Skip to content

x86 folder inside x64 distribution/installation #2347

Discussion options

You must be logged in to vote

The Native API doesn't natively support the WoW64 (Windows 32-bit on Windows 64-bit) subsystem because of differences in the architecture and memory addressing between 32-bit and 64-bit.

A large amount of structures and system objects only exist in user mode where the WoW64 subsystem has a thunking layer for emulating 32-bit system objects on 64bit, such as the Thread Environment Block (TEB) and the Process Environment Block (PEB) while also intercepting 32-bit functions to convert objects/data from 32-bit to 64-bit before switching to long mode (native 64-bit) to continue execution.

It's easier to query 32-bit objects from 32-bit processes by compiling the exact same 64-bit code for 32-b…

Replies: 1 comment

Comment options

You must be logged in to vote
0 replies
Answer selected by Vasilich
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
2 participants