[VB6] AHM! (Another Hashing Method)

[Joe]

From disassembling stealthbot, strings looked like

00 XX 00 XX 00 XX 00 XX 00 XX

Where XX is whatever character goes there, thats unicode right?

[MyndFyre]

Code Select Expand


.text:004015F0 aHelloWorld:                            ; DATA XREF: .text:004019A5o
.text:004015F0                 unicode 0, <Hello, world!>,0

Huh, my mistake.  But no VB6 program comes with unicows.dll (the MS Unicode Extensions DLL for Win9x).  The VB runtime must do all the marshalling then.

That almost suprises me.