ntldd icon indicating copy to clipboard operation
ntldd copied to clipboard
verified publisher icon LRN

Incorrect PE bitness detection.

Open sredna opened this issue 3 years ago • 2 comments

You should not be comparing the machine type with IMAGE_FILE_MACHINE_I386 to find out if it is 32 or 64 bit, you should check the Magic member of IMAGE_OPTIONAL_HEADER. The current code would fail on 32-bit ARM files and old rare stuff like Alpha and Power PC.

sredna avatar Feb 26 '22 01:02 sredna

I'm not actively maintaining this program, but i'll gladly merge a well-put pull request.

LRN avatar Feb 26 '22 08:02 LRN