (caller) 64bit process the 64bit modules out of a 32bit child
(EnumProcess return the module of same bitness as caller)
but getting the 32bit modules (in the same configuration) (with EnumProcessEx + 32bit flag) does properly work and should be supported in toolhelp
kernelbase APIs (EnumProcessModulesEx), dbghelp (EnumLoadedModules) do support this properly
didn't fully review the update, but AFAICS this MR skips the configuration {64bit caller => 32bit target, listing 32bit modules}, while it shouldn't (and it should work)