filenamesteamclient64.dll
size304416 (0x4a520)
md55d3d09ad0f9cb50d70d402d752340fd7
typePE32+ executable (DLL) (GUI) x86-64, for MS Windows
mimetypeapplication/x-dosexec
clamavOK
virustotal→ scan with virustotal.com
histogram

MZ Header

signatureMZ
bytes_in_last_block0x90
blocks_in_file3
num_relocs0
header_paragraphs4
min_extra_paragraphs0
max_extra_paragraphs0xffff
ss0
sp0xb8
checksum0
ip0
cs0
reloc_table_offset0x40
overlay_number0
reserved00
oem_id0
oem_info0
reserved20
reserved30
reserved40
reserved50
reserved60
lfanew0xf8

Rich Header

lib idversiontimes used
123507272
2252080672
22420806236
2232080612
2036550115
10153
2284062982
220406291
219210051
222406291

DOS stub

00000000: 0e 1f ba 0e 00 b4 09 cd  21 b8 01 4c cd 21 54 68  |........!..L.!Th|
00000010: 69 73 20 70 72 6f 67 72  61 6d 20 63 61 6e 6e 6f  |is program canno|
00000020: 74 20 62 65 20 72 75 6e  20 69 6e 20 44 4f 53 20  |t be run in DOS |
00000030: 6d 6f 64 65 2e 0d 0d 0a  24 00 00 00 00 00 00 00  |mode....$.......|

PE Header

SignaturePE
Machine0x8664
NumberOfSections3
TimeDateStamp0x5d5b3cab
PointerToSymbolTable0
NumberOfSymbols0
SizeOfOptionalHeader0xf0
Characteristics0x2022
Magic0x20b
LinkerVersion12.0
SizeOfCode0x49000
SizeOfInitializedData0x2000
SizeOfUninitializedData0x97000
AddressOfEntryPoint0xe05f0
BaseOfCode0x98000
ImageBase0x180000000
SectionAlignment0x1000
FileAlignment0x200
OperatingSystemVersion6.0
ImageVersion0.0
SubsystemVersion6.0
Reserved10
SizeOfImage0xe3000
SizeOfHeaders0x1000
CheckSum0x4f320
Subsystem2
DllCharacteristics0x160
SizeOfStackReserve0x100000
SizeOfStackCommit0x1000
SizeOfHeapReserve0x100000
SizeOfHeapCommit0x1000
LoaderFlags0
NumberOfRvaAndSizes0x10

Sections

namevavsizeraw sizeflags
WUS00x10000x970000RWX UDATA
WUS10x980000x490000x48a00RWX IDATA
.rsrc0xe10000x20000x1200RW- IDATA

Data Directory

typevasize
EXPORT0xe19100x7dc
IMPORT0xe16e00x230
RESOURCE0xe10000x6e0
EXCEPTION0xd30000x49a4
SECURITY0x4a0000x520
BASERELOC0xe20ec0xc
DEBUG00
ARCHITECTURE00
GLOBALPTR00
TLS00
LOAD_CONFIG0xe08980x70
Bound_IAT00
IAT00
Delay_IAT00
CLR_Header00
typenamesizecp
VERSION#18800
VERSION#17600
module_namehintordfunction_name
ADVAPI32.dllRegCloseKey
KERNEL32.DLLLoadLibraryA
KERNEL32.DLLGetProcAddress
KERNEL32.DLLVirtualProtect
ntdll.dllRtlUnwindEx
PSAPI.DLLEnumProcessModules
SHELL32.dllSHGetFolderPathA
SHLWAPI.dllPathFileExistsW
USER32.dllMessageBoxA
WS2_32.dll115
ordentry_vafunction_name
10x1de4cBreakpad_SteamMiniDumpInit
20x1de4cBreakpad_SteamSetAppID
30x1de54Breakpad_SteamSetSteamID
40x1de54Breakpad_SteamWriteMiniDumpSetComment
50x1de4cBreakpad_SteamWriteMiniDumpUsingExceptionInfoWithBuildId
60x1de68CreateInterface
70x1df00Steam_BConnected
80x1df14Steam_BGetCallback
90x1df00Steam_BLoggedOn
100x1df00Steam_BReleaseSteamPipe
110x1e00cSteam_ConnectToGlobalUser
120x1e00cSteam_CreateGlobalUser
130x1e024Steam_CreateLocalUser
140x1e00cSteam_CreateSteamPipe
150x1de4cSteam_FreeLastCallback
160x1df00Steam_GSBLoggedOn
170x1df00Steam_GSBSecure
180x1df00Steam_GSGetSteam2GetEncryptionKeyToSendToNewClient
190x1e048Steam_GSGetSteamID
200x1de4cSteam_GSLogOff
210x1de4cSteam_GSLogOn
220x1df00Steam_GSRemoveUserConnect
230x1df00Steam_GSSendSteam2UserConnect
240x1df00Steam_GSSendSteam3UserConnect
250x1df00Steam_GSSendUserDisconnect
260x1df00Steam_GSSendUserStatusResponse
270x1df00Steam_GSSetServerType
280x1de4cSteam_GSSetSpawnCount
290x1df00Steam_GSUpdateStatus
300x1e060Steam_GetAPICallResult
310x1de54Steam_GetGSHandle
320x1de54Steam_InitiateGameConnection
330x1de4cSteam_LogOff
340x1de4cSteam_LogOn
350x1de4cSteam_ReleaseThreadLocalMemory
360x1de4cSteam_ReleaseUser
370x1de4cSteam_SetLocalIPBinding
380x1de4cSteam_TerminateGameConnection
390x1de54VR_GetGenericInterfaceInternal
400x1dea4VR_GetStringForHmdErrorInternal
410x1debcVR_InitInternal
420x1deecVR_IsHmdPresentInternal
430x1de4cVR_ShutdownInternal
440x1de4chid_close
450x1de54hid_enumerate
460x1e09chid_error
470x1de54hid_exit
480x1de4chid_free_enumeration
490x1de54hid_get_feature_report
500x1de54hid_get_indexed_string
510x1de54hid_get_manufacturer_string
520x1de54hid_get_product_string
530x1de54hid_get_serial_number_string
540x1de54hid_init
550x1de54hid_open
560x1de54hid_open_path
570x1de54hid_read
580x1de54hid_read_timeout
590x1de54hid_send_feature_report
600x1de54hid_set_nonblocking
610x1de54hid_write
module_namesteamclient64.dll
flags0
timestamp2019-08-20 00:19:51
version0.0
ordinal_base1
nFunctions61
nNames61
Names(61)0xe1a2c
Functions(61)0xe1938
NameOrdinals(61)0xe1b20

StringTable 040904B0

LegalCopyrightCopyright (C) NisCkxU544c
InternalNameSteam Client API
FileVersion01.0.1.19
CompanyNameValve Corporation
ProductVersion01.00.00.01
FileDescriptionSteam Client API (buildbot_winslave007@WUS)
Source Control ID1337110
OriginalFilenamesteam_api.dll
ProductNameSteam Client API

StringTable 040904B0

CompanyNameValve Corporation
FileDescriptionSteam Client API
FileVersion1, 0, 0, 1
InternalNameSteam Client API
LegalCopyrightCopyright (C) 2007
OriginalFilenamesteam_api.dll
ProductNameSteam Client API
ProductVersion1, 0, 0, 1

VS_FIXEDFILEINFO

FileVersion1.0.1.19
ProductVersion1.0.0.1
StrucVersion0x10000
FileFlagsMask0x17
FileFlags0
FileOS4
FileType2
FileSubtype0

VS_FIXEDFILEINFO

FileVersion1.0.0.1
ProductVersion1.0.0.1
StrucVersion0x10000
FileFlagsMask0x17
FileFlags0
FileOS4
FileType2
FileSubtype0

Signers (1)

issuer: /CN=\x00W\x00U\x00S\x00!
serial: -4DAD9447B8843358B1FA068CFF8F6239

Certificates (1)

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
             (Negative)4d:ad:94:47:b8:84:33:58:b1:fa:06:8c:ff:8f:62:39
        Signature Algorithm: sha1WithRSA
        Issuer: CN=\x00W\x00U\x00S\x00!
        Validity
            Not Before: Jul  1 00:00:00 2014 GMT
            Not After : Jan  1 00:00:00 2088 GMT
        Subject: CN=\x00W\x00U\x00S\x00!
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:f3:98:16:4d:60:69:2b:03:7d:bf:c6:c4:8e:
                    33:bb:bc:42:63:33:26:b8:c5:63:fa:6a:20:d4:38:
                    95:c5:d1:22:53:07:81:27:ea:3e:05:33:7a:f7:0c:
                    11:85:41:d0:12:58:60:3a:83:dd:52:43:c8:56:04:
                    5b:c9:ac:26:b9:8a:95:34:47:da:5c:14:fd:88:c1:
                    34:ee:8b:5a:f9:3a:9b:70:db:9f:ca:f2:f6:da:b4:
                    02:99:7d:4c:c2:88:80:89:fd:fe:0f:4d:75:06:eb:
                    78:e8:a6:09:89:59:25:c5:c9:f9:a1:44:ca:07:38:
                    7f:9c:47:12:7b:8a:05:67:b5:b3:3f:07:1c:2c:18:
                    33:49:bd:ec:2a:4e:76:48:b0:d4:31:02:9b:10:88:
                    c4:64:7c:5b:1b:3b:b7:d8:3c:eb:80:ea:1f:ac:b9:
                    2c:59:89:33:eb:6a:c1:42:85:8d:06:a0:1b:aa:02:
                    e7:ad:d5:8b:f1:8b:a0:73:e4:c5:a8:5c:26:d0:5a:
                    12:73:67:4b:89:cf:b8:90:34:ed:11:fc:8a:a6:52:
                    87:7f:29:8e:15:cc:be:0d:8c:06:54:8b:75:e0:f4:
                    38:27:bb:f9:e4:dc:aa:99:6b:b9:aa:6e:bc:db:c6:
                    75:4b:b3:cb:4d:39:fa:27:7d:f5:3b:18:c2:e6:2e:
                    e9:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            2.5.29.1: 
                0;.......e{..>...-1...0.1.0...U.....W.U.S.!...Rk.G{..N..s.p..
    Signature Algorithm: sha1WithRSA
         2b:8a:5c:35:bc:8d:1d:0d:50:06:e6:d9:de:0a:d8:69:ab:c7:
         e6:90:88:cc:a7:df:d9:55:09:5b:9e:19:aa:06:37:44:8f:3b:
         b8:f6:db:74:c3:6b:09:b9:58:0f:46:91:02:65:48:2d:34:3b:
         5c:be:0e:e7:4f:af:aa:dd:e8:24:b7:92:7b:f1:d3:6a:0a:4f:
         6d:e1:3a:c2:c0:a0:6a:80:86:08:51:f1:0e:48:a6:75:cd:05:
         35:c0:2d:e2:76:95:75:40:13:8e:ac:8a:a7:ff:4a:a2:8f:17:
         22:4d:64:b8:aa:94:cc:ab:cf:8f:fe:1e:a0:b8:a9:d9:9f:12:
         86:cb:e1:cb:ff:14:f9:d9:20:e0:1f:d6:12:19:f3:58:37:a0:
         98:9d:4f:9b:15:7c:96:f9:d9:60:bd:0a:b1:a0:a7:92:e4:91:
         43:67:15:4b:45:47:11:20:4d:8d:70:e1:99:12:9e:6d:d9:a4:
         fe:bd:67:ac:7c:ad:25:87:a2:0e:3e:50:29:22:96:51:71:2e:
         e8:b4:7c:15:f3:f5:e3:da:82:da:00:c8:ad:b4:08:c4:73:f3:
         cf:c9:d4:7b:df:d2:85:ea:18:21:13:67:7a:58:09:2d:21:b4:
         46:2f:47:e1:bb:a7:46:32:74:e6:56:93:12:51:e9:1a:cd:b9:
         86:a3:99:5d
pkcs7-signedData
  • 1
    • SHA1: nil
    • 1.3.6.1.4.1.311.2.1.4
      • #0
        • 1.3.6.1.4.1.311.2.1.15
          • :
        • SHA1
          • 5a bd cd 06 b9 68 c9 ea  01 ba 17 65 e8 18 be dc  |Z....h.....e....|
c4 82 d3 39                                       |...9            |
    • #2
      • 2
        • -103251830510890988845464931467663467065
        • RSA-SHA1-2: nil
        • CN: 
          00 57 00 55 00 53 00 21                           |.W.U.S.!        |
        • 2014-07-01 00:00:00 UTC: 2088-01-01 00:00:00 UTC
        • CN: 
          00 57 00 55 00 53 00 21                           |.W.U.S.!        |
        • #5
          • rsaEncryption: nil
          • A9:F3:98:16:4D:60:69:2B:03:7D:BF:C6:C4:8E:33:BB:
            BC:42:63:33:26:B8:C5:63:FA:6A:20:D4:38:95:C5:D1:
            22:53:07:81:27:EA:3E:05:33:7A:F7:0C:11:85:41:D0:
            12:58:60:3A:83:DD:52:43:C8:56:04:5B:C9:AC:26:B9:
            8A:95:34:47:DA:5C:14:FD:88:C1:34:EE:8B:5A:F9:3A:
            9B:70:DB:9F:CA:F2:F6:DA:B4:02:99:7D:4C:C2:88:80:
            89:FD:FE:0F:4D:75:06:EB:78:E8:A6:09:89:59:25:C5:
            C9:F9:A1:44:CA:07:38:7F:9C:47:12:7B:8A:05:67:B5:
            B3:3F:07:1C:2C:18:33:49:BD:EC:2A:4E:76:48:B0:D4:
            31:02:9B:10:88:C4:64:7C:5B:1B:3B:B7:D8:3C:EB:80:
            EA:1F:AC:B9:2C:59:89:33:EB:6A:C1:42:85:8D:06:A0:
            1B:AA:02:E7:AD:D5:8B:F1:8B:A0:73:E4:C5:A8:5C:26:
            D0:5A:12:73:67:4B:89:CF:B8:90:34:ED:11:FC:8A:A6:
            52:87:7F:29:8E:15:CC:BE:0D:8C:06:54:8B:75:E0:F4:
            38:27:BB:F9:E4:DC:AA:99:6B:B9:AA:6E:BC:DB:C6:75:
            4B:B3:CB:4D:39:FA:27:7D:F5:3B:18:C2:E6:2E:E9:21            : 0x010001
        • 2.5.29.1
          • 98 2e 1a d0 7f 65 7b c1  10 3e 1e c2 10 2d 31 09  |.....e{..>...-1.|
            • CN: 
              00 57 00 55 00 53 00 21                           |.W.U.S.!        |
            • b2 52 6b b8 47 7b cc a7  4e 05 f9 73 00 70 9d c7  |.Rk.G{..N..s.p..|
      • RSA-SHA1-2: 
        2b 8a 5c 35 bc 8d 1d 0d  50 06 e6 d9 de 0a d8 69  |+.\5....P......i|
ab c7 e6 90 88 cc a7 df  d9 55 09 5b 9e 19 aa 06  |.........U.[....|
37 44 8f 3b b8 f6 db 74  c3 6b 09 b9 58 0f 46 91  |7D.;...t.k..X.F.|
02 65 48 2d 34 3b 5c be  0e e7 4f af aa dd e8 24  |.eH-4;\...O....$|
b7 92 7b f1 d3 6a 0a 4f  6d e1 3a c2 c0 a0 6a 80  |..{..j.Om.:...j.|
86 08 51 f1 0e 48 a6 75  cd 05 35 c0 2d e2 76 95  |..Q..H.u..5.-.v.|
75 40 13 8e ac 8a a7 ff  4a a2 8f 17 22 4d 64 b8  |u@......J..."Md.|
aa 94 cc ab cf 8f fe 1e  a0 b8 a9 d9 9f 12 86 cb  |................|
e1 cb ff 14 f9 d9 20 e0  1f d6 12 19 f3 58 37 a0  |...... ......X7.|
98 9d 4f 9b 15 7c 96 f9  d9 60 bd 0a b1 a0 a7 92  |..O..|...`......|
e4 91 43 67 15 4b 45 47  11 20 4d 8d 70 e1 99 12  |..Cg.KEG. M.p...|
9e 6d d9 a4 fe bd 67 ac  7c ad 25 87 a2 0e 3e 50  |.m....g.|.%...>P|
29 22 96 51 71 2e e8 b4  7c 15 f3 f5 e3 da 82 da  |)".Qq...|.......|
00 c8 ad b4 08 c4 73 f3  cf c9 d4 7b df d2 85 ea  |......s....{....|
18 21 13 67 7a 58 09 2d  21 b4 46 2f 47 e1 bb a7  |.!.gzX.-!.F/G...|
46 32 74 e6 56 93 12 51  e9 1a cd b9 86 a3 99 5d  |F2t.V..Q.......]|
    • 1
      • #0
        • CN: 
          00 57 00 55 00 53 00 21                           |.W.U.S.!        |
        • -103251830510890988845464931467663467065
      • SHA1: nil
      • #2
        • 1.3.6.1.4.1.311.2.1.12
          • nil
        • contentType: 1.3.6.1.4.1.311.2.1.4
        • messageDigest: 
          f6 a5 d5 d8 98 5e 26 da  9c 9b 32 6f 1c 4c 1a 0c  |.....^&...2o.L..|
4d 2f 1d 71                                       |M/.q            |
      • rsaEncryption: 
        15 99 78 ec c6 94 61 2d  f4 ed 48 d6 6e 8f 00 2f  |..x...a-..H.n../|
2c 87 f6 da f4 39 c3 71  f2 c0 7c 4a 30 d0 a1 9d  |,....9.q..|J0...|
3f 61 fb ab 91 dd 0a a2  a3 77 eb 83 36 29 e5 eb  |?a.......w..6)..|
35 9d f0 8f dd a7 d6 cb  39 95 eb d9 33 47 00 fa  |5.......9...3G..|
4a 42 a3 69 8a 38 83 4b  33 10 3d a8 14 ff a8 78  |JB.i.8.K3.=....x|
5c 91 a6 4e 09 20 32 64  94 ec d1 94 fc b3 04 6a  |\..N. 2d.......j|
45 33 d2 ff 09 1d 75 f7  a6 80 99 85 96 4d 63 a1  |E3....u......Mc.|
14 3f 73 6f 50 b1 26 f3  37 c5 43 b5 ec f8 b5 f1  |.?soP.&.7.C.....|
b4 df 3a 07 81 40 9d bf  58 63 5f 93 42 53 dd 22  |..:..@..Xc_.BS."|
92 88 bf b3 ca 74 18 b4  d9 c4 62 a7 ef 59 db e7  |.....t....b..Y..|
f4 a0 89 9b ad 8e a7 64  53 33 7d 75 1a a5 2c f2  |.......dS3}u..,.|
45 56 02 31 5c 6e f9 89  4d aa 56 13 8b fd 0b 17  |EV.1\n..M.V.....|
86 85 d3 00 2b 87 84 dd  ef 73 34 ba 93 ee bf 77  |....+....s4....w|
1d 88 72 b6 bd 89 48 48  e1 68 c6 57 85 83 86 a3  |..r...HH.h.W....|
dc f7 c8 ee c9 56 66 9a  6a f6 02 8f 43 8c 03 4c  |.....Vf.j...C..L|
70 0c 56 75 34 0a 00 95  70 1e 85 18 fb 15 4d 3f  |p.Vu4...p.....M?|
offsetsizetypecomment
15c115HTM#
15d0298832BINoverlay data past EOF#
offset:( 0x )size:( 0x )hotkeys:-=[]<>, offset/size fields are also editable







everything is OK