RGSS301.dll - RGSS3 Core

info
MZ
PE
resources
imports
exports
foremost
version info
hexdump
disasm
log
discuss
donate

filename	RGSS301.dll
size	1085952 (0x109200)
md5	dd25855ac39d32da033902fc58fa210b

type	PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
mimetype	application/x-dosexec

clamav	OK
virustotal	→ scan with virustotal.com

histogram

MZ Header

signature	MZ
bytes_in_last_block	0x90
blocks_in_file	3
num_relocs	0
header_paragraphs	4
min_extra_paragraphs	0
max_extra_paragraphs	0xffff
ss	0
sp	0xb8
checksum	0
ip	0
cs	0
reloc_table_offset	0x40
overlay_number	0
reserved0	0
oem_id	0
oem_info	0
reserved2	0
reserved3	0
reserved4	0
reserved5	0
reserved6	0
lfanew	0x118

Rich Header

lib id	version	times used
96	4035	1
150	20413	16
149	30729	67
132	30729	68
131	21022	75
109	50727	3
123	50727	21
1	0	328
131	30729	306
132	21022	76
146	30729	1
148	21022	1
145	30729	1

DOS stub

00000000: 0e 1f ba 0e 00 b4 09 cd  21 b8 01 4c cd 21 54 68  |........!..L.!Th|
00000010: 69 73 20 70 72 6f 67 72  61 6d 20 63 61 6e 6e 6f  |is program canno|
00000020: 74 20 62 65 20 72 75 6e  20 69 6e 20 44 4f 53 20  |t be run in DOS |
00000030: 6d 6f 64 65 2e 0d 0d 0a  24 00 00 00 00 00 00 00  |mode....$.......|

PE Header

Signature	PE
Machine	0x14c
NumberOfSections	8
TimeDateStamp	0x4f443355
PointerToSymbolTable	0
NumberOfSymbols	0
SizeOfOptionalHeader	0xe0
Characteristics	0x2102
Magic	0x10b
LinkerVersion	9.0
SizeOfCode	0x1a0e00
SizeOfInitializedData	0xd2200
SizeOfUninitializedData	0
AddressOfEntryPoint	0x2c6001
BaseOfCode	0x1000
BaseOfData	0x1a2000
ImageBase	0x10000000
SectionAlignment	0x1000
FileAlignment	0x200
OperatingSystemVersion	5.0
ImageVersion	0.0
SubsystemVersion	5.0
Reserved1	0
SizeOfImage	0x324000
SizeOfHeaders	0x400
CheckSum	0x27f60a
Subsystem	2
DllCharacteristics	0
SizeOfStackReserve	0x100000
SizeOfStackCommit	0x1000
SizeOfHeapReserve	0x100000
SizeOfHeapCommit	0x1000
LoaderFlags	0
NumberOfRvaAndSizes	0x10

Packer / Compiler

ASPack v2.12

This file is packed with ASPack. Analysis will be incomplete without unpacking.
We can unpack it for you.

»» Analyze unpacked file

Sections

name	va	vsize	raw size	flags
	0x1000	0x1a1000	0x9f400	RWX IDATA
	0x1a2000	0xb8000	0x36a00	RWX IDATA
	0x25a000	0x54000	0x1600	RWX IDATA
.rsrc	0x2ae000	0x2000	0xa00	RWX IDATA
	0x2b0000	0x15000	0xaa00	RWX IDATA
	0x2c5000	0x1000	0x1000	RWX IDATA
.vxdata	0x2c6000	0x5d000	0x25600	RWX IDATA
.adata	0x323000	0x1000	0	RWX IDATA

Data Directory

type	va	size
EXPORT	0x2c5000	0x2d9
IMPORT	0x2c6a60	0x298
RESOURCE	0x2ae000	0x1ec0
EXCEPTION	0	0
SECURITY	0	0
BASERELOC	0x2c69ec	8
DEBUG	0	0
ARCHITECTURE	0	0
GLOBALPTR	0	0
TLS	0	0
LOAD_CONFIG	0	0
Bound_IAT	0	0
IAT	0	0
Delay_IAT	0	0
CLR_Header	0	0
	0	0x100000

show previews

type	name	size	cp
DIALOG	#221	350	1252
DIALOG	#222	952	1252
DIALOG	#223	1168	1252
DIALOG	#321	308	1252
DIALOG	#322	964	1252
DIALOG	#323	1042	1252
STRING	#13	474	1252
STRING	#14	288	1252
STRING	#19	142	1252
STRING	#20	418	1252
ACCELERATORS	#101	24	1252
VERSION	#1	624	1252
MANIFEST	#2	346	1252

module_name	ord	function_name
kernel32.dll		GetProcAddress
kernel32.dll		GetModuleHandleA
kernel32.dll		LoadLibraryA
user32.dll		GetAsyncKeyState
gdi32.dll		GetGlyphOutlineW
advapi32.dll		GetUserNameW
shell32.dll		SHGetPathFromIDListW
winmm.dll		timeBeginPeriod
comctl32.dll		PropertySheetW
ws2_32.dll	116
msacm32.dll		acmStreamConvert
ole32.dll		CoUninitialize
oleaut32.dll		VariantChangeTypeEx
kernel32.dll		RaiseException

ord	entry_va	function_name
1	0x46d0	RGSSAddRTPPath
2	0x36b0	RGSSAudioFinalize
3	0x3610	RGSSAudioInitialize
4	0x46f0	RGSSClearRTPPath
5	0x40f0	RGSSErrorMessage
6	0x40d0	RGSSErrorType
7	0x3760	RGSSEval
8	0x3600	RGSSFinalize
9	0x4720	RGSSGC
10	0x3700	RGSSGameMain
11	0x3790	RGSSGetBool
12	0x3840	RGSSGetDouble
13	0x37c0	RGSSGetInt
14	0x4120	RGSSGetPathWithRTP
15	0x46b0	RGSSGetRTPPath
16	0x3a00	RGSSGetStringACP
17	0x3b70	RGSSGetStringUTF16
18	0x39b0	RGSSGetStringUTF8
19	0x3950	RGSSGetSymbol
20	0x38b0	RGSSGetTable
21	0x35e0	RGSSInitialize3
22	0x3c90	RGSSSetString
23	0x3df0	RGSSSetStringACP
24	0x3f90	RGSSSetStringUTF16
25	0x3d40	RGSSSetStringUTF8
26	0x4700	RGSSSetupFonts
27	0x4250	RGSSSetupRTP

module_name	RGSS301.dll
flags	0
timestamp	2012-02-22 00:14:13
version	0.0
ordinal_base	1
nFunctions	27
nNames	27
Names(27)	0x2c5094
Functions(27)	0x2c5028
NameOrdinals(27)	0x2c5100

StringTable 040904b0

FileDescription	RGSS3 Core
FileVersion	3, 0, 1, 1
LegalCopyright	Copyright (C) 2011 Enterbrain, Inc. / Yoji Ojima
ProductName	Ruby Game Scripting System
ProductVersion	3, 0, 1, 1

VS_FIXEDFILEINFO

FileVersion	3.0.1.1
ProductVersion	3.0.1.1
StrucVersion	0x10000
FileFlagsMask	0x3f
FileFlags	0
FileOS	0x40004
FileType	2
FileSubtype	0

show previews

offset	size	type	comment
0	1085952	DLL	02/22/2012 00:14:13	#
15c1	15	HTM		#

offset:( 0x )size:( 0x )hotkeys:-=[]<>, offset/size fields are also editable

Please donate some bucks to keep this site up and running:
Ko-fi
Yandex.Money
Thank you!

[?] can't find file_offset of VA 0x2aeca0

[?] can't find file_offset of VA 0x2aedd4

[?] can't find file_offset of VA 0x2af198

[?] can't find file_offset of VA 0x2af5ac

[?] can't find file_offset of VA 0x2af788

[?] can't find file_offset of VA 0x2af8a8

[?] can't find file_offset of VA 0x2af938

[?] can't find file_offset of VA 0x2afadc

[?] can't find file_offset of VA 0x0

RGSS301.dll-