filenamesteam_api64.dll
size300320 (0x49520)
md56e84e20f5dd2c65a52a5f0e021cd6f92
typePE32+ executable (DLL) (GUI) x86-64, for MS Windows
mimetypeapplication/x-dosexec
clamavOK
virustotal→ scan with virustotal.com
histogram

MZ Header

signatureMZ
bytes_in_last_block0x90
blocks_in_file3
num_relocs0
header_paragraphs4
min_extra_paragraphs0
max_extra_paragraphs0xffff
ss0
sp0xb8
checksum0
ip0
cs0
reloc_table_offset0x40
overlay_number0
reserved00
oem_id0
oem_info0
reserved20
reserved30
reserved40
reserved50
reserved60
lfanew0x100

Rich Header

lib idversiontimes used
123507272
2252080672
22420806236
2232080612
2036550115
10139
2284062975
220406291
219210051
222406291

DOS stub

00000000: 0e 1f ba 0e 00 b4 09 cd  21 b8 01 4c cd 21 54 68  |........!..L.!Th|
00000010: 69 73 20 70 72 6f 67 72  61 6d 20 63 61 6e 6e 6f  |is program canno|
00000020: 74 20 62 65 20 72 75 6e  20 69 6e 20 44 4f 53 20  |t be run in DOS |
00000030: 6d 6f 64 65 2e 0d 0d 0a  24 00 00 00 00 00 00 00  |mode....$.......|

PE Header

SignaturePE
Machine0x8664
NumberOfSections3
TimeDateStamp0x5a8f7264
PointerToSymbolTable0
NumberOfSymbols0
SizeOfOptionalHeader0xf0
Characteristics0x2022
Magic0x20b
LinkerVersion12.0
SizeOfCode0x48000
SizeOfInitializedData0x2000
SizeOfUninitializedData0x93000
AddressOfEntryPoint0xdb100
BaseOfCode0x94000
ImageBase0x180000000
SectionAlignment0x1000
FileAlignment0x200
OperatingSystemVersion6.0
ImageVersion0.0
SubsystemVersion6.0
Reserved10
SizeOfImage0xde000
SizeOfHeaders0x1000
CheckSum0x53d33
Subsystem2
DllCharacteristics0x160
SizeOfStackReserve0x100000
SizeOfStackCommit0x1000
SizeOfHeapReserve0x100000
SizeOfHeapCommit0x1000
LoaderFlags0
NumberOfRvaAndSizes0x10

Sections

namevavsizeraw sizeflags
WUS00x10000x930000RWX UDATA
WUS10x940000x480000x47600RWX IDATA
.rsrc0xdc0000x20000x1600RW- IDATA

Data Directory

typevasize
EXPORT0xdc8d40xbe0
IMPORT0xdc6e00x1f4
RESOURCE0xdc0000x6e0
EXCEPTION0xce0000x4950
SECURITY0x490000x520
BASERELOC0xdd4b40xc
DEBUG00
ARCHITECTURE00
GLOBALPTR00
TLS00
LOAD_CONFIG0xdb3a80x70
Bound_IAT00
IAT00
Delay_IAT00
CLR_Header00
typenamesizecp
VERSION#18800
VERSION#17600
module_namehintordfunction_name
KERNEL32.DLLLoadLibraryA
KERNEL32.DLLGetProcAddress
KERNEL32.DLLVirtualProtect
ntdll.dllRtlUnwindEx
PSAPI.DLLEnumProcessModules
SHELL32.dllSHGetFolderPathA
SHLWAPI.dllPathFileExistsW
USER32.dllMessageBoxA
WS2_32.dll115
ordentry_vafunction_name
10x1cee0GetHSteamPipe
20x1cee0GetHSteamUser
30x1cee0SteamAPI_GetHSteamPipe
40x1cee0SteamAPI_GetHSteamUser
50x1cec8SteamAPI_GetSteamInstallPath
60x1cd04SteamAPI_Init
70x1cd04SteamAPI_InitSafe
80x1cc8cSteamAPI_IsSteamRunning
90x1cab8SteamAPI_RegisterCallResult
100x1c86cSteamAPI_RegisterCallback
110x1cc84SteamAPI_ReleaseCurrentThreadMemory
120x1cca0SteamAPI_RestartApp
130x1cca0SteamAPI_RestartAppIfNecessary
140x1c858SteamAPI_RunCallbacks
150x1cc84SteamAPI_SetBreakpadAppID
160x1cc84SteamAPI_SetMiniDumpComment
170x1cc84SteamAPI_SetTryCatchCallbacks
180x1ccb4SteamAPI_Shutdown
190x1cbd4SteamAPI_UnregisterCallResult
200x1c99cSteamAPI_UnregisterCallback
210x1cc84SteamAPI_UseBreakpadCrashHandler
220x1cc84SteamAPI_WriteMiniDump
230x1d03cSteamAppList
240x1ce04SteamApps
250x1cce8SteamClient
260x1cf94SteamContentServer
270x1cd94SteamContentServerUtils
280x1cc8cSteamContentServer_Init
290x1cc84SteamContentServer_RunCallbacks
300x1cc84SteamContentServer_Shutdown
310x1d004SteamController
320x1cca0SteamEncryptedAppTicket_BDecryptTicket
330x1cca0SteamEncryptedAppTicket_BIsTicketForApp
340x1cca0SteamEncryptedAppTicket_BUserIsVacBanned
350x1cc8cSteamEncryptedAppTicket_BUserOwnsAppInTicket
360x1cf2cSteamEncryptedAppTicket_GetTicketAppID
370x1cf2cSteamEncryptedAppTicket_GetTicketIssueTime
380x1cc84SteamEncryptedAppTicket_GetTicketSteamID
390x1cf2cSteamEncryptedAppTicket_GetUserVariableData
400x1cd78SteamFriends
410x1cf40SteamGameServer
420x1cfb0SteamGameServerHTTP
430x1ce3cSteamGameServerInventory
440x1ce20SteamGameServerNetworking
450x1cf78SteamGameServerStats
460x1d020SteamGameServerUGC
470x1cd94SteamGameServerUtils
480x1cef8SteamGameServer_BSecure
490x1cee0SteamGameServer_GetHSteamPipe
500x1cee0SteamGameServer_GetHSteamUser
510x1cf2cSteamGameServer_GetIPCCallCount
520x1cf14SteamGameServer_GetSteamID
530x1cef8SteamGameServer_Init
540x1cef8SteamGameServer_InitSafe
550x1c858SteamGameServer_RunCallbacks
560x1cc84SteamGameServer_Shutdown
570x1d090SteamHTMLSurface
580x1cfb0SteamHTTP
590x1cd14SteamInternal_ContextInit
600x1d0e4SteamInternal_CreateInterface
610x1cc8cSteamInternal_GameServer_Init
620x1cf2cSteamInternal_GlobalContextGameServerPtr
630x1cd04SteamInternal_Init
640x1ce3cSteamInventory
650x1cf5cSteamMasterServerUpdater
660x1cdb0SteamMatchmaking
670x1cdccSteamMatchmakingServers
680x1d058SteamMusic
690x1d074SteamMusicRemote
700x1ce20SteamNetworking
710x1ce74SteamNetworkingUpdater
720x1ceacSteamParentalSettings
730x1ce90SteamRemoteStorage
740x1cfccSteamScreenshots
750x1d020SteamUGC
760x1cfe8SteamUnifiedMessages
770x1cd5cSteamUser
780x1cde8SteamUserStats
790x1cd94SteamUtils
800x1ce58SteamVideo
810x1cee0Steam_GetHSteamUserCurrent
820x1cc84Steam_RegisterInterfaceFuncs
830x1c858Steam_RunCallbacks
840x1cf2cVR_GetGenericInterface
850x1d0acVR_GetStringForHmdError
860x1d0c4VR_Init
870x1cca0VR_IsHmdPresent
880x1cc84VR_Shutdown
890x1cce8g_pSteamClientGameServer
module_namesteam_api64.dll
flags0
timestamp2018-02-23 01:46:01
version0.0
ordinal_base1
nFunctions89
nNames89
Names(89)0xdca60
Functions(89)0xdc8fc
NameOrdinals(89)0xdcbc4

StringTable 040904B0

LegalCopyrightCopyright (C) NisCkxU544c
InternalNameSteam Client API
FileVersion01.0.1.17
CompanyNameValve Corporation
ProductVersion01.00.00.01
FileDescriptionSteam Client API (buildbot_winslave007@WUS)
Source Control ID1337110
OriginalFilenamesteam_api.dll
ProductNameSteam Client API

StringTable 040904B0

CompanyNameValve Corporation
FileDescriptionSteam Client API
FileVersion1, 0, 0, 1
InternalNameSteam Client API
LegalCopyrightCopyright (C) 2007
OriginalFilenamesteam_api.dll
ProductNameSteam Client API
ProductVersion1, 0, 0, 1

VS_FIXEDFILEINFO

FileVersion1.0.1.17
ProductVersion1.0.0.1
StrucVersion0x10000
FileFlagsMask0x17
FileFlags0
FileOS4
FileType2
FileSubtype0

VS_FIXEDFILEINFO

FileVersion1.0.0.1
ProductVersion1.0.0.1
StrucVersion0x10000
FileFlagsMask0x17
FileFlags0
FileOS4
FileType2
FileSubtype0

Signers (1)

issuer: /CN=\x00W\x00U\x00S\x00!
serial: -2B6C4CE9A4047047B2B1AD41051B986B

Certificates (1)

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
             (Negative)2b:6c:4c:e9:a4:04:70:47:b2:b1:ad:41:05:1b:98:6b
        Signature Algorithm: sha1WithRSA
        Issuer: CN=\x00W\x00U\x00S\x00!
        Validity
            Not Before: Jul  1 08:00:00 2014 GMT
            Not After : Jan  1 08:00:00 2088 GMT
        Subject: CN=\x00W\x00U\x00S\x00!
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:57:00:aa:90:aa:de:a5:2c:1e:92:b3:32:c3:
                    74:33:28:60:41:7c:eb:98:76:89:53:97:f5:e0:f5:
                    7d:14:83:d6:01:54:59:1b:f5:1f:dc:dc:a4:19:81:
                    17:f8:74:18:14:ea:6c:94:03:ce:10:ea:f5:1d:37:
                    9b:19:20:d4:cc:e3:e9:c6:8f:33:93:4a:85:e4:44:
                    d0:d7:6d:c2:27:15:4d:3e:e3:cb:4b:84:0f:d7:d3:
                    97:18:ee:28:e8:20:c1:51:d0:20:f2:e0:59:46:01:
                    b3:c4:63:9a:e4:d3:83:fd:e0:65:86:a2:d6:12:3a:
                    ca:35:9c:a0:cf:4a:d5:a8:29:db:a3:8c:68:9b:ab:
                    ca:52:a5:93:e9:72:a1:31:25:6a:03:93:c2:6d:2b:
                    23:f7:78:07:c4:c5:15:52:d4:fa:61:17:5b:25:57:
                    94:bf:5e:49:21:53:5e:f5:fb:be:00:2d:09:7d:f2:
                    1a:8d:93:54:8d:82:ea:75:9e:e8:03:ae:89:5c:49:
                    a0:c7:64:92:5e:22:8e:3d:fe:13:f4:e6:0b:89:5e:
                    60:f3:7e:d9:27:94:c2:37:c2:04:a7:a6:bc:47:c1:
                    12:c9:c9:cb:8d:e1:f2:0c:cb:bb:0f:79:22:95:12:
                    ed:ce:44:83:b4:1c:47:1a:dc:33:8e:88:8e:d5:db:
                    82:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            2.5.29.1: 
                0;..\..k..5.nG ..s....0.1.0...U.....W.U.S.!......[...MNR...g.
    Signature Algorithm: sha1WithRSA
         34:5c:8c:64:ec:b5:bf:c3:b5:67:e2:a1:31:31:7b:79:fd:76:
         a3:50:a8:61:a4:fd:73:c6:b7:e2:8c:e5:11:42:14:4f:17:b6:
         8c:db:e1:9f:cf:b7:92:85:d7:31:70:5f:0d:b9:8e:72:45:ac:
         b8:9b:d8:ae:4d:cb:07:d9:d1:f5:64:a4:98:35:f1:cc:d0:03:
         19:8c:ba:32:01:3f:24:fd:e0:e2:e9:53:ed:6d:ea:5f:0f:e9:
         69:6b:c7:d2:a7:f5:3a:5a:74:fa:9e:5a:e1:64:48:f3:e3:fa:
         46:01:e0:34:aa:78:ab:60:82:fd:d9:09:01:5e:a1:79:a1:d1:
         aa:fd:b2:a0:3b:de:8b:45:34:2d:56:8e:14:d4:ce:02:c2:7c:
         a3:35:d6:f4:df:fc:2b:b0:5b:48:ea:37:0c:17:39:6b:f6:d6:
         5e:7c:45:7b:52:b7:04:4d:59:7b:e5:e8:bd:8d:49:84:e6:a3:
         b9:8c:8f:1c:36:cd:0a:3f:07:0c:9c:3f:28:f5:72:5c:c5:65:
         ef:98:83:4f:32:f2:24:49:6f:98:98:7f:a2:bc:be:a3:d0:88:
         67:d5:92:4a:4e:be:76:6c:9d:a4:07:fb:49:b8:b4:e3:80:dc:
         ec:a3:76:d3:4c:b1:95:21:f2:6e:0f:fc:fa:55:32:9c:cd:67:
         3c:23:fb:07
pkcs7-signedData
  • 1
    • SHA1: nil
    • 1.3.6.1.4.1.311.2.1.4
      • #0
        • 1.3.6.1.4.1.311.2.1.15
          • :
        • SHA1
          • 22 6a a1 b1 42 62 ed d9  d3 83 e8 3e 9f d9 5e 4c  |"j..Bb.....>..^L|
5c 53 b4 57                                       |\S.W            |
    • #2
      • 2
        • -57719131853525794810908100208052901995
        • RSA-SHA1-2: nil
        • CN: 
          00 57 00 55 00 53 00 21                           |.W.U.S.!        |
        • 2014-07-01 08:00:00 UTC: 2088-01-01 08:00:00 UTC
        • CN: 
          00 57 00 55 00 53 00 21                           |.W.U.S.!        |
        • #5
          • rsaEncryption: nil
          • AB:57:00:AA:90:AA:DE:A5:2C:1E:92:B3:32:C3:74:33:
            28:60:41:7C:EB:98:76:89:53:97:F5:E0:F5:7D:14:83:
            D6:01:54:59:1B:F5:1F:DC:DC:A4:19:81:17:F8:74:18:
            14:EA:6C:94:03:CE:10:EA:F5:1D:37:9B:19:20:D4:CC:
            E3:E9:C6:8F:33:93:4A:85:E4:44:D0:D7:6D:C2:27:15:
            4D:3E:E3:CB:4B:84:0F:D7:D3:97:18:EE:28:E8:20:C1:
            51:D0:20:F2:E0:59:46:01:B3:C4:63:9A:E4:D3:83:FD:
            E0:65:86:A2:D6:12:3A:CA:35:9C:A0:CF:4A:D5:A8:29:
            DB:A3:8C:68:9B:AB:CA:52:A5:93:E9:72:A1:31:25:6A:
            03:93:C2:6D:2B:23:F7:78:07:C4:C5:15:52:D4:FA:61:
            17:5B:25:57:94:BF:5E:49:21:53:5E:F5:FB:BE:00:2D:
            09:7D:F2:1A:8D:93:54:8D:82:EA:75:9E:E8:03:AE:89:
            5C:49:A0:C7:64:92:5E:22:8E:3D:FE:13:F4:E6:0B:89:
            5E:60:F3:7E:D9:27:94:C2:37:C2:04:A7:A6:BC:47:C1:
            12:C9:C9:CB:8D:E1:F2:0C:CB:BB:0F:79:22:95:12:ED:
            CE:44:83:B4:1C:47:1A:DC:33:8E:88:8E:D5:DB:82:87            : 0x010001
        • 2.5.29.1
          • 5c ac 04 6b ce fd 35 e2  6e 47 20 d0 fd 73 d7 cf  |\..k..5.nG ..s..|
            • CN: 
              00 57 00 55 00 53 00 21                           |.W.U.S.!        |
            • d4 93 b3 16 5b fb 8f b8  4d 4e 52 be fa e4 67 95  |....[...MNR...g.|
      • RSA-SHA1-2: 
        34 5c 8c 64 ec b5 bf c3  b5 67 e2 a1 31 31 7b 79  |4\.d.....g..11{y|
fd 76 a3 50 a8 61 a4 fd  73 c6 b7 e2 8c e5 11 42  |.v.P.a..s......B|
14 4f 17 b6 8c db e1 9f  cf b7 92 85 d7 31 70 5f  |.O...........1p_|
0d b9 8e 72 45 ac b8 9b  d8 ae 4d cb 07 d9 d1 f5  |...rE.....M.....|
64 a4 98 35 f1 cc d0 03  19 8c ba 32 01 3f 24 fd  |d..5.......2.?$.|
e0 e2 e9 53 ed 6d ea 5f  0f e9 69 6b c7 d2 a7 f5  |...S.m._..ik....|
3a 5a 74 fa 9e 5a e1 64  48 f3 e3 fa 46 01 e0 34  |:Zt..Z.dH...F..4|
aa 78 ab 60 82 fd d9 09  01 5e a1 79 a1 d1 aa fd  |.x.`.....^.y....|
b2 a0 3b de 8b 45 34 2d  56 8e 14 d4 ce 02 c2 7c  |..;..E4-V......||
a3 35 d6 f4 df fc 2b b0  5b 48 ea 37 0c 17 39 6b  |.5....+.[H.7..9k|
f6 d6 5e 7c 45 7b 52 b7  04 4d 59 7b e5 e8 bd 8d  |..^|E{R..MY{....|
49 84 e6 a3 b9 8c 8f 1c  36 cd 0a 3f 07 0c 9c 3f  |I.......6..?...?|
28 f5 72 5c c5 65 ef 98  83 4f 32 f2 24 49 6f 98  |(.r\.e...O2.$Io.|
98 7f a2 bc be a3 d0 88  67 d5 92 4a 4e be 76 6c  |........g..JN.vl|
9d a4 07 fb 49 b8 b4 e3  80 dc ec a3 76 d3 4c b1  |....I.......v.L.|
95 21 f2 6e 0f fc fa 55  32 9c cd 67 3c 23 fb 07  |.!.n...U2..g<#..|
    • 1
      • #0
        • CN: 
          00 57 00 55 00 53 00 21                           |.W.U.S.!        |
        • -57719131853525794810908100208052901995
      • SHA1: nil
      • #2
        • 1.3.6.1.4.1.311.2.1.12
          • nil
        • contentType: 1.3.6.1.4.1.311.2.1.4
        • messageDigest: 
          05 c1 c5 77 d2 65 21 fc  7c 50 cf cd a8 6f 1d 60  |...w.e!.|P...o.`|
a9 0d a1 e7                                       |....            |
      • rsaEncryption: 
        64 96 f1 cf 8e 39 6e dd  1b 04 de 22 5c 5d a6 27  |d....9n...."\].'|
8c 69 1b bc c2 a8 1f a6  75 0c 06 24 73 f3 e5 43  |.i......u..$s..C|
f1 53 5a 86 ff fa a2 8f  d8 56 e9 86 2e e5 d2 1d  |.SZ......V......|
30 b7 0f 7f f5 9f 9a ca  66 46 c1 b9 9e 04 d6 04  |0.......fF......|
79 a2 57 5a 9a 40 b8 bf  39 24 15 10 1f 41 1e 1e  |y.WZ.@..9$...A..|
1a 34 4c 99 36 73 f3 1b  75 9d 74 cb 2e f8 59 64  |.4L.6s..u.t...Yd|
81 f3 05 9b 43 ac b3 92  d5 e1 33 8c e3 e3 db fc  |....C.....3.....|
8e 06 ed 71 f5 5a 6f e6  20 a0 cb 4d a5 50 37 23  |...q.Zo. ..M.P7#|
fa fe f6 05 f1 19 31 5a  9a a5 33 1b f8 34 1d 85  |......1Z..3..4..|
61 06 57 dc 1f 6c c6 d9  42 c3 3c c2 1d a5 f4 ce  |a.W..l..B.<.....|
04 c5 32 c4 75 9d b5 2a  48 1e 31 c6 7c 6f 27 bf  |..2.u..*H.1.|o'.|
4c a7 e1 20 2d dd 99 e3  64 01 28 2a 17 20 1a d3  |L.. -...d.(*. ..|
7a 23 69 2c e9 55 f6 44  46 08 ec 25 c0 47 61 1f  |z#i,.U.DF..%.Ga.|
8f 37 1a 2f 60 bc 20 7f  92 64 58 35 9d 05 07 b2  |.7./`. ..dX5....|
2d 92 63 39 00 89 4e 4e  9c bb b1 79 1c cb 24 50  |-.c9..NN...y..$P|
c4 9d 1b 67 35 8f ff 6c  1d cd 62 0d 83 ca 45 28  |...g5..l..b...E(|
offsetsizetypecomment
15c115HTM#
15d0294736BINoverlay data past EOF#
offset:( 0x )size:( 0x )hotkeys:-=[]<>, offset/size fields are also editable







everything is OK