Yuxuan Shui (@yshui) commented about dlls/kernel32/toolhelp.c:
&entry32, sizeof(entry32), NULL ))break;curr32 = (PLIST_ENTRY32)(DWORD_PTR)entry32.InLoadOrderLinks.Flink;ldr_data_table_entry_32to64(out_entry, &entry32);if (!fetch_string( hProcess, &out_entry->BaseDllName )) continue;if (!fetch_string( hProcess, &out_entry->FullDllName )){HeapFree( GetProcessHeap(), 0, out_entry->BaseDllName.Buffer );continue;}/* rewrite path in system32 into syswow64 for 32bit modules */full_dll_name_len = out_entry->FullDllName.Length / sizeof(WCHAR);if (full_dll_name_len >= system32_len &&CompareStringW( LOCALE_INVARIANT, LINGUISTIC_IGNORECASE,
Should probably be `NORM_IGNORECASE`, since that seems to be what is normally used.