filenamesmartctl.exe
size611840 (0x95600)
md519a86705decf56004c189af049a180e5
typePE32 executable (console) Intel 80386 (stripped to external PDB), for MS Windows
mimetypeapplication/x-dosexec
clamavscan pending
virustotal→ scan with virustotal.com
histogram

MZ Header

signatureMZ
bytes_in_last_block0x90
blocks_in_file3
num_relocs0
header_paragraphs4
min_extra_paragraphs0
max_extra_paragraphs0xffff
ss0
sp0xb8
checksum0
ip0
cs0
reloc_table_offset0x40
overlay_number0
reserved00
oem_id0
oem_info0
reserved20
reserved30
reserved40
reserved50
reserved60
lfanew0x80

DOS stub

00000000: 0e 1f ba 0e 00 b4 09 cd  21 b8 01 4c cd 21 54 68  |........!..L.!Th|
00000010: 69 73 20 70 72 6f 67 72  61 6d 20 63 61 6e 6e 6f  |is program canno|
00000020: 74 20 62 65 20 72 75 6e  20 69 6e 20 44 4f 53 20  |t be run in DOS |
00000030: 6d 6f 64 65 2e 0d 0d 0a  24 00 00 00 00 00 00 00  |mode....$.......|

PE Header

SignaturePE
Machine0x14c
NumberOfSections8
TimeDateStamp0x53d37c36
PointerToSymbolTable0
NumberOfSymbols0
SizeOfOptionalHeader0xe0
Characteristics0x30f
Magic0x10b
LinkerVersion2.22
SizeOfCode0x5a600
SizeOfInitializedData0x95200
SizeOfUninitializedData0x10600
AddressOfEntryPoint0x14d0
BaseOfCode0x1000
BaseOfData0x5c000
ImageBase0x400000
SectionAlignment0x1000
FileAlignment0x200
OperatingSystemVersion4.0
ImageVersion1.0
SubsystemVersion4.0
Reserved10
SizeOfImage0xac000
SizeOfHeaders0x400
CheckSum0xa17e5
Subsystem3
DllCharacteristics0
SizeOfStackReserve0x200000
SizeOfStackCommit0x1000
SizeOfHeapReserve0x100000
SizeOfHeapCommit0x1000
LoaderFlags0
NumberOfRvaAndSizes0x10

Sections

namevavsizeraw sizeflags
.text0x10000x5a5840x5a600R-X CODE IDATA
.data0x5c0000x4ee40x5000RW- IDATA
.rdata0x610000x341000x34200R-- IDATA
.bss0x960000x105d00RW- UDATA
.idata0xa70000x11040x1200RW- IDATA
.CRT0xa90000x340x200RW- IDATA
.tls0xaa0000x200x200RW- IDATA
.rsrc0xab0000x3d00x400RW- IDATA

Data Directory

typevasize
EXPORT00
IMPORT0xa70000x1104
RESOURCE0xab0000x3d0
EXCEPTION00
SECURITY00
BASERELOC00
DEBUG00
ARCHITECTURE00
GLOBALPTR00
TLS0xaa0000x18
LOAD_CONFIG00
Bound_IAT00
IAT0xa73180x28c
Delay_IAT00
CLR_Header00

TLS

raw
start		raw
end		indexcallbkszero
fill		flags
0x4aa0190x4aa01c0x4a61dc0x4a902000
typenamesizecp
VERSION#18880
module_namehintordfunction_name
KERNEL32.dll69CloseHandle
KERNEL32.dll124CreateFileA
KERNEL32.dll143CreateMutexA
KERNEL32.dll149CreatePipe
KERNEL32.dll152CreateProcessA
KERNEL32.dll157CreateSemaphoreA
KERNEL32.dll196DeleteCriticalSection
KERNEL32.dll208DeviceIoControl
KERNEL32.dll218DuplicateHandle
KERNEL32.dll223EnterCriticalSection
KERNEL32.dll339FreeLibrary
KERNEL32.dll433GetCurrentProcess
KERNEL32.dll434GetCurrentProcessId
KERNEL32.dll437GetCurrentThreadId
KERNEL32.dll443GetDevicePowerState
KERNEL32.dll494GetLastError
KERNEL32.dll508GetModuleFileNameA
KERNEL32.dll510GetModuleHandleA
KERNEL32.dll553GetProcAddress
KERNEL32.dll580GetStartupInfoA
KERNEL32.dll598GetSystemPowerStatus
KERNEL32.dll603GetSystemTimeAsFileTime
KERNEL32.dll627GetTickCount
KERNEL32.dll631GetTimeZoneInformation
KERNEL32.dll642GetVersionExA
KERNEL32.dll665GlobalFree
KERNEL32.dll669GlobalLock
KERNEL32.dll674GlobalSize
KERNEL32.dll710InitializeCriticalSection
KERNEL32.dll769LeaveCriticalSection
KERNEL32.dll771LoadLibraryA
KERNEL32.dll774LoadLibraryW
KERNEL32.dll813MultiByteToWideChar
KERNEL32.dll871QueryPerformanceCounter
KERNEL32.dll872QueryPerformanceFrequency
KERNEL32.dll893ReadFile
KERNEL32.dll909ReleaseMutex
KERNEL32.dll913ReleaseSemaphore
KERNEL32.dll1029SetLastError
KERNEL32.dll1059SetThreadExecutionState
KERNEL32.dll1073SetUnhandledExceptionFilter
KERNEL32.dll1085Sleep
KERNEL32.dll1097TerminateProcess
KERNEL32.dll1102TlsAlloc
KERNEL32.dll1103TlsFree
KERNEL32.dll1104TlsGetValue
KERNEL32.dll1105TlsSetValue
KERNEL32.dll1117UnhandledExceptionFilter
KERNEL32.dll1135VerSetConditionMask
KERNEL32.dll1138VerifyVersionInfoA
KERNEL32.dll1140VirtualAlloc
KERNEL32.dll1145VirtualFree
KERNEL32.dll1149VirtualProtect
KERNEL32.dll1152VirtualQuery
KERNEL32.dll1161WaitForSingleObject
KERNEL32.dll1183WideCharToMultiByte
msvcrt.dll_access
msvcrt.dll58_putenv
msvcrt.dll75_strdup
msvcrt.dll79_strnicmp
msvcrt.dll88_tzname
msvcrt.dll89_tzset
msvcrt.dll104_write
msvcrt.dll47__argv
msvcrt.dll56__dllonexit
msvcrt.dll59__getmainargs
msvcrt.dll60__initenv
msvcrt.dll69__lconv_init
msvcrt.dll70__mb_cur_max
msvcrt.dll105__set_app_type
msvcrt.dll108__setusermatherr
msvcrt.dll122_acmdln
msvcrt.dll143_amsg_exit
msvcrt.dll160_cexit
msvcrt.dll218_errno
msvcrt.dll229_exit
msvcrt.dll252_fmode
msvcrt.dll317_initterm
msvcrt.dll321_iob
msvcrt.dll421_lock
msvcrt.dll483_mbsinc
msvcrt.dll583_onexit
msvcrt.dll757_unlock
msvcrt.dll790_vsnprintf
msvcrt.dll891_winmajor
msvcrt.dll957abort
msvcrt.dll960asctime
msvcrt.dll967atoi
msvcrt.dll971calloc
msvcrt.dll978ctime
msvcrt.dll981exit
msvcrt.dll984fclose
msvcrt.dll987fflush
msvcrt.dll995fopen
msvcrt.dll997fprintf
msvcrt.dll999fputc
msvcrt.dll1000fputs
msvcrt.dll1003fread
msvcrt.dll1004free
msvcrt.dll1015fwrite
msvcrt.dll1018getc
msvcrt.dll1020getenv
msvcrt.dll1027isalnum
msvcrt.dll1028isalpha
msvcrt.dll1029iscntrl
msvcrt.dll1031isgraph
msvcrt.dll1033islower
msvcrt.dll1034isprint
msvcrt.dll1035ispunct
msvcrt.dll1036isspace
msvcrt.dll1037isupper
msvcrt.dll1051isxdigit
msvcrt.dll1055localeconv
msvcrt.dll1056localtime
msvcrt.dll1060malloc
msvcrt.dll1066memchr
msvcrt.dll1067memcmp
msvcrt.dll1068memcpy
msvcrt.dll1070memmove
msvcrt.dll1072memset
msvcrt.dll1076printf
msvcrt.dll1080puts
msvcrt.dll1085raise
msvcrt.dll1088realloc
msvcrt.dll1095setlocale
msvcrt.dll1097signal
msvcrt.dll1100sprintf
msvcrt.dll1104sscanf
msvcrt.dll1108strchr
msvcrt.dll1109strcmp
msvcrt.dll1111strcpy
msvcrt.dll1113strcspn
msvcrt.dll1114strerror
msvcrt.dll1116strftime
msvcrt.dll1117strlen
msvcrt.dll1120strncmp
msvcrt.dll1121strncpy
msvcrt.dll1126strspn
msvcrt.dll1127strstr
msvcrt.dll1131strtol
msvcrt.dll1141time
msvcrt.dll1146tolower
msvcrt.dll1147toupper
msvcrt.dll1152vfprintf
msvcrt.dll1156vprintf
ole32.dll16CoCreateInstance
ole32.dll63CoInitialize
ole32.dll100CoSetProxyBlanket
OLEAUT32.dll92SysAllocStringLen
OLEAUT32.dll93SysFreeString
OLEAUT32.dll412VariantClear
OLEAUT32.dll415VariantInit
USER32.dll61CloseClipboard
USER32.dll238GetClipboardData
USER32.dll326GetSystemMetrics
USER32.dll434MessageBoxA
USER32.dll455OpenClipboard

StringTable 04090000

CompanyNamewww.smartmontools.org
FileDescriptionControl and Monitor Utility for SMART Disks
FileVersion6.3.0.3976
InternalNamesmartctl
LegalCopyright(C) 2002-14, Bruce Allen, Christian Franke, www.smartmontools.org
OriginalFilenamesmartctl.exe
ProductNamesmartmontools
ProductVersion6.3.0.3976

VS_FIXEDFILEINFO

FileVersion6.3.0.3976
ProductVersion6.3.0.3976
StrucVersion0x10000
FileFlagsMask0
FileFlags0
FileOS4
FileType1
FileSubtype0
offsetsizetypecomment
0611840EXE07/26/2014 10:00:22#
15c115HTM#
offset:( 0x )size:( 0x )hotkeys:-=[]<>, offset/size fields are also editable











[?] can't find file_offset of VA 0xa61dc