Hey, I’m trying to debug a service backed by some executable run .process /r /p <process_eprocess>
now when I list loaded modules it displays a few modules like wow64cpu / wow64win / wow64 / ntdll , and the kernel modules. It’s a 32bit applications as you might have guessed , how can I list the actual um dlls loaded by that service ?</process_eprocess>
1 Like
Using a 32-bit user mode debugger is really going to be your best option.