Repository navigation
Expand file tree
/
Copy pathobfuscated_calls.h
More file actions
330 lines (314 loc) · 16.2 KB
/
Copy pathobfuscated_calls.h
File metadata and controls
330 lines (314 loc) · 16.2 KB
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
144
145
146
147
148
149
150
151
152
153
154
155
156
157
158
159
160
161
162
163
164
165
166
167
168
169
170
171
172
173
174
175
176
177
178
179
180
181
182
183
184
185
186
187
188
189
190
191
192
193
194
195
196
197
198
199
200
201
202
203
204
205
206
207
208
209
210
211
212
213
214
215
216
217
218
219
220
221
222
223
224
225
226
227
228
229
230
231
232
233
234
235
236
237
238
239
240
241
242
243
244
245
246
247
248
249
250
251
252
253
254
255
256
257
258
259
260
261
262
263
264
265
266
267
268
269
270
271
272
273
274
275
276
277
278
279
280
281
282
283
284
285
286
287
288
289
290
291
292
293
294
295
296
297
298
299
300
301
302
303
304
305
306
307
308
309
310
311
312
313
314
315
316
317
318
319
320
321
322
323
324
325
326
327
328
329
330
#ifndef obfuscated_calls_h__
#define obfuscated_calls_h__
#define obfuscated_NETAPI32DLL "OFUBQJ43/EMM"
#define obfuscated_NetUserGetInfo "OfuVtfsHfuJogp"
#define obfuscated_NetApiBufferFree "OfuBqjCvggfsGsff"
#define obfuscated_WINHTTPDLL "XJOIUUQ/EMM"
#define obfuscated_WinHttpGetIEProxyConfigForCurrentUser "XjoIuuqHfuJFQspyzDpogjhGpsDvssfouVtfs"
#define obfuscated_WinHttpReadData "XjoIuuqSfbeEbub"
#define obfuscated_WinHttpReceiveResponse "XjoIuuqSfdfjwfSftqpotf"
#define obfuscated_WinHttpSendRequest "XjoIuuqTfoeSfrvftu"
#define obfuscated_WinHttpQueryOption "XjoIuuqRvfszPqujpo"
#define obfuscated_WinHttpWriteData "XjoIuuqXsjufEbub"
#define obfuscated_WinHttpOpen "XjoIuuqPqfo"
#define obfuscated_WinHttpSetOption "XjoIuuqTfuPqujpo"
#define obfuscated_WinHttpAddRequestHeaders "XjoIuuqBeeSfrvftuIfbefst"
#define obfuscated_WinHttpGetProxyForUrl "XjoIuuqHfuQspyzGpsVsm"
#define obfuscated_WinHttpConnect "XjoIuuqDpoofdu"
#define obfuscated_WinHttpSetTimeouts "XjoIuuqTfuUjnfpvut"
#define obfuscated_WinHttpOpenRequest "XjoIuuqPqfoSfrvftu"
#define obfuscated_PSAPIDLL "QTBQJ/EMM"
#define obfuscated_GetModuleFileNameExA "HfuNpevmfGjmfObnfFyB"
#define obfuscated_GetDeviceDriverBaseNameW "HfuEfwjdfEsjwfsCbtfObnfX"
#define obfuscated_EnumDeviceDrivers "FovnEfwjdfEsjwfst"
#define obfuscated_GetModuleFileNameExW "HfuNpevmfGjmfObnfFyX"
#define obfuscated_EnumProcessModules "FovnQspdfttNpevmft"
#define obfuscated_SHLWAPIDLL "TIMXBQJ/EMM"
#define obfuscated_StrRChrA "TusSDisB"
#define obfuscated_wnsprintfW "xotqsjougX"
#define obfuscated_WINMMDLL "XJONN/EMM"
#define obfuscated_mixerSetControlDetails "njyfsTfuDpouspmEfubjmt"
#define obfuscated_mixerGetControlDetailsA "njyfsHfuDpouspmEfubjmtB"
#define obfuscated_mixerGetLineControlsA "njyfsHfuMjofDpouspmtB"
#define obfuscated_mixerGetLineInfoA "njyfsHfuMjofJogpB"
#define obfuscated_waveInClose "xbwfJoDmptf"
#define obfuscated_waveInReset "xbwfJoSftfu"
#define obfuscated_mixerClose "njyfsDmptf"
#define obfuscated_mixerGetDevCapsA "njyfsHfuEfwDbqtB"
#define obfuscated_mixerGetNumDevs "njyfsHfuOvnEfwt"
#define obfuscated_waveInOpen "xbwfJoPqfo"
#define obfuscated_mixerOpen "njyfsPqfo"
#define obfuscated_CRYPT32DLL "DSZQU43/EMM"
#define obfuscated_CertFreeCertificateContext "DfsuGsffDfsujgjdbufDpoufyu"
#define obfuscated_CryptUnprotectData "DszquVoqspufduEbub"
#define obfuscated_OLEACCDLL "PMFBDD/EMM"
#define obfuscated_AccessibleChildren "BddfttjcmfDijmesfo"
#define obfuscated_AccessibleObjectFromWindow "BddfttjcmfPckfduGspnXjoepx"
#define obfuscated_IMAGEHLPDLL "JNBHFIMQ/EMM"
#define obfuscated_MapAndLoad "NbqBoeMpbe"
#define obfuscated_UnMapAndLoad "VoNbqBoeMpbe"
#define obfuscated_VERSIONDLL "WFSTJPO/EMM"
#define obfuscated_VerQueryValueW "WfsRvfszWbmvfX"
#define obfuscated_GetFileVersionInfoSizeW "HfuGjmfWfstjpoJogpTj{fX"
#define obfuscated_GetFileVersionInfoW "HfuGjmfWfstjpoJogpX"
#define obfuscated_KERNEL32DLL "LFSOFM43/EMM"
#define obfuscated_CreateFileMappingA "DsfbufGjmfNbqqjohB"
#define obfuscated_UnmapViewOfFile "VonbqWjfxPgGjmf"
#define obfuscated_GetTickCount "HfuUjdlDpvou"
#define obfuscated_TerminateProcess "UfsnjobufQspdftt"
#define obfuscated_CreateFileW "DsfbufGjmfX"
#define obfuscated_GetFileSize "HfuGjmfTj{f"
#define obfuscated_OpenProcess "PqfoQspdftt"
#define obfuscated_GetCurrentProcessId "HfuDvssfouQspdfttJe"
#define obfuscated_FlushFileBuffers "GmvtiGjmfCvggfst"
#define obfuscated_GetSystemDirectoryA "HfuTztufnEjsfdupszB"
#define obfuscated_GetEnvironmentVariableW "HfuFowjsponfouWbsjbcmfX"
#define obfuscated_FindClose "GjoeDmptf"
#define obfuscated_FindNextFileW "GjoeOfyuGjmfX"
#define obfuscated_CopyFileW "DpqzGjmfX"
#define obfuscated_RemoveDirectoryW "SfnpwfEjsfdupszX"
#define obfuscated_FindFirstFileW "GjoeGjstuGjmfX"
#define obfuscated_CreateDirectoryW "DsfbufEjsfdupszX"
#define obfuscated_WriteFile "XsjufGjmf"
#define obfuscated_CreateFileA "DsfbufGjmfB"
#define obfuscated_ExitProcess "FyjuQspdftt"
#define obfuscated_GetDriveTypeW "HfuEsjwfUzqfX"
#define obfuscated_ReadFile "SfbeGjmf"
#define obfuscated_GetModuleFileNameA "HfuNpevmfGjmfObnfB"
#define obfuscated_LocalFree "MpdbmGsff"
#define obfuscated_LocalAlloc "MpdbmBmmpd"
#define obfuscated_GetLastError "HfuMbtuFssps"
#define obfuscated_Process32Next "Qspdftt43Ofyu"
#define obfuscated_Module32Next "Npevmf43Ofyu"
#define obfuscated_Module32First "Npevmf43Gjstu"
#define obfuscated_Process32First "Qspdftt43Gjstu"
#define obfuscated_CreateToolhelp32Snapshot "DsfbufUppmifmq43Tobqtipu"
#define obfuscated_GetProcAddress "HfuQspdBeesftt"
#define obfuscated_FindFirstFileA "GjoeGjstuGjmfB"
#define obfuscated_GetEnvironmentVariableA "HfuFowjsponfouWbsjbcmfB"
#define obfuscated_GetFileInformationByHandle "HfuGjmfJogpsnbujpoCzIboemf"
#define obfuscated_LoadLibraryA "MpbeMjcsbszB"
#define obfuscated_Process32NextW "Qspdftt43OfyuX"
#define obfuscated_Process32FirstW "Qspdftt43GjstuX"
#define obfuscated_FreeLibrary "GsffMjcsbsz"
#define obfuscated_GetCurrentProcess "HfuDvssfouQspdftt"
#define obfuscated_GetDiskFreeSpaceExW "HfuEjtlGsffTqbdfFyX"
#define obfuscated_GetLocaleInfoW "HfuMpdbmfJogpX"
#define obfuscated_GlobalMemoryStatusEx "HmpcbmNfnpszTubuvtFy"
#define obfuscated_GetSystemInfo "HfuTztufnJogp"
#define obfuscated_GetSystemPowerStatus "HfuTztufnQpxfsTubuvt"
#define obfuscated_GetVolumeInformationW "HfuWpmvnfJogpsnbujpoX"
#define obfuscated_LoadLibraryW "MpbeMjcsbszX"
#define obfuscated_WaitForSingleObject "XbjuGpsTjohmfPckfdu"
#define obfuscated_SetFileAttributesW "TfuGjmfBuusjcvuftX"
#define obfuscated_SetLastError "TfuMbtuFssps"
#define obfuscated_VirtualQueryEx "WjsuvbmRvfszFy"
#define obfuscated_Module32NextW "Npevmf43OfyuX"
#define obfuscated_Module32FirstW "Npevmf43GjstuX"
#define obfuscated_WideCharToMultiByte "XjefDibsUpNvmujCzuf"
#define obfuscated_GetShortPathNameW "HfuTipsuQbuiObnfX"
#define obfuscated_ExpandEnvironmentStringsW "FyqboeFowjsponfouTusjohtX"
#define obfuscated_ExpandEnvironmentStringsA "FyqboeFowjsponfouTusjohtB"
#define obfuscated_VirtualFreeEx "WjsuvbmGsffFy"
#define obfuscated_GetSystemTimeAsFileTime "HfuTztufnUjnfBtGjmfUjnf"
#define obfuscated_DeleteFileA "EfmfufGjmfB"
#define obfuscated_SetFileAttributesA "TfuGjmfBuusjcvuftB"
#define obfuscated_GetLongPathNameA "HfuMpohQbuiObnfB"
#define obfuscated_GetCommandLineW "HfuDpnnboeMjofX"
#define obfuscated_GetCommandLineA "HfuDpnnboeMjofB"
#define obfuscated_MoveFileExA "NpwfGjmfFyB"
#define obfuscated_GlobalUnlock "HmpcbmVompdl"
#define obfuscated_OpenFileMappingA "PqfoGjmfNbqqjohB"
#define obfuscated_CopyFileA "DpqzGjmfB"
#define obfuscated_FindNextFileA "GjoeOfyuGjmfB"
#define obfuscated_GetDiskFreeSpaceExA "HfuEjtlGsffTqbdfFyB"
#define obfuscated_SetFilePointer "TfuGjmfQpjoufs"
#define obfuscated_IsDebuggerPresent "JtEfcvhhfsQsftfou"
#define obfuscated_GetFileTime "HfuGjmfUjnf"
#define obfuscated_GlobalFree "HmpcbmGsff"
#define obfuscated_LoadLibraryExA "MpbeMjcsbszFyB"
#define obfuscated_GlobalAlloc "HmpcbmBmmpd"
#define obfuscated_DeviceIoControl "EfwjdfJpDpouspm"
#define obfuscated_VirtualFree "WjsuvbmGsff"
#define obfuscated_VirtualProtectEx "WjsuvbmQspufduFy"
#define obfuscated_WriteProcessMemory "XsjufQspdfttNfnpsz"
#define obfuscated_ReadProcessMemory "SfbeQspdfttNfnpsz"
#define obfuscated_CreateRemoteThread "DsfbufSfnpufUisfbe"
#define obfuscated_SystemTimeToFileTime "TztufnUjnfUpGjmfUjnf"
#define obfuscated_GetSystemTime "HfuTztufnUjnf"
#define obfuscated_lstrcmpA "mtusdnqB"
#define obfuscated_GetFileAttributesW "HfuGjmfBuusjcvuftX"
#define obfuscated_MultiByteToWideChar "NvmujCzufUpXjefDibs"
#define obfuscated_GetPrivateProfileStringW "HfuQsjwbufQspgjmfTusjohX"
#define obfuscated_lstrcatA "mtusdbuB"
#define obfuscated_lstrcpyA "mtusdqzB"
#define obfuscated_lstrcmpW "mtusdnqX"
#define obfuscated_GetVolumeInformationA "HfuWpmvnfJogpsnbujpoB"
#define obfuscated_SetFileTime "TfuGjmfUjnf"
#define obfuscated_IsBadStringPtrW "JtCbeTusjohQusX"
#define obfuscated_GetCPInfo "HfuDQJogp"
#define obfuscated_GetStdHandle "HfuTueIboemf"
#define obfuscated_GetModuleHandleW "HfuNpevmfIboemfX"
#define obfuscated_VirtualAlloc "WjsuvbmBmmpd"
#define obfuscated_HeapDestroy "IfbqEftuspz"
#define obfuscated_HeapCreate "IfbqDsfbuf"
#define obfuscated_DeleteCriticalSection "EfmfufDsjujdbmTfdujpo"
#define obfuscated_GetCurrentThreadId "HfuDvssfouUisfbeJe"
#define obfuscated_SetUnhandledExceptionFilter "TfuVoiboemfeFydfqujpoGjmufs"
#define obfuscated_UnhandledExceptionFilter "VoiboemfeFydfqujpoGjmufs"
#define obfuscated_RaiseException "SbjtfFydfqujpo"
#define obfuscated_RtlUnwind "SumVoxjoe"
#define obfuscated_HeapFree "IfbqGsff"
#define obfuscated_HeapAlloc "IfbqBmmpd"
#define obfuscated_HeapReAlloc "IfbqSfBmmpd"
#define obfuscated_LCMapStringA "MDNbqTusjohB"
#define obfuscated_LCMapStringW "MDNbqTusjohX"
#define obfuscated_HeapSize "IfbqTj{f"
#define obfuscated_VirtualQuery "WjsuvbmRvfsz"
#define obfuscated_SetHandleCount "TfuIboemfDpvou"
#define obfuscated_GetFileType "HfuGjmfUzqf"
#define obfuscated_GetStartupInfoA "HfuTubsuvqJogpB"
#define obfuscated_FreeEnvironmentStringsA "GsffFowjsponfouTusjohtB"
#define obfuscated_GetEnvironmentStrings "HfuFowjsponfouTusjoht"
#define obfuscated_FreeEnvironmentStringsW "GsffFowjsponfouTusjohtX"
#define obfuscated_GetEnvironmentStringsW "HfuFowjsponfouTusjohtX"
#define obfuscated_QueryPerformanceCounter "RvfszQfsgpsnbodfDpvoufs"
#define obfuscated_InitializeCriticalSectionAndSpinCount "Jojujbmj{fDsjujdbmTfdujpoBoeTqjoDpvou"
#define obfuscated_GetConsoleCP "HfuDpotpmfDQ"
#define obfuscated_GetConsoleMode "HfuDpotpmfNpef"
#define obfuscated_GetStringTypeA "HfuTusjohUzqfB"
#define obfuscated_GetStringTypeW "HfuTusjohUzqfX"
#define obfuscated_GetLocaleInfoA "HfuMpdbmfJogpB"
#define obfuscated_MapViewOfFile "NbqWjfxPgGjmf"
#define obfuscated_GetModuleHandleA "HfuNpevmfIboemfB"
#define obfuscated_CloseHandle "DmptfIboemf"
#define obfuscated_InitializeCriticalSection "Jojujbmj{fDsjujdbmTfdujpo"
#define obfuscated_Sleep "Tmffq"
#define obfuscated_ExitThread "FyjuUisfbe"
#define obfuscated_EnterCriticalSection "FoufsDsjujdbmTfdujpo"
#define obfuscated_LeaveCriticalSection "MfbwfDsjujdbmTfdujpo"
#define obfuscated_InterlockedIncrement "JoufsmpdlfeJodsfnfou"
#define obfuscated_InterlockedDecrement "JoufsmpdlfeEfdsfnfou"
#define obfuscated_GetACP "HfuBDQ"
#define obfuscated_GetOEMCP "HfuPFNDQ"
#define obfuscated_IsValidCodePage "JtWbmjeDpefQbhf"
#define obfuscated_TlsGetValue "UmtHfuWbmvf"
#define obfuscated_TlsAlloc "UmtBmmpd"
#define obfuscated_TlsFree "UmtGsff"
#define obfuscated_TlsSetValue "UmtTfuWbmvf"
#define obfuscated_GlobalLock "HmpcbmMpdl"
#define obfuscated_SetStdHandle "TfuTueIboemf"
#define obfuscated_WriteConsoleA "XsjufDpotpmfB"
#define obfuscated_GetConsoleOutputCP "HfuDpotpmfPvuqvuDQ"
#define obfuscated_WriteConsoleW "XsjufDpotpmfX"
#define obfuscated_SetEndOfFile "TfuFoePgGjmf"
#define obfuscated_GetProcessHeap "HfuQspdfttIfbq"
#define obfuscated_DeleteFileW "EfmfufGjmfX"
#define obfuscated_USER32DLL "VTFS43/EMM"
#define obfuscated_ToUnicode "UpVojdpef"
#define obfuscated_EnumChildWindows "FovnDijmeXjoepxt"
#define obfuscated_GetClassNameW "HfuDmbttObnfX"
#define obfuscated_RegisterWindowMessageW "SfhjtufsXjoepxNfttbhfX"
#define obfuscated_PeekMessageA "QfflNfttbhfB"
#define obfuscated_TranslateMessage "UsbotmbufNfttbhf"
#define obfuscated_DispatchMessageA "EjtqbudiNfttbhfB"
#define obfuscated_InvalidateRect "JowbmjebufSfdu"
#define obfuscated_GetKeyNameTextW "HfuLfzObnfUfyuX"
#define obfuscated_CloseClipboard "DmptfDmjqcpbse"
#define obfuscated_GetClipboardData "HfuDmjqcpbseEbub"
#define obfuscated_OpenClipboard "PqfoDmjqcpbse"
#define obfuscated_EnumWindows "FovnXjoepxt"
#define obfuscated_IsWindow "JtXjoepx"
#define obfuscated_FindWindowExW "GjoeXjoepxFyX"
#define obfuscated_SendMessageTimeoutW "TfoeNfttbhfUjnfpvuX"
#define obfuscated_GetWindowTextW "HfuXjoepxUfyuX"
#define obfuscated_GetWindowTextA "HfuXjoepxUfyuB"
#define obfuscated_LoadIconA "MpbeJdpoB"
#define obfuscated_LoadCursorA "MpbeDvstpsB"
#define obfuscated_RegisterClassExA "SfhjtufsDmbttFyB"
#define obfuscated_CreateWindowExA "DsfbufXjoepxFyB"
#define obfuscated_ShowWindow "TipxXjoepx"
#define obfuscated_UpdateWindow "VqebufXjoepx"
#define obfuscated_DefWindowProcA "EfgXjoepxQspdB"
#define obfuscated_BeginPaint "CfhjoQbjou"
#define obfuscated_GetClientRect "HfuDmjfouSfdu"
#define obfuscated_EndPaint "FoeQbjou"
#define obfuscated_MessageBoxA "NfttbhfCpyB"
#define obfuscated_SystemParametersInfoA "TztufnQbsbnfufstJogpB"
#define obfuscated_GetForegroundWindow "HfuGpsfhspvoeXjoepx"
#define obfuscated_GetSystemMetrics "HfuTztufnNfusjdt"
#define obfuscated_GetDC "HfuED"
#define obfuscated_GetDesktopWindow "HfuEftlupqXjoepx"
#define obfuscated_GetWindowInfo "HfuXjoepxJogp"
#define obfuscated_ReleaseDC "SfmfbtfED"
#define obfuscated_wsprintfW "xtqsjougX"
#define obfuscated_GetWindowThreadProcessId "HfuXjoepxUisfbeQspdfttJe"
#define obfuscated_DrawTextA "EsbxUfyuB"
#define obfuscated_wsprintfA "xtqsjougB"
#define obfuscated_GDI32DLL "HEJ43/EMM"
#define obfuscated_CreateDCA "DsfbufEDB"
#define obfuscated_SetDIBits "TfuEJCjut"
#define obfuscated_CreateRectRgn "DsfbufSfduSho"
#define obfuscated_CreateSolidBrush "DsfbufTpmjeCsvti"
#define obfuscated_FillRgn "GjmmSho"
#define obfuscated_SetTextColor "TfuUfyuDpmps"
#define obfuscated_SetBkColor "TfuClDpmps"
#define obfuscated_GetStockObject "HfuTupdlPckfdu"
#define obfuscated_CreateCompatibleDC "DsfbufDpnqbujcmfED"
#define obfuscated_CreateCompatibleBitmap "DsfbufDpnqbujcmfCjunbq"
#define obfuscated_CreatePalette "DsfbufQbmfuuf"
#define obfuscated_SelectPalette "TfmfduQbmfuuf"
#define obfuscated_SelectObject "TfmfduPckfdu"
#define obfuscated_StretchBlt "TusfudiCmu"
#define obfuscated_GetDIBits "HfuEJCjut"
#define obfuscated_DeleteObject "EfmfufPckfdu"
#define obfuscated_DeleteDC "EfmfufED"
#define obfuscated_ADVAPI32DLL "BEWBQJ43/EMM"
#define obfuscated_SetSecurityDescriptorSacl "TfuTfdvsjuzEftdsjqupsTbdm"
#define obfuscated_RegOpenKeyA "SfhPqfoLfzB"
#define obfuscated_RegQueryValueExA "SfhRvfszWbmvfFyB"
#define obfuscated_RegCreateKeyA "SfhDsfbufLfzB"
#define obfuscated_LookupAccountSidA "MpplvqBddpvouTjeB"
#define obfuscated_GetUserNameA "HfuVtfsObnfB"
#define obfuscated_RegLoadKeyW "SfhMpbeLfzX"
#define obfuscated_RegCreateKeyW "SfhDsfbufLfzX"
#define obfuscated_RegSetValueExA "SfhTfuWbmvfFyB"
#define obfuscated_RegUnLoadKeyW "SfhVoMpbeLfzX"
#define obfuscated_RegOpenKeyW "SfhPqfoLfzX"
#define obfuscated_RegEnumKeyW "SfhFovnLfzX"
#define obfuscated_OpenProcessToken "PqfoQspdfttUplfo"
#define obfuscated_LookupPrivilegeValueA "MpplvqQsjwjmfhfWbmvfB"
#define obfuscated_AdjustTokenPrivileges "BekvtuUplfoQsjwjmfhft"
#define obfuscated_RegOpenKeyExW "SfhPqfoLfzFyX"
#define obfuscated_RegQueryValueExW "SfhRvfszWbmvfFyX"
#define obfuscated_RegCloseKey "SfhDmptfLfz"
#define obfuscated_GetSecurityDescriptorSacl "HfuTfdvsjuzEftdsjqupsTbdm"
#define obfuscated_ConvertStringSecurityDescriptorToSecurityDescriptorA "DpowfsuTusjohTfdvsjuzEftdsjqupsUpTfdvsjuzEftdsjqupsB"
#define obfuscated_SetSecurityDescriptorDacl "TfuTfdvsjuzEftdsjqupsEbdm"
#define obfuscated_InitializeSecurityDescriptor "Jojujbmj{fTfdvsjuzEftdsjqups"
#define obfuscated_CloseEventLog "DmptfFwfouMph"
#define obfuscated_OpenEventLogA "PqfoFwfouMphB"
#define obfuscated_GetOldestEventLogRecord "HfuPmeftuFwfouMphSfdpse"
#define obfuscated_GetNumberOfEventLogRecords "HfuOvncfsPgFwfouMphSfdpset"
#define obfuscated_ReadEventLogA "SfbeFwfouMphB"
#define obfuscated_CloseServiceHandle "DmptfTfswjdfIboemf"
#define obfuscated_OpenSCManagerA "PqfoTDNbobhfsB"
#define obfuscated_StartServiceA "TubsuTfswjdfB"
#define obfuscated_CreateServiceW "DsfbufTfswjdfX"
#define obfuscated_RegOpenKeyExA "SfhPqfoLfzFyB"
#define obfuscated_RegEnumValueA "SfhFovnWbmvfB"
#define obfuscated_RegEnumKeyExA "SfhFovnLfzFyB"
#define obfuscated_RegDeleteValueA "SfhEfmfufWbmvfB"
#define obfuscated_GetSidSubAuthority "HfuTjeTvcBvuipsjuz"
#define obfuscated_GetSidSubAuthorityCount "HfuTjeTvcBvuipsjuzDpvou"
#define obfuscated_GetTokenInformation "HfuUplfoJogpsnbujpo"
#define obfuscated_ConvertSidToStringSidW "DpowfsuTjeUpTusjohTjeX"
#define obfuscated_RegSetValueExW "SfhTfuWbmvfFyX"
#define obfuscated_GetUserNameW "HfuVtfsObnfX"
#define obfuscated_RegEnumKeyExW "SfhFovnLfzFyX"
#define obfuscated_ConvertSidToStringSidA "DpowfsuTjeUpTusjohTjeB"
#define obfuscated_SHELL32DLL "TIFMM43/EMM"
#define obfuscated_SHGetSpecialFolderPathW "TIHfuTqfdjbmGpmefsQbuiX"
#define obfuscated_OLE32DLL "PMF43/EMM"
#define obfuscated_CreateStreamOnHGlobal "DsfbufTusfbnPoIHmpcbm"
#endif // obfuscated_calls_h__