OHCI2.DLL

info
MZ
PE
imports
exports
foremost
hexdump
disasm
log
discuss
donate

filename	OHCI2.DLL
size	57344 (0xe000)
md5	011ce1400b6a32aed33affbfd8c8dbf5

type	PE32 executable (DLL) (Windows CE) ARM Thumb, for MS Windows
mimetype	application/x-dosexec

clamav	OK
virustotal	→ scan with virustotal.com

histogram

MZ Header

signature	MZ
bytes_in_last_block	0x90
blocks_in_file	3
num_relocs	0
header_paragraphs	4
min_extra_paragraphs	0
max_extra_paragraphs	0xffff
ss	0
sp	0xb8
checksum	0
ip	0
cs	0
reloc_table_offset	0x40
overlay_number	0
reserved0	0
oem_id	0
oem_info	0
reserved2	0
reserved3	0
reserved4	0
reserved5	0
reserved6	0
lfanew	0xc0

DOS stub

00000000: 0e 1f ba 0e 00 b4 09 cd  21 b8 01 4c cd 21 54 68  |........!..L.!Th|
00000010: 69 73 20 70 72 6f 67 72  61 6d 20 63 61 6e 6e 6f  |is program canno|
00000020: 74 20 62 65 20 72 75 6e  20 69 6e 20 44 4f 53 20  |t be run in DOS |
00000030: 6d 6f 64 65 2e 0d 0d 0a  24 00 00 00 00 00 00 00  |mode....$.......|
00000040: 00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  |................|
*
00000080:

PE Header

Signature	PE
Machine	0x1c2
NumberOfSections	4
TimeDateStamp	0x4bfcd928
PointerToSymbolTable	0
NumberOfSymbols	0
SizeOfOptionalHeader	0xe0
Characteristics	0x212e
Magic	0x10b
LinkerVersion	6.1
SizeOfCode	0xc601
SizeOfInitializedData	0xa98
SizeOfUninitializedData	0
AddressOfEntryPoint	0x2640
BaseOfCode	0x1000
BaseOfData	0xe000
ImageBase	0x10000000
SectionAlignment	0x1000
FileAlignment	0x200
OperatingSystemVersion	4.0
ImageVersion	0.0
SubsystemVersion	5.0
Reserved1	0
SizeOfImage	0x11000
SizeOfHeaders	0x400
CheckSum	0
Subsystem	9
DllCharacteristics	0
SizeOfStackReserve	0x10000
SizeOfStackCommit	0x1000
SizeOfHeapReserve	0x100000
SizeOfHeapCommit	0x1000
LoaderFlags	0
NumberOfRvaAndSizes	0x10

Sections

name	va	vsize	raw size	flags
.text	0x1000	0xc600	0xc600	R-X CODE
.data	0xe000	0x168	0x200	RW- IDATA
.pdata	0xf000	0x930	0xa00	R-- IDATA
.reloc	0x10000	0x6d8	0x800	R-- IDATA DISCARDABLE

Data Directory

type	va	size
EXPORT	0xd500	0x100
IMPORT	0xd390	0x3c
RESOURCE	0	0
EXCEPTION	0xf000	0x930
SECURITY	0	0
BASERELOC	0x10000	0x6d8
DEBUG	0	0
ARCHITECTURE	0	0
GLOBALPTR	0	0
TLS	0	0
LOAD_CONFIG	0	0
Bound_IAT	0	0
IAT	0	0
Delay_IAT	0	0
CLR_Header	0	0

module_name	hint	ord	function_name
COREDLL.dll		1475
COREDLL.dll		1669
COREDLL.dll		1668
COREDLL.dll		560
COREDLL.dll		524
COREDLL.dll		66
COREDLL.dll		1018
COREDLL.dll		3
COREDLL.dll		2
COREDLL.dll		1041
COREDLL.dll		1232
COREDLL.dll		1396
COREDLL.dll		1094
COREDLL.dll		5
COREDLL.dll		4
COREDLL.dll		1095
COREDLL.dll		1092
COREDLL.dll		494
COREDLL.dll		33
COREDLL.dll		36
COREDLL.dll		1489
COREDLL.dll		1487
COREDLL.dll		553
COREDLL.dll		495
COREDLL.dll		1486
COREDLL.dll		1047
COREDLL.dll		530
COREDLL.dll		626
COREDLL.dll		529
COREDLL.dll		1044
COREDLL.dll		1457
COREDLL.dll		1456
COREDLL.dll		496
COREDLL.dll		1043
COREDLL.dll		87
COREDLL.dll		622
COREDLL.dll		621
COREDLL.dll		492
COREDLL.dll		535
COREDLL.dll		543
COREDLL.dll		545
COREDLL.dll		525
COREDLL.dll		1476
COREDLL.dll		461
COREDLL.dll		463
COREDLL.dll		497
COREDLL.dll		455
COREDLL.dll		491
COREDLL.dll		12
COREDLL.dll		630
COREDLL.dll		517
COREDLL.dll		629
COREDLL.dll		557
COREDLL.dll		498
COREDLL.dll		158
COREDLL.dll		628
COREDLL.dll		627
COREDLL.dll		612
COREDLL.dll		611
COREDLL.dll		2008
COREDLL.dll	49152		9c e5 1c ff 2f e1 48 e0 \|..../.H. \|
COREDLL.dll	49152		9c e5 1c ff 2f e1 34 e0 \|..../.4. \|
COREDLL.dll	12288		93 e5 0f e0 a0 e1 13 ff 2f e1 04 \|......../.. \|
COREDLL.dll	12288		95 e5 05 \|... \|
CEDDK.dll		38
CEDDK.dll		49
CEDDK.dll		2
CEDDK.dll		3
CEDDK.dll		48
CEDDK.dll		37
CEDDK.dll	34260
CEDDK.dll	34996
CEDDK.dll	57347		b0 e1 10 20 94 15 14 30 94 15 0c 10 94 15 18 \|... ...0....... \|
CEDDK.dll	12328		82 e5 \|.. \|
CEDDK.dll	105		t
CEDDK.dll	32		c

ord	entry_va	function_name
1	0x2ad4	HCD_Close
2	0x2ab4	HCD_Deinit
3	0x2b14	HCD_IOControl
4	0x2974	HCD_Init
5	0x2ac4	HCD_Open
6	0x2aa4	HCD_PowerDown
7	0x2a94	HCD_PowerUp
8	0x2ae4	HCD_Read
9	0x2b04	HCD_Seek
10	0x2af4	HCD_Write

module_name	OHCD.dll
flags	0
timestamp	2010-05-26 08:17:03
version	0.0
ordinal_base	1
nFunctions	10
nNames	10
Names(10)	0xd550
Functions(10)	0xd528
NameOrdinals(10)	0xd578

show previews

offset	size	type	comment
0	57344	DLL	05/26/2010 08:17:44	#
15c1	15	HTM		#

offset:( 0x )size:( 0x )hotkeys:-=[]<>, offset/size fields are also editable

Please donate some bucks to keep this site up and running:
Ko-fi
Yandex.Money
Thank you!

everything is OK