Edit tour

Windows Analysis Report
SecuriteInfo.com.suspected.of.Malware-Cryptor.FSP.gen.24990.4905.dll

Overview

General Information

Sample name:	SecuriteInfo.com.suspected.of.Malware-Cryptor.FSP.gen.24990.4905.dll
Analysis ID:	1389009
MD5:	896034e0a60043f71a444ec13f646f42
SHA1:	83256ab66adec995013a9f0d51e958f1993bdd2b
SHA256:	9c7a944bec345060fe3a691d4f2ed3bfcd2fced69324c375939526ea77703107
Tags:	dll
Infos:

Detection

Score:	48
Range:	0 - 100
Whitelisted:	false
Confidence:	100%

Signatures

Multi AV Scanner detection for submitted file

Checks if the current process is being debugged

Creates a process in suspended mode (likely to inject code)

Program does not show much activity (idle)

Sample execution stops while process was sleeping (likely an evasion)

Tries to load missing DLLs

Uses 32bit PE files

Classification

Process Tree

System is w10x64

loaddll32.exe (PID: 3532 cmdline: loaddll32.exe "C:\Users\user\Desktop\SecuriteInfo.com.suspected.of.Malware-Cryptor.FSP.gen.24990.4905.dll" MD5: 51E6071F9CBA48E79F10C84515AAE618)

conhost.exe (PID: 3000 cmdline: C:\Windows\system32\conhost.exe 0xffffffff -ForceV1 MD5: 0D698AF330FD17BEE3BF90011D49251D)

cmd.exe (PID: 3500 cmdline: cmd.exe /C rundll32.exe "C:\Users\user\Desktop\SecuriteInfo.com.suspected.of.Malware-Cryptor.FSP.gen.24990.4905.dll",#1 MD5: D0FCE3AFA6AA1D58CE9FA336CC2B675B)

rundll32.exe (PID: 1208 cmdline: rundll32.exe "C:\Users\user\Desktop\SecuriteInfo.com.suspected.of.Malware-Cryptor.FSP.gen.24990.4905.dll",#1 MD5: 889B99C52A60DD49227C5E485A016679)

rundll32.exe (PID: 1224 cmdline: rundll32.exe C:\Users\user\Desktop\SecuriteInfo.com.suspected.of.Malware-Cryptor.FSP.gen.24990.4905.dll,GetHSteamPipe MD5: 889B99C52A60DD49227C5E485A016679)

rundll32.exe (PID: 1008 cmdline: rundll32.exe C:\Users\user\Desktop\SecuriteInfo.com.suspected.of.Malware-Cryptor.FSP.gen.24990.4905.dll,GetHSteamUser MD5: 889B99C52A60DD49227C5E485A016679)

rundll32.exe (PID: 4160 cmdline: rundll32.exe C:\Users\user\Desktop\SecuriteInfo.com.suspected.of.Malware-Cryptor.FSP.gen.24990.4905.dll,SteamAPI_GetHSteamPipe MD5: 889B99C52A60DD49227C5E485A016679)

cleanup

Malware Configuration

⊘No configs have been found

Yara Signatures

⊘No yara matches

Sigma Signatures

⊘No Sigma rule has matched

Snort Signatures

⊘No Snort rule has matched

Joe Sandbox Signatures

• AV Detection
• Compliance
• System Summary
• Hooking and other Techniques for Hiding and Protection
• Malware Analysis System Evasion
• Anti Debugging
• HIPS / PFW / Operating System Protection Evasion

Click to jump to signature section

Show All Signature Results

AV Detection

Multi AV Scanner detection for submitted file

Source: SecuriteInfo.com.suspected.of.Malware-Cryptor.FSP.gen.24990.4905.dll

Virustotal: Detection: 10%

Perma Link

Source: SecuriteInfo.com.suspected.of.Malware-Cryptor.FSP.gen.24990.4905.dll

Static PE information: EXECUTABLE_IMAGE, 32BIT_MACHINE, DLL

Source: SecuriteInfo.com.suspected.of.Malware-Cryptor.FSP.gen.24990.4905.dll

Static PE information: DYNAMIC_BASE, NX_COMPAT

Source:	Binary string: C:\Develop\C\Game\SteamApi\Release\steam_api.pdb\5 source: SecuriteInfo.com.suspected.of.Malware-Cryptor.FSP.gen.24990.4905.dll
Source:	Binary string: C:\Develop\C\Game\SteamApi\Release\steam_api.pdb source: SecuriteInfo.com.suspected.of.Malware-Cryptor.FSP.gen.24990.4905.dll

Source: C:\Windows\System32\loaddll32.exe	Section loaded: apphelp.dll	Jump to behavior
Source: C:\Windows\System32\loaddll32.exe	Section loaded: textshaping.dll	Jump to behavior
Source: C:\Windows\System32\loaddll32.exe	Section loaded: uxtheme.dll	Jump to behavior
Source: C:\Windows\System32\loaddll32.exe	Section loaded: windows.storage.dll	Jump to behavior
Source: C:\Windows\System32\loaddll32.exe	Section loaded: wldp.dll	Jump to behavior
Source: C:\Windows\SysWOW64\cmd.exe	Section loaded: apphelp.dll	Jump to behavior

Source: SecuriteInfo.com.suspected.of.Malware-Cryptor.FSP.gen.24990.4905.dll

Static PE information: EXECUTABLE_IMAGE, 32BIT_MACHINE, DLL

Source: classification engine

Classification label: mal48.winDLL@12/0@0/0

Source: C:\Windows\System32\conhost.exe

Mutant created: \Sessions\1\BaseNamedObjects\Local\SM0:3000:120:WilError_03

Source: SecuriteInfo.com.suspected.of.Malware-Cryptor.FSP.gen.24990.4905.dll

Static PE information: Section: .text IMAGE_SCN_CNT_CODE, IMAGE_SCN_MEM_EXECUTE, IMAGE_SCN_MEM_READ

Source: C:\Windows\System32\loaddll32.exe

Key opened: HKEY_CURRENT_USER\Software\Policies\Microsoft\Windows\Safer\CodeIdentifiers

Jump to behavior

Source: C:\Windows\System32\loaddll32.exe

Process created: C:\Windows\SysWOW64\rundll32.exe rundll32.exe C:\Users\user\Desktop\SecuriteInfo.com.suspected.of.Malware-Cryptor.FSP.gen.24990.4905.dll,GetHSteamPipe

Source: SecuriteInfo.com.suspected.of.Malware-Cryptor.FSP.gen.24990.4905.dll

Virustotal: Detection: 10%

Source: unknown	Process created: C:\Windows\System32\loaddll32.exe loaddll32.exe "C:\Users\user\Desktop\SecuriteInfo.com.suspected.of.Malware-Cryptor.FSP.gen.24990.4905.dll"
Source: C:\Windows\System32\loaddll32.exe	Process created: C:\Windows\System32\conhost.exe C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Source: C:\Windows\System32\loaddll32.exe	Process created: C:\Windows\SysWOW64\cmd.exe cmd.exe /C rundll32.exe "C:\Users\user\Desktop\SecuriteInfo.com.suspected.of.Malware-Cryptor.FSP.gen.24990.4905.dll",#1
Source: C:\Windows\System32\loaddll32.exe	Process created: C:\Windows\SysWOW64\rundll32.exe rundll32.exe C:\Users\user\Desktop\SecuriteInfo.com.suspected.of.Malware-Cryptor.FSP.gen.24990.4905.dll,GetHSteamPipe
Source: C:\Windows\SysWOW64\cmd.exe	Process created: C:\Windows\SysWOW64\rundll32.exe rundll32.exe "C:\Users\user\Desktop\SecuriteInfo.com.suspected.of.Malware-Cryptor.FSP.gen.24990.4905.dll",#1
Source: C:\Windows\System32\loaddll32.exe	Process created: C:\Windows\SysWOW64\rundll32.exe rundll32.exe C:\Users\user\Desktop\SecuriteInfo.com.suspected.of.Malware-Cryptor.FSP.gen.24990.4905.dll,GetHSteamUser
Source: C:\Windows\System32\loaddll32.exe	Process created: C:\Windows\SysWOW64\rundll32.exe rundll32.exe C:\Users\user\Desktop\SecuriteInfo.com.suspected.of.Malware-Cryptor.FSP.gen.24990.4905.dll,SteamAPI_GetHSteamPipe
Source: C:\Windows\System32\loaddll32.exe	Process created: C:\Windows\SysWOW64\cmd.exe cmd.exe /C rundll32.exe "C:\Users\user\Desktop\SecuriteInfo.com.suspected.of.Malware-Cryptor.FSP.gen.24990.4905.dll",#1	Jump to behavior
Source: C:\Windows\System32\loaddll32.exe	Process created: C:\Windows\SysWOW64\rundll32.exe rundll32.exe C:\Users\user\Desktop\SecuriteInfo.com.suspected.of.Malware-Cryptor.FSP.gen.24990.4905.dll,GetHSteamPipe	Jump to behavior
Source: C:\Windows\System32\loaddll32.exe	Process created: C:\Windows\SysWOW64\rundll32.exe rundll32.exe C:\Users\user\Desktop\SecuriteInfo.com.suspected.of.Malware-Cryptor.FSP.gen.24990.4905.dll,GetHSteamUser	Jump to behavior
Source: C:\Windows\System32\loaddll32.exe	Process created: C:\Windows\SysWOW64\rundll32.exe rundll32.exe C:\Users\user\Desktop\SecuriteInfo.com.suspected.of.Malware-Cryptor.FSP.gen.24990.4905.dll,SteamAPI_GetHSteamPipe	Jump to behavior
Source: C:\Windows\SysWOW64\cmd.exe	Process created: C:\Windows\SysWOW64\rundll32.exe rundll32.exe "C:\Users\user\Desktop\SecuriteInfo.com.suspected.of.Malware-Cryptor.FSP.gen.24990.4905.dll",#1	Jump to behavior

Source: C:\Windows\System32\loaddll32.exe	Automated click: OK
Source: C:\Windows\SysWOW64\rundll32.exe	Automated click: OK
Source: C:\Windows\SysWOW64\rundll32.exe	Automated click: OK
Source: C:\Windows\SysWOW64\rundll32.exe	Automated click: OK
Source: C:\Windows\SysWOW64\rundll32.exe	Automated click: OK
Source: C:\Windows\SysWOW64\rundll32.exe	Automated click: OK
Source: C:\Windows\SysWOW64\rundll32.exe	Automated click: OK
Source: C:\Windows\SysWOW64\rundll32.exe	Automated click: OK
Source: C:\Windows\SysWOW64\rundll32.exe	Automated click: OK
Source: C:\Windows\SysWOW64\rundll32.exe	Automated click: OK

Source: Window Recorder

Window detected: More than 3 window changes detected

Source: SecuriteInfo.com.suspected.of.Malware-Cryptor.FSP.gen.24990.4905.dll

Static PE information: More than 705 > 100 exports found

Source: SecuriteInfo.com.suspected.of.Malware-Cryptor.FSP.gen.24990.4905.dll	Static PE information: data directory type: IMAGE_DIRECTORY_ENTRY_IMPORT
Source: SecuriteInfo.com.suspected.of.Malware-Cryptor.FSP.gen.24990.4905.dll	Static PE information: data directory type: IMAGE_DIRECTORY_ENTRY_RESOURCE
Source: SecuriteInfo.com.suspected.of.Malware-Cryptor.FSP.gen.24990.4905.dll	Static PE information: data directory type: IMAGE_DIRECTORY_ENTRY_BASERELOC
Source: SecuriteInfo.com.suspected.of.Malware-Cryptor.FSP.gen.24990.4905.dll	Static PE information: data directory type: IMAGE_DIRECTORY_ENTRY_DEBUG
Source: SecuriteInfo.com.suspected.of.Malware-Cryptor.FSP.gen.24990.4905.dll	Static PE information: data directory type: IMAGE_DIRECTORY_ENTRY_LOAD_CONFIG
Source: SecuriteInfo.com.suspected.of.Malware-Cryptor.FSP.gen.24990.4905.dll	Static PE information: data directory type: IMAGE_DIRECTORY_ENTRY_IAT

Source: SecuriteInfo.com.suspected.of.Malware-Cryptor.FSP.gen.24990.4905.dll

Static PE information: DYNAMIC_BASE, NX_COMPAT

Source: SecuriteInfo.com.suspected.of.Malware-Cryptor.FSP.gen.24990.4905.dll

Static PE information: data directory type: IMAGE_DIRECTORY_ENTRY_DEBUG

Source:	Binary string: C:\Develop\C\Game\SteamApi\Release\steam_api.pdb\5 source: SecuriteInfo.com.suspected.of.Malware-Cryptor.FSP.gen.24990.4905.dll
Source:	Binary string: C:\Develop\C\Game\SteamApi\Release\steam_api.pdb source: SecuriteInfo.com.suspected.of.Malware-Cryptor.FSP.gen.24990.4905.dll

Source: SecuriteInfo.com.suspected.of.Malware-Cryptor.FSP.gen.24990.4905.dll	Static PE information: Data directory: IMAGE_DIRECTORY_ENTRY_IMPORT is in: .rdata
Source: SecuriteInfo.com.suspected.of.Malware-Cryptor.FSP.gen.24990.4905.dll	Static PE information: Data directory: IMAGE_DIRECTORY_ENTRY_RESOURCE is in: .rsrc
Source: SecuriteInfo.com.suspected.of.Malware-Cryptor.FSP.gen.24990.4905.dll	Static PE information: Data directory: IMAGE_DIRECTORY_ENTRY_BASERELOC is in: .reloc
Source: SecuriteInfo.com.suspected.of.Malware-Cryptor.FSP.gen.24990.4905.dll	Static PE information: Data directory: IMAGE_DIRECTORY_ENTRY_LOAD_CONFIG is in: .rdata
Source: SecuriteInfo.com.suspected.of.Malware-Cryptor.FSP.gen.24990.4905.dll	Static PE information: Data directory: IMAGE_DIRECTORY_ENTRY_IAT is in: .rdata

Source: C:\Windows\SysWOW64\rundll32.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\rundll32.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\rundll32.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\rundll32.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior

Source: all processes

Thread injection, dropped files, key value created, disk infection and DNS query: no activity detected

Source: C:\Windows\System32\conhost.exe

Last function: Thread delayed

Source: C:\Windows\System32\loaddll32.exe

Process queried: DebugPort

Jump to behavior

Source: all processes

Thread injection, dropped files, key value created, disk infection and DNS query: no activity detected

Source: C:\Windows\SysWOW64\cmd.exe

Process created: C:\Windows\SysWOW64\rundll32.exe rundll32.exe "C:\Users\user\Desktop\SecuriteInfo.com.suspected.of.Malware-Cryptor.FSP.gen.24990.4905.dll",#1

Jump to behavior

Mitre Att&ck Matrix

Reconnaissance	Resource Development	Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Command and Control	Exfiltration	Impact
Gather Victim Identity Information	Acquire Infrastructure	Valid Accounts	Windows Management Instrumentation	1 DLL Side-Loading	11 Process Injection	1 Virtualization/Sandbox Evasion	OS Credential Dumping	1 Security Software Discovery	Remote Services	Data from Local System	Data Obfuscation	Exfiltration Over Other Network Medium	Abuse Accessibility Features
Credentials	Domains	Default Accounts	Scheduled Task/Job	Boot or Logon Initialization Scripts	1 DLL Side-Loading	1 Rundll32	LSASS Memory	1 Virtualization/Sandbox Evasion	Remote Desktop Protocol	Data from Removable Media	Junk Data	Exfiltration Over Bluetooth	Network Denial of Service
Email Addresses	DNS Server	Domain Accounts	At	Logon Script (Windows)	Logon Script (Windows)	11 Process Injection	Security Account Manager	1 System Information Discovery	SMB/Windows Admin Shares	Data from Network Shared Drive	Steganography	Automated Exfiltration	Data Encrypted for Impact
Employee Names	Virtual Private Server	Local Accounts	Cron	Login Hook	Login Hook	1 DLL Side-Loading	NTDS	System Network Configuration Discovery	Distributed Component Object Model	Input Capture	Protocol Impersonation	Traffic Duplication	Data Destruction

Behavior Graph

Hide Legend

Legend:

Process
Signature
Created File
DNS/IP Info
Is Dropped
Is Windows Process
Number of created Registry Values
Number of created Files
Visual Basic
Delphi
Java
.Net C# or VB.NET
C, C++ or other language
Is malicious
Internet

Source	Detection	Scanner	Label	Link
SecuriteInfo.com.suspected.of.Malware-Cryptor.FSP.gen.24990.4905.dll	8%	ReversingLabs
SecuriteInfo.com.suspected.of.Malware-Cryptor.FSP.gen.24990.4905.dll	10%	Virustotal		Browse

Joe Sandbox version:	40.0.0 Tourmaline
Analysis ID:	1389009
Start date and time:	2024-02-08 12:38:11 +01:00
Joe Sandbox product:	CloudBasic
Overall analysis duration:	0h 4m 4s
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	default.jbs
Analysis system description:	Windows 10 x64 22H2 with Office Professional Plus 2019, Chrome 117, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01
Number of analysed new started processes analysed:	12
Number of new started drivers analysed:	0
Number of existing processes analysed:	0
Number of existing drivers analysed:	0
Number of injected processes analysed:	0
Technologies:	HCA enabled EGA enabled AMSI enabled
Analysis Mode:	default
Analysis stop reason:	Timeout
Sample name:	SecuriteInfo.com.suspected.of.Malware-Cryptor.FSP.gen.24990.4905.dll
Detection:	MAL
Classification:	mal48.winDLL@12/0@0/0
EGA Information:	Failed
HCA Information:	Successful, ratio: 100% Number of executed functions: 0 Number of non-executed functions: 0
Cookbook Comments:	Found application associated with file extension: .dll

Warnings

Exclude process from analysis (whitelisted): dllhost.exe, WMIADAP.exe, SIHClient.exe
Excluded domains from analysis (whitelisted): client.wns.windows.com, ocsp.digicert.com, slscr.update.microsoft.com, ctldl.windowsupdate.com, fe3cr.delivery.mp.microsoft.com
Not all processes where analyzed, report is missing behavior information

File type:	PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
Entropy (8bit):	6.519854655639855
TrID:	Win32 Dynamic Link Library (generic) (1002004/3) 99.60% Generic Win/DOS Executable (2004/3) 0.20% DOS Executable Generic (2002/1) 0.20% Autodesk FLIC Image File (extensions: flc, fli, cel) (7/3) 0.00%
File name:	SecuriteInfo.com.suspected.of.Malware-Cryptor.FSP.gen.24990.4905.dll
File size:	380'928 bytes
MD5:	896034e0a60043f71a444ec13f646f42
SHA1:	83256ab66adec995013a9f0d51e958f1993bdd2b
SHA256:	9c7a944bec345060fe3a691d4f2ed3bfcd2fced69324c375939526ea77703107
SHA512:	2c064d2b59554a940490f97508f5837e3eff5b0a65b350b16df6b9fe7350598a5f2276b41f92f1f192b7624e57d05dda54f7b695710c01bb91e2d044b3221b8c
SSDEEP:	6144:u+jvWeQjd6tsoPBOtAR3nqcBhc6uoSC9JF:u+CP6pZOtAR3jHc6TSC9X
TLSH:	A1843A30628151F2D86ED13C64A15B4BB398A1973BE19DDF7F200CBA8E935D31D362DA
File Content Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.........op...#...#...#<..#...#.e.#...#.e.#...#.e.#...#...#...#...#...#...#...#.e.#...#.e.#...#.e.#...#Rich...#........PE..L......U...

File Icon


Icon Hash:	7ae282899bbab082

Static PE Info

General

Entrypoint:	0x1001e5f8
Entrypoint Section:	.text
Digitally signed:	false
Imagebase:	0x10000000
Subsystem:	windows gui
Image File Characteristics:	EXECUTABLE_IMAGE, 32BIT_MACHINE, DLL
DLL Characteristics:	DYNAMIC_BASE, NX_COMPAT
Time Stamp:	0x5512C488 [Wed Mar 25 14:22:00 2015 UTC]
TLS Callbacks:
CLR (.Net) Version:
OS Version Major:	5
OS Version Minor:	1
File Version Major:	5
File Version Minor:	1
Subsystem Version Major:	5
Subsystem Version Minor:	1
Import Hash:	0320d96faff91aa1614dcfd9a99640ce

Entrypoint Preview

Instruction
mov edi, edi
push ebp
mov ebp, esp
cmp dword ptr [ebp+0Ch], 01h
jne 00007FDAF090EC97h
call 00007FDAF0912DD6h
push dword ptr [ebp+08h]
mov ecx, dword ptr [ebp+10h]
mov edx, dword ptr [ebp+0Ch]
call 00007FDAF090EB81h
pop ecx
pop ebp
retn 000Ch
int3
int3
int3
int3
int3
push ebp
mov ebp, esp
push edi
push esi
mov esi, dword ptr [ebp+0Ch]
mov ecx, dword ptr [ebp+10h]
mov edi, dword ptr [ebp+08h]
mov eax, ecx
mov edx, ecx
add eax, esi
cmp edi, esi
jbe 00007FDAF090EC9Ah
cmp edi, eax
jc 00007FDAF090EE36h
cmp ecx, 00000080h
jc 00007FDAF090ECAEh
cmp dword ptr [10058C54h], 00000000h
je 00007FDAF090ECA5h
push edi
push esi
and edi, 0Fh
and esi, 0Fh
cmp edi, esi
pop esi
pop edi
jne 00007FDAF090EC97h
jmp 00007FDAF090F440h
test edi, 00000003h
jne 00007FDAF090ECA6h
shr ecx, 02h
and edx, 03h
cmp ecx, 08h
jc 00007FDAF090ECBBh
rep movsd
jmp dword ptr [1001E790h+edx*4]
mov eax, edi
mov edx, 00000003h
sub ecx, 04h
jc 00007FDAF090EC9Eh
and eax, 03h
add ecx, eax
jmp dword ptr [1001E6A4h+eax*4]
jmp dword ptr [1001E7A0h+ecx*4]
nop
jmp dword ptr [1001E724h+ecx*4]
nop
mov ah, E6h
add dword ptr [eax], edx
loopne 00007FDAF090EC78h
add dword ptr [eax], edx
add al, E7h
add dword ptr [eax], edx
and edx, ecx
mov al, byte ptr [esi]
mov byte ptr [edi], al
mov al, byte ptr [esi+01h]
mov byte ptr [edi+01h], al

Rich Headers

Programming Language:

[ASM] VS2010 SP1 build 40219
[ C ] VS2010 SP1 build 40219
[C++] VS2010 SP1 build 40219
[ C ] VS2013 build 21005
[IMP] VS2008 SP1 build 30729
[EXP] VS2010 SP1 build 40219
[LNK] VS2010 SP1 build 40219

Data Directories

Name	Virtual Address	Virtual Size	Is in Section
IMAGE_DIRECTORY_ENTRY_EXPORT	0x43160	0x8c95	.rdata
IMAGE_DIRECTORY_ENTRY_IMPORT	0x4289c	0x64	.rdata
IMAGE_DIRECTORY_ENTRY_RESOURCE	0x59000	0x1b4	.rsrc
IMAGE_DIRECTORY_ENTRY_EXCEPTION	0x0	0x0
IMAGE_DIRECTORY_ENTRY_SECURITY	0x0	0x0
IMAGE_DIRECTORY_ENTRY_BASERELOC	0x5a000	0x6450	.reloc
IMAGE_DIRECTORY_ENTRY_DEBUG	0x311f0	0x1c	.rdata
IMAGE_DIRECTORY_ENTRY_COPYRIGHT	0x0	0x0
IMAGE_DIRECTORY_ENTRY_GLOBALPTR	0x0	0x0
IMAGE_DIRECTORY_ENTRY_TLS	0x0	0x0
IMAGE_DIRECTORY_ENTRY_LOAD_CONFIG	0x3f0e0	0x40	.rdata
IMAGE_DIRECTORY_ENTRY_BOUND_IMPORT	0x0	0x0
IMAGE_DIRECTORY_ENTRY_IAT	0x31000	0x184	.rdata
IMAGE_DIRECTORY_ENTRY_DELAY_IMPORT	0x0	0x0
IMAGE_DIRECTORY_ENTRY_COM_DESCRIPTOR	0x0	0x0
IMAGE_DIRECTORY_ENTRY_RESERVED	0x0	0x0

Sections

Name	Virtual Address	Virtual Size	Raw Size	MD5	Xored PE	ZLIB Complexity	File Type	Entropy	Characteristics
.text	0x1000	0x2fdb7	0x2fe00	232d532594f55c5f580e58737cc56e93	False	0.42475114229765015	data	6.546348233374255	IMAGE_SCN_CNT_CODE, IMAGE_SCN_MEM_EXECUTE, IMAGE_SCN_MEM_READ
.rdata	0x31000	0x1adf5	0x1ae00	e199ddeaec5a886894057c41dedb7cd1	False	0.25712209302325584	data	5.490862878407844	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_READ
.data	0x4c000	0xcc5c	0x9e00	fa01d179a6faf89f91183963ca020f29	False	0.29885284810126583	data	4.891720331729717	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_READ, IMAGE_SCN_MEM_WRITE
.rsrc	0x59000	0x1b4	0x200	87bb4211bcf69c0cbec921471b5aba1c	False	0.4921875	data	5.11967362858367	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_READ
.reloc	0x5a000	0x7e9c	0x8000	657c5f1441e3d550901bda721a96852c	False	0.46221923828125	data	5.855266318110781	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_DISCARDABLE, IMAGE_SCN_MEM_READ

Resources

Name	RVA	Size	Type	Language	Country	ZLIB Complexity
RT_MANIFEST	0x59058	0x15a	ASCII text, with CRLF line terminators	English	United States	0.5491329479768786

Imports

DLL	Import
WS2_32.dll	WSASetLastError
KERNEL32.dll	UnhandledExceptionFilter, WriteConsoleW, InitializeCriticalSection, EnterCriticalSection, LeaveCriticalSection, DeleteCriticalSection, CreateFileA, ReadFile, CloseHandle, SetFilePointer, GetModuleFileNameA, DeleteFileA, GetTickCount, GetModuleHandleA, VirtualProtect, WideCharToMultiByte, CreateFileW, GetModuleFileNameW, GetFileAttributesW, GetProcAddress, VirtualAlloc, VirtualFree, FlushInstructionCache, GetCurrentProcess, LoadLibraryA, FreeLibrary, GetPrivateProfileStructA, WritePrivateProfileStructA, GetPrivateProfileStringA, SetErrorMode, GetFileAttributesA, CreateDirectoryA, FindFirstFileA, FindClose, GetCurrentDirectoryA, MoveFileA, FindNextFileA, WriteFile, GetFileSize, GetFileTime, GetDiskFreeSpaceExA, SetStdHandle, EncodePointer, DecodePointer, GetSystemTimeAsFileTime, GetCurrentThreadId, GetCommandLineA, RaiseException, TerminateProcess, FlushFileBuffers, SetUnhandledExceptionFilter, IsDebuggerPresent, GetLastError, HeapFree, HeapAlloc, IsProcessorFeaturePresent, Sleep, HeapSize, GetModuleHandleW, ExitProcess, GetCPInfo, InterlockedIncrement, InterlockedDecrement, GetACP, GetOEMCP, IsValidCodePage, TlsAlloc, TlsGetValue, TlsSetValue, TlsFree, SetLastError, GetStdHandle, SetHandleCount, InitializeCriticalSectionAndSpinCount, GetFileType, GetStartupInfoW, FreeEnvironmentStringsW, GetEnvironmentStringsW, HeapCreate, HeapDestroy, QueryPerformanceCounter, GetCurrentProcessId, RtlUnwind, HeapReAlloc, LoadLibraryW, GetConsoleCP, GetConsoleMode, LCMapStringW, MultiByteToWideChar, GetStringTypeW
USER32.dll	MessageBoxA
SHELL32.dll	SHGetSpecialFolderPathA

Exports

Name	Ordinal	Address
GetHSteamPipe	1	0x100031a0
GetHSteamUser	2	0x100031a0
SteamAPI_GetHSteamPipe	3	0x100031a0
SteamAPI_GetHSteamUser	4	0x100031a0
SteamAPI_GetSteamInstallPath	5	0x1000fd60
SteamAPI_ISteamAppList_GetAppBuildId	6	0x1000fee0
SteamAPI_ISteamAppList_GetAppInstallDir	7	0x1000ff20
SteamAPI_ISteamAppList_GetAppName	8	0x1000ff60
SteamAPI_ISteamAppList_GetInstalledApps	9	0x1000ffa0
SteamAPI_ISteamAppList_GetNumInstalledApps	10	0x1000ffe0
SteamAPI_ISteamApps_BGetDLCDataByIndex	11	0x10010010
SteamAPI_ISteamApps_BIsAppInstalled	12	0x10010060
SteamAPI_ISteamApps_BIsCybercafe	13	0x100100a0
SteamAPI_ISteamApps_BIsDlcInstalled	14	0x100100d0
SteamAPI_ISteamApps_BIsLowViolence	15	0x10010110
SteamAPI_ISteamApps_BIsSubscribed	16	0x10010140
SteamAPI_ISteamApps_BIsSubscribedApp	17	0x10010170
SteamAPI_ISteamApps_BIsSubscribedFromFreeWeekend	18	0x100101b0
SteamAPI_ISteamApps_BIsVACBanned	19	0x100101e0
SteamAPI_ISteamApps_GetAppBuildId	20	0x10010210
SteamAPI_ISteamApps_GetAppInstallDir	21	0x10010250
SteamAPI_ISteamApps_GetAppOwner	22	0x10010290
SteamAPI_ISteamApps_GetAvailableGameLanguages	23	0x100102f0
SteamAPI_ISteamApps_GetCurrentBetaName	24	0x10010320
SteamAPI_ISteamApps_GetCurrentGameLanguage	25	0x10010360
SteamAPI_ISteamApps_GetDLCCount	26	0x10010390
SteamAPI_ISteamApps_GetDlcDownloadProgress	27	0x100103c0
SteamAPI_ISteamApps_GetEarliestPurchaseUnixTime	28	0x10010400
SteamAPI_ISteamApps_GetInstalledDepots	29	0x10010440
SteamAPI_ISteamApps_GetLaunchQueryParam	30	0x10010480
SteamAPI_ISteamApps_InstallDLC	31	0x100104c0
SteamAPI_ISteamApps_MarkContentCorrupt	32	0x100104f0
SteamAPI_ISteamApps_RequestAppProofOfPurchaseKey	33	0x10010530
SteamAPI_ISteamApps_UninstallDLC	34	0x10010560
SteamAPI_ISteamClient_BReleaseSteamPipe	35	0x10010590
SteamAPI_ISteamClient_BShutdownIfAllPipesClosed	36	0x100105d0
SteamAPI_ISteamClient_ConnectToGlobalUser	37	0x10010600
SteamAPI_ISteamClient_CreateLocalUser	38	0x10010640
SteamAPI_ISteamClient_CreateSteamPipe	39	0x10010680
SteamAPI_ISteamClient_GetIPCCallCount	40	0x100106b0
SteamAPI_ISteamClient_GetISteamAppList	41	0x100106e0
SteamAPI_ISteamClient_GetISteamApps	42	0x10010720
SteamAPI_ISteamClient_GetISteamController	43	0x10010760
SteamAPI_ISteamClient_GetISteamFriends	44	0x100107a0
SteamAPI_ISteamClient_GetISteamGameServer	45	0x100107e0
SteamAPI_ISteamClient_GetISteamGameServerStats	46	0x10010820
SteamAPI_ISteamClient_GetISteamGenericInterface	47	0x10010860
SteamAPI_ISteamClient_GetISteamHTMLSurface	48	0x100108a0
SteamAPI_ISteamClient_GetISteamHTTP	49	0x100108e0
SteamAPI_ISteamClient_GetISteamInventory	50	0x10010920
SteamAPI_ISteamClient_GetISteamMatchmaking	51	0x10010960
SteamAPI_ISteamClient_GetISteamMatchmakingServers	52	0x100109a0
SteamAPI_ISteamClient_GetISteamMusic	53	0x100109e0
SteamAPI_ISteamClient_GetISteamMusicRemote	54	0x10010a20
SteamAPI_ISteamClient_GetISteamNetworking	55	0x10010a60
SteamAPI_ISteamClient_GetISteamRemoteStorage	56	0x10010aa0
SteamAPI_ISteamClient_GetISteamScreenshots	57	0x10010ae0
SteamAPI_ISteamClient_GetISteamUGC	58	0x10010b20
SteamAPI_ISteamClient_GetISteamUnifiedMessages	59	0x10010b60
SteamAPI_ISteamClient_GetISteamUser	60	0x10010ba0
SteamAPI_ISteamClient_GetISteamUserStats	61	0x10010be0
SteamAPI_ISteamClient_GetISteamUtils	62	0x10010c20
SteamAPI_ISteamClient_GetISteamVideo	63	0x10010c60
SteamAPI_ISteamClient_ReleaseUser	64	0x10010ca0
SteamAPI_ISteamClient_Remove_SteamAPI_CPostAPIResultInProcess	65	0x10010ce0
SteamAPI_ISteamClient_RunFrame	66	0x10010d20
SteamAPI_ISteamClient_SetLocalIPBinding	67	0x10010d50
SteamAPI_ISteamClient_SetWarningMessageHook	68	0x10010d90
SteamAPI_ISteamClient_Set_SteamAPI_CCheckCallbackRegisteredInProcess	69	0x10010dc0
SteamAPI_ISteamClient_Set_SteamAPI_CPostAPIResultInProcess	70	0x10010e00
SteamAPI_ISteamController_GetControllerState	71	0x10010e40
SteamAPI_ISteamController_Init	72	0x10010e80
SteamAPI_ISteamController_RunFrame	73	0x10010ec0
SteamAPI_ISteamController_SetOverrideMode	74	0x10010ef0
SteamAPI_ISteamController_Shutdown	75	0x10010f20
SteamAPI_ISteamController_TriggerHapticPulse	76	0x10010f50
SteamAPI_ISteamFriends_ActivateGameOverlay	77	0x10010f90
SteamAPI_ISteamFriends_ActivateGameOverlayInviteDialog	78	0x10010fc0
SteamAPI_ISteamFriends_ActivateGameOverlayToStore	79	0x10011000
SteamAPI_ISteamFriends_ActivateGameOverlayToUser	80	0x10011040
SteamAPI_ISteamFriends_ActivateGameOverlayToWebPage	81	0x10011080
SteamAPI_ISteamFriends_ClearRichPresence	82	0x100110b0
SteamAPI_ISteamFriends_CloseClanChatWindowInSteam	83	0x100110e0
SteamAPI_ISteamFriends_DownloadClanActivityCounts	84	0x10011120
SteamAPI_ISteamFriends_EnumerateFollowingList	85	0x10011160
SteamAPI_ISteamFriends_GetChatMemberByIndex	86	0x100111a0
SteamAPI_ISteamFriends_GetClanActivityCounts	87	0x10011200
SteamAPI_ISteamFriends_GetClanByIndex	88	0x10011250
SteamAPI_ISteamFriends_GetClanChatMemberCount	89	0x100112a0
SteamAPI_ISteamFriends_GetClanChatMessage	90	0x100112e0
SteamAPI_ISteamFriends_GetClanCount	91	0x10011340
SteamAPI_ISteamFriends_GetClanName	92	0x10011370
SteamAPI_ISteamFriends_GetClanOfficerByIndex	93	0x100113b0
SteamAPI_ISteamFriends_GetClanOfficerCount	94	0x10011410
SteamAPI_ISteamFriends_GetClanOwner	95	0x10011450
SteamAPI_ISteamFriends_GetClanTag	96	0x100114a0
SteamAPI_ISteamFriends_GetCoplayFriend	97	0x100114e0
SteamAPI_ISteamFriends_GetCoplayFriendCount	98	0x10011530
SteamAPI_ISteamFriends_GetFollowerCount	99	0x10011560
SteamAPI_ISteamFriends_GetFriendByIndex	100	0x100115a0
SteamAPI_ISteamFriends_GetFriendCoplayGame	101	0x100115f0
SteamAPI_ISteamFriends_GetFriendCoplayTime	102	0x10011630
SteamAPI_ISteamFriends_GetFriendCount	103	0x10011670
SteamAPI_ISteamFriends_GetFriendCountFromSource	104	0x100116b0
SteamAPI_ISteamFriends_GetFriendFromSourceByIndex	105	0x100116f0
SteamAPI_ISteamFriends_GetFriendGamePlayed	106	0x10011750
SteamAPI_ISteamFriends_GetFriendMessage	107	0x10011790
SteamAPI_ISteamFriends_GetFriendPersonaName	108	0x100117e0
SteamAPI_ISteamFriends_GetFriendPersonaNameHistory	109	0x10011820
SteamAPI_ISteamFriends_GetFriendPersonaState	110	0x10011860
SteamAPI_ISteamFriends_GetFriendRelationship	111	0x100118a0
SteamAPI_ISteamFriends_GetFriendRichPresence	112	0x100118e0
SteamAPI_ISteamFriends_GetFriendRichPresenceKeyByIndex	113	0x10011920
SteamAPI_ISteamFriends_GetFriendRichPresenceKeyCount	114	0x10011960
SteamAPI_ISteamFriends_GetFriendSteamLevel	115	0x100119a0
SteamAPI_ISteamFriends_GetFriendsGroupCount	116	0x100119e0
SteamAPI_ISteamFriends_GetFriendsGroupIDByIndex	117	0x10011a10
SteamAPI_ISteamFriends_GetFriendsGroupMembersCount	118	0x10011a50
SteamAPI_ISteamFriends_GetFriendsGroupMembersList	119	0x10011a90
SteamAPI_ISteamFriends_GetFriendsGroupName	120	0x10011ad0
SteamAPI_ISteamFriends_GetLargeFriendAvatar	121	0x10011b10
SteamAPI_ISteamFriends_GetMediumFriendAvatar	122	0x10011b50
SteamAPI_ISteamFriends_GetPersonaName	123	0x10011b90
SteamAPI_ISteamFriends_GetPersonaState	124	0x10011bc0
SteamAPI_ISteamFriends_GetPlayerNickname	125	0x10011bf0
SteamAPI_ISteamFriends_GetSmallFriendAvatar	126	0x10011c30
SteamAPI_ISteamFriends_GetUserRestrictions	127	0x10011c70
SteamAPI_ISteamFriends_HasFriend	128	0x10011ca0
SteamAPI_ISteamFriends_InviteUserToGame	129	0x10011ce0
SteamAPI_ISteamFriends_IsClanChatAdmin	130	0x10011d20
SteamAPI_ISteamFriends_IsClanChatWindowOpenInSteam	131	0x10011d70
SteamAPI_ISteamFriends_IsFollowing	132	0x10011db0
SteamAPI_ISteamFriends_IsUserInSource	133	0x10011df0
SteamAPI_ISteamFriends_JoinClanChatRoom	134	0x10011e30
SteamAPI_ISteamFriends_LeaveClanChatRoom	135	0x10011e70
SteamAPI_ISteamFriends_OpenClanChatWindowInSteam	136	0x10011eb0
SteamAPI_ISteamFriends_ReplyToFriendMessage	137	0x10011ef0
SteamAPI_ISteamFriends_RequestClanOfficerList	138	0x10011f30
SteamAPI_ISteamFriends_RequestFriendRichPresence	139	0x10011f70
SteamAPI_ISteamFriends_RequestUserInformation	140	0x10011fb0
SteamAPI_ISteamFriends_SendClanChatMessage	141	0x10011ff0
SteamAPI_ISteamFriends_SetInGameVoiceSpeaking	142	0x10012030
SteamAPI_ISteamFriends_SetListenForFriendsMessages	143	0x10012070
SteamAPI_ISteamFriends_SetPersonaName	144	0x100120b0
SteamAPI_ISteamFriends_SetPlayedWith	145	0x100120f0
SteamAPI_ISteamFriends_SetRichPresence	146	0x10012130
SteamAPI_ISteamGameServerStats_ClearUserAchievement	147	0x10012170
SteamAPI_ISteamGameServerStats_GetUserAchievement	148	0x100121b0
SteamAPI_ISteamGameServerStats_GetUserStat	149	0x100121f0
SteamAPI_ISteamGameServerStats_GetUserStat0	150	0x10012230
SteamAPI_ISteamGameServerStats_RequestUserStats	151	0x10012270
SteamAPI_ISteamGameServerStats_SetUserAchievement	152	0x100122b0
SteamAPI_ISteamGameServerStats_SetUserStat	153	0x100122f0
SteamAPI_ISteamGameServerStats_SetUserStat0	154	0x10012340
SteamAPI_ISteamGameServerStats_StoreUserStats	155	0x10012380
SteamAPI_ISteamGameServerStats_UpdateUserAvgRateStat	156	0x100123c0
SteamAPI_ISteamGameServer_AssociateWithClan	157	0x10012410
SteamAPI_ISteamGameServer_BLoggedOn	158	0x10012450
SteamAPI_ISteamGameServer_BSecure	159	0x10012480
SteamAPI_ISteamGameServer_BUpdateUserData	160	0x100124b0
SteamAPI_ISteamGameServer_BeginAuthSession	161	0x100124f0
SteamAPI_ISteamGameServer_CancelAuthTicket	162	0x10012530
SteamAPI_ISteamGameServer_ClearAllKeyValues	163	0x10012560
SteamAPI_ISteamGameServer_ComputeNewPlayerCompatibility	164	0x10012590
SteamAPI_ISteamGameServer_CreateUnauthenticatedUserConnection	165	0x100125d0
SteamAPI_ISteamGameServer_EnableHeartbeats	166	0x10012620
SteamAPI_ISteamGameServer_EndAuthSession	167	0x10012660
SteamAPI_ISteamGameServer_ForceHeartbeat	168	0x100126a0
SteamAPI_ISteamGameServer_GetAuthSessionTicket	169	0x100126d0
SteamAPI_ISteamGameServer_GetGameplayStats	170	0x10012710
SteamAPI_ISteamGameServer_GetNextOutgoingPacket	171	0x10012740
SteamAPI_ISteamGameServer_GetPublicIP	172	0x10012790
SteamAPI_ISteamGameServer_GetServerReputation	173	0x100127c0
SteamAPI_ISteamGameServer_GetSteamID	174	0x100127f0
SteamAPI_ISteamGameServer_HandleIncomingPacket	175	0x10012840
SteamAPI_ISteamGameServer_InitGameServer	176	0x10012890
SteamAPI_ISteamGameServer_LogOff	177	0x100128e0
SteamAPI_ISteamGameServer_LogOn	178	0x10012910
SteamAPI_ISteamGameServer_LogOnAnonymous	179	0x10012940
SteamAPI_ISteamGameServer_RequestUserGroupStatus	180	0x10012970
SteamAPI_ISteamGameServer_SendUserConnectAndAuthenticate	181	0x100129c0
SteamAPI_ISteamGameServer_SendUserDisconnect	182	0x10012a00
SteamAPI_ISteamGameServer_SetBotPlayerCount	183	0x10012a40
SteamAPI_ISteamGameServer_SetDedicatedServer	184	0x10012a70
SteamAPI_ISteamGameServer_SetGameData	185	0x10012aa0
SteamAPI_ISteamGameServer_SetGameDescription	186	0x10012ad0
SteamAPI_ISteamGameServer_SetGameTags	187	0x10012b00
SteamAPI_ISteamGameServer_SetHeartbeatInterval	188	0x10012b30
SteamAPI_ISteamGameServer_SetKeyValue	189	0x10012b70
SteamAPI_ISteamGameServer_SetMapName	190	0x10012bb0
SteamAPI_ISteamGameServer_SetMaxPlayerCount	191	0x10012be0
SteamAPI_ISteamGameServer_SetModDir	192	0x10012c10
SteamAPI_ISteamGameServer_SetPasswordProtected	193	0x10012c40
SteamAPI_ISteamGameServer_SetProduct	194	0x10012c70
SteamAPI_ISteamGameServer_SetRegion	195	0x10012ca0
SteamAPI_ISteamGameServer_SetServerName	196	0x10012cd0
SteamAPI_ISteamGameServer_SetSpectatorPort	197	0x10012d00
SteamAPI_ISteamGameServer_SetSpectatorServerName	198	0x10012d30
SteamAPI_ISteamGameServer_UserHasLicenseForApp	199	0x10012d60
SteamAPI_ISteamGameServer_WasRestartRequested	200	0x10012da0
SteamAPI_ISteamHTMLSurface_AddHeader	201	0x10012dd0
SteamAPI_ISteamHTMLSurface_AllowStartRequest	202	0x10012e10
SteamAPI_ISteamHTMLSurface_CopyToClipboard	203	0x10012e50
SteamAPI_ISteamHTMLSurface_CreateBrowser	204	0x10012e80
SteamAPI_ISteamHTMLSurface_DestructISteamHTMLSurface	205	0x10012ec0
SteamAPI_ISteamHTMLSurface_ExecuteJavascript	206	0x10012ef0
SteamAPI_ISteamHTMLSurface_FileLoadDialogResponse	207	0x10012f30
SteamAPI_ISteamHTMLSurface_Find	208	0x10012f70
SteamAPI_ISteamHTMLSurface_GetLinkAtPosition	209	0x10012fb0
SteamAPI_ISteamHTMLSurface_GoBack	210	0x10012ff0
SteamAPI_ISteamHTMLSurface_GoForward	211	0x10013020
SteamAPI_ISteamHTMLSurface_Init	212	0x10013050
SteamAPI_ISteamHTMLSurface_JSDialogResponse	213	0x10013080
SteamAPI_ISteamHTMLSurface_KeyChar	214	0x100130c0
SteamAPI_ISteamHTMLSurface_KeyDown	215	0x10013100
SteamAPI_ISteamHTMLSurface_KeyUp	216	0x10013140
SteamAPI_ISteamHTMLSurface_LoadURL	217	0x10013180
SteamAPI_ISteamHTMLSurface_MouseDoubleClick	218	0x100131c0
SteamAPI_ISteamHTMLSurface_MouseDown	219	0x10013200
SteamAPI_ISteamHTMLSurface_MouseMove	220	0x10013240
SteamAPI_ISteamHTMLSurface_MouseUp	221	0x10013280
SteamAPI_ISteamHTMLSurface_MouseWheel	222	0x100132c0
SteamAPI_ISteamHTMLSurface_PasteFromClipboard	223	0x10013300
SteamAPI_ISteamHTMLSurface_Reload	224	0x10013330
SteamAPI_ISteamHTMLSurface_RemoveBrowser	225	0x10013360
SteamAPI_ISteamHTMLSurface_SetCookie	226	0x10013390
SteamAPI_ISteamHTMLSurface_SetHorizontalScroll	227	0x100133e0
SteamAPI_ISteamHTMLSurface_SetKeyFocus	228	0x10013420
SteamAPI_ISteamHTMLSurface_SetPageScaleFactor	229	0x10013460
SteamAPI_ISteamHTMLSurface_SetSize	230	0x100134b0
SteamAPI_ISteamHTMLSurface_SetVerticalScroll	231	0x100134f0
SteamAPI_ISteamHTMLSurface_Shutdown	232	0x10013530
SteamAPI_ISteamHTMLSurface_StopFind	233	0x10013560
SteamAPI_ISteamHTMLSurface_StopLoad	234	0x10013590
SteamAPI_ISteamHTMLSurface_ViewSource	235	0x100135c0
SteamAPI_ISteamHTTP_CreateCookieContainer	236	0x100135f0
SteamAPI_ISteamHTTP_CreateHTTPRequest	237	0x10013630
SteamAPI_ISteamHTTP_DeferHTTPRequest	238	0x10013670
SteamAPI_ISteamHTTP_GetHTTPDownloadProgressPct	239	0x100136b0
SteamAPI_ISteamHTTP_GetHTTPRequestWasTimedOut	240	0x100136f0
SteamAPI_ISteamHTTP_GetHTTPResponseBodyData	241	0x10013730
SteamAPI_ISteamHTTP_GetHTTPResponseBodySize	242	0x10013770
SteamAPI_ISteamHTTP_GetHTTPResponseHeaderSize	243	0x100137b0
SteamAPI_ISteamHTTP_GetHTTPResponseHeaderValue	244	0x100137f0
SteamAPI_ISteamHTTP_GetHTTPStreamingResponseBodyData	245	0x10013830
SteamAPI_ISteamHTTP_PrioritizeHTTPRequest	246	0x10013870
SteamAPI_ISteamHTTP_ReleaseCookieContainer	247	0x100138b0
SteamAPI_ISteamHTTP_ReleaseHTTPRequest	248	0x100138e0
SteamAPI_ISteamHTTP_SendHTTPRequest	249	0x10013920
SteamAPI_ISteamHTTP_SendHTTPRequestAndStreamResponse	250	0x10013960
SteamAPI_ISteamHTTP_SetCookie	251	0x100139a0
SteamAPI_ISteamHTTP_SetHTTPRequestAbsoluteTimeoutMS	252	0x100139e0
SteamAPI_ISteamHTTP_SetHTTPRequestContextValue	253	0x10013a20
SteamAPI_ISteamHTTP_SetHTTPRequestCookieContainer	254	0x10013a60
SteamAPI_ISteamHTTP_SetHTTPRequestGetOrPostParameter	255	0x10013aa0
SteamAPI_ISteamHTTP_SetHTTPRequestHeaderValue	256	0x10013ae0
SteamAPI_ISteamHTTP_SetHTTPRequestNetworkActivityTimeout	257	0x10013b20
SteamAPI_ISteamHTTP_SetHTTPRequestRawPostBody	258	0x10013b60
SteamAPI_ISteamHTTP_SetHTTPRequestRequiresVerifiedCertificate	259	0x10013ba0
SteamAPI_ISteamHTTP_SetHTTPRequestUserAgentInfo	260	0x10013be0
SteamAPI_ISteamInventory_AddPromoItem	261	0x10013c20
SteamAPI_ISteamInventory_AddPromoItems	262	0x10013c60
SteamAPI_ISteamInventory_CheckResultSteamID	263	0x10013ca0
SteamAPI_ISteamInventory_ConsumeItem	264	0x10013ce0
SteamAPI_ISteamInventory_DeserializeResult	265	0x10013d20
SteamAPI_ISteamInventory_DestroyResult	266	0x10013d60
SteamAPI_ISteamInventory_ExchangeItems	267	0x10013d90
SteamAPI_ISteamInventory_GenerateItems	268	0x10013de0
SteamAPI_ISteamInventory_GetAllItems	269	0x10013e20
SteamAPI_ISteamInventory_GetItemDefinitionIDs	270	0x10013e60
SteamAPI_ISteamInventory_GetItemDefinitionProperty	271	0x10013ea0
SteamAPI_ISteamInventory_GetItemsByID	272	0x10013ee0
SteamAPI_ISteamInventory_GetResultItems	273	0x10013f20
SteamAPI_ISteamInventory_GetResultStatus	274	0x10013f60
SteamAPI_ISteamInventory_GetResultTimestamp	275	0x10013f90
SteamAPI_ISteamInventory_GrantPromoItems	276	0x10013fd0
SteamAPI_ISteamInventory_LoadItemDefinitions	277	0x10014010
SteamAPI_ISteamInventory_SendItemDropHeartbeat	278	0x10014040
SteamAPI_ISteamInventory_SerializeResult	279	0x10014070
SteamAPI_ISteamInventory_TradeItems	280	0x100140b0
SteamAPI_ISteamInventory_TransferItemQuantity	281	0x10014110
SteamAPI_ISteamInventory_TriggerItemDrop	282	0x10014160
SteamAPI_ISteamMatchmakingPingResponse_ServerFailedToRespond	283	0x100141a0
SteamAPI_ISteamMatchmakingPingResponse_ServerResponded	284	0x100141c0
SteamAPI_ISteamMatchmakingPlayersResponse_AddPlayerToList	285	0x100141d0
SteamAPI_ISteamMatchmakingPlayersResponse_PlayersFailedToRespond	286	0x100141a0
SteamAPI_ISteamMatchmakingPlayersResponse_PlayersRefreshComplete	287	0x10014200
SteamAPI_ISteamMatchmakingRulesResponse_RulesFailedToRespond	288	0x100141a0
SteamAPI_ISteamMatchmakingRulesResponse_RulesRefreshComplete	289	0x10014200
SteamAPI_ISteamMatchmakingRulesResponse_RulesResponded	290	0x10014220
SteamAPI_ISteamMatchmakingServerListResponse_RefreshComplete	291	0x10014240
SteamAPI_ISteamMatchmakingServerListResponse_ServerFailedToRespond	292	0x100191e0
SteamAPI_ISteamMatchmakingServerListResponse_ServerResponded	293	0x10014220
SteamAPI_ISteamMatchmakingServers_CancelQuery	294	0x10014260
SteamAPI_ISteamMatchmakingServers_CancelServerQuery	295	0x10014290
SteamAPI_ISteamMatchmakingServers_GetServerCount	296	0x100142c0
SteamAPI_ISteamMatchmakingServers_GetServerDetails	297	0x10014300
SteamAPI_ISteamMatchmakingServers_IsRefreshing	298	0x10014340
SteamAPI_ISteamMatchmakingServers_PingServer	299	0x10014380
SteamAPI_ISteamMatchmakingServers_PlayerDetails	300	0x100143c0
SteamAPI_ISteamMatchmakingServers_RefreshQuery	301	0x10014400
SteamAPI_ISteamMatchmakingServers_RefreshServer	302	0x10014430
SteamAPI_ISteamMatchmakingServers_ReleaseRequest	303	0x10014470
SteamAPI_ISteamMatchmakingServers_RequestFavoritesServerList	304	0x100144a0
SteamAPI_ISteamMatchmakingServers_RequestFriendsServerList	305	0x100144e0
SteamAPI_ISteamMatchmakingServers_RequestHistoryServerList	306	0x10014520
SteamAPI_ISteamMatchmakingServers_RequestInternetServerList	307	0x10014560
SteamAPI_ISteamMatchmakingServers_RequestLANServerList	308	0x100145a0
SteamAPI_ISteamMatchmakingServers_RequestSpectatorServerList	309	0x100145e0
SteamAPI_ISteamMatchmakingServers_ServerRules	310	0x10014620
SteamAPI_ISteamMatchmaking_AddFavoriteGame	311	0x10014660
SteamAPI_ISteamMatchmaking_AddRequestLobbyListCompatibleMembersFilter	312	0x100146b0
SteamAPI_ISteamMatchmaking_AddRequestLobbyListDistanceFilter	313	0x100146f0
SteamAPI_ISteamMatchmaking_AddRequestLobbyListFilterSlotsAvailable	314	0x10014720
SteamAPI_ISteamMatchmaking_AddRequestLobbyListNearValueFilter	315	0x10014750
SteamAPI_ISteamMatchmaking_AddRequestLobbyListNumericalFilter	316	0x10014790
SteamAPI_ISteamMatchmaking_AddRequestLobbyListResultCountFilter	317	0x100147d0
SteamAPI_ISteamMatchmaking_AddRequestLobbyListStringFilter	318	0x10014800
SteamAPI_ISteamMatchmaking_CreateLobby	319	0x10014840
SteamAPI_ISteamMatchmaking_DeleteLobbyData	320	0x10014880
SteamAPI_ISteamMatchmaking_GetFavoriteGame	321	0x100148c0
SteamAPI_ISteamMatchmaking_GetFavoriteGameCount	322	0x10014910
SteamAPI_ISteamMatchmaking_GetLobbyByIndex	323	0x10014940
SteamAPI_ISteamMatchmaking_GetLobbyChatEntry	324	0x10014990
SteamAPI_ISteamMatchmaking_GetLobbyData	325	0x100149e0
SteamAPI_ISteamMatchmaking_GetLobbyDataByIndex	326	0x10014a20
SteamAPI_ISteamMatchmaking_GetLobbyDataCount	327	0x10014a70
SteamAPI_ISteamMatchmaking_GetLobbyGameServer	328	0x10014ab0
SteamAPI_ISteamMatchmaking_GetLobbyMemberByIndex	329	0x10014b00
SteamAPI_ISteamMatchmaking_GetLobbyMemberData	330	0x10014b60
SteamAPI_ISteamMatchmaking_GetLobbyMemberLimit	331	0x10014bb0
SteamAPI_ISteamMatchmaking_GetLobbyOwner	332	0x10014bf0
SteamAPI_ISteamMatchmaking_GetNumLobbyMembers	333	0x10014c40
SteamAPI_ISteamMatchmaking_InviteUserToLobby	334	0x10014c80
SteamAPI_ISteamMatchmaking_JoinLobby	335	0x10014cc0
SteamAPI_ISteamMatchmaking_LeaveLobby	336	0x10014d00
SteamAPI_ISteamMatchmaking_RemoveFavoriteGame	337	0x10014d40
SteamAPI_ISteamMatchmaking_RequestLobbyData	338	0x10014d90
SteamAPI_ISteamMatchmaking_RequestLobbyList	339	0x10014dd0
SteamAPI_ISteamMatchmaking_SendLobbyChatMsg	340	0x10014e00
SteamAPI_ISteamMatchmaking_SetLinkedLobby	341	0x10014e40
SteamAPI_ISteamMatchmaking_SetLobbyData	342	0x10014e90
SteamAPI_ISteamMatchmaking_SetLobbyGameServer	343	0x10014ed0
SteamAPI_ISteamMatchmaking_SetLobbyJoinable	344	0x10014f20
SteamAPI_ISteamMatchmaking_SetLobbyMemberData	345	0x10014f60
SteamAPI_ISteamMatchmaking_SetLobbyMemberLimit	346	0x10014fa0
SteamAPI_ISteamMatchmaking_SetLobbyOwner	347	0x10014fe0
SteamAPI_ISteamMatchmaking_SetLobbyType	348	0x10015030
SteamAPI_ISteamMusicRemote_BActivationSuccess	349	0x10015070
SteamAPI_ISteamMusicRemote_BIsCurrentMusicRemote	350	0x100150b0
SteamAPI_ISteamMusicRemote_CurrentEntryDidChange	351	0x100150e0
SteamAPI_ISteamMusicRemote_CurrentEntryIsAvailable	352	0x10015110
SteamAPI_ISteamMusicRemote_CurrentEntryWillChange	353	0x10015150
SteamAPI_ISteamMusicRemote_DeregisterSteamMusicRemote	354	0x10015180
SteamAPI_ISteamMusicRemote_EnableLooped	355	0x100151b0
SteamAPI_ISteamMusicRemote_EnablePlayNext	356	0x100151f0
SteamAPI_ISteamMusicRemote_EnablePlayPrevious	357	0x10015230
SteamAPI_ISteamMusicRemote_EnablePlaylists	358	0x10015270
SteamAPI_ISteamMusicRemote_EnableQueue	359	0x100152b0
SteamAPI_ISteamMusicRemote_EnableShuffled	360	0x100152f0
SteamAPI_ISteamMusicRemote_PlaylistDidChange	361	0x10015330
SteamAPI_ISteamMusicRemote_PlaylistWillChange	362	0x10015360
SteamAPI_ISteamMusicRemote_QueueDidChange	363	0x10015390
SteamAPI_ISteamMusicRemote_QueueWillChange	364	0x100153c0
SteamAPI_ISteamMusicRemote_RegisterSteamMusicRemote	365	0x100153f0
SteamAPI_ISteamMusicRemote_ResetPlaylistEntries	366	0x10015420
SteamAPI_ISteamMusicRemote_ResetQueueEntries	367	0x10015450
SteamAPI_ISteamMusicRemote_SetCurrentPlaylistEntry	368	0x10015480
SteamAPI_ISteamMusicRemote_SetCurrentQueueEntry	369	0x100154c0
SteamAPI_ISteamMusicRemote_SetDisplayName	370	0x10015500
SteamAPI_ISteamMusicRemote_SetPNGIcon_64x64	371	0x10015540
SteamAPI_ISteamMusicRemote_SetPlaylistEntry	372	0x10015580
SteamAPI_ISteamMusicRemote_SetQueueEntry	373	0x100155c0
SteamAPI_ISteamMusicRemote_UpdateCurrentEntryCoverArt	374	0x10015600
SteamAPI_ISteamMusicRemote_UpdateCurrentEntryElapsedSeconds	375	0x10015640
SteamAPI_ISteamMusicRemote_UpdateCurrentEntryText	376	0x10015680
SteamAPI_ISteamMusicRemote_UpdateLooped	377	0x100156c0
SteamAPI_ISteamMusicRemote_UpdatePlaybackStatus	378	0x10015700
SteamAPI_ISteamMusicRemote_UpdateShuffled	379	0x10015740
SteamAPI_ISteamMusicRemote_UpdateVolume	380	0x10015780
SteamAPI_ISteamMusic_BIsEnabled	381	0x100157c0
SteamAPI_ISteamMusic_BIsPlaying	382	0x100157f0
SteamAPI_ISteamMusic_GetPlaybackStatus	383	0x10015820
SteamAPI_ISteamMusic_GetVolume	384	0x10015850
SteamAPI_ISteamMusic_Pause	385	0x10015880
SteamAPI_ISteamMusic_Play	386	0x100158b0
SteamAPI_ISteamMusic_PlayNext	387	0x100158e0
SteamAPI_ISteamMusic_PlayPrevious	388	0x10015910
SteamAPI_ISteamMusic_SetVolume	389	0x10015940
SteamAPI_ISteamNetworking_AcceptP2PSessionWithUser	390	0x10015980
SteamAPI_ISteamNetworking_AllowP2PPacketRelay	391	0x100159c0
SteamAPI_ISteamNetworking_CloseP2PChannelWithUser	392	0x10015a00
SteamAPI_ISteamNetworking_CloseP2PSessionWithUser	393	0x10015a40
SteamAPI_ISteamNetworking_CreateConnectionSocket	394	0x10015a80
SteamAPI_ISteamNetworking_CreateListenSocket	395	0x10015ac0
SteamAPI_ISteamNetworking_CreateP2PConnectionSocket	396	0x10015b00
SteamAPI_ISteamNetworking_DestroyListenSocket	397	0x10015b50
SteamAPI_ISteamNetworking_DestroySocket	398	0x10015b90
SteamAPI_ISteamNetworking_GetListenSocketInfo	399	0x10015bd0
SteamAPI_ISteamNetworking_GetMaxPacketSize	400	0x10015c10
SteamAPI_ISteamNetworking_GetP2PSessionState	401	0x10015c50
SteamAPI_ISteamNetworking_GetSocketConnectionType	402	0x10015c90
SteamAPI_ISteamNetworking_GetSocketInfo	403	0x10015cd0
SteamAPI_ISteamNetworking_IsDataAvailable	404	0x10015d20
SteamAPI_ISteamNetworking_IsDataAvailableOnSocket	405	0x10015d60
SteamAPI_ISteamNetworking_IsP2PPacketAvailable	406	0x10015da0
SteamAPI_ISteamNetworking_ReadP2PPacket	407	0x10015de0
SteamAPI_ISteamNetworking_RetrieveData	408	0x10015e30
SteamAPI_ISteamNetworking_RetrieveDataFromSocket	409	0x10015e80
SteamAPI_ISteamNetworking_SendDataOnSocket	410	0x10015ec0
SteamAPI_ISteamNetworking_SendP2PPacket	411	0x10015f00
SteamAPI_ISteamRemoteStorage_CommitPublishedFileUpdate	412	0x10015f50
SteamAPI_ISteamRemoteStorage_CreatePublishedFileUpdateRequest	413	0x10015f90
SteamAPI_ISteamRemoteStorage_DeletePublishedFile	414	0x10015fd0
SteamAPI_ISteamRemoteStorage_EnumeratePublishedFilesByUserAction	415	0x10016010
SteamAPI_ISteamRemoteStorage_EnumeratePublishedWorkshopFiles	416	0x10016050
SteamAPI_ISteamRemoteStorage_EnumerateUserPublishedFiles	417	0x100160a0
SteamAPI_ISteamRemoteStorage_EnumerateUserSharedWorkshopFiles	418	0x100160e0
SteamAPI_ISteamRemoteStorage_EnumerateUserSubscribedFiles	419	0x10016130
SteamAPI_ISteamRemoteStorage_FileDelete	420	0x10016170
SteamAPI_ISteamRemoteStorage_FileExists	421	0x100161b0
SteamAPI_ISteamRemoteStorage_FileForget	422	0x100161f0
SteamAPI_ISteamRemoteStorage_FilePersisted	423	0x10016230
SteamAPI_ISteamRemoteStorage_FileRead	424	0x10016270
SteamAPI_ISteamRemoteStorage_FileShare	425	0x100162b0
SteamAPI_ISteamRemoteStorage_FileWrite	426	0x100162f0
SteamAPI_ISteamRemoteStorage_FileWriteStreamCancel	427	0x10016330
SteamAPI_ISteamRemoteStorage_FileWriteStreamClose	428	0x10016370
SteamAPI_ISteamRemoteStorage_FileWriteStreamOpen	429	0x100163b0
SteamAPI_ISteamRemoteStorage_FileWriteStreamWriteChunk	430	0x100163f0
SteamAPI_ISteamRemoteStorage_GetCachedUGCCount	431	0x10016430
SteamAPI_ISteamRemoteStorage_GetCachedUGCHandle	432	0x10016460
SteamAPI_ISteamRemoteStorage_GetFileCount	433	0x100164a0
SteamAPI_ISteamRemoteStorage_GetFileNameAndSize	434	0x100164d0
SteamAPI_ISteamRemoteStorage_GetFileSize	435	0x10016510
SteamAPI_ISteamRemoteStorage_GetFileTimestamp	436	0x10016550
SteamAPI_ISteamRemoteStorage_GetPublishedFileDetails	437	0x10016590
SteamAPI_ISteamRemoteStorage_GetPublishedItemVoteDetails	438	0x100165d0
SteamAPI_ISteamRemoteStorage_GetQuota	439	0x10016610
SteamAPI_ISteamRemoteStorage_GetSyncPlatforms	440	0x10016650
SteamAPI_ISteamRemoteStorage_GetUGCDetails	441	0x10016690
SteamAPI_ISteamRemoteStorage_GetUGCDownloadProgress	442	0x100166e0
SteamAPI_ISteamRemoteStorage_GetUserPublishedItemVoteDetails	443	0x10016720
SteamAPI_ISteamRemoteStorage_IsCloudEnabledForAccount	444	0x10016760
SteamAPI_ISteamRemoteStorage_IsCloudEnabledForApp	445	0x10016790
SteamAPI_ISteamRemoteStorage_PublishVideo	446	0x100167c0
SteamAPI_ISteamRemoteStorage_PublishWorkshopFile	447	0x10016820
SteamAPI_ISteamRemoteStorage_SetCloudEnabledForApp	448	0x10016880
SteamAPI_ISteamRemoteStorage_SetSyncPlatforms	449	0x100168b0
SteamAPI_ISteamRemoteStorage_SetUserPublishedFileAction	450	0x100168f0
SteamAPI_ISteamRemoteStorage_SubscribePublishedFile	451	0x10016930
SteamAPI_ISteamRemoteStorage_UGCDownload	452	0x10016970
SteamAPI_ISteamRemoteStorage_UGCDownloadToLocation	453	0x100169b0
SteamAPI_ISteamRemoteStorage_UGCRead	454	0x10016a00
SteamAPI_ISteamRemoteStorage_UnsubscribePublishedFile	455	0x10016a50
SteamAPI_ISteamRemoteStorage_UpdatePublishedFileDescription	456	0x10016a90
SteamAPI_ISteamRemoteStorage_UpdatePublishedFileFile	457	0x10016ad0
SteamAPI_ISteamRemoteStorage_UpdatePublishedFilePreviewFile	458	0x10016b10
SteamAPI_ISteamRemoteStorage_UpdatePublishedFileSetChangeDescription	459	0x10016b50
SteamAPI_ISteamRemoteStorage_UpdatePublishedFileTags	460	0x10016b90
SteamAPI_ISteamRemoteStorage_UpdatePublishedFileTitle	461	0x10016bd0
SteamAPI_ISteamRemoteStorage_UpdatePublishedFileVisibility	462	0x10016c10
SteamAPI_ISteamRemoteStorage_UpdateUserPublishedItemVote	463	0x10016c50
SteamAPI_ISteamScreenshots_AddScreenshotToLibrary	464	0x10016c90
SteamAPI_ISteamScreenshots_HookScreenshots	465	0x10016cd0
SteamAPI_ISteamScreenshots_SetLocation	466	0x10016d00
SteamAPI_ISteamScreenshots_TagPublishedFile	467	0x10016d40
SteamAPI_ISteamScreenshots_TagUser	468	0x10016d80
SteamAPI_ISteamScreenshots_TriggerScreenshot	469	0x10016dc0
SteamAPI_ISteamScreenshots_WriteScreenshot	470	0x10016df0
SteamAPI_ISteamUGC_AddExcludedTag	471	0x10016e30
SteamAPI_ISteamUGC_AddRequiredTag	472	0x10016e70
SteamAPI_ISteamUGC_CreateItem	473	0x10016eb0
SteamAPI_ISteamUGC_CreateQueryAllUGCRequest	474	0x10016ef0
SteamAPI_ISteamUGC_CreateQueryUserUGCRequest	475	0x10016f40
SteamAPI_ISteamUGC_GetItemInstallInfo	476	0x10016f90
SteamAPI_ISteamUGC_GetItemUpdateInfo	477	0x10016fe0
SteamAPI_ISteamUGC_GetItemUpdateProgress	478	0x10017030
SteamAPI_ISteamUGC_GetNumSubscribedItems	479	0x10017070
SteamAPI_ISteamUGC_GetQueryUGCResult	480	0x100170a0
SteamAPI_ISteamUGC_GetSubscribedItems	481	0x100170e0
SteamAPI_ISteamUGC_ReleaseQueryUGCRequest	482	0x10017120
SteamAPI_ISteamUGC_RequestUGCDetails	483	0x10017160
SteamAPI_ISteamUGC_SendQueryUGCRequest	484	0x100171a0
SteamAPI_ISteamUGC_SetAllowCachedResponse	485	0x100171e0
SteamAPI_ISteamUGC_SetCloudFileNameFilter	486	0x10017220
SteamAPI_ISteamUGC_SetItemContent	487	0x10017260
SteamAPI_ISteamUGC_SetItemDescription	488	0x100172a0
SteamAPI_ISteamUGC_SetItemPreview	489	0x100172e0
SteamAPI_ISteamUGC_SetItemTags	490	0x10017320
SteamAPI_ISteamUGC_SetItemTitle	491	0x10017360
SteamAPI_ISteamUGC_SetItemVisibility	492	0x100173a0
SteamAPI_ISteamUGC_SetMatchAnyTag	493	0x100173e0
SteamAPI_ISteamUGC_SetRankedByTrendDays	494	0x10017420
SteamAPI_ISteamUGC_SetReturnLongDescription	495	0x10017460
SteamAPI_ISteamUGC_SetReturnTotalOnly	496	0x100174a0
SteamAPI_ISteamUGC_SetSearchText	497	0x100174e0
SteamAPI_ISteamUGC_StartItemUpdate	498	0x10017520
SteamAPI_ISteamUGC_SubmitItemUpdate	499	0x10017560
SteamAPI_ISteamUGC_SubscribeItem	500	0x100175a0
SteamAPI_ISteamUGC_UnsubscribeItem	501	0x100175e0
SteamAPI_ISteamUnifiedMessages_GetMethodResponseData	502	0x10017620
SteamAPI_ISteamUnifiedMessages_GetMethodResponseInfo	503	0x10017670
SteamAPI_ISteamUnifiedMessages_ReleaseMethod	504	0x100176b0
SteamAPI_ISteamUnifiedMessages_SendMethod	505	0x100176f0
SteamAPI_ISteamUnifiedMessages_SendNotification	506	0x10017740
SteamAPI_ISteamUserStats_AttachLeaderboardUGC	507	0x10017780
SteamAPI_ISteamUserStats_ClearAchievement	508	0x100177d0
SteamAPI_ISteamUserStats_DownloadLeaderboardEntries	509	0x10017810
SteamAPI_ISteamUserStats_DownloadLeaderboardEntriesForUsers	510	0x10017860
SteamAPI_ISteamUserStats_FindLeaderboard	511	0x100178b0
SteamAPI_ISteamUserStats_FindOrCreateLeaderboard	512	0x100178f0
SteamAPI_ISteamUserStats_GetAchievement	513	0x10017930
SteamAPI_ISteamUserStats_GetAchievementAchievedPercent	514	0x10017970
SteamAPI_ISteamUserStats_GetAchievementAndUnlockTime	515	0x100179b0
SteamAPI_ISteamUserStats_GetAchievementDisplayAttribute	516	0x100179f0
SteamAPI_ISteamUserStats_GetAchievementIcon	517	0x10017a30
SteamAPI_ISteamUserStats_GetAchievementName	518	0x10017a70
SteamAPI_ISteamUserStats_GetDownloadedLeaderboardEntry	519	0x10017ab0
SteamAPI_ISteamUserStats_GetGlobalStat	520	0x10017b00
SteamAPI_ISteamUserStats_GetGlobalStat0	521	0x10017b40
SteamAPI_ISteamUserStats_GetGlobalStatHistory	522	0x10017b80
SteamAPI_ISteamUserStats_GetGlobalStatHistory0	523	0x10017bc0
SteamAPI_ISteamUserStats_GetLeaderboardDisplayType	524	0x10017c00
SteamAPI_ISteamUserStats_GetLeaderboardEntryCount	525	0x10017c40
SteamAPI_ISteamUserStats_GetLeaderboardName	526	0x10017c80
SteamAPI_ISteamUserStats_GetLeaderboardSortMethod	527	0x10017cc0
SteamAPI_ISteamUserStats_GetMostAchievedAchievementInfo	528	0x10017d00
SteamAPI_ISteamUserStats_GetNextMostAchievedAchievementInfo	529	0x10017d50
SteamAPI_ISteamUserStats_GetNumAchievements	530	0x10017da0
SteamAPI_ISteamUserStats_GetNumberOfCurrentPlayers	531	0x10017dd0
SteamAPI_ISteamUserStats_GetStat	532	0x10017e00
SteamAPI_ISteamUserStats_GetStat0	533	0x10017e40
SteamAPI_ISteamUserStats_GetUserAchievement	534	0x10017e80
SteamAPI_ISteamUserStats_GetUserAchievementAndUnlockTime	535	0x10017ec0
SteamAPI_ISteamUserStats_GetUserStat	536	0x10017f10
SteamAPI_ISteamUserStats_GetUserStat0	537	0x10017f50
SteamAPI_ISteamUserStats_IndicateAchievementProgress	538	0x10017f90
SteamAPI_ISteamUserStats_RequestCurrentStats	539	0x10017fd0
SteamAPI_ISteamUserStats_RequestGlobalAchievementPercentages	540	0x10018000
SteamAPI_ISteamUserStats_RequestGlobalStats	541	0x10018040
SteamAPI_ISteamUserStats_RequestUserStats	542	0x10018080
SteamAPI_ISteamUserStats_ResetAllStats	543	0x100180c0
SteamAPI_ISteamUserStats_SetAchievement	544	0x10018100
SteamAPI_ISteamUserStats_SetStat	545	0x10018140
SteamAPI_ISteamUserStats_SetStat0	546	0x10018180
SteamAPI_ISteamUserStats_StoreStats	547	0x100181c0
SteamAPI_ISteamUserStats_UpdateAvgRateStat	548	0x100181f0
SteamAPI_ISteamUserStats_UploadLeaderboardScore	549	0x10018240
SteamAPI_ISteamUser_AdvertiseGame	550	0x10018290
SteamAPI_ISteamUser_BIsBehindNAT	551	0x100182d0
SteamAPI_ISteamUser_BLoggedOn	552	0x10018300
SteamAPI_ISteamUser_BeginAuthSession	553	0x10018330
SteamAPI_ISteamUser_CancelAuthTicket	554	0x10018370
SteamAPI_ISteamUser_DecompressVoice	555	0x100183a0
SteamAPI_ISteamUser_EndAuthSession	556	0x100183f0
SteamAPI_ISteamUser_GetAuthSessionTicket	557	0x10018430
SteamAPI_ISteamUser_GetAvailableVoice	558	0x10018470
SteamAPI_ISteamUser_GetEncryptedAppTicket	559	0x100184b0
SteamAPI_ISteamUser_GetGameBadgeLevel	560	0x100184f0
SteamAPI_ISteamUser_GetHSteamUser	561	0x10018530
SteamAPI_ISteamUser_GetPlayerSteamLevel	562	0x10018560
SteamAPI_ISteamUser_GetSteamID	563	0x10018590
SteamAPI_ISteamUser_GetUserDataFolder	564	0x100185e0
SteamAPI_ISteamUser_GetVoice	565	0x10018620
SteamAPI_ISteamUser_GetVoiceOptimalSampleRate	566	0x10018680
SteamAPI_ISteamUser_InitiateGameConnection	567	0x100186b0
SteamAPI_ISteamUser_RequestEncryptedAppTicket	568	0x10018700
SteamAPI_ISteamUser_RequestStoreAuthURL	569	0x10018740
SteamAPI_ISteamUser_StartVoiceRecording	570	0x10018780
SteamAPI_ISteamUser_StopVoiceRecording	571	0x100187b0
SteamAPI_ISteamUser_TerminateGameConnection	572	0x100187e0
SteamAPI_ISteamUser_TrackAppUsageEvent	573	0x10018820
SteamAPI_ISteamUser_UserHasLicenseForApp	574	0x10018860
SteamAPI_ISteamUtils_BOverlayNeedsPresent	575	0x100188a0
SteamAPI_ISteamUtils_CheckFileSignature	576	0x100188d0
SteamAPI_ISteamUtils_GetAPICallFailureReason	577	0x10018910
SteamAPI_ISteamUtils_GetAPICallResult	578	0x10018950
SteamAPI_ISteamUtils_GetAppID	579	0x100189a0
SteamAPI_ISteamUtils_GetCSERIPPort	580	0x100189d0
SteamAPI_ISteamUtils_GetConnectedUniverse	581	0x10018a10
SteamAPI_ISteamUtils_GetCurrentBatteryPower	582	0x10018a40
SteamAPI_ISteamUtils_GetEnteredGamepadTextInput	583	0x10018a70
SteamAPI_ISteamUtils_GetEnteredGamepadTextLength	584	0x10018ab0
SteamAPI_ISteamUtils_GetIPCCallCount	585	0x10018ae0
SteamAPI_ISteamUtils_GetIPCountry	586	0x10018b10
SteamAPI_ISteamUtils_GetImageRGBA	587	0x10018b40
SteamAPI_ISteamUtils_GetImageSize	588	0x10018b80
SteamAPI_ISteamUtils_GetSecondsSinceAppActive	589	0x10018bc0
SteamAPI_ISteamUtils_GetSecondsSinceComputerActive	590	0x10018bf0
SteamAPI_ISteamUtils_GetServerRealTime	591	0x10018c20
SteamAPI_ISteamUtils_GetSteamUILanguage	592	0x10018c50
SteamAPI_ISteamUtils_IsAPICallCompleted	593	0x10018c80
SteamAPI_ISteamUtils_IsOverlayEnabled	594	0x10018cc0
SteamAPI_ISteamUtils_IsSteamRunningInVR	595	0x10018cf0
SteamAPI_ISteamUtils_RunFrame	596	0x10018d20
SteamAPI_ISteamUtils_SetOverlayNotificationPosition	597	0x10018d50
SteamAPI_ISteamUtils_SetWarningMessageHook	598	0x10018d80
SteamAPI_ISteamUtils_ShowGamepadTextInput	599	0x10018db0
SteamAPI_ISteamVideo_GetVideoURL	600	0x10018e00
SteamAPI_Init	601	0x1000e5a0
SteamAPI_InitSafe	602	0x1000f4a0
SteamAPI_IsSteamRunning	603	0x100022e0
SteamAPI_RegisterCallResult	604	0x1000fc80
SteamAPI_RegisterCallback	605	0x1000fba0
SteamAPI_RestartAppIfNecessary	606	0x10001ed0
SteamAPI_RunCallbacks	607	0x1000f5c0
SteamAPI_SetBreakpadAppID	608	0x10002a60
SteamAPI_SetMiniDumpComment	609	0x10002a60
SteamAPI_SetTryCatchCallbacks	610	0x10002a60
SteamAPI_Shutdown	611	0x10002a60
SteamAPI_UnregisterCallResult	612	0x1000fcf0
SteamAPI_UnregisterCallback	613	0x1000fc10
SteamAPI_UseBreakpadCrashHandler	614	0x10002a60
SteamAPI_WriteMiniDump	615	0x10002a60
SteamAPI_vr_IHmd_AttachToWindow	616	0x10018f00
SteamAPI_vr_IHmd_ComputeDistortion	617	0x10019060
SteamAPI_vr_IHmd_GetD3D9AdapterIndex	618	0x100190e0
SteamAPI_vr_IHmd_GetDXGIOutputInfo	619	0x10018f20
SteamAPI_vr_IHmd_GetDisplayId	620	0x10018f40
SteamAPI_vr_IHmd_GetDriverId	621	0x10018f60
SteamAPI_vr_IHmd_GetEyeOutputViewport	622	0x10018f80
SteamAPI_vr_IHmd_GetHeadFromEyePose	623	0x100190f0
SteamAPI_vr_IHmd_GetLastTrackerFromHeadPose	624	0x10018fb0
SteamAPI_vr_IHmd_GetProjectionMatrix	625	0x10019140
SteamAPI_vr_IHmd_GetProjectionRaw	626	0x100191b0
SteamAPI_vr_IHmd_GetRecommendedRenderTargetSize	627	0x100191e0
SteamAPI_vr_IHmd_GetTrackerFromHeadPose	628	0x10018fd0
SteamAPI_vr_IHmd_GetTrackerZeroPose	629	0x10019200
SteamAPI_vr_IHmd_GetViewMatrix	630	0x10018ff0
SteamAPI_vr_IHmd_GetWindowBounds	631	0x10019020
SteamAPI_vr_IHmd_WillDriftInYaw	632	0x10019040
SteamAPI_vr_IHmd_ZeroTracker	633	0x10019050
SteamAppList	634	0x1000f510
SteamApps	635	0x1000f500
SteamClient	636	0x1000e580
SteamContentServer	637	0x1000feb0
SteamContentServerUtils	638	0x1000fec0
SteamContentServer_Init	639	0x100022e0
SteamContentServer_RunCallbacks	640	0x10002a60
SteamContentServer_Shutdown	641	0x10002a60
SteamController	642	0x1000fe60
SteamController_GetControllerState	643	0x10018e40
SteamController_Init	644	0x10018e60
SteamController_SetOverrideMode	645	0x10018e90
SteamController_Shutdown	646	0x10018eb0
SteamController_TriggerHapticPulse	647	0x10018ed0
SteamFriends	648	0x1000f4c0
SteamGameServer	649	0x1000fde0
SteamGameServerApps	650	0x1000f500
SteamGameServerHTTP	651	0x1000fe40
SteamGameServerInventory	652	0x1000fe90
SteamGameServerNetworking	653	0x1000fe20
SteamGameServerStats	654	0x1000fe30
SteamGameServerUtils	655	0x1000fdf0
SteamGameServer_BSecure	656	0x10001ed0
SteamGameServer_GetHSteamPipe	657	0x100031a0
SteamGameServer_GetHSteamUser	658	0x100031a0
SteamGameServer_GetIPCCallCount	659	0x1000d270
SteamGameServer_GetSteamID	660	0x1000fd70
SteamGameServer_Init	661	0x100022e0
SteamGameServer_InitSafe	662	0x1000fd80
SteamGameServer_RunCallbacks	663	0x10002a60
SteamGameServer_Shutdown	664	0x10002a60
SteamHTMLSurface	665	0x1000fe80
SteamHTTP	666	0x1000fe40
SteamInventory	667	0x1000fe90
SteamMasterServerUpdater	668	0x1000fe00
SteamMatchmaking	669	0x1000f4e0
SteamMatchmakingServers	670	0x1000f530
SteamMusic	671	0x1000f550
SteamNetworking	672	0x1000f520
SteamRemoteStorage	673	0x1000f540
SteamScreenshots	674	0x1000fe50
SteamUGC	675	0x1000fe70
SteamUser	676	0x1000f4b0
SteamUserStats	677	0x1000f4f0
SteamUtils	678	0x1000f4d0
SteamVR_ComputeDistortion	679	0x10019060
SteamVR_GetD3D9AdapterIndex	680	0x100190e0
SteamVR_GetDisplayId	681	0x10018f40
SteamVR_GetDriverId	682	0x10018f60
SteamVR_GetEyeOutputViewport	683	0x10018f80
SteamVR_GetHeadFromEyePose	684	0x100190f0
SteamVR_GetLastTrackerFromHeadPose	685	0x10018fb0
SteamVR_GetProjectionMatrix	686	0x10019140
SteamVR_GetProjectionRaw	687	0x100191b0
SteamVR_GetRecommendedRenderTargetSize	688	0x100191e0
SteamVR_GetTrackerFromHeadPose	689	0x10018fd0
SteamVR_GetTrackerZeroPose	690	0x10019200
SteamVR_GetViewMatrix	691	0x10018ff0
SteamVR_GetWindowBounds	692	0x10019020
SteamVR_IHmd_Version	693	0x10019220
SteamVR_WillDriftInYaw	694	0x10019040
SteamVR_ZeroTracker	695	0x10019050
SteamVideo	696	0x1000fea0
Steam_GetHSteamUserCurrent	697	0x1000d270
Steam_RegisterInterfaceFuncs	698	0x10002a60
Steam_RunCallbacks	699	0x10002a60
VR_GetControlPanel	700	0x1000d270
VR_GetGenericInterface	701	0x1000d270
VR_GetStringForHmdError	702	0x1000d270
VR_Init	703	0x1000fed0
VR_IsHmdPresent	704	0x10001ed0
VR_Shutdown	705	0x10002a60
g_pSteamClientGameServer	706	0x10056d28

Possible Origin

Language of compilation system	Country where language is spoken	Map
English	United States

• loaddll32.exe
• conhost.exe
• cmd.exe
• rundll32.exe
• rundll32.exe
• rundll32.exe
• rundll32.exe

Click to jump to process

Memory Usage

• loaddll32.exe
• conhost.exe
• cmd.exe
• rundll32.exe
• rundll32.exe
• rundll32.exe
• rundll32.exe

Click to jump to process

Click to jump to process

Target ID:	0
Start time:	12:39:00
Start date:	08/02/2024
Path:	C:\Windows\System32\loaddll32.exe
Wow64 process (32bit):	true
Commandline:	loaddll32.exe "C:\Users\user\Desktop\SecuriteInfo.com.suspected.of.Malware-Cryptor.FSP.gen.24990.4905.dll"
Imagebase:	0xf60000
File size:	126'464 bytes
MD5 hash:	51E6071F9CBA48E79F10C84515AAE618
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	high
Has exited:	true

Show Windows behavior

Target ID:	2
Start time:	12:39:00
Start date:	08/02/2024
Path:	C:\Windows\System32\conhost.exe
Wow64 process (32bit):	false
Commandline:	C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Imagebase:	0x7ff66e660000
File size:	862'208 bytes
MD5 hash:	0D698AF330FD17BEE3BF90011D49251D
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	high
Has exited:	true

Show Windows behavior

Target ID:	3
Start time:	12:39:00
Start date:	08/02/2024
Path:	C:\Windows\SysWOW64\cmd.exe
Wow64 process (32bit):	true
Commandline:	cmd.exe /C rundll32.exe "C:\Users\user\Desktop\SecuriteInfo.com.suspected.of.Malware-Cryptor.FSP.gen.24990.4905.dll",#1
Imagebase:	0x1c0000
File size:	236'544 bytes
MD5 hash:	D0FCE3AFA6AA1D58CE9FA336CC2B675B
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	high
Has exited:	true

Show Windows behavior

Target ID:	4
Start time:	12:39:00
Start date:	08/02/2024
Path:	C:\Windows\SysWOW64\rundll32.exe
Wow64 process (32bit):	true
Commandline:	rundll32.exe C:\Users\user\Desktop\SecuriteInfo.com.suspected.of.Malware-Cryptor.FSP.gen.24990.4905.dll,GetHSteamPipe
Imagebase:	0x360000
File size:	61'440 bytes
MD5 hash:	889B99C52A60DD49227C5E485A016679
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	high
Has exited:	true

Show Windows behavior

Target ID:	5
Start time:	12:39:00
Start date:	08/02/2024
Path:	C:\Windows\SysWOW64\rundll32.exe
Wow64 process (32bit):	true
Commandline:	rundll32.exe "C:\Users\user\Desktop\SecuriteInfo.com.suspected.of.Malware-Cryptor.FSP.gen.24990.4905.dll",#1
Imagebase:	0x360000
File size:	61'440 bytes
MD5 hash:	889B99C52A60DD49227C5E485A016679
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	high
Has exited:	true

Show Windows behavior

Target ID:	6
Start time:	12:39:03
Start date:	08/02/2024
Path:	C:\Windows\SysWOW64\rundll32.exe
Wow64 process (32bit):	true
Commandline:	rundll32.exe C:\Users\user\Desktop\SecuriteInfo.com.suspected.of.Malware-Cryptor.FSP.gen.24990.4905.dll,GetHSteamUser
Imagebase:	0x360000
File size:	61'440 bytes
MD5 hash:	889B99C52A60DD49227C5E485A016679
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	high
Has exited:	true

Show Windows behavior

Target ID:	7
Start time:	12:39:06
Start date:	08/02/2024
Path:	C:\Windows\SysWOW64\rundll32.exe
Wow64 process (32bit):	true
Commandline:	rundll32.exe C:\Users\user\Desktop\SecuriteInfo.com.suspected.of.Malware-Cryptor.FSP.gen.24990.4905.dll,SteamAPI_GetHSteamPipe
Imagebase:	0x360000
File size:	61'440 bytes
MD5 hash:	889B99C52A60DD49227C5E485A016679
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	high
Has exited:	true

Show Windows behavior

Description:	Adversaries may execute their own malicious payloads by side-loading DLLs. Similar to DLL Search Order Hijacking , side-loading involves hijacking which DLL a program loads. But rather than just planting the DLL within the search order of a program then waiting for the victim application to be invoked, adversaries may directly side-load their payloads by planting then invoking a legitimate application that executes their payload(s).
Tactics:	Defense Evasion, Persistence, Privilege Escalation
Data Sources:	File: File Creation, File: File Modification, Module: Module Load, Process: Process Creation
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may inject code into processes in order to evade process-based defenses as well as possibly elevate privileges. Process injection is a method of executing arbitrary code in the address space of a separate live process. Running code in the context of another process may allow access to the process's memory, system/network resources, and possibly elevated privileges. Execution via process injection may also evade detection from security products since the execution is masked under a legitimate process.
Tactics:	Defense Evasion, Privilege Escalation
Data Sources:	File: File Metadata, File: File Modification, Module: Module Load, Process: OS API Execution, Process: Process Access, Process: Process Metadata, Process: Process Modification
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may employ various means to detect and avoid virtualization and analysis environments. This may include changing behaviors based on the results of checks for the presence of artifacts indicative of a virtual machine environment (VME) or sandbox. If the adversary detects a VME, they may alter their malware to disengage from the victim or conceal the core functions of the implant. They may also search for VME artifacts before dropping secondary or additional payloads. Adversaries may use the information learned from [Virtualization/Sandbox Evasion](https://attack.mitre.org/techniques/T1497) during automated discovery to shape follow-on behaviors.
Tactics:	Defense Evasion, Discovery
Data Sources:	Command: Command Execution, Process: OS API Execution, Process: Process Creation
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may abuse rundll32.exe to proxy execution of malicious code. Using rundll32.exe, vice executing directly (i.e. Shared Modules ), may avoid triggering security tools that may not monitor execution of the rundll32.exe process because of allowlists or false positives from normal operations. Rundll32.exe is commonly associated with executing DLL payloads (ex: `rundll32.exe {DLLname, DLLfunction}` ).
Tactics:	Defense Evasion
Data Sources:	Command: Command Execution, File: File Metadata, Module: Module Load, Process: Process Creation
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to get a listing of security software, configurations, defensive tools, and sensors that are installed on a system or in a cloud environment. This may include things such as firewall rules and anti-virus. Adversaries may use the information from Security Software Discovery during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Firewall: Firewall Enumeration, Firewall: Firewall Metadata, Process: OS API Execution, Process: Process Creation
Platforms:	Azure AD, Google Workspace, IaaS, Linux, macOS, Office 365, SaaS, Windows
Url:	Open detailed description by Mitre

Description:	An adversary may attempt to get detailed information about the operating system and hardware, including version, patches, hotfixes, service packs, and architecture. Adversaries may use the information from System Information Discovery during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Process: OS API Execution, Process: Process Creation
Platforms:	IaaS, Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading Joe Sandbox Report ...

Warning!

Windows Analysis Report SecuriteInfo.com.suspected.of.Malware-Cryptor.FSP.gen.24990.4905.dll

Overview

General Information

Detection

Signatures

Classification

Process Tree

Malware Configuration

Yara Signatures

Sigma Signatures

Snort Signatures

Joe Sandbox Signatures

AV Detection

Compliance

System Summary

Hooking and other Techniques for Hiding and Protection

Malware Analysis System Evasion

Anti Debugging

HIPS / PFW / Operating System Protection Evasion

Mitre Att&ck Matrix

Behavior Graph

Screenshots

Thumbnails

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Unpacked PE Files

Domains

URLs

Domains and IPs

Contacted Domains

World Map of Contacted IPs

General Information

Warnings

Simulations

Behavior and APIs

Joe Sandbox View / Context

IPs

Domains

ASNs

JA3 Fingerprints

Dropped Files

Created / dropped Files

Static File Info

General

File Icon

Static PE Info

General

Entrypoint Preview

Rich Headers

Data Directories

Sections

Resources

Imports

Exports

Possible Origin

Network Behavior

Statistics

CPU Usage

Memory Usage

Behavior

System Behavior

Analysis Process: loaddll32.exePID: 3532, Parent PID: 4004

General

File Activities

File Opened

File Created

File Read

File Attributes Queried

Volume Information Queried

Device IO

Section Activities

Sections loaded by Windows

Windows Analysis Report
SecuriteInfo.com.suspected.of.Malware-Cryptor.FSP.gen.24990.4905.dll