Closed powerbf closed 5 years ago
I think it is better to directly reject NE executables in ExeBinaryLoader::canLoad
, to give other plugins a chance to read the file. I will do a more detailed review tomorrow.
Agreed. This check should be in canLoad(). I've moved it.
Replaced by pull request #150
Look for NE header instead of relying on reloc table offset which can throw up a false positive