SteamDRMP.dll

info
MZ
PE
imports
exports
foremost
hexdump
disasm
log
discuss
donate

filename	SteamDRMP.dll
size	136192 (0x21400)
md5	2d501a9caebb71182af42ab1a66d5a98

type	PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
mimetype	application/x-dosexec

clamav	OK
virustotal	→ scan with virustotal.com

histogram

MZ Header

signature	MZ
bytes_in_last_block	0x90
blocks_in_file	3
num_relocs	0
header_paragraphs	4
min_extra_paragraphs	0
max_extra_paragraphs	0xffff
ss	0
sp	0xb8
checksum	0
ip	0
cs	0
reloc_table_offset	0x40
overlay_number	0
reserved0	0
oem_id	0
oem_info	0
reserved2	0
reserved3	0
reserved4	0
reserved5	0
reserved6	0
lfanew	0x110

DOS stub

00000000: 56 4c 56 00 01 00 00 00  00 14 02 00 e1 53 46 5c  |VLV..........SF\|
00000010: 0a 3d 4f 93 b2 64 48 80  99 e3 1d 60 b4 80 f5 b1  |.=O..dH....`....|
00000020: 79 58 ec 41 a3 30 78 ba  3b 1a d4 23 95 d9 11 ec  |yX.A.0x.;..#....|
00000030: ac fb 33 18 e4 b6 37 a4  97 b2 a3 cd 82 e1 6f 86  |..3...7.......o.|
00000040: 01 14 54 35 62 03 a4 b9  c6 ce 2c 20 05 63 62 70  |..T5b....., .cbp|
00000050: cb f7 79 a3 ab 82 e2 78  0b 07 70 a9 7d 50 90 b4  |..y....x..p.}P..|
00000060: 29 38 b6 3e 37 5a 7e 27  d6 76 02 58 9f 01 89 40  |)8.>7Z~'.v.X...@|
00000070: 54 a6 77 c3 4f e6 80 92  9a f9 67 90 f6 57 6d da  |T.w.O.....g..Wm.|
00000080: b0 24 3f e2 5b aa 2c 72  ca 21 38 a4 2c 4d b6 3d  |.$?.[.,r.!8.,M.=|
00000090: 00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  |................|
*
000000d0:

PE Header

Signature	PE
Machine	0x14c
NumberOfSections	4
TimeDateStamp	0x5c4653dd
PointerToSymbolTable	0
NumberOfSymbols	0
SizeOfOptionalHeader	0xe0
Characteristics	0x2102
Magic	0x10b
LinkerVersion	14.14
SizeOfCode	0x15e00
SizeOfInitializedData	0xda00
SizeOfUninitializedData	0
AddressOfEntryPoint	0x7fd7
BaseOfCode	0x1000
BaseOfData	0x17000
ImageBase	0x10000000
SectionAlignment	0x1000
FileAlignment	0x200
OperatingSystemVersion	5.1
ImageVersion	0.0
SubsystemVersion	5.1
Reserved1	0
SizeOfImage	0x27000
SizeOfHeaders	0x400
CheckSum	0
Subsystem	2
DllCharacteristics	0x140
SizeOfStackReserve	0x100000
SizeOfStackCommit	0x1000
SizeOfHeapReserve	0x100000
SizeOfHeapCommit	0x1000
LoaderFlags	0
NumberOfRvaAndSizes	0x10

Packer / Compiler

MS Visual C++ 6.0 - 8.0

Sections

name	va	vsize	raw size	flags
.text	0x1000	0x15d7c	0x15e00	R-X CODE
.rdata	0x17000	0x947c	0x9600	R-- IDATA
.data	0x21000	0x3174	0xa00	RW- IDATA
.reloc	0x25000	0x1124	0x1200	R-- IDATA DISCARDABLE

Data Directory

type	va	size
EXPORT	0x1fc30	0x4c
IMPORT	0x1fc7c	0x50
RESOURCE	0	0
EXCEPTION	0	0
SECURITY	0	0
BASERELOC	0x25000	0x1124
DEBUG	0x1f260	0x54
ARCHITECTURE	0	0
GLOBALPTR	0	0
TLS	0	0
LOAD_CONFIG	0x1f2b8	0x40
Bound_IAT	0	0
IAT	0x17000	0x160
Delay_IAT	0	0
CLR_Header	0	0

module_name	hint	function_name
SHELL32.dll	290	ShellExecuteW
SHELL32.dll	286	ShellExecuteA
ADVAPI32.dll	609	RegOpenKeyExW
ADVAPI32.dll	622	RegQueryValueExW
ADVAPI32.dll	560	RegCloseKey
ADVAPI32.dll	608	RegOpenKeyExA
KERNEL32.dll	1316	WriteConsoleW
KERNEL32.dll	514	GetLastError
KERNEL32.dll	896	OpenProcess
KERNEL32.dll	1317	WriteFile
KERNEL32.dll	960	ReadFile
KERNEL32.dll	1127	SetFilePointerEx
KERNEL32.dll	82	CloseHandle
KERNEL32.dll	581	GetProcAddress
KERNEL32.dll	344	FlushInstructionCache
KERNEL32.dll	1263	VirtualProtect
KERNEL32.dll	1265	VirtualQuery
KERNEL32.dll	448	GetCurrentProcess
KERNEL32.dll	452	GetCurrentThread
KERNEL32.dll	768	IsDebuggerPresent
KERNEL32.dll	496	GetFileSize
KERNEL32.dll	659	GetTickCount
KERNEL32.dll	532	GetModuleFileNameW
KERNEL32.dll	533	GetModuleHandleA
KERNEL32.dll	534	GetModuleHandleExA
KERNEL32.dll	391	GetCommandLineW
KERNEL32.dll	143	CreateFileW
KERNEL32.dll	490	GetFileAttributesW
KERNEL32.dll	871	MultiByteToWideChar
KERNEL32.dll	1297	WideCharToMultiByte
KERNEL32.dll	354	FreeLibrary
KERNEL32.dll	479	GetExitCodeProcess
KERNEL32.dll	738	InitializeCriticalSection
KERNEL32.dll	238	EnterCriticalSection
KERNEL32.dll	825	LeaveCriticalSection
KERNEL32.dll	209	DeleteCriticalSection
KERNEL32.dll	829	LoadLibraryExA
KERNEL32.dll	830	LoadLibraryExW
KERNEL32.dll	535	GetModuleHandleExW
KERNEL32.dll	905	OutputDebugStringA
KERNEL32.dll	772	IsProcessorFeaturePresent
KERNEL32.dll	1235	UnhandledExceptionFilter
KERNEL32.dll	1189	SetUnhandledExceptionFilter
KERNEL32.dll	611	GetStartupInfoW
KERNEL32.dll	536	GetModuleHandleW
KERNEL32.dll	935	QueryPerformanceCounter
KERNEL32.dll	449	GetCurrentProcessId
KERNEL32.dll	453	GetCurrentThreadId
KERNEL32.dll	633	GetSystemTimeAsFileTime
KERNEL32.dll	743	InitializeSListHead
KERNEL32.dll	1216	TerminateProcess
KERNEL32.dll	945	RaiseException
KERNEL32.dll	750	InterlockedFlushSList
KERNEL32.dll	1048	RtlUnwind
KERNEL32.dll	1139	SetLastError
KERNEL32.dll	739	InitializeCriticalSectionAndSpinCount
KERNEL32.dll	1221	TlsAlloc
KERNEL32.dll	1223	TlsGetValue
KERNEL32.dll	1224	TlsSetValue
KERNEL32.dll	1222	TlsFree
KERNEL32.dll	499	GetFileType
KERNEL32.dll	281	ExitProcess
KERNEL32.dll	531	GetModuleFileNameA
KERNEL32.dll	719	HeapFree
KERNEL32.dll	715	HeapAlloc
KERNEL32.dll	813	LCMapStringW
KERNEL32.dll	1159	SetStdHandle
KERNEL32.dll	612	GetStdHandle
KERNEL32.dll	360	GetACP
KERNEL32.dll	617	GetStringTypeW
KERNEL32.dll	428	GetConsoleMode
KERNEL32.dll	302	FindClose
KERNEL32.dll	307	FindFirstFileExA
KERNEL32.dll	323	FindNextFileA
KERNEL32.dll	778	IsValidCodePage
KERNEL32.dll	567	GetOEMCP
KERNEL32.dll	370	GetCPInfo
KERNEL32.dll	390	GetCommandLineA
KERNEL32.dll	474	GetEnvironmentStringsW
KERNEL32.dll	353	FreeEnvironmentStringsW
KERNEL32.dll	586	GetProcessHeap
KERNEL32.dll	343	FlushFileBuffers
KERNEL32.dll	410	GetConsoleCP
KERNEL32.dll	724	HeapSize
KERNEL32.dll	722	HeapReAlloc

ord	entry_va	function_name
1	0x66a0	_steam@12

module_name	steamdrmp.dll
flags	0
timestamp	2106-02-07 06:28:15
version	0.0
ordinal_base	1
nFunctions	1
nNames	1
Names(1)	0x1fc5c
Functions(1)	0x1fc58
NameOrdinals(1)	0x1fc60

show previews

offset	size	type	comment
0	136192	DLL	01/21/2019 23:21:01	#
15c1	15	HTM		#

offset:( 0x )size:( 0x )hotkeys:-=[]<>, offset/size fields are also editable

Please donate some bucks to keep this site up and running:
Ko-fi
Yandex.Money
Thank you!

everything is OK