parentsteamclient.dll
filenamesteamclient.unpacked.dll
size671008 (0xa3d20)
md5320fbf3e2ddf33f4cea1b7f15853ed89
typePE32 executable (DLL) (GUI) Intel 80386, for MS Windows
mimetypeapplication/x-dosexec
clamavOK
virustotal→ scan with virustotal.com
histogram

MZ Header

signatureMZ
bytes_in_last_block0x90
blocks_in_file3
num_relocs0
header_paragraphs4
min_extra_paragraphs0
max_extra_paragraphs0xffff
ss0
sp0xb8
checksum0
ip0
cs0
reloc_table_offset0x40
overlay_number0
reserved00
oem_id0
oem_info0
reserved20
reserved30
reserved40
reserved50
reserved60
lfanew0xf8

Rich Header

lib idversiontimes used
123507272
2252100571
2232100530
22421005235
2036550115
10148
2284062975
220406291
219210051
222406291

DOS stub

00000000: 0e 1f ba 0e 00 b4 09 cd  21 b8 01 4c cd 21 54 68  |........!..L.!Th|
00000010: 69 73 20 70 72 6f 67 72  61 6d 20 63 61 6e 6e 6f  |is program canno|
00000020: 74 20 62 65 20 72 75 6e  20 69 6e 20 44 4f 53 20  |t be run in DOS |
00000030: 6d 6f 64 65 2e 0d 0d 0a  24 00 00 00 00 00 00 00  |mode....$.......|

PE Header

SignaturePE
Machine0x14c
NumberOfSections5
TimeDateStamp0x5a8f727a
PointerToSymbolTable0
NumberOfSymbols0
SizeOfOptionalHeader0xe0
Characteristics0x2102
Magic0x10b
LinkerVersion12.0
SizeOfCode0x56000
SizeOfInitializedData0x51800
SizeOfUninitializedData0
AddressOfEntryPoint0x143ea
BaseOfCode0x1000
BaseOfData0x57000
ImageBase0x10000000
SectionAlignment0x1000
FileAlignment0x200
OperatingSystemVersion6.0
ImageVersion0.0
SubsystemVersion6.0
Reserved10
SizeOfImage0xaa000
SizeOfHeaders0x1000
CheckSum0
Subsystem2
DllCharacteristics0x140
SizeOfStackReserve0x100000
SizeOfStackCommit0x1000
SizeOfHeapReserve0x100000
SizeOfHeapCommit0x1000
LoaderFlags0
NumberOfRvaAndSizes0x10

Packer / Compiler

MS Visual C++ 6.0 - 8.0

Sections

namevavsizeraw sizeflags
.text0x10000x55f3c0x56000R-X CODE
.rdata0x570000x1918c0x19200R-- IDATA
.data0x710000x2fffc0x2bc00RW- IDATA
.rsrc0xa10000x6d80x800R-- IDATA
.reloc0xa20000x7d340x7e00R-- IDATA DISCARDABLE

Data Directory

typevasize
EXPORT0x6ec100x7d9
IMPORT0x6f3ec0xb4
RESOURCE0xa10000x6d8
EXCEPTION00
SECURITY00
BASERELOC0xa20000x7d34
DEBUG00
ARCHITECTURE00
GLOBALPTR00
TLS00
LOAD_CONFIG0x642600x40
Bound_IAT00
IAT00
Delay_IAT00
CLR_Header00
typenamesizecp
VERSION#18800
VERSION#17600
module_namehintordfunction_name
KERNEL32.DLLSleep
KERNEL32.DLLCloseHandle
KERNEL32.DLLDisableThreadLibraryCalls
KERNEL32.DLLGetModuleHandleExA
KERNEL32.DLLGetModuleFileNameA
KERNEL32.DLLGetModuleFileNameW
KERNEL32.DLLGetSystemTime
KERNEL32.DLLSystemTimeToFileTime
KERNEL32.DLLGetCurrentProcessId
KERNEL32.DLLSetEnvironmentVariableA
KERNEL32.DLLCreateFileMappingA
KERNEL32.DLLMapViewOfFile
KERNEL32.DLLCreateEventA
KERNEL32.DLLSetEvent
KERNEL32.DLLGetModuleHandleA
KERNEL32.DLLGetCurrentProcess
KERNEL32.DLLLoadLibraryA
KERNEL32.DLLVirtualProtectEx
KERNEL32.DLLWriteProcessMemory
KERNEL32.DLLFlushInstructionCache
KERNEL32.DLLInitializeCriticalSection
KERNEL32.DLLDeleteCriticalSection
KERNEL32.DLLEnterCriticalSection
KERNEL32.DLLTryEnterCriticalSection
KERNEL32.DLLQueryPerformanceCounter
KERNEL32.DLLExitProcess
KERNEL32.DLLVirtualFree
KERNEL32.DLLVirtualAlloc
KERNEL32.DLLVirtualQuery
KERNEL32.DLLHeapAlloc
KERNEL32.DLLHeapReAlloc
KERNEL32.DLLGetThreadContext
KERNEL32.DLLSetThreadContext
KERNEL32.DLLCreateToolhelp32Snapshot
KERNEL32.DLLThread32First
KERNEL32.DLLGetCurrentThreadId
KERNEL32.DLLThread32Next
KERNEL32.DLLOpenThread
KERNEL32.DLLSuspendThread
KERNEL32.DLLResumeThread
KERNEL32.DLLHeapFree
KERNEL32.DLLVirtualProtect
KERNEL32.DLLHeapCreate
KERNEL32.DLLHeapDestroy
KERNEL32.DLLGetModuleHandleW
KERNEL32.DLLGetProcAddress
KERNEL32.DLLWideCharToMultiByte
KERNEL32.DLLCompareStringW
KERNEL32.DLLGetTimeFormatW
KERNEL32.DLLLCMapStringW
KERNEL32.DLLOutputDebugStringW
KERNEL32.DLLFileTimeToLocalFileTime
KERNEL32.DLLGetFileInformationByHandle
KERNEL32.DLLPeekNamedPipe
KERNEL32.DLLCreateFileW
KERNEL32.DLLGetTimeZoneInformation
KERNEL32.DLLSetEndOfFile
KERNEL32.DLLFreeEnvironmentStringsW
KERNEL32.DLLSetStdHandle
KERNEL32.DLLLeaveCriticalSection
KERNEL32.DLLGetDateFormatW
KERNEL32.DLLEnumSystemLocalesW
KERNEL32.DLLGetUserDefaultLCID
KERNEL32.DLLIsValidLocale
KERNEL32.DLLGetEnvironmentStringsW
KERNEL32.DLLGetLocaleInfoW
KERNEL32.DLLGetLastError
KERNEL32.DLLReadFile
KERNEL32.DLLEncodePointer
KERNEL32.DLLDecodePointer
KERNEL32.DLLGetSystemTimeAsFileTime
KERNEL32.DLLGetDriveTypeW
KERNEL32.DLLGetFullPathNameA
KERNEL32.DLLGetModuleHandleExW
KERNEL32.DLLAreFileApisANSI
KERNEL32.DLLMultiByteToWideChar
KERNEL32.DLLGetCPInfo
KERNEL32.DLLSystemTimeToTzSpecificLocalTime
KERNEL32.DLLFileTimeToSystemTime
KERNEL32.DLLFindClose
KERNEL32.DLLGetFullPathNameW
KERNEL32.DLLGetCommandLineA
KERNEL32.DLLGetProcessHeap
KERNEL32.DLLIsDebuggerPresent
KERNEL32.DLLIsProcessorFeaturePresent
KERNEL32.DLLGetStdHandle
KERNEL32.DLLGetFileType
KERNEL32.DLLGetStartupInfoW
KERNEL32.DLLWriteFile
KERNEL32.DLLGetConsoleCP
KERNEL32.DLLGetConsoleMode
KERNEL32.DLLReadConsoleW
KERNEL32.DLLSetFilePointerEx
KERNEL32.DLLHeapSize
KERNEL32.DLLRaiseException
KERNEL32.DLLIsValidCodePage
KERNEL32.DLLGetACP
KERNEL32.DLLGetOEMCP
KERNEL32.DLLSetLastError
KERNEL32.DLLGetCurrentDirectoryW
KERNEL32.DLLUnhandledExceptionFilter
KERNEL32.DLLSetUnhandledExceptionFilter
KERNEL32.DLLInitializeCriticalSectionAndSpinCount
KERNEL32.DLLTerminateProcess
KERNEL32.DLLTlsAlloc
KERNEL32.DLLTlsGetValue
KERNEL32.DLLTlsSetValue
KERNEL32.DLLTlsFree
KERNEL32.DLLLoadLibraryExW
KERNEL32.DLLFindFirstFileExW
KERNEL32.DLLCreateDirectoryW
KERNEL32.DLLGetStringTypeW
KERNEL32.DLLFlushFileBuffers
KERNEL32.DLLDeleteFileW
KERNEL32.DLLFindNextFileW
KERNEL32.DLLWriteConsoleW
ADVAPI32.dllRegCloseKey
ADVAPI32.dllSetSecurityDescriptorDacl
ADVAPI32.dllInitializeSecurityDescriptor
ADVAPI32.dllRegSetValueExA
ADVAPI32.dllRegQueryValueExA
ADVAPI32.dllRegCreateKeyExA
ADVAPI32.dllRegOpenKeyExA
ADVAPI32.dllCryptGenRandom
ADVAPI32.dllCryptAcquireContextA
ADVAPI32.dllCryptReleaseContext
ntdll.dllRtlInitUnicodeString
ntdll.dllRtlUnwind
PSAPI.DLLGetModuleFileNameExA
PSAPI.DLLEnumProcessModules
SHELL32.dllSHGetFolderPathW
SHELL32.dllSHGetFolderPathA
SHLWAPI.dllPathRemoveFileSpecA
SHLWAPI.dllPathFindFileNameW
SHLWAPI.dllPathFindFileNameA
SHLWAPI.dllPathFileExistsW
USER32.dllMessageBoxA
WS2_32.dll115
ordentry_vafunction_name
10x4d1e8Breakpad_SteamMiniDumpInit
20x4d1e1Breakpad_SteamSetAppID
30x4d1d7Breakpad_SteamSetSteamID
40x4d1cdBreakpad_SteamWriteMiniDumpSetComment
50x4d1c6Breakpad_SteamWriteMiniDumpUsingExceptionInfoWithBuildId
60x4d19cCreateInterface
70x4d13fSteam_BConnected
80x4d12bSteam_BGetCallback
90x4d121Steam_BLoggedOn
100x4d117Steam_BReleaseSteamPipe
110x4d10cSteam_ConnectToGlobalUser
120x4d0e9Steam_CreateGlobalUser
130x4d0f4Steam_CreateLocalUser
140x4d0deSteam_CreateSteamPipe
150x4d0d7Steam_FreeLastCallback
160x4d0cdSteam_GSBLoggedOn
170x4d0c3Steam_GSBSecure
180x4d0b9Steam_GSGetSteam2GetEncryptionKeyToSendToNewClient
190x4d0abSteam_GSGetSteamID
200x4d0a4Steam_GSLogOff
210x4d09dSteam_GSLogOn
220x4d093Steam_GSRemoveUserConnect
230x4d089Steam_GSSendSteam2UserConnect
240x4d07fSteam_GSSendSteam3UserConnect
250x4d075Steam_GSSendUserDisconnect
260x4d06bSteam_GSSendUserStatusResponse
270x4d061Steam_GSSetServerType
280x4d05aSteam_GSSetSpawnCount
290x4d050Steam_GSUpdateStatus
300x4d02cSteam_GetAPICallResult
310x4d022Steam_GetGSHandle
320x4d018Steam_InitiateGameConnection
330x4d011Steam_LogOff
340x4d00aSteam_LogOn
350x4cfeeSteam_ReleaseThreadLocalMemory
360x4d003Steam_ReleaseUser
370x4cffcSteam_SetLocalIPBinding
380x4cff5Steam_TerminateGameConnection
390x4d192VR_GetGenericInterfaceInternal
400x4d185VR_GetStringForHmdErrorInternal
410x4d15aVR_InitInternal
420x4d149VR_IsHmdPresentInternal
430x4d153VR_ShutdownInternal
440x4cfe7hid_close
450x4cfddhid_enumerate
460x4cfd0hid_error
470x4cfc6hid_exit
480x4cfbfhid_free_enumeration
490x4cfb5hid_get_feature_report
500x4cfabhid_get_indexed_string
510x4cfa1hid_get_manufacturer_string
520x4cf97hid_get_product_string
530x4cf8dhid_get_serial_number_string
540x4cf83hid_init
550x4cf79hid_open
560x4cf6fhid_open_path
570x4cf65hid_read
580x4cf5bhid_read_timeout
590x4cf51hid_send_feature_report
600x4cf47hid_set_nonblocking
610x4cf3dhid_write
module_namesteamclient.dll
flags0
timestamp2018-02-23 01:46:26
version0.0
ordinal_base1
nFunctions61
nNames61
Names(61)0x6ed2c
Functions(61)0x6ec38
NameOrdinals(61)0x6ee20

StringTable 040904B0

LegalCopyrightCopyright (C) NisCkxU544c
InternalNameSteam Client API
FileVersion01.0.1.17
CompanyNameValve Corporation
ProductVersion01.00.00.01
FileDescriptionSteam Client API (buildbot_winslave007@WUS)
Source Control ID1337110
OriginalFilenamesteam_api.dll
ProductNameSteam Client API

StringTable 040904B0

CompanyNameValve Corporation
FileDescriptionSteam Client API
FileVersion1, 0, 0, 1
InternalNameSteam Client API
LegalCopyrightCopyright (C) 2007
OriginalFilenamesteam_api.dll
ProductNameSteam Client API
ProductVersion1, 0, 0, 1

VS_FIXEDFILEINFO

FileVersion1.0.1.17
ProductVersion1.0.0.1
StrucVersion0x10000
FileFlagsMask0x17
FileFlags0
FileOS4
FileType2
FileSubtype0

VS_FIXEDFILEINFO

FileVersion1.0.0.1
ProductVersion1.0.0.1
StrucVersion0x10000
FileFlagsMask0x17
FileFlags0
FileOS4
FileType2
FileSubtype0
offsetsizetypecomment
0669696DLL02/23/2018 01:46:34#
15c115HTM#
a38001312BINoverlay data past EOF#
Scanning the drive for archives:
1 file, 671008 bytes (656 KiB)



Errors: 1
offset:( 0x )size:( 0x )hotkeys:-=[]<>, offset/size fields are also editable











everything is OK