filenameat9tool.exe
size222720 (0x36600)
md510fec5b7c796f5087ae82dc9fd6ab8e7
typePE32 executable (console) Intel 80386, for MS Windows
mimetypeapplication/x-dosexec
clamavscan pending
virustotal→ scan with virustotal.com
histogram

MZ Header

signatureMZ
bytes_in_last_block0x90
blocks_in_file3
num_relocs0
header_paragraphs4
min_extra_paragraphs0
max_extra_paragraphs0xffff
ss0
sp0xb8
checksum0
ip0
cs0
reloc_table_offset0x40
overlay_number0
reserved00
oem_id0
oem_info0
reserved20
reserved30
reserved40
reserved50
reserved60
lfanew0xf0

Rich Header

lib idversiontimes used
147307293
149307294
132307292
123507272
1071
1313072954
137307297
148210221
145307291

DOS stub

00000000: 0e 1f ba 0e 00 b4 09 cd  21 b8 01 4c cd 21 54 68  |........!..L.!Th|
00000010: 69 73 20 70 72 6f 67 72  61 6d 20 63 61 6e 6e 6f  |is program canno|
00000020: 74 20 62 65 20 72 75 6e  20 69 6e 20 44 4f 53 20  |t be run in DOS |
00000030: 6d 6f 64 65 2e 0d 0d 0a  24 00 00 00 00 00 00 00  |mode....$.......|

PE Header

SignaturePE
Machine0x14c
NumberOfSections5
TimeDateStamp0x4f0d178d
PointerToSymbolTable0
NumberOfSymbols0
SizeOfOptionalHeader0xe0
Characteristics0x102
Magic0x10b
LinkerVersion9.0
SizeOfCode0x27c00
SizeOfInitializedData0xe600
SizeOfUninitializedData0
AddressOfEntryPoint0x22346
BaseOfCode0x1000
BaseOfData0x29000
ImageBase0x400000
SectionAlignment0x1000
FileAlignment0x200
OperatingSystemVersion5.0
ImageVersion0.0
SubsystemVersion5.0
Reserved10
SizeOfImage0x59000
SizeOfHeaders0x400
CheckSum0x3b50c
Subsystem3
DllCharacteristics0x8140
SizeOfStackReserve0x100000
SizeOfStackCommit0x1000
SizeOfHeapReserve0x100000
SizeOfHeapCommit0x1000
LoaderFlags0
NumberOfRvaAndSizes0x10

Packer / Compiler

MS Visual C++ v8.0

Sections

namevavsizeraw sizeflags
.text0x10000x27a0b0x27c00R-X CODE
.rdata0x290000x975c0x9800R-- IDATA
.data0x330000x2194c0x1e00RW- IDATA
.rsrc0x550000x6e40x800R-- IDATA
.reloc0x560000x277c0x2800R-- IDATA DISCARDABLE

Data Directory

typevasize
EXPORT00
IMPORT0x322040x3c
RESOURCE0x550000x6e4
EXCEPTION00
SECURITY00
BASERELOC0x560000x24d4
DEBUG0x291500x1c
ARCHITECTURE00
GLOBALPTR00
TLS00
LOAD_CONFIG0x320b80x40
Bound_IAT00
IAT0x290000x124
Delay_IAT00
CLR_Header00
typenamesizecp
VERSION#110041252
MANIFEST#15981252
module_namehintordfunction_name
MSVCR90.dll1278isdigit
MSVCR90.dll1327printf_s
MSVCR90.dll1231fclose
MSVCR90.dll1228exit
MSVCR90.dll1232feof
MSVCR90.dll1317memcmp
MSVCR90.dll1235fgetc
MSVCR90.dll1250fread
MSVCR90.dll1319memcpy_s
MSVCR90.dll1260ftell
MSVCR90.dll1263fwrite
MSVCR90.dll1220calloc
MSVCR90.dll1318memcpy
MSVCR90.dll1240floor
MSVCR90.dll81_CIpow
MSVCR90.dll82_CIsin
MSVCR90.dll75_CIcos
MSVCR90.dll79_CIlog
MSVCR90.dll84_CIsqrt
MSVCR90.dll277_amsg_exit
MSVCR90.dll159__getmainargs
MSVCR90.dll300_cexit
MSVCR90.dll1359strcmp
MSVCR90.dll102_XcptFilter
MSVCR90.dll160__initenv
MSVCR90.dll516_initterm
MSVCR90.dll517_initterm_e
MSVCR90.dll316_configthreadlocale
MSVCR90.dll227__setusermatherr
MSVCR90.dll267_adjust_fdiv
MSVCR90.dll203__p__commode
MSVCR90.dll207__p__fmode
MSVCR90.dll362_encode_pointer
MSVCR90.dll224__set_app_type
MSVCR90.dll331_crt_debugger_hook
MSVCR90.dll67void __cdecl terminate(void)

?terminate@@YAXXZ

MSVCR90.dll998_unlock
MSVCR90.dll150__dllonexit
MSVCR90.dll630_lock
MSVCR90.dll796_onexit
MSVCR90.dll352_decode_pointer
MSVCR90.dll371_except_handler4_common
MSVCR90.dll523_invoke_watson
MSVCR90.dll319_controlfp_s
MSVCR90.dll1322memset
MSVCR90.dll1237fgets
MSVCR90.dll1243fopen_s
MSVCR90.dll1339remove
MSVCR90.dll1215atoi
MSVCR90.dll1370strncmp
MSVCR90.dll1258fseek
MSVCR90.dll1233ferror
MSVCR90.dll1307malloc
MSVCR90.dll1252free
MSVCR90.dll1221ceil
MSVCR90.dll1251fread_s
MSVCR90.dll380_exit
MSVCR90.dll1321memmove_s
KERNEL32.dll426GetCurrentProcessId
KERNEL32.dll429GetCurrentThreadId
KERNEL32.dll614GetTickCount
KERNEL32.dll852QueryPerformanceCounter
KERNEL32.dll721IsDebuggerPresent
KERNEL32.dll1045SetUnhandledExceptionFilter
KERNEL32.dll1086UnhandledExceptionFilter
KERNEL32.dll425GetCurrentProcess
KERNEL32.dll1069TerminateProcess
KERNEL32.dll698InterlockedCompareExchange
KERNEL32.dll1057Sleep
KERNEL32.dll701InterlockedExchange
KERNEL32.dll591GetSystemTimeAsFileTime

StringTable 000904b0

CompanyNameSony Computer Entertainment Inc.
FileDescriptionat9tool application
FileVersion1, 6, 0, 0
InternalNameat9tool
LegalCopyrightSCE CONFIDENTIAL Copyright(C) 2012 Sony Computer Entertainment Inc. All Rights Reserved. Copyright 2009, 2010, 2011 Sony Corporation
OriginalFilenameat9tool.exe
ProductNameat9tool application
ProductVersion1, 6, 0, 0

VS_FIXEDFILEINFO

FileVersion1.0.0.1
ProductVersion1.0.0.1
StrucVersion0x10000
FileFlagsMask0x17
FileFlags0
FileOS4
FileType1
FileSubtype0
offsetsizetypecomment
0222720EXE01/11/2012 05:01:01#
15c115HTM#
offset:( 0x )size:( 0x )hotkeys:-=[]<>, offset/size fields are also editable











everything is OK