filenameBridge Constructor Medieval v1.2 r3 (2014)(2-click run).exe
size37676055 (0x23ee417)
md5582bb1e21c1f3aab6d942a8a01f6109a
typePE32 executable (GUI) Intel 80386, for MS Windows
mimetypeapplication/x-dosexec
clamavOK
virustotal→ scan with virustotal.com
histogram

MZ Header

signatureMZ
bytes_in_last_block0x90
blocks_in_file3
num_relocs0
header_paragraphs4
min_extra_paragraphs0
max_extra_paragraphs0xffff
ss0
sp0xb8
checksum0
ip0
cs0
reloc_table_offset0x40
overlay_number0
reserved00
oem_id0
oem_info0
reserved20
reserved30
reserved40
reserved50
reserved60
lfanew0xd8

Rich Header

lib idversiontimes used
1584021914
1704021967
147307299
10100
1714021925
154402191
157402191

DOS stub

00000000: 0e 1f ba 0e 00 b4 09 cd  21 b8 01 4c cd 21 54 68  |........!..L.!Th|
00000010: 69 73 20 70 72 6f 67 72  61 6d 20 63 61 6e 6e 6f  |is program canno|
00000020: 74 20 62 65 20 72 75 6e  20 69 6e 20 44 4f 53 20  |t be run in DOS |
00000030: 6d 6f 64 65 2e 0d 0d 0a  24 00 00 00 00 00 00 00  |mode....$.......|

PE Header

SignaturePE
Machine0x14c
NumberOfSections5
TimeDateStamp0x4fda0e4a
PointerToSymbolTable0
NumberOfSymbols0
SizeOfOptionalHeader0xe0
Characteristics0x102
Magic0x10b
LinkerVersion10.0
SizeOfCode0x5800
SizeOfInitializedData0x8f000
SizeOfUninitializedData0
AddressOfEntryPoint0x29e1
BaseOfCode0x1000
BaseOfData0x7000
ImageBase0x400000
SectionAlignment0x1000
FileAlignment0x200
OperatingSystemVersion5.1
ImageVersion0.0
SubsystemVersion5.1
Reserved10
SizeOfImage0x99000
SizeOfHeaders0x400
CheckSum0x1b89e
Subsystem2
DllCharacteristics0x8140
SizeOfStackReserve0x100000
SizeOfStackCommit0x1000
SizeOfHeapReserve0x100000
SizeOfHeapCommit0x1000
LoaderFlags0
NumberOfRvaAndSizes0x10

Packer / Compiler

MS Visual C++ v8.0

Sections

namevavsizeraw sizeflags
.text0x10000x57180x5800R-X CODE
.rdata0x70000x2e820x3000R-- IDATA
.data0xa0000x19680xc00RW- IDATA
.rsrc0xc0000x8a1780x8a200R-- IDATA
.reloc0x970000x10920x1200R-- IDATA DISCARDABLE

Data Directory

typevasize
EXPORT00
IMPORT0x963c0x64
RESOURCE0xc0000x8a178
EXCEPTION00
SECURITY00
BASERELOC0x970000x7c8
DEBUG00
ARCHITECTURE00
GLOBALPTR00
TLS00
LOAD_CONFIG0x93900x40
Bound_IAT00
IAT0x70000x178
Delay_IAT00
CLR_Header00
typenamesizecp
ICON#111281252
ICON#224401252
ICON#342641252
ICON#496401252
ICON#5169361252
ICON#6380561252
ICON#7676241252
ICON#81521041252
ICON#92703761252
GROUP_ICON#1011321252
VERSION#110041252
MANIFEST#112321252
module_namehintordfunction_name
KERNEL32.dll1335_lclose
KERNEL32.dll531GetModuleFileNameA
KERNEL32.dll1339_lread
KERNEL32.dll1337_llseek
KERNEL32.dll1338_lopen
KERNEL32.dll1340_lwrite
KERNEL32.dll1336_lcreat
KERNEL32.dll124CreateDirectoryA
KERNEL32.dll1100SetCurrentDirectoryA
KERNEL32.dll1342lstrcatA
KERNEL32.dll354FreeLibrary
KERNEL32.dll581GetProcAddress
KERNEL32.dll828LoadLibraryA
KERNEL32.dll460GetDiskFreeSpaceA
KERNEL32.dll485GetFileAttributesA
KERNEL32.dll1024RemoveDirectoryA
KERNEL32.dll211DeleteFileA
KERNEL32.dll1357lstrlenA
KERNEL32.dll446GetCurrentDirectoryA
KERNEL32.dll82CloseHandle
KERNEL32.dll479GetExitCodeProcess
KERNEL32.dll514GetLastError
KERNEL32.dll840LocalFree
KERNEL32.dll448GetCurrentProcess
KERNEL32.dll863MoveFileExA
KERNEL32.dll1202Sleep
KERNEL32.dll617GetStringTypeW
KERNEL32.dll871MultiByteToWideChar
KERNEL32.dll813LCMapStringW
KERNEL32.dll722HeapReAlloc
KERNEL32.dll1048RtlUnwind
KERNEL32.dll724HeapSize
KERNEL32.dll1351lstrcpyA
KERNEL32.dll644GetTempPathA
KERNEL32.dll97CompareStringA
KERNEL32.dll778IsValidCodePage
KERNEL32.dll567GetOEMCP
KERNEL32.dll536GetModuleHandleW
KERNEL32.dll281ExitProcess
KERNEL32.dll202DecodePointer
KERNEL32.dll719HeapFree
KERNEL32.dll715HeapAlloc
KERNEL32.dll390GetCommandLineA
KERNEL32.dll723HeapSetInformation
KERNEL32.dll611GetStartupInfoW
KERNEL32.dll739InitializeCriticalSectionAndSpinCount
KERNEL32.dll209DeleteCriticalSection
KERNEL32.dll825LeaveCriticalSection
KERNEL32.dll238EnterCriticalSection
KERNEL32.dll234EncodePointer
KERNEL32.dll831LoadLibraryW
KERNEL32.dll1235UnhandledExceptionFilter
KERNEL32.dll1189SetUnhandledExceptionFilter
KERNEL32.dll768IsDebuggerPresent
KERNEL32.dll1216TerminateProcess
KERNEL32.dll1221TlsAlloc
KERNEL32.dll1223TlsGetValue
KERNEL32.dll1224TlsSetValue
KERNEL32.dll1222TlsFree
KERNEL32.dll751InterlockedIncrement
KERNEL32.dll1139SetLastError
KERNEL32.dll453GetCurrentThreadId
KERNEL32.dll747InterlockedDecrement
KERNEL32.dll1317WriteFile
KERNEL32.dll612GetStdHandle
KERNEL32.dll532GetModuleFileNameW
KERNEL32.dll772IsProcessorFeaturePresent
KERNEL32.dll717HeapCreate
KERNEL32.dll353FreeEnvironmentStringsW
KERNEL32.dll1297WideCharToMultiByte
KERNEL32.dll474GetEnvironmentStringsW
KERNEL32.dll1135SetHandleCount
KERNEL32.dll499GetFileType
KERNEL32.dll935QueryPerformanceCounter
KERNEL32.dll659GetTickCount
KERNEL32.dll449GetCurrentProcessId
KERNEL32.dll633GetSystemTimeAsFileTime
KERNEL32.dll370GetCPInfo
KERNEL32.dll360GetACP
USER32.dll764TranslateMessage
USER32.dll174DispatchMessageA
USER32.dll562PeekMessageA
USER32.dll818wsprintfA
USER32.dll488LoadCursorA
USER32.dll648SetCursor
USER32.dll526MessageBoxA
USER32.dll540MsgWaitForMultipleObjects
ADVAPI32.dll346GetTokenInformation
ADVAPI32.dll503OpenProcessToken
SHELL32.dll288ShellExecuteExA

StringTable 04090000

CommentsGreat 1-click run Application
CompanyNameFriends in War
FileDescriptionCopy Maker
FileVersion1.0.0.0
InternalNamesf_rt
LegalCopyrightFriends in War Copyright © 2012 - 2013 Friends in War
LegalTrademarksCopy Maker is a trademark of Friends in War
OriginalFilenamesuf_launch.exe
ProductNameFriends in War Copy Maker
ProductVersion1.0.0.0

VS_FIXEDFILEINFO

FileVersion1.0.0.0
ProductVersion1.0.0.0
StrucVersion0
FileFlagsMask0
FileFlags0
FileOS4
FileType1
FileSubtype0
offsetsizetypecomment
0609280EXE06/14/2012 16:16:10#
15c115HTM#
1dd02a322048DLL08/09/2010 18:57:16#
22ba2a35400173BINoverlay data past EOF#
Scanning the drive for archives:
1 file, 37676055 bytes (36 MiB)



Errors: 1
offset:( 0x )size:( 0x )hotkeys:-=[]<>, offset/size fields are also editable











everything is OK