F:\Development\PDF5\builds\RC.322\_build\Release.x64\pdfSaver5L.pdb
Static task
static1
Behavioral task
behavioral1
Sample
2024-04-16_43dba6e30b941303a5df069755079425_ryuk.exe
Resource
win7-20240215-en
General
-
Target
2024-04-16_43dba6e30b941303a5df069755079425_ryuk
-
Size
23.7MB
-
MD5
43dba6e30b941303a5df069755079425
-
SHA1
e07fdb6b2dcd05dffbf7a32573c2a9abe3f64edd
-
SHA256
a46f8c0a7ddb7394bfca16839c48f50bb512bb850e453a326b59600f48cbd0f7
-
SHA512
0deac7edc87430f076143825670339ba8b14f2c2e1f22c83e1275df9a6a57a2a9a56bc43e3a81a9680dab180390d66ce78f87b32f61511d6d602880284061d2b
-
SSDEEP
196608:LzLsbA7XOwHwLpnEZkFxq1eBamvlwuC4G7GF+wfprp6LMoWe6KyFPF9:LzgA7X3kxq1ePvqua7GF+wfbBe6K+9
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2024-04-16_43dba6e30b941303a5df069755079425_ryuk
Files
-
2024-04-16_43dba6e30b941303a5df069755079425_ryuk.exe windows:5 windows x64 arch:x64
9d8fc1056847c977b19750e23d1aa9bd
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
PDB Paths
Imports
kernel32
GetModuleHandleA
SetCurrentDirectoryW
SetFilePointer
GetSystemDefaultLCID
CopyFileExW
DosDateTimeToFileTime
GetDiskFreeSpaceExW
GetSystemTimeAdjustment
SetThreadPriority
SuspendThread
CreateSemaphoreA
DeleteFileA
GetFileAttributesExA
GetFileInformationByHandle
LockFile
UnlockFile
GetHandleInformation
SetHandleInformation
ReleaseSemaphore
CreatePipe
GetEnvironmentStrings
FreeEnvironmentStringsA
GetExitCodeProcess
CreateProcessA
FlushViewOfFile
GetDriveTypeW
PeekNamedPipe
GetFullPathNameW
GetFileAttributesExW
GetLocaleInfoA
GetProcessHeap
HeapSize
HeapFree
HeapReAlloc
HeapAlloc
HeapDestroy
ReadFile
GetFileSize
WaitForSingleObjectEx
QueueUserAPC
GetCurrentThread
FindResourceW
GetModuleHandleW
LoadLibraryExW
CreateEventA
CreateMutexA
SizeofResource
LoadResource
Sleep
WaitForSingleObject
DecodePointer
GetUserDefaultLCID
CreateEventW
WaitForMultipleObjects
lstrcpyW
lstrcpyA
DebugBreak
WideCharToMultiByte
MultiByteToWideChar
WriteConsoleW
SetStdHandle
SetEnvironmentVariableW
SetEnvironmentVariableA
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetCommandLineA
GetOEMCP
IsValidCodePage
FindFirstFileExW
ReadConsoleW
GetConsoleMode
GetConsoleCP
EnumSystemLocalesW
IsValidLocale
GetFileType
GetACP
GetStdHandle
ExitProcess
GetVersionExW
CreateFileW
lstrlenA
GetLocalTime
CreateThread
DeleteFileW
OutputDebugStringW
CloseHandle
ResetEvent
SetEvent
TryEnterCriticalSection
GetThreadLocale
CompareStringW
MulDiv
LeaveCriticalSection
EnterCriticalSection
GetCurrentThreadId
GlobalUnlock
GlobalLock
FormatMessageW
GetProcAddress
FreeLibrary
FindFirstFileW
CreateDirectoryW
lstrcpynW
FindClose
GetCommandLineW
lstrlenW
lstrcmpiW
lstrcmpW
LocalFree
QueryActCtxW
FindActCtxSectionStringW
DeactivateActCtx
ActivateActCtx
CreateActCtxW
GetTempFileNameW
GetTempPathW
OutputDebugStringA
GetModuleHandleExW
GetModuleFileNameW
LoadLibraryW
lstrcatW
DeleteCriticalSection
InitializeCriticalSectionAndSpinCount
SetLastError
GetLastError
RaiseException
GlobalFree
FormatMessageA
FreeLibraryAndExitThread
ResumeThread
ExitThread
RtlPcToFileHeader
RtlUnwindEx
GetStartupInfoW
IsProcessorFeaturePresent
TerminateProcess
SetUnhandledExceptionFilter
UnhandledExceptionFilter
RtlVirtualUnwind
RtlLookupFunctionEntry
RtlCaptureContext
ProcessIdToSessionId
LCMapStringW
GetSystemInfo
VirtualProtect
VirtualQuery
LoadLibraryExA
VirtualAlloc
VirtualFree
GetCurrentProcessId
ReleaseMutex
MapViewOfFile
UnmapViewOfFile
CreateFileMappingA
GetVersionExA
SetCriticalSectionSpinCount
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
GetFileSizeEx
FlushFileBuffers
SetEndOfFile
SetFilePointerEx
CreateFileMappingW
CreateFileA
MoveFileA
GetOverlappedResult
WriteFile
GetLocaleInfoW
GetNumberFormatW
OpenThread
InitializeCriticalSection
GetSystemTime
SystemTimeToTzSpecificLocalTime
SystemTimeToFileTime
FileTimeToDosDateTime
lstrcmpiA
GetCurrentProcess
GetTickCount
QueryPerformanceCounter
GetSystemTimeAsFileTime
GetTimeZoneInformation
FileTimeToSystemTime
CreateMutexW
GetCurrentDirectoryW
RemoveDirectoryW
GetFileAttributesW
FindNextFileW
GetTimeFormatW
GetDateFormatW
FileTimeToLocalFileTime
lstrcmpA
DuplicateHandle
GlobalSize
IsBadWritePtr
IsBadReadPtr
lstrcpynA
FindFirstFileA
MoveFileExW
QueryPerformanceFrequency
GlobalMemoryStatusEx
HeapCompact
GetProcessHandleCount
LocalFileTimeToFileTime
CompareFileTime
LockResource
FindResourceExW
GetComputerNameW
GlobalReAlloc
LoadLibraryA
TerminateThread
GetCalendarInfoW
FreeResource
ExpandEnvironmentStringsW
FindResourceA
GetEnvironmentVariableW
IsDebuggerPresent
EncodePointer
InitializeSListHead
InterlockedPopEntrySList
InterlockedPushEntrySList
FlushInstructionCache
GetStringTypeW
GetCPInfo
GlobalAlloc
user32
DestroyWindow
ShowWindow
SetLayeredWindowAttributes
CreateDialogParamW
CreateDialogIndirectParamW
DialogBoxParamW
DialogBoxIndirectParamW
SetForegroundWindow
MsgWaitForMultipleObjects
GetClassInfoExW
MoveWindow
IsIconic
GetWindowTextLengthA
GetWindowTextA
SetWindowTextA
GetWindowDC
ReleaseDC
GetWindowLongW
CreatePopupMenu
MonitorFromPoint
IsCharAlphaNumericW
IsCharAlphaW
GetWindowTextW
InvalidateRect
GetMonitorInfoW
MonitorFromWindow
GetWindow
MapWindowPoints
InflateRect
GetGuiResources
GetProcessDefaultLayout
IsClipboardFormatAvailable
RegisterClipboardFormatW
GetClipboardData
LoadCursorW
SetCursor
CharUpperBuffW
CharUpperW
EmptyClipboard
SetClipboardData
SetWindowLongW
SystemParametersInfoW
RegisterWindowMessageA
DrawAnimatedRects
CloseClipboard
OpenClipboard
CharLowerBuffW
wsprintfA
IsWindowEnabled
InsertMenuW
TrackPopupMenuEx
ClientToScreen
FillRect
GetClassLongPtrW
CheckMenuRadioItem
DrawIconEx
GetSysColorBrush
CharLowerBuffA
SetWindowPos
SetWindowLongPtrW
GetSysColor
ScreenToClient
MessageBeep
GetWindowRect
PostMessageW
DefWindowProcW
RegisterClassExW
CreateWindowExW
LoadMenuW
DestroyMenu
GetSubMenu
GetMenuItemID
TrackPopupMenu
SetMenuDefaultItem
SetActiveWindow
RedrawWindow
GetCursorPos
SetParent
EnumChildWindows
MessageBoxW
wsprintfW
GetParent
GetDesktopWindow
CloseWindow
RegisterClassW
GetWindowLongPtrW
GetDC
CallWindowProcW
CharNextW
PostThreadMessageW
PeekMessageW
DispatchMessageW
TranslateMessage
GetMessageW
IntersectRect
EndPaint
BeginPaint
GetDlgCtrlID
UpdateWindow
GetSystemMetrics
IsWindowVisible
PostQuitMessage
OffsetRect
CopyRect
GetForegroundWindow
GetFocus
FindWindowW
GetClassNameW
LoadIconW
DestroyIcon
LoadImageW
GetClientRect
SetWindowTextW
EnableWindow
SetFocus
SendDlgItemMessageW
SetDlgItemTextW
GetDlgItemInt
SetDlgItemInt
EndDialog
SendMessageW
GetWindowTextLengthW
GetDlgItemTextW
CharUpperBuffA
GetDlgItem
UnregisterClassW
IsWindow
GetActiveWindow
gdi32
PlayEnhMetaFileRecord
GetTextMetricsW
GetWorldTransform
SetViewportExtEx
SetViewportOrgEx
SetWindowExtEx
SetWindowOrgEx
GdiSetBatchLimit
GdiGetBatchLimit
CreateICW
ExtEscape
GetObjectType
RestoreDC
SaveDC
SetGraphicsMode
SetPolyFillMode
SetTextAlign
SetWorldTransform
StartDocW
EndDoc
EnumEnhMetaFile
CreateEnhMetaFileW
CloseEnhMetaFile
SetMetaFileBitsEx
SetMapMode
PlayMetaFile
GetWindowExtEx
GetViewportExtEx
GetTextAlign
GetRegionData
GetClipRgn
GetBkMode
GetDCPenColor
GetDCBrushColor
GetBkColor
DeleteMetaFile
CreateRectRgn
CombineRgn
CreateRectRgnIndirect
ExcludeClipRect
Polygon
GetCharacterPlacementW
GetGlyphIndicesW
GetCharWidthI
GetKerningPairsW
GetTextExtentPoint32W
TranslateCharsetInfo
AddFontMemResourceEx
GetICMProfileW
RemoveFontResourceExW
AddFontResourceExW
GetFontData
EnumFontFamiliesExW
ResetDCW
CreateSolidBrush
DeleteObject
SetBkColor
SetBkMode
GetObjectW
ExtTextOutW
DeleteDC
GetDeviceCaps
CreateFontIndirectW
GetStockObject
GetViewportOrgEx
GetWindowOrgEx
SetTextColor
BitBlt
CreateCompatibleBitmap
CreateCompatibleDC
CreatePen
IntersectClipRect
LineTo
SelectObject
MoveToEx
CopyEnhMetaFileW
SetStretchBltMode
SetWinMetaFileBits
GetEnhMetaFileHeader
SetEnhMetaFileBits
DeleteEnhMetaFile
GdiFlush
LPtoDP
DPtoLP
CreateDIBSection
PlayEnhMetaFile
GetEnhMetaFileBits
StretchDIBits
StretchBlt
SetDIBitsToDevice
SelectPalette
RealizePalette
GetMetaFileBitsEx
GetDIBits
CreatePalette
GetOutlineTextMetricsW
PolyBezierTo
ExtCreatePen
StrokePath
SetMiterLimit
SelectClipPath
PolyDraw
FillPath
EndPath
CloseFigure
BeginPath
AbortDoc
EndPage
StartPage
RemoveFontMemResourceEx
advapi32
InitializeSecurityDescriptor
LookupAccountSidW
SetSecurityDescriptorGroup
SetSecurityDescriptorOwner
CopySid
GetUserNameW
RegQueryValueExA
RegOpenKeyW
CryptGenRandom
CryptDestroyHash
CryptCreateHash
CryptGetHashParam
RegOpenKeyExA
AddAccessAllowedAce
AllocateAndInitializeSid
FreeSid
InitializeAcl
CryptGetProvParam
CryptSetProvParam
CryptReleaseContext
CryptAcquireContextW
GetSidSubAuthority
GetSidIdentifierAuthority
RegCloseKey
RegCreateKeyExW
RegDeleteKeyW
RegDeleteValueW
RegEnumKeyExW
RegOpenKeyExW
RegQueryInfoKeyW
RegSetValueExW
SetSecurityDescriptorDacl
RegEnumValueW
RegQueryValueExW
OpenProcessToken
OpenThreadToken
GetTokenInformation
GetLengthSid
ole32
StringFromGUID2
CoResumeClassObjects
CoGetObjectContext
CoInitializeEx
CoCreateGuid
CoUninitialize
CoRevokeClassObject
CreateStreamOnHGlobal
CLSIDFromProgID
CoTaskMemFree
CoCreateInstance
CoRegisterClassObject
CoFreeUnusedLibraries
CoTaskMemAlloc
IIDFromString
CoTaskMemRealloc
OleRun
CoInitialize
oleaut32
GetErrorInfo
VarDecCmp
VarDecFromStr
VarDateFromStr
VarI4FromStr
VarUdateFromDate
SafeArrayUnlock
SafeArrayLock
SafeArrayDestroy
SafeArrayCreate
VariantTimeToSystemTime
VarR8FromStr
SafeArrayGetVartype
SafeArrayUnaccessData
SafeArrayAccessData
SystemTimeToVariantTime
VariantCopyInd
SysFreeString
SysAllocString
SysStringByteLen
SysAllocStringByteLen
VariantInit
VariantClear
VariantCopy
VariantChangeType
SysStringLen
LoadTypeLi
LoadRegTypeLi
SysAllocStringLen
CreateDispTypeInfo
CreateStdDispatch
VarUI4FromStr
RegisterTypeLi
UnRegisterTypeLi
RegisterTypeLibForUser
UnRegisterTypeLibForUser
ntdll
NtReleaseKeyedEvent
NtWaitForKeyedEvent
NtCreateKeyedEvent
shlwapi
ord156
UrlCombineW
UrlIsW
UrlEscapeW
PathCreateFromUrlW
StrCmpNIW
StrToIntW
PathIsURLW
StrCmpLogicalW
ord354
StrStrIA
StrToIntExW
UrlUnescapeW
PathUnExpandEnvStringsW
SHDeleteKeyW
StrFormatByteSizeW
PathCanonicalizeW
PathStripPathW
PathIsRelativeW
PathFindFileNameW
PathCombineW
StrRChrW
StrRChrA
StrCpyNW
comctl32
ImageList_LoadImageW
_TrackMouseEvent
rpcrt4
RpcMgmtStopServerListening
UuidFromStringW
RpcServerUnregisterIf
RpcServerRegisterIf
RpcServerListen
RpcServerUseProtseqEpA
NdrServerCall2
wininet
FtpCreateDirectoryW
InternetGetLastResponseInfoW
HttpQueryInfoW
HttpSendRequestW
HttpOpenRequestW
InternetSetStatusCallbackW
InternetSetOptionW
InternetReadFile
InternetConnectW
InternetCloseHandle
FtpRenameFileW
FtpDeleteFileW
FtpPutFileW
FtpFindFirstFileW
InternetFindNextFileW
HttpEndRequestW
HttpSendRequestExW
HttpAddRequestHeadersW
FtpOpenFileW
InternetQueryOptionW
InternetQueryDataAvailable
InternetWriteFile
FtpRemoveDirectoryW
InternetSetCookieW
InternetOpenW
InternetCrackUrlW
InternetAttemptConnect
winmm
timeGetTime
timeEndPeriod
timeBeginPeriod
version
VerQueryValueW
GetFileVersionInfoW
GetFileVersionInfoSizeW
mscms
TranslateColors
CreateMultiProfileTransform
GetColorProfileHeader
IsColorProfileValid
CloseColorProfile
GetColorDirectoryW
OpenColorProfileW
DeleteColorTransform
psapi
GetProcessMemoryInfo
crypt32
CertCloseStore
CertEnumCertificatesInStore
CertFindCertificateInStore
CertDuplicateCertificateContext
CertFreeCertificateContext
CertDuplicateStore
CryptMsgGetParam
CryptMsgUpdate
CertGetCertificateContextProperty
CertVerifyRevocation
CertCompareCertificate
CryptHashCertificate
CertVerifyTimeValidity
CertFindExtension
CryptMsgClose
CryptMsgOpenToDecode
CryptMsgCalculateEncodedLength
CryptMsgOpenToEncode
CertGetIntendedKeyUsage
CryptAcquireCertificatePrivateKey
CertNameToStrW
CertGetNameStringW
CryptSignMessage
CertOpenSystemStoreW
CertCreateCertificateChainEngine
CertFreeCertificateChainEngine
CertGetCertificateChain
CertFreeCertificateChain
PFXImportCertStore
CryptDecodeObjectEx
CryptEncodeObject
CryptEncodeObjectEx
CryptMsgControl
ws2_32
getprotobyname
ntohs
htonl
WSAStartup
gethostbyname
socket
setsockopt
send
recv
htons
getsockopt
connect
closesocket
WSAGetLastError
select
shutdown
sendto
recvfrom
listen
getsockname
getpeername
ioctlsocket
bind
accept
__WSAFDIsSet
ntohl
gethostbyaddr
getprotobynumber
WSACleanup
winspool.drv
GetPrinterW
DeviceCapabilitiesW
usp10
ScriptBreak
ScriptShape
ScriptFreeCache
ScriptItemize
ScriptIsComplex
ScriptPlace
uxtheme
CloseThemeData
DrawThemeBackground
GetThemeInt
IsThemeActive
DrawThemeParentBackground
SetWindowTheme
OpenThemeData
comdlg32
GetSaveFileNameW
GetOpenFileNameW
CommDlgExtendedError
Exports
Exports
GetExecutionEnvironment
PRP_DestroyNakedCondVar
PRP_NakedBroadcast
PRP_NakedNotify
PRP_NakedWait
PRP_NewNakedCondVar
PRP_TryLock
PR_Abort
PR_Accept
PR_AcceptRead
PR_Access
PR_AddWaitFileDesc
PR_AllocFileDesc
PR_Assert
PR_AssertCurrentThreadInMonitor
PR_AssertCurrentThreadOwnsLock
PR_AtomicAdd
PR_AtomicDecrement
PR_AtomicIncrement
PR_AtomicSet
PR_AttachThread
PR_AttachThreadGCAble
PR_Available
PR_Available64
PR_Bind
PR_BlockClockInterrupts
PR_BlockInterrupt
PR_CEnterMonitor
PR_CExitMonitor
PR_CNotify
PR_CNotifyAll
PR_CSetOnMonitorRecycle
PR_CWait
PR_CallOnce
PR_CallOnceWithArg
PR_Calloc
PR_CancelWaitFileDesc
PR_CancelWaitGroup
PR_ChangeFileDescNativeHandle
PR_Cleanup
PR_ClearInterrupt
PR_ClearThreadGCAble
PR_Close
PR_CloseFileMap
PR_Connect
PR_ConnectContinue
PR_ConvertIPv4AddrToIPv6
PR_CreateFileMap
PR_CreateIOLayer
PR_CreateIOLayerStub
PR_CreateMWaitEnumerator
PR_CreatePipe
PR_CreateProcess
PR_CreateProcessDetached
PR_CreateSocketPollFd
PR_CreateStack
PR_CreateThread
PR_CreateThreadGCAble
PR_CreateWaitGroup
PR_Delete
PR_DestroyCondVar
PR_DestroyLock
PR_DestroyMWaitEnumerator
PR_DestroyMonitor
PR_DestroyProcessAttr
PR_DestroyRWLock
PR_DestroySocketPollFd
PR_DestroyStack
PR_DestroyWaitGroup
PR_DetachProcess
PR_DetachThread
PR_DisableClockInterrupts
PR_EmulateAcceptRead
PR_EmulateSendFile
PR_EnableClockInterrupts
PR_EnterMonitor
PR_EnumerateAddrInfo
PR_EnumerateHostEnt
PR_EnumerateThreads
PR_EnumerateWaitGroup
PR_ErrorInstallCallback
PR_ErrorInstallTable
PR_ErrorLanguages
PR_ErrorToName
PR_ErrorToString
PR_ExitMonitor
PR_ExplodeTime
PR_FD_CLR
PR_FD_ISSET
PR_FD_NCLR
PR_FD_NISSET
PR_FD_NSET
PR_FD_SET
PR_FD_ZERO
PR_FileDesc2NativeHandle
PR_FindFunctionSymbol
PR_FindFunctionSymbolAndLibrary
PR_FindSymbol
PR_FindSymbolAndLibrary
PR_FormatTime
PR_FormatTimeUSEnglish
PR_Free
PR_FreeAddrInfo
PR_FreeFileDesc
PR_FreeLibraryName
PR_GMTParameters
PR_GetAddrInfoByName
PR_GetCanonNameFromAddrInfo
PR_GetConnectStatus
PR_GetCurrentThread
PR_GetDefaultIOMethods
PR_GetDescType
PR_GetEnv
PR_GetError
PR_GetErrorText
PR_GetErrorTextLength
PR_GetFileInfo
PR_GetFileInfo64
PR_GetFileMethods
PR_GetHostByAddr
PR_GetHostByName
PR_GetIPNodeByName
PR_GetIdentitiesLayer
PR_GetInheritedFD
PR_GetLayersIdentity
PR_GetLibraryFilePathname
PR_GetLibraryName
PR_GetLibraryPath
PR_GetMemMapAlignment
PR_GetMonitorEntryCount
PR_GetNameForIdentity
PR_GetOSError
PR_GetOpenFileInfo
PR_GetOpenFileInfo64
PR_GetPageShift
PR_GetPageSize
PR_GetPeerName
PR_GetPipeMethods
PR_GetProtoByName
PR_GetProtoByNumber
PR_GetSP
PR_GetSockName
PR_GetSocketOption
PR_GetSpecialFD
PR_GetSysfdTableMax
PR_GetTCPMethods
PR_GetThreadAffinityMask
PR_GetThreadID
PR_GetThreadName
PR_GetThreadPriority
PR_GetThreadPrivate
PR_GetThreadScope
PR_GetThreadState
PR_GetThreadType
PR_GetUDPMethods
PR_GetUniqueIdentity
PR_GetVersion
PR_ImplodeTime
PR_ImportFile
PR_ImportPipe
PR_ImportTCPSocket
PR_ImportUDPSocket
PR_Init
PR_Initialize
PR_InitializeNetAddr
PR_Initialized
PR_Interrupt
PR_IntervalNow
PR_IntervalToMicroseconds
PR_IntervalToMilliseconds
PR_IntervalToSeconds
PR_IsNetAddrType
PR_JoinThread
PR_KillProcess
PR_Listen
PR_LoadLibrary
PR_LoadLibraryWithFlags
PR_LoadStaticLibrary
PR_LocalTimeParameters
PR_Lock
PR_LockFile
PR_LogFlush
PR_LogPrint
PR_Malloc
PR_MemMap
PR_MemUnmap
PR_MicrosecondsToInterval
PR_MillisecondsToInterval
PR_NetAddrToString
PR_NewCondVar
PR_NewLock
PR_NewLogModule
PR_NewMonitor
PR_NewNamedMonitor
PR_NewProcessAttr
PR_NewRWLock
PR_NewTCPSocket
PR_NewTCPSocketPair
PR_NewThreadPrivateIndex
PR_NewUDPSocket
PR_NormalizeTime
PR_Notify
PR_NotifyAll
PR_NotifyAllCondVar
PR_NotifyCondVar
PR_Now
PR_Open
PR_OpenFile
PR_OpenTCPSocket
PR_OpenUDPSocket
PR_ParseTimeString
PR_ParseTimeStringToExplodedTime
PR_Poll
PR_PopIOLayer
PR_ProcessAttrSetCurrentDirectory
PR_ProcessAttrSetInheritableFD
PR_ProcessAttrSetStdioRedirect
PR_ProcessExit
PR_PushIOLayer
PR_RWLock_Rlock
PR_RWLock_Unlock
PR_RWLock_Wlock
PR_Read
PR_Realloc
PR_Recv
PR_RecvFrom
PR_Rename
PR_ResetProcessAttr
PR_ResumeAll
PR_SecondsToInterval
PR_Seek
PR_Seek64
PR_Select
PR_Send
PR_SendFile
PR_SendTo
PR_SetCPUAffinityMask
PR_SetConcurrency
PR_SetCurrentThreadName
PR_SetEnv
PR_SetError
PR_SetErrorText
PR_SetFDCacheSize
PR_SetFDInheritable
PR_SetLibraryPath
PR_SetLogBuffering
PR_SetLogFile
PR_SetNetAddr
PR_SetSocketOption
PR_SetStdioRedirect
PR_SetSysfdTableSize
PR_SetThreadAffinityMask
PR_SetThreadGCAble
PR_SetThreadPriority
PR_SetThreadPrivate
PR_SetThreadRecycleMode
PR_Shutdown
PR_Sleep
PR_Socket
PR_StackPop
PR_StackPush
PR_Stat
PR_StringToNetAddr
PR_SuspendAll
PR_Sync
PR_SyncMemMap
PR_TLockFile
PR_TestAndEnterMonitor
PR_TestAndLock
PR_TicksPerSecond
PR_TransmitFile
PR_USPacificTimeParameters
PR_UnblockClockInterrupts
PR_UnblockInterrupt
PR_UnloadLibrary
PR_Unlock
PR_UnlockFile
PR_VersionCheck
PR_Wait
PR_WaitCondVar
PR_WaitProcess
PR_WaitRecvReady
PR_Write
PR_Writev
PR_Yield
PR_cnvtf
PR_dtoa
PR_fprintf
PR_htonl
PR_htonll
PR_htons
PR_ntohl
PR_ntohll
PR_ntohs
PR_smprintf
PR_smprintf_free
PR_snprintf
PR_sprintf_append
PR_sscanf
PR_strtod
PR_sxprintf
PR_vfprintf
PR_vsmprintf
PR_vsnprintf
PR_vsprintf_append
PR_vsxprintf
PT_FPrintStats
SetExecutionEnvironment
_PR_AddSleepQ
_PR_CreateThread
_PR_DelSleepQ
_PR_GetPrimordialCPU
_PR_MD_FREE_CV
_PR_MD_INIT_LOCKS
_PR_MD_NEW_CV
_PR_MD_NEW_LOCK
_PR_MD_NOTIFYALL_CV
_PR_MD_NOTIFY_CV
_PR_MD_UNLOCK
_PR_MD_WAIT_CV
_PR_NativeCreateThread
_pr_push_ipv6toipv4_layer
_pr_test_ipv6_socket
Sections
.text Size: 15.3MB - Virtual size: 15.3MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 5.6MB - Virtual size: 5.6MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 292KB - Virtual size: 864KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.pdata Size: 677KB - Virtual size: 676KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.resStr Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.gfids Size: 512B - Virtual size: 384B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.tls Size: 512B - Virtual size: 9B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
_RDATA Size: 32KB - Virtual size: 32KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 1.0MB - Virtual size: 1.0MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 716KB - Virtual size: 720KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE