|
Scanned the files in the directory with the main exe.
Here are the results:
I hope it helps!
Also, the game needs to be activated in order to play.
Scanning -> C:\Mutko\Games\RigNRoll ENG\Bin\protect.dll
File Type : 32-Bit Dll (Subsystem : Win GUI / 2), Size : 3509160 (0358BA8h) Byte(s)
-> File Appears to be Digitally Signed @ Offset 0357600h, size : 015A8h / 05544 byte(s)
[File Heuristics] -> Flag : 00000000000000001100001000100111 (0x0000C227)
[!] StarForce 32 Bit v5.70.013.001 [FL ProActive]
[!] UPX 3.02 compressed !
upx internal version : 013 / compression method : 08 (M_NRV2E_LE32) - Level : 09
decompressed adler32 : 0x0F6CC824 / compressed adler32 : 0xFD4E29FB
uncompressed size : 0x00C40719 (012846873) / compressed size : 0x00356283 (03498627)
original file size : 0x00C3B000 (012824576) / filter : 0x00 / ct0 0x00 / linkchecksum : 0x091
- Scan Took : 0.750 Second(s)
Scanning -> C:\Mutko\Games\RigNRoll ENG\Bin\protect.exe
File Type : 32-Bit Exe (Subsystem : Win GUI / 2), Size : 556840 (087F28h) Byte(s)
[x] Warning - FileAlignment seems wrong.. is 0x00000200, calculated 0x00000400
-> File Appears to be Digitally Signed @ Offset 086998h, size : 01590h / 05520 byte(s)
-> File has 233880 (039198h) bytes of appended data starting at offset 04D800h
[File Heuristics] -> Flag : 00000000000000001100001100100111 (0x0000C327)
[!] StarForce 32 Bit v5.70.013.001 [FL ProActive]
[!] UPX 3.02 compressed !
upx internal version : 013 / compression method : 08 (M_NRV2E_LE32) - Level : 09
decompressed adler32 : 0x54A5EB17 / compressed adler32 : 0x1CF42C81
uncompressed size : 0x000CE0E6 (0844006) / compressed size : 0x00039DC1 (0236993)
original file size : 0x000C6000 (0811008) / filter : 0x026 / ct0 0x16 / linkchecksum : 0x0DD
- Scan Took : 0.876 Second(s)
Scanning -> C:\Mutko\Games\RigNRoll ENG\Bin\rnr.exe
File Type : 32-Bit Exe (Subsystem : Win GUI / 2), Size : 25550848 (0185E000h) Byte(s)
[File Heuristics] -> Flag : 00000000000000011100000000000000 (0x0001C000)
[?] Possibly StarForce.. 4.50 or higher ?
- Scan Took : 1.814 Second(s)
|