Skip to content

Instantly share code, notes, and snippets.

@AlexeyTolstopyatov
Last active January 28, 2025 02:13
Show Gist options
  • Save AlexeyTolstopyatov/6b5dd8165afd69fbce1040deb1636b75 to your computer and use it in GitHub Desktop.
Save AlexeyTolstopyatov/6b5dd8165afd69fbce1040deb1636b75 to your computer and use it in GitHub Desktop.
The proposed VB5 table
'
' (C) Bilbo Backends 2024-2025
' 15th section (as far as I know, ".text")
' stores Visual Basic 5.0 VM information. Nowdays 15th section stores Cor20 .NET data
'
Public Type VBRuntimeHead
PushStartOpcode As Integer 'push
PushStartAddress As Double 'offset of signature
CallStartOpcode As Integer 'jmp
CallStartAddress As Double ' offset to [EntryPoint]
End Type
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment