tinserver[.]zip

Sharing

Copy URL Twitter E-mail

General

Target

tinserver.zip
Size

17.3MB
MD5

1f706674680dabb50d415e31204bfa5d
SHA1

e78ba3e13089e5e9120d895e6062b5ce2b80bde9
SHA256

013a04f86028dd5e8097bd4d41d7384ca13c3a7a47638f5eaaec8bc58fb81bab
SHA512

237dadad135ac6efe16ca61b4be743b80360a726e85295df15a503ba0cb3b74ed3cd19cbbe99909bd598980d92e902a46dac8a88d098c42740cb964ee269cebf
SSDEEP

393216:WYZgYzQ6RKd6Zjrum9dbcsG7dAuirEesIHbxnbkT3j33wFyFvFlh/g4ALboI:bR/RKAZjrumjbcsWpSsIHbQ3vtpgR

Score

3^/10

Malware Config

Signatures

Unsigned PE 12 IoCs

Checks for missing Authenticode signature.

resource
unpack001/tinserver/TINserver.exe
unpack001/tinserver/client/TINserverClient.dll
unpack001/tinserver/client/TINserverClient.exe
unpack001/tinserver/client/TINserverClient64.dll
unpack001/tinserver/client/TINserverClient64.wrapper
unpack001/tinserver/data/ClientServices/drmjob.cpuinfo.survey.clientmodule.dll
unpack001/tinserver/data/Content/3/common/Spacewar/SteamworksExample.exe
unpack001/tinserver/data/GamePatchs/Spacewar/binaries/displayMessageBox.dll
unpack001/tinserver/data/GamePatchs/Spacewar/binaries/replacement.exe
unpack001/tinserver/data/GamePatchs/Tomb Raider/TombRaiderMultiplayer.dll
unpack001/tinserver/samplePlugin/TINserverAPI.dll
unpack001/tinserver/tools/PICSdownloader/PICSdownloader.exe

Files

tinserver.zip
.zip
tinserver/TINserver.Loggers.xml
.xml
tinserver/TINserver.exe
.exe windows:6 windows x86 arch:x86

43624cb67c30d3c715e86c3976533cc9

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

C:\Perso\SteamDev2017\Release\TINserver.pdb

Imports

kernel32

GetEnvironmentStringsW
GetOEMCP
IsValidCodePage
SetStdHandle
FreeEnvironmentStringsW
EnumSystemLocalesW
GetUserDefaultLCID
IsValidLocale
GetTimeFormatW
GetDateFormatW
ReadConsoleW
GetConsoleMode
GetCommandLineW
FreeLibraryAndExitThread
ExitThread
WriteConsoleW
GetCurrentDirectoryW
SetEnvironmentVariableW
GetTimeZoneInformation
GetModuleHandleExW
ExitProcess
PeekNamedPipe
GetFileType
GetDriveTypeW
FileTimeToSystemTime
SystemTimeToTzSpecificLocalTime
Sleep
FindFirstFileExW
LoadLibraryExW
CreateDirectoryW
lstrlenW
RemoveDirectoryW
GetFinalPathNameByHandleW
SetFileTime
SetFilePointer
SetEndOfFile
GetTempPathW
GetVolumePathNameW
CreateFileW
GetFileAttributesW
SetFileAttributesW
GetFileInformationByHandle
GetLastError
DeleteFileW
CloseHandle
MoveFileExW
SystemTimeToFileTime
CreateSymbolicLinkW
GetDiskFreeSpaceExA
GetSystemTime
lstrcmpW
WideCharToMultiByte
GetTickCount
GetModuleFileNameA
VirtualProtect
SetLastError
SetConsoleTextAttribute
GetCurrentProcess
GetStdHandle
K32GetMappedFileNameA
GetSystemTimes
VirtualUnlock
Thread32Next
Thread32First
WaitForSingleObject
GetCurrentThreadId
SuspendThread
ResumeThread
RtlCaptureStackBackTrace
GetCommandLineA
CreateToolhelp32Snapshot
QueryPerformanceFrequency
GetSystemInfo
GetThreadContext
VirtualLock
QueryPerformanceCounter
AllocConsole
VirtualQuery
GetProcessTimes
OpenThread
SetUnhandledExceptionFilter
GetModuleHandleA
GetProcAddress
FreeLibrary
LoadLibraryA
TryEnterCriticalSection
EnterCriticalSection
LeaveCriticalSection
InitializeCriticalSection
DeleteCriticalSection
ReadFile
FormatMessageA
WriteFile
FlushFileBuffers
GetConsoleOutputCP
SetCurrentConsoleFontEx
GetConsoleCP
SetConsoleCP
SetConsoleOutputCP
ReleaseSemaphore
CreateSemaphoreA
HeapFree
VirtualFree
VirtualAlloc
HeapAlloc
GetProcessHeap
IsBadReadPtr
TlsSetValue
GetExitCodeThread
TerminateThread
TlsAlloc
CreateThread
TlsGetValue
InitializeCriticalSectionEx
RaiseException
DecodePointer
UnmapViewOfFile
CreateFileMappingA
MapViewOfFile
GetFileSize
SetEvent
PulseEvent
CreateEventA
FindFirstFileW
GetFileSizeEx
FindNextFileW
GetModuleFileNameW
FindClose
QueueUserWorkItem
MultiByteToWideChar
FormatMessageW
GetTickCount64
FlushViewOfFile
GetLocalTime
SetFilePointerEx
LocalFree
GetModuleHandleW
MoveFileW
GetACP
AreFileApisANSI
HeapCreate
GetFullPathNameW
GetDiskFreeSpaceW
OutputDebugStringA
LockFile
GetFullPathNameA
UnlockFileEx
CreateMutexW
HeapValidate
HeapSize
GetTempPathA
GetDiskFreeSpaceA
GetFileAttributesA
GetFileAttributesExW
OutputDebugStringW
CreateFileA
WaitForSingleObjectEx
DeleteFileA
HeapReAlloc
LoadLibraryW
HeapCompact
HeapDestroy
UnlockFile
LockFileEx
GetCurrentProcessId
GetSystemTimeAsFileTime
CreateFileMappingW
InitializeCriticalSectionAndSpinCount
CreateEventW
SwitchToThread
TlsFree
EncodePointer
CompareStringW
LCMapStringW
GetLocaleInfoW
GetStringTypeW
GetCPInfo
UnhandledExceptionFilter
TerminateProcess
IsProcessorFeaturePresent
IsDebuggerPresent
GetStartupInfoW
InitializeSListHead
RtlUnwind

dbghelp

SymInitialize
MakeSureDirectoryPathExists
SymFromAddr
SymGetSymFromAddr

ws2_32

shutdown
getsockname
socket
ioctlsocket
WSAGetLastError
WSACleanup
accept
WSASend
gethostbyname
closesocket
WSASendTo
getaddrinfo
WSAStartup
WSAConnect
send
connect
gethostname
WSARecv
bind
listen
recvfrom
select
__WSAFDIsSet
WSAIoctl
freeaddrinfo
WSAAccept
recv
WSARecvFrom
sendto
ntohs
htonl
inet_ntop
htons
ntohl

iphlpapi

GetAdaptersAddresses

shlwapi

PathFileExistsW

advapi32

CryptAcquireContextW
CryptGenRandom
CryptReleaseContext

ole32

CoCreateInstance
CoUninitialize
CoInitialize

Sections

.text
Size: 5.5MB - Virtual size: 5.5MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1.8MB - Virtual size: 1.8MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 110KB - Virtual size: 177KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 31KB - Virtual size: 30KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 371KB - Virtual size: 370KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
tinserver/TINserver.ini
tinserver/TINserver.users.ini
tinserver/_run_me_first.cmd
tinserver/client/Steam.exe
.exe windows:5 windows x86 arch:x86

9dd3ef05d2caf46db7383e7b5ef6162a

Code Sign

0c:e7:e0:e5:17:d8:46:fe:8f:e5:60:fc:1b:f0:30:39
Certificate

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

10/11/2006, 00:00

Not After

10/11/2031, 00:00

Subject

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

7e:93:eb:fb:7c:c6:4e:59:ea:4b:9a:77:d4:06:fc:3b
Certificate

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Not Before

21/12/2012, 00:00

Not After

30/12/2020, 23:59

Subject

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

0e:cf:f4:38:c8:fe:bf:35:6e:04:d8:6a:98:1b:1a:50
Certificate

Issuer

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Not Before

18/10/2012, 00:00

Not After

29/12/2020, 23:59

Subject

CN=Symantec Time Stamping Services Signer - G4,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

05:4f:46:6c:ec:cb:e9:d6:be:e8:1f:54:35:e6:4d:47
Certificate

Issuer

CN=DigiCert SHA2 Assured ID Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

04/10/2018, 00:00

Not After

07/10/2021, 12:00

Subject

CN=Valve,O=Valve,L=Bellevue,ST=WA,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

04:09:18:1b:5f:d5:bb:66:75:53:43:b5:6f:95:50:08
Certificate

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

22/10/2013, 12:00

Not After

22/10/2028, 12:00

Subject

CN=DigiCert SHA2 Assured ID Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

cf:a2:ed:de:77:de:f6:2a:3b:d0:85:ac:d4:00:9f:7e:38:0f:09:f0
Signer

Actual PE Digest

cf:a2:ed:de:77:de:f6:2a:3b:d0:85:ac:d4:00:9f:7e:38:0f:09:f0

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

c:\buildslave\steam_rel_client_win32\build\src\steamexe\Release\steamexe.pdb

Imports

comctl32

InitCommonControlsEx

kernel32

GetFullPathNameW
DeleteFileW
FindNextFileA
GetVersionExA
VerifyVersionInfoW
InitializeCriticalSection
DeleteCriticalSection
SetConsoleMode
ReadConsoleInputA
CreateEventW
SystemTimeToFileTime
GetSystemTime
FlushConsoleInputBuffer
GlobalMemoryStatus
CreateDirectoryW
FindResourceA
WriteConsoleW
SetStdHandle
SetConsoleCtrlHandler
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetCPInfo
GetOEMCP
IsValidCodePage
FindFirstFileExA
HeapReAlloc
GetTimeZoneInformation
GetStringTypeW
SetFilePointerEx
ReadConsoleW
GetConsoleMode
GetConsoleCP
LCMapStringW
CompareStringW
GetFileType
GetACP
GetStdHandle
SetEnvironmentVariableA
ExitProcess
InterlockedPushEntrySList
RtlUnwind
GetModuleFileNameW
WriteFile
SizeofResource
LoadResource
SetLastError
GetExitCodeProcess
GetCurrentProcess
OpenProcess
LocalFree
GlobalUnlock
GlobalLock
GlobalAlloc
LockResource
InterlockedDecrement
InterlockedIncrement
VerSetConditionMask
MulDiv
FreeLibrary
LoadLibraryA
Sleep
GetProcAddress
InterlockedCompareExchange
InterlockedExchange
FindFirstFileW
CreateFileW
FindClose
DeviceIoControl
MoveFileExW
CreateFileA
GetModuleHandleA
GetTickCount
GetLastError
ProcessIdToSessionId
OpenEventA
SetEvent
GetCurrentProcessId
GetFileAttributesW
RemoveDirectoryW
GetStartupInfoW
InitializeSListHead
IsProcessorFeaturePresent
UnhandledExceptionFilter
PostQueuedCompletionStatus
CreateIoCompletionPort
IsBadWritePtr
GetModuleHandleExW
GetModuleHandleExA
SetHandleInformation
VirtualQuery
GlobalFree
FileTimeToSystemTime
SetProcessAffinityMask
GetProcessHeaps
DebugBreak
HeapValidate
HeapSize
HeapFree
HeapAlloc
InterlockedExchangeAdd
SetUnhandledExceptionFilter
GetSystemInfo
GetProcessAffinityMask
GetCurrentDirectoryW
SetCurrentDirectoryW
CloseHandle
SetErrorMode
MultiByteToWideChar
GetCurrentDirectoryA
OutputDebugStringA
LeaveCriticalSection
EnterCriticalSection
GetCurrentThreadId
SetEnvironmentVariableW
CreateProcessW
GetModuleFileNameA
VirtualProtect
LocalAlloc
CreateEventA
SystemTimeToTzSpecificLocalTime
TlsFree
TlsSetValue
TlsGetValue
TlsAlloc
WaitForSingleObject
ResetEvent
TryEnterCriticalSection
InitializeCriticalSectionAndSpinCount
ResumeThread
SuspendThread
GetExitCodeThread
TerminateThread
SetThreadPriority
OpenThread
SetThreadAffinityMask
GetCurrentThread
CreateThread
SwitchToThread
RaiseException
IsDebuggerPresent
GetCommandLineA
PeekNamedPipe
GetFullPathNameA
TerminateProcess
HeapQueryInformation
HeapSetInformation
HeapWalk
HeapUnlock
LoadLibraryW
LoadLibraryExA
LoadLibraryExW
GetModuleHandleW
WideCharToMultiByte
GetFileSizeEx
ReadFile
FlushFileBuffers
SetEndOfFile
SetFilePointer
GetFileTime
SetFileTime
SleepEx
GetDriveTypeW
GetDiskFreeSpaceA
GetDiskFreeSpaceExW
SetFileAttributesW
GetFileAttributesExW
FindNextFileW
CopyFileW
GetTimeFormatW
GetDateFormatW
GetCommandLineW
GetSystemTimeAsFileTime
QueryPerformanceCounter
QueryPerformanceFrequency
GlobalMemoryStatusEx
VirtualAlloc
GetProcessHeap
HeapLock

user32

UnregisterClassW
GetDesktopWindow
GetWindowTextLengthA
EmptyClipboard
SetClipboardData
CloseClipboard
OpenClipboard
PostThreadMessageW
GetDlgItemInt
SetDlgItemInt
GetDlgItem
EndDialog
DialogBoxParamA
wsprintfA
ShowWindow
MoveWindow
SetWindowPos
MsgWaitForMultipleObjects
SendMessageW
DestroyWindow
DispatchMessageW
TranslateMessage
GetMessageW
ReleaseDC
GetDC
SetTimer
KillTimer
UpdateWindow
BeginPaint
EndPaint
RedrawWindow
SetWindowTextW
GetWindowRect
MessageBoxW
GetWindowLongW
SetWindowLongW
CreateWindowExW
AllowSetForegroundWindow
MessageBoxA
GetProcessWindowStation
GetUserObjectInformationW
GetClassInfoExW
RegisterClassExW
PeekMessageW
DefWindowProcW
SetDlgItemTextA
LoadCursorW
GetWindowThreadProcessId
EnumWindows
IsWindowVisible
GetMonitorInfoW
MonitorFromWindow
LoadIconW
SetClassLongW

gdi32

SetBkMode
SetBkColor
SelectObject
RemoveFontMemResourceEx
CreateDIBSection
TextOutW
GetStockObject
GetDeviceCaps
DeleteObject
DeleteDC
CreateICW
CreateFontW
CreateCompatibleDC
SwapBuffers
SetPixelFormat
ChoosePixelFormat
SetTextColor
AddFontMemResourceEx
GetTextExtentPoint32W

advapi32

RegOpenKeyA
ReportEventA
RegisterEventSourceA
DeregisterEventSource
SetSecurityDescriptorDacl
InitializeSecurityDescriptor
RegCloseKey
RegSetValueExW
RegSetValueExA
RegQueryValueExW
RegQueryValueExA
RegOpenKeyExA
RegCreateKeyExA

shell32

CommandLineToArgvW
SHGetFolderPathW
ord680
SHGetFileInfoW

oleaut32

VariantClear

version

VerQueryValueW

crypt32

CertFreeCertificateContext
CertAddCertificateContextToStore
CertGetCertificateChain
CertCreateCertificateContext
CertCloseStore
CertOpenStore
CertFreeCertificateChain

ws2_32

select
WSASocketA
WSASetLastError
__WSAFDIsSet
closesocket
bind
ioctlsocket
getsockname
ntohl
ntohs
setsockopt
WSAIoctl
connect
recv
send
htonl
htons
gethostbyname
shutdown
socket
WSAStartup
WSAGetLastError
WSARecv
WSARecvFrom
WSASend
WSASendTo

wsock32

ord1142

psapi

GetModuleInformation
GetProcessMemoryInfo

Exports

Exports

CanSetClientBeta
ClientUpdateRunFrame
CreateInterface
ForceUpdateNextRestart
GetBootstrapperVersion
GetClientLauncherType
GetClientUpdateBytesDownloaded
GetClientUpdateBytesToDownload
GetCurrentClientBeta
IsCheckingForUpdates
IsClientUpdateAvailable
PermitDownloadClientUpdates
SetClientBeta
StartCheckingForUpdates
SteamBootstrapper_GetBaseUserDir
SteamBootstrapper_GetEUniverse
SteamBootstrapper_GetForwardedCommandLine
SteamBootstrapper_GetInstallDir
SteamBootstrapper_GetLoggingDir
g_dwDllEntryThreadId

Sections

.text
Size: 2.0MB - Virtual size: 2.0MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 639KB - Virtual size: 638KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 76KB - Virtual size: 460KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 219KB - Virtual size: 219KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 100KB - Virtual size: 100KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
tinserver/client/TINserverClient.dll
.dll windows:6 windows x86 arch:x86

9ba0f91f6006e719fb19ecb296d1b897

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

C:\Perso\SteamDev2017\Release\TINserverClient.pdb

Imports

kernel32

CreateThread
CloseHandle
LoadLibraryA
DisableThreadLibraryCalls
Sleep
OpenProcess
HeapSize
GetProcessHeap
WaitForSingleObject
GetEnvironmentStringsW
GetCommandLineW
GetOEMCP
IsValidCodePage
SetFilePointerEx
OutputDebugStringW
HeapReAlloc
SetStdHandle
GetTimeFormatW
GetDateFormatW
HeapAlloc
HeapFree
ReadConsoleW
GetConsoleMode
WriteConsoleW
GetModuleFileNameW
GetCurrentDirectoryW
FreeEnvironmentStringsW
GetEnvironmentVariableA
SetEnvironmentVariableW
GetTimeZoneInformation
CreateDirectoryW
SetFileTime
SetFilePointer
SetEndOfFile
CreateFileW
SetFileAttributesW
GetLastError
MoveFileExW
SystemTimeToFileTime
GetSystemTime
GetModuleFileNameA
VirtualProtect
SetLastError
SetConsoleTextAttribute
GetCurrentProcess
GetStdHandle
GetProcessId
VirtualUnlock
Thread32Next
Thread32First
GetCurrentThreadId
SuspendThread
ResumeThread
GetCommandLineA
CreateToolhelp32Snapshot
QueryPerformanceFrequency
GetSystemInfo
GetThreadContext
VirtualLock
SetEnvironmentVariableA
CreateProcessA
QueryPerformanceCounter
AllocConsole
VirtualQuery
OpenThread
SetUnhandledExceptionFilter
GetExitCodeProcess
GetModuleHandleA
GetSystemDirectoryA
GetProcAddress
WideCharToMultiByte
EnterCriticalSection
LeaveCriticalSection
InitializeCriticalSection
DeleteCriticalSection
WriteProcessMemory
QueryFullProcessImageNameA
VirtualAllocEx
CreateProcessW
CreateRemoteThread
WriteFile
FlushFileBuffers
ReadFile
FormatMessageA
FreeLibrary
GetConsoleOutputCP
GetConsoleCP
LoadLibraryExA
TlsSetValue
GetExitCodeThread
TerminateThread
TlsAlloc
TlsGetValue
UnmapViewOfFile
CreateFileMappingA
MapViewOfFile
GetFileSize
SetEvent
CreateEventA
ReleaseSemaphore
CreateSemaphoreA
CreateFileA
GetACP
FindNextFileW
FindClose
MultiByteToWideChar
InitializeCriticalSectionAndSpinCount
CreateEventW
TlsFree
GetSystemTimeAsFileTime
GetModuleHandleW
EncodePointer
DecodePointer
CompareStringW
LCMapStringW
GetStringTypeW
GetCPInfo
UnhandledExceptionFilter
TerminateProcess
IsProcessorFeaturePresent
IsDebuggerPresent
GetStartupInfoW
GetCurrentProcessId
InitializeSListHead
RtlUnwind
RaiseException
InterlockedFlushSList
LoadLibraryExW
GetFileAttributesExW
FindFirstFileExW
SystemTimeToTzSpecificLocalTime
FileTimeToSystemTime
GetDriveTypeW
GetFileInformationByHandle
GetFileType
PeekNamedPipe
GetFullPathNameW
ExitProcess
GetModuleHandleExW

user32

MessageBoxA
wsprintfW

dbghelp

SymGetSymFromAddr

ws2_32

ioctlsocket
WSACleanup
accept
WSASend
gethostbyname
WSAAccept
shutdown
WSAStartup
WSAConnect
send
connect
recvfrom
WSARecv
recv
WSARecvFrom
sendto
closesocket
select
__WSAFDIsSet
ntohl
gethostname
socket
WSASendTo
WSASetLastError
getsockname
WSAGetLastError
ntohs
htonl
inet_ntop
htons

imagehlp

ImageEnumerateCertificates
ImageRemoveCertificate

advapi32

CryptAcquireContextW
RegQueryValueExA
RegDeleteValueA
RegOpenKeyExA
RegSetValueExA
RegDeleteKeyA
RegCreateKeyExA
CryptGenRandom
CryptReleaseContext
RegEnumValueA
RegEnumKeyExA
RegCloseKey

Sections

.text
Size: 2.6MB - Virtual size: 2.6MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1.2MB - Virtual size: 1.2MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 89KB - Virtual size: 139KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 480B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 170KB - Virtual size: 169KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
tinserver/client/TINserverClient.exe
.exe windows:6 windows x86 arch:x86

041cb6128b069694beae83d1481055c7

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

C:\Perso\SteamDev2017\Release\TINserverClient.pdb

Imports

kernel32

DecodePointer
HeapSize
GetProcessHeap
GetStringTypeW
CreateProcessA
GetEnvironmentStringsW
GetOEMCP
IsValidCodePage
ReadConsoleW
GetConsoleMode
SetFilePointerEx
GetCPInfo
HeapReAlloc
SetStdHandle
LCMapStringW
CompareStringW
GetTimeFormatW
GetDateFormatW
GetLastError
FreeEnvironmentStringsW
HeapAlloc
HeapFree
CreateDirectoryW
SetFileTime
SetFilePointer
CreateFileW
CloseHandle
SystemTimeToFileTime
GetSystemTime
GetModuleFileNameA
WriteProcessMemory
GetProcessId
WaitForSingleObject
ResumeThread
GetModuleHandleA
OpenProcess
Sleep
QueryFullProcessImageNameA
GetProcAddress
VirtualAllocEx
CreateProcessW
CreateRemoteThread
GetExitCodeProcess
WideCharToMultiByte
EnterCriticalSection
LeaveCriticalSection
InitializeCriticalSection
DeleteCriticalSection
VirtualProtect
SetLastError
GetCurrentProcess
GetStdHandle
GetCurrentThreadId
GetCommandLineA
QueryPerformanceFrequency
QueryPerformanceCounter
SetUnhandledExceptionFilter
WriteFile
FlushFileBuffers
LoadLibraryExA
FreeLibrary
GetConsoleCP
ReadFile
UnmapViewOfFile
CreateFileMappingA
GetFileSize
MapViewOfFile
TlsSetValue
TlsAlloc
TlsGetValue
GetACP
FindNextFileW
FindClose
MultiByteToWideChar
UnhandledExceptionFilter
TerminateProcess
IsProcessorFeaturePresent
GetCurrentProcessId
GetSystemTimeAsFileTime
InitializeSListHead
IsDebuggerPresent
GetStartupInfoW
GetModuleHandleW
RtlUnwind
EncodePointer
InitializeCriticalSectionAndSpinCount
TlsFree
LoadLibraryExW
RaiseException
GetFileAttributesExW
FindFirstFileExW
SystemTimeToTzSpecificLocalTime
FileTimeToSystemTime
GetDriveTypeW
GetFileInformationByHandle
GetFileType
PeekNamedPipe
GetFullPathNameW
ExitProcess
GetModuleHandleExW
GetTimeZoneInformation
SetEnvironmentVariableW
GetCurrentDirectoryW
GetModuleFileNameW
WriteConsoleW
GetCommandLineW
ExpandEnvironmentStringsA

ws2_32

accept
WSASend
gethostbyname
WSAAccept
WSASendTo
sendto
WSAStartup
gethostname
WSACleanup
WSAConnect
send
connect
recvfrom
WSARecv
recv
WSARecvFrom

user32

wsprintfW

advapi32

CryptAcquireContextW
CryptGenRandom
CryptReleaseContext

Sections

.text
Size: 437KB - Virtual size: 437KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 937KB - Virtual size: 937KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 77KB - Virtual size: 116KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 152KB - Virtual size: 152KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 25KB - Virtual size: 24KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
tinserver/client/TINserverClient.ini
tinserver/client/TINserverClient64.dll
.dll windows:6 windows x64 arch:x64

aad96890195eda5528b1e0c15c32fca3

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

PDB Paths

C:\Perso\SteamDev2017\x64\Release x64\TINserverClient64.pdb

Imports

kernel32

CreateThread
CloseHandle
LoadLibraryA
DisableThreadLibraryCalls
Sleep
OpenProcess
HeapSize
GetProcessHeap
WaitForSingleObject
GetEnvironmentStringsW
GetCommandLineW
GetOEMCP
IsValidCodePage
SetFilePointerEx
OutputDebugStringW
HeapReAlloc
SetStdHandle
GetTimeFormatW
GetDateFormatW
HeapAlloc
HeapFree
ReadConsoleW
GetConsoleMode
WriteConsoleW
GetModuleFileNameW
GetCurrentDirectoryW
FreeEnvironmentStringsW
GetEnvironmentVariableA
SetEnvironmentVariableW
GetTimeZoneInformation
CreateDirectoryW
SetFileTime
SetFilePointer
SetEndOfFile
CreateFileW
SetFileAttributesW
GetLastError
MoveFileExW
SystemTimeToFileTime
GetSystemTime
GetModuleFileNameA
VirtualProtect
SetLastError
SetConsoleTextAttribute
GetCurrentProcess
GetStdHandle
GetProcessId
VirtualUnlock
Thread32Next
Thread32First
GetCurrentThreadId
SuspendThread
ResumeThread
GetCommandLineA
CreateToolhelp32Snapshot
QueryPerformanceFrequency
GetSystemInfo
GetThreadContext
VirtualLock
SetEnvironmentVariableA
CreateProcessA
QueryPerformanceCounter
AllocConsole
VirtualQuery
OpenThread
SetUnhandledExceptionFilter
GetExitCodeProcess
GetModuleHandleA
GetSystemDirectoryA
GetProcAddress
WideCharToMultiByte
EnterCriticalSection
LeaveCriticalSection
InitializeCriticalSection
DeleteCriticalSection
WriteProcessMemory
K32EnumProcessModulesEx
K32GetModuleFileNameExA
QueryFullProcessImageNameA
VirtualAllocEx
CreateProcessW
CreateRemoteThread
WriteFile
FlushFileBuffers
ReadFile
FormatMessageA
FreeLibrary
GetConsoleOutputCP
GetConsoleCP
LoadLibraryExA
TlsSetValue
GetExitCodeThread
TerminateThread
TlsAlloc
TlsGetValue
UnmapViewOfFile
CreateFileMappingA
MapViewOfFile
GetFileSize
SetEvent
CreateEventA
ReleaseSemaphore
CreateSemaphoreA
GetACP
FindNextFileW
FindClose
MultiByteToWideChar
InitializeCriticalSectionAndSpinCount
CreateEventW
TlsFree
GetSystemTimeAsFileTime
GetModuleHandleW
EncodePointer
DecodePointer
CompareStringW
LCMapStringW
GetStringTypeW
GetCPInfo
RtlCaptureContext
RtlLookupFunctionEntry
RtlVirtualUnwind
UnhandledExceptionFilter
TerminateProcess
IsProcessorFeaturePresent
IsDebuggerPresent
GetStartupInfoW
GetCurrentProcessId
InitializeSListHead
RtlUnwindEx
RtlPcToFileHeader
RaiseException
InterlockedFlushSList
LoadLibraryExW
GetFileAttributesExW
FindFirstFileExW
SystemTimeToTzSpecificLocalTime
FileTimeToSystemTime
GetDriveTypeW
GetFileInformationByHandle
GetFileType
PeekNamedPipe
GetFullPathNameW
ExitProcess
GetModuleHandleExW
RtlUnwind

user32

wsprintfW
MessageBoxA

dbghelp

SymGetSymFromAddr64

ws2_32

WSACleanup
accept
WSASend
gethostbyname
WSAAccept
WSASendTo
WSAStartup
socket
send
connect
recvfrom
WSARecv
recv
WSARecvFrom
ioctlsocket
closesocket
sendto
shutdown
select
__WSAFDIsSet
WSAConnect
WSASetLastError
getsockname
WSAGetLastError
ntohs
htonl
inet_ntop
htons
ntohl
gethostname

advapi32

CryptAcquireContextW
RegQueryValueExA
RegDeleteValueA
RegOpenKeyExA
RegSetValueExA
RegDeleteKeyA
RegCreateKeyExA
CryptGenRandom
CryptReleaseContext
RegEnumValueA
RegEnumKeyExA
RegCloseKey

Sections

.text
Size: 2.7MB - Virtual size: 2.7MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 2.0MB - Virtual size: 2.0MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 107KB - Virtual size: 165KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 187KB - Virtual size: 186KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 512B - Virtual size: 480B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 30KB - Virtual size: 29KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
tinserver/client/TINserverClient64.wrapper
.exe windows:6 windows x64 arch:x64

bf8f329f3b706d8dba8dccd053ae7aa4

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB Paths

C:\Perso\SteamDev2017\x64\Release x64\TINserverClient64.pdb

Imports

ws2_32

WSACleanup
accept
WSASend
gethostbyname
sendto
WSARecvFrom
recv
gethostname
WSAAccept
WSASendTo
WSAStartup
WSAConnect
send
connect
recvfrom
WSARecv

kernel32

GetProcessHeap
GetStringTypeW
HeapSize
GetEnvironmentStringsW
GetOEMCP
IsValidCodePage
GetConsoleMode
SetFilePointerEx
GetCPInfo
SetStdHandle
HeapReAlloc
LCMapStringW
CompareStringW
FreeEnvironmentStringsW
GetConsoleCP
WriteProcessMemory
GetModuleHandleA
OpenProcess
GetLastError
CloseHandle
GetProcAddress
VirtualAllocEx
CreateRemoteThread
SetLastError
GetCurrentProcess
GetStdHandle
GetCurrentThreadId
GetCommandLineA
QueryPerformanceFrequency
QueryPerformanceCounter
SetUnhandledExceptionFilter
FreeLibrary
WideCharToMultiByte
CreateFileW
WriteFile
FlushFileBuffers
EnterCriticalSection
LeaveCriticalSection
InitializeCriticalSection
DeleteCriticalSection
TlsSetValue
TlsAlloc
TlsGetValue
GetACP
FindNextFileW
FindClose
MultiByteToWideChar
RtlCaptureContext
RtlLookupFunctionEntry
RtlVirtualUnwind
UnhandledExceptionFilter
TerminateProcess
IsProcessorFeaturePresent
GetCurrentProcessId
GetSystemTimeAsFileTime
InitializeSListHead
IsDebuggerPresent
GetStartupInfoW
GetModuleHandleW
RtlUnwindEx
EncodePointer
RaiseException
InitializeCriticalSectionAndSpinCount
TlsFree
LoadLibraryExW
RtlPcToFileHeader
ExitProcess
GetModuleHandleExW
SetEnvironmentVariableW
FindFirstFileExW
GetFileType
GetModuleFileNameW
WriteConsoleW
GetCommandLineW
HeapFree
HeapAlloc

advapi32

CryptAcquireContextW
CryptGenRandom
CryptReleaseContext

Sections

.text
Size: 364KB - Virtual size: 363KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 975KB - Virtual size: 974KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 91KB - Virtual size: 131KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 14KB - Virtual size: 14KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 152KB - Virtual size: 152KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
tinserver/client/readme.txt
tinserver/data/AppInfo/pkgInfoNames.ini
tinserver/data/Certificates/readme.txt
tinserver/data/Certificates/www.sample.com.pem
tinserver/data/ClientServices/drmjob.cpuinfo.survey.clientmodule.dll
.dll windows:5 windows x86 arch:x86

2e168f9fee36c65804acc85d4752ed9f

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

D:\SteamDev2010\Release\drmjob.cpuinfo.surver.clientmodule.pdb

Imports

kernel32

GetCurrentThreadId
DecodePointer
GetCommandLineA
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
EncodePointer
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
InterlockedIncrement
GetModuleHandleW
SetLastError
GetLastError
InterlockedDecrement
GetProcAddress
HeapFree
Sleep
ExitProcess
SetHandleCount
GetStdHandle
InitializeCriticalSectionAndSpinCount
GetFileType
GetStartupInfoW
DeleteCriticalSection
GetModuleFileNameA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStringsW
HeapCreate
HeapDestroy
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
LeaveCriticalSection
EnterCriticalSection
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
HeapAlloc
HeapReAlloc
LoadLibraryW
WriteFile
GetModuleFileNameW
RtlUnwind
LCMapStringW
MultiByteToWideChar
GetStringTypeW
HeapSize
IsProcessorFeaturePresent

Exports

Exports

_runfunc@20

Sections

.text
Size: 17KB - Virtual size: 17KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 3KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 436B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
tinserver/data/Content/2/SteamApps/readme.txt
tinserver/data/Content/3/appmanifest_480.acf
tinserver/data/Content/3/common/Spacewar/D3D9VRDistort.cso
tinserver/data/Content/3/common/Spacewar/DejaVuSans.ttf
tinserver/data/Content/3/common/Spacewar/DejaVuSans.txt
tinserver/data/Content/3/common/Spacewar/SteamworksExample.exe
.exe windows:6 windows x86 arch:x86

1e67c15ff5399a1c5ec0bc8b381c1d72

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

E:\steamworks sdk\sdk 141\steamworksexample\Release\SteamworksExample.pdb

Imports

steam_api

SteamGameServer_GetHSteamPipe
SteamGameServer_RunCallbacks
SteamGameServer_GetHSteamUser
SteamGameServer_Shutdown
SteamInternal_GameServer_Init
SteamAPI_RunCallbacks
SteamAPI_Init
SteamAPI_WriteMiniDump
SteamAPI_RestartAppIfNecessary
SteamAPI_Shutdown
SteamAPI_SetMiniDumpComment
SteamAPI_UnregisterCallback
SteamAPI_RegisterCallback
SteamAPI_GetHSteamUser
SteamInternal_CreateInterface
SteamAPI_GetHSteamPipe
SteamAPI_UnregisterCallResult
SteamInternal_ContextInit
SteamAPI_RegisterCallResult

sdkencryptedappticket

SteamEncryptedAppTicket_BIsTicketForApp
SteamEncryptedAppTicket_BDecryptTicket
SteamEncryptedAppTicket_GetUserVariableData
SteamEncryptedAppTicket_GetTicketSteamID

kernel32

WriteConsoleW
GetStringTypeW
FlushFileBuffers
SetStdHandle
ReadConsoleW
ReadFile
OutputDebugStringW
SetFilePointerEx
GetConsoleMode
GetConsoleCP
LCMapStringW
HeapReAlloc
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetCurrentProcessId
GetModuleFileNameA
OutputDebugStringA
QueryPerformanceCounter
WaitForSingleObject
SetEvent
CreateFileW
Sleep
CreateEventA
QueryPerformanceFrequency
SetThreadAffinityMask
CloseHandle
IsDebuggerPresent
RaiseException
GetCPInfo
GetOEMCP
GetACP
IsValidCodePage
LoadLibraryExW
GetModuleHandleW
TlsFree
TlsSetValue
TlsGetValue
TlsAlloc
TerminateProcess
GetCurrentProcess
InitializeCriticalSectionAndSpinCount
GetCurrentThread
GetDriveTypeW
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetStartupInfoW
DeleteCriticalSection
GetFileType
LeaveCriticalSection
EnterCriticalSection
GetCurrentDirectoryW
EncodePointer
DecodePointer
GetLastError
HeapFree
HeapAlloc
SetEndOfFile
GetFullPathNameA
IsProcessorFeaturePresent
GetSystemTimeAsFileTime
ExitProcess
GetModuleHandleExW
GetProcAddress
AreFileApisANSI
MultiByteToWideChar
WideCharToMultiByte
GetCommandLineA
RtlUnwind
HeapSize
GetProcessHeap
GetStdHandle
WriteFile
GetModuleFileNameW
SetLastError
GetCurrentThreadId

user32

RegisterClassA
DefWindowProcA
PeekMessageA
CreateWindowExA
UnregisterClassA
LoadCursorA
UpdateWindow
DispatchMessageA
DestroyWindow
GetMessageA
PostQuitMessage
LoadIconA
GetClientRect
SetFocus
TranslateMessage
GetForegroundWindow
MessageBoxA
ShowWindow

gdi32

GetStockObject

ole32

CoUninitialize
CoInitializeEx
CoCreateInstance

d3d9

Direct3DCreate9

d3dx9_42

D3DXCreateFontA

Sections

.text
Size: 234KB - Virtual size: 233KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 109KB - Virtual size: 109KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 12KB - Virtual size: 20KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 480B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 16KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
tinserver/data/Content/3/common/Spacewar/controller.vdf
tinserver/data/Content/3/common/Spacewar/sdkencryptedappticket.dll
.dll windows:5 windows x86 arch:x86

4cd01a741a6d5004a42a08b0e62c906d

Code Sign

0c:e7:e0:e5:17:d8:46:fe:8f:e5:60:fc:1b:f0:30:39
Certificate

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

10/11/2006, 00:00

Not After

10/11/2031, 00:00

Subject

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

7e:93:eb:fb:7c:c6:4e:59:ea:4b:9a:77:d4:06:fc:3b
Certificate

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Not Before

21/12/2012, 00:00

Not After

30/12/2020, 23:59

Subject

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

0e:cf:f4:38:c8:fe:bf:35:6e:04:d8:6a:98:1b:1a:50
Certificate

Issuer

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Not Before

18/10/2012, 00:00

Not After

29/12/2020, 23:59

Subject

CN=Symantec Time Stamping Services Signer - G4,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

08:4c:af:4d:f4:99:14:1d:40:4b:71:99:aa:2c:21:31
Certificate

Issuer

CN=DigiCert SHA2 Assured ID Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

25/09/2015, 00:00

Not After

03/10/2018, 12:00

Subject

CN=Valve,O=Valve,L=Bellevue,ST=WA,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

04:09:18:1b:5f:d5:bb:66:75:53:43:b5:6f:95:50:08
Certificate

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

22/10/2013, 12:00

Not After

22/10/2028, 12:00

Subject

CN=DigiCert SHA2 Assured ID Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

b1:6b:9c:70:85:39:0f:07:fd:98:2b:ed:9b:5b:dd:1e:ad:d8:a0:39
Signer

Actual PE Digest

b1:6b:9c:70:85:39:0f:07:fd:98:2b:ed:9b:5b:dd:1e:ad:d8:a0:39

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

c:\buildslave\steam_rel_client_win32\build\src\sdkencryptedappticketlib\Release\sdkencryptedappticket.pdb

Imports

kernel32

InitializeCriticalSection
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
Sleep
WideCharToMultiByte
MultiByteToWideChar
GetStringTypeW
RaiseException
RtlUnwind
GetCommandLineA
GetCurrentThreadId
GetLastError
HeapFree
GetCPInfo
HeapAlloc
UnhandledExceptionFilter
SetUnhandledExceptionFilter
SetLastError
InitializeCriticalSectionAndSpinCount
GetCurrentProcess
TerminateProcess
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
GetStartupInfoW
GetModuleHandleW
GetProcAddress
IsProcessorFeaturePresent
LCMapStringW
ExitProcess
GetModuleHandleExW
HeapSize
GetProcessHeap
GetStdHandle
GetFileType
GetModuleFileNameA
QueryPerformanceCounter
GetCurrentProcessId
GetSystemTimeAsFileTime
GetEnvironmentStringsW
FreeEnvironmentStringsW
IsDebuggerPresent
FlushFileBuffers
WriteFile
GetConsoleCP
GetConsoleMode
IsValidCodePage
GetACP
GetOEMCP
GetModuleFileNameW
HeapReAlloc
LoadLibraryExW
SetStdHandle
SetFilePointerEx
WriteConsoleW
OutputDebugStringW
CloseHandle
CreateFileW

Exports

Exports

SteamEncryptedAppTicket_BDecryptTicket
SteamEncryptedAppTicket_BIsTicketForApp
SteamEncryptedAppTicket_BUserIsVacBanned
SteamEncryptedAppTicket_BUserOwnsAppInTicket
SteamEncryptedAppTicket_GetTicketAppID
SteamEncryptedAppTicket_GetTicketIssueTime
SteamEncryptedAppTicket_GetTicketSteamID
SteamEncryptedAppTicket_GetUserVariableData

Sections

.text
Size: 431KB - Virtual size: 431KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 90KB - Virtual size: 89KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 9KB - Virtual size: 17KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 20KB - Virtual size: 19KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
tinserver/data/Content/3/common/Spacewar/steam_api.dll
.dll windows:5 windows x86 arch:x86

505799f8a745662a7ae4877b9db0f7be

Code Sign

0c:e7:e0:e5:17:d8:46:fe:8f:e5:60:fc:1b:f0:30:39
Certificate

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

10/11/2006, 00:00

Not After

10/11/2031, 00:00

Subject

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

7e:93:eb:fb:7c:c6:4e:59:ea:4b:9a:77:d4:06:fc:3b
Certificate

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Not Before

21/12/2012, 00:00

Not After

30/12/2020, 23:59

Subject

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

0e:cf:f4:38:c8:fe:bf:35:6e:04:d8:6a:98:1b:1a:50
Certificate

Issuer

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Not Before

18/10/2012, 00:00

Not After

29/12/2020, 23:59

Subject

CN=Symantec Time Stamping Services Signer - G4,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

08:4c:af:4d:f4:99:14:1d:40:4b:71:99:aa:2c:21:31
Certificate

Issuer

CN=DigiCert SHA2 Assured ID Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

25/09/2015, 00:00

Not After

03/10/2018, 12:00

Subject

CN=Valve,O=Valve,L=Bellevue,ST=WA,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

04:09:18:1b:5f:d5:bb:66:75:53:43:b5:6f:95:50:08
Certificate

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

22/10/2013, 12:00

Not After

22/10/2028, 12:00

Subject

CN=DigiCert SHA2 Assured ID Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

64:36:f0:82:9e:a4:ab:c0:3b:d6:22:07:3a:5e:19:f5:f3:83:86:d2
Signer

Actual PE Digest

64:36:f0:82:9e:a4:ab:c0:3b:d6:22:07:3a:5e:19:f5:f3:83:86:d2

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

c:\buildslave\steam_rel_client_win32\build\src\steam_api\Release\steam_api.pdb

Imports

kernel32

CloseHandle
LoadLibraryExA
LoadLibraryExW
GetModuleFileNameW
GetModuleHandleA
GetModuleHandleExW
GetExitCodeProcess
GetEnvironmentVariableA
SetEnvironmentVariableA
OutputDebugStringA
GetFileAttributesW
MultiByteToWideChar
WideCharToMultiByte
OpenProcess
FreeLibrary
GetCommandLineW
GetProcAddress
CreateFileW
WriteConsoleW
GetLastError
HeapFree
HeapAlloc
RaiseException
RtlUnwind
EnterCriticalSection
LeaveCriticalSection
GetCommandLineA
GetCurrentThreadId
IsProcessorFeaturePresent
ExitProcess
AreFileApisANSI
HeapSize
GetProcessHeap
GetStdHandle
WriteFile
SetLastError
IsDebuggerPresent
IsValidCodePage
GetACP
GetOEMCP
GetCPInfo
DeleteCriticalSection
GetFileType
GetStartupInfoW
GetModuleFileNameA
QueryPerformanceCounter
GetCurrentProcessId
GetSystemTimeAsFileTime
GetEnvironmentStringsW
FreeEnvironmentStringsW
UnhandledExceptionFilter
SetUnhandledExceptionFilter
InitializeCriticalSectionAndSpinCount
Sleep
GetCurrentProcess
TerminateProcess
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
GetModuleHandleW
LCMapStringW
HeapReAlloc
OutputDebugStringW
GetStringTypeW
FlushFileBuffers
GetConsoleCP
GetConsoleMode
SetStdHandle
ReadFile
ReadConsoleW
SetFilePointerEx
SetEndOfFile

advapi32

RegOpenKeyExW
RegCloseKey
RegQueryValueExW

shell32

ShellExecuteW

Exports

Exports

CAddAppDependencyResult_t_RemoveCallResult
CAddAppDependencyResult_t_SetCallResult
CAddUGCDependencyResult_t_RemoveCallResult
CAddUGCDependencyResult_t_SetCallResult
CAssociateWithClanResult_t_RemoveCallResult
CAssociateWithClanResult_t_SetCallResult
CCheckFileSignature_t_RemoveCallResult
CCheckFileSignature_t_SetCallResult
CClanOfficerListResponse_t_RemoveCallResult
CClanOfficerListResponse_t_SetCallResult
CComputeNewPlayerCompatibilityResult_t_RemoveCallResult
CComputeNewPlayerCompatibilityResult_t_SetCallResult
CCreateItemResult_t_RemoveCallResult
CCreateItemResult_t_SetCallResult
CDeleteItemResult_t_RemoveCallResult
CDeleteItemResult_t_SetCallResult
CEncryptedAppTicketResponse_t_RemoveCallResult
CEncryptedAppTicketResponse_t_SetCallResult
CFileDetailsResult_t_RemoveCallResult
CFileDetailsResult_t_SetCallResult
CFriendsEnumerateFollowingList_t_RemoveCallResult
CFriendsEnumerateFollowingList_t_SetCallResult
CFriendsGetFollowerCount_t_RemoveCallResult
CFriendsGetFollowerCount_t_SetCallResult
CFriendsIsFollowing_t_RemoveCallResult
CFriendsIsFollowing_t_SetCallResult
CGSReputation_t_RemoveCallResult
CGSReputation_t_SetCallResult
CGSStatsReceived_t_RemoveCallResult
CGSStatsReceived_t_SetCallResult
CGSStatsStored_t_RemoveCallResult
CGSStatsStored_t_SetCallResult
CGetAppDependenciesResult_t_RemoveCallResult
CGetAppDependenciesResult_t_SetCallResult
CGetOPFSettingsResult_t_RemoveCallback
CGetOPFSettingsResult_t_SetCallback
CGetUserItemVoteResult_t_RemoveCallResult
CGetUserItemVoteResult_t_SetCallResult
CGlobalAchievementPercentagesReady_t_RemoveCallResult
CGlobalAchievementPercentagesReady_t_SetCallResult
CGlobalStatsReceived_t_RemoveCallResult
CGlobalStatsReceived_t_SetCallResult
CHTML_BrowserReady_t_RemoveCallResult
CHTML_BrowserReady_t_SetCallResult
CJoinClanChatRoomCompletionResult_t_RemoveCallResult
CJoinClanChatRoomCompletionResult_t_SetCallResult
CLeaderboardFindResult_t_RemoveCallResult
CLeaderboardFindResult_t_SetCallResult
CLeaderboardScoreUploaded_t_RemoveCallResult
CLeaderboardScoreUploaded_t_SetCallResult
CLeaderboardScoresDownloaded_t_RemoveCallResult
CLeaderboardScoresDownloaded_t_SetCallResult
CLeaderboardUGCSet_t_RemoveCallResult
CLeaderboardUGCSet_t_SetCallResult
CLobbyCreated_t_RemoveCallResult
CLobbyCreated_t_SetCallResult
CLobbyEnter_t_RemoveCallResult
CLobbyEnter_t_SetCallResult
CLobbyMatchList_t_RemoveCallResult
CLobbyMatchList_t_SetCallResult
CNumberOfCurrentPlayers_t_RemoveCallResult
CNumberOfCurrentPlayers_t_SetCallResult
CRemoteStorageDeletePublishedFileResult_t_RemoveCallResult
CRemoteStorageDeletePublishedFileResult_t_SetCallResult
CRemoteStorageDownloadUGCResult_t_RemoveCallResult
CRemoteStorageDownloadUGCResult_t_SetCallResult
CRemoteStorageEnumeratePublishedFilesByUserActionResult_t_RemoveCallResult
CRemoteStorageEnumeratePublishedFilesByUserActionResult_t_SetCallResult
CRemoteStorageEnumerateUserPublishedFilesResult_t_RemoveCallResult
CRemoteStorageEnumerateUserPublishedFilesResult_t_SetCallResult
CRemoteStorageEnumerateUserSubscribedFilesResult_t_RemoveCallResult
CRemoteStorageEnumerateUserSubscribedFilesResult_t_SetCallResult
CRemoteStorageEnumerateWorkshopFilesResult_t_RemoveCallResult
CRemoteStorageEnumerateWorkshopFilesResult_t_SetCallResult
CRemoteStorageFileReadAsyncComplete_t_RemoveCallResult
CRemoteStorageFileReadAsyncComplete_t_SetCallResult
CRemoteStorageFileShareResult_t_RemoveCallResult
CRemoteStorageFileShareResult_t_SetCallResult
CRemoteStorageFileWriteAsyncComplete_t_RemoveCallResult
CRemoteStorageFileWriteAsyncComplete_t_SetCallResult
CRemoteStorageGetPublishedFileDetailsResult_t_RemoveCallResult
CRemoteStorageGetPublishedFileDetailsResult_t_SetCallResult
CRemoteStorageGetPublishedItemVoteDetailsResult_t_RemoveCallResult
CRemoteStorageGetPublishedItemVoteDetailsResult_t_SetCallResult
CRemoteStoragePublishFileProgress_t_RemoveCallResult
CRemoteStoragePublishFileProgress_t_SetCallResult
CRemoteStorageSetUserPublishedFileActionResult_t_RemoveCallResult
CRemoteStorageSetUserPublishedFileActionResult_t_SetCallResult
CRemoteStorageSubscribePublishedFileResult_t_RemoveCallResult
CRemoteStorageSubscribePublishedFileResult_t_SetCallResult
CRemoteStorageUnsubscribePublishedFileResult_t_RemoveCallResult
CRemoteStorageUnsubscribePublishedFileResult_t_SetCallResult
CRemoteStorageUpdatePublishedFileResult_t_RemoveCallResult
CRemoteStorageUpdatePublishedFileResult_t_SetCallResult
CRemoteStorageUpdateUserPublishedItemVoteResult_t_RemoveCallResult
CRemoteStorageUpdateUserPublishedItemVoteResult_t_SetCallResult
CRemoveAppDependencyResult_t_RemoveCallResult
CRemoveAppDependencyResult_t_SetCallResult
CRemoveUGCDependencyResult_t_RemoveCallResult
CRemoveUGCDependencyResult_t_SetCallResult
CSetPersonaNameResponse_t_RemoveCallResult
CSetPersonaNameResponse_t_SetCallResult
CSetUserItemVoteResult_t_RemoveCallResult
CSetUserItemVoteResult_t_SetCallResult
CStartPlaytimeTrackingResult_t_RemoveCallResult
CStartPlaytimeTrackingResult_t_SetCallResult
CSteamInventoryEligiblePromoItemDefIDs_t_RemoveCallResult
CSteamInventoryEligiblePromoItemDefIDs_t_SetCallResult
CSteamUGCQueryCompleted_t_RemoveCallResult
CSteamUGCQueryCompleted_t_SetCallResult
CStopPlaytimeTrackingResult_t_RemoveCallResult
CStopPlaytimeTrackingResult_t_SetCallResult
CStoreAuthURLResponse_t_RemoveCallResult
CStoreAuthURLResponse_t_SetCallResult
CSubmitItemUpdateResult_t_RemoveCallResult
CSubmitItemUpdateResult_t_SetCallResult
CUserFavoriteItemsListChanged_t_RemoveCallResult
CUserFavoriteItemsListChanged_t_SetCallResult
CUserStatsReceived_t_RemoveCallResult
CUserStatsReceived_t_RemoveCallback
CUserStatsReceived_t_SetCallResult
CUserStatsReceived_t_SetCallback
GetHSteamPipe
GetHSteamUser
SteamAPI_GetHSteamPipe
SteamAPI_GetHSteamUser
SteamAPI_GetSteamInstallPath
SteamAPI_ISteamAppList_GetAppBuildId
SteamAPI_ISteamAppList_GetAppInstallDir
SteamAPI_ISteamAppList_GetAppName
SteamAPI_ISteamAppList_GetInstalledApps
SteamAPI_ISteamAppList_GetNumInstalledApps
SteamAPI_ISteamApps_BGetDLCDataByIndex
SteamAPI_ISteamApps_BIsAppInstalled
SteamAPI_ISteamApps_BIsCybercafe
SteamAPI_ISteamApps_BIsDlcInstalled
SteamAPI_ISteamApps_BIsLowViolence
SteamAPI_ISteamApps_BIsSubscribed
SteamAPI_ISteamApps_BIsSubscribedApp
SteamAPI_ISteamApps_BIsSubscribedFromFreeWeekend
SteamAPI_ISteamApps_BIsVACBanned
SteamAPI_ISteamApps_GetAppBuildId
SteamAPI_ISteamApps_GetAppInstallDir
SteamAPI_ISteamApps_GetAppOwner
SteamAPI_ISteamApps_GetAvailableGameLanguages
SteamAPI_ISteamApps_GetCurrentBetaName
SteamAPI_ISteamApps_GetCurrentGameLanguage
SteamAPI_ISteamApps_GetDLCCount
SteamAPI_ISteamApps_GetDlcDownloadProgress
SteamAPI_ISteamApps_GetEarliestPurchaseUnixTime
SteamAPI_ISteamApps_GetFileDetails
SteamAPI_ISteamApps_GetInstalledDepots
SteamAPI_ISteamApps_GetLaunchQueryParam
SteamAPI_ISteamApps_InstallDLC
SteamAPI_ISteamApps_MarkContentCorrupt
SteamAPI_ISteamApps_RequestAllProofOfPurchaseKeys
SteamAPI_ISteamApps_RequestAppProofOfPurchaseKey
SteamAPI_ISteamApps_UninstallDLC
SteamAPI_ISteamClient_BReleaseSteamPipe
SteamAPI_ISteamClient_BShutdownIfAllPipesClosed
SteamAPI_ISteamClient_ConnectToGlobalUser
SteamAPI_ISteamClient_CreateLocalUser
SteamAPI_ISteamClient_CreateSteamPipe
SteamAPI_ISteamClient_GetIPCCallCount
SteamAPI_ISteamClient_GetISteamAppList
SteamAPI_ISteamClient_GetISteamApps
SteamAPI_ISteamClient_GetISteamController
SteamAPI_ISteamClient_GetISteamFriends
SteamAPI_ISteamClient_GetISteamGameServer
SteamAPI_ISteamClient_GetISteamGameServerStats
SteamAPI_ISteamClient_GetISteamGenericInterface
SteamAPI_ISteamClient_GetISteamHTMLSurface
SteamAPI_ISteamClient_GetISteamHTTP
SteamAPI_ISteamClient_GetISteamInventory
SteamAPI_ISteamClient_GetISteamMatchmaking
SteamAPI_ISteamClient_GetISteamMatchmakingServers
SteamAPI_ISteamClient_GetISteamMusic
SteamAPI_ISteamClient_GetISteamMusicRemote
SteamAPI_ISteamClient_GetISteamNetworking
SteamAPI_ISteamClient_GetISteamParentalSettings
SteamAPI_ISteamClient_GetISteamRemoteStorage
SteamAPI_ISteamClient_GetISteamScreenshots
SteamAPI_ISteamClient_GetISteamUGC
SteamAPI_ISteamClient_GetISteamUnifiedMessages
SteamAPI_ISteamClient_GetISteamUser
SteamAPI_ISteamClient_GetISteamUserStats
SteamAPI_ISteamClient_GetISteamUtils
SteamAPI_ISteamClient_GetISteamVideo
SteamAPI_ISteamClient_ReleaseUser
SteamAPI_ISteamClient_SetLocalIPBinding
SteamAPI_ISteamClient_SetWarningMessageHook
SteamAPI_ISteamController_ActivateActionSet
SteamAPI_ISteamController_GetActionSetHandle
SteamAPI_ISteamController_GetAnalogActionData
SteamAPI_ISteamController_GetAnalogActionHandle
SteamAPI_ISteamController_GetAnalogActionOrigins
SteamAPI_ISteamController_GetConnectedControllers
SteamAPI_ISteamController_GetControllerForGamepadIndex
SteamAPI_ISteamController_GetCurrentActionSet
SteamAPI_ISteamController_GetDigitalActionData
SteamAPI_ISteamController_GetDigitalActionHandle
SteamAPI_ISteamController_GetDigitalActionOrigins
SteamAPI_ISteamController_GetGamepadIndexForController
SteamAPI_ISteamController_GetGlyphForActionOrigin
SteamAPI_ISteamController_GetMotionData
SteamAPI_ISteamController_GetStringForActionOrigin
SteamAPI_ISteamController_Init
SteamAPI_ISteamController_RunFrame
SteamAPI_ISteamController_SetLEDColor
SteamAPI_ISteamController_ShowAnalogActionOrigins
SteamAPI_ISteamController_ShowBindingPanel
SteamAPI_ISteamController_ShowDigitalActionOrigins
SteamAPI_ISteamController_Shutdown
SteamAPI_ISteamController_StopAnalogActionMomentum
SteamAPI_ISteamController_TriggerHapticPulse
SteamAPI_ISteamController_TriggerRepeatedHapticPulse
SteamAPI_ISteamController_TriggerVibration
SteamAPI_ISteamFriends_ActivateGameOverlay
SteamAPI_ISteamFriends_ActivateGameOverlayInviteDialog
SteamAPI_ISteamFriends_ActivateGameOverlayToStore
SteamAPI_ISteamFriends_ActivateGameOverlayToUser
SteamAPI_ISteamFriends_ActivateGameOverlayToWebPage
SteamAPI_ISteamFriends_ClearRichPresence
SteamAPI_ISteamFriends_CloseClanChatWindowInSteam
SteamAPI_ISteamFriends_DownloadClanActivityCounts
SteamAPI_ISteamFriends_EnumerateFollowingList
SteamAPI_ISteamFriends_GetChatMemberByIndex
SteamAPI_ISteamFriends_GetClanActivityCounts
SteamAPI_ISteamFriends_GetClanByIndex
SteamAPI_ISteamFriends_GetClanChatMemberCount
SteamAPI_ISteamFriends_GetClanChatMessage
SteamAPI_ISteamFriends_GetClanCount
SteamAPI_ISteamFriends_GetClanName
SteamAPI_ISteamFriends_GetClanOfficerByIndex
SteamAPI_ISteamFriends_GetClanOfficerCount
SteamAPI_ISteamFriends_GetClanOwner
SteamAPI_ISteamFriends_GetClanTag
SteamAPI_ISteamFriends_GetCoplayFriend
SteamAPI_ISteamFriends_GetCoplayFriendCount
SteamAPI_ISteamFriends_GetFollowerCount
SteamAPI_ISteamFriends_GetFriendByIndex
SteamAPI_ISteamFriends_GetFriendCoplayGame
SteamAPI_ISteamFriends_GetFriendCoplayTime
SteamAPI_ISteamFriends_GetFriendCount
SteamAPI_ISteamFriends_GetFriendCountFromSource
SteamAPI_ISteamFriends_GetFriendFromSourceByIndex
SteamAPI_ISteamFriends_GetFriendGamePlayed
SteamAPI_ISteamFriends_GetFriendMessage
SteamAPI_ISteamFriends_GetFriendPersonaName
SteamAPI_ISteamFriends_GetFriendPersonaNameHistory
SteamAPI_ISteamFriends_GetFriendPersonaState
SteamAPI_ISteamFriends_GetFriendRelationship
SteamAPI_ISteamFriends_GetFriendRichPresence
SteamAPI_ISteamFriends_GetFriendRichPresenceKeyByIndex
SteamAPI_ISteamFriends_GetFriendRichPresenceKeyCount
SteamAPI_ISteamFriends_GetFriendSteamLevel
SteamAPI_ISteamFriends_GetFriendsGroupCount
SteamAPI_ISteamFriends_GetFriendsGroupIDByIndex
SteamAPI_ISteamFriends_GetFriendsGroupMembersCount
SteamAPI_ISteamFriends_GetFriendsGroupMembersList
SteamAPI_ISteamFriends_GetFriendsGroupName
SteamAPI_ISteamFriends_GetLargeFriendAvatar
SteamAPI_ISteamFriends_GetMediumFriendAvatar
SteamAPI_ISteamFriends_GetPersonaName
SteamAPI_ISteamFriends_GetPersonaState
SteamAPI_ISteamFriends_GetPlayerNickname
SteamAPI_ISteamFriends_GetSmallFriendAvatar
SteamAPI_ISteamFriends_GetUserRestrictions
SteamAPI_ISteamFriends_HasFriend
SteamAPI_ISteamFriends_InviteUserToGame
SteamAPI_ISteamFriends_IsClanChatAdmin
SteamAPI_ISteamFriends_IsClanChatWindowOpenInSteam
SteamAPI_ISteamFriends_IsFollowing
SteamAPI_ISteamFriends_IsUserInSource
SteamAPI_ISteamFriends_JoinClanChatRoom
SteamAPI_ISteamFriends_LeaveClanChatRoom
SteamAPI_ISteamFriends_OpenClanChatWindowInSteam
SteamAPI_ISteamFriends_ReplyToFriendMessage
SteamAPI_ISteamFriends_RequestClanOfficerList
SteamAPI_ISteamFriends_RequestFriendRichPresence
SteamAPI_ISteamFriends_RequestUserInformation
SteamAPI_ISteamFriends_SendClanChatMessage
SteamAPI_ISteamFriends_SetInGameVoiceSpeaking
SteamAPI_ISteamFriends_SetListenForFriendsMessages
SteamAPI_ISteamFriends_SetPersonaName
SteamAPI_ISteamFriends_SetPlayedWith
SteamAPI_ISteamFriends_SetRichPresence
SteamAPI_ISteamGameServerStats_ClearUserAchievement
SteamAPI_ISteamGameServerStats_GetUserAchievement
SteamAPI_ISteamGameServerStats_GetUserStat
SteamAPI_ISteamGameServerStats_GetUserStat0
SteamAPI_ISteamGameServerStats_RequestUserStats
SteamAPI_ISteamGameServerStats_SetUserAchievement
SteamAPI_ISteamGameServerStats_SetUserStat
SteamAPI_ISteamGameServerStats_SetUserStat0
SteamAPI_ISteamGameServerStats_StoreUserStats
SteamAPI_ISteamGameServerStats_UpdateUserAvgRateStat
SteamAPI_ISteamGameServer_AssociateWithClan
SteamAPI_ISteamGameServer_BLoggedOn
SteamAPI_ISteamGameServer_BSecure
SteamAPI_ISteamGameServer_BUpdateUserData
SteamAPI_ISteamGameServer_BeginAuthSession
SteamAPI_ISteamGameServer_CancelAuthTicket
SteamAPI_ISteamGameServer_ClearAllKeyValues
SteamAPI_ISteamGameServer_ComputeNewPlayerCompatibility
SteamAPI_ISteamGameServer_CreateUnauthenticatedUserConnection
SteamAPI_ISteamGameServer_EnableHeartbeats
SteamAPI_ISteamGameServer_EndAuthSession
SteamAPI_ISteamGameServer_ForceHeartbeat
SteamAPI_ISteamGameServer_GetAuthSessionTicket
SteamAPI_ISteamGameServer_GetGameplayStats
SteamAPI_ISteamGameServer_GetNextOutgoingPacket
SteamAPI_ISteamGameServer_GetPublicIP
SteamAPI_ISteamGameServer_GetServerReputation
SteamAPI_ISteamGameServer_GetSteamID
SteamAPI_ISteamGameServer_HandleIncomingPacket
SteamAPI_ISteamGameServer_InitGameServer
SteamAPI_ISteamGameServer_LogOff
SteamAPI_ISteamGameServer_LogOn
SteamAPI_ISteamGameServer_LogOnAnonymous
SteamAPI_ISteamGameServer_RequestUserGroupStatus
SteamAPI_ISteamGameServer_SendUserConnectAndAuthenticate
SteamAPI_ISteamGameServer_SendUserDisconnect
SteamAPI_ISteamGameServer_SetBotPlayerCount
SteamAPI_ISteamGameServer_SetDedicatedServer
SteamAPI_ISteamGameServer_SetGameData
SteamAPI_ISteamGameServer_SetGameDescription
SteamAPI_ISteamGameServer_SetGameTags
SteamAPI_ISteamGameServer_SetHeartbeatInterval
SteamAPI_ISteamGameServer_SetKeyValue
SteamAPI_ISteamGameServer_SetMapName
SteamAPI_ISteamGameServer_SetMaxPlayerCount
SteamAPI_ISteamGameServer_SetModDir
SteamAPI_ISteamGameServer_SetPasswordProtected
SteamAPI_ISteamGameServer_SetProduct
SteamAPI_ISteamGameServer_SetRegion
SteamAPI_ISteamGameServer_SetServerName
SteamAPI_ISteamGameServer_SetSpectatorPort
SteamAPI_ISteamGameServer_SetSpectatorServerName
SteamAPI_ISteamGameServer_UserHasLicenseForApp
SteamAPI_ISteamGameServer_WasRestartRequested
SteamAPI_ISteamHTMLSurface_AddHeader
SteamAPI_ISteamHTMLSurface_AllowStartRequest
SteamAPI_ISteamHTMLSurface_CopyToClipboard
SteamAPI_ISteamHTMLSurface_CreateBrowser
SteamAPI_ISteamHTMLSurface_DestructISteamHTMLSurface
SteamAPI_ISteamHTMLSurface_ExecuteJavascript
SteamAPI_ISteamHTMLSurface_Find
SteamAPI_ISteamHTMLSurface_GetLinkAtPosition
SteamAPI_ISteamHTMLSurface_GoBack
SteamAPI_ISteamHTMLSurface_GoForward
SteamAPI_ISteamHTMLSurface_Init
SteamAPI_ISteamHTMLSurface_JSDialogResponse
SteamAPI_ISteamHTMLSurface_KeyChar
SteamAPI_ISteamHTMLSurface_KeyDown
SteamAPI_ISteamHTMLSurface_KeyUp
SteamAPI_ISteamHTMLSurface_LoadURL
SteamAPI_ISteamHTMLSurface_MouseDoubleClick
SteamAPI_ISteamHTMLSurface_MouseDown
SteamAPI_ISteamHTMLSurface_MouseMove
SteamAPI_ISteamHTMLSurface_MouseUp
SteamAPI_ISteamHTMLSurface_MouseWheel
SteamAPI_ISteamHTMLSurface_PasteFromClipboard
SteamAPI_ISteamHTMLSurface_Reload
SteamAPI_ISteamHTMLSurface_RemoveBrowser
SteamAPI_ISteamHTMLSurface_SetBackgroundMode
SteamAPI_ISteamHTMLSurface_SetCookie
SteamAPI_ISteamHTMLSurface_SetDPIScalingFactor
SteamAPI_ISteamHTMLSurface_SetHorizontalScroll
SteamAPI_ISteamHTMLSurface_SetKeyFocus
SteamAPI_ISteamHTMLSurface_SetPageScaleFactor
SteamAPI_ISteamHTMLSurface_SetSize
SteamAPI_ISteamHTMLSurface_SetVerticalScroll
SteamAPI_ISteamHTMLSurface_Shutdown
SteamAPI_ISteamHTMLSurface_StopFind
SteamAPI_ISteamHTMLSurface_StopLoad
SteamAPI_ISteamHTMLSurface_ViewSource
SteamAPI_ISteamHTTP_CreateCookieContainer
SteamAPI_ISteamHTTP_CreateHTTPRequest
SteamAPI_ISteamHTTP_DeferHTTPRequest
SteamAPI_ISteamHTTP_GetHTTPDownloadProgressPct
SteamAPI_ISteamHTTP_GetHTTPRequestWasTimedOut
SteamAPI_ISteamHTTP_GetHTTPResponseBodyData
SteamAPI_ISteamHTTP_GetHTTPResponseBodySize
SteamAPI_ISteamHTTP_GetHTTPResponseHeaderSize
SteamAPI_ISteamHTTP_GetHTTPResponseHeaderValue
SteamAPI_ISteamHTTP_GetHTTPStreamingResponseBodyData
SteamAPI_ISteamHTTP_PrioritizeHTTPRequest
SteamAPI_ISteamHTTP_ReleaseCookieContainer
SteamAPI_ISteamHTTP_ReleaseHTTPRequest
SteamAPI_ISteamHTTP_SendHTTPRequest
SteamAPI_ISteamHTTP_SendHTTPRequestAndStreamResponse
SteamAPI_ISteamHTTP_SetCookie
SteamAPI_ISteamHTTP_SetHTTPRequestAbsoluteTimeoutMS
SteamAPI_ISteamHTTP_SetHTTPRequestContextValue
SteamAPI_ISteamHTTP_SetHTTPRequestCookieContainer
SteamAPI_ISteamHTTP_SetHTTPRequestGetOrPostParameter
SteamAPI_ISteamHTTP_SetHTTPRequestHeaderValue
SteamAPI_ISteamHTTP_SetHTTPRequestNetworkActivityTimeout
SteamAPI_ISteamHTTP_SetHTTPRequestRawPostBody
SteamAPI_ISteamHTTP_SetHTTPRequestRequiresVerifiedCertificate
SteamAPI_ISteamHTTP_SetHTTPRequestUserAgentInfo
SteamAPI_ISteamInventory_AddPromoItem
SteamAPI_ISteamInventory_AddPromoItems
SteamAPI_ISteamInventory_CheckResultSteamID
SteamAPI_ISteamInventory_ConsumeItem
SteamAPI_ISteamInventory_DeserializeResult
SteamAPI_ISteamInventory_DestroyResult
SteamAPI_ISteamInventory_ExchangeItems
SteamAPI_ISteamInventory_GenerateItems
SteamAPI_ISteamInventory_GetAllItems
SteamAPI_ISteamInventory_GetEligiblePromoItemDefinitionIDs
SteamAPI_ISteamInventory_GetItemDefinitionIDs
SteamAPI_ISteamInventory_GetItemDefinitionProperty
SteamAPI_ISteamInventory_GetItemsByID
SteamAPI_ISteamInventory_GetResultItemProperty
SteamAPI_ISteamInventory_GetResultItems
SteamAPI_ISteamInventory_GetResultStatus
SteamAPI_ISteamInventory_GetResultTimestamp
SteamAPI_ISteamInventory_GrantPromoItems
SteamAPI_ISteamInventory_LoadItemDefinitions
SteamAPI_ISteamInventory_RequestEligiblePromoItemDefinitionsIDs
SteamAPI_ISteamInventory_SendItemDropHeartbeat
SteamAPI_ISteamInventory_SerializeResult
SteamAPI_ISteamInventory_TradeItems
SteamAPI_ISteamInventory_TransferItemQuantity
SteamAPI_ISteamInventory_TriggerItemDrop
SteamAPI_ISteamMatchmakingPingResponse_ServerFailedToRespond
SteamAPI_ISteamMatchmakingPingResponse_ServerResponded
SteamAPI_ISteamMatchmakingPlayersResponse_AddPlayerToList
SteamAPI_ISteamMatchmakingPlayersResponse_PlayersFailedToRespond
SteamAPI_ISteamMatchmakingPlayersResponse_PlayersRefreshComplete
SteamAPI_ISteamMatchmakingRulesResponse_RulesFailedToRespond
SteamAPI_ISteamMatchmakingRulesResponse_RulesRefreshComplete
SteamAPI_ISteamMatchmakingRulesResponse_RulesResponded
SteamAPI_ISteamMatchmakingServerListResponse_RefreshComplete
SteamAPI_ISteamMatchmakingServerListResponse_ServerFailedToRespond
SteamAPI_ISteamMatchmakingServerListResponse_ServerResponded
SteamAPI_ISteamMatchmakingServers_CancelQuery
SteamAPI_ISteamMatchmakingServers_CancelServerQuery
SteamAPI_ISteamMatchmakingServers_GetServerCount
SteamAPI_ISteamMatchmakingServers_GetServerDetails
SteamAPI_ISteamMatchmakingServers_IsRefreshing
SteamAPI_ISteamMatchmakingServers_PingServer
SteamAPI_ISteamMatchmakingServers_PlayerDetails
SteamAPI_ISteamMatchmakingServers_RefreshQuery
SteamAPI_ISteamMatchmakingServers_RefreshServer
SteamAPI_ISteamMatchmakingServers_ReleaseRequest
SteamAPI_ISteamMatchmakingServers_RequestFavoritesServerList
SteamAPI_ISteamMatchmakingServers_RequestFriendsServerList
SteamAPI_ISteamMatchmakingServers_RequestHistoryServerList
SteamAPI_ISteamMatchmakingServers_RequestInternetServerList
SteamAPI_ISteamMatchmakingServers_RequestLANServerList
SteamAPI_ISteamMatchmakingServers_RequestSpectatorServerList
SteamAPI_ISteamMatchmakingServers_ServerRules
SteamAPI_ISteamMatchmaking_AddFavoriteGame
SteamAPI_ISteamMatchmaking_AddRequestLobbyListCompatibleMembersFilter
SteamAPI_ISteamMatchmaking_AddRequestLobbyListDistanceFilter
SteamAPI_ISteamMatchmaking_AddRequestLobbyListFilterSlotsAvailable
SteamAPI_ISteamMatchmaking_AddRequestLobbyListNearValueFilter
SteamAPI_ISteamMatchmaking_AddRequestLobbyListNumericalFilter
SteamAPI_ISteamMatchmaking_AddRequestLobbyListResultCountFilter
SteamAPI_ISteamMatchmaking_AddRequestLobbyListStringFilter
SteamAPI_ISteamMatchmaking_CreateLobby
SteamAPI_ISteamMatchmaking_DeleteLobbyData
SteamAPI_ISteamMatchmaking_GetFavoriteGame
SteamAPI_ISteamMatchmaking_GetFavoriteGameCount
SteamAPI_ISteamMatchmaking_GetLobbyByIndex
SteamAPI_ISteamMatchmaking_GetLobbyChatEntry
SteamAPI_ISteamMatchmaking_GetLobbyData
SteamAPI_ISteamMatchmaking_GetLobbyDataByIndex
SteamAPI_ISteamMatchmaking_GetLobbyDataCount
SteamAPI_ISteamMatchmaking_GetLobbyGameServer
SteamAPI_ISteamMatchmaking_GetLobbyMemberByIndex
SteamAPI_ISteamMatchmaking_GetLobbyMemberData
SteamAPI_ISteamMatchmaking_GetLobbyMemberLimit
SteamAPI_ISteamMatchmaking_GetLobbyOwner
SteamAPI_ISteamMatchmaking_GetNumLobbyMembers
SteamAPI_ISteamMatchmaking_InviteUserToLobby
SteamAPI_ISteamMatchmaking_JoinLobby
SteamAPI_ISteamMatchmaking_LeaveLobby
SteamAPI_ISteamMatchmaking_RemoveFavoriteGame
SteamAPI_ISteamMatchmaking_RequestLobbyData
SteamAPI_ISteamMatchmaking_RequestLobbyList
SteamAPI_ISteamMatchmaking_SendLobbyChatMsg
SteamAPI_ISteamMatchmaking_SetLinkedLobby
SteamAPI_ISteamMatchmaking_SetLobbyData
SteamAPI_ISteamMatchmaking_SetLobbyGameServer
SteamAPI_ISteamMatchmaking_SetLobbyJoinable
SteamAPI_ISteamMatchmaking_SetLobbyMemberData
SteamAPI_ISteamMatchmaking_SetLobbyMemberLimit
SteamAPI_ISteamMatchmaking_SetLobbyOwner
SteamAPI_ISteamMatchmaking_SetLobbyType
SteamAPI_ISteamMusicRemote_BActivationSuccess
SteamAPI_ISteamMusicRemote_BIsCurrentMusicRemote
SteamAPI_ISteamMusicRemote_CurrentEntryDidChange
SteamAPI_ISteamMusicRemote_CurrentEntryIsAvailable
SteamAPI_ISteamMusicRemote_CurrentEntryWillChange
SteamAPI_ISteamMusicRemote_DeregisterSteamMusicRemote
SteamAPI_ISteamMusicRemote_EnableLooped

Sections

.text
Size: 111KB - Virtual size: 110KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 78KB - Virtual size: 78KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 12KB - Virtual size: 22KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
tinserver/data/Content/3/depotcache/228982_6413394087650432851.manifest
tinserver/data/Content/3/depotcache/481_840604261173631294.manifest
tinserver/data/Content/3/readme.txt
tinserver/data/DrmFileServer/readme.txt
tinserver/data/Emoticons/csrinru.png
.png
tinserver/data/Emoticons/steambored.png
.png
tinserver/data/Emoticons/steamfacepalm.png
.png
tinserver/data/Emoticons/steamhappy.png
.png
tinserver/data/Emoticons/steammocking.png
.png
tinserver/data/Emoticons/steamsad.png
.png
tinserver/data/Emoticons/steamsalty.png
.png
tinserver/data/GamePatchs/Spacewar (alternative)/install.cmd
tinserver/data/GamePatchs/Spacewar (alternative)/manifest.ini
tinserver/data/GamePatchs/Spacewar (alternative)/readme.txt
tinserver/data/GamePatchs/Spacewar/binaries/displayMessageBox.cpp
tinserver/data/GamePatchs/Spacewar/binaries/displayMessageBox.dll
.dll windows:6 windows x86 arch:x86

05ec965f1c1a9cc22d638ff9d9f4d4b3

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

C:\Perso\SteamDev2015\Release\TINserverClient.pdb

Imports

kernel32

DisableThreadLibraryCalls
CreateFileW
DecodePointer
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
IsProcessorFeaturePresent
QueryPerformanceCounter
GetCurrentProcessId
GetCurrentThreadId
GetSystemTimeAsFileTime
InitializeSListHead
IsDebuggerPresent
GetStartupInfoW
GetModuleHandleW
InterlockedFlushSList
RtlUnwind
GetLastError
SetLastError
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
InitializeCriticalSectionAndSpinCount
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
FreeLibrary
GetProcAddress
LoadLibraryExW
ExitProcess
GetModuleHandleExW
GetModuleFileNameA
MultiByteToWideChar
WideCharToMultiByte
HeapFree
HeapAlloc
LCMapStringW
FindClose
FindFirstFileExA
FindNextFileA
IsValidCodePage
GetACP
GetOEMCP
GetCPInfo
GetCommandLineA
GetCommandLineW
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetProcessHeap
GetStdHandle
GetFileType
GetStringTypeW
HeapSize
HeapReAlloc
SetStdHandle
WriteFile
FlushFileBuffers
GetConsoleCP
GetConsoleMode
SetFilePointerEx
CloseHandle
WriteConsoleW
RaiseException

user32

MessageBoxA

Sections

.text
Size: 40KB - Virtual size: 39KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 22KB - Virtual size: 21KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 2KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.gfids
Size: 512B - Virtual size: 160B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 512B - Virtual size: 480B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
tinserver/data/GamePatchs/Spacewar/binaries/replacemenent.cpp
tinserver/data/GamePatchs/Spacewar/binaries/replacement.exe
.exe windows:6 windows x86 arch:x86

9ba492a042e5fbc66f912c9ab29c6a29

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

C:\Perso\SteamDev2015\Release\BaseTests.pdb

Imports

kernel32

Sleep
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
IsProcessorFeaturePresent
QueryPerformanceCounter
GetCurrentProcessId
GetCurrentThreadId
GetSystemTimeAsFileTime
InitializeSListHead
IsDebuggerPresent
GetStartupInfoW
GetModuleHandleW
RtlUnwind
GetLastError
SetLastError
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
InitializeCriticalSectionAndSpinCount
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
FreeLibrary
GetProcAddress
LoadLibraryExW
GetStdHandle
WriteFile
GetModuleFileNameA
MultiByteToWideChar
WideCharToMultiByte
ExitProcess
GetModuleHandleExW
GetCommandLineA
GetCommandLineW
GetACP
HeapFree
HeapAlloc
CompareStringW
LCMapStringW
GetFileType
CloseHandle
FindClose
FindFirstFileExA
FindNextFileA
IsValidCodePage
GetOEMCP
GetCPInfo
GetEnvironmentStringsW
FreeEnvironmentStringsW
SetEnvironmentVariableA
SetStdHandle
GetStringTypeW
GetProcessHeap
FlushFileBuffers
GetConsoleCP
GetConsoleMode
HeapSize
HeapReAlloc
SetFilePointerEx
WriteConsoleW
CreateFileW
DecodePointer
RaiseException

Sections

.text
Size: 62KB - Virtual size: 62KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 25KB - Virtual size: 24KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 2KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.gfids
Size: 512B - Virtual size: 172B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 512B - Virtual size: 480B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
tinserver/data/GamePatchs/Spacewar/install.cmd
tinserver/data/GamePatchs/Spacewar/manifest.ini
tinserver/data/GamePatchs/Spacewar/scripts/replace.cmd
tinserver/data/GamePatchs/Spacewar/scripts/restore.cmd
tinserver/data/GamePatchs/Tomb Raider/TombRaiderMultiplayer.dll
.dll windows:6 windows x86 arch:x86

4d8e26eb6e04268af814f6fb6d615ac8

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

C:\Perso\SteamDev2017\Release\TombRaiderMultiplayer.pdb

Imports

kernel32

CreateThread
CloseHandle
DecodePointer
HeapSize
GetStringTypeW
GetProcessHeap
FreeEnvironmentStringsW
DisableThreadLibraryCalls
GetCommandLineW
GetOEMCP
IsValidCodePage
GetConsoleMode
SetFilePointerEx
GetCPInfo
HeapReAlloc
SetStdHandle
LCMapStringW
CompareStringW
GetTimeFormatW
GetDateFormatW
HeapAlloc
HeapFree
Sleep
GetEnvironmentStringsW
CreateDirectoryW
SetFileTime
SetFilePointer
CreateFileW
GetLastError
SystemTimeToFileTime
GetSystemTime
WideCharToMultiByte
GetModuleFileNameA
VirtualProtect
SetLastError
GetCurrentProcess
GetStdHandle
WaitForSingleObject
GetCurrentThreadId
SuspendThread
ResumeThread
GetCommandLineA
QueryPerformanceFrequency
QueryPerformanceCounter
SetUnhandledExceptionFilter
GetProcAddress
FreeLibrary
EnterCriticalSection
LeaveCriticalSection
InitializeCriticalSection
DeleteCriticalSection
WriteFile
FlushFileBuffers
FormatMessageA
GetConsoleOutputCP
GetConsoleCP
ReleaseSemaphore
TlsSetValue
GetExitCodeThread
TerminateThread
TlsAlloc
TlsGetValue
SetEvent
GetACP
FindNextFileW
FindClose
MultiByteToWideChar
UnhandledExceptionFilter
TerminateProcess
IsProcessorFeaturePresent
GetCurrentProcessId
GetSystemTimeAsFileTime
InitializeSListHead
IsDebuggerPresent
GetStartupInfoW
GetModuleHandleW
RtlUnwind
InterlockedFlushSList
EncodePointer
InitializeCriticalSectionAndSpinCount
TlsFree
LoadLibraryExW
RaiseException
GetFileAttributesExW
FindFirstFileExW
GetDriveTypeW
GetFileType
GetFullPathNameW
ExitProcess
GetModuleHandleExW
GetTimeZoneInformation
SetEnvironmentVariableW
GetCurrentDirectoryW
GetModuleFileNameW
WriteConsoleW
GetModuleHandleA

user32

MessageBoxA

ws2_32

getsockname
socket
ioctlsocket
WSAGetLastError
WSACleanup
accept
WSASend
closesocket
WSAAccept
WSASendTo
WSAStartup
WSAConnect
send
gethostname
recvfrom
connect
recv
bind
listen
select
__WSAFDIsSet
shutdown
gethostbyname
WSARecv
WSARecvFrom
sendto
ntohs
htonl
inet_ntop
htons
ntohl

advapi32

CryptAcquireContextW
CryptGenRandom
CryptReleaseContext

Sections

.text
Size: 448KB - Virtual size: 448KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 931KB - Virtual size: 931KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 77KB - Virtual size: 114KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 480B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 25KB - Virtual size: 25KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
tinserver/data/GamePatchs/Tomb Raider/manifest.ini
tinserver/data/GamePatchs/readme.txt
tinserver/data/GameStats/schemas/UserGameStatsSchema_10180.bin
tinserver/data/GameStats/schemas/UserGameStatsSchema_104900.bin
tinserver/data/GameStats/schemas/UserGameStatsSchema_10620.bin
tinserver/data/GameStats/schemas/UserGameStatsSchema_107410.bin
tinserver/data/GameStats/schemas/UserGameStatsSchema_1230.bin
tinserver/data/GameStats/schemas/UserGameStatsSchema_1250.bin
tinserver/data/GameStats/schemas/UserGameStatsSchema_13210.bin
tinserver/data/GameStats/schemas/UserGameStatsSchema_1540.bin
tinserver/data/GameStats/schemas/UserGameStatsSchema_17515.bin
tinserver/data/GameStats/schemas/UserGameStatsSchema_17530.bin
tinserver/data/GameStats/schemas/UserGameStatsSchema_204300.bin
tinserver/data/GameStats/schemas/UserGameStatsSchema_204980.bin
tinserver/data/GameStats/schemas/UserGameStatsSchema_209170.bin
tinserver/data/GameStats/schemas/UserGameStatsSchema_20920.bin
tinserver/data/GameStats/schemas/UserGameStatsSchema_21100.bin
tinserver/data/GameStats/schemas/UserGameStatsSchema_218680.bin
tinserver/data/GameStats/schemas/UserGameStatsSchema_220.bin
tinserver/data/GameStats/schemas/UserGameStatsSchema_231330.bin
tinserver/data/GameStats/schemas/UserGameStatsSchema_232090.bin
tinserver/data/GameStats/schemas/UserGameStatsSchema_238090.bin
tinserver/data/GameStats/schemas/UserGameStatsSchema_239140.bin
tinserver/data/GameStats/schemas/UserGameStatsSchema_252490.bin
tinserver/data/GameStats/schemas/UserGameStatsSchema_300.bin
tinserver/data/GameStats/schemas/UserGameStatsSchema_346110.bin
tinserver/data/GameStats/schemas/UserGameStatsSchema_35130.bin
tinserver/data/GameStats/schemas/UserGameStatsSchema_35450.bin
tinserver/data/GameStats/schemas/UserGameStatsSchema_380.bin
tinserver/data/GameStats/schemas/UserGameStatsSchema_394760.bin
tinserver/data/GameStats/schemas/UserGameStatsSchema_39800.bin
tinserver/data/GameStats/schemas/UserGameStatsSchema_400.bin
tinserver/data/GameStats/schemas/UserGameStatsSchema_4000.bin
tinserver/data/GameStats/schemas/UserGameStatsSchema_41000.bin
tinserver/data/GameStats/schemas/UserGameStatsSchema_41070.bin
tinserver/data/GameStats/schemas/UserGameStatsSchema_412450.bin
tinserver/data/GameStats/schemas/UserGameStatsSchema_41500.bin
tinserver/data/GameStats/schemas/UserGameStatsSchema_420.bin
tinserver/data/GameStats/schemas/UserGameStatsSchema_420290.bin
tinserver/data/GameStats/schemas/UserGameStatsSchema_4330.bin
tinserver/data/GameStats/schemas/UserGameStatsSchema_480.bin
tinserver/data/GameStats/schemas/UserGameStatsSchema_500.bin
tinserver/data/GameStats/schemas/UserGameStatsSchema_510.bin
tinserver/data/GameStats/schemas/UserGameStatsSchema_530.bin
tinserver/data/GameStats/schemas/UserGameStatsSchema_550.bin
tinserver/data/GameStats/schemas/UserGameStatsSchema_55230.bin
tinserver/data/GameStats/schemas/UserGameStatsSchema_563560.bin
tinserver/data/GameStats/schemas/UserGameStatsSchema_620.bin
tinserver/data/GameStats/schemas/UserGameStatsSchema_730.bin
tinserver/data/GameStats/schemas/readme.txt
tinserver/data/Inventory/ItemsSchema_252490.json
tinserver/data/Inventory/readme.txt
tinserver/data/SteamWeb/readme.txt
tinserver/data/SteamWeb/steamcdn-a.akamaihd.net/steamcommunity/public/images/avatars/00/0000000000000000000000000000000000000000.jpg
.jpg
tinserver/data/SteamWeb/steamcdn-a.akamaihd.net/steamcommunity/public/images/avatars/00/0000000000000000000000000000000000000000_medium.jpg
.jpg
tinserver/samplePlugin/TINserverAPI.dll
.dll windows:6 windows x86 arch:x86

ff91bcce070cba28faf2008ab84ec17a

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

C:\Perso\SteamDev2017\Release\TINserverAPI.pdb

Imports

kernel32

EnterCriticalSection
LeaveCriticalSection
InitializeCriticalSection
DeleteCriticalSection
GetCurrentThreadId
GetLastError
WideCharToMultiByte
SetLastError
InitializeCriticalSectionAndSpinCount
CreateEventW
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
GetSystemTimeAsFileTime
GetModuleHandleW
GetProcAddress
EncodePointer
DecodePointer
MultiByteToWideChar
LCMapStringW
GetStringTypeW
GetCPInfo
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
IsProcessorFeaturePresent
CloseHandle
IsDebuggerPresent
GetStartupInfoW
QueryPerformanceCounter
GetCurrentProcessId
InitializeSListHead
RtlUnwind
RaiseException
InterlockedFlushSList
FreeLibrary
LoadLibraryExW
GetStdHandle
GetFileType
GetModuleFileNameW
GetModuleHandleExW
WriteConsoleW
ExitProcess
GetConsoleMode
WriteFile
GetConsoleCP
HeapAlloc
HeapFree
OutputDebugStringW
FlushFileBuffers
HeapReAlloc
FindClose
FindFirstFileExW
FindNextFileW
IsValidCodePage
GetACP
GetOEMCP
GetCommandLineA
GetCommandLineW
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetProcessHeap
SetStdHandle
SetFilePointerEx
HeapSize
CreateFileW

Exports

Exports

TINServer_API_getCMServer
TINServer_API_getGameCoordinator
TINServer_API_getUsersDirectory
TINServer_API_onRequest

Sections

.text
Size: 1.1MB - Virtual size: 1.1MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 160KB - Virtual size: 160KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 15KB - Virtual size: 21KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 480B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 72KB - Virtual size: 71KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
tinserver/samplePlugin/readme.txt
tinserver/samplePlugin/source/TINserverAPI.cpp
tinserver/samplePlugin/source/TINserverAPI.def
tinserver/samplePlugin/source/TINserverAPI.h
tinserver/samplePlugin/source/TINserverAPI.vcxproj
tinserver/samplePlugin/source/TINserverAPI.vcxproj.filters
tinserver/samplePlugin/source/TINserverAPI.vcxproj.user
tinserver/samplePlugin/source/TINserverAPI_cmServer.cpp
tinserver/samplePlugin/source/TINserverAPI_gameCoordinator.cpp
tinserver/samplePlugin/source/TINserverAPI_usersDirectory.cpp
tinserver/samplePlugin/source/TINserverAPI_webServer.cpp
tinserver/samplePlugin/source/protobuf/encrypted_app_ticket.pb.cpp
tinserver/samplePlugin/source/protobuf/encrypted_app_ticket.pb.h
tinserver/samplePlugin/source/protobuf/steammessages_base.pb.cpp
tinserver/samplePlugin/source/protobuf/steammessages_base.pb.h
tinserver/samplePlugin/source/protobuf/steammessages_clientserver.pb.cpp
tinserver/samplePlugin/source/protobuf/steammessages_clientserver.pb.h
tinserver/tools/PICSdownloader/PICSdownloader.exe
.exe windows:6 windows x86 arch:x86

17c1fac581d758652a943f899ed9b90e

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

C:\Perso\SteamDev2017\Release\PICSdownloader.pdb

Imports

kernel32

OutputDebugStringA
GetDiskFreeSpaceW
HeapCreate
AreFileApisANSI
CreateMutexW
VirtualAlloc
VirtualFree
LockFile
GetFullPathNameA
GetTempPathA
GetDiskFreeSpaceA
GetFileAttributesA
FlushViewOfFile
CreateFileA
DeleteFileA
LoadLibraryW
HeapCompact
HeapDestroy
UnlockFile
LocalFree
LockFileEx
HeapValidate
UnlockFileEx
IsBadReadPtr
Sleep
SetFileTime
SetFilePointer
SetEndOfFile
GetTempPathW
CreateFileW
GetFileAttributesW
GetLastError
DeleteFileW
CloseHandle
SystemTimeToFileTime
GetDiskFreeSpaceExA
GetSystemTime
VirtualProtect
SetLastError
SetConsoleTextAttribute
GetCurrentProcess
GetStdHandle
WaitForSingleObject
GetCurrentThreadId
GetCommandLineA
GetVersionExA
QueryPerformanceFrequency
GetSystemInfo
QueryPerformanceCounter
GetTickCount
SetUnhandledExceptionFilter
WideCharToMultiByte
TryEnterCriticalSection
EnterCriticalSection
LeaveCriticalSection
InitializeCriticalSection
DeleteCriticalSection
GetVolumeInformationA
ReadFile
FormatMessageA
LoadLibraryA
GetProcAddress
FreeLibrary
WriteFile
FlushFileBuffers
GetConsoleOutputCP
GetConsoleCP
UnmapViewOfFile
MapViewOfFile
GetFileSize
TlsSetValue
GetExitCodeThread
TerminateThread
TlsAlloc
CreateThread
TlsGetValue
SetEvent
CreateEventA
ReleaseSemaphore
CreateSemaphoreA
GetACP
FindNextFileW
FindClose
MultiByteToWideChar
FormatMessageW
InitializeCriticalSectionAndSpinCount
CreateEventW
TlsFree
GetSystemTimeAsFileTime
GetModuleHandleW
EncodePointer
DecodePointer
CompareStringW
LCMapStringW
GetStringTypeW
GetCPInfo
UnhandledExceptionFilter
TerminateProcess
IsProcessorFeaturePresent
WaitForSingleObjectEx
GetCurrentProcessId
InitializeSListHead
IsDebuggerPresent
GetStartupInfoW
RtlUnwind
RaiseException
LoadLibraryExW
GetFileAttributesExW
FindFirstFileExW
SystemTimeToTzSpecificLocalTime
FileTimeToSystemTime
GetDriveTypeW
GetFileInformationByHandle
GetFileType
PeekNamedPipe
GetFullPathNameW
ExitProcess
GetModuleHandleExW
GetTimeZoneInformation
SetEnvironmentVariableW
GetCurrentDirectoryW
GetModuleFileNameW
WriteConsoleW
ExitThread
FreeLibraryAndExitThread
GetCommandLineW
GetConsoleMode
HeapFree
HeapAlloc
GetDateFormatW
GetTimeFormatW
SetStdHandle
HeapReAlloc
OutputDebugStringW
SetFilePointerEx
IsValidCodePage
GetOEMCP
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetProcessHeap
HeapSize
CreateFileMappingW

ws2_32

WSASend
gethostname
ntohl
__WSAFDIsSet
select
bind
closesocket
shutdown
getsockname
socket
ioctlsocket
WSAGetLastError
WSAIoctl
sendto
htonl
inet_ntop
htons
WSACleanup
accept
ntohs
gethostbyname
WSAAccept
WSASendTo
WSAStartup
WSAConnect
send
connect
recvfrom
WSARecv
recv
WSARecvFrom

netapi32

Netbios

advapi32

RegDeleteValueA
RegOpenKeyExA
RegSetValueExA
RegCreateKeyExA
RegQueryValueExA
RegDeleteKeyA
RegCloseKey
RegEnumKeyExA
RegEnumValueA
CryptReleaseContext
CryptGenRandom
CryptAcquireContextW

Sections

.text
Size: 4.0MB - Virtual size: 4.0MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1.5MB - Virtual size: 1.5MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 101KB - Virtual size: 152KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 480B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 276KB - Virtual size: 276KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
tinserver/tools/PICSdownloader/PICSdownloader.ini
tinserver/tools/TINcft/Readme.txt
tinserver/tools/TINcft/TINcft.ini
tinserver/updateAppInfo.cmd
tinserver/updateClient.cmd

Sharing

General

Malware Config

Signatures

Files

43624cb67c30d3c715e86c3976533cc9

Headers

DLL Characteristics

File Characteristics

PDB Paths

Imports

kernel32

dbghelp

ws2_32

iphlpapi

shlwapi

advapi32

ole32

Sections

.text Size: 5.5MB - Virtual size: 5.5MB

.rdata Size: 1.8MB - Virtual size: 1.8MB

.data Size: 110KB - Virtual size: 177KB

.rsrc Size: 31KB - Virtual size: 30KB

.reloc Size: 371KB - Virtual size: 370KB

9dd3ef05d2caf46db7383e7b5ef6162a

Code Sign

0c:e7:e0:e5:17:d8:46:fe:8f:e5:60:fc:1b:f0:30:39Certificate

Key Usages

7e:93:eb:fb:7c:c6:4e:59:ea:4b:9a:77:d4:06:fc:3bCertificate

Extended Key Usages

Key Usages

0e:cf:f4:38:c8:fe:bf:35:6e:04:d8:6a:98:1b:1a:50Certificate

Extended Key Usages

Key Usages

05:4f:46:6c:ec:cb:e9:d6:be:e8:1f:54:35:e6:4d:47Certificate

Extended Key Usages

Key Usages

04:09:18:1b:5f:d5:bb:66:75:53:43:b5:6f:95:50:08Certificate

Extended Key Usages

Key Usages

cf:a2:ed:de:77:de:f6:2a:3b:d0:85:ac:d4:00:9f:7e:38:0f:09:f0Signer

Headers

DLL Characteristics

File Characteristics

PDB Paths

Imports

comctl32

kernel32

user32

gdi32

advapi32

shell32

oleaut32

version

crypt32

ws2_32

wsock32

psapi

Exports

Exports

Sections

.text Size: 2.0MB - Virtual size: 2.0MB

.rdata Size: 639KB - Virtual size: 638KB

.data Size: 76KB - Virtual size: 460KB

.rsrc Size: 219KB - Virtual size: 219KB

.reloc Size: 100KB - Virtual size: 100KB

9ba0f91f6006e719fb19ecb296d1b897

Headers

DLL Characteristics

File Characteristics

PDB Paths

Imports

kernel32

user32

dbghelp

ws2_32

imagehlp

advapi32

Sections

.text Size: 2.6MB - Virtual size: 2.6MB

.text
Size: 5.5MB - Virtual size: 5.5MB

.rdata
Size: 1.8MB - Virtual size: 1.8MB

.data
Size: 110KB - Virtual size: 177KB

.rsrc
Size: 31KB - Virtual size: 30KB

.reloc
Size: 371KB - Virtual size: 370KB

0c:e7:e0:e5:17:d8:46:fe:8f:e5:60:fc:1b:f0:30:39
Certificate

7e:93:eb:fb:7c:c6:4e:59:ea:4b:9a:77:d4:06:fc:3b
Certificate

0e:cf:f4:38:c8:fe:bf:35:6e:04:d8:6a:98:1b:1a:50
Certificate

05:4f:46:6c:ec:cb:e9:d6:be:e8:1f:54:35:e6:4d:47
Certificate

04:09:18:1b:5f:d5:bb:66:75:53:43:b5:6f:95:50:08
Certificate

cf:a2:ed:de:77:de:f6:2a:3b:d0:85:ac:d4:00:9f:7e:38:0f:09:f0
Signer

.text
Size: 2.0MB - Virtual size: 2.0MB

.rdata
Size: 639KB - Virtual size: 638KB

.data
Size: 76KB - Virtual size: 460KB

.rsrc
Size: 219KB - Virtual size: 219KB

.reloc
Size: 100KB - Virtual size: 100KB

.text
Size: 2.6MB - Virtual size: 2.6MB

.rdata
Size: 1.2MB - Virtual size: 1.2MB

.data
Size: 89KB - Virtual size: 139KB

.rsrc
Size: 512B - Virtual size: 480B

.reloc
Size: 170KB - Virtual size: 169KB

.text
Size: 437KB - Virtual size: 437KB

.rdata
Size: 937KB - Virtual size: 937KB

.data
Size: 77KB - Virtual size: 116KB

.rsrc
Size: 152KB - Virtual size: 152KB

.reloc
Size: 25KB - Virtual size: 24KB

.text
Size: 2.7MB - Virtual size: 2.7MB

.rdata
Size: 2.0MB - Virtual size: 2.0MB

.data
Size: 107KB - Virtual size: 165KB

.pdata
Size: 187KB - Virtual size: 186KB

.rsrc
Size: 512B - Virtual size: 480B

.reloc
Size: 30KB - Virtual size: 29KB

.text
Size: 364KB - Virtual size: 363KB

.rdata
Size: 975KB - Virtual size: 974KB

.data
Size: 91KB - Virtual size: 131KB

.pdata
Size: 14KB - Virtual size: 14KB

.rsrc
Size: 152KB - Virtual size: 152KB

.reloc
Size: 8KB - Virtual size: 8KB

.text
Size: 17KB - Virtual size: 17KB

.rdata
Size: 8KB - Virtual size: 7KB

.data
Size: 3KB - Virtual size: 6KB

.rsrc
Size: 512B - Virtual size: 436B

.reloc
Size: 2KB - Virtual size: 1KB