API tools faq
paste
dr0le

API hash

dr0le
Nov 2nd, 2016
736
0
Never
Add comment
Not a member of Pastebin yet? Sign Up, it unlocks many cool features!
Python 12.66 KB | None | 0 0
raw download clone embed print report
  1. import idaapi
  2. id = idc.AddEnum(0, "eHash", idaapi.hexflag());
  3. idc.AddConstEx(id,"ehExitProcess",0x7d96c33,-1);
  4. idc.AddConstEx(id,"ehGetTickCount",0xd26f2a4,-1);
  5. idc.AddConstEx(id,"ehGetComputerNameA",0x614e3b1,-1);
  6. idc.AddConstEx(id,"ehGetLocalTime",0xdbd3d65,-1);
  7. idc.AddConstEx(id,"ehGetComputerNameExA",0x4e3bad1,-1);
  8. idc.AddConstEx(id,"ehGetUserNameA",0x8c8ff01,-1);
  9. idc.AddConstEx(id,"ehGetKeyboardState",0x951c1b5,-1);
  10. idc.AddConstEx(id,"ehGetCurrentThreadId",0x2d3ab94,-1);
  11. idc.AddConstEx(id,"ehGetKeyboardLayout",0x59e7754,-1);
  12. idc.AddConstEx(id,"ehToAsciiEx",0x899a6f8,-1);
  13. idc.AddConstEx(id,"ehGetCommandLineA",0xc348a51,-1);
  14. idc.AddConstEx(id,"ehGetTempPathA",0x8a1001,-1);
  15. idc.AddConstEx(id,"ehCreateFileA",0xad68911,-1);
  16. idc.AddConstEx(id,"ehRtlGetLastWin32Error",0xe500be2,-1);
  17. idc.AddConstEx(id,"ehCreateEventA",0xd641d21,-1);
  18. idc.AddConstEx(id,"ehWaitForSingleObject",0x479cab4,-1);
  19. idc.AddConstEx(id,"ehCloseHandle",0x9ae7db5,-1);
  20. idc.AddConstEx(id,"ehSetEvent",0xc8ccfc4,-1);
  21. idc.AddConstEx(id,"ehSleep",0x5a2bc0,-1);
  22. idc.AddConstEx(id,"ehGetCurrentProcess",0xb601193,-1);
  23. idc.AddConstEx(id,"ehinet_ntoa",0xca62b11,-1);
  24. idc.AddConstEx(id,"ehntohs",0x6fb653,-1);
  25. idc.AddConstEx(id,"ehGetPrivateProfileStringA",0x7f03bf1,-1);
  26. idc.AddConstEx(id,"ehLoadLibraryA",0xaadf0f1,-1);
  27. idc.AddConstEx(id,"ehGetProcAddress",0xb3c1d03,-1);
  28. idc.AddConstEx(id,"ehRtlGetNtVersionNumbers",0x4f4c463,-1);
  29. idc.AddConstEx(id,"ehRtlAdjustPrivilege",0x49fbb95,-1);
  30. idc.AddConstEx(id,"ehMoveFileA",0xc9cb6f1,-1);
  31. idc.AddConstEx(id,"ehinet_addr",0xca50af2,-1);
  32. idc.AddConstEx(id,"ehTerminateThread",0x3ef9914,-1);
  33. idc.AddConstEx(id,"ehSetCurrentDirectoryA",0x3791541,-1);
  34. idc.AddConstEx(id,"ehSetServiceStatus",0x366d8c3,-1);
  35. idc.AddConstEx(id,"ehRegisterServiceCtrlHandlerA",0xa23e7d1,-1);
  36. idc.AddConstEx(id,"ehOpenSCManagerA",0x284af31,-1);
  37. idc.AddConstEx(id,"ehOpenServiceA",0x9fa3a01,-1);
  38. idc.AddConstEx(id,"ehControlService",0xf925d25,-1);
  39. idc.AddConstEx(id,"ehStartServiceCtrlDispatcherA",0x5c2ba81,-1);
  40. idc.AddConstEx(id,"ehGetTempFileNameA",0x864f3e1,-1);
  41. idc.AddConstEx(id,"ehVirtualAlloc",0x3d8cae3,-1);
  42. idc.AddConstEx(id,"ehMoveFileExA",0xcb6f051,-1);
  43. idc.AddConstEx(id,"ehGetVersionExA",0x44de011,-1);
  44. idc.AddConstEx(id,"ehWriteFile",0xa992b5,-1);
  45. idc.AddConstEx(id,"ehRegOpenKeyExA",0xba0ba31,-1);
  46. idc.AddConstEx(id,"ehRegSetValueExA",0xdf25081,-1);
  47. idc.AddConstEx(id,"ehRegCloseKey",0x3313a69,-1);
  48. idc.AddConstEx(id,"ehExitWindowsEx",0x8667a08,-1);
  49. idc.AddConstEx(id,"ehCreatePipe",0x8aed8d5,-1);
  50. idc.AddConstEx(id,"ehCreateProcessA",0x1e164a1,-1);
  51. idc.AddConstEx(id,"ehPeekNamedPipe",0x5057455,-1);
  52. idc.AddConstEx(id,"ehReadFile",0xb78cba5,-1);
  53. idc.AddConstEx(id,"ehRtlAllocateHeap",0x8487de3,-1);
  54. idc.AddConstEx(id,"ehRtlFreeHeap",0xb84dc55,-1);
  55. idc.AddConstEx(id,"ehHeapCreate",0x4ac5325,-1);
  56. idc.AddConstEx(id,"ehRtlReAllocateHeap",0x8daab03,-1);
  57. idc.AddConstEx(id,"ehHeapDestroy",0xa840129,-1);
  58. idc.AddConstEx(id,"ehwvsprintfA",0x789b701,-1);
  59. idc.AddConstEx(id,"ehStrToIntExA",0x3bf3b71,-1);
  60. idc.AddConstEx(id,"ehMultiByteToWideChar",0xbc08782,-1);
  61. idc.AddConstEx(id,"ehWideCharToMultiByte",0x62c3db5,-1);
  62. idc.AddConstEx(id,"ehRtlEnterCriticalSection",0xcb9561e,-1);
  63. idc.AddConstEx(id,"ehInitializeCriticalSection",0xa750d8e,-1);
  64. idc.AddConstEx(id,"ehRtlLeaveCriticalSection",0x299a7fe,-1);
  65. idc.AddConstEx(id,"ehCreateThread",0xe0733d4,-1);
  66. idc.AddConstEx(id,"ehSHCreateDirectoryExA",0x71ea41,-1);
  67. idc.AddConstEx(id,"ehSHFileOperationA",0x8a80031,-1);
  68. idc.AddConstEx(id,"ehSHGetFolderPathA",0xfcb4b1,-1);
  69. idc.AddConstEx(id,"ehPathFindExtensionA",0x179a741,-1);
  70. idc.AddConstEx(id,"ehPathFindFileNameA",0xe3685d1,-1);
  71. idc.AddConstEx(id,"ehGetModuleFileNameA",0xdfa8b21,-1);
  72. idc.AddConstEx(id,"ehGetSystemDirectoryA",0xc2349b1,-1);
  73. idc.AddConstEx(id,"ehZwAllocateVirtualMemory",0x10bcf79,-1);
  74. idc.AddConstEx(id,"ehZwWriteVirtualMemory",0x2dc9149,-1);
  75. idc.AddConstEx(id,"ehWriteProcessMemory",0x648b099,-1);
  76. idc.AddConstEx(id,"ehZwSetContextThread",0x9f6bb14,-1);
  77. idc.AddConstEx(id,"ehZwResumeThread",0x6232554,-1);
  78. idc.AddConstEx(id,"ehConnectNamedPipe",0x7076255,-1);
  79. idc.AddConstEx(id,"ehDisconnectNamedPipe",0xc0a6215,-1);
  80. idc.AddConstEx(id,"ehInitializeSecurityDescriptor",0xa654d62,-1);
  81. idc.AddConstEx(id,"ehSetSecurityDescriptorDacl",0x4a511bc,-1);
  82. idc.AddConstEx(id,"ehCreateNamedPipeA",0x339f611,-1);
  83. idc.AddConstEx(id,"ehFlushFileBuffers",0x74fdc3,-1);
  84. idc.AddConstEx(id,"ehaccept",0x6799c74,-1);
  85. idc.AddConstEx(id,"ehclosesocket",0xd0fb754,-1);
  86. idc.AddConstEx(id,"ehsocket",0x7a5a1c4,-1);
  87. idc.AddConstEx(id,"ehbind",0x69044,-1);
  88. idc.AddConstEx(id,"ehlisten",0x730aabe,-1);
  89. idc.AddConstEx(id,"ehgethostbyname",0x756b2f5,-1);
  90. idc.AddConstEx(id,"ehWSAStartup",0xaad5ca0,-1);
  91. idc.AddConstEx(id,"ehselect",0x79c2ba4,-1);
  92. idc.AddConstEx(id,"ehrecv",0x78ba6,-1);
  93. idc.AddConstEx(id,"ehsend",0x79c44,-1);
  94. idc.AddConstEx(id,"ehWSACleanup",0xa2ec290,-1);
  95. idc.AddConstEx(id,"ehObtainUserAgentString",0xf4c3d17,-1);
  96. idc.AddConstEx(id,"ehCryptDecrypt",0xe10a7f4,-1);
  97. idc.AddConstEx(id,"ehCryptDestroyKey",0xc0e47c9,-1);
  98. idc.AddConstEx(id,"ehCryptReleaseContext",0xcee5ca4,-1);
  99. idc.AddConstEx(id,"ehCryptEncrypt",0xe0a7e4,-1);
  100. idc.AddConstEx(id,"ehCryptAcquireContextA",0x89dc521,-1);
  101. idc.AddConstEx(id,"ehCryptImportKey",0xd6e1d29,-1);
  102. idc.AddConstEx(id,"ehCryptSetKeyParam",0xb7beb6d,-1);
  103. idc.AddConstEx(id,"ehCryptBinaryToStringA",0x436a391,-1);
  104. idc.AddConstEx(id,"ehSetFilePointer",0xbd35df2,-1);
  105. idc.AddConstEx(id,"ehCopyFileA",0x7dcc8f1,-1);
  106. idc.AddConstEx(id,"ehDeleteFileA",0xad64051,-1);
  107. idc.AddConstEx(id,"ehGetFileAttributesA",0x9d89af1,-1);
  108. idc.AddConstEx(id,"ehFindFirstFileA",0xac436d1,-1);
  109. idc.AddConstEx(id,"ehFindNextFileA",0x2887611,-1);
  110. idc.AddConstEx(id,"ehFindClose",0x48a7b95,-1);
  111. idc.AddConstEx(id,"ehGetFileSize",0x6769d5,-1);
  112. idc.AddConstEx(id,"ehSetFileAttributesA",0x8989af1,-1);
  113. idc.AddConstEx(id,"ehCreateMutexA",0xee41461,-1);
  114. idc.AddConstEx(id,"ehReleaseMutex",0xc28e148,-1);
  115. idc.AddConstEx(id,"ehGetCurrentProcessId",0x119c94,-1);
  116. idc.AddConstEx(id,"ehFindWindowA",0xdc9b221,-1);
  117. idc.AddConstEx(id,"ehGetWindowThreadProcessId",0xda16474,-1);
  118. idc.AddConstEx(id,"ehZwQueryInformationThread",0xb53e274,-1);
  119. idc.AddConstEx(id,"ehGetExitCodeProcess",0x3e34af3,-1);
  120. idc.AddConstEx(id,"ehCreateToolhelp32Snapshot",0x2aa0484,-1);
  121. idc.AddConstEx(id,"ehProcess32First",0xf36c6b4,-1);
  122. idc.AddConstEx(id,"ehProcess32Next",0x1f4d004,-1);
  123. idc.AddConstEx(id,"ehOpenProcess",0x7e3f093,-1);
  124. idc.AddConstEx(id,"ehGetModuleFileNameExA",0xa8b2131,-1);
  125. idc.AddConstEx(id,"ehGetSystemInfo",0x788542f,-1);
  126. idc.AddConstEx(id,"ehIsWow64Process",0xf733033,-1);
  127. idc.AddConstEx(id,"ehGetWindowTextA",0xa54cf01,-1);
  128. idc.AddConstEx(id,"ehGetParent",0x968c794,-1);
  129. idc.AddConstEx(id,"ehGetWindowLongA",0xa3d6431,-1);
  130. idc.AddConstEx(id,"ehGdipGetImageEncodersSize",0xd6937a5,-1);
  131. idc.AddConstEx(id,"ehGdipGetImageEncoders",0x1b6ad63,-1);
  132. idc.AddConstEx(id,"ehGetDesktopWindow",0xf12be87,-1);
  133. idc.AddConstEx(id,"ehGetWindowDC",0x8a263,-1);
  134. idc.AddConstEx(id,"ehCreateCompatibleDC",0x7b7d7a3,-1);
  135. idc.AddConstEx(id,"ehGetWindowRect",0x8a56ba4,-1);
  136. idc.AddConstEx(id,"ehCreateCompatibleBitmap",0x7b72450,-1);
  137. idc.AddConstEx(id,"ehSelectObject",0xec52004,-1);
  138. idc.AddConstEx(id,"ehBitBlt",0x4908934,-1);
  139. idc.AddConstEx(id,"ehDeleteDC",0xc2cad23,-1);
  140. idc.AddConstEx(id,"ehReleaseDC",0x2b8c143,-1);
  141. idc.AddConstEx(id,"ehDeleteObject",0xef52704,-1);
  142. idc.AddConstEx(id,"ehGdipCreateBitmapFromHBITMAP",0xef0e870,-1);
  143. idc.AddConstEx(id,"ehCreateStreamOnHGlobal",0xffe5e6c,-1);
  144. idc.AddConstEx(id,"ehGdipSaveImageToStream",0x4c590dd,-1);
  145. idc.AddConstEx(id,"ehGdipDisposeImage",0xd2c49b5,-1);
  146. idc.AddConstEx(id,"ehGdiplusShutdown",0xfb933fe,-1);
  147. idc.AddConstEx(id,"ehDestroyWindow",0x416f447,-1);
  148. idc.AddConstEx(id,"ehOpenProcessToken",0x9f57ebe,-1);
  149. idc.AddConstEx(id,"ehDuplicateTokenEx",0x9bc9418,-1);
  150. idc.AddConstEx(id,"ehCreateProcessAsUserA",0x96df8c1,-1);
  151. idc.AddConstEx(id,"ehGetDC",0x4dc883,-1);
  152. idc.AddConstEx(id,"ehBeginPath",0xe032018,-1);
  153. idc.AddConstEx(id,"ehPolyDraw",0x63dbdf7,-1);
  154. idc.AddConstEx(id,"ehEndPath",0xc4968e8,-1);
  155. idc.AddConstEx(id,"ehFlattenPath",0xb0e4018,-1);
  156. idc.AddConstEx(id,"ehZwQueryIntervalProfile",0x6908fe5,-1);
  157. idc.AddConstEx(id,"ehVirtualFree",0xb3dd105,-1);
  158. idc.AddConstEx(id,"ehZwQuerySystemInformation",0x194625e,-1);
  159. idc.AddConstEx(id,"ehGetFileTime",0x6768e5,-1);
  160. idc.AddConstEx(id,"ehFileTimeToSystemTime",0x3cb475,-1);
  161. idc.AddConstEx(id,"ehLoadLibraryExA",0xdf0f661,-1);
  162. idc.AddConstEx(id,"ehCreateServiceA",0x42457a1,-1);
  163. idc.AddConstEx(id,"ehCloseServiceHandle",0x48eed15,-1);
  164. idc.AddConstEx(id,"ehDeleteService",0x30b0575,-1);
  165. idc.AddConstEx(id,"ehEnumServicesStatusExA",0xb0973f1,-1);
  166. idc.AddConstEx(id,"ehQueryServiceStatusEx",0x88db128,-1);
  167. idc.AddConstEx(id,"ehStartServiceA",0x6346051,-1);
  168. idc.AddConstEx(id,"ehChangeServiceConfigA",0xc5ce821,-1);
  169. idc.AddConstEx(id,"ehThread32First",0xc95be84,-1);
  170. idc.AddConstEx(id,"ehOpenThread",0x3aaedb4,-1);
  171. idc.AddConstEx(id,"ehSuspendThread",0x365e764,-1);
  172. idc.AddConstEx(id,"ehGetThreadContext",0x4b9c7e4,-1);
  173. idc.AddConstEx(id,"ehVirtualAllocEx",0x8cae418,-1);
  174. idc.AddConstEx(id,"ehResumeThread",0xf232744,-1);
  175. idc.AddConstEx(id,"ehThread32Next",0x2cac784,-1);
  176. idc.AddConstEx(id,"ehTerminateProcess",0x394ba93,-1);
  177. idc.AddConstEx(id,"ehZwQueryInformationProcess",0xc830cc3,-1);
  178. idc.AddConstEx(id,"ehReadProcessMemory",0x1d72da9,-1);
  179. idc.AddConstEx(id,"ehFCICreate",0xda8f2d5,-1);
  180. idc.AddConstEx(id,"ehFCIAddFile",0x7ac69f5,-1);
  181. idc.AddConstEx(id,"ehFCIFlushCabinet",0x4ab8774,-1);
  182. idc.AddConstEx(id,"ehFCIDestroy",0xace20b9,-1);
  183. idc.AddConstEx(id,"ehFDICreate",0xda8f225,-1);
  184. idc.AddConstEx(id,"ehFDIIsCabinet",0xdd024b4,-1);
  185. idc.AddConstEx(id,"ehFDICopy",0xa8da639,-1);
  186. idc.AddConstEx(id,"ehFDIDestroy",0xace11b9,-1);
  187. idc.AddConstEx(id,"ehRegCreateKeyExA",0x3b43cd1,-1);
  188. idc.AddConstEx(id,"ehRegDeleteValueA",0x16c4f81,-1);
  189. idc.AddConstEx(id,"ehRegEnumKeyExA",0xaa71931,-1);
  190. idc.AddConstEx(id,"ehRegQueryValueExA",0x8289d1,-1);
  191. idc.AddConstEx(id,"ehgethostname",0x6c88ec5,-1);
  192. idc.AddConstEx(id,"ehioctlsocket",0x3f5db74,-1);
  193. idc.AddConstEx(id,"ehEnumProcessModules",0xfc7cad3,-1);
  194. idc.AddConstEx(id,"ehCheckSumMappedFile",0x8f84e55,-1);
  195. idc.AddConstEx(id,"ehVirtualProtect",0x72d1864,-1);
  196. idc.AddConstEx(id,"ehVirtualQuery",0x3c82729,-1);
  197. idc.AddConstEx(id,"ehUnmapViewOfFile",0x9df5db5,-1);
  198. idc.AddConstEx(id,"ehReadDirectoryChangesW",0x3591117,-1);
  199. idc.AddConstEx(id,"ehCreateFileMappingA",0x51e7621,-1);
  200. idc.AddConstEx(id,"ehMapViewOfFile",0x9df01b5,-1);
  201. idc.AddConstEx(id,"ehZwMapViewOfSection",0x35a33be,-1);
  202. idc.AddConstEx(id,"ehZwQueueApcThread",0x3620f94,-1);
  203. idc.AddConstEx(id,"ehZwOpenProcess",0x653f0f3,-1);
  204. idc.AddConstEx(id,"ehZwClose",0x1ba36f5,-1);
  205. idc.AddConstEx(id,"ehGetModuleHandleA",0xa3bec91,-1);
  206. idc.AddConstEx(id,"ehNetLocalGroupAddMembers",0xc331c3,-1);
  207. idc.AddConstEx(id,"ehNetUserDel",0xc99262c,-1);
  208. idc.AddConstEx(id,"ehCreateWellKnownSid",0xb1a9034,-1);
  209. idc.AddConstEx(id,"ehLookupAccountSidW",0x84c9fd7,-1);
  210. idc.AddConstEx(id,"ehWTSEnumerateSessionsA",0x5d113e1,-1);
  211. idc.AddConstEx(id,"ehWTSQuerySessionInformationA",0x4f39e1,-1);
  212. idc.AddConstEx(id,"ehWTSQueryUserToken",0x7f035ae,-1);
  213. idc.AddConstEx(id,"ehWTSFreeMemory",0x6adfe79,-1);
  214. idc.AddConstEx(id,"ehLookupAccountSidA",0x84c9fc1,-1);
  215. idc.AddConstEx(id,"ehDispatchMessageA",0xa275001,-1);
  216. idc.AddConstEx(id,"ehDispatchMessageW",0xa275037,-1);
  217. idc.AddConstEx(id,"ehCreateRemoteThread",0x48b1574,-1);
  218. idc.AddConstEx(id,"ehRtlCreateUserThread",0x6b5ea54,-1);
  219. idc.AddConstEx(id,"ehGetDIBits",0x88ddd73,-1);
  220. idc.AddConstEx(id,"ehGetForegroundWindow",0xffff5e7,-1);
  221. idc.AddConstEx(id,"ehntohs",0x75b5f3,-1);
  222. idc.AddConstEx(id,"ehgetsockname",0x60d8d95,-1);
  223. idc.AddConstEx(id,"ehwvsprintfW",0x789b717,-1);
  224. idc.AddConstEx(id,"ehCreateFileW",0xad68927,-1);
  225. idc.AddConstEx(id,"ehLocalAlloc",0x80328c3,-1);
  226. idc.AddConstEx(id,"ehLocalFree",0x9808be5,-1);
  227. idc.AddConstEx(id,"eh_wcsicmp",0xdaa0020,-1);
  228. idc.AddConstEx(id,"ehConvertSidToStringSidW",0xb350bb7,-1);
  229. idc.AddConstEx(id,"ehFreeLibrary",0x2b40339,-1);
  230. idc.AddConstEx(id,"ehLoadLibraryW",0xaadf0c7,-1);
  231. idc.AddConstEx(id,"ehGetExitCodeThread",0x5eae614,-1);
  232. idc.AddConstEx(id,"ehGetModuleHandleW",0xa3beca7,-1);
  233. idc.AddConstEx(id,"ehRtlEqualString",0xaa702b7,-1);
  234. idc.AddConstEx(id,"ehCreateFileMappingW",0x51e7657,-1);
  235. idc.AddConstEx(id,"ehVirtualFreeEx",0xdd102f8,-1);
  236. idc.AddConstEx(id,"ehVirtualProtectEx",0xd186fe8,-1);
  237. idc.AddConstEx(id,"ehVirtualQueryEx",0x8272e08,-1);
  238. idc.AddConstEx(id,"ehIsTextUnicode",0xcc56a65,-1);
  239. idc.AddConstEx(id,"ehRtlEqualUnicodeString",0x62c0647,-1);
  240. idc.AddConstEx(id,"ehRtlInitUnicodeString",0xbf460e7,-1);
  241. idc.AddConstEx(id,"ehRtlGetCurrentPeb",0x588a122,-1);
  242. idc.AddConstEx(id,"ehOpenSCManagerW",0x284af27,-1);
  243. idc.AddConstEx(id,"ehOpenServiceW",0x9fa3a37,-1);
Advertisement
Add Comment
Please, Sign In to add comment
Public Pastes
We use cookies for various purposes including analytics. By continuing to use Pastebin, you agree to our use of cookies as described in the Cookies Policy.  OK, I Understand
Not a member of Pastebin yet?
Sign Up, it unlocks many cool features!