Lightweight • Header-only • Hard-to-grep • Anti-static-analysis friendly

• Compile-time XOR obfuscation of string literals (char[] & wchar_t[])
• Rolling XOR key stream — different key byte per position (16-byte cycle by default)
• Strong compile-time seed mixing (inspired by splitmix64 / wyhash)
• Lazy decryption (happens only when you first access the string)
• Automatic zeroization on scope exit (via RAII helper)
• Very simple & clean macro syntax
• Header-only — drop-in single file integration
• No external dependencies, no dynamic allocation

#include "obfuscator.h"

int main()
{
    // Most common & safest way — decrypt + auto-zeroize when leaving scope
    const char* msg = OBF_AUTO("kernel32.dll");

    // One-time decrypt (stays decrypted until program ends or zeroized manually)
    const char* api = OBF("CreateRemoteThread");

    // Wide string versions
    const wchar_t* wpath = OBF_W_AUTO(L"C:\\Windows\\Temp\\payload.bin");

    wprintf(L"Path: %s\n", wpath);
    printf("API name: %s\n", api);

    // You can also use it inside functions, conditions, etc.
    if (some_condition) {
        MessageBoxA(NULL, OBF_AUTO("Critical error!"), OBF("Error"), MB_ICONERROR);
    }
}

Recommendation: Use OBF_AUTO / OBF_W_AUTO in most cases — it's significantly safer as it minimizes the time sensitive strings remain in plaintext in memory.

All numbers are approximate, measured on modern hardware (Zen 4 / Intel 13th–14th gen, 2024–2025 compilers) with -O3 -march=native.