ntldd

ntldd copied to clipboard

Incorrect PE bitness detection.

2

You should not be comparing the machine type with IMAGE_FILE_MACHINE_I386 to find out if it is 32 or 64 bit, you should check the Magic member of IMAGE_OPTIONAL_HEADER. The current...

sredna

Get rid of imagehlp.dll?

1

I wonder if it is possible to not depend on imagehlp.dll to make it truly portable?

roytam1

ntldd can only show files which is same architecture as first file in multiple mode

1

for example, `ntldd mydll_x86.dll mydll_x64.dll mydll2_x64.dll` can only show mydll_x86.dll and mydll_x64.dll & mydll2_x64.dll are empty.

roytam1