Last active
January 28, 2025 02:13
-
-
Save AlexeyTolstopyatov/6b5dd8165afd69fbce1040deb1636b75 to your computer and use it in GitHub Desktop.
The proposed VB5 table
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
' | |
' (C) Bilbo Backends 2024-2025 | |
' 15th section (as far as I know, ".text") | |
' stores Visual Basic 5.0 VM information. Nowdays 15th section stores Cor20 .NET data | |
' | |
Public Type VBRuntimeHead | |
PushStartOpcode As Integer 'push | |
PushStartAddress As Double 'offset of signature | |
CallStartOpcode As Integer 'jmp | |
CallStartAddress As Double ' offset to [EntryPoint] | |
End Type |
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment