Aygshell.dll

info
MZ
PE
imports
exports
foremost
hexdump
disasm
log
discuss
donate

filename	Aygshell.dll
size	22528 (0x5800)
md5	d3ee65a8a79df84ca2dd4578fbfa37e4

type	PE32 executable (DLL) (Windows CE) ARM, for MS Windows
mimetype	application/x-dosexec

clamav	OK
virustotal	→ scan with virustotal.com

histogram

MZ Header

signature	MZ
bytes_in_last_block	0x90
blocks_in_file	3
num_relocs	0
header_paragraphs	4
min_extra_paragraphs	0
max_extra_paragraphs	0xffff
ss	0
sp	0xb8
checksum	0
ip	0
cs	0
reloc_table_offset	0x40
overlay_number	0
reserved0	0
oem_id	0
oem_info	0
reserved2	0
reserved3	0
reserved4	0
reserved5	0
reserved6	0
lfanew	0xd0

Rich Header

lib id	version	times used
32	8349	5
1	0	61
36	8569	2
37	8700	1

DOS stub

00000000: 0e 1f ba 0e 00 b4 09 cd  21 b8 01 4c cd 21 54 68  |........!..L.!Th|
00000010: 69 73 20 70 72 6f 67 72  61 6d 20 63 61 6e 6e 6f  |is program canno|
00000020: 74 20 62 65 20 72 75 6e  20 69 6e 20 44 4f 53 20  |t be run in DOS |
00000030: 6d 6f 64 65 2e 0d 0d 0a  24 00 00 00 00 00 00 00  |mode....$.......|

PE Header

Signature	PE
Machine	0x1c0
NumberOfSections	6
TimeDateStamp	0x43ee0332
PointerToSymbolTable	0
NumberOfSymbols	0
SizeOfOptionalHeader	0xe0
Characteristics	0x210e
Magic	0x10b
LinkerVersion	6.20
SizeOfCode	0x1e00
SizeOfInitializedData	0x3600
SizeOfUninitializedData	0
AddressOfEntryPoint	0x1c78
BaseOfCode	0x1000
BaseOfData	0x3000
ImageBase	0x100000
SectionAlignment	0x1000
FileAlignment	0x200
OperatingSystemVersion	4.0
ImageVersion	0.0
SubsystemVersion	3.0
Reserved1	0
SizeOfImage	0xa000
SizeOfHeaders	0x400
CheckSum	0
Subsystem	9
DllCharacteristics	0
SizeOfStackReserve	0x10000
SizeOfStackCommit	0x1000
SizeOfHeapReserve	0x100000
SizeOfHeapCommit	0x1000
LoaderFlags	0
NumberOfRvaAndSizes	0x10

Sections

name	va	vsize	raw size	flags
.text	0x1000	0x1c7c	0x1e00	R-X CODE
.rdata	0x3000	0x152	0x200	R-- IDATA
.data	0x4000	0x7d6	0x800	RW- IDATA
.pdata	0x5000	0xa8	0x200	R-- IDATA
.edata	0x6000	0x2740	0x2800	R-- IDATA
.reloc	0x9000	0x1a2	0x200	R-- IDATA DISCARDABLE

Data Directory

type	va	size
EXPORT	0x6000	0x2740
IMPORT	0x3000	0x3c
RESOURCE	0	0
EXCEPTION	0x5000	0xa8
SECURITY	0	0
BASERELOC	0x9000	0x178
DEBUG	0	0
ARCHITECTURE	0	0
GLOBALPTR	0	0
TLS	0	0
LOAD_CONFIG	0	0
Bound_IAT	0	0
IAT	0x4000	0xfc
Delay_IAT	0	0
CLR_Header	0	0

module_name	hint	ord	function_name
commctrl.dll		3
commctrl.dll		5
COREDLL.dll		101
COREDLL.dll		1065
COREDLL.dll		522
COREDLL.dll		264
COREDLL.dll		258
COREDLL.dll		259
COREDLL.dll		272
COREDLL.dll		835
COREDLL.dll		836
COREDLL.dll		868
COREDLL.dll		693
COREDLL.dll		286
COREDLL.dll		66
COREDLL.dll		269
COREDLL.dll		285
COREDLL.dll		878
COREDLL.dll		1047
COREDLL.dll		701
COREDLL.dll		845
COREDLL.dll		254
COREDLL.dll		875
COREDLL.dll		865
COREDLL.dll		874
COREDLL.dll		855
COREDLL.dll		1095
COREDLL.dll		846
COREDLL.dll		533
COREDLL.dll		532
COREDLL.dll		266
COREDLL.dll		1094
COREDLL.dll		844
COREDLL.dll		89
COREDLL.dll		247
COREDLL.dll		249
COREDLL.dll		248
COREDLL.dll		886
COREDLL.dll		702
COREDLL.dll		251
COREDLL.dll		884
COREDLL.dll		1230
COREDLL.dll		1177
COREDLL.dll		937
COREDLL.dll		683
COREDLL.dll		95
COREDLL.dll		246
COREDLL.dll		265
COREDLL.dll		496
COREDLL.dll		859
COREDLL.dll		864
COREDLL.dll		704
COREDLL.dll		271
COREDLL.dll		826
COREDLL.dll		255
COREDLL.dll		885
COREDLL.dll		283
COREDLL.dll		257
COREDLL.dll		876
COREDLL.dll		60
COREDLL.dll		1410

ord	entry_va	function_name
2	0x1e64	SHGetAppKeyAssoc
3	0x1e64	SHSetAppKeyWndAssoc
4	0x1e64	SHSipInfo
5	0x1e64	SHFileNotifyAdd
6	0x1e64	SHFileNotifyRemove
7	0x1e64	SHFileNotifyFree
8	0x1e64	SHImListPopup
9	0x1e5c	SHInitExtraControls
10	0x1e5c	SHCloseApps
11	0x1e64	GetRegisteredAppInfo
12	0x1e64	SetRegisteredAppInfo
13	0x1e64	FreeRegisteredAppInfo
14	0x1e64	Shell_HeapCreate
15	0x1e64	Shell_Alloc
16	0x1e64	Shell_Free
17	0x1e64	Shell_AllocString
18	0x1e64	Shell_CatStrAlloc
19	0x1e64	Shell_LoadStringAlloc
20	0x1e64	Shell_RegAllocString
21	0x1e5c	SHSipPreference
22	0x1e64	SHAppNotifyDone
23	0x1e64	PathFindExtension
24	0x1e64	PathAddBackslash
25	0x1e64	PathRemoveBackslash
26	0x1e64	PathCombine
27	0x1e64	PathFindFileName
28	0x1e64	PathIsRelative
29	0x1e64	ComboEditAutoComplete
30	0x1e64	SHHandleSipChange
31	0x1e64	SHHandleActivate
32	0x1e64	SHMessageBox
33	0x1e64	SHForceBaseState
34	0x1e7c	SHCreateMenuBar
35	0x1e64	SHCreateWorkerWindow
36	0x1e64	SHCommandBar_GetCommandBarByID
37	0x1e64	SHCommandBar_EnableCommand
38	0x1e64	SHCommandBar_GetClientRect
39	0x1e6c	SHInputDialog
40	0x1edc	SHRecognizeGesture
41	0x1e64	SHCreateContextMenu
42	0x1e64	PathRemoveBlanks
43	0x1e64	SHCreateMainWindow
44	0x1e64	EditSubProc
45	0x1e64	ComboSubProc
46	0x1e64	ComboBoxEditSubProc
47	0x1e64	SubClassThisWindow
48	0x1e64
49	0x1e64	SHEnableEditMenu
50	0x1e64	SHRunCpl
51	0x1e64	StrStrI
52	0x1e64	CancelSIPUp
53	0x1e64	SHCreateSystemFont
54	0x1e64
55	0x1e64
56	0x2464	SHInitDialog
57	0x1e64	SHTrackPopupMenu
58	0x1e64
59	0x1e64
62	0x1e64
63	0x1e64	MinPowerOff
64	0x1e64
65	0x1e64	SHFullScreen
66	0x1e64	SHMenuBar_GetMenu
67	0x1e64	SHShowContextMenu
68	0x1e64	SHGetSysColor
69	0x2590	SHDoneButton
70	0x1e64
71	0x1e64
72	0x1e64
73	0x1e64
74	0x1e64
75	0x1e64
76	0x1e64
79	0x1e64
80	0x1e64
81	0x1e64
82	0x1e64
83	0x1e64	SHHandleWMSettingChange
84	0x1e64	SHHandleWMActivate
85	0x1e64
86	0x1e64
87	0x1e64
88	0x1e5c	SHSetNavBarText
89	0x1e64	SHNoCompImeTrailer
90	0x1e64	SHGetAutoRunPath
91	0x1e64
92	0x1e64
93	0x1e64
94	0x1e64
95	0x1e64
96	0x1e64
97	0x1e6c
98	0x1e64	SHEnumPropSheetHandlers
100	0x1e64	SHLoadContextMenuExtensions
101	0x1e64	SHInvokeContextMenuCommand
102	0x1e64	SHFreeContextMenuExtensions
108	0x1e70	SHCreateNewItem
113	0x1e64	SHChangeNotifyRegister
114	0x1e64	SHChangeNotifyDeregister
115	0x1e64	SHChangeNotifyFree
128	0x1e70	SHGetEmergencyCallList
155	0x25d8	SHNotificationAdd
156	0x25e0	SHNotificationUpdate
157	0x25e8	SHNotificationRemove
183	0x1e6c
184	0x1e6c
188	0x25f8	SHFindMenuBar
231	0x1e70	SHSetInputContext
232	0x1e70	SHGetInputContext
312	0x1e70	SHGetUIMetrics
2006	0x1e6c	SHIdleTimerReset
2008	0x1e70	SHOnPluginDataChange

module_name	AYGSHELL.dll
flags	0
timestamp	2006-02-11 15:30:58
version	0.0
ordinal_base	2
nFunctions	2007
nNames	82
Names(82)	0x7f84
Functions(2007)	0x6028
NameOrdinals(82)	0x80cc

show previews

offset	size	type	comment
0	22528	DLL	02/11/2006 15:30:58	#
15c1	15	HTM		#

offset:( 0x )size:( 0x )hotkeys:-=[]<>, offset/size fields are also editable

Please donate some bucks to keep this site up and running:
Ko-fi
Yandex.Money
Thank you!

everything is OK