Static task
static1
Behavioral task
behavioral1
Sample
RPG2000RTP.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
RPG2000RTP.exe
Resource
win10v2004-20240802-en
Behavioral task
behavioral3
Sample
data/RPG_RT.exe
Resource
win7-20240708-en
Behavioral task
behavioral4
Sample
data/RPG_RT.exe
Resource
win10v2004-20240802-en
General
-
Target
Wadanohara Reboot English Patch v2.0.zip
-
Size
15.6MB
-
MD5
8db0b5831930b4b58dce189b97200873
-
SHA1
ed7e01c47e3f97dff716c4867fbd68aca4c99c30
-
SHA256
703ea5f0441ab473032dfb724c29da3ee0e448dde36e171ce32bd0c0738eea87
-
SHA512
cf8ad2f3ad7b582aecc7a9922caa225381d6330a2ac2c0364bdf0746f16d1b039af4031324b82c356c1f76f77a10d803b25a96c9a7e40ab9b7afb88d6df40eb8
-
SSDEEP
393216:Vh3hCZNaJSzCJ5YGsVgxHLe/yiPVXhju1c51l9MRmvL:bYNaJSujYGsVgxre/3Xdu1cjPjvL
Malware Config
Signatures
-
Unsigned PE 2 IoCs
Checks for missing Authenticode signature.
resource unpack001/RPG2000RTP.exe unpack001/data/RPG_RT.exe
Files
-
Wadanohara Reboot English Patch v2.0.zip.zip
-
MS Gothic.ttf
-
RPG2000RTP.exe.exe windows:4 windows x86 arch:x86
4204e1fe9e2e0a7f6bec612446ce171b
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
SetFilePointer
CreateDirectoryA
GetPrivateProfileStringA
SetFileAttributesA
SetFileTime
LocalFileTimeToFileTime
WriteFile
DosDateTimeToFileTime
GetProcAddress
DeleteFileA
FreeLibrary
GetTempFileNameA
LoadLibraryA
GetTempPathA
GetSystemDirectoryA
FormatMessageA
lstrcmpA
lstrcpynA
GetLastError
ReadFile
FindResourceA
CompareStringA
CreateProcessA
WaitForSingleObject
GetStartupInfoA
RemoveDirectoryA
FindNextFileA
ExitProcess
MulDiv
GetSystemDefaultLCID
GetModuleFileNameA
lstrcatA
GetFileAttributesA
CreateFileA
GetFileSize
CreateFileMappingA
MapViewOfFile
UnmapViewOfFile
Sleep
GetDiskFreeSpaceA
FindFirstFileA
FindClose
lstrcpyA
lstrlenA
LockResource
LoadResource
GetWindowsDirectoryA
CloseHandle
SetStdHandle
LCMapStringW
LCMapStringA
RtlUnwind
GetFileType
GetStdHandle
SetHandleCount
FlushFileBuffers
GetOEMCP
GetACP
GetCPInfo
GetEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsW
FreeEnvironmentStringsA
UnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
MultiByteToWideChar
GetStringTypeW
GetStringTypeA
WideCharToMultiByte
VirtualAlloc
VirtualFree
HeapCreate
HeapDestroy
GetVersion
GetCommandLineA
GetModuleHandleA
HeapFree
HeapAlloc
user32
SendMessageA
TranslateMessage
MessageBoxA
wsprintfA
GetWindowLongA
GetParent
SetWindowTextA
GetWindowTextA
GetWindow
SetDlgItemTextA
EndDialog
SendDlgItemMessageA
CharNextA
DialogBoxParamA
GetClassNameA
IsCharAlphaA
GetDesktopWindow
GetDlgItemTextA
KillTimer
EnableWindow
SetTimer
PostMessageA
SetFocus
CreateDialogParamA
DestroyWindow
GetDlgItem
GetDC
ReleaseDC
ScreenToClient
SetWindowLongA
CreateWindowExA
SystemParametersInfoA
GetClientRect
MapWindowPoints
SetWindowPos
LoadStringA
MessageBeep
GetSysColor
DispatchMessageA
PeekMessageA
GetWindowRect
gdi32
CreateFontIndirectA
TextOutA
SetTextColor
SelectObject
SetBkMode
GetTextExtentPointA
GetDeviceCaps
GetObjectA
DeleteObject
comctl32
ord17
PropertySheetA
advapi32
RegOpenKeyExA
RegQueryValueExA
RegCloseKey
shell32
ShellExecuteA
SHBrowseForFolderA
SHGetPathFromIDListA
lz32
LZOpenFileA
LZCopy
LZClose
Sections
.text Size: 68KB - Virtual size: 67KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 12KB - Virtual size: 27KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 41KB - Virtual size: 40KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
-
data/Map0001.lmu
-
data/Map0002.lmu
-
data/Map0003.lmu
-
data/Map0004.lmu
-
data/Map0005.lmu
-
data/Map0006.lmu
-
data/Map0007.lmu
-
data/Map0008.lmu
-
data/Map0009.lmu
-
data/Map0010.lmu
-
data/Map0011.lmu
-
data/Map0012.lmu
-
data/Map0013.lmu
-
data/Map0014.lmu
-
data/Map0015.lmu
-
data/Map0016.lmu
-
data/Map0017.lmu
-
data/Map0018.lmu
-
data/Map0019.lmu
-
data/Map0020.lmu
-
data/Map0021.lmu
-
data/Map0022.lmu
-
data/Map0023.lmu
-
data/Map0024.lmu
-
data/Map0025.lmu
-
data/Map0026.lmu
-
data/Map0027.lmu
-
data/Map0028.lmu
-
data/Map0029.lmu
-
data/Map0030.lmu
-
data/Map0031.lmu
-
data/Map0032.lmu
-
data/Map0033.lmu
-
data/Map0034.lmu
-
data/Map0035.lmu
-
data/Map0036.lmu
-
data/Map0037.lmu
-
data/Map0038.lmu
-
data/Map0039.lmu
-
data/Map0040.lmu
-
data/Map0041.lmu
-
data/Map0042.lmu
-
data/Map0043.lmu
-
data/Map0044.lmu
-
data/Map0045.lmu
-
data/Map0046.lmu
-
data/Map0047.lmu
-
data/Map0048.lmu
-
data/Map0049.lmu
-
data/Map0050.lmu
-
data/Map0051.lmu
-
data/Map0052.lmu
-
data/Map0053.lmu
-
data/Map0054.lmu
-
data/Map0055.lmu
-
data/Map0056.lmu
-
data/Map0057.lmu
-
data/Map0058.lmu
-
data/Map0059.lmu
-
data/Map0060.lmu
-
data/Map0061.lmu
-
data/Map0062.lmu
-
data/Map0063.lmu
-
data/Map0064.lmu
-
data/Map0065.lmu
-
data/Map0066.lmu
-
data/Map0067.lmu
-
data/Map0068.lmu
-
data/Map0069.lmu
-
data/Map0070.lmu
-
data/Map0071.lmu
-
data/Map0072.lmu
-
data/Map0073.lmu
-
data/Map0074.lmu
-
data/Map0075.lmu
-
data/Map0076.lmu
-
data/Map0077.lmu
-
data/Map0078.lmu
-
data/Map0079.lmu
-
data/Map0080.lmu
-
data/Map0081.lmu
-
data/Map0082.lmu
-
data/Map0083.lmu
-
data/Map0084.lmu
-
data/Map0085.lmu
-
data/Map0086.lmu
-
data/Map0087.lmu
-
data/Map0088.lmu
-
data/Map0089.lmu
-
data/Map0090.lmu
-
data/Map0091.lmu
-
data/Map0092.lmu
-
data/Map0093.lmu
-
data/Map0094.lmu
-
data/Map0095.lmu
-
data/Map0096.lmu
-
data/Map0097.lmu
-
data/Map0098.lmu
-
data/Map0099.lmu
-
data/Map0100.lmu
-
data/Map0101.lmu
-
data/Map0102.lmu
-
data/Map0103.lmu
-
data/Map0104.lmu
-
data/Map0105.lmu
-
data/Map0106.lmu
-
data/Map0107.lmu
-
data/Map0108.lmu
-
data/Map0109.lmu
-
data/Map0110.lmu
-
data/Map0111.lmu
-
data/Map0112.lmu
-
data/Map0113.lmu
-
data/Map0114.lmu
-
data/Map0115.lmu
-
data/Map0116.lmu
-
data/Map0117.lmu
-
data/Map0118.lmu
-
data/Map0119.lmu
-
data/Map0120.lmu
-
data/Map0121.lmu
-
data/Map0122.lmu
-
data/Map0123.lmu
-
data/Map0124.lmu
-
data/Map0125.lmu
-
data/Map0126.lmu
-
data/Map0127.lmu
-
data/Map0128.lmu
-
data/Map0129.lmu
-
data/Map0130.lmu
-
data/Map0131.lmu
-
data/Map0132.lmu
-
data/Map0133.lmu
-
data/Map0134.lmu
-
data/Map0135.lmu
-
data/Map0136.lmu
-
data/Map0137.lmu
-
data/Map0138.lmu
-
data/Map0139.lmu
-
data/Map0140.lmu
-
data/Map0141.lmu
-
data/Map0142.lmu
-
data/Map0143.lmu
-
data/Map0144.lmu
-
data/Map0145.lmu
-
data/Map0146.lmu
-
data/Map0147.lmu
-
data/Map0148.lmu
-
data/Map0149.lmu
-
data/Map0150.lmu
-
data/Map0151.lmu
-
data/Map0152.lmu
-
data/Map0153.lmu
-
data/Map0154.lmu
-
data/Map0155.lmu
-
data/Map0156.lmu
-
data/Map0157.lmu
-
data/Map0158.lmu
-
data/Map0159.lmu
-
data/Map0160.lmu
-
data/Map0161.lmu
-
data/Map0162.lmu
-
data/Map0163.lmu
-
data/Map0164.lmu
-
data/Map0165.lmu
-
data/Map0166.lmu
-
data/Map0167.lmu
-
data/Map0168.lmu
-
data/Map0169.lmu
-
data/Map0170.lmu
-
data/Map0171.lmu
-
data/Map0172.lmu
-
data/Map0173.lmu
-
data/Map0174.lmu
-
data/Map0175.lmu
-
data/Map0176.lmu
-
data/Map0177.lmu
-
data/Map0178.lmu
-
data/Map0179.lmu
-
data/Map0180.lmu
-
data/Map0181.lmu
-
data/Map0182.lmu
-
data/Map0183.lmu
-
data/Map0184.lmu
-
data/Map0185.lmu
-
data/Map0186.lmu
-
data/Map0187.lmu
-
data/Map0188.lmu
-
data/Map0189.lmu
-
data/Map0190.lmu
-
data/Map0191.lmu
-
data/Map0192.lmu
-
data/Map0193.lmu
-
data/Map0194.lmu
-
data/Map0195.lmu
-
data/Map0196.lmu
-
data/Map0197.lmu
-
data/Map0198.lmu
-
data/Map0199.lmu
-
data/Map0200.lmu
-
data/Map0201.lmu
-
data/Map0202.lmu
-
data/Map0203.lmu
-
data/Map0204.lmu
-
data/Map0205.lmu
-
data/Map0206.lmu
-
data/Map0207.lmu
-
data/Map0208.lmu
-
data/Map0209.lmu
-
data/Map0210.lmu
-
data/Map0211.lmu
-
data/Map0212.lmu
-
data/Map0213.lmu
-
data/Map0214.lmu
-
data/Map0215.lmu
-
data/Map0216.lmu
-
data/Map0217.lmu
-
data/Map0218.lmu
-
data/Map0219.lmu
-
data/Map0220.lmu
-
data/Map0221.lmu
-
data/Map0222.lmu
-
data/Map0223.lmu
-
data/Map0224.lmu
-
data/Map0225.lmu
-
data/Map0226.lmu
-
data/Map0227.lmu
-
data/Map0228.lmu
-
data/Map0229.lmu
-
data/Map0230.lmu
-
data/Map0231.lmu
-
data/Map0232.lmu
-
data/Map0233.lmu
-
data/Map0234.lmu
-
data/Map0235.lmu
-
data/Map0236.lmu
-
data/Map0237.lmu
-
data/Map0238.lmu
-
data/Map0239.lmu
-
data/Map0240.lmu
-
data/Map0241.lmu
-
data/Map0242.lmu
-
data/Map0243.lmu
-
data/Map0244.lmu
-
data/Map0245.lmu
-
data/Map0246.lmu
-
data/Map0247.lmu
-
data/Map0248.lmu
-
data/Map0249.lmu
-
data/Map0250.lmu
-
data/Map0251.lmu
-
data/Map0252.lmu
-
data/Map0253.lmu
-
data/Map0254.lmu
-
data/Map0255.lmu
-
data/Map0256.lmu
-
data/Map0257.lmu
-
data/Map0258.lmu
-
data/Map0259.lmu
-
data/Map0260.lmu
-
data/Map0261.lmu
-
data/Map0262.lmu
-
data/Map0263.lmu
-
data/Map0264.lmu
-
data/Map0265.lmu
-
data/Map0266.lmu
-
data/Map0267.lmu
-
data/Map0268.lmu
-
data/Map0269.lmu
-
data/Map0270.lmu
-
data/Map0271.lmu
-
data/Map0272.lmu
-
data/Map0273.lmu
-
data/Map0274.lmu
-
data/Map0275.lmu
-
data/Map0276.lmu
-
data/Map0277.lmu
-
data/Map0278.lmu
-
data/Map0279.lmu
-
data/Map0280.lmu
-
data/Map0281.lmu
-
data/Map0282.lmu
-
data/Map0283.lmu
-
data/Map0284.lmu
-
data/Map0285.lmu
-
data/Map0286.lmu
-
data/Map0287.lmu
-
data/Map0288.lmu
-
data/Map0289.lmu
-
data/Map0290.lmu
-
data/Map0291.lmu
-
data/Map0292.lmu
-
data/Map0293.lmu
-
data/Map0294.lmu
-
data/Map0295.lmu
-
data/Map0296.lmu
-
data/Map0297.lmu
-
data/Map0298.lmu
-
data/Map0299.lmu
-
data/Map0300.lmu
-
data/Map0301.lmu
-
data/Map0302.lmu
-
data/Map0303.lmu
-
data/Map0304.lmu
-
data/Map0305.lmu
-
data/Map0306.lmu
-
data/Map0307.lmu
-
data/Map0308.lmu
-
data/Map0309.lmu
-
data/Map0310.lmu
-
data/Map0311.lmu
-
data/Map0312.lmu
-
data/Map0313.lmu
-
data/Map0314.lmu
-
data/Map0315.lmu
-
data/Map0316.lmu
-
data/Map0317.lmu
-
data/Map0318.lmu
-
data/Map0319.lmu
-
data/Map0320.lmu
-
data/Map0321.lmu
-
data/Map0322.lmu
-
data/Map0323.lmu
-
data/Map0324.lmu
-
data/Map0325.lmu
-
data/Map0326.lmu
-
data/Map0327.lmu
-
data/Map0328.lmu
-
data/Map0329.lmu
-
data/Map0330.lmu
-
data/Map0331.lmu
-
data/Map0332.lmu
-
data/Map0333.lmu
-
data/Map0334.lmu
-
data/Map0335.lmu
-
data/Map0336.lmu
-
data/Map0337.lmu
-
data/Map0338.lmu
-
data/Map0339.lmu
-
data/Map0340.lmu
-
data/Map0341.lmu
-
data/Map0342.lmu
-
data/Map0343.lmu
-
data/Map0344.lmu
-
data/Map0345.lmu
-
data/Map0346.lmu
-
data/Map0347.lmu
-
data/Map0348.lmu
-
data/Map0349.lmu
-
data/Map0350.lmu
-
data/Map0351.lmu
-
data/Map0352.lmu
-
data/Map0353.lmu
-
data/Map0354.lmu
-
data/Map0355.lmu
-
data/Map0356.lmu
-
data/Map0357.lmu
-
data/Map0358.lmu
-
data/Map0359.lmu
-
data/Map0360.lmu
-
data/Map0361.lmu
-
data/Map0362.lmu
-
data/Map0363.lmu
-
data/Map0364.lmu
-
data/Map0365.lmu
-
data/Map0366.lmu
-
data/Map0367.lmu
-
data/Map0368.lmu
-
data/Map0369.lmu
-
data/Map0370.lmu
-
data/Map0371.lmu
-
data/Map0372.lmu
-
data/Map0373.lmu
-
data/Map0374.lmu
-
data/Map0375.lmu
-
data/Map0376.lmu
-
data/Map0377.lmu
-
data/Map0378.lmu
-
data/Map0379.lmu
-
data/Map0380.lmu
-
data/Map0381.lmu
-
data/Map0382.lmu
-
data/Map0383.lmu
-
data/Map0384.lmu
-
data/Map0385.lmu
-
data/Map0386.lmu
-
data/Map0387.lmu
-
data/Map0388.lmu
-
data/Map0389.lmu
-
data/Map0390.lmu
-
data/Map0391.lmu
-
data/Map0392.lmu
-
data/Map0393.lmu
-
data/Map0394.lmu
-
data/Map0395.lmu
-
data/Map0396.lmu
-
data/Map0397.lmu
-
data/Map0398.lmu
-
data/Map0399.lmu
-
data/Map0400.lmu
-
data/Map0401.lmu
-
data/Map0402.lmu
-
data/Map0403.lmu
-
data/Map0404.lmu
-
data/Map0405.lmu
-
data/Map0406.lmu
-
data/Map0407.lmu
-
data/Map0408.lmu
-
data/Map0409.lmu
-
data/Map0410.lmu
-
data/Map0411.lmu
-
data/Map0412.lmu
-
data/Map0413.lmu
-
data/Map0414.lmu
-
data/Map0415.lmu
-
data/Map0416.lmu
-
data/Map0417.lmu
-
data/Map0418.lmu
-
data/Map0419.lmu
-
data/Map0420.lmu
-
data/Map0421.lmu
-
data/Map0422.lmu
-
data/Map0423.lmu
-
data/Map0424.lmu
-
data/Map0425.lmu
-
data/Map0426.lmu
-
data/Map0427.lmu
-
data/Map0428.lmu
-
data/Map0429.lmu
-
data/Map0430.lmu
-
data/Map0431.lmu
-
data/Map0432.lmu
-
data/Map0433.lmu
-
data/Map0434.lmu
-
data/Map0435.lmu
-
data/Map0436.lmu
-
data/Map0437.lmu
-
data/Map0438.lmu
-
data/Map0439.lmu
-
data/Map0440.lmu
-
data/Map0441.lmu
-
data/Map0442.lmu
-
data/Map0443.lmu
-
data/Map0444.lmu
-
data/Map0445.lmu
-
data/Map0446.lmu
-
data/Map0447.lmu
-
data/Map0448.lmu
-
data/Map0449.lmu
-
data/Map0450.lmu
-
data/Map0451.lmu
-
data/Map0452.lmu
-
data/Map0453.lmu
-
data/Map0454.lmu
-
data/Map0455.lmu
-
data/Map0456.lmu
-
data/Map0457.lmu
-
data/Map0458.lmu
-
data/Map0459.lmu
-
data/Map0460.lmu
-
data/Map0461.lmu
-
data/Map0462.lmu
-
data/Map0463.lmu
-
data/Map0464.lmu
-
data/Map0465.lmu
-
data/Map0466.lmu
-
data/Map0467.lmu
-
data/Map0468.lmu
-
data/Map0469.lmu
-
data/Map0470.lmu
-
data/Map0471.lmu
-
data/Map0472.lmu
-
data/Map0473.lmu
-
data/Map0474.lmu
-
data/Map0475.lmu
-
data/Map0476.lmu
-
data/Map0477.lmu
-
data/Map0478.lmu
-
data/Map0479.lmu
-
data/Map0480.lmu
-
data/Map0481.lmu
-
data/Map0482.lmu
-
data/Map0483.lmu
-
data/Map0484.lmu
-
data/Map0485.lmu
-
data/Map0486.lmu
-
data/Map0487.lmu
-
data/Map0488.lmu
-
data/Map0489.lmu
-
data/Map0490.lmu
-
data/Map0491.lmu
-
data/Map0492.lmu
-
data/Map0493.lmu
-
data/Map0494.lmu
-
data/Map0495.lmu
-
data/Map0496.lmu
-
data/Map0497.lmu
-
data/Map0498.lmu
-
data/Map0499.lmu
-
data/Map0500.lmu
-
data/Map0501.lmu
-
data/Map0502.lmu
-
data/Map0503.lmu
-
data/Map0504.lmu
-
data/Map0505.lmu
-
data/Map0506.lmu
-
data/Map0507.lmu
-
data/Map0508.lmu
-
data/Map0509.lmu
-
data/Map0510.lmu
-
data/Map0511.lmu
-
data/Map0512.lmu
-
data/Map0513.lmu
-
data/Map0514.lmu
-
data/Map0515.lmu
-
data/Map0516.lmu
-
data/Map0517.lmu
-
data/Map0518.lmu
-
data/Map0519.lmu
-
data/Map0520.lmu
-
data/Map0521.lmu
-
data/Map0522.lmu
-
data/Map0523.lmu
-
data/Map0524.lmu
-
data/Map0525.lmu
-
data/Map0526.lmu
-
data/Map0527.lmu
-
data/Map0528.lmu
-
data/Map0529.lmu
-
data/Map0530.lmu
-
data/Map0531.lmu
-
data/Map0532.lmu
-
data/Map0533.lmu
-
data/Map0534.lmu
-
data/Map0535.lmu
-
data/Map0536.lmu
-
data/Map0537.lmu
-
data/Map0538.lmu
-
data/Map0539.lmu
-
data/Map0540.lmu
-
data/Map0541.lmu
-
data/Map0542.lmu
-
data/Map0543.lmu
-
data/Map0544.lmu
-
data/Map0545.lmu
-
data/Map0546.lmu
-
data/Map0547.lmu
-
data/Map0548.lmu
-
data/Map0549.lmu
-
data/Picture/-2.xyz
-
data/Picture/-3.xyz
-
data/Picture/-4.xyz
-
data/Picture/-8.xyz
-
data/Picture/LЉFႯ(^).xyz
-
data/Picture/LЉFႯ.xyz
-
data/Picture/LЉFႯ2.xyz
-
data/Picture/LЉF炱.xyz
-
data/Picture/LЉFAI.xyz
-
data/Picture/LЉFA^X.xyz
-
data/Picture/LЉFCJ.xyz
-
data/Picture/LЉFC_e.xyz
-
data/Picture/LЉFC[i.xyz
-
data/Picture/LЉFIh.xyz
-
data/Picture/LЉFIh2.xyz
-
data/Picture/LЉFN[~.xyz
-
data/Picture/LЉFV[v.xyz
-
data/Picture/LЉFV[v2.xyz
-
data/Picture/LЉFXe.xyz
-
data/Picture/LЉFZO.xyz
-
data/Picture/LЉF`F[ubh.xyz
-
data/Picture/LЉFgVr.xyz
-
data/Picture/LЉFhs[.xyz
-
data/Picture/LЉFh[Y.xyz
-
data/Picture/LЉFtJ~.xyz
-
data/Picture/LЉFv[.xyz
-
data/Picture/LЉFwJ.xyz
-
data/Picture/LЉFwJ2.xyz
-
data/Picture/LЉFx.xyz
-
data/Picture/LЉFx2.xyz
-
data/Picture/LЉFzt.xyz
-
data/Picture/LЉFzt2.xyz
-
data/Picture/LЉF~l.xyz
-
data/Picture/LЉF~.xyz
-
data/Picture/LЉFJ.xyz
-
data/Picture/LЉF.xyz
-
data/Picture/LЉF[VA.xyz
-
data/Picture/LЉFuR.xyz
-
data/Picture/LЉFCP.xyz
-
data/Picture/LЉFCP2.xyz
-
data/Picture/LЉFw.xyz
-
data/Picture/LЉFCP.xyz
-
data/Picture/LЉF.xyz
-
data/Picture/LЉFLg.xyz
-
data/Picture/LЉF喂.xyz
-
data/Picture/LЉFC1.xyz
-
data/Picture/LЉFC2.xyz
-
data/Picture/LЉFC3.xyz
-
data/Picture/LЉFC4.xyz
-
data/Picture/LЉFC5.xyz
-
data/Picture/LЉFސj.xyz
-
data/Picture/LЉFjEP.xyz
-
data/Picture/LЉFLR.xyz
-
data/Picture/LЉF{.xyz
-
data/Picture/LЉF{2.xyz
-
data/Picture/LЉFC.xyz
-
data/Picture/IFBAD END-1.xyz
-
data/Picture/IFBAD END-2.xyz
-
data/Picture/IFNORMAL END1-0.xyz
-
data/Picture/IFNORMAL END1-1.xyz
-
data/Picture/IFNORMAL END1-2.xyz
-
data/Picture/IFNORMAL END1-3.xyz
-
data/Picture/IFNORMAL END1-4.xyz
-
data/Picture/IFNORMAL END2-0.xyz
-
data/Picture/IFNORMAL END2-1.xyz
-
data/Picture/IFNORMAL END2-2.xyz
-
data/Picture/IFNORMAL END2-3.xyz
-
data/Picture/IFNORMAL END2-4.xyz
-
data/Picture/F.xyz
-
data/Picture/F2.xyz
-
data/RPG_RT.exe.exe windows:1 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
CODE Size: 623KB - Virtual size: 623KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
DATA Size: 12KB - Virtual size: 11KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
BSS Size: - Virtual size: 11KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 9KB - Virtual size: 9KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: - Virtual size: 16B
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 512B - Virtual size: 24B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 43KB - Virtual size: 42KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 37KB - Virtual size: 36KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
-
data/RPG_RT.ini
-
data/RPG_RT.ldb
-
data/RPG_RT.lmt
-
patch readme.txt