windows - How to enum modules in a 64bit process from a 32bit WOW process -

To recover all the modules of the 64 bit process in the 32bit wow process in Windows, I need to be

Will be:

If this function is called from the 32-bit application that runs on WOW64, it can only calculate the 32-bit process module if the process is a 64-bit If this is the process, then this function fails and the last error code ERROR_PARTIAL_COPY (29 9) is.

Then in the form of EnumProcessModulesEx and CreateToolhelp32Snapshot.

Thank you.

Without going into Undocumented APIs, you can not do this generally, from 32-bit process to 64 -bit process' will not work due to address spacing due to memory reading.

, in which LIST_MODULES_32BIT and LIST_MODULES_64BIT filter flags, is to say:

This function is mainly used for 64- Bit applications if the function is called 32-bit application to run under WOW64, then the dwFilterFlag option is ignored and the function provides similar results in the form of anonym process module function.

You can do this by modifying the program for 64-bit, using the out-of-print 64-bit COM server (especially one), or a different process Talk to you. Alternatively, when your process starts relative to your targeted process, you can use WMI to get the module load event. See the event.

, a 32-bit exe can show you the module for both 32- and 64-bit processes, but it is actually a smoke and a mirror: 32-bit exe 64-bit self version Written on disk and executed on 64-bit machines.