Online_V3[.]rar

Sharing

Copy URL Twitter E-mail

General

Target

Online_V3.rar
Size

14.4MB
MD5

c6a86b61f3d97dfc4a5ba1dd77ca4dfe
SHA1

1fe1b8a9140e6487af8c7ac7bad1391f7e5a97d6
SHA256

4b5273ffde75ad096089a7cd078fb0dc4e0bd030767599d741c2ae8f6760d516
SHA512

a454cc29f8cd083fda54302e33386e41a468e8c40786ecc4f3bf33a7b43536566fc5e70b6d36464b0a24662d9360cd0b57c773b9585f93dfd905620ef40162cc
SSDEEP

393216:aiNgj7+7dbZi2YMyAEWMHB2/57uwRawoGrp+59:aiNgS62hfTMHB2/5FLoGrp+59

Score

3^/10

Malware Config

Signatures

Unsigned PE 5 IoCs

Checks for missing Authenticode signature.

resource
unpack001/Online_V3/EOSAuthLauncher.exe
unpack001/Online_V3/GothamKnights.exe
unpack001/Online_V3/Mercury/Binaries/Win64/Custom.dll
unpack001/Online_V3/Mercury/Binaries/Win64/OnlineFix64.dll
unpack001/Online_V3/Mercury/Binaries/Win64/winmm.dll

Files

Online_V3.rar
.rar
Online_V3/EOSAuthLauncher.exe
.exe windows:6 windows x86

48077b0dadc561e7d7110a970b9f9e4b

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

MultiByteToWideChar
Sleep
GetLastError
LoadLibraryW
GetCurrentDirectoryW
ExitProcess
SetEnvironmentVariableA
CreateProcessW
VirtualQuery
VirtualProtect
GetSystemInfo
CloseHandle
EnterCriticalSection
LeaveCriticalSection
InitializeCriticalSectionAndSpinCount
DeleteCriticalSection
SetEvent
ResetEvent
WaitForSingleObjectEx
CreateEventW
GetModuleHandleW
GetProcAddress
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
IsProcessorFeaturePresent
IsDebuggerPresent
GetStartupInfoW
QueryPerformanceCounter
GetCurrentProcessId
GetCurrentThreadId
GetSystemTimeAsFileTime
InitializeSListHead
RtlUnwind
RaiseException
SetLastError
EncodePointer
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
FreeLibrary
LoadLibraryExW
ReadFile
GetStdHandle
WriteFile
GetModuleFileNameW
GetModuleHandleExW
SetFilePointerEx
GetConsoleMode
ReadConsoleW
GetFileType
HeapAlloc
HeapFree
LCMapStringW
FindClose
FindFirstFileExW
FindNextFileW
IsValidCodePage
GetACP
GetOEMCP
GetCPInfo
GetCommandLineA
GetCommandLineW
WideCharToMultiByte
GetEnvironmentStringsW
FreeEnvironmentStringsW
SetStdHandle
GetStringTypeW
GetProcessHeap
FlushFileBuffers
GetConsoleOutputCP
CreateFileW
HeapSize
HeapReAlloc
SetEndOfFile
WriteConsoleW
DecodePointer
LoadLibraryExA

user32

MessageBoxA

Sections

.text
Size: 91KB - Virtual size: 90KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 27KB - Virtual size: 26KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 2KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 136KB - Virtual size: 136KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Online_V3/Engine/Binaries/ThirdParty/Steamworks/Steamv153/Win64/steam_api64.dll
.dll windows:6 windows x64

c69c22b5a3698527f0d3c9618c3affbd

Code Sign

0d:42:4a:e0:be:3a:88:ff:60:40:21:ce:14:00:f0:dd
Certificate

Issuer

CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

01/01/2021, 00:00

Not After

06/01/2031, 00:00

Subject

CN=DigiCert Timestamp 2021,O=DigiCert\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

0a:a1:25:d6:d6:32:1b:7e:41:e4:05:da:36:97:c2:15
Certificate

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

07/01/2016, 12:00

Not After

07/01/2031, 12:00

Subject

CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

05:9b:1b:57:9e:8e:21:32:e2:39:07:bd:a7:77:75:5c
Certificate

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

01/08/2013, 12:00

Not After

15/01/2038, 12:00

Subject

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

08:ad:40:b2:60:d2:9c:4c:9f:5e:cd:a9:bd:93:ae:d9
Certificate

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

29/04/2021, 00:00

Not After

28/04/2036, 23:59

Subject

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

06:89:b3:bc:eb:44:09:89:0a:32:d7:19:76:b1:32:a4
Certificate

Issuer

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

Not Before

07/10/2021, 00:00

Not After

09/10/2024, 23:59

Subject

CN=Valve Corp.,O=Valve Corp.,L=Bellevue,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

23:43:7e:d8:bb:1b:86:b5:4a:d9:c3:c2:29:61:7a:50:09:43:46:3a:08:9c:52:5d:84:0f:48:34:12:74:f1:91
Signer

Actual PE Digest

23:43:7e:d8:bb:1b:86:b5:4a:d9:c3:c2:29:61:7a:50:09:43:46:3a:08:9c:52:5d:84:0f:48:34:12:74:f1:91

Digest Algorithm

sha256

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

Imports

kernel32

TlsGetValue
TlsSetValue
TlsFree
FreeLibrary
LoadLibraryExW
GetCommandLineW
GetEnvironmentVariableA
SetEnvironmentVariableA
GetCurrentDirectoryW
GetFileAttributesW
GetFileAttributesExW
OutputDebugStringA
TlsAlloc
InitializeCriticalSection
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
GetExitCodeProcess
OpenProcess
GetModuleFileNameW
GetModuleHandleA
GetModuleHandleExW
LoadLibraryExA
MultiByteToWideChar
WideCharToMultiByte
WriteConsoleW
InitializeCriticalSectionAndSpinCount
GetLastError
CloseHandle
GetProcAddress
SetEndOfFile
SetEvent
ResetEvent
WaitForSingleObjectEx
CreateEventW
GetModuleHandleW
RtlCaptureContext
RtlLookupFunctionEntry
RtlVirtualUnwind
IsDebuggerPresent
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetStartupInfoW
IsProcessorFeaturePresent
QueryPerformanceCounter
GetCurrentProcessId
GetCurrentThreadId
GetSystemTimeAsFileTime
InitializeSListHead
RtlPcToFileHeader
RaiseException
RtlUnwindEx
InterlockedFlushSList
SetLastError
EncodePointer
GetCurrentProcess
TerminateProcess
ExitProcess
HeapFree
HeapAlloc
GetStdHandle
GetFileType
LCMapStringW
ReadFile
GetConsoleMode
ReadConsoleW
FindClose
FindFirstFileExW
FindNextFileW
IsValidCodePage
GetACP
GetOEMCP
GetCPInfo
GetCommandLineA
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetProcessHeap
GetFileSizeEx
SetFilePointerEx
GetStringTypeW
SetStdHandle
FlushFileBuffers
WriteFile
GetConsoleOutputCP
CreateFileW
HeapSize
HeapReAlloc

advapi32

RegOpenKeyExW
RegCloseKey
RegQueryValueExW

shell32

ShellExecuteW

Exports

Exports

GetHSteamPipe
GetHSteamUser
SteamAPI_GetHSteamPipe
SteamAPI_GetHSteamUser
SteamAPI_GetSteamInstallPath
SteamAPI_ISteamAppList_GetAppBuildId
SteamAPI_ISteamAppList_GetAppInstallDir
SteamAPI_ISteamAppList_GetAppName
SteamAPI_ISteamAppList_GetInstalledApps
SteamAPI_ISteamAppList_GetNumInstalledApps
SteamAPI_ISteamApps_BGetDLCDataByIndex
SteamAPI_ISteamApps_BIsAppInstalled
SteamAPI_ISteamApps_BIsCybercafe
SteamAPI_ISteamApps_BIsDlcInstalled
SteamAPI_ISteamApps_BIsLowViolence
SteamAPI_ISteamApps_BIsSubscribed
SteamAPI_ISteamApps_BIsSubscribedApp
SteamAPI_ISteamApps_BIsSubscribedFromFamilySharing
SteamAPI_ISteamApps_BIsSubscribedFromFreeWeekend
SteamAPI_ISteamApps_BIsTimedTrial
SteamAPI_ISteamApps_BIsVACBanned
SteamAPI_ISteamApps_GetAppBuildId
SteamAPI_ISteamApps_GetAppInstallDir
SteamAPI_ISteamApps_GetAppOwner
SteamAPI_ISteamApps_GetAvailableGameLanguages
SteamAPI_ISteamApps_GetCurrentBetaName
SteamAPI_ISteamApps_GetCurrentGameLanguage
SteamAPI_ISteamApps_GetDLCCount
SteamAPI_ISteamApps_GetDlcDownloadProgress
SteamAPI_ISteamApps_GetEarliestPurchaseUnixTime
SteamAPI_ISteamApps_GetFileDetails
SteamAPI_ISteamApps_GetInstalledDepots
SteamAPI_ISteamApps_GetLaunchCommandLine
SteamAPI_ISteamApps_GetLaunchQueryParam
SteamAPI_ISteamApps_InstallDLC
SteamAPI_ISteamApps_MarkContentCorrupt
SteamAPI_ISteamApps_RequestAllProofOfPurchaseKeys
SteamAPI_ISteamApps_RequestAppProofOfPurchaseKey
SteamAPI_ISteamApps_UninstallDLC
SteamAPI_ISteamClient_BReleaseSteamPipe
SteamAPI_ISteamClient_BShutdownIfAllPipesClosed
SteamAPI_ISteamClient_ConnectToGlobalUser
SteamAPI_ISteamClient_CreateLocalUser
SteamAPI_ISteamClient_CreateSteamPipe
SteamAPI_ISteamClient_GetIPCCallCount
SteamAPI_ISteamClient_GetISteamAppList
SteamAPI_ISteamClient_GetISteamApps
SteamAPI_ISteamClient_GetISteamController
SteamAPI_ISteamClient_GetISteamFriends
SteamAPI_ISteamClient_GetISteamGameSearch
SteamAPI_ISteamClient_GetISteamGameServer
SteamAPI_ISteamClient_GetISteamGameServerStats
SteamAPI_ISteamClient_GetISteamGenericInterface
SteamAPI_ISteamClient_GetISteamHTMLSurface
SteamAPI_ISteamClient_GetISteamHTTP
SteamAPI_ISteamClient_GetISteamInput
SteamAPI_ISteamClient_GetISteamInventory
SteamAPI_ISteamClient_GetISteamMatchmaking
SteamAPI_ISteamClient_GetISteamMatchmakingServers
SteamAPI_ISteamClient_GetISteamMusic
SteamAPI_ISteamClient_GetISteamMusicRemote
SteamAPI_ISteamClient_GetISteamNetworking
SteamAPI_ISteamClient_GetISteamParentalSettings
SteamAPI_ISteamClient_GetISteamParties
SteamAPI_ISteamClient_GetISteamRemotePlay
SteamAPI_ISteamClient_GetISteamRemoteStorage
SteamAPI_ISteamClient_GetISteamScreenshots
SteamAPI_ISteamClient_GetISteamUGC
SteamAPI_ISteamClient_GetISteamUser
SteamAPI_ISteamClient_GetISteamUserStats
SteamAPI_ISteamClient_GetISteamUtils
SteamAPI_ISteamClient_GetISteamVideo
SteamAPI_ISteamClient_ReleaseUser
SteamAPI_ISteamClient_SetLocalIPBinding
SteamAPI_ISteamClient_SetWarningMessageHook
SteamAPI_ISteamController_ActivateActionSet
SteamAPI_ISteamController_ActivateActionSetLayer
SteamAPI_ISteamController_DeactivateActionSetLayer
SteamAPI_ISteamController_DeactivateAllActionSetLayers
SteamAPI_ISteamController_GetActionOriginFromXboxOrigin
SteamAPI_ISteamController_GetActionSetHandle
SteamAPI_ISteamController_GetActiveActionSetLayers
SteamAPI_ISteamController_GetAnalogActionData
SteamAPI_ISteamController_GetAnalogActionHandle
SteamAPI_ISteamController_GetAnalogActionOrigins
SteamAPI_ISteamController_GetConnectedControllers
SteamAPI_ISteamController_GetControllerBindingRevision
SteamAPI_ISteamController_GetControllerForGamepadIndex
SteamAPI_ISteamController_GetCurrentActionSet
SteamAPI_ISteamController_GetDigitalActionData
SteamAPI_ISteamController_GetDigitalActionHandle
SteamAPI_ISteamController_GetDigitalActionOrigins
SteamAPI_ISteamController_GetGamepadIndexForController
SteamAPI_ISteamController_GetGlyphForActionOrigin
SteamAPI_ISteamController_GetGlyphForXboxOrigin
SteamAPI_ISteamController_GetInputTypeForHandle
SteamAPI_ISteamController_GetMotionData
SteamAPI_ISteamController_GetStringForActionOrigin
SteamAPI_ISteamController_GetStringForXboxOrigin
SteamAPI_ISteamController_Init
SteamAPI_ISteamController_RunFrame
SteamAPI_ISteamController_SetLEDColor
SteamAPI_ISteamController_ShowBindingPanel
SteamAPI_ISteamController_Shutdown
SteamAPI_ISteamController_StopAnalogActionMomentum
SteamAPI_ISteamController_TranslateActionOrigin
SteamAPI_ISteamController_TriggerHapticPulse
SteamAPI_ISteamController_TriggerRepeatedHapticPulse
SteamAPI_ISteamController_TriggerVibration
SteamAPI_ISteamFriends_ActivateGameOverlay
SteamAPI_ISteamFriends_ActivateGameOverlayInviteDialog
SteamAPI_ISteamFriends_ActivateGameOverlayInviteDialogConnectString
SteamAPI_ISteamFriends_ActivateGameOverlayRemotePlayTogetherInviteDialog
SteamAPI_ISteamFriends_ActivateGameOverlayToStore
SteamAPI_ISteamFriends_ActivateGameOverlayToUser
SteamAPI_ISteamFriends_ActivateGameOverlayToWebPage
SteamAPI_ISteamFriends_ClearRichPresence
SteamAPI_ISteamFriends_CloseClanChatWindowInSteam
SteamAPI_ISteamFriends_DownloadClanActivityCounts
SteamAPI_ISteamFriends_EnumerateFollowingList
SteamAPI_ISteamFriends_GetChatMemberByIndex
SteamAPI_ISteamFriends_GetClanActivityCounts
SteamAPI_ISteamFriends_GetClanByIndex
SteamAPI_ISteamFriends_GetClanChatMemberCount
SteamAPI_ISteamFriends_GetClanChatMessage
SteamAPI_ISteamFriends_GetClanCount
SteamAPI_ISteamFriends_GetClanName
SteamAPI_ISteamFriends_GetClanOfficerByIndex
SteamAPI_ISteamFriends_GetClanOfficerCount
SteamAPI_ISteamFriends_GetClanOwner
SteamAPI_ISteamFriends_GetClanTag
SteamAPI_ISteamFriends_GetCoplayFriend
SteamAPI_ISteamFriends_GetCoplayFriendCount
SteamAPI_ISteamFriends_GetFollowerCount
SteamAPI_ISteamFriends_GetFriendByIndex
SteamAPI_ISteamFriends_GetFriendCoplayGame
SteamAPI_ISteamFriends_GetFriendCoplayTime
SteamAPI_ISteamFriends_GetFriendCount
SteamAPI_ISteamFriends_GetFriendCountFromSource
SteamAPI_ISteamFriends_GetFriendFromSourceByIndex
SteamAPI_ISteamFriends_GetFriendGamePlayed
SteamAPI_ISteamFriends_GetFriendMessage
SteamAPI_ISteamFriends_GetFriendPersonaName
SteamAPI_ISteamFriends_GetFriendPersonaNameHistory
SteamAPI_ISteamFriends_GetFriendPersonaState
SteamAPI_ISteamFriends_GetFriendRelationship
SteamAPI_ISteamFriends_GetFriendRichPresence
SteamAPI_ISteamFriends_GetFriendRichPresenceKeyByIndex
SteamAPI_ISteamFriends_GetFriendRichPresenceKeyCount
SteamAPI_ISteamFriends_GetFriendSteamLevel
SteamAPI_ISteamFriends_GetFriendsGroupCount
SteamAPI_ISteamFriends_GetFriendsGroupIDByIndex
SteamAPI_ISteamFriends_GetFriendsGroupMembersCount
SteamAPI_ISteamFriends_GetFriendsGroupMembersList
SteamAPI_ISteamFriends_GetFriendsGroupName
SteamAPI_ISteamFriends_GetLargeFriendAvatar
SteamAPI_ISteamFriends_GetMediumFriendAvatar
SteamAPI_ISteamFriends_GetNumChatsWithUnreadPriorityMessages
SteamAPI_ISteamFriends_GetPersonaName
SteamAPI_ISteamFriends_GetPersonaState
SteamAPI_ISteamFriends_GetPlayerNickname
SteamAPI_ISteamFriends_GetSmallFriendAvatar
SteamAPI_ISteamFriends_GetUserRestrictions
SteamAPI_ISteamFriends_HasFriend
SteamAPI_ISteamFriends_InviteUserToGame
SteamAPI_ISteamFriends_IsClanChatAdmin
SteamAPI_ISteamFriends_IsClanChatWindowOpenInSteam
SteamAPI_ISteamFriends_IsClanOfficialGameGroup
SteamAPI_ISteamFriends_IsClanPublic
SteamAPI_ISteamFriends_IsFollowing
SteamAPI_ISteamFriends_IsUserInSource
SteamAPI_ISteamFriends_JoinClanChatRoom
SteamAPI_ISteamFriends_LeaveClanChatRoom
SteamAPI_ISteamFriends_OpenClanChatWindowInSteam
SteamAPI_ISteamFriends_RegisterProtocolInOverlayBrowser
SteamAPI_ISteamFriends_ReplyToFriendMessage
SteamAPI_ISteamFriends_RequestClanOfficerList
SteamAPI_ISteamFriends_RequestFriendRichPresence
SteamAPI_ISteamFriends_RequestUserInformation
SteamAPI_ISteamFriends_SendClanChatMessage
SteamAPI_ISteamFriends_SetInGameVoiceSpeaking
SteamAPI_ISteamFriends_SetListenForFriendsMessages
SteamAPI_ISteamFriends_SetPersonaName
SteamAPI_ISteamFriends_SetPlayedWith
SteamAPI_ISteamFriends_SetRichPresence
SteamAPI_ISteamGameSearch_AcceptGame
SteamAPI_ISteamGameSearch_AddGameSearchParams
SteamAPI_ISteamGameSearch_CancelRequestPlayersForGame
SteamAPI_ISteamGameSearch_DeclineGame
SteamAPI_ISteamGameSearch_EndGame
SteamAPI_ISteamGameSearch_EndGameSearch
SteamAPI_ISteamGameSearch_HostConfirmGameStart
SteamAPI_ISteamGameSearch_RequestPlayersForGame
SteamAPI_ISteamGameSearch_RetrieveConnectionDetails
SteamAPI_ISteamGameSearch_SearchForGameSolo
SteamAPI_ISteamGameSearch_SearchForGameWithLobby
SteamAPI_ISteamGameSearch_SetConnectionDetails
SteamAPI_ISteamGameSearch_SetGameHostParams
SteamAPI_ISteamGameSearch_SubmitPlayerResult
SteamAPI_ISteamGameServerStats_ClearUserAchievement
SteamAPI_ISteamGameServerStats_GetUserAchievement
SteamAPI_ISteamGameServerStats_GetUserStatFloat
SteamAPI_ISteamGameServerStats_GetUserStatInt32
SteamAPI_ISteamGameServerStats_RequestUserStats
SteamAPI_ISteamGameServerStats_SetUserAchievement
SteamAPI_ISteamGameServerStats_SetUserStatFloat
SteamAPI_ISteamGameServerStats_SetUserStatInt32
SteamAPI_ISteamGameServerStats_StoreUserStats
SteamAPI_ISteamGameServerStats_UpdateUserAvgRateStat
SteamAPI_ISteamGameServer_AssociateWithClan
SteamAPI_ISteamGameServer_BLoggedOn
SteamAPI_ISteamGameServer_BSecure
SteamAPI_ISteamGameServer_BUpdateUserData
SteamAPI_ISteamGameServer_BeginAuthSession
SteamAPI_ISteamGameServer_CancelAuthTicket
SteamAPI_ISteamGameServer_ClearAllKeyValues
SteamAPI_ISteamGameServer_ComputeNewPlayerCompatibility
SteamAPI_ISteamGameServer_CreateUnauthenticatedUserConnection
SteamAPI_ISteamGameServer_EndAuthSession
SteamAPI_ISteamGameServer_GetAuthSessionTicket
SteamAPI_ISteamGameServer_GetGameplayStats
SteamAPI_ISteamGameServer_GetNextOutgoingPacket
SteamAPI_ISteamGameServer_GetPublicIP
SteamAPI_ISteamGameServer_GetServerReputation
SteamAPI_ISteamGameServer_GetSteamID
SteamAPI_ISteamGameServer_HandleIncomingPacket
SteamAPI_ISteamGameServer_LogOff
SteamAPI_ISteamGameServer_LogOn
SteamAPI_ISteamGameServer_LogOnAnonymous
SteamAPI_ISteamGameServer_RequestUserGroupStatus
SteamAPI_ISteamGameServer_SendUserConnectAndAuthenticate_DEPRECATED
SteamAPI_ISteamGameServer_SendUserDisconnect_DEPRECATED
SteamAPI_ISteamGameServer_SetAdvertiseServerActive
SteamAPI_ISteamGameServer_SetBotPlayerCount
SteamAPI_ISteamGameServer_SetDedicatedServer
SteamAPI_ISteamGameServer_SetGameData
SteamAPI_ISteamGameServer_SetGameDescription
SteamAPI_ISteamGameServer_SetGameTags
SteamAPI_ISteamGameServer_SetKeyValue
SteamAPI_ISteamGameServer_SetMapName
SteamAPI_ISteamGameServer_SetMaxPlayerCount
SteamAPI_ISteamGameServer_SetModDir
SteamAPI_ISteamGameServer_SetPasswordProtected
SteamAPI_ISteamGameServer_SetProduct
SteamAPI_ISteamGameServer_SetRegion
SteamAPI_ISteamGameServer_SetServerName
SteamAPI_ISteamGameServer_SetSpectatorPort
SteamAPI_ISteamGameServer_SetSpectatorServerName
SteamAPI_ISteamGameServer_UserHasLicenseForApp
SteamAPI_ISteamGameServer_WasRestartRequested
SteamAPI_ISteamHTMLSurface_AddHeader
SteamAPI_ISteamHTMLSurface_AllowStartRequest
SteamAPI_ISteamHTMLSurface_CopyToClipboard
SteamAPI_ISteamHTMLSurface_CreateBrowser
SteamAPI_ISteamHTMLSurface_ExecuteJavascript
SteamAPI_ISteamHTMLSurface_FileLoadDialogResponse
SteamAPI_ISteamHTMLSurface_Find
SteamAPI_ISteamHTMLSurface_GetLinkAtPosition
SteamAPI_ISteamHTMLSurface_GoBack
SteamAPI_ISteamHTMLSurface_GoForward
SteamAPI_ISteamHTMLSurface_Init
SteamAPI_ISteamHTMLSurface_JSDialogResponse
SteamAPI_ISteamHTMLSurface_KeyChar
SteamAPI_ISteamHTMLSurface_KeyDown
SteamAPI_ISteamHTMLSurface_KeyUp
SteamAPI_ISteamHTMLSurface_LoadURL
SteamAPI_ISteamHTMLSurface_MouseDoubleClick
SteamAPI_ISteamHTMLSurface_MouseDown
SteamAPI_ISteamHTMLSurface_MouseMove
SteamAPI_ISteamHTMLSurface_MouseUp
SteamAPI_ISteamHTMLSurface_MouseWheel
SteamAPI_ISteamHTMLSurface_OpenDeveloperTools
SteamAPI_ISteamHTMLSurface_PasteFromClipboard
SteamAPI_ISteamHTMLSurface_Reload
SteamAPI_ISteamHTMLSurface_RemoveBrowser
SteamAPI_ISteamHTMLSurface_SetBackgroundMode
SteamAPI_ISteamHTMLSurface_SetCookie
SteamAPI_ISteamHTMLSurface_SetDPIScalingFactor
SteamAPI_ISteamHTMLSurface_SetHorizontalScroll
SteamAPI_ISteamHTMLSurface_SetKeyFocus
SteamAPI_ISteamHTMLSurface_SetPageScaleFactor
SteamAPI_ISteamHTMLSurface_SetSize
SteamAPI_ISteamHTMLSurface_SetVerticalScroll
SteamAPI_ISteamHTMLSurface_Shutdown
SteamAPI_ISteamHTMLSurface_StopFind
SteamAPI_ISteamHTMLSurface_StopLoad
SteamAPI_ISteamHTMLSurface_ViewSource
SteamAPI_ISteamHTTP_CreateCookieContainer
SteamAPI_ISteamHTTP_CreateHTTPRequest
SteamAPI_ISteamHTTP_DeferHTTPRequest
SteamAPI_ISteamHTTP_GetHTTPDownloadProgressPct
SteamAPI_ISteamHTTP_GetHTTPRequestWasTimedOut
SteamAPI_ISteamHTTP_GetHTTPResponseBodyData
SteamAPI_ISteamHTTP_GetHTTPResponseBodySize
SteamAPI_ISteamHTTP_GetHTTPResponseHeaderSize
SteamAPI_ISteamHTTP_GetHTTPResponseHeaderValue
SteamAPI_ISteamHTTP_GetHTTPStreamingResponseBodyData
SteamAPI_ISteamHTTP_PrioritizeHTTPRequest
SteamAPI_ISteamHTTP_ReleaseCookieContainer
SteamAPI_ISteamHTTP_ReleaseHTTPRequest
SteamAPI_ISteamHTTP_SendHTTPRequest
SteamAPI_ISteamHTTP_SendHTTPRequestAndStreamResponse
SteamAPI_ISteamHTTP_SetCookie
SteamAPI_ISteamHTTP_SetHTTPRequestAbsoluteTimeoutMS
SteamAPI_ISteamHTTP_SetHTTPRequestContextValue
SteamAPI_ISteamHTTP_SetHTTPRequestCookieContainer
SteamAPI_ISteamHTTP_SetHTTPRequestGetOrPostParameter
SteamAPI_ISteamHTTP_SetHTTPRequestHeaderValue
SteamAPI_ISteamHTTP_SetHTTPRequestNetworkActivityTimeout
SteamAPI_ISteamHTTP_SetHTTPRequestRawPostBody
SteamAPI_ISteamHTTP_SetHTTPRequestRequiresVerifiedCertificate
SteamAPI_ISteamHTTP_SetHTTPRequestUserAgentInfo
SteamAPI_ISteamInput_ActivateActionSet
SteamAPI_ISteamInput_ActivateActionSetLayer
SteamAPI_ISteamInput_BNewDataAvailable
SteamAPI_ISteamInput_BWaitForData
SteamAPI_ISteamInput_DeactivateActionSetLayer
SteamAPI_ISteamInput_DeactivateAllActionSetLayers
SteamAPI_ISteamInput_EnableActionEventCallbacks
SteamAPI_ISteamInput_EnableDeviceCallbacks
SteamAPI_ISteamInput_GetActionOriginFromXboxOrigin
SteamAPI_ISteamInput_GetActionSetHandle
SteamAPI_ISteamInput_GetActiveActionSetLayers
SteamAPI_ISteamInput_GetAnalogActionData
SteamAPI_ISteamInput_GetAnalogActionHandle
SteamAPI_ISteamInput_GetAnalogActionOrigins
SteamAPI_ISteamInput_GetConnectedControllers
SteamAPI_ISteamInput_GetControllerForGamepadIndex
SteamAPI_ISteamInput_GetCurrentActionSet
SteamAPI_ISteamInput_GetDeviceBindingRevision
SteamAPI_ISteamInput_GetDigitalActionData
SteamAPI_ISteamInput_GetDigitalActionHandle
SteamAPI_ISteamInput_GetDigitalActionOrigins
SteamAPI_ISteamInput_GetGamepadIndexForController
SteamAPI_ISteamInput_GetGlyphForActionOrigin_Legacy
SteamAPI_ISteamInput_GetGlyphForXboxOrigin
SteamAPI_ISteamInput_GetGlyphPNGForActionOrigin
SteamAPI_ISteamInput_GetGlyphSVGForActionOrigin
SteamAPI_ISteamInput_GetInputTypeForHandle
SteamAPI_ISteamInput_GetMotionData
SteamAPI_ISteamInput_GetRemotePlaySessionID
SteamAPI_ISteamInput_GetSessionInputConfigurationSettings
SteamAPI_ISteamInput_GetStringForActionOrigin
SteamAPI_ISteamInput_GetStringForAnalogActionName
SteamAPI_ISteamInput_GetStringForDigitalActionName
SteamAPI_ISteamInput_GetStringForXboxOrigin
SteamAPI_ISteamInput_Init
SteamAPI_ISteamInput_Legacy_TriggerHapticPulse
SteamAPI_ISteamInput_Legacy_TriggerRepeatedHapticPulse
SteamAPI_ISteamInput_RunFrame
SteamAPI_ISteamInput_SetInputActionManifestFilePath
SteamAPI_ISteamInput_SetLEDColor
SteamAPI_ISteamInput_ShowBindingPanel
SteamAPI_ISteamInput_Shutdown
SteamAPI_ISteamInput_StopAnalogActionMomentum
SteamAPI_ISteamInput_TranslateActionOrigin
SteamAPI_ISteamInput_TriggerSimpleHapticEvent
SteamAPI_ISteamInput_TriggerVibration
SteamAPI_ISteamInput_TriggerVibrationExtended
SteamAPI_ISteamInventory_AddPromoItem
SteamAPI_ISteamInventory_AddPromoItems
SteamAPI_ISteamInventory_CheckResultSteamID
SteamAPI_ISteamInventory_ConsumeItem
SteamAPI_ISteamInventory_DeserializeResult
SteamAPI_ISteamInventory_DestroyResult
SteamAPI_ISteamInventory_ExchangeItems
SteamAPI_ISteamInventory_GenerateItems
SteamAPI_ISteamInventory_GetAllItems
SteamAPI_ISteamInventory_GetEligiblePromoItemDefinitionIDs
SteamAPI_ISteamInventory_GetItemDefinitionIDs
SteamAPI_ISteamInventory_GetItemDefinitionProperty
SteamAPI_ISteamInventory_GetItemPrice
SteamAPI_ISteamInventory_GetItemsByID
SteamAPI_ISteamInventory_GetItemsWithPrices
SteamAPI_ISteamInventory_GetNumItemsWithPrices
SteamAPI_ISteamInventory_GetResultItemProperty
SteamAPI_ISteamInventory_GetResultItems
SteamAPI_ISteamInventory_GetResultStatus
SteamAPI_ISteamInventory_GetResultTimestamp
SteamAPI_ISteamInventory_GrantPromoItems
SteamAPI_ISteamInventory_InspectItem
SteamAPI_ISteamInventory_LoadItemDefinitions
SteamAPI_ISteamInventory_RemoveProperty
SteamAPI_ISteamInventory_RequestEligiblePromoItemDefinitionsIDs
SteamAPI_ISteamInventory_RequestPrices
SteamAPI_ISteamInventory_SendItemDropHeartbeat
SteamAPI_ISteamInventory_SerializeResult
SteamAPI_ISteamInventory_SetPropertyBool
SteamAPI_ISteamInventory_SetPropertyFloat
SteamAPI_ISteamInventory_SetPropertyInt64
SteamAPI_ISteamInventory_SetPropertyString
SteamAPI_ISteamInventory_StartPurchase
SteamAPI_ISteamInventory_StartUpdateProperties
SteamAPI_ISteamInventory_SubmitUpdateProperties
SteamAPI_ISteamInventory_TradeItems
SteamAPI_ISteamInventory_TransferItemQuantity
SteamAPI_ISteamInventory_TriggerItemDrop
SteamAPI_ISteamMatchmakingPingResponse_ServerFailedToRespond
SteamAPI_ISteamMatchmakingPingResponse_ServerResponded
SteamAPI_ISteamMatchmakingPlayersResponse_AddPlayerToList
SteamAPI_ISteamMatchmakingPlayersResponse_PlayersFailedToRespond
SteamAPI_ISteamMatchmakingPlayersResponse_PlayersRefreshComplete
SteamAPI_ISteamMatchmakingRulesResponse_RulesFailedToRespond
SteamAPI_ISteamMatchmakingRulesResponse_RulesRefreshComplete
SteamAPI_ISteamMatchmakingRulesResponse_RulesResponded
SteamAPI_ISteamMatchmakingServerListResponse_RefreshComplete
SteamAPI_ISteamMatchmakingServerListResponse_ServerFailedToRespond
SteamAPI_ISteamMatchmakingServerListResponse_ServerResponded
SteamAPI_ISteamMatchmakingServers_CancelQuery
SteamAPI_ISteamMatchmakingServers_CancelServerQuery
SteamAPI_ISteamMatchmakingServers_GetServerCount
SteamAPI_ISteamMatchmakingServers_GetServerDetails
SteamAPI_ISteamMatchmakingServers_IsRefreshing
SteamAPI_ISteamMatchmakingServers_PingServer
SteamAPI_ISteamMatchmakingServers_PlayerDetails
SteamAPI_ISteamMatchmakingServers_RefreshQuery
SteamAPI_ISteamMatchmakingServers_RefreshServer
SteamAPI_ISteamMatchmakingServers_ReleaseRequest
SteamAPI_ISteamMatchmakingServers_RequestFavoritesServerList
SteamAPI_ISteamMatchmakingServers_RequestFriendsServerList
SteamAPI_ISteamMatchmakingServers_RequestHistoryServerList
SteamAPI_ISteamMatchmakingServers_RequestInternetServerList
SteamAPI_ISteamMatchmakingServers_RequestLANServerList
SteamAPI_ISteamMatchmakingServers_RequestSpectatorServerList
SteamAPI_ISteamMatchmakingServers_ServerRules
SteamAPI_ISteamMatchmaking_AddFavoriteGame
SteamAPI_ISteamMatchmaking_AddRequestLobbyListCompatibleMembersFilter
SteamAPI_ISteamMatchmaking_AddRequestLobbyListDistanceFilter
SteamAPI_ISteamMatchmaking_AddRequestLobbyListFilterSlotsAvailable
SteamAPI_ISteamMatchmaking_AddRequestLobbyListNearValueFilter
SteamAPI_ISteamMatchmaking_AddRequestLobbyListNumericalFilter
SteamAPI_ISteamMatchmaking_AddRequestLobbyListResultCountFilter
SteamAPI_ISteamMatchmaking_AddRequestLobbyListStringFilter
SteamAPI_ISteamMatchmaking_CreateLobby
SteamAPI_ISteamMatchmaking_DeleteLobbyData
SteamAPI_ISteamMatchmaking_GetFavoriteGame
SteamAPI_ISteamMatchmaking_GetFavoriteGameCount
SteamAPI_ISteamMatchmaking_GetLobbyByIndex
SteamAPI_ISteamMatchmaking_GetLobbyChatEntry
SteamAPI_ISteamMatchmaking_GetLobbyData
SteamAPI_ISteamMatchmaking_GetLobbyDataByIndex
SteamAPI_ISteamMatchmaking_GetLobbyDataCount
SteamAPI_ISteamMatchmaking_GetLobbyGameServer
SteamAPI_ISteamMatchmaking_GetLobbyMemberByIndex
SteamAPI_ISteamMatchmaking_GetLobbyMemberData
SteamAPI_ISteamMatchmaking_GetLobbyMemberLimit
SteamAPI_ISteamMatchmaking_GetLobbyOwner
SteamAPI_ISteamMatchmaking_GetNumLobbyMembers
SteamAPI_ISteamMatchmaking_InviteUserToLobby
SteamAPI_ISteamMatchmaking_JoinLobby
SteamAPI_ISteamMatchmaking_LeaveLobby
SteamAPI_ISteamMatchmaking_RemoveFavoriteGame
SteamAPI_ISteamMatchmaking_RequestLobbyData
SteamAPI_ISteamMatchmaking_RequestLobbyList
SteamAPI_ISteamMatchmaking_SendLobbyChatMsg
SteamAPI_ISteamMatchmaking_SetLinkedLobby
SteamAPI_ISteamMatchmaking_SetLobbyData
SteamAPI_ISteamMatchmaking_SetLobbyGameServer
SteamAPI_ISteamMatchmaking_SetLobbyJoinable
SteamAPI_ISteamMatchmaking_SetLobbyMemberData
SteamAPI_ISteamMatchmaking_SetLobbyMemberLimit
SteamAPI_ISteamMatchmaking_SetLobbyOwner
SteamAPI_ISteamMatchmaking_SetLobbyType
SteamAPI_ISteamMusicRemote_BActivationSuccess
SteamAPI_ISteamMusicRemote_BIsCurrentMusicRemote
SteamAPI_ISteamMusicRemote_CurrentEntryDidChange
SteamAPI_ISteamMusicRemote_CurrentEntryIsAvailable
SteamAPI_ISteamMusicRemote_CurrentEntryWillChange
SteamAPI_ISteamMusicRemote_DeregisterSteamMusicRemote
SteamAPI_ISteamMusicRemote_EnableLooped
SteamAPI_ISteamMusicRemote_EnablePlayNext
SteamAPI_ISteamMusicRemote_EnablePlayPrevious
SteamAPI_ISteamMusicRemote_EnablePlaylists
SteamAPI_ISteamMusicRemote_EnableQueue
SteamAPI_ISteamMusicRemote_EnableShuffled
SteamAPI_ISteamMusicRemote_PlaylistDidChange
SteamAPI_ISteamMusicRemote_PlaylistWillChange
SteamAPI_ISteamMusicRemote_QueueDidChange
SteamAPI_ISteamMusicRemote_QueueWillChange
SteamAPI_ISteamMusicRemote_RegisterSteamMusicRemote
SteamAPI_ISteamMusicRemote_ResetPlaylistEntries
SteamAPI_ISteamMusicRemote_ResetQueueEntries
SteamAPI_ISteamMusicRemote_SetCurrentPlaylistEntry
SteamAPI_ISteamMusicRemote_SetCurrentQueueEntry
SteamAPI_ISteamMusicRemote_SetDisplayName
SteamAPI_ISteamMusicRemote_SetPNGIcon_64x64
SteamAPI_ISteamMusicRemote_SetPlaylistEntry
SteamAPI_ISteamMusicRemote_SetQueueEntry
SteamAPI_ISteamMusicRemote_UpdateCurrentEntryCoverArt
SteamAPI_ISteamMusicRemote_UpdateCurrentEntryElapsedSeconds
SteamAPI_ISteamMusicRemote_UpdateCurrentEntryText
SteamAPI_ISteamMusicRemote_UpdateLooped
SteamAPI_ISteamMusicRemote_UpdatePlaybackStatus
SteamAPI_ISteamMusicRemote_UpdateShuffled
SteamAPI_ISteamMusicRemote_UpdateVolume
SteamAPI_ISteamMusic_BIsEnabled
SteamAPI_ISteamMusic_BIsPlaying
SteamAPI_ISteamMusic_GetPlaybackStatus
SteamAPI_ISteamMusic_GetVolume
SteamAPI_ISteamMusic_Pause

Sections

.text
Size: 152KB - Virtual size: 151KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 108KB - Virtual size: 108KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 9KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

_RDATA
Size: 512B - Virtual size: 244B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Online_V3/GothamKnights.exe
.exe windows:6 windows x64

70e5066fac5169ee779903c2061404de

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

kernel32

GetFileAttributesW
CloseHandle
GetLastError
WaitForSingleObject
GetExitCodeProcess
CreateProcessW
GetModuleFileNameW
LoadResource
LockResource
SizeofResource
FindResourceW
LoadLibraryW
WriteConsoleW
CreateFileW
GetConsoleMode
GetConsoleCP
FlushFileBuffers
HeapReAlloc
HeapSize
SetFilePointerEx
RtlCaptureContext
RtlLookupFunctionEntry
RtlVirtualUnwind
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
IsProcessorFeaturePresent
QueryPerformanceCounter
GetCurrentProcessId
GetCurrentThreadId
GetSystemTimeAsFileTime
InitializeSListHead
IsDebuggerPresent
GetStartupInfoW
GetModuleHandleW
RtlUnwindEx
RtlPcToFileHeader
RaiseException
SetLastError
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
InitializeCriticalSectionAndSpinCount
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
FreeLibrary
GetProcAddress
LoadLibraryExW
GetStdHandle
WriteFile
ExitProcess
GetModuleHandleExW
HeapFree
HeapAlloc
GetFileType
FindClose
FindFirstFileExW
FindNextFileW
IsValidCodePage
GetACP
GetOEMCP
GetCPInfo
GetCommandLineA
GetCommandLineW
MultiByteToWideChar
WideCharToMultiByte
GetEnvironmentStringsW
FreeEnvironmentStringsW
SetStdHandle
GetStringTypeW
LCMapStringW
GetProcessHeap

user32

wsprintfW
MessageBoxW

shell32

ShellExecuteExW

shlwapi

PathCombineW
PathRemoveFileSpecW
PathCanonicalizeW

Sections

.text
Size: 62KB - Virtual size: 64KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 41KB - Virtual size: 44KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 3KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

_RDATA
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 132KB - Virtual size: 132KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 2KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.bind
Size: 202KB - Virtual size: 204KB

IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Online_V3/Mercury/Binaries/Win64/Custom.dll
.dll windows:6 windows x64

299f87ad77417b9bc89001bf63b600bd

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

Imports

kernel32

GetCurrentProcessId
LocalAlloc
LocalFree
GetModuleFileNameW
ExitProcess
LoadLibraryA
GetModuleHandleA
GetProcAddress

user32

GetUserObjectInformationW

advapi32

CryptCreateHash

ws2_32

__WSAFDIsSet

crypt32

CertFreeCertificateContext

bcrypt

BCryptGenRandom

Exports

Exports

OnlineFix

Sections

.text
Size: - Virtual size: 1.6MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: - Virtual size: 667KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 81KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: - Virtual size: 96KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

_RDATA
Size: - Virtual size: 348B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.of0
Size: - Virtual size: 1.7MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.of1
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.of2
Size: 4.7MB - Virtual size: 4.7MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 224B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 897B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Online_V3/Mercury/Binaries/Win64/OnlineFix.ini
Online_V3/Mercury/Binaries/Win64/OnlineFix.url
Online_V3/Mercury/Binaries/Win64/OnlineFix64.dll
.dll windows:6 windows x64

4b8e5391ed1e2ba024790d409b61ce13

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

Imports

kernel32

LoadLibraryA
LocalAlloc
LocalFree
GetModuleFileNameW
ExitProcess
LoadLibraryA
GetModuleHandleA
GetProcAddress

user32

GetUserObjectInformationW

shell32

SHGetSpecialFolderPathA

ws2_32

ioctlsocket

wldap32

ord27

advapi32

RegisterEventSourceW

Exports

Exports

Breakpad_SteamMiniDumpInit
Breakpad_SteamSetAppID
Breakpad_SteamSetSteamID
Breakpad_SteamWriteMiniDumpSetComment
Breakpad_SteamWriteMiniDumpUsingExceptionInfoWithBuildId
CreateInterface
OnlineFix
ShellExecuteA
ShellExecuteW
Steam_BConnected
Steam_BGetCallback
Steam_BLoggedOn
Steam_BReleaseSteamPipe
Steam_ConnectToGlobalUser
Steam_CreateGlobalUser
Steam_CreateLocalUser
Steam_CreateSteamPipe
Steam_FreeLastCallback
Steam_GSBLoggedOn
Steam_GSBSecure
Steam_GSGetSteam2GetEncryptionKeyToSendToNewClient
Steam_GSGetSteamID
Steam_GSLogOff
Steam_GSLogOn
Steam_GSRemoveUserConnect
Steam_GSSendSteam2UserConnect
Steam_GSSendSteam3UserConnect
Steam_GSSendUserDisconnect
Steam_GSSendUserStatusResponse
Steam_GSSetServerType
Steam_GSSetSpawnCount
Steam_GSUpdateStatus
Steam_GetAPICallResult
Steam_GetGSHandle
Steam_InitiateGameConnection
Steam_LogOff
Steam_LogOn
Steam_ReleaseThreadLocalMemory
Steam_ReleaseUser
Steam_SetLocalIPBinding
Steam_TerminateGameConnection
hid_close
hid_enumerate
hid_error
hid_exit
hid_free_enumeration
hid_get_feature_report
hid_get_indexed_string
hid_get_manufacturer_string
hid_get_product_string
hid_get_serial_number_string
hid_init
hid_open
hid_open_path
hid_read
hid_read_timeout
hid_send_feature_report
hid_set_nonblocking
hid_write
hid_write_output_report

Sections

.text
Size: - Virtual size: 1.6MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: - Virtual size: 535KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 307KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: - Virtual size: 78KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

_RDATA
Size: - Virtual size: 348B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.of0
Size: - Virtual size: 1.9MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.of1
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.of2
Size: 4.8MB - Virtual size: 4.8MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 200B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 664B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Online_V3/Mercury/Binaries/Win64/dlllist.txt
Online_V3/Mercury/Binaries/Win64/winmm.dll
.dll windows:6 windows x64

d87c96e86984e394d8b76e8b7350cb52

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

Imports

kernel32

GetModuleFileNameW
GetSystemDirectoryW
GetLastError
LoadLibraryW
GetProcAddress
ExitProcess
SetEndOfFile
WriteConsoleW
HeapSize
MultiByteToWideChar
GetStringTypeW
WideCharToMultiByte
EnterCriticalSection
LeaveCriticalSection
InitializeCriticalSectionEx
DeleteCriticalSection
EncodePointer
DecodePointer
GetLocaleInfoEx
LCMapStringEx
CompareStringEx
GetCPInfo
HeapCreate
VirtualProtect
HeapFree
GetCurrentProcess
Thread32Next
Thread32First
GetCurrentThreadId
SuspendThread
ResumeThread
CreateToolhelp32Snapshot
Sleep
HeapReAlloc
CloseHandle
HeapAlloc
GetThreadContext
GetCurrentProcessId
GetModuleHandleW
FlushInstructionCache
SetThreadContext
OpenThread
VirtualFree
VirtualAlloc
GetSystemInfo
VirtualQuery
RtlCaptureContext
RtlLookupFunctionEntry
RtlVirtualUnwind
UnhandledExceptionFilter
SetUnhandledExceptionFilter
TerminateProcess
IsProcessorFeaturePresent
IsDebuggerPresent
GetStartupInfoW
QueryPerformanceCounter
GetSystemTimeAsFileTime
InitializeSListHead
RtlUnwindEx
RtlPcToFileHeader
RaiseException
InterlockedFlushSList
SetLastError
InitializeCriticalSectionAndSpinCount
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
FreeLibrary
LoadLibraryExW
GetModuleHandleExW
FlushFileBuffers
WriteFile
GetConsoleOutputCP
GetConsoleMode
GetFileSizeEx
SetFilePointerEx
GetStdHandle
GetFileType
GetDateFormatW
GetTimeFormatW
CompareStringW
LCMapStringW
GetLocaleInfoW
IsValidLocale
GetUserDefaultLCID
EnumSystemLocalesW
ReadFile
GetTimeZoneInformation
FindClose
FindFirstFileExW
FindNextFileW
IsValidCodePage
GetACP
GetOEMCP
GetCommandLineA
GetCommandLineW
GetEnvironmentStringsW
FreeEnvironmentStringsW
SetEnvironmentVariableW
GetProcessHeap
SetStdHandle
ReadConsoleW
CreateFileW
RtlUnwind

user32

MessageBoxA
MessageBoxW

Exports

Exports

CloseDriver
DefDriverProc
DriverCallback
DrvGetModuleHandle
GetDriverModuleHandle
NotifyCallbackData
OnlineFix
OpenDriver
PlaySound
PlaySoundA
PlaySoundW
SendDriverMessage
WOW32DriverCallback
WOW32ResolveMultiMediaHandle
WOWAppExit
aux32Message
auxGetDevCapsA
auxGetDevCapsW
auxGetNumDevs
auxGetVolume
auxOutMessage
auxSetVolume
joy32Message
joyConfigChanged
joyGetDevCapsA
joyGetDevCapsW
joyGetNumDevs
joyGetPos
joyGetPosEx
joyGetThreshold
joyReleaseCapture
joySetCapture
joySetThreshold
mci32Message
mciDriverNotify
mciDriverYield
mciExecute
mciFreeCommandResource
mciGetCreatorTask
mciGetDeviceIDA
mciGetDeviceIDFromElementIDA
mciGetDeviceIDFromElementIDW
mciGetDeviceIDW
mciGetDriverData
mciGetErrorStringA
mciGetErrorStringW
mciGetYieldProc
mciLoadCommandResource
mciSendCommandA
mciSendCommandW
mciSendStringA
mciSendStringW
mciSetDriverData
mciSetYieldProc
mid32Message
midiConnect
midiDisconnect
midiInAddBuffer
midiInClose
midiInGetDevCapsA
midiInGetDevCapsW
midiInGetErrorTextA
midiInGetErrorTextW
midiInGetID
midiInGetNumDevs
midiInMessage
midiInOpen
midiInPrepareHeader
midiInReset
midiInStart
midiInStop
midiInUnprepareHeader
midiOutCacheDrumPatches
midiOutCachePatches
midiOutClose
midiOutGetDevCapsA
midiOutGetDevCapsW
midiOutGetErrorTextA
midiOutGetErrorTextW
midiOutGetID
midiOutGetNumDevs
midiOutGetVolume
midiOutLongMsg
midiOutMessage
midiOutOpen
midiOutPrepareHeader
midiOutReset
midiOutSetVolume
midiOutShortMsg
midiOutUnprepareHeader
midiStreamClose
midiStreamOpen
midiStreamOut
midiStreamPause
midiStreamPosition
midiStreamProperty
midiStreamRestart
midiStreamStop
mixerClose
mixerGetControlDetailsA
mixerGetControlDetailsW
mixerGetDevCapsA
mixerGetDevCapsW
mixerGetID
mixerGetLineControlsA
mixerGetLineControlsW
mixerGetLineInfoA
mixerGetLineInfoW
mixerGetNumDevs
mixerMessage
mixerOpen
mixerSetControlDetails
mmDrvInstall
mmGetCurrentTask
mmTaskBlock
mmTaskCreate
mmTaskSignal
mmTaskYield
mmioAdvance
mmioAscend
mmioClose
mmioCreateChunk
mmioDescend
mmioFlush
mmioGetInfo
mmioInstallIOProcA
mmioInstallIOProcW
mmioOpenA
mmioOpenW
mmioRead
mmioRenameA
mmioRenameW
mmioSeek
mmioSendMessage
mmioSetBuffer
mmioSetInfo
mmioStringToFOURCCA
mmioStringToFOURCCW
mmioWrite
mmsystemGetVersion
mod32Message
mxd32Message
sndPlaySoundA
sndPlaySoundW
tid32Message
timeBeginPeriod
timeEndPeriod
timeGetDevCaps
timeGetSystemTime
timeGetTime
timeKillEvent
timeSetEvent
waveInAddBuffer
waveInClose
waveInGetDevCapsA
waveInGetDevCapsW
waveInGetErrorTextA
waveInGetErrorTextW
waveInGetID
waveInGetNumDevs
waveInGetPosition
waveInMessage
waveInOpen
waveInPrepareHeader
waveInReset
waveInStart
waveInStop
waveInUnprepareHeader
waveOutBreakLoop
waveOutClose
waveOutGetDevCapsA
waveOutGetDevCapsW
waveOutGetErrorTextA
waveOutGetErrorTextW
waveOutGetID
waveOutGetNumDevs
waveOutGetPitch
waveOutGetPlaybackRate
waveOutGetPosition
waveOutGetVolume
waveOutMessage
waveOutOpen
waveOutPause
waveOutPrepareHeader
waveOutReset
waveOutRestart
waveOutSetPitch
waveOutSetPlaybackRate
waveOutSetVolume
waveOutUnprepareHeader
waveOutWrite
wid32Message
wod32Message

Sections

.text
Size: 372KB - Virtual size: 372KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 108KB - Virtual size: 107KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 8KB - Virtual size: 15KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 17KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

_RDATA
Size: 512B - Virtual size: 348B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 648B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Online_V3/OnlineFix/EOSSDK-Win32-Shipping.dll
.dll windows:6 windows x86

bbf088c47847d53cfcdacf1466cddd06

Code Sign

0d:fe:7b:a4:82:f0:76:db:90:bc:c2:2b:2c:48:7c:bd
Certificate

Issuer

CN=DigiCert SHA2 Assured ID Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

25/02/2021, 00:00

Not After

29/02/2024, 23:59

Subject

CN=Epic Games Inc.,O=Epic Games Inc.,L=Cary,ST=North Carolina,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

04:09:18:1b:5f:d5:bb:66:75:53:43:b5:6f:95:50:08
Certificate

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

22/10/2013, 12:00

Not After

22/10/2028, 12:00

Subject

CN=DigiCert SHA2 Assured ID Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

30:0f:6f:ac:dd:66:98:74:7c:a9:46:36:a7:78:2d:b9
Certificate

Issuer

CN=USERTrust RSA Certification Authority,O=The USERTRUST Network,L=Jersey City,ST=New Jersey,C=US

Not Before

02/05/2019, 00:00

Not After

18/01/2038, 23:59

Subject

CN=Sectigo RSA Time Stamping CA,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GB

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

90:39:7f:9a:d2:4a:3a:13:f2:bd:91:5f:08:38:a9:43
Certificate

Issuer

CN=Sectigo RSA Time Stamping CA,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GB

Not Before

11/05/2022, 00:00

Not After

10/08/2033, 23:59

Subject

CN=Sectigo RSA Time Stamping Signer #3,O=Sectigo Limited,ST=Manchester,C=GB

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

0d:fe:7b:a4:82:f0:76:db:90:bc:c2:2b:2c:48:7c:bd
Certificate

Issuer

CN=DigiCert SHA2 Assured ID Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

25/02/2021, 00:00

Not After

29/02/2024, 23:59

Subject

CN=Epic Games Inc.,O=Epic Games Inc.,L=Cary,ST=North Carolina,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

04:09:18:1b:5f:d5:bb:66:75:53:43:b5:6f:95:50:08
Certificate

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

22/10/2013, 12:00

Not After

22/10/2028, 12:00

Subject

CN=DigiCert SHA2 Assured ID Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

7b:05:b1:d4:49:68:51:44:f7:c9:89:d2:9c:19:9d:12
Certificate

Issuer

CN=VeriSign Universal Root Certification Authority,OU=VeriSign Trust Network+OU=(c) 2008 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

Not Before

12/01/2016, 00:00

Not After

11/01/2031, 23:59

Subject

CN=Symantec SHA256 TimeStamping CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

7b:d4:e5:af:ba:cc:07:3f:a1:01:23:04:22:41:4d:12
Certificate

Issuer

CN=Symantec SHA256 TimeStamping CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Not Before

23/12/2017, 00:00

Not After

22/03/2029, 23:59

Subject

CN=Symantec SHA256 TimeStamping Signer - G3,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

da:ce:03:78:4d:19:56:34:88:cf:3c:5a:ca:17:e5:a3:30:77:70:cd:52:d5:dd:8f:3e:6b:5f:33:72:59:b0:3f
Signer

Actual PE Digest

da:ce:03:78:4d:19:56:34:88:cf:3c:5a:ca:17:e5:a3:30:77:70:cd:52:d5:dd:8f:3e:6b:5f:33:72:59:b0:3f

Digest Algorithm

sha256

PE Digest Matches

true

76:b4:93:6b:40:51:d2:83:17:bc:5a:ab:cb:f8:8f:d4:21:92:e7:56
Signer

Actual PE Digest

76:b4:93:6b:40:51:d2:83:17:bc:5a:ab:cb:f8:8f:d4:21:92:e7:56

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

advapi32

CredDeleteW
CredFree
CredReadW
CredWriteW
GetUserNameW
RegQueryValueExW
RegisterEventSourceW
ReportEventW
DeregisterEventSource
RegOpenKeyExW
RegCloseKey
RegSetValueExW
RegCreateKeyExW
CryptAcquireContextW
CryptReleaseContext
CryptEnumProvidersW
CryptSignHashW
CryptDestroyHash
CryptCreateHash
CryptDecrypt
CryptExportKey
CryptGetUserKey
CryptGetProvParam
CryptSetHashParam
CryptDestroyKey

crypt32

CertFreeCertificateContext
CertGetCertificateContextProperty
CertDuplicateCertificateContext
CertOpenStore
CertEnumCertificatesInStore
CryptQueryObject
CertCloseStore
CertOpenSystemStoreW
CertGetNameStringW
CertFindCertificateInStore
CryptMsgGetParam

user32

DispatchMessageW
PeekMessageW
MsgWaitForMultipleObjectsEx
MessageBoxW
DialogBoxParamW
EndDialog
UnregisterHotKey
RegisterHotKey
SetForegroundWindow
PostThreadMessageW
GetWindowRect
GetUserObjectInformationW
GetProcessWindowStation
SetDlgItemTextW
KillTimer
TranslateMessage
ScreenToClient
SetWindowTextW
GetTopWindow
SetWindowPos
GetDlgItem
GetSystemMetrics
SetTimer
GetDesktopWindow

gdi32

DeleteDC
GetTextExtentPoint32W
CreateCompatibleDC

ws2_32

recv
recvfrom
gethostname
connect
ntohs
socket
send
getsockname
getpeername
WSAStartup
getaddrinfo
inet_pton
listen
shutdown
ntohl
select
closesocket
WSAIoctl
bind
accept
WSACleanup
inet_ntop
WSACloseEvent
WSACreateEvent
WSAEnumNetworkEvents
WSAEventSelect
WSAResetEvent
WSASetEvent
WSAWaitForMultipleEvents
WSASetLastError
WSAAddressToStringW
getprotobyname
gethostbyname
getsockopt
__WSAFDIsSet
htonl
htons
freeaddrinfo
sendto
ioctlsocket
getnameinfo
setsockopt
WSAGetLastError
WSAStringToAddressW
inet_addr

wldap32

ord301
ord200
ord30
ord79
ord35
ord33
ord32
ord27
ord26
ord22
ord41
ord50
ord60
ord211
ord46
ord143

normaliz

IdnToAscii

winmm

timeEndPeriod
timeGetTime
timeSetEvent
timeKillEvent
timeBeginPeriod

kernel32

GetConsoleMode
LoadLibraryA
ConvertThreadToFiber
ConvertFiberToThread
GetFileType
CreateFiber
DeleteFiber
SwitchToFiber
InitializeCriticalSectionAndSpinCount
GetTickCount64
WaitForSingleObjectEx
GlobalFree
GlobalAlloc
InitOnceComplete
InitOnceBeginInitialize
InitializeCriticalSectionEx
SleepConditionVariableCS
WakeAllConditionVariable
InitializeConditionVariable
MultiByteToWideChar
QueueUserAPC
OpenThread
FormatMessageA
OutputDebugStringA
IsDebuggerPresent
DebugBreak
SetConsoleMode
TryEnterCriticalSection
WaitForMultipleObjects
GetSystemTimeAsFileTime
GetProcessTimes
GetSystemTime
GetLocalTime
CreateSemaphoreW
ReleaseSemaphore
PeekNamedPipe
ResumeThread
SuspendThread
SetThreadPriority
SetEvent
Sleep
SwitchToThread
GetLongPathNameW
GetTempPathW
SleepEx
ExpandEnvironmentStringsA
GetSystemDirectoryA
GetModuleHandleA
VerifyVersionInfoA
GetFileSize
SetFilePointerEx
VirtualQuery
LoadLibraryExA
ReadConsoleW
WideCharToMultiByte
ReadConsoleA
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsProcessorFeaturePresent
GetModuleHandleExW
InitializeSListHead
GetCurrentDirectoryW
WakeConditionVariable
GetStdHandle
QueryPerformanceFrequency
GetExitCodeProcess
SetThreadAffinityMask
Process32NextW
Process32FirstW
CreateToolhelp32Snapshot
CreateProcessW
FreeLibrary
GetLogicalProcessorInformationEx
GetCurrentThread
FormatMessageW
OutputDebugStringW
GetEnvironmentVariableW
EnterCriticalSection
LeaveCriticalSection
InitializeCriticalSection
GetCurrentThreadId
SetCriticalSectionSpinCount
DeleteCriticalSection
QueryPerformanceCounter
GetLastError
SetLastError
GetCommandLineW
GetFullPathNameW
GetModuleFileNameW
LocalAlloc
CloseHandle
LoadLibraryW
CreateThread
GetProcAddress
LocalFree
GetModuleHandleW
SetThreadErrorMode
TlsSetValue
TlsAlloc
TlsFree
TlsGetValue
AcquireSRWLockShared
ReleaseSRWLockShared
AcquireSRWLockExclusive
ReleaseSRWLockExclusive
InitializeSRWLock
HeapSetInformation
SetHandleInformation
WaitForSingleObject
GetCurrentProcessId
GetCurrentProcess
CreateFileW
GetFileAttributesW
ResetEvent
CreateEventW
RaiseException
ReadFile
GetOverlappedResult
SetFilePointer
GetFileSizeEx
FileTimeToSystemTime
SystemTimeToFileTime
ReOpenFile
WriteFile
FlushFileBuffers
SetEndOfFile
MapViewOfFile
UnmapViewOfFile
GetFileAttributesExW
DeleteFileW
MoveFileW
SetFileAttributesW
SetFileTime
GetFinalPathNameByHandleW
CreateFileMappingW
CreateDirectoryW
RemoveDirectoryW
FindFirstFileW
FindNextFileW
FindClose
GlobalMemoryStatusEx
K32GetProcessMemoryInfo
GetSystemInfo
VirtualProtect
VirtualFree
VerSetConditionMask
VerifyVersionInfoW
GetNativeSystemInfo
GetVersionExW
TerminateProcess

shell32

ShellExecuteW
SHGetKnownFolderPath
CommandLineToArgvW

ole32

CoTaskMemFree
CoInitialize
CoUninitialize
PropVariantClear
CoCreateGuid
CoCreateInstance

iphlpapi

GetAdaptersAddresses

wintrust

WinVerifyTrust

secur32

FreeCredentialsHandle
InitializeSecurityContextA
DeleteSecurityContext
CompleteAuthToken
AcquireCredentialsHandleA

winhttp

WinHttpGetDefaultProxyConfiguration
WinHttpGetIEProxyConfigForCurrentUser

msvcp140

?sputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAE_JPBD_J@Z
?_Xbad_function_call@std@@YAXXZ
?cerr@std@@3V?$basic_ostream@DU?$char_traits@D@std@@@1@A
_Query_perf_counter
?_Xlength_error@std@@YAXPBD@Z
?_Raise_handler@std@@3P6AXABVexception@stdext@@@ZA
_Query_perf_frequency
?sputc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAEHD@Z
??0?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAE@XZ
?_Osfx@?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEXXZ
?flush@?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV12@XZ
?_Pninc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAEPADXZ
?setstate@?$basic_ios@DU?$char_traits@D@std@@@std@@QAEXH_N@Z
??0?$basic_ios@DU?$char_traits@D@std@@@std@@IAE@XZ
??0?$basic_ostream@DU?$char_traits@D@std@@@std@@QAE@PAV?$basic_streambuf@DU?$char_traits@D@std@@@1@_N@Z
??1?$basic_streambuf@DU?$char_traits@D@std@@@std@@UAE@XZ
?_Lock@?$basic_streambuf@DU?$char_traits@D@std@@@std@@UAEXXZ
?_Unlock@?$basic_streambuf@DU?$char_traits@D@std@@@std@@UAEXXZ
?showmanyc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAE_JXZ
?uflow@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEHXZ
?xsgetn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAE_JPAD_J@Z
?xsputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAE_JPBD_J@Z
?setbuf@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEPAV12@PAD_J@Z
?sync@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEHXZ
?imbue@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEXABVlocale@2@@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@H@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@_N@Z
?_Xout_of_range@std@@YAXPBD@Z
??1?$basic_ios@DU?$char_traits@D@std@@@std@@UAE@XZ
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@I@Z
??1?$basic_ostream@DU?$char_traits@D@std@@@std@@UAE@XZ

version

VerQueryValueW
GetFileVersionInfoSizeW
GetFileVersionInfoW

bcrypt

BCryptGenRandom

vcruntime140

__CxxFrameHandler3
_setjmp3
longjmp
strchr
memchr
memcmp
memset
memmove
memcpy
wcsrchr
strstr
wcschr
_except_handler4_common
__std_type_info_destroy_list
wcsstr
strrchr
_purecall

api-ms-win-crt-runtime-l1-1-0

_beginthreadex
_endthreadex
_invoke_watson
strerror
_initterm_e
_initterm
_cexit
_crt_atexit
_execute_onexit_table
abort
_register_onexit_function
_initialize_onexit_table
_initialize_narrow_environment
_configure_narrow_argv
_seh_filter_dll
_invalid_parameter_noinfo_noreturn
_getpid
__sys_nerr
signal
raise
_exit
strerror_s
exit
_errno

api-ms-win-crt-string-l1-1-0

strncpy
strpbrk
_strdup
isalpha
wcsncmp
strncpy_s
isupper
strcspn
iswdigit
iswalnum
iswalpha
isgraph
isdigit
strcmp
iswxdigit
_strnicmp
_stricmp
isspace
strncmp
iswspace
strnlen
wcsncpy
strspn
tolower
islower
toupper
isxdigit
isprint
isalnum

api-ms-win-crt-convert-l1-1-0

strtoll
strtoull
_strtoi64
strtof
strtol
_wcstoi64
_wtoi64
_wtoi
wcstod
wcstoul
strtoul
atoi
_wcstoui64
atoll
_wtof

api-ms-win-crt-math-l1-1-0

_libm_sse2_atan_precise
_libm_sse2_asin_precise
rint
roundf
_libm_sse2_sin_precise
expm1
modf
_isnan
trunc
nan
log2f
log2
_libm_sse2_cos_precise
_CItanh
_libm_sse2_pow_precise
copysignf
fmax
round
__libm_sse2_powf
__libm_sse2_pow
__libm_sse2_logf
__libm_sse2_log
__libm_sse2_expf
_libm_sse2_log10_precise
_libm_sse2_log_precise
_dclass
ceil
_dpcomp
__libm_sse2_cosf
floor
_finite
_libm_sse2_sqrt_precise
_libm_sse2_exp_precise
__libm_sse2_tanf

api-ms-win-crt-utility-l1-1-0

rand
qsort
srand

api-ms-win-crt-heap-l1-1-0

calloc
realloc
free
malloc
_heapchk
_get_heap_handle

api-ms-win-crt-stdio-l1-1-0

fseek
_fileno
_setmode
fwrite
_write
fopen
__stdio_common_vsscanf
__stdio_common_vsprintf
fread
fgets
_read
fflush
__stdio_common_vfwprintf
__stdio_common_vfscanf
__acrt_iob_func
_close
_open
fclose
_isatty
__stdio_common_vfprintf
setbuf
ferror
clearerr
ftell
_lseeki64
_wfopen
__stdio_common_vswprintf
fputc
fputs
__stdio_common_vsnprintf_s
feof

api-ms-win-crt-time-l1-1-0

__timezone
__daylight
_time64
_mktime64
_gmtime64
_tzset
clock
_localtime64_s
_ftime64
_localtime64
_gmtime64_s

api-ms-win-crt-filesystem-l1-1-0

_fstat64i32
_stat64i32
_fstat64
rename
_stat32i64
_stat64

api-ms-win-crt-environment-l1-1-0

getenv

Exports

Exports

_EOS_Achievements_AddNotifyAchievementsUnlocked@16
_EOS_Achievements_AddNotifyAchievementsUnlockedV2@16
_EOS_Achievements_CopyAchievementDefinitionByAchievementId@12
_EOS_Achievements_CopyAchievementDefinitionByIndex@12
_EOS_Achievements_CopyAchievementDefinitionV2ByAchievementId@12
_EOS_Achievements_CopyAchievementDefinitionV2ByIndex@12
_EOS_Achievements_CopyPlayerAchievementByAchievementId@12
_EOS_Achievements_CopyPlayerAchievementByIndex@12
_EOS_Achievements_CopyUnlockedAchievementByAchievementId@12
_EOS_Achievements_CopyUnlockedAchievementByIndex@12
_EOS_Achievements_DefinitionV2_Release@4
_EOS_Achievements_Definition_Release@4
_EOS_Achievements_GetAchievementDefinitionCount@8
_EOS_Achievements_GetPlayerAchievementCount@8
_EOS_Achievements_GetUnlockedAchievementCount@8
_EOS_Achievements_PlayerAchievement_Release@4
_EOS_Achievements_QueryDefinitions@16
_EOS_Achievements_QueryPlayerAchievements@16
_EOS_Achievements_RemoveNotifyAchievementsUnlocked@12
_EOS_Achievements_UnlockAchievements@16
_EOS_Achievements_UnlockedAchievement_Release@4
_EOS_ActiveSession_CopyInfo@12
_EOS_ActiveSession_GetRegisteredPlayerByIndex@8
_EOS_ActiveSession_GetRegisteredPlayerCount@8
_EOS_ActiveSession_Info_Release@4
_EOS_ActiveSession_Release@4
_EOS_AntiCheatClient_AddExternalIntegrityCatalog@8
_EOS_AntiCheatClient_AddNotifyMessageToPeer@16
_EOS_AntiCheatClient_AddNotifyMessageToServer@16
_EOS_AntiCheatClient_AddNotifyPeerActionRequired@16
_EOS_AntiCheatClient_AddNotifyPeerAuthStatusChanged@16
_EOS_AntiCheatClient_BeginSession@8
_EOS_AntiCheatClient_EndSession@8
_EOS_AntiCheatClient_GetProtectMessageOutputLength@12
_EOS_AntiCheatClient_PollStatus@16
_EOS_AntiCheatClient_ProtectMessage@16
_EOS_AntiCheatClient_ReceiveMessageFromPeer@8
_EOS_AntiCheatClient_ReceiveMessageFromServer@8
_EOS_AntiCheatClient_RegisterPeer@8
_EOS_AntiCheatClient_RemoveNotifyMessageToPeer@12
_EOS_AntiCheatClient_RemoveNotifyMessageToServer@12
_EOS_AntiCheatClient_RemoveNotifyPeerActionRequired@12
_EOS_AntiCheatClient_RemoveNotifyPeerAuthStatusChanged@12
_EOS_AntiCheatClient_UnprotectMessage@16
_EOS_AntiCheatClient_UnregisterPeer@8
_EOS_AntiCheatServer_AddNotifyClientActionRequired@16
_EOS_AntiCheatServer_AddNotifyClientAuthStatusChanged@16
_EOS_AntiCheatServer_AddNotifyMessageToClient@16
_EOS_AntiCheatServer_BeginSession@8
_EOS_AntiCheatServer_EndSession@8
_EOS_AntiCheatServer_GetProtectMessageOutputLength@12
_EOS_AntiCheatServer_LogEvent@8
_EOS_AntiCheatServer_LogGameRoundEnd@8
_EOS_AntiCheatServer_LogGameRoundStart@8
_EOS_AntiCheatServer_LogPlayerDespawn@8
_EOS_AntiCheatServer_LogPlayerRevive@8
_EOS_AntiCheatServer_LogPlayerSpawn@8
_EOS_AntiCheatServer_LogPlayerTakeDamage@8
_EOS_AntiCheatServer_LogPlayerTick@8
_EOS_AntiCheatServer_LogPlayerUseAbility@8
_EOS_AntiCheatServer_LogPlayerUseWeapon@8
_EOS_AntiCheatServer_ProtectMessage@16
_EOS_AntiCheatServer_ReceiveMessageFromClient@8
_EOS_AntiCheatServer_RegisterClient@8
_EOS_AntiCheatServer_RegisterEvent@8
_EOS_AntiCheatServer_RemoveNotifyClientActionRequired@12
_EOS_AntiCheatServer_RemoveNotifyClientAuthStatusChanged@12
_EOS_AntiCheatServer_RemoveNotifyMessageToClient@12
_EOS_AntiCheatServer_SetClientDetails@8
_EOS_AntiCheatServer_SetClientNetworkState@8
_EOS_AntiCheatServer_SetGameSessionId@8
_EOS_AntiCheatServer_UnprotectMessage@16
_EOS_AntiCheatServer_UnregisterClient@8
_EOS_Audio_CreateNewInputStream@4
_EOS_Audio_CreateNewOutputStream@4
_EOS_Audio_DestroyInputStream@4
_EOS_Audio_DestroyOutputStream@4
_EOS_Audio_EnableCommunicationsModeOutputDevices@4
_EOS_Audio_GetInputDeviceInfo@8
_EOS_Audio_GetInputStreamInfo@8
_EOS_Audio_GetOutputDeviceInfo@8
_EOS_Audio_GetOutputStreamInfo@8
_EOS_Audio_IsInputStreamDeviceDisconnected@4
_EOS_Audio_IsInputStreamSilent@4
_EOS_Audio_QueryInputDevices@4
_EOS_Audio_QueryOutputDevices@4
_EOS_Audio_RegisterUser@4
_EOS_Audio_RemoveNotifyDevicesChanged@0
_EOS_Audio_SetFeatureEnabledForInputStream@12
_EOS_Audio_SetNotifyDevicesChanged@12
_EOS_Audio_StartInputStream@4
_EOS_Audio_StartOutputStream@4
_EOS_Audio_StopInputStream@4
_EOS_Audio_StopOutputStream@4
_EOS_Audio_UnregisterUser@4
_EOS_Auth_AddNotifyLoginStatusChanged@16
_EOS_Auth_CopyIdToken@12
_EOS_Auth_CopyUserAuthToken@16
_EOS_Auth_DeletePersistentAuth@16
_EOS_Auth_GetLoggedInAccountByIndex@8
_EOS_Auth_GetLoggedInAccountsCount@4
_EOS_Auth_GetLoginStatus@8
_EOS_Auth_GetMergedAccountByIndex@12
_EOS_Auth_GetMergedAccountsCount@8
_EOS_Auth_GetSelectedAccountId@12
_EOS_Auth_IdToken_Release@4
_EOS_Auth_LinkAccount@16
_EOS_Auth_Login@16
_EOS_Auth_Logout@16
_EOS_Auth_QueryIdToken@16
_EOS_Auth_RemoveNotifyLoginStatusChanged@12
_EOS_Auth_Token_Release@4
_EOS_Auth_VerifyIdToken@16
_EOS_Auth_VerifyUserAuth@16
_EOS_BroadcastAudio_CreateNewInputStream@4
_EOS_BroadcastAudio_CreateNewOutputStream@4
_EOS_BroadcastAudio_DestroyInputStream@4
_EOS_BroadcastAudio_DestroyOutputStream@4
_EOS_BroadcastAudio_GetCurrentGainLevel@8
_EOS_BroadcastAudio_GetCurrentMicAmplitude@8
_EOS_BroadcastAudio_GetInputStreamInfo@8
_EOS_BroadcastAudio_GetOutputStreamInfo@8
_EOS_BroadcastAudio_PushPacketToOutputStream@8
_EOS_BroadcastAudio_SetEncoderSettings@8
_EOS_BroadcastAudio_SetMicProcessingSettings@8
_EOS_BroadcastAudio_StartInputStream@4
_EOS_BroadcastAudio_StartOutputStream@4
_EOS_BroadcastAudio_StopInputStream@4
_EOS_BroadcastAudio_StopOutputStream@4
_EOS_ByteArray_ToString@16
_EOS_Connect_AddNotifyAuthExpiration@16
_EOS_Connect_AddNotifyLoginStatusChanged@16
_EOS_Connect_CopyIdToken@12
_EOS_Connect_CopyProductUserExternalAccountByAccountId@12
_EOS_Connect_CopyProductUserExternalAccountByAccountType@12
_EOS_Connect_CopyProductUserExternalAccountByIndex@12
_EOS_Connect_CopyProductUserInfo@12
_EOS_Connect_CreateDeviceId@16
_EOS_Connect_CreateUser@16
_EOS_Connect_DeleteDeviceId@16
_EOS_Connect_ExternalAccountInfo_Release@4
_EOS_Connect_GetExternalAccountMapping@8
_EOS_Connect_GetLoggedInUserByIndex@8
_EOS_Connect_GetLoggedInUsersCount@4
_EOS_Connect_GetLoginStatus@8
_EOS_Connect_GetProductUserExternalAccountCount@8
_EOS_Connect_GetProductUserIdMapping@16
_EOS_Connect_IdToken_Release@4
_EOS_Connect_LinkAccount@16
_EOS_Connect_Login@16
_EOS_Connect_QueryExternalAccountMappings@16
_EOS_Connect_QueryProductUserIdMappings@16
_EOS_Connect_RemoveNotifyAuthExpiration@12
_EOS_Connect_RemoveNotifyLoginStatusChanged@12
_EOS_Connect_TransferDeviceIdAccount@16
_EOS_Connect_UnlinkAccount@16
_EOS_Connect_VerifyIdToken@16
_EOS_ContinuanceToken_ToString@12
_EOS_CustomInvites_AddNotifyCustomInviteAccepted@16
_EOS_CustomInvites_AddNotifyCustomInviteReceived@16
_EOS_CustomInvites_FinalizeInvite@8
_EOS_CustomInvites_RemoveNotifyCustomInviteAccepted@12
_EOS_CustomInvites_RemoveNotifyCustomInviteReceived@12
_EOS_CustomInvites_SendCustomInvite@16
_EOS_CustomInvites_SetCustomInvite@8
_EOS_EResult_IsOperationComplete@4
_EOS_EResult_ToString@4
_EOS_Ecom_CatalogItem_Release@4
_EOS_Ecom_CatalogOffer_Release@4
_EOS_Ecom_CatalogRelease_Release@4
_EOS_Ecom_Checkout@16
_EOS_Ecom_CopyEntitlementById@12
_EOS_Ecom_CopyEntitlementByIndex@12
_EOS_Ecom_CopyEntitlementByNameAndIndex@12
_EOS_Ecom_CopyItemById@12
_EOS_Ecom_CopyItemImageInfoByIndex@12
_EOS_Ecom_CopyItemReleaseByIndex@12
_EOS_Ecom_CopyOfferById@12
_EOS_Ecom_CopyOfferByIndex@12
_EOS_Ecom_CopyOfferImageInfoByIndex@12
_EOS_Ecom_CopyOfferItemByIndex@12
_EOS_Ecom_CopyTransactionById@12
_EOS_Ecom_CopyTransactionByIndex@12
_EOS_Ecom_Entitlement_Release@4
_EOS_Ecom_GetEntitlementsByNameCount@8
_EOS_Ecom_GetEntitlementsCount@8
_EOS_Ecom_GetItemImageInfoCount@8
_EOS_Ecom_GetItemReleaseCount@8
_EOS_Ecom_GetOfferCount@8
_EOS_Ecom_GetOfferImageInfoCount@8
_EOS_Ecom_GetOfferItemCount@8
_EOS_Ecom_GetTransactionCount@8
_EOS_Ecom_KeyImageInfo_Release@4
_EOS_Ecom_QueryEntitlements@16
_EOS_Ecom_QueryOffers@16
_EOS_Ecom_QueryOwnership@16
_EOS_Ecom_QueryOwnershipToken@16
_EOS_Ecom_RedeemEntitlements@16
_EOS_Ecom_Transaction_CopyEntitlementByIndex@12
_EOS_Ecom_Transaction_GetEntitlementsCount@8
_EOS_Ecom_Transaction_GetTransactionId@12
_EOS_Ecom_Transaction_Release@4
_EOS_EpicAccountId_FromString@4
_EOS_EpicAccountId_IsValid@4
_EOS_EpicAccountId_ToString@12
_EOS_Friends_AcceptInvite@16
_EOS_Friends_AddNotifyFriendsUpdate@16
_EOS_Friends_GetFriendAtIndex@8
_EOS_Friends_GetFriendsCount@8
_EOS_Friends_GetStatus@8
_EOS_Friends_QueryFriends@16
_EOS_Friends_RejectInvite@16
_EOS_Friends_RemoveNotifyFriendsUpdate@12
_EOS_Friends_SendInvite@16
_EOS_GetVersion@0
_EOS_Initialize@4
_EOS_KWS_AddNotifyPermissionsUpdateReceived@16
_EOS_KWS_CopyPermissionByIndex@12
_EOS_KWS_CreateUser@16
_EOS_KWS_GetPermissionByKey@12
_EOS_KWS_GetPermissionsCount@8
_EOS_KWS_PermissionStatus_Release@4
_EOS_KWS_QueryAgeGate@16
_EOS_KWS_QueryPermissions@16
_EOS_KWS_RemoveNotifyPermissionsUpdateReceived@12
_EOS_KWS_RequestPermissions@16
_EOS_KWS_UpdateParentEmail@16
_EOS_Leaderboards_CopyLeaderboardDefinitionByIndex@12
_EOS_Leaderboards_CopyLeaderboardDefinitionByLeaderboardId@12
_EOS_Leaderboards_CopyLeaderboardRecordByIndex@12
_EOS_Leaderboards_CopyLeaderboardRecordByUserId@12
_EOS_Leaderboards_CopyLeaderboardUserScoreByIndex@12
_EOS_Leaderboards_CopyLeaderboardUserScoreByUserId@12
_EOS_Leaderboards_Definition_Release@4
_EOS_Leaderboards_GetLeaderboardDefinitionCount@8
_EOS_Leaderboards_GetLeaderboardRecordCount@8
_EOS_Leaderboards_GetLeaderboardUserScoreCount@8
_EOS_Leaderboards_LeaderboardDefinition_Release@4
_EOS_Leaderboards_LeaderboardRecord_Release@4
_EOS_Leaderboards_LeaderboardUserScore_Release@4
_EOS_Leaderboards_QueryLeaderboardDefinitions@16
_EOS_Leaderboards_QueryLeaderboardRanks@16
_EOS_Leaderboards_QueryLeaderboardUserScores@16
_EOS_LobbyDetails_CopyAttributeByIndex@12
_EOS_LobbyDetails_CopyAttributeByKey@12
_EOS_LobbyDetails_CopyInfo@12
_EOS_LobbyDetails_CopyMemberAttributeByIndex@12
_EOS_LobbyDetails_CopyMemberAttributeByKey@12
_EOS_LobbyDetails_GetAttributeCount@8
_EOS_LobbyDetails_GetLobbyOwner@8
_EOS_LobbyDetails_GetMemberAttributeCount@8
_EOS_LobbyDetails_GetMemberByIndex@8
_EOS_LobbyDetails_GetMemberCount@8
_EOS_LobbyDetails_Info_Release@4
_EOS_LobbyDetails_Release@4
_EOS_LobbyModification_AddAttribute@8
_EOS_LobbyModification_AddMemberAttribute@8
_EOS_LobbyModification_Release@4
_EOS_LobbyModification_RemoveAttribute@8
_EOS_LobbyModification_RemoveMemberAttribute@8
_EOS_LobbyModification_SetBucketId@8
_EOS_LobbyModification_SetInvitesAllowed@8
_EOS_LobbyModification_SetMaxMembers@8
_EOS_LobbyModification_SetPermissionLevel@8
_EOS_LobbySearch_CopySearchResultByIndex@12
_EOS_LobbySearch_Find@16
_EOS_LobbySearch_GetSearchResultCount@8
_EOS_LobbySearch_Release@4
_EOS_LobbySearch_RemoveParameter@8
_EOS_LobbySearch_SetLobbyId@8
_EOS_LobbySearch_SetMaxResults@8
_EOS_LobbySearch_SetParameter@8
_EOS_LobbySearch_SetTargetUserId@8
_EOS_Lobby_AddNotifyJoinLobbyAccepted@16
_EOS_Lobby_AddNotifyLobbyInviteAccepted@16
_EOS_Lobby_AddNotifyLobbyInviteReceived@16
_EOS_Lobby_AddNotifyLobbyMemberStatusReceived@16
_EOS_Lobby_AddNotifyLobbyMemberUpdateReceived@16
_EOS_Lobby_AddNotifyLobbyUpdateReceived@16
_EOS_Lobby_AddNotifyRTCRoomConnectionChanged@16
_EOS_Lobby_Attribute_Release@4
_EOS_Lobby_CopyLobbyDetailsHandle@12
_EOS_Lobby_CopyLobbyDetailsHandleByInviteId@12
_EOS_Lobby_CopyLobbyDetailsHandleByUiEventId@12
_EOS_Lobby_CreateLobby@16
_EOS_Lobby_CreateLobbySearch@12
_EOS_Lobby_DestroyLobby@16
_EOS_Lobby_GetInviteCount@8
_EOS_Lobby_GetInviteIdByIndex@16
_EOS_Lobby_GetRTCRoomName@16
_EOS_Lobby_IsRTCRoomConnected@12
_EOS_Lobby_JoinLobby@16
_EOS_Lobby_KickMember@16
_EOS_Lobby_LeaveLobby@16
_EOS_Lobby_PromoteMember@16
_EOS_Lobby_QueryInvites@16
_EOS_Lobby_RejectInvite@16
_EOS_Lobby_RemoveNotifyJoinLobbyAccepted@12
_EOS_Lobby_RemoveNotifyLobbyInviteAccepted@12
_EOS_Lobby_RemoveNotifyLobbyInviteReceived@12
_EOS_Lobby_RemoveNotifyLobbyMemberStatusReceived@12
_EOS_Lobby_RemoveNotifyLobbyMemberUpdateReceived@12
_EOS_Lobby_RemoveNotifyLobbyUpdateReceived@12
_EOS_Lobby_RemoveNotifyRTCRoomConnectionChanged@12
_EOS_Lobby_SendInvite@16
_EOS_Lobby_UpdateLobby@16
_EOS_Lobby_UpdateLobbyModification@12
_EOS_Logging_SetCallback@4
_EOS_Logging_SetLogLevel@8
_EOS_Mercury_Initialize@4
_EOS_Mercury_Shutdown@0
_EOS_Metrics_BeginPlayerSession@8
_EOS_Metrics_EndPlayerSession@8
_EOS_Mods_CopyModInfo@12
_EOS_Mods_EnumerateMods@16
_EOS_Mods_InstallMod@16
_EOS_Mods_ModInfo_Release@4
_EOS_Mods_UninstallMod@16
_EOS_Mods_UpdateMod@16
_EOS_P2P_AcceptConnection@8
_EOS_P2P_AddNotifyIncomingPacketQueueFull@16
_EOS_P2P_AddNotifyPeerConnectionClosed@16
_EOS_P2P_AddNotifyPeerConnectionEstablished@16
_EOS_P2P_AddNotifyPeerConnectionRequest@16
_EOS_P2P_ClearPacketQueue@8
_EOS_P2P_CloseConnection@8
_EOS_P2P_CloseConnections@8
_EOS_P2P_GetNATType@12
_EOS_P2P_GetNextReceivedPacketSize@12
_EOS_P2P_GetPacketQueueInfo@12
_EOS_P2P_GetPortRange@16
_EOS_P2P_GetRelayControl@12
_EOS_P2P_QueryNATType@16
_EOS_P2P_ReceivePacket@28
_EOS_P2P_RemoveNotifyIncomingPacketQueueFull@12
_EOS_P2P_RemoveNotifyPeerConnectionClosed@12
_EOS_P2P_RemoveNotifyPeerConnectionEstablished@12
_EOS_P2P_RemoveNotifyPeerConnectionRequest@12
_EOS_P2P_SendPacket@8
_EOS_P2P_SetPacketQueueSize@8
_EOS_P2P_SetPortRange@8
_EOS_P2P_SetRelayControl@8
_EOS_Platform_CheckForLauncherAndRestart@4
_EOS_Platform_Create@4
_EOS_Platform_GetAchievementsInterface@4
_EOS_Platform_GetActiveCountryCode@16
_EOS_Platform_GetActiveLocaleCode@16
_EOS_Platform_GetAntiCheatClientInterface@4
_EOS_Platform_GetAntiCheatServerInterface@4
_EOS_Platform_GetAuthInterface@4
_EOS_Platform_GetConnectInterface@4
_EOS_Platform_GetCustomInvitesInterface@4
_EOS_Platform_GetEcomInterface@4
_EOS_Platform_GetFriendsInterface@4
_EOS_Platform_GetKWSInterface@4
_EOS_Platform_GetLeaderboardsInterface@4
_EOS_Platform_GetLobbyInterface@4
_EOS_Platform_GetMetricsInterface@4
_EOS_Platform_GetModsInterface@4
_EOS_Platform_GetOverrideCountryCode@12
_EOS_Platform_GetOverrideLocaleCode@12
_EOS_Platform_GetP2PInterface@4
_EOS_Platform_GetPlayerDataStorageInterface@4
_EOS_Platform_GetPresenceInterface@4
_EOS_Platform_GetProgressionSnapshotInterface@4
_EOS_Platform_GetRTCAdminInterface@4
_EOS_Platform_GetRTCInterface@4
_EOS_Platform_GetReportsInterface@4
_EOS_Platform_GetSanctionsInterface@4
_EOS_Platform_GetSessionsInterface@4
_EOS_Platform_GetStatsInterface@4
_EOS_Platform_GetTitleStorageInterface@4
_EOS_Platform_GetUIInterface@4
_EOS_Platform_GetUserInfoInterface@4
_EOS_Platform_Release@4
_EOS_Platform_SetOverrideCountryCode@8
_EOS_Platform_SetOverrideLocaleCode@8
_EOS_Platform_Tick@4
_EOS_PlayerDataStorageFileTransferRequest_CancelRequest@4
_EOS_PlayerDataStorageFileTransferRequest_GetFileRequestState@4
_EOS_PlayerDataStorageFileTransferRequest_GetFilename@16
_EOS_PlayerDataStorageFileTransferRequest_Release@4
_EOS_PlayerDataStorage_CopyFileMetadataAtIndex@12
_EOS_PlayerDataStorage_CopyFileMetadataByFilename@12
_EOS_PlayerDataStorage_DeleteCache@16
_EOS_PlayerDataStorage_DeleteFile@16
_EOS_PlayerDataStorage_DuplicateFile@16
_EOS_PlayerDataStorage_FileMetadata_Release@4
_EOS_PlayerDataStorage_GetFileMetadataCount@12
_EOS_PlayerDataStorage_QueryFile@16
_EOS_PlayerDataStorage_QueryFileList@16
_EOS_PlayerDataStorage_ReadFile@16
_EOS_PlayerDataStorage_WriteFile@16
_EOS_PresenceModification_DeleteData@8
_EOS_PresenceModification_Release@4
_EOS_PresenceModification_SetData@8
_EOS_PresenceModification_SetJoinInfo@8
_EOS_PresenceModification_SetRawRichText@8
_EOS_PresenceModification_SetStatus@8
_EOS_Presence_AddNotifyJoinGameAccepted@16
_EOS_Presence_AddNotifyOnPresenceChanged@16
_EOS_Presence_CopyPresence@12
_EOS_Presence_CreatePresenceModification@12
_EOS_Presence_GetJoinInfo@16
_EOS_Presence_HasPresence@8
_EOS_Presence_Info_Release@4
_EOS_Presence_QueryPresence@16
_EOS_Presence_RemoveNotifyJoinGameAccepted@12
_EOS_Presence_RemoveNotifyOnPresenceChanged@12
_EOS_Presence_SetPresence@16
_EOS_ProductUserId_FromString@4
_EOS_ProductUserId_IsValid@4
_EOS_ProductUserId_ToString@12
_EOS_ProgressionSnapshot_AddProgression@8
_EOS_ProgressionSnapshot_BeginSnapshot@12
_EOS_ProgressionSnapshot_DeleteSnapshot@16
_EOS_ProgressionSnapshot_EndSnapshot@8
_EOS_ProgressionSnapshot_SubmitSnapshot@16
_EOS_RTCAdmin_CopyUserTokenByIndex@12
_EOS_RTCAdmin_CopyUserTokenByUserId@12
_EOS_RTCAdmin_Kick@16
_EOS_RTCAdmin_QueryJoinRoomToken@16
_EOS_RTCAdmin_SetParticipantHardMute@16
_EOS_RTCAdmin_UserToken_Release@4
_EOS_RTCAudio_AddNotifyAudioBeforeRender@16
_EOS_RTCAudio_AddNotifyAudioBeforeSend@16
_EOS_RTCAudio_AddNotifyAudioDevicesChanged@16
_EOS_RTCAudio_AddNotifyAudioInputState@16
_EOS_RTCAudio_AddNotifyAudioOutputState@16
_EOS_RTCAudio_AddNotifyParticipantUpdated@16
_EOS_RTCAudio_GetAudioInputDeviceByIndex@8
_EOS_RTCAudio_GetAudioInputDevicesCount@8
_EOS_RTCAudio_GetAudioOutputDeviceByIndex@8
_EOS_RTCAudio_GetAudioOutputDevicesCount@8
_EOS_RTCAudio_RegisterPlatformAudioUser@8
_EOS_RTCAudio_RemoveNotifyAudioBeforeRender@12
_EOS_RTCAudio_RemoveNotifyAudioBeforeSend@12
_EOS_RTCAudio_RemoveNotifyAudioDevicesChanged@12
_EOS_RTCAudio_RemoveNotifyAudioInputState@12
_EOS_RTCAudio_RemoveNotifyAudioOutputState@12
_EOS_RTCAudio_RemoveNotifyParticipantUpdated@12
_EOS_RTCAudio_SendAudio@8
_EOS_RTCAudio_SetAudioInputSettings@8
_EOS_RTCAudio_SetAudioOutputSettings@8
_EOS_RTCAudio_UnregisterPlatformAudioUser@8
_EOS_RTCAudio_UpdateReceiving@16
_EOS_RTCAudio_UpdateSending@16
_EOS_RTC_AddNotifyDisconnected@16
_EOS_RTC_AddNotifyParticipantStatusChanged@16
_EOS_RTC_BlockParticipant@16
_EOS_RTC_GetAudioInterface@4
_EOS_RTC_JoinRoom@16
_EOS_RTC_LeaveRoom@16
_EOS_RTC_RemoveNotifyDisconnected@12
_EOS_RTC_RemoveNotifyParticipantStatusChanged@12
_EOS_RTC_SetRoomSetting@8
_EOS_RTC_SetSetting@8
_EOS_Reports_SendPlayerBehaviorReport@16
_EOS_Sanctions_CopyPlayerSanctionByIndex@12
_EOS_Sanctions_GetPlayerSanctionCount@8
_EOS_Sanctions_PlayerSanction_Release@4
_EOS_Sanctions_QueryActivePlayerSanctions@16
_EOS_SessionDetails_Attribute_Release@4
_EOS_SessionDetails_CopyInfo@12
_EOS_SessionDetails_CopySessionAttributeByIndex@12
_EOS_SessionDetails_CopySessionAttributeByKey@12
_EOS_SessionDetails_GetSessionAttributeCount@8
_EOS_SessionDetails_Info_Release@4
_EOS_SessionDetails_Release@4
_EOS_SessionModification_AddAttribute@8
_EOS_SessionModification_Release@4
_EOS_SessionModification_RemoveAttribute@8
_EOS_SessionModification_SetBucketId@8
_EOS_SessionModification_SetHostAddress@8
_EOS_SessionModification_SetInvitesAllowed@8
_EOS_SessionModification_SetJoinInProgressAllowed@8
_EOS_SessionModification_SetMaxPlayers@8
_EOS_SessionModification_SetPermissionLevel@8
_EOS_SessionSearch_CopySearchResultByIndex@12
_EOS_SessionSearch_Find@16
_EOS_SessionSearch_GetSearchResultCount@8
_EOS_SessionSearch_Release@4
_EOS_SessionSearch_RemoveParameter@8
_EOS_SessionSearch_SetMaxResults@8
_EOS_SessionSearch_SetParameter@8
_EOS_SessionSearch_SetSessionId@8
_EOS_SessionSearch_SetTargetUserId@8
_EOS_Sessions_AddNotifyJoinSessionAccepted@16
_EOS_Sessions_AddNotifySessionInviteAccepted@16
_EOS_Sessions_AddNotifySessionInviteReceived@16
_EOS_Sessions_CopyActiveSessionHandle@12
_EOS_Sessions_CopySessionHandleByInviteId@12
_EOS_Sessions_CopySessionHandleByUiEventId@12
_EOS_Sessions_CopySessionHandleForPresence@12
_EOS_Sessions_CreateSessionModification@12
_EOS_Sessions_CreateSessionSearch@12
_EOS_Sessions_DestroySession@16
_EOS_Sessions_DumpSessionState@8
_EOS_Sessions_EndSession@16
_EOS_Sessions_GetInviteCount@8

Sections

.text
Size: 13.2MB - Virtual size: 13.2MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rodata
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 2.2MB - Virtual size: 2.2MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 116KB - Virtual size: 879KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

_RDATA
Size: 19KB - Virtual size: 18KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 71KB - Virtual size: 70KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 435KB - Virtual size: 434KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Online_V3/OnlineFixEOSAuthLauncher.ini

Sharing

General

Malware Config

Signatures

Files

48077b0dadc561e7d7110a970b9f9e4b

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

user32

Sections

.text Size: 91KB - Virtual size: 90KB

.rdata Size: 27KB - Virtual size: 26KB

.data Size: 2KB - Virtual size: 5KB

.rsrc Size: 136KB - Virtual size: 136KB

.reloc Size: 5KB - Virtual size: 4KB

c69c22b5a3698527f0d3c9618c3affbd

Code Sign

0d:42:4a:e0:be:3a:88:ff:60:40:21:ce:14:00:f0:ddCertificate

Extended Key Usages

Key Usages

0a:a1:25:d6:d6:32:1b:7e:41:e4:05:da:36:97:c2:15Certificate

Extended Key Usages

Key Usages

05:9b:1b:57:9e:8e:21:32:e2:39:07:bd:a7:77:75:5cCertificate

Key Usages

08:ad:40:b2:60:d2:9c:4c:9f:5e:cd:a9:bd:93:ae:d9Certificate

Extended Key Usages

Key Usages

06:89:b3:bc:eb:44:09:89:0a:32:d7:19:76:b1:32:a4Certificate

Extended Key Usages

Key Usages

23:43:7e:d8:bb:1b:86:b5:4a:d9:c3:c2:29:61:7a:50:09:43:46:3a:08:9c:52:5d:84:0f:48:34:12:74:f1:91Signer

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

advapi32

shell32

Exports

Exports

Sections

.text Size: 152KB - Virtual size: 151KB

.rdata Size: 108KB - Virtual size: 108KB

.data Size: 4KB - Virtual size: 11KB

.pdata Size: 9KB - Virtual size: 8KB

_RDATA Size: 512B - Virtual size: 244B

.rsrc Size: 2KB - Virtual size: 1KB

.reloc Size: 2KB - Virtual size: 1KB

70e5066fac5169ee779903c2061404de

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

user32

shell32

shlwapi

Sections

.text Size: 62KB - Virtual size: 64KB

.rdata Size: 41KB - Virtual size: 44KB

.data Size: 3KB - Virtual size: 8KB

.pdata Size: 4KB - Virtual size: 4KB

_RDATA Size: 512B - Virtual size: 4KB

.rsrc Size: 132KB - Virtual size: 132KB

.reloc Size: 2KB - Virtual size: 4KB

.bind Size: 202KB - Virtual size: 204KB

299f87ad77417b9bc89001bf63b600bd

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

user32

advapi32

ws2_32

crypt32

.text
Size: 91KB - Virtual size: 90KB

.rdata
Size: 27KB - Virtual size: 26KB

.data
Size: 2KB - Virtual size: 5KB

.rsrc
Size: 136KB - Virtual size: 136KB

.reloc
Size: 5KB - Virtual size: 4KB

0d:42:4a:e0:be:3a:88:ff:60:40:21:ce:14:00:f0:dd
Certificate

0a:a1:25:d6:d6:32:1b:7e:41:e4:05:da:36:97:c2:15
Certificate

05:9b:1b:57:9e:8e:21:32:e2:39:07:bd:a7:77:75:5c
Certificate

08:ad:40:b2:60:d2:9c:4c:9f:5e:cd:a9:bd:93:ae:d9
Certificate

06:89:b3:bc:eb:44:09:89:0a:32:d7:19:76:b1:32:a4
Certificate

23:43:7e:d8:bb:1b:86:b5:4a:d9:c3:c2:29:61:7a:50:09:43:46:3a:08:9c:52:5d:84:0f:48:34:12:74:f1:91
Signer

.text
Size: 152KB - Virtual size: 151KB

.rdata
Size: 108KB - Virtual size: 108KB

.data
Size: 4KB - Virtual size: 11KB

.pdata
Size: 9KB - Virtual size: 8KB

_RDATA
Size: 512B - Virtual size: 244B

.rsrc
Size: 2KB - Virtual size: 1KB

.reloc
Size: 2KB - Virtual size: 1KB

.text
Size: 62KB - Virtual size: 64KB

.rdata
Size: 41KB - Virtual size: 44KB

.data
Size: 3KB - Virtual size: 8KB

.pdata
Size: 4KB - Virtual size: 4KB

_RDATA
Size: 512B - Virtual size: 4KB

.rsrc
Size: 132KB - Virtual size: 132KB

.reloc
Size: 2KB - Virtual size: 4KB

.bind
Size: 202KB - Virtual size: 204KB

.text
Size: - Virtual size: 1.6MB

.rdata
Size: - Virtual size: 667KB

.data
Size: - Virtual size: 81KB

.pdata
Size: - Virtual size: 96KB

_RDATA
Size: - Virtual size: 348B

.of0
Size: - Virtual size: 1.7MB

.of1
Size: 2KB - Virtual size: 2KB

.of2
Size: 4.7MB - Virtual size: 4.7MB

.reloc
Size: 512B - Virtual size: 224B

.rsrc
Size: 1024B - Virtual size: 897B

.text
Size: - Virtual size: 1.6MB

.rdata
Size: - Virtual size: 535KB

.data
Size: - Virtual size: 307KB

.pdata
Size: - Virtual size: 78KB

_RDATA
Size: - Virtual size: 348B

.of0
Size: - Virtual size: 1.9MB

.of1
Size: 2KB - Virtual size: 2KB

.of2
Size: 4.8MB - Virtual size: 4.8MB

.reloc
Size: 512B - Virtual size: 200B

.rsrc
Size: 1024B - Virtual size: 664B

.text
Size: 372KB - Virtual size: 372KB

.rdata
Size: 108KB - Virtual size: 107KB

.data
Size: 8KB - Virtual size: 15KB

.pdata
Size: 17KB - Virtual size: 16KB

_RDATA
Size: 512B - Virtual size: 348B

.rsrc
Size: 1024B - Virtual size: 648B

.reloc
Size: 4KB - Virtual size: 3KB

0d:fe:7b:a4:82:f0:76:db:90:bc:c2:2b:2c:48:7c:bd
Certificate

04:09:18:1b:5f:d5:bb:66:75:53:43:b5:6f:95:50:08
Certificate

30:0f:6f:ac:dd:66:98:74:7c:a9:46:36:a7:78:2d:b9
Certificate

90:39:7f:9a:d2:4a:3a:13:f2:bd:91:5f:08:38:a9:43
Certificate

0d:fe:7b:a4:82:f0:76:db:90:bc:c2:2b:2c:48:7c:bd
Certificate