csgo_gc.dll

Description:

Authors:

Version:

Architecture: 32-bit

Operating System:

SHA256: 0fd3648673278c4fb616c55092a7becf

File Size: 7.3 MB

Uploaded At: Aug. 27, 2026, 1:08 p.m.

Views: 4

Security Warning

This file has been flagged as potentially dangerous.

Reason: Detected potentially dangerous functions used for process injection: OpenProcess

Exported Functions

GcCheckForUpdates (Ordinal: 1, Address: 0xacc40)
GetClientAccountId (Ordinal: 2, Address: 0x4bbc0)
InstallGC (Ordinal: 3, Address: 0xacc60)
IsGCSendAvailable (Ordinal: 4, Address: 0x9c6c0)
SendGCMessageToClient (Ordinal: 5, Address: 0xace60)
SendGCRankUpdateToClients (Ordinal: 6, Address: 0xacea0)
SendGCXpUpdateToClient (Ordinal: 7, Address: 0xace60)

Imported DLLs & Functions

ADVAPI32.dll

CloseServiceHandle (Address: 0x10551008)
CryptAcquireContextA (Address: 0x1055102c)
CryptAcquireContextW (Address: 0x1055100c)
CryptGenRandom (Address: 0x10551028)
CryptReleaseContext (Address: 0x10551024)
DeregisterEventSource (Address: 0x10551018)
OpenSCManagerA (Address: 0x10551004)
OpenServiceA (Address: 0x1055103c)
QueryServiceStatus (Address: 0x10551034)
RegCloseKey (Address: 0x10551030)
RegCreateKeyExA (Address: 0x10551020)
RegisterEventSourceW (Address: 0x10551014)
RegOpenKeyExA (Address: 0x10551038)
RegQueryValueExA (Address: 0x10551000)
RegSetValueExA (Address: 0x1055101c)
ReportEventW (Address: 0x10551010)

CRYPT32.dll

CertCloseStore (Address: 0x1055104c)
CertEnumCertificatesInStore (Address: 0x10551048)
CertFindCertificateInStore (Address: 0x1055105c)
CertFreeCertificateContext (Address: 0x10551058)
CertOpenSystemStoreA (Address: 0x10551044)
CertOpenSystemStoreW (Address: 0x10551060)
CryptProtectData (Address: 0x10551054)
CryptUnprotectData (Address: 0x10551050)

IPHLPAPI.DLL

GetAdaptersAddresses (Address: 0x10551068)

KERNEL32.dll

AcquireSRWLockExclusive (Address: 0x10551304)
CancelIoEx (Address: 0x10551160)
CheckRemoteDebuggerPresent (Address: 0x105510ac)
CloseHandle (Address: 0x10551078)
CompareStringW (Address: 0x10551278)
ConvertFiberToThread (Address: 0x1055121c)
ConvertThreadToFiber (Address: 0x10551220)
CreateDirectoryA (Address: 0x1055119c)
CreateDirectoryW (Address: 0x10551260)
CreateEventW (Address: 0x10551118)
CreateFiber (Address: 0x105511ec)
CreateFileA (Address: 0x10551070)
CreateFileW (Address: 0x105510d4)
CreateIoCompletionPort (Address: 0x1055114c)
CreateSemaphoreA (Address: 0x1055120c)
CreateThread (Address: 0x105512c8)
CreateToolhelp32Snapshot (Address: 0x1055107c)
CreateWaitableTimerA (Address: 0x1055115c)
DecodePointer (Address: 0x10551344)
DeleteCriticalSection (Address: 0x10551120)
DeleteFiber (Address: 0x105511e8)
DeleteFileW (Address: 0x10551174)
DeviceIoControl (Address: 0x10551194)
EncodePointer (Address: 0x10551340)
EnterCriticalSection (Address: 0x10551124)
EnumSystemLocalesW (Address: 0x10551264)
ExitProcess (Address: 0x105511b8)
ExitThread (Address: 0x105512c4)
FileTimeToSystemTime (Address: 0x105512a8)
FindClose (Address: 0x105510a4)
FindFirstFileA (Address: 0x1055109c)
FindFirstFileExW (Address: 0x10551240)
FindFirstFileW (Address: 0x105511f8)
FindFirstVolumeA (Address: 0x105511a4)
FindNextFileA (Address: 0x105510a0)
FindNextFileW (Address: 0x105511fc)
FindNextVolumeA (Address: 0x105511ac)
FindVolumeClose (Address: 0x105511b0)
FlsAlloc (Address: 0x10551288)
FlsFree (Address: 0x1055127c)
FlsGetValue (Address: 0x10551284)
FlsSetValue (Address: 0x10551280)
FlushFileBuffers (Address: 0x10551250)
FlushInstructionCache (Address: 0x105511c0)
FormatMessageA (Address: 0x1055110c)
FormatMessageW (Address: 0x10551110)
FreeEnvironmentStringsW (Address: 0x10551328)
FreeLibrary (Address: 0x10551180)
FreeLibraryAndExitThread (Address: 0x105512c0)
GetACP (Address: 0x10551214)
GetCommandLineA (Address: 0x10551108)
GetCommandLineW (Address: 0x1055108c)
GetConsoleMode (Address: 0x10551224)
GetConsoleOutputCP (Address: 0x10551298)
GetCPInfo (Address: 0x105512ec)
GetCurrentDirectoryA (Address: 0x10551098)
GetCurrentDirectoryW (Address: 0x1055124c)
GetCurrentProcess (Address: 0x10551088)
GetCurrentProcessId (Address: 0x105510b0)
GetCurrentThread (Address: 0x10551310)
GetCurrentThreadId (Address: 0x105510b4)
GetDriveTypeA (Address: 0x105511a8)
GetDriveTypeW (Address: 0x105512b8)
GetEnvironmentStringsW (Address: 0x10551324)
GetEnvironmentVariableW (Address: 0x10551210)
GetExitCodeThread (Address: 0x10551208)
GetFileAttributesA (Address: 0x10551094)
GetFileInformationByHandle (Address: 0x105512b4)
GetFileSizeEx (Address: 0x10551294)
GetFileType (Address: 0x10551200)
GetFullPathNameW (Address: 0x10551248)
GetLastError (Address: 0x1055111c)
GetLocaleInfoW (Address: 0x10551270)
GetModuleFileNameA (Address: 0x105511e0)
GetModuleFileNameW (Address: 0x1055116c)
GetModuleHandleA (Address: 0x10551318)
GetModuleHandleExA (Address: 0x105510dc)
GetModuleHandleExW (Address: 0x10551168)
GetModuleHandleW (Address: 0x105511b4)
GetOEMCP (Address: 0x10551320)
GetProcAddress (Address: 0x10551314)
GetProcessHeap (Address: 0x10551330)
GetQueuedCompletionStatus (Address: 0x10551154)
GetStartupInfoW (Address: 0x105512d8)
GetStdHandle (Address: 0x10551218)
GetStringTypeW (Address: 0x105512f0)
GetSystemDirectoryA (Address: 0x105510e4)
GetSystemFirmwareTable (Address: 0x1055118c)
GetSystemInfo (Address: 0x105510e8)
GetSystemTime (Address: 0x105511f0)
GetSystemTimeAsFileTime (Address: 0x10551188)
GetThreadContext (Address: 0x105510c8)
GetTickCount (Address: 0x10551100)
GetTickCount64 (Address: 0x1055123c)
GetTimeZoneInformation (Address: 0x10551244)
GetUserDefaultLCID (Address: 0x10551268)
GetVolumeInformationA (Address: 0x10551190)
GetWindowsDirectoryA (Address: 0x105510e0)
HeapAlloc (Address: 0x1055129c)
HeapFree (Address: 0x105512a0)
HeapQueryInformation (Address: 0x10551254)
HeapReAlloc (Address: 0x1055125c)
HeapSize (Address: 0x10551258)
InitializeCriticalSection (Address: 0x105511d0)
InitializeCriticalSectionAndSpinCount (Address: 0x1055112c)
InitializeCriticalSectionEx (Address: 0x10551348)
InitializeSListHead (Address: 0x105512dc)
InitOnceBeginInitialize (Address: 0x10551338)
InitOnceComplete (Address: 0x1055133c)
InterlockedFlushSList (Address: 0x105512cc)
InterlockedPushEntrySList (Address: 0x105512d0)
IsDebuggerPresent (Address: 0x105510a8)
IsProcessorFeaturePresent (Address: 0x105512e0)
IsValidCodePage (Address: 0x1055131c)
IsValidLocale (Address: 0x1055126c)
LCMapStringEx (Address: 0x105512f4)
LCMapStringW (Address: 0x10551274)
LeaveCriticalSection (Address: 0x10551128)
LoadLibraryA (Address: 0x10551164)
LoadLibraryExW (Address: 0x105511bc)
LoadLibraryW (Address: 0x1055117c)
LocalFree (Address: 0x10551090)
Module32First (Address: 0x10551080)
Module32Next (Address: 0x10551084)
MoveFileExW (Address: 0x10551178)
MultiByteToWideChar (Address: 0x105510d8)
OpenProcess (Address: 0x105510ec)
OpenThread (Address: 0x105510c0)
PeekNamedPipe (Address: 0x105512b0)
PostQueuedCompletionStatus (Address: 0x10551148)
Process32First (Address: 0x105510f4)
Process32Next (Address: 0x105510fc)
QueryFullProcessImageNameA (Address: 0x105510f0)
QueryPerformanceCounter (Address: 0x10551198)
QueryPerformanceFrequency (Address: 0x105511c4)
QueueUserAPC (Address: 0x1055113c)
RaiseException (Address: 0x105512fc)
ReadConsoleA (Address: 0x1055122c)
ReadConsoleW (Address: 0x10551230)
ReadFile (Address: 0x10551074)
ReleaseSemaphore (Address: 0x10551204)
ReleaseSRWLockExclusive (Address: 0x10551308)
ResumeThread (Address: 0x105510cc)
RtlUnwind (Address: 0x105512d4)
SetConsoleCtrlHandler (Address: 0x105512bc)
SetConsoleMode (Address: 0x10551228)
SetEndOfFile (Address: 0x10551334)
SetEnvironmentVariableA (Address: 0x10551104)
SetEnvironmentVariableW (Address: 0x1055132c)
SetEvent (Address: 0x10551140)
SetFileAttributesA (Address: 0x105511a0)
SetFilePointerEx (Address: 0x1055128c)
SetLastError (Address: 0x10551158)
SetStdHandle (Address: 0x105512a4)
SetUnhandledExceptionFilter (Address: 0x105512e4)
SetWaitableTimer (Address: 0x10551150)
Sleep (Address: 0x10551184)
SleepConditionVariableSRW (Address: 0x10551290)
SleepEx (Address: 0x10551144)
SuspendThread (Address: 0x105510c4)
SwitchToFiber (Address: 0x105511e4)
SystemTimeToFileTime (Address: 0x105511f4)
SystemTimeToTzSpecificLocalTime (Address: 0x105512ac)
TerminateProcess (Address: 0x105510f8)
TerminateThread (Address: 0x10551138)
Thread32First (Address: 0x105510b8)
Thread32Next (Address: 0x105510bc)
TlsAlloc (Address: 0x105511d4)
TlsFree (Address: 0x1055134c)
TlsGetValue (Address: 0x105511d8)
TlsSetValue (Address: 0x105511dc)
TryAcquireSRWLockExclusive (Address: 0x10551300)
UnhandledExceptionFilter (Address: 0x105512e8)
VirtualAlloc (Address: 0x105511cc)
VirtualFree (Address: 0x105511c8)
VirtualProtect (Address: 0x105510d0)
VirtualQuery (Address: 0x1055130c)
WaitForMultipleObjects (Address: 0x10551134)
WaitForSingleObject (Address: 0x10551130)
WaitForSingleObjectEx (Address: 0x105512f8)
WakeAllConditionVariable (Address: 0x10551234)
WakeConditionVariable (Address: 0x10551238)
WideCharToMultiByte (Address: 0x10551114)
WriteConsoleW (Address: 0x10551350)
WriteFile (Address: 0x10551170)

PSAPI.DLL

GetMappedFileNameA (Address: 0x10551358)

SHELL32.dll

CommandLineToArgvW (Address: 0x10551360)
ShellExecuteW (Address: 0x10551364)
SHGetFolderPathA (Address: 0x10551368)

steam_api.dll

SteamAPI_GetHSteamUser (Address: 0x10551484)
SteamAPI_Init (Address: 0x105514b0)
SteamAPI_RegisterCallback (Address: 0x10551488)
SteamAPI_RegisterCallResult (Address: 0x105514a0)
SteamAPI_RunCallbacks (Address: 0x105514a4)
SteamAPI_Shutdown (Address: 0x105514bc)
SteamAPI_UnregisterCallback (Address: 0x1055148c)
SteamGameServer_GetHSteamPipe (Address: 0x105514ac)
SteamGameServer_GetHSteamUser (Address: 0x105514b8)
SteamGameServer_RunCallbacks (Address: 0x105514a8)
SteamGameServer_Shutdown (Address: 0x105514b4)
SteamInternal_ContextInit (Address: 0x1055149c)
SteamInternal_FindOrCreateGameServerInterface (Address: 0x10551498)
SteamInternal_FindOrCreateUserInterface (Address: 0x10551490)
SteamInternal_GameServer_Init (Address: 0x10551494)

USER32.dll

EnumDisplayDevicesA (Address: 0x10551370)
GetProcessWindowStation (Address: 0x10551378)
GetUserObjectInformationW (Address: 0x1055137c)
MessageBoxA (Address: 0x10551384)
MessageBoxW (Address: 0x10551380)
SendMessageW (Address: 0x10551374)

WINHTTP.dll

WinHttpCloseHandle (Address: 0x105513a4)
WinHttpConnect (Address: 0x105513a8)
WinHttpOpen (Address: 0x105513ac)
WinHttpOpenRequest (Address: 0x105513a0)
WinHttpQueryDataAvailable (Address: 0x10551390)
WinHttpQueryHeaders (Address: 0x10551394)
WinHttpReadData (Address: 0x1055138c)
WinHttpReceiveResponse (Address: 0x10551398)
WinHttpSendRequest (Address: 0x1055139c)

WINTRUST.dll

CryptCATAdminAcquireContext (Address: 0x105513b8)
CryptCATAdminCalcHashFromFileHandle (Address: 0x105513bc)
CryptCATAdminEnumCatalogFromHash (Address: 0x105513c4)
CryptCATAdminReleaseCatalogContext (Address: 0x105513c0)
CryptCATAdminReleaseContext (Address: 0x105513c8)
WinVerifyTrust (Address: 0x105513b4)

WS2_32.dll

__WSAFDIsSet (Address: 0x1055140c)
accept (Address: 0x10551408)
bind (Address: 0x10551404)
closesocket (Address: 0x1055145c)
connect (Address: 0x10551400)
freeaddrinfo (Address: 0x10551410)
getaddrinfo (Address: 0x10551478)
gethostbyaddr (Address: 0x105513d4)
gethostbyname (Address: 0x105513d0)
getpeername (Address: 0x105513e8)
getservbyname (Address: 0x10551470)
getservbyport (Address: 0x10551414)
getsockname (Address: 0x105513f8)
getsockopt (Address: 0x105513fc)
htonl (Address: 0x10551434)
htons (Address: 0x1055142c)
inet_addr (Address: 0x105513dc)
inet_ntoa (Address: 0x105513d8)
inet_pton (Address: 0x10551428)
ioctlsocket (Address: 0x10551458)
listen (Address: 0x1055141c)
ntohl (Address: 0x10551438)
ntohs (Address: 0x10551430)
recv (Address: 0x105513f4)
recvfrom (Address: 0x105513e4)
select (Address: 0x10551454)
send (Address: 0x105513f0)
sendto (Address: 0x105513e0)
setsockopt (Address: 0x10551444)
shutdown (Address: 0x10551420)
socket (Address: 0x10551474)
WSAAddressToStringW (Address: 0x1055147c)
WSACleanup (Address: 0x10551464)
WSAGetLastError (Address: 0x10551460)
WSAIoctl (Address: 0x10551424)
WSARecv (Address: 0x10551418)
WSARecvFrom (Address: 0x10551450)
WSASend (Address: 0x10551440)
WSASendTo (Address: 0x1055144c)
WSASetLastError (Address: 0x1055146c)
WSASocketA (Address: 0x105513ec)
WSASocketW (Address: 0x10551448)
WSAStartup (Address: 0x10551468)
WSAStringToAddressW (Address: 0x1055143c)