Soundpad(RAFAGAMEPLAY)[.]zip

Sharing

Copy URL Twitter E-mail

General

Target

Soundpad(RAFAGAMEPLAY).zip
Size

10.3MB
MD5

e0af35f0087e9724abbe22e02a445adf
SHA1

ceb8105c6bf7456246de02bc06fca3f4eb24a34c
SHA256

422593145fbf15e26727a34929f39816adaf9efa5fb813bc3afedfd40e369d23
SHA512

429b83c8c8720813d094ae422631ab6ade4719f2fafcd84670c294852eb959dac2b2d51d9a582a1caa85abb5d5836447dd1a285f3b358a0ef8165c86d53a2c72
SSDEEP

196608:TPu4Arf2WHNQH5yXjBcONPOx/wRrdl3w99BpjooiS/N1DwIxGY+QeLvCgNchvL7:TP7Ar9QH5yTBLcYrq/3MoV11sYGY+hLy

Score

7^/10

upx

Malware Config

Signatures

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

upx

resource	yara_rule
static1/unpack001/Soundpad/steam_api64.dll	upx

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/Soundpad/steam_api64.dll

Files

Soundpad(RAFAGAMEPLAY).zip
.zip
Soundpad/Profile/CRACKED BY Ray_Black/SteamUserID.cfg
Soundpad/Soundpad.exe
.exe windows:6 windows x64 arch:x64

43d019e6db101f731f8ec1031876208c

Code Sign

42:1a:f2:94:09:84:19:1f:52:0a:4b:c6:24:26:a7:4b
Certificate

Issuer

CN=AddTrust External CA Root,OU=AddTrust External TTP Network,O=AddTrust AB,C=SE

Not Before

07/06/2005, 08:09

Not After

30/05/2020, 10:48

Subject

CN=UTN-USERFirst-Object,OU=http://www.usertrust.com,O=The USERTRUST Network,L=Salt Lake City,ST=UT,C=US

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

62:5c:4d:90:8c:d5:42:fb:ab:2e:a5:73:3f:f1:54:19
Certificate

Issuer

CN=UTN-USERFirst-Object,OU=http://www.usertrust.com,O=The USERTRUST Network,L=Salt Lake City,ST=UT,C=US

Not Before

27/04/2011, 00:00

Not After

30/05/2020, 10:48

Subject

CN=COMODO Time Stamping CA,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

2b:73:db:74:63:11:4c:5a:5b:32:4a:f2:30:57:72:49
Certificate

Issuer

CN=COMODO Time Stamping CA,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB

Not Before

02/05/2019, 00:00

Not After

30/05/2020, 10:48

Subject

CN=Sectigo SHA-1 Time Stamping Signer,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GB

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

47:49:34:c0:ab:e3:c1:c9:81:d8:82:d3:44:50:13:52
Certificate

Issuer

CN=COMODO RSA Code Signing CA,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB

Not Before

11/10/2017, 00:00

Not After

11/10/2019, 23:59

Subject

CN=Arthur Lepp,OU=IT,O=Arthur Lepp,POSTALCODE=50825,STREET=Iltisstr. 142,L=Köln,ST=NRW,C=DE,2.5.4.18=#13053530383235

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

2e:7c:87:cc:0e:93:4a:52:fe:94:fd:1c:b7:cd:34:af
Certificate

Issuer

CN=COMODO RSA Certification Authority,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB

Not Before

09/05/2013, 00:00

Not After

08/05/2028, 23:59

Subject

CN=COMODO RSA Code Signing CA,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

3c:15:4a:ff:78:19:9b:f3:fd:fd:59:f6:6a:64:63:c0:ba:f8:0d:48
Signer

Actual PE Digest

3c:15:4a:ff:78:19:9b:f3:fd:fd:59:f6:6a:64:63:c0:ba:f8:0d:48

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB Paths

C:\dev\UniteFx\x64\Steam Release\Soundpad.pdb

Imports

usp10

ScriptBreak
ScriptItemize

dwmapi

DwmIsCompositionEnabled
DwmExtendFrameIntoClientArea

steam_api64

SteamAPI_Init
SteamAPI_Shutdown
SteamInternal_CreateInterface
SteamAPI_GetHSteamUser
SteamInternal_ContextInit
SteamAPI_GetHSteamPipe

kernel32

GetDiskFreeSpaceExW
GetFileInformationByHandle
GetVolumeInformationW
DisconnectNamedPipe
FlushFileBuffers
WriteFile
WideCharToMultiByte
CancelIo
WaitForMultipleObjects
ReadFile
ConnectNamedPipe
CreateNamedPipeW
SetUnhandledExceptionFilter
UnmapViewOfFile
GetCurrentProcessId
CreateFileW
GetTempPathW
GetProcAddress
LoadLibraryW
CopyFileW
CreateEventW
OutputDebugStringW
GetModuleHandleW
GetCurrentThreadId
GetCurrentProcess
MoveFileExW
ReplaceFileW
FreeLibrary
EnumResourceNamesW
LoadLibraryExW
FreeResource
LockResource
LoadResource
SizeofResource
FindResourceW
QueryFullProcessImageNameW
OpenProcess
Sleep
CreateDirectoryW
CloseHandle
GetExitCodeProcess
WaitForSingleObject
GetModuleFileNameW
GetLastError
WaitForSingleObjectEx
FindFirstFileW
CreateEventExW
FindNextFileW
K32GetModuleFileNameExW
CreateMutexW
FindClose
GetFileAttributesW
ReleaseMutex
OpenFileMappingW
FormatMessageW
GetFileAttributesExW
K32EnumProcesses
GetWindowsDirectoryW
K32EnumProcessModules
CreateFileMappingW
MapViewOfFile
HeapAlloc
LocalFree
GetProcessHeap
GetLocalTime
HeapSetInformation
MultiByteToWideChar
SetErrorMode
GetFileTime
GetLongPathNameW
GetTempFileNameW
SetCurrentDirectoryW
GetFileType
InitializeCriticalSection
EnterCriticalSection
LeaveCriticalSection
TryEnterCriticalSection
DeleteCriticalSection
ReleaseSemaphore
ExitProcess
SetThreadPriority
GetExitCodeThread
ResumeThread
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
GetProcessAffinityMask
ExpandEnvironmentStringsW
GetACP
GetLocaleInfoW
IsValidLocale
GetThreadLocale
SetThreadLocale
GetUserDefaultLCID
QueryPerformanceCounter
QueryPerformanceFrequency
GetEnvironmentVariableW
IsDebuggerPresent
TerminateProcess
GetVersionExW
IsValidCodePage
GetCPInfo
RtlCaptureContext
GetCurrentThread
GetCommandLineW
GetSystemTimeAsFileTime
PeekNamedPipe
CreateThread
IsBadReadPtr
IsBadStringPtrA
RaiseException
GetSystemDirectoryA
GetModuleHandleA
LoadLibraryA
SetLastError
MulDiv
GlobalAlloc
GlobalUnlock
GlobalLock
GlobalFree
HeapSize
GlobalSize
GetStdHandle
FreeConsole
AttachConsole
WriteConsoleA
WriteConsoleW
FillConsoleOutputCharacterW
GetConsoleScreenBufferInfo
SetConsoleCursorPosition
ReadConsoleOutputCharacterA
DuplicateHandle
SwitchToThread
GetStringTypeW
RtlPcToFileHeader
EncodePointer
DecodePointer
InitializeCriticalSectionAndSpinCount
GetTickCount
CompareStringW
LCMapStringW
RtlLookupFunctionEntry
RtlVirtualUnwind
UnhandledExceptionFilter
IsProcessorFeaturePresent
GetStartupInfoW
InitializeSListHead
CreateTimerQueue
SignalObjectAndWait
GetThreadPriority
GetLogicalProcessorInformation
CreateTimerQueueTimer
ChangeTimerQueueTimer
DeleteTimerQueueTimer
GetNumaHighestNodeNumber
SetThreadAffinityMask
RegisterWaitForSingleObject
UnregisterWait
GetThreadTimes
FreeLibraryAndExitThread
VirtualAlloc
VirtualProtect
VirtualFree
InterlockedPopEntrySList
InterlockedPushEntrySList
InterlockedFlushSList
QueryDepthSList
UnregisterWaitEx
RtlUnwindEx
GetDriveTypeW
GetFullPathNameW
SystemTimeToTzSpecificLocalTime
FileTimeToSystemTime
GetModuleHandleExW
SetStdHandle
ExitThread
GetConsoleMode
ReadConsoleW
GetConsoleCP
SetFilePointerEx
GetTimeZoneInformation
HeapFree
GetDateFormatW
GetTimeFormatW
EnumSystemLocalesW
GetCurrentDirectoryW
RtlUnwind
HeapReAlloc
SetEndOfFile
GetOEMCP
GetEnvironmentStringsW
FreeEnvironmentStringsW
SetEnvironmentVariableW
FindFirstFileExW
GetCommandLineA
ResetEvent
SetEvent
DeleteFileW
GetLogicalDriveStringsW
GetFileSizeEx

user32

MapWindowPoints
WindowFromPoint
ChildWindowFromPointEx
InflateRect
PtInRect
SetParent
GetWindow
IsDialogMessageW
SetScrollInfo
GetScrollInfo
SystemParametersInfoW
CreateDialogParamW
GetDlgItem
GetWindowPlacement
SetLayeredWindowAttributes
FlashWindowEx
IsIconic
IsZoomed
CreateDialogIndirectParamW
GetDialogBaseUnits
DrawMenuBar
GetSystemMenu
EnableMenuItem
SetWindowRgn
DestroyIcon
LoadBitmapW
LoadIconW
LoadImageW
DrawStateW
SetRectEmpty
CopyRect
OffsetRect
DrawFrameControl
DrawIconEx
DestroyCursor
GetMenuState
CreateMenu
CreatePopupMenu
DestroyMenu
GetSubMenu
InsertMenuW
AppendMenuW
ModifyMenuW
RemoveMenu
SetMenuInfo
InsertMenuItemW
SetMenuItemInfoW
DrawEdge
CheckMenuItem
GetMenuItemID
GetSysColorBrush
SetRect
CheckMenuRadioItem
RegisterWindowMessageW
SetMenu
ClientToScreen
EndDialog
EnumChildWindows
ChildWindowFromPoint
GetComboBoxInfo
UnionRect
GetClassInfoW
IsRectEmpty
EnableScrollBar
keybd_event
GetWindowTextLengthW
HideCaret
ShowCaret
RegisterClipboardFormatW
GetClipboardFormatNameW
GetProcessDefaultLayout
GetWindowTextW
MessageBeep
GetClassNameW
CreateAcceleratorTableW
DestroyAcceleratorTable
TranslateAcceleratorW
GetMessageW
ValidateRect
GetWindowDC
BeginPaint
EndPaint
ValidateRgn
NotifyWinEvent
ChangeDisplaySettingsExW
EnumDisplaySettingsW
MonitorFromPoint
MonitorFromWindow
GetMonitorInfoW
EnumDisplayMonitors
IsClipboardFormatAvailable
wsprintfW
AdjustWindowRectEx
ShowCursor
BringWindowToTop
CreateWindowExW
RegisterClassW
PostMessageW
PostThreadMessageW
MessageBoxW
ScrollWindow
RedrawWindow
InvalidateRect
GetUpdateRgn
GetCursorPos
UpdateWindow
GetMenuItemInfoW
ScreenToClient
SetCursorPos
GetClientRect
FindWindowExW
TrackPopupMenu
GetMenuItemCount
IsWindowEnabled
EnableWindow
ReleaseCapture
SetCapture
GetCapture
VkKeyScanW
GetKeyState
GetFocus
GetActiveWindow
SetFocus
IsWindowVisible
EndDeferWindowPos
DeferWindowPos
BeginDeferWindowPos
MoveWindow
AnimateWindow
ShowWindow
IsWindow
CallWindowProcW
PostQuitMessage
GetMessageTime
GetMessagePos
UnregisterHotKey
RegisterHotKey
TranslateMessage
GetParent
SetWindowLongPtrW
GetWindowLongPtrW
FillRect
DrawFocusRect
GetSysColor
DrawTextW
GetSystemMetrics
GetIconInfo
CreateIconIndirect
ReleaseDC
GetDC
DdeFreeStringHandle
DdeQueryStringW
DdeCreateStringHandleW
DdeGetLastError
DdeFreeDataHandle
DdeGetData
DdeCreateDataHandle
DdeClientTransaction
DdeNameService
DdePostAdvise
DdeDisconnect
DdeConnect
DdeUninitialize
DdeInitializeW
LoadCursorW
SetCursor
KillTimer
SetTimer
MsgWaitForMultipleObjects
DispatchMessageW
GetClassLongPtrW
SetClassLongPtrW
SendMessageW
GetWindowThreadProcessId
GetWindowLongW
SetWindowPos
MapVirtualKeyW
GetKeyNameTextW
SetWindowsHookExW
UnhookWindowsHookEx
RegisterRawInputDevices
GetRawInputData
CallNextHookEx
GetForegroundWindow
GetDesktopWindow
GetShellWindow
GetWindowRect
SendInput
GetAsyncKeyState
GetDoubleClickTime
ExitWindowsEx
SetForegroundWindow
SetWindowLongW
DestroyWindow
UnregisterClassW
SetWindowTextW
DefWindowProcW
IsMenu
PeekMessageW

advapi32

CryptDestroyHash
CryptHashData
GetUserNameW
RegEnumKeyW
RegDeleteKeyW
RegCloseKey
CryptDestroyKey
CryptAcquireContextW
CryptCreateHash
CryptGetHashParam
CryptReleaseContext
RegCreateKeyExW
RegDeleteTreeW
RegSetValueExW
RegOpenKeyExW
RegDeleteValueW
RegEnumValueW
RegQueryValueExW
CloseServiceHandle
OpenSCManagerW
OpenServiceW
NotifyServiceStatusChangeW
OpenProcessToken
SetSecurityDescriptorDacl
InitializeSecurityDescriptor
AdjustTokenPrivileges
LookupPrivilegeValueW

shell32

DragAcceptFiles
DragFinish
ExtractIconW
SHGetMalloc
SHBrowseForFolderW
Shell_NotifyIconW
SHGetFileInfoW
ord6
DragQueryPoint
DragQueryFileW
CommandLineToArgvW
SHGetFolderPathW
ord155
ShellExecuteExW
SHChangeNotify
SHGetPathFromIDListW
ord190
SHCreateItemFromParsingName
ExtractIconExW
SHOpenFolderAndSelectItems
SHCreateDirectoryExW

ole32

OleIsCurrentClipboard
OleFlushClipboard
RegisterDragDrop
OleGetClipboard
OleSetClipboard
DoDragDrop
CoUninitialize
CoSetProxyBlanket
CoInitializeEx
PropVariantClear
CoTaskMemFree
CLSIDFromString
CoCreateInstance
CoLockObjectExternal
ReleaseStgMedium
RevokeDragDrop
CoTaskMemAlloc
OleUninitialize
OleInitialize

unitefxcontrol

?InstallUfx@ApoRegistry@@QEAA?AUretCode@@XZ
?PlaySoundData@UniteFxControl@@QEAAJAEAV?$vector@EV?$allocator@E@std@@@std@@AEBVAudioFormat@@@Z
?SetLogLevel@ApoRegistry@@QEAA?AUretCode@@W4LogLevel@Leppsoft@@@Z
?GetLogLevel@ApoRegistry@@QEAA?AW4LogLevel@Leppsoft@@XZ
?PlaySoundFile@UniteFxControl@@QEAAJPEB_WAEA_NAEAUUfxMediaControl@@@Z
?PlaySoundFileEx@UniteFxControl@@QEAAJPEAVAudioFile@@AEA_NAEAUUfxMediaControl@@@Z
??0ApoRegistry@@QEAA@XZ
??1ApoRegistry@@QEAA@XZ
?GetDeviceList@ApoRegistry@@QEAA?AUretCode@@PEAPEAUApoDeviceInfo@@PEAHW4EnumDeviceType@@_N@Z
?IsElevated@ApoRegistry@@QEAA?AUretCode@@PEA_N@Z
?GetDrmProtection@ApoRegistry@@QEAA?AUretCode@@PEA_N@Z
??0UniteFxControl@@QEAA@XZ
??1UniteFxControl@@QEAA@XZ
?GetFilterBlockVoice@UniteFxControl@@QEAAJAEA_N@Z
?SetFilterBlockVoice@UniteFxControl@@QEAAJAEA_N@Z
?RestoreSetup@ApoRegistry@@QEAA?AUretCode@@PEAUUfxSetupStatus@@@Z
?GetSetupStatus@ApoRegistry@@QEAA?AUUfxSetupStatus@@XZ
??0ServiceControl@@QEAA@XZ
??1ServiceControl@@QEAA@XZ
?RestartService@ServiceControl@@QEAA?AUretCode@@AEAV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@@Z
?SetDrmProtection@ApoRegistry@@QEAA?AUretCode@@_N@Z
?UnregisterApo@ApoRegistry@@QEAA?AUretCode@@XZ
?RegisterApo@ApoRegistry@@QEAA?AUretCode@@AEBV?$vector@VStr@@V?$allocator@VStr@@@std@@@std@@@Z
?UninstallUfx@ApoRegistry@@QEAA?AUretCode@@XZ

wsock32

WSACleanup
WSAStartup

comctl32

ImageList_GetImageCount
ImageList_Add
ImageList_ReplaceIcon
ImageList_SetBkColor
ImageList_Destroy
ImageList_SetDragCursorImage
ImageList_Replace
ImageList_Remove
ImageList_Create
ord16
ImageList_Draw
ImageList_GetIconSize
ImageList_GetImageInfo
ImageList_Copy
ImageList_BeginDrag
ImageList_EndDrag
ImageList_DragEnter
ImageList_DragLeave
ImageList_DragMove
ord17

rpcrt4

UuidToStringW
RpcStringFreeW

oleacc

CreateStdAccessibleObject

uxtheme

IsThemeActive
IsAppThemed
IsThemeBackgroundPartiallyTransparent
OpenThemeData
IsThemePartDefined
GetCurrentThemeName
SetWindowTheme
GetThemeBackgroundExtent
GetThemeFont
GetThemeSysFont
GetThemeSysColor
GetThemeInt
GetThemePartSize
GetThemeMargins
CloseThemeData
GetThemeBackgroundContentRect
DrawThemeParentBackground
GetThemeColor
DrawThemeBackground

wininet

InternetOpenW
InternetQueryDataAvailable
InternetReadFile
HttpQueryInfoW
HttpSendRequestW
InternetCloseHandle
InternetConnectW
HttpOpenRequestW

mf

MFCreateTranscodeProfile
MFCreateMediaSession
MFCreateTranscodeTopology
MFGetService

mfplat

MFCreateMFByteStreamOnStream
MFCreateAttributes
MFCreateSample
MFCreateMemoryBuffer
MFShutdown
MFStartup
MFCreateSourceResolver
MFCreateMediaType

mfreadwrite

MFCreateSourceReaderFromURL
MFCreateSourceReaderFromByteStream

shlwapi

ord219
SHAutoComplete
AssocQueryStringW
ord12

avrt

AvSetMmThreadCharacteristicsW
AvRevertMmThreadCharacteristics

msimg32

GradientFill
AlphaBlend

gdi32

GetStockObject
MaskBlt
Pie
PolyPolygon
Rectangle
GetObjectType
GetClipBox
RoundRect
SelectClipRgn
ExtSelectClipRgn
GetBkColor
Ellipse
Arc
GetPixel
ExtFloodFill
CreateSolidBrush
CreatePen
BitBlt
GetRegionData
ExtCreateRegion
SetGraphicsMode
SetMapMode
SetLayout
GetLayout
SetPixel
EnumFontFamiliesExW
EndPage
StartPage
EndDoc
StartDocW
CreateDCW
SetAbortProc
GetSystemPaletteEntries
PlayEnhMetaFile
GetEnhMetaFileHeader
GetEnhMetaFileW
DeleteEnhMetaFile
CreateEnhMetaFileW
CloseEnhMetaFile
CreateICW
GetTextExtentExPointW
GetCharABCWidthsW
PtInRegion
GetRgnBox
EqualRgn
MoveToEx
LineTo
GetDIBColorTable
CreateDIBSection
GetDIBits
CreateDIBitmap
GetPaletteEntries
GetNearestPaletteIndex
CreatePalette
GetOutlineTextMetricsW
GetDeviceCaps
CreateFontIndirectW
GdiFlush
SetBrushOrgEx
GetTextMetricsW
SelectPalette
RealizePalette
ExcludeClipRect
CreateRectRgn
SetTextColor
SetBkMode
GetObjectW
SetBkColor
SelectObject
DeleteObject
DeleteDC
CreateCompatibleDC
CreateCompatibleBitmap
CreateBitmap
OffsetRgn
RectInRegion
CreateRectRgnIndirect
CombineRgn
GetTextExtentPoint32W
ExtCreatePen
CreatePatternBrush
CreateHatchBrush
SetWindowOrgEx
SetWindowExtEx
SetViewportOrgEx
SetViewportExtEx
PolyBezier
Polyline
Polygon
ExtTextOutW
ModifyWorldTransform
SetWorldTransform
GetWorldTransform
SetStretchBltMode
SetROP2
StretchDIBits
StretchBlt
SetPolyFillMode

winspool.drv

DocumentPropertiesW
ClosePrinter
OpenPrinterW

comdlg32

GetSaveFileNameW
CommDlgExtendedError
ChooseFontW
PrintDlgW
PageSetupDlgW
GetOpenFileNameW

oleaut32

VariantClear
SysAllocString
SysFreeString
VariantInit
SysStringLen
SystemTimeToVariantTime
SafeArrayCreate
SafeArrayDestroy
SafeArrayGetVartype
VarBstrFromCy
SafeArrayLock
SafeArrayUnlock

Sections

.text
Size: 6.6MB - Virtual size: 6.6MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 2.9MB - Virtual size: 2.9MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 150KB - Virtual size: 893KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 219KB - Virtual size: 218KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

_RDATA
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 916KB - Virtual size: 915KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 127KB - Virtual size: 127KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Soundpad/SteamConfig.ini
Soundpad/UniteFxControl.dll
.dll windows:6 windows x64 arch:x64

38e3078f900264dff81caa6939470d10

Code Sign

42:1a:f2:94:09:84:19:1f:52:0a:4b:c6:24:26:a7:4b
Certificate

Issuer

CN=AddTrust External CA Root,OU=AddTrust External TTP Network,O=AddTrust AB,C=SE

Not Before

07/06/2005, 08:09

Not After

30/05/2020, 10:48

Subject

CN=UTN-USERFirst-Object,OU=http://www.usertrust.com,O=The USERTRUST Network,L=Salt Lake City,ST=UT,C=US

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

62:5c:4d:90:8c:d5:42:fb:ab:2e:a5:73:3f:f1:54:19
Certificate

Issuer

CN=UTN-USERFirst-Object,OU=http://www.usertrust.com,O=The USERTRUST Network,L=Salt Lake City,ST=UT,C=US

Not Before

27/04/2011, 00:00

Not After

30/05/2020, 10:48

Subject

CN=COMODO Time Stamping CA,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

2b:73:db:74:63:11:4c:5a:5b:32:4a:f2:30:57:72:49
Certificate

Issuer

CN=COMODO Time Stamping CA,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB

Not Before

02/05/2019, 00:00

Not After

30/05/2020, 10:48

Subject

CN=Sectigo SHA-1 Time Stamping Signer,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GB

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

47:49:34:c0:ab:e3:c1:c9:81:d8:82:d3:44:50:13:52
Certificate

Issuer

CN=COMODO RSA Code Signing CA,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB

Not Before

11/10/2017, 00:00

Not After

11/10/2019, 23:59

Subject

CN=Arthur Lepp,OU=IT,O=Arthur Lepp,POSTALCODE=50825,STREET=Iltisstr. 142,L=Köln,ST=NRW,C=DE,2.5.4.18=#13053530383235

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

2e:7c:87:cc:0e:93:4a:52:fe:94:fd:1c:b7:cd:34:af
Certificate

Issuer

CN=COMODO RSA Certification Authority,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB

Not Before

09/05/2013, 00:00

Not After

08/05/2028, 23:59

Subject

CN=COMODO RSA Code Signing CA,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

bc:51:8d:2d:47:58:93:91:16:14:8e:7d:9e:0f:60:6e:ca:ef:3b:2f
Signer

Actual PE Digest

bc:51:8d:2d:47:58:93:91:16:14:8e:7d:9e:0f:60:6e:ca:ef:3b:2f

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

PDB Paths

C:\dev\UniteFx\x64\Release\UniteFxControl.pdb

Imports

kernel32

ResetEvent
SetEvent
CreateEventW
WaitForMultipleObjects
GetProcessHeap
HeapAlloc
GetTickCount64
Sleep
HeapFree
GetExitCodeProcess
VerifyVersionInfoW
CopyFileW
VerSetConditionMask
MoveFileExW
CloseHandle
GetLastError
WaitForSingleObject
WriteConsoleW
HeapSize
SetEndOfFile
FlushFileBuffers
SetEnvironmentVariableW
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetCommandLineW
GetCommandLineA
GetOEMCP
GetACP
IsValidCodePage
FindFirstFileExW
GetModuleFileNameW
GetCurrentProcess
UnmapViewOfFile
CreateEventExW
FindNextFileW
CreateMutexW
FindClose
GetFileAttributesW
ReleaseMutex
OpenFileMappingW
GetSystemDirectoryW
FormatMessageW
GetFileAttributesExW
CreateFileMappingW
MapViewOfFile
CreateDirectoryW
GetCurrentThreadId
GetLocalTime
GetCurrentProcessId
LocalAlloc
LocalFree
DeleteFileW
CreateFileW
MultiByteToWideChar
QueryPerformanceCounter
QueryPerformanceFrequency
EnterCriticalSection
LeaveCriticalSection
TryEnterCriticalSection
DeleteCriticalSection
DuplicateHandle
WaitForSingleObjectEx
SwitchToThread
GetCurrentThread
GetExitCodeThread
GetStringTypeW
WideCharToMultiByte
SetLastError
InitializeCriticalSectionAndSpinCount
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
GetSystemTimeAsFileTime
GetTickCount
GetModuleHandleW
GetProcAddress
EncodePointer
DecodePointer
CompareStringW
LCMapStringW
GetLocaleInfoW
GetCPInfo
RtlCaptureContext
RtlLookupFunctionEntry
RtlVirtualUnwind
UnhandledExceptionFilter
SetUnhandledExceptionFilter
TerminateProcess
IsProcessorFeaturePresent
IsDebuggerPresent
GetStartupInfoW
InitializeSListHead
CreateTimerQueue
SignalObjectAndWait
CreateThread
SetThreadPriority
GetThreadPriority
GetLogicalProcessorInformation
CreateTimerQueueTimer
ChangeTimerQueueTimer
DeleteTimerQueueTimer
GetNumaHighestNodeNumber
GetProcessAffinityMask
SetThreadAffinityMask
RegisterWaitForSingleObject
UnregisterWait
GetThreadTimes
FreeLibrary
FreeLibraryAndExitThread
GetModuleHandleA
LoadLibraryExW
GetVersionExW
VirtualAlloc
VirtualProtect
VirtualFree
ReleaseSemaphore
InterlockedPopEntrySList
InterlockedPushEntrySList
InterlockedFlushSList
QueryDepthSList
UnregisterWaitEx
LoadLibraryW
RtlUnwindEx
RtlPcToFileHeader
RaiseException
ReadFile
GetFileInformationByHandle
GetFileType
PeekNamedPipe
SystemTimeToTzSpecificLocalTime
FileTimeToSystemTime
ExitProcess
GetModuleHandleExW
ExitThread
GetDateFormatW
GetTimeFormatW
IsValidLocale
GetUserDefaultLCID
EnumSystemLocalesW
GetStdHandle
GetConsoleMode
ReadConsoleW
WriteFile
GetConsoleCP
GetFileSizeEx
SetFilePointerEx
HeapReAlloc
SetStdHandle
GetCurrentDirectoryW
GetTimeZoneInformation

advapi32

RegSetValueExW
RegCreateKeyExW
RegDeleteKeyExW
InitializeSecurityDescriptor
SetSecurityDescriptorDacl
RegEnumValueW
RegDeleteValueW
FreeSid
RegDeleteTreeW
RegSetKeySecurity
SetEntriesInAclW
AllocateAndInitializeSid
SetSecurityDescriptorOwner
RegGetKeySecurity
GetSecurityDescriptorDacl
AdjustTokenPrivileges
LookupPrivilegeValueW
RegEnumKeyExW
RegQueryValueExW
RegOpenKeyExW
GetTokenInformation
OpenProcessToken
QueryServiceStatusEx
OpenServiceW
StartServiceW
EnumDependentServicesW
ControlService
OpenSCManagerW
CloseServiceHandle
RegCloseKey

shell32

ShellExecuteExW

ole32

CoInitializeEx
CoSetProxyBlanket
CoUninitialize
PropVariantClear
CoCreateInstance
CoTaskMemFree
CLSIDFromString
StringFromGUID2

mfplat

MFCreateMFByteStreamOnStream
MFCreateSample
MFCreateMemoryBuffer
MFCreateAttributes
MFCreateMediaType

mfreadwrite

MFCreateSourceReaderFromURL
MFCreateSourceReaderFromByteStream

shlwapi

ord12

avrt

AvRevertMmThreadCharacteristics
AvSetMmThreadCharacteristicsW

oleaut32

SysAllocString
VariantClear
SysFreeString

Exports

Exports

??0ApoRegistry@@QEAA@XZ
??0ServiceControl@@QEAA@XZ
??0UniteFxControl@@QEAA@$$QEAV0@@Z
??0UniteFxControl@@QEAA@XZ
??1ApoRegistry@@QEAA@XZ
??1ServiceControl@@QEAA@XZ
??1UniteFxControl@@QEAA@XZ
??4UniteFxControl@@QEAAAEAV0@$$QEAV0@@Z
?GetDefaultDevice@ApoRegistry@@QEAA?AUretCode@@AEAPEB_WW4EnumDeviceType@@@Z
?GetDeviceList@ApoRegistry@@QEAA?AUretCode@@PEAPEAUApoDeviceInfo@@PEAHW4EnumDeviceType@@_N@Z
?GetDrmProtection@ApoRegistry@@QEAA?AUretCode@@PEA_N@Z
?GetDrmProtectionConfig@ApoRegistry@@QEAA?AUretCode@@PEA_N@Z
?GetFilterBlockVoice@UniteFxControl@@QEAAJAEA_N@Z
?GetLogLevel@ApoRegistry@@QEAA?AW4LogLevel@Leppsoft@@XZ
?GetSetupStatus@ApoRegistry@@QEAA?AUUfxSetupStatus@@XZ
?InstallUfx@ApoRegistry@@QEAA?AUretCode@@XZ
?IsElevated@ApoRegistry@@QEAA?AUretCode@@PEA_N@Z
?PlaySoundData@UniteFxControl@@QEAAJAEAV?$vector@EV?$allocator@E@std@@@std@@AEBVAudioFormat@@@Z
?PlaySoundFile@UniteFxControl@@QEAAJPEB_WAEA_NAEAUUfxMediaControl@@@Z
?PlaySoundFileEx@UniteFxControl@@QEAAJPEAVAudioFile@@AEA_NAEAUUfxMediaControl@@@Z
?RegisterApo@ApoRegistry@@QEAA?AUretCode@@AEBV?$vector@VStr@@V?$allocator@VStr@@@std@@@std@@@Z
?RegisterApoOnDefaultDevice@ApoRegistry@@QEAA?AUretCode@@XZ
?RestartService@ServiceControl@@QEAA?AUretCode@@AEAV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@@Z
?RestoreSetup@ApoRegistry@@QEAA?AUretCode@@PEAUUfxSetupStatus@@@Z
?SetDrmProtection@ApoRegistry@@QEAA?AUretCode@@_N@Z
?SetFilterBlockVoice@UniteFxControl@@QEAAJAEA_N@Z
?SetLogLevel@ApoRegistry@@QEAA?AUretCode@@W4LogLevel@Leppsoft@@@Z
?Stop@UniteFxControl@@QEAAJXZ
?UninstallUfx@ApoRegistry@@QEAA?AUretCode@@XZ
?UnregisterApo@ApoRegistry@@QEAA?AUretCode@@XZ
InstallUfx
UninstallUfx

Sections

.text
Size: 770KB - Virtual size: 769KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 276KB - Virtual size: 276KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 15KB - Virtual size: 23KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 33KB - Virtual size: 32KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

_RDATA
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 6KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Soundpad/UniteFxUpdate.dll
.dll regsvr32 windows:6 windows x64 arch:x64

a7365ab63ec74fb8102f92b17356cf77

Code Sign

42:1a:f2:94:09:84:19:1f:52:0a:4b:c6:24:26:a7:4b
Certificate

Issuer

CN=AddTrust External CA Root,OU=AddTrust External TTP Network,O=AddTrust AB,C=SE

Not Before

07/06/2005, 08:09

Not After

30/05/2020, 10:48

Subject

CN=UTN-USERFirst-Object,OU=http://www.usertrust.com,O=The USERTRUST Network,L=Salt Lake City,ST=UT,C=US

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

62:5c:4d:90:8c:d5:42:fb:ab:2e:a5:73:3f:f1:54:19
Certificate

Issuer

CN=UTN-USERFirst-Object,OU=http://www.usertrust.com,O=The USERTRUST Network,L=Salt Lake City,ST=UT,C=US

Not Before

27/04/2011, 00:00

Not After

30/05/2020, 10:48

Subject

CN=COMODO Time Stamping CA,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

2b:73:db:74:63:11:4c:5a:5b:32:4a:f2:30:57:72:49
Certificate

Issuer

CN=COMODO Time Stamping CA,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB

Not Before

02/05/2019, 00:00

Not After

30/05/2020, 10:48

Subject

CN=Sectigo SHA-1 Time Stamping Signer,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GB

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

47:49:34:c0:ab:e3:c1:c9:81:d8:82:d3:44:50:13:52
Certificate

Issuer

CN=COMODO RSA Code Signing CA,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB

Not Before

11/10/2017, 00:00

Not After

11/10/2019, 23:59

Subject

CN=Arthur Lepp,OU=IT,O=Arthur Lepp,POSTALCODE=50825,STREET=Iltisstr. 142,L=Köln,ST=NRW,C=DE,2.5.4.18=#13053530383235

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

2e:7c:87:cc:0e:93:4a:52:fe:94:fd:1c:b7:cd:34:af
Certificate

Issuer

CN=COMODO RSA Certification Authority,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB

Not Before

09/05/2013, 00:00

Not After

08/05/2028, 23:59

Subject

CN=COMODO RSA Code Signing CA,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

0f:56:d6:c4:a3:f8:d9:41:0c:ed:2a:b6:5c:b6:7e:ff:a4:2d:3b:0a
Signer

Actual PE Digest

0f:56:d6:c4:a3:f8:d9:41:0c:ed:2a:b6:5c:b6:7e:ff:a4:2d:3b:0a

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

PDB Paths

C:\dev\UniteFx\x64\Release\UniteFx.pdb

Imports

kernel32

EnterCriticalSection
CloseHandle
UnmapViewOfFile
CreateEventExW
FindNextFileW
GetCurrentProcess
CreateMutexW
FindClose
GetFileAttributesW
ReleaseMutex
OpenFileMappingW
Sleep
FormatMessageW
GetLastError
GetFileAttributesExW
CreateFileMappingW
MapViewOfFile
CreateDirectoryW
GetCurrentThreadId
GetLocalTime
MoveFileExW
GetCurrentProcessId
LocalFree
TryEnterCriticalSection
DuplicateHandle
WaitForSingleObjectEx
SwitchToThread
GetCurrentThread
GetExitCodeThread
MultiByteToWideChar
GetStringTypeW
WideCharToMultiByte
QueryPerformanceCounter
SetLastError
InitializeCriticalSectionAndSpinCount
CreateEventW
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
GetSystemTimeAsFileTime
GetTickCount
GetModuleHandleW
GetProcAddress
EncodePointer
DecodePointer
LCMapStringW
GetCPInfo
RtlCaptureContext
LeaveCriticalSection
RtlVirtualUnwind
UnhandledExceptionFilter
SetUnhandledExceptionFilter
TerminateProcess
IsProcessorFeaturePresent
IsDebuggerPresent
GetStartupInfoW
InitializeSListHead
CreateTimerQueue
SignalObjectAndWait
CreateThread
SetThreadPriority
GetThreadPriority
GetLogicalProcessorInformation
CreateTimerQueueTimer
ChangeTimerQueueTimer
DeleteTimerQueueTimer
GetNumaHighestNodeNumber
GetProcessAffinityMask
SetThreadAffinityMask
RegisterWaitForSingleObject
UnregisterWait
GetThreadTimes
FreeLibrary
FreeLibraryAndExitThread
GetModuleFileNameW
GetModuleHandleA
LoadLibraryExW
GetVersionExW
VirtualAlloc
VirtualProtect
VirtualFree
ReleaseSemaphore
InterlockedPopEntrySList
InterlockedPushEntrySList
InterlockedFlushSList
QueryDepthSList
UnregisterWaitEx
LoadLibraryW
RtlUnwindEx
RtlPcToFileHeader
RaiseException
ExitThread
GetModuleHandleExW
ExitProcess
GetStdHandle
GetFileType
ReadFile
GetConsoleMode
ReadConsoleW
WriteFile
GetConsoleCP
GetFileSizeEx
SetFilePointerEx
HeapReAlloc
FindFirstFileExW
IsValidCodePage
GetACP
GetOEMCP
GetCommandLineA
GetCommandLineW
GetEnvironmentStringsW
FreeEnvironmentStringsW
FlushFileBuffers
SetStdHandle
CreateFileW
HeapSize
SetEndOfFile
WriteConsoleW
InitializeCriticalSection
DeleteCriticalSection
HeapFree
HeapAlloc
GetProcessHeap
ResetEvent
SetEvent
RtlLookupFunctionEntry
WaitForSingleObject

advapi32

SetSecurityDescriptorDacl
InitializeSecurityDescriptor
RegNotifyChangeKeyValue
RegCloseKey
RegDeleteKeyExW
RegCreateKeyExW
RegSetValueExW
RegOpenKeyExW
RegQueryValueExW

ole32

PropVariantClear
CoCreateInstance
CLSIDFromString
StringFromGUID2
CoTaskMemAlloc

Exports

Exports

DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer

Sections

.text
Size: 274KB - Virtual size: 273KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

RT_CODE
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 125KB - Virtual size: 124KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 10KB - Virtual size: 18KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 17KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Soundpad/installscript.vdf
Soundpad/languages/cs/translation.mo
Soundpad/languages/da/translation.mo
Soundpad/languages/de/translation.mo
Soundpad/languages/es_ES/translation.mo
Soundpad/languages/fi/translation.mo
Soundpad/languages/fr/translation.mo
Soundpad/languages/it/translation.mo
Soundpad/languages/ja/translation.mo
Soundpad/languages/ko/translation.mo
Soundpad/languages/nb_NO/translation.mo
Soundpad/languages/nl/translation.mo
Soundpad/languages/pl/translation.mo
Soundpad/languages/pt_BR/translation.mo
Soundpad/languages/ru/translation.mo
Soundpad/languages/sv/translation.mo
Soundpad/languages/th/translation.mo
Soundpad/languages/tr/translation.mo
Soundpad/languages/uk/translation.mo
Soundpad/languages/zh_CN/translation.mo
Soundpad/logs/UniteFxControl.log
Soundpad/sounds/ETHNO PAPA.mp3
Soundpad/sounds/ba dum tss.mp3
Soundpad/sounds/cue.mp3
Soundpad/sounds/firework.mp3
Soundpad/sounds/notify/auto-keys-disabled.m4a
.ps1
Soundpad/sounds/notify/auto-keys-enabled.m4a
Soundpad/sounds/notify/default.m4a
Soundpad/sounds/notify/disabled.m4a
Soundpad/sounds/notify/enabled.m4a
Soundpad/sounds/notify/hotkeys-disabled.m4a
Soundpad/sounds/notify/hotkeys-enabled.m4a
Soundpad/sounds/notify/microphone.m4a
Soundpad/sounds/notify/recording-finished.m4a
Soundpad/sounds/notify/recording.m4a
Soundpad/sounds/notify/speakers.m4a
Soundpad/sounds/scream.mp3
Soundpad/sounds/white_noise.mp3
Soundpad/steam_api64.dll
.dll windows:5 windows x64 arch:x64

b002b0238d9d8895d9baf8b880c22e87

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

Imports

kernel32

GetVersion
LocalAlloc
LocalFree
GetModuleFileNameW
GetProcessAffinityMask
SetProcessAffinityMask
SetThreadAffinityMask
Sleep
ExitProcess
FreeLibrary
LoadLibraryA
GetModuleHandleA
GetProcAddress

user32

ShowWindow
GetProcessWindowStation
GetUserObjectInformationW

advapi32

RegCreateKeyExW

shell32

SHGetSpecialFolderPathW

ole32

CoTaskMemAlloc

ws2_32

WSASetLastError

winhttp

WinHttpAddRequestHeaders

shlwapi

PathCombineW

psapi

GetModuleBaseNameW

bcrypt

BCryptEncrypt

Exports

Exports

Breakpad_SteamMiniDumpInit
Breakpad_SteamSetAppID
Breakpad_SteamSetSteamID
Breakpad_SteamWriteMiniDumpSetComment
Breakpad_SteamWriteMiniDumpUsingExceptionInfoWithBuildId
CAddAppDependencyResult_t_RemoveCallResult
CAddAppDependencyResult_t_SetCallResult
CAddUGCDependencyResult_t_RemoveCallResult
CAddUGCDependencyResult_t_SetCallResult
CAssociateWithClanResult_t_RemoveCallResult
CAssociateWithClanResult_t_SetCallResult
CChangeNumOpenSlotsCallback_t_RemoveCallResult
CChangeNumOpenSlotsCallback_t_SetCallResult
CCheckFileSignature_t_RemoveCallResult
CCheckFileSignature_t_SetCallResult
CClanOfficerListResponse_t_RemoveCallResult
CClanOfficerListResponse_t_SetCallResult
CComputeNewPlayerCompatibilityResult_t_RemoveCallResult
CComputeNewPlayerCompatibilityResult_t_SetCallResult
CCreateBeaconCallback_t_RemoveCallResult
CCreateBeaconCallback_t_SetCallResult
CCreateItemResult_t_RemoveCallResult
CCreateItemResult_t_SetCallResult
CDeleteItemResult_t_RemoveCallResult
CDeleteItemResult_t_SetCallResult
CEncryptedAppTicketResponse_t_RemoveCallResult
CEncryptedAppTicketResponse_t_SetCallResult
CFileDetailsResult_t_RemoveCallResult
CFileDetailsResult_t_SetCallResult
CFriendsEnumerateFollowingList_t_RemoveCallResult
CFriendsEnumerateFollowingList_t_SetCallResult
CFriendsGetFollowerCount_t_RemoveCallResult
CFriendsGetFollowerCount_t_SetCallResult
CFriendsIsFollowing_t_RemoveCallResult
CFriendsIsFollowing_t_SetCallResult
CGSReputation_t_RemoveCallResult
CGSReputation_t_SetCallResult
CGSStatsReceived_t_RemoveCallResult
CGSStatsReceived_t_SetCallResult
CGSStatsStored_t_RemoveCallResult
CGSStatsStored_t_SetCallResult
CGetAppDependenciesResult_t_RemoveCallResult
CGetAppDependenciesResult_t_SetCallResult
CGetOPFSettingsResult_t_RemoveCallback
CGetOPFSettingsResult_t_SetCallback
CGetUserItemVoteResult_t_RemoveCallResult
CGetUserItemVoteResult_t_SetCallResult
CGlobalAchievementPercentagesReady_t_RemoveCallResult
CGlobalAchievementPercentagesReady_t_SetCallResult
CGlobalStatsReceived_t_RemoveCallResult
CGlobalStatsReceived_t_SetCallResult
CHTML_BrowserReady_t_RemoveCallResult
CHTML_BrowserReady_t_SetCallResult
CJoinClanChatRoomCompletionResult_t_RemoveCallResult
CJoinClanChatRoomCompletionResult_t_SetCallResult
CJoinPartyCallback_t_RemoveCallResult
CJoinPartyCallback_t_SetCallResult
CLeaderboardFindResult_t_RemoveCallResult
CLeaderboardFindResult_t_SetCallResult
CLeaderboardScoreUploaded_t_RemoveCallResult
CLeaderboardScoreUploaded_t_SetCallResult
CLeaderboardScoresDownloaded_t_RemoveCallResult
CLeaderboardScoresDownloaded_t_SetCallResult
CLeaderboardUGCSet_t_RemoveCallResult
CLeaderboardUGCSet_t_SetCallResult
CLobbyCreated_t_RemoveCallResult
CLobbyCreated_t_SetCallResult
CLobbyEnter_t_RemoveCallResult
CLobbyEnter_t_SetCallResult
CLobbyMatchList_t_RemoveCallResult
CLobbyMatchList_t_SetCallResult
CMarketEligibilityResponse_t_RemoveCallResult
CMarketEligibilityResponse_t_SetCallResult
CNumberOfCurrentPlayers_t_RemoveCallResult
CNumberOfCurrentPlayers_t_SetCallResult
CRemoteStorageDeletePublishedFileResult_t_RemoveCallResult
CRemoteStorageDeletePublishedFileResult_t_SetCallResult
CRemoteStorageDownloadUGCResult_t_RemoveCallResult
CRemoteStorageDownloadUGCResult_t_SetCallResult
CRemoteStorageEnumeratePublishedFilesByUserActionResult_t_RemoveCallResult
CRemoteStorageEnumeratePublishedFilesByUserActionResult_t_SetCallResult
CRemoteStorageEnumerateUserPublishedFilesResult_t_RemoveCallResult
CRemoteStorageEnumerateUserPublishedFilesResult_t_SetCallResult
CRemoteStorageEnumerateUserSubscribedFilesResult_t_RemoveCallResult
CRemoteStorageEnumerateUserSubscribedFilesResult_t_SetCallResult
CRemoteStorageEnumerateWorkshopFilesResult_t_RemoveCallResult
CRemoteStorageEnumerateWorkshopFilesResult_t_SetCallResult
CRemoteStorageFileReadAsyncComplete_t_RemoveCallResult
CRemoteStorageFileReadAsyncComplete_t_SetCallResult
CRemoteStorageFileShareResult_t_RemoveCallResult
CRemoteStorageFileShareResult_t_SetCallResult
CRemoteStorageFileWriteAsyncComplete_t_RemoveCallResult
CRemoteStorageFileWriteAsyncComplete_t_SetCallResult
CRemoteStorageGetPublishedFileDetailsResult_t_RemoveCallResult
CRemoteStorageGetPublishedFileDetailsResult_t_SetCallResult
CRemoteStorageGetPublishedItemVoteDetailsResult_t_RemoveCallResult
CRemoteStorageGetPublishedItemVoteDetailsResult_t_SetCallResult
CRemoteStoragePublishFileProgress_t_RemoveCallResult
CRemoteStoragePublishFileProgress_t_SetCallResult
CRemoteStorageSetUserPublishedFileActionResult_t_RemoveCallResult
CRemoteStorageSetUserPublishedFileActionResult_t_SetCallResult
CRemoteStorageSubscribePublishedFileResult_t_RemoveCallResult
CRemoteStorageSubscribePublishedFileResult_t_SetCallResult
CRemoteStorageUnsubscribePublishedFileResult_t_RemoveCallResult
CRemoteStorageUnsubscribePublishedFileResult_t_SetCallResult
CRemoteStorageUpdatePublishedFileResult_t_RemoveCallResult
CRemoteStorageUpdatePublishedFileResult_t_SetCallResult
CRemoteStorageUpdateUserPublishedItemVoteResult_t_RemoveCallResult
CRemoteStorageUpdateUserPublishedItemVoteResult_t_SetCallResult
CRemoveAppDependencyResult_t_RemoveCallResult
CRemoveAppDependencyResult_t_SetCallResult
CRemoveUGCDependencyResult_t_RemoveCallResult
CRemoveUGCDependencyResult_t_SetCallResult
CSetPersonaNameResponse_t_RemoveCallResult
CSetPersonaNameResponse_t_SetCallResult
CSetUserItemVoteResult_t_RemoveCallResult
CSetUserItemVoteResult_t_SetCallResult
CStartPlaytimeTrackingResult_t_RemoveCallResult
CStartPlaytimeTrackingResult_t_SetCallResult
CSteamInventoryEligiblePromoItemDefIDs_t_RemoveCallResult
CSteamInventoryEligiblePromoItemDefIDs_t_SetCallResult
CSteamInventoryRequestPricesResult_t_RemoveCallResult
CSteamInventoryRequestPricesResult_t_SetCallResult
CSteamInventoryStartPurchaseResult_t_RemoveCallResult
CSteamInventoryStartPurchaseResult_t_SetCallResult
CSteamUGCQueryCompleted_t_RemoveCallResult
CSteamUGCQueryCompleted_t_SetCallResult
CStopPlaytimeTrackingResult_t_RemoveCallResult
CStopPlaytimeTrackingResult_t_SetCallResult
CStoreAuthURLResponse_t_RemoveCallResult
CStoreAuthURLResponse_t_SetCallResult
CSubmitItemUpdateResult_t_RemoveCallResult
CSubmitItemUpdateResult_t_SetCallResult
CUserFavoriteItemsListChanged_t_RemoveCallResult
CUserFavoriteItemsListChanged_t_SetCallResult
CUserStatsReceived_t_RemoveCallResult
CUserStatsReceived_t_RemoveCallback
CUserStatsReceived_t_SetCallResult
CUserStatsReceived_t_SetCallback
CreateInterface
GetHSteamPipe
GetHSteamUser
SteamAPI
SteamAPI_GetHSteamPipe
SteamAPI_GetHSteamUser
SteamAPI_GetSteamInstallPath
SteamAPI_ISteamAppList_GetAppBuildId
SteamAPI_ISteamAppList_GetAppInstallDir
SteamAPI_ISteamAppList_GetAppName
SteamAPI_ISteamAppList_GetInstalledApps
SteamAPI_ISteamAppList_GetNumInstalledApps
SteamAPI_ISteamApps_BGetDLCDataByIndex
SteamAPI_ISteamApps_BIsAppInstalled
SteamAPI_ISteamApps_BIsCybercafe
SteamAPI_ISteamApps_BIsDlcInstalled
SteamAPI_ISteamApps_BIsLowViolence
SteamAPI_ISteamApps_BIsSubscribed
SteamAPI_ISteamApps_BIsSubscribedApp
SteamAPI_ISteamApps_BIsSubscribedFromFamilySharing
SteamAPI_ISteamApps_BIsSubscribedFromFreeWeekend
SteamAPI_ISteamApps_BIsVACBanned
SteamAPI_ISteamApps_GetAppBuildId
SteamAPI_ISteamApps_GetAppInstallDir
SteamAPI_ISteamApps_GetAppOwner
SteamAPI_ISteamApps_GetAvailableGameLanguages
SteamAPI_ISteamApps_GetCurrentBetaName
SteamAPI_ISteamApps_GetCurrentGameLanguage
SteamAPI_ISteamApps_GetDLCCount
SteamAPI_ISteamApps_GetDlcDownloadProgress
SteamAPI_ISteamApps_GetEarliestPurchaseUnixTime
SteamAPI_ISteamApps_GetFileDetails
SteamAPI_ISteamApps_GetInstalledDepots
SteamAPI_ISteamApps_GetLaunchCommandLine
SteamAPI_ISteamApps_GetLaunchQueryParam
SteamAPI_ISteamApps_GetPublisherOwnedAppData
SteamAPI_ISteamApps_InstallDLC
SteamAPI_ISteamApps_MarkContentCorrupt
SteamAPI_ISteamApps_RequestAllProofOfPurchaseKeys
SteamAPI_ISteamApps_RequestAppProofOfPurchaseKey
SteamAPI_ISteamApps_RequestPublisherOwnedAppData
SteamAPI_ISteamApps_UninstallDLC
SteamAPI_ISteamClient_BReleaseSteamPipe
SteamAPI_ISteamClient_BShutdownIfAllPipesClosed
SteamAPI_ISteamClient_ConnectToGlobalUser
SteamAPI_ISteamClient_CreateLocalUser
SteamAPI_ISteamClient_CreateSteamPipe
SteamAPI_ISteamClient_GetIPCCallCount
SteamAPI_ISteamClient_GetISteamAppList
SteamAPI_ISteamClient_GetISteamApps
SteamAPI_ISteamClient_GetISteamController
SteamAPI_ISteamClient_GetISteamFriends
SteamAPI_ISteamClient_GetISteamGameSearch
SteamAPI_ISteamClient_GetISteamGameServer
SteamAPI_ISteamClient_GetISteamGameServerStats
SteamAPI_ISteamClient_GetISteamGenericInterface
SteamAPI_ISteamClient_GetISteamHTMLSurface
SteamAPI_ISteamClient_GetISteamHTTP
SteamAPI_ISteamClient_GetISteamInput
SteamAPI_ISteamClient_GetISteamInventory
SteamAPI_ISteamClient_GetISteamMatchmaking
SteamAPI_ISteamClient_GetISteamMatchmakingServers
SteamAPI_ISteamClient_GetISteamMusic
SteamAPI_ISteamClient_GetISteamMusicRemote
SteamAPI_ISteamClient_GetISteamNetworking
SteamAPI_ISteamClient_GetISteamParentalSettings
SteamAPI_ISteamClient_GetISteamParties
SteamAPI_ISteamClient_GetISteamRemoteStorage
SteamAPI_ISteamClient_GetISteamScreenshots
SteamAPI_ISteamClient_GetISteamUGC
SteamAPI_ISteamClient_GetISteamUnifiedMessages
SteamAPI_ISteamClient_GetISteamUser
SteamAPI_ISteamClient_GetISteamUserStats
SteamAPI_ISteamClient_GetISteamUtils
SteamAPI_ISteamClient_GetISteamVideo
SteamAPI_ISteamClient_ReleaseUser
SteamAPI_ISteamClient_Remove_SteamAPI_CPostAPIResultInProcess
SteamAPI_ISteamClient_RunFrame
SteamAPI_ISteamClient_SetLocalIPBinding
SteamAPI_ISteamClient_SetWarningMessageHook
SteamAPI_ISteamClient_Set_SteamAPI_CCheckCallbackRegisteredInProcess
SteamAPI_ISteamClient_Set_SteamAPI_CPostAPIResultInProcess
SteamAPI_ISteamController_ActivateActionSet
SteamAPI_ISteamController_ActivateActionSetLayer
SteamAPI_ISteamController_DeactivateActionSetLayer
SteamAPI_ISteamController_DeactivateAllActionSetLayers
SteamAPI_ISteamController_GetActionOriginFromXboxOrigin
SteamAPI_ISteamController_GetActionSetHandle
SteamAPI_ISteamController_GetActiveActionSetLayers
SteamAPI_ISteamController_GetAnalogActionData
SteamAPI_ISteamController_GetAnalogActionHandle
SteamAPI_ISteamController_GetAnalogActionOrigins
SteamAPI_ISteamController_GetConnectedControllers
SteamAPI_ISteamController_GetControllerForGamepadIndex
SteamAPI_ISteamController_GetControllerState
SteamAPI_ISteamController_GetCurrentActionSet
SteamAPI_ISteamController_GetDigitalActionData
SteamAPI_ISteamController_GetDigitalActionHandle
SteamAPI_ISteamController_GetDigitalActionOrigins
SteamAPI_ISteamController_GetGamepadIndexForController
SteamAPI_ISteamController_GetGlyphForActionOrigin
SteamAPI_ISteamController_GetInputTypeForHandle
SteamAPI_ISteamController_GetMotionData
SteamAPI_ISteamController_GetStringForActionOrigin
SteamAPI_ISteamController_Init
SteamAPI_ISteamController_RunFrame
SteamAPI_ISteamController_SetLEDColor
SteamAPI_ISteamController_SetOverrideMode
SteamAPI_ISteamController_ShowAnalogActionOrigins
SteamAPI_ISteamController_ShowBindingPanel
SteamAPI_ISteamController_ShowDigitalActionOrigins
SteamAPI_ISteamController_Shutdown
SteamAPI_ISteamController_StopAnalogActionMomentum
SteamAPI_ISteamController_TriggerHapticPulse
SteamAPI_ISteamController_TriggerRepeatedHapticPulse
SteamAPI_ISteamController_TriggerVibration
SteamAPI_ISteamFriends_ActivateGameOverlay
SteamAPI_ISteamFriends_ActivateGameOverlayInviteDialog
SteamAPI_ISteamFriends_ActivateGameOverlayToStore
SteamAPI_ISteamFriends_ActivateGameOverlayToUser
SteamAPI_ISteamFriends_ActivateGameOverlayToWebPage
SteamAPI_ISteamFriends_ClearRichPresence
SteamAPI_ISteamFriends_CloseClanChatWindowInSteam
SteamAPI_ISteamFriends_DownloadClanActivityCounts
SteamAPI_ISteamFriends_EnumerateFollowingList
SteamAPI_ISteamFriends_GetChatMemberByIndex
SteamAPI_ISteamFriends_GetClanActivityCounts
SteamAPI_ISteamFriends_GetClanByIndex
SteamAPI_ISteamFriends_GetClanChatMemberCount
SteamAPI_ISteamFriends_GetClanChatMessage
SteamAPI_ISteamFriends_GetClanCount
SteamAPI_ISteamFriends_GetClanName
SteamAPI_ISteamFriends_GetClanOfficerByIndex
SteamAPI_ISteamFriends_GetClanOfficerCount
SteamAPI_ISteamFriends_GetClanOwner
SteamAPI_ISteamFriends_GetClanTag
SteamAPI_ISteamFriends_GetCoplayFriend
SteamAPI_ISteamFriends_GetCoplayFriendCount
SteamAPI_ISteamFriends_GetFollowerCount
SteamAPI_ISteamFriends_GetFriendByIndex
SteamAPI_ISteamFriends_GetFriendCoplayGame
SteamAPI_ISteamFriends_GetFriendCoplayTime
SteamAPI_ISteamFriends_GetFriendCount
SteamAPI_ISteamFriends_GetFriendCountFromSource
SteamAPI_ISteamFriends_GetFriendFromSourceByIndex
SteamAPI_ISteamFriends_GetFriendGamePlayed
SteamAPI_ISteamFriends_GetFriendMessage
SteamAPI_ISteamFriends_GetFriendPersonaName
SteamAPI_ISteamFriends_GetFriendPersonaNameHistory
SteamAPI_ISteamFriends_GetFriendPersonaState
SteamAPI_ISteamFriends_GetFriendRelationship
SteamAPI_ISteamFriends_GetFriendRichPresence
SteamAPI_ISteamFriends_GetFriendRichPresenceKeyByIndex
SteamAPI_ISteamFriends_GetFriendRichPresenceKeyCount
SteamAPI_ISteamFriends_GetFriendSteamLevel
SteamAPI_ISteamFriends_GetFriendsGroupCount
SteamAPI_ISteamFriends_GetFriendsGroupIDByIndex
SteamAPI_ISteamFriends_GetFriendsGroupMembersCount
SteamAPI_ISteamFriends_GetFriendsGroupMembersList
SteamAPI_ISteamFriends_GetFriendsGroupName
SteamAPI_ISteamFriends_GetLargeFriendAvatar
SteamAPI_ISteamFriends_GetMediumFriendAvatar
SteamAPI_ISteamFriends_GetPersonaName
SteamAPI_ISteamFriends_GetPersonaState
SteamAPI_ISteamFriends_GetPlayerNickname
SteamAPI_ISteamFriends_GetSmallFriendAvatar
SteamAPI_ISteamFriends_GetUserRestrictions
SteamAPI_ISteamFriends_HasFriend
SteamAPI_ISteamFriends_InviteUserToGame
SteamAPI_ISteamFriends_IsClanChatAdmin
SteamAPI_ISteamFriends_IsClanChatWindowOpenInSteam
SteamAPI_ISteamFriends_IsClanOfficialGameGroup
SteamAPI_ISteamFriends_IsClanPublic
SteamAPI_ISteamFriends_IsFollowing
SteamAPI_ISteamFriends_IsUserInSource
SteamAPI_ISteamFriends_JoinClanChatRoom
SteamAPI_ISteamFriends_LeaveClanChatRoom
SteamAPI_ISteamFriends_OpenClanChatWindowInSteam
SteamAPI_ISteamFriends_ReplyToFriendMessage
SteamAPI_ISteamFriends_RequestClanOfficerList
SteamAPI_ISteamFriends_RequestFriendRichPresence
SteamAPI_ISteamFriends_RequestUserInformation
SteamAPI_ISteamFriends_SendClanChatMessage
SteamAPI_ISteamFriends_SetInGameVoiceSpeaking
SteamAPI_ISteamFriends_SetListenForFriendsMessages
SteamAPI_ISteamFriends_SetPersonaName
SteamAPI_ISteamFriends_SetPlayedWith
SteamAPI_ISteamFriends_SetRichPresence
SteamAPI_ISteamGameServerStats_ClearUserAchievement
SteamAPI_ISteamGameServerStats_GetUserAchievement
SteamAPI_ISteamGameServerStats_GetUserStat
SteamAPI_ISteamGameServerStats_GetUserStat0
SteamAPI_ISteamGameServerStats_RequestUserStats
SteamAPI_ISteamGameServerStats_SetUserAchievement
SteamAPI_ISteamGameServerStats_SetUserStat
SteamAPI_ISteamGameServerStats_SetUserStat0
SteamAPI_ISteamGameServerStats_StoreUserStats
SteamAPI_ISteamGameServerStats_UpdateUserAvgRateStat
SteamAPI_ISteamGameServer_AssociateWithClan
SteamAPI_ISteamGameServer_BLoggedOn
SteamAPI_ISteamGameServer_BSecure
SteamAPI_ISteamGameServer_BUpdateUserData
SteamAPI_ISteamGameServer_BeginAuthSession
SteamAPI_ISteamGameServer_CancelAuthTicket
SteamAPI_ISteamGameServer_ClearAllKeyValues
SteamAPI_ISteamGameServer_ComputeNewPlayerCompatibility
SteamAPI_ISteamGameServer_CreateUnauthenticatedUserConnection
SteamAPI_ISteamGameServer_EnableHeartbeats
SteamAPI_ISteamGameServer_EndAuthSession
SteamAPI_ISteamGameServer_ForceHeartbeat
SteamAPI_ISteamGameServer_GetAuthSessionTicket
SteamAPI_ISteamGameServer_GetGameplayStats
SteamAPI_ISteamGameServer_GetNextOutgoingPacket
SteamAPI_ISteamGameServer_GetPublicIP
SteamAPI_ISteamGameServer_GetServerReputation
SteamAPI_ISteamGameServer_GetSteamID
SteamAPI_ISteamGameServer_HandleIncomingPacket
SteamAPI_ISteamGameServer_InitGameServer
SteamAPI_ISteamGameServer_LogOff
SteamAPI_ISteamGameServer_LogOn
SteamAPI_ISteamGameServer_LogOnAnonymous
SteamAPI_ISteamGameServer_RequestUserGroupStatus
SteamAPI_ISteamGameServer_SendUserConnectAndAuthenticate
SteamAPI_ISteamGameServer_SendUserDisconnect
SteamAPI_ISteamGameServer_SetBotPlayerCount
SteamAPI_ISteamGameServer_SetDedicatedServer
SteamAPI_ISteamGameServer_SetGameData
SteamAPI_ISteamGameServer_SetGameDescription
SteamAPI_ISteamGameServer_SetGameTags
SteamAPI_ISteamGameServer_SetHeartbeatInterval
SteamAPI_ISteamGameServer_SetKeyValue
SteamAPI_ISteamGameServer_SetMapName
SteamAPI_ISteamGameServer_SetMaxPlayerCount
SteamAPI_ISteamGameServer_SetModDir
SteamAPI_ISteamGameServer_SetPasswordProtected
SteamAPI_ISteamGameServer_SetProduct
SteamAPI_ISteamGameServer_SetRegion
SteamAPI_ISteamGameServer_SetServerName
SteamAPI_ISteamGameServer_SetSpectatorPort
SteamAPI_ISteamGameServer_SetSpectatorServerName
SteamAPI_ISteamGameServer_UserHasLicenseForApp
SteamAPI_ISteamGameServer_WasRestartRequested
SteamAPI_ISteamHTMLSurface_AddHeader
SteamAPI_ISteamHTMLSurface_AllowStartRequest
SteamAPI_ISteamHTMLSurface_CopyToClipboard
SteamAPI_ISteamHTMLSurface_CreateBrowser
SteamAPI_ISteamHTMLSurface_DestructISteamHTMLSurface
SteamAPI_ISteamHTMLSurface_ExecuteJavascript
SteamAPI_ISteamHTMLSurface_FileLoadDialogResponse
SteamAPI_ISteamHTMLSurface_Find
SteamAPI_ISteamHTMLSurface_GetLinkAtPosition
SteamAPI_ISteamHTMLSurface_GoBack
SteamAPI_ISteamHTMLSurface_GoForward
SteamAPI_ISteamHTMLSurface_Init
SteamAPI_ISteamHTMLSurface_JSDialogResponse
SteamAPI_ISteamHTMLSurface_KeyChar
SteamAPI_ISteamHTMLSurface_KeyDown
SteamAPI_ISteamHTMLSurface_KeyUp
SteamAPI_ISteamHTMLSurface_LoadURL
SteamAPI_ISteamHTMLSurface_MouseDoubleClick
SteamAPI_ISteamHTMLSurface_MouseDown
SteamAPI_ISteamHTMLSurface_MouseMove
SteamAPI_ISteamHTMLSurface_MouseUp
SteamAPI_ISteamHTMLSurface_MouseWheel
SteamAPI_ISteamHTMLSurface_PasteFromClipboard
SteamAPI_ISteamHTMLSurface_Reload
SteamAPI_ISteamHTMLSurface_RemoveBrowser
SteamAPI_ISteamHTMLSurface_SetBackgroundMode
SteamAPI_ISteamHTMLSurface_SetCookie
SteamAPI_ISteamHTMLSurface_SetDPIScalingFactor
SteamAPI_ISteamHTMLSurface_SetHorizontalScroll
SteamAPI_ISteamHTMLSurface_SetKeyFocus
SteamAPI_ISteamHTMLSurface_SetPageScaleFactor
SteamAPI_ISteamHTMLSurface_SetSize
SteamAPI_ISteamHTMLSurface_SetVerticalScroll
SteamAPI_ISteamHTMLSurface_Shutdown
SteamAPI_ISteamHTMLSurface_StopFind
SteamAPI_ISteamHTMLSurface_StopLoad
SteamAPI_ISteamHTMLSurface_ViewSource
SteamAPI_ISteamHTTP_CreateCookieContainer
SteamAPI_ISteamHTTP_CreateHTTPRequest
SteamAPI_ISteamHTTP_DeferHTTPRequest
SteamAPI_ISteamHTTP_GetHTTPDownloadProgressPct
SteamAPI_ISteamHTTP_GetHTTPRequestWasTimedOut
SteamAPI_ISteamHTTP_GetHTTPResponseBodyData
SteamAPI_ISteamHTTP_GetHTTPResponseBodySize
SteamAPI_ISteamHTTP_GetHTTPResponseHeaderSize
SteamAPI_ISteamHTTP_GetHTTPResponseHeaderValue
SteamAPI_ISteamHTTP_GetHTTPStreamingResponseBodyData
SteamAPI_ISteamHTTP_PrioritizeHTTPRequest
SteamAPI_ISteamHTTP_ReleaseCookieContainer
SteamAPI_ISteamHTTP_ReleaseHTTPRequest
SteamAPI_ISteamHTTP_SendHTTPRequest
SteamAPI_ISteamHTTP_SendHTTPRequestAndStreamResponse
SteamAPI_ISteamHTTP_SetCookie
SteamAPI_ISteamHTTP_SetHTTPRequestAbsoluteTimeoutMS
SteamAPI_ISteamHTTP_SetHTTPRequestContextValue
SteamAPI_ISteamHTTP_SetHTTPRequestCookieContainer
SteamAPI_ISteamHTTP_SetHTTPRequestGetOrPostParameter
SteamAPI_ISteamHTTP_SetHTTPRequestHeaderValue
SteamAPI_ISteamHTTP_SetHTTPRequestNetworkActivityTimeout
SteamAPI_ISteamHTTP_SetHTTPRequestRawPostBody
SteamAPI_ISteamHTTP_SetHTTPRequestRequiresVerifiedCertificate
SteamAPI_ISteamHTTP_SetHTTPRequestUserAgentInfo
SteamAPI_ISteamInventory_AddPromoItem
SteamAPI_ISteamInventory_AddPromoItems
SteamAPI_ISteamInventory_CheckResultSteamID
SteamAPI_ISteamInventory_ConsumeItem
SteamAPI_ISteamInventory_DeserializeResult
SteamAPI_ISteamInventory_DestroyResult
SteamAPI_ISteamInventory_ExchangeItems
SteamAPI_ISteamInventory_GenerateItems
SteamAPI_ISteamInventory_GetAllItems
SteamAPI_ISteamInventory_GetEligiblePromoItemDefinitionIDs
SteamAPI_ISteamInventory_GetItemDefinitionIDs
SteamAPI_ISteamInventory_GetItemDefinitionProperty
SteamAPI_ISteamInventory_GetItemPrice
SteamAPI_ISteamInventory_GetItemsByID
SteamAPI_ISteamInventory_GetItemsWithPrices
SteamAPI_ISteamInventory_GetNumItemsWithPrices
SteamAPI_ISteamInventory_GetResultItemProperty
SteamAPI_ISteamInventory_GetResultItems
SteamAPI_ISteamInventory_GetResultStatus
SteamAPI_ISteamInventory_GetResultTimestamp
SteamAPI_ISteamInventory_GrantPromoItems
SteamAPI_ISteamInventory_LoadItemDefinitions
SteamAPI_ISteamInventory_RemoveProperty
SteamAPI_ISteamInventory_RequestEligiblePromoItemDefinitionsIDs
SteamAPI_ISteamInventory_RequestPrices
SteamAPI_ISteamInventory_SendItemDropHeartbeat
SteamAPI_ISteamInventory_SerializeResult
SteamAPI_ISteamInventory_SetProperty
SteamAPI_ISteamInventory_SetProperty0
SteamAPI_ISteamInventory_SetProperty1
SteamAPI_ISteamInventory_SetProperty2
SteamAPI_ISteamInventory_StartPurchase
SteamAPI_ISteamInventory_StartUpdateProperties
SteamAPI_ISteamInventory_SubmitUpdateProperties
SteamAPI_ISteamInventory_TradeItems
SteamAPI_ISteamInventory_TransferItemQuantity
SteamAPI_ISteamInventory_TriggerItemDrop
SteamAPI_ISteamMatchmakingPingResponse_ServerFailedToRespond
SteamAPI_ISteamMatchmakingPingResponse_ServerResponded
SteamAPI_ISteamMatchmakingPlayersResponse_AddPlayerToList
SteamAPI_ISteamMatchmakingPlayersResponse_PlayersFailedToRespond
SteamAPI_ISteamMatchmakingPlayersResponse_PlayersRefreshComplete
SteamAPI_ISteamMatchmakingRulesResponse_RulesFailedToRespond
SteamAPI_ISteamMatchmakingRulesResponse_RulesRefreshComplete
SteamAPI_ISteamMatchmakingRulesResponse_RulesResponded
SteamAPI_ISteamMatchmakingServerListResponse_RefreshComplete
SteamAPI_ISteamMatchmakingServerListResponse_ServerFailedToRespond
SteamAPI_ISteamMatchmakingServerListResponse_ServerResponded
SteamAPI_ISteamMatchmakingServers_CancelQuery
SteamAPI_ISteamMatchmakingServers_CancelServerQuery
SteamAPI_ISteamMatchmakingServers_GetServerCount
SteamAPI_ISteamMatchmakingServers_GetServerDetails
SteamAPI_ISteamMatchmakingServers_IsRefreshing
SteamAPI_ISteamMatchmakingServers_PingServer
SteamAPI_ISteamMatchmakingServers_PlayerDetails
SteamAPI_ISteamMatchmakingServers_RefreshQuery
SteamAPI_ISteamMatchmakingServers_RefreshServer

Sections

.text
Size: - Virtual size: 420KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: - Virtual size: 218KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 10.8MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: - Virtual size: 34KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.UPX0
Size: - Virtual size: 1.4MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.UPX1
Size: 3.4MB - Virtual size: 3.4MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 168B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

43d019e6db101f731f8ec1031876208c

Code Sign

42:1a:f2:94:09:84:19:1f:52:0a:4b:c6:24:26:a7:4bCertificate

Key Usages

62:5c:4d:90:8c:d5:42:fb:ab:2e:a5:73:3f:f1:54:19Certificate

Extended Key Usages

Key Usages

2b:73:db:74:63:11:4c:5a:5b:32:4a:f2:30:57:72:49Certificate

Extended Key Usages

Key Usages

47:49:34:c0:ab:e3:c1:c9:81:d8:82:d3:44:50:13:52Certificate

Extended Key Usages

Key Usages

2e:7c:87:cc:0e:93:4a:52:fe:94:fd:1c:b7:cd:34:afCertificate

Extended Key Usages

Key Usages

3c:15:4a:ff:78:19:9b:f3:fd:fd:59:f6:6a:64:63:c0:ba:f8:0d:48Signer

Headers

DLL Characteristics

File Characteristics

PDB Paths

Imports

usp10

dwmapi

steam_api64

kernel32

user32

advapi32

shell32

ole32

unitefxcontrol

wsock32

comctl32

rpcrt4

oleacc

uxtheme

wininet

mf

mfplat

mfreadwrite

shlwapi

avrt

msimg32

gdi32

winspool.drv

comdlg32

oleaut32

Sections

.text Size: 6.6MB - Virtual size: 6.6MB

.rdata Size: 2.9MB - Virtual size: 2.9MB

.data Size: 150KB - Virtual size: 893KB

.pdata Size: 219KB - Virtual size: 218KB

_RDATA Size: 3KB - Virtual size: 2KB

.rsrc Size: 916KB - Virtual size: 915KB

.reloc Size: 127KB - Virtual size: 127KB

38e3078f900264dff81caa6939470d10

Code Sign

42:1a:f2:94:09:84:19:1f:52:0a:4b:c6:24:26:a7:4bCertificate

Key Usages

62:5c:4d:90:8c:d5:42:fb:ab:2e:a5:73:3f:f1:54:19Certificate

Extended Key Usages

Key Usages

2b:73:db:74:63:11:4c:5a:5b:32:4a:f2:30:57:72:49Certificate

Extended Key Usages

Key Usages

47:49:34:c0:ab:e3:c1:c9:81:d8:82:d3:44:50:13:52Certificate

Extended Key Usages

Key Usages

2e:7c:87:cc:0e:93:4a:52:fe:94:fd:1c:b7:cd:34:afCertificate

Extended Key Usages

Key Usages

bc:51:8d:2d:47:58:93:91:16:14:8e:7d:9e:0f:60:6e:ca:ef:3b:2fSigner

Headers

DLL Characteristics

File Characteristics

42:1a:f2:94:09:84:19:1f:52:0a:4b:c6:24:26:a7:4b
Certificate

62:5c:4d:90:8c:d5:42:fb:ab:2e:a5:73:3f:f1:54:19
Certificate

2b:73:db:74:63:11:4c:5a:5b:32:4a:f2:30:57:72:49
Certificate

47:49:34:c0:ab:e3:c1:c9:81:d8:82:d3:44:50:13:52
Certificate

2e:7c:87:cc:0e:93:4a:52:fe:94:fd:1c:b7:cd:34:af
Certificate

3c:15:4a:ff:78:19:9b:f3:fd:fd:59:f6:6a:64:63:c0:ba:f8:0d:48
Signer

.text
Size: 6.6MB - Virtual size: 6.6MB

.rdata
Size: 2.9MB - Virtual size: 2.9MB

.data
Size: 150KB - Virtual size: 893KB

.pdata
Size: 219KB - Virtual size: 218KB

_RDATA
Size: 3KB - Virtual size: 2KB

.rsrc
Size: 916KB - Virtual size: 915KB

.reloc
Size: 127KB - Virtual size: 127KB

42:1a:f2:94:09:84:19:1f:52:0a:4b:c6:24:26:a7:4b
Certificate

62:5c:4d:90:8c:d5:42:fb:ab:2e:a5:73:3f:f1:54:19
Certificate

2b:73:db:74:63:11:4c:5a:5b:32:4a:f2:30:57:72:49
Certificate

47:49:34:c0:ab:e3:c1:c9:81:d8:82:d3:44:50:13:52
Certificate

2e:7c:87:cc:0e:93:4a:52:fe:94:fd:1c:b7:cd:34:af
Certificate

bc:51:8d:2d:47:58:93:91:16:14:8e:7d:9e:0f:60:6e:ca:ef:3b:2f
Signer

.text
Size: 770KB - Virtual size: 769KB

.rdata
Size: 276KB - Virtual size: 276KB

.data
Size: 15KB - Virtual size: 23KB

.pdata
Size: 33KB - Virtual size: 32KB

_RDATA
Size: 3KB - Virtual size: 2KB

.rsrc
Size: 2KB - Virtual size: 1KB

.reloc
Size: 6KB - Virtual size: 5KB

42:1a:f2:94:09:84:19:1f:52:0a:4b:c6:24:26:a7:4b
Certificate

62:5c:4d:90:8c:d5:42:fb:ab:2e:a5:73:3f:f1:54:19
Certificate

2b:73:db:74:63:11:4c:5a:5b:32:4a:f2:30:57:72:49
Certificate

47:49:34:c0:ab:e3:c1:c9:81:d8:82:d3:44:50:13:52
Certificate

2e:7c:87:cc:0e:93:4a:52:fe:94:fd:1c:b7:cd:34:af
Certificate

0f:56:d6:c4:a3:f8:d9:41:0c:ed:2a:b6:5c:b6:7e:ff:a4:2d:3b:0a
Signer

.text
Size: 274KB - Virtual size: 273KB

RT_CODE
Size: 1KB - Virtual size: 1KB

.rdata
Size: 125KB - Virtual size: 124KB

.data
Size: 10KB - Virtual size: 18KB

.pdata
Size: 17KB - Virtual size: 16KB

.rsrc
Size: 2KB - Virtual size: 1KB

.reloc
Size: 4KB - Virtual size: 4KB