filenamedifxapi.dll
size348672 (0x55200)
md5781c8c496335e927f7ec20f31991743a
typePE32+ executable (DLL) (GUI) x86-64, for MS Windows
mimetypeapplication/x-dosexec
clamavOK
virustotal→ scan with virustotal.com
histogram

MZ Header

signatureMZ
bytes_in_last_block0x90
blocks_in_file3
num_relocs0
header_paragraphs4
min_extra_paragraphs0
max_extra_paragraphs0xffff
ss0
sp0xb8
checksum0
ip0
cs0
reloc_table_offset0x40
overlay_number0
reserved00
oem_id0
oem_info0
reserved20
reserved30
reserved40
reserved50
reserved60
lfanew0xe8

Rich Header

lib idversiontimes used
259267153
2602671519
10289
2572671527
261267157
256267151
2652671529
255267151
258267151

DOS stub

00000000: 0e 1f ba 0e 00 b4 09 cd  21 b8 01 4c cd 21 54 68  |........!..L.!Th|
00000010: 69 73 20 70 72 6f 67 72  61 6d 20 63 61 6e 6e 6f  |is program canno|
00000020: 74 20 62 65 20 72 75 6e  20 69 6e 20 44 4f 53 20  |t be run in DOS |
00000030: 6d 6f 64 65 2e 0d 0d 0a  24 00 00 00 00 00 00 00  |mode....$.......|

PE Header

SignaturePE
Machine0x8664
NumberOfSections6
TimeDateStamp0xf7c45522
PointerToSymbolTable0
NumberOfSymbols0
SizeOfOptionalHeader0xf0
Characteristics0x2022
Magic0x20b
LinkerVersion14.15
SizeOfCode0x34e00
SizeOfInitializedData0x20a00
SizeOfUninitializedData0
AddressOfEntryPoint0x318e0
BaseOfCode0x1000
ImageBase0x161000000
SectionAlignment0x1000
FileAlignment0x200
OperatingSystemVersion10.0
ImageVersion10.0
SubsystemVersion6.0
Reserved10
SizeOfImage0x59000
SizeOfHeaders0x400
CheckSum0x5ec62
Subsystem2
DllCharacteristics0x4160
SizeOfStackReserve0x40000
SizeOfStackCommit0x1000
SizeOfHeapReserve0x100000
SizeOfHeapCommit0x1000
LoaderFlags0
NumberOfRvaAndSizes0x10

Sections

namevavsizeraw sizeflags
.text0x10000x34ddc0x34e00R-X CODE
.rdata0x360000x1dbf80x1dc00R-- IDATA
.data0x540000xaac0x200RW- IDATA
.pdata0x550000x16080x1800R-- IDATA
.rsrc0x570000x6d00x800R-- IDATA
.reloc0x580000xa40x200R-- IDATA DISCARDABLE

Data Directory

typevasize
EXPORT0x521900x1bc
IMPORT0x5234c0xc8
RESOURCE0x570000x6d0
EXCEPTION0x550000x1608
SECURITY00
BASERELOC0x580000xa4
DEBUG0x42ee00x54
ARCHITECTURE00
GLOBALPTR00
TLS00
LOAD_CONFIG0x361600x108
Bound_IAT00
IAT0x362680x6d8
Delay_IAT00
CLR_Header00
typenamesizecp
VERSION#18720
MANIFEST#1237080
module_namehintordfunction_name
msvcrt.dll18public: virtual __cdecl type_info::~type_info(void) __ptr64

??1type_info@@UEAA@XZ

msvcrt.dll381_initterm
msvcrt.dll174_amsg_exit
msvcrt.dll85_XcptFilter
msvcrt.dll680_resetstkoflw
msvcrt.dll191_callnewh
msvcrt.dll1139iswdigit
msvcrt.dll1274vswprintf_s
msvcrt.dll486_lock
msvcrt.dll833_unlock
msvcrt.dll75_CxxThrowException
msvcrt.dll123__dllonexit
msvcrt.dll656_onexit
msvcrt.dll1174memset
msvcrt.dll864_vscwprintf
msvcrt.dll1295wcspbrk
msvcrt.dll1296wcsrchr
msvcrt.dll916_wcsnicmp
msvcrt.dll1135iswalpha
msvcrt.dll1170memcpy
msvcrt.dll91__CxxFrameHandler3
msvcrt.dll40void (__cdecl*__cdecl _set_se_translator(void (__cdecl*)(unsigned int, struct _EXCEPTION_POINTERS * __ptr64)))(unsigned int, struct _EXCEPTION_POINTERS * __ptr64)

?_set_se_translator@@YAP6AXIPEAU_EXCEPTION_POINTERS@@@ZP6AXI0@Z@Z

msvcrt.dll912_wcslwr_s
msvcrt.dll1300wcsstr
msvcrt.dll936_wcsupr_s
msvcrt.dll1281wcschr
msvcrt.dll1173memmove_s
msvcrt.dll906_wcsicmp
msvcrt.dll1158malloc
msvcrt.dll1100free
msvcrt.dll87__C_specific_handler
msvcrt.dll1171memcpy_s
msvcrt.dll873_vsnwprintf
msvcrt.dll1169memcmp
msvcrt.dll1282wcscmp
ntdll.dll503NtQueryValueKey
ntdll.dll251NtClose
ntdll.dll1003RtlFreeUnicodeString
ntdll.dll991RtlFormatCurrentUserKeyPath
ntdll.dll1254RtlNtStatusToDosError
ntdll.dll1114RtlInitUnicodeString
ntdll.dll413NtOpenKey
ntdll.dll1696VerSetConditionMask
ntdll.dll747RtlCaptureContext
ntdll.dll1235RtlLookupFunctionEntry
ntdll.dll1532RtlVirtualUnwind
KERNEL32.dll774GetThreadLocale
KERNEL32.dll154CompareStringOrdinal
KERNEL32.dll948LCMapStringW
KERNEL32.dll360ExpandEnvironmentStringsW
KERNEL32.dll1511WaitForSingleObjectEx
KERNEL32.dll1310SetEndOfFile
KERNEL32.dll850HeapFree
KERNEL32.dll546GetCurrentThreadId
KERNEL32.dll846HeapAlloc
KERNEL32.dll693GetProcAddress
KERNEL32.dll699GetProcessHeap
KERNEL32.dll638GetModuleHandleW
KERNEL32.dll309EnterCriticalSection
KERNEL32.dll960LeaveCriticalSection
KERNEL32.dll871InitializeCriticalSection
KERNEL32.dll853HeapReAlloc
KERNEL32.dll849HeapDestroy
KERNEL32.dll273DeleteCriticalSection
KERNEL32.dll615GetLastError
KERNEL32.dll1606lstrcmpiW
KERNEL32.dll1418SizeofResource
KERNEL32.dll990LockResource
KERNEL32.dll1328SetFilePointer
KERNEL32.dll411FindResourceExW
KERNEL32.dll1343SetLastError
KERNEL32.dll967LoadLibraryW
KERNEL32.dll433FreeLibrary
KERNEL32.dll804GetVersionExW
KERNEL32.dll1492VerifyVersionInfoW
KERNEL32.dll1323SetFileAttributesW
KERNEL32.dll278DeleteFileW
KERNEL32.dll608GetFullPathNameW
KERNEL32.dll588GetFileAttributesW
KERNEL32.dll186CreateDirectoryW
KERNEL32.dll763GetTempFileNameW
KERNEL32.dll1003MoveFileExW
KERNEL32.dll203CreateFileW
KERNEL32.dll134CloseHandle
KERNEL32.dll390FindFirstFileW
KERNEL32.dll1603lstrcmpW
KERNEL32.dll402FindNextFileW
KERNEL32.dll379FindClose
KERNEL32.dll1213RemoveDirectoryW
KERNEL32.dll541GetCurrentProcess
KERNEL32.dll594GetFileSize
KERNEL32.dll200CreateFileMappingW
KERNEL32.dll993MapViewOfFile
KERNEL32.dll1010MultiByteToWideChar
KERNEL32.dll1471UnmapViewOfFile
KERNEL32.dll173CopyFileW
KERNEL32.dll756GetSystemWindowsDirectoryW
KERNEL32.dll576GetEnvironmentVariableW
KERNEL32.dll1549WideCharToMultiByte
KERNEL32.dll155CompareStringW
KERNEL32.dll978LocalFree
KERNEL32.dll743GetSystemDirectoryW
KERNEL32.dll973LocalAlloc
KERNEL32.dll981LocalReAlloc
KERNEL32.dll218CreateMutexW
KERNEL32.dll1510WaitForSingleObject
KERNEL32.dll1204ReleaseMutex
KERNEL32.dll289DeviceIoControl
KERNEL32.dll752GetSystemTimeAsFileTime
KERNEL32.dll1419Sleep
KERNEL32.dll855HeapSize
KERNEL32.dll1126RaiseException
KERNEL32.dll1468UnhandledExceptionFilter
KERNEL32.dll1403SetUnhandledExceptionFilter
KERNEL32.dll1434TerminateProcess
KERNEL32.dll1104QueryPerformanceCounter
KERNEL32.dll542GetCurrentProcessId
KERNEL32.dll782GetTickCount
KERNEL32.dll1509WaitForMultipleObjectsEx
KERNEL32.dll1316SetEvent
KERNEL32.dll191CreateEventW
KERNEL32.dll970LoadResource
USER32.dll49CharLowerW
USER32.dll946UnregisterClassA
SETUPAPI.dll502SetupInstallFilesFromInfSectionW
SETUPAPI.dll528SetupPromptReboot
SETUPAPI.dll504SetupInstallFromInfSectionW
SETUPAPI.dll510SetupInstallServicesFromInfSectionW
SETUPAPI.dll448SetupFindNextLine
SETUPAPI.dll450SetupFindNextMatchLineW
SETUPAPI.dll489SetupGetStringFieldW
SETUPAPI.dll472SetupGetIntField
SETUPAPI.dll456SetupGetFieldCount
SETUPAPI.dll263SetupCloseInfFile
SETUPAPI.dll262SetupCloseFileQueue
SETUPAPI.dll494SetupInitDefaultQueueCallbackEx
SETUPAPI.dll587SetupTermDefaultQueueCallback
SETUPAPI.dll548SetupQueueCopyW
SETUPAPI.dll267SetupCommitFileQueueW
SETUPAPI.dll280SetupDefaultQueueCallbackW
SETUPAPI.dll317SetupDiDestroyDeviceInfoList
SETUPAPI.dll340SetupDiGetClassDevsW
SETUPAPI.dll491SetupGetTargetPathW
SETUPAPI.dll398SetupDiOpenClassRegKey
SETUPAPI.dll44CM_Enumerate_Classes
SETUPAPI.dll320SetupDiEnumDeviceInfo
SETUPAPI.dll447SetupFindFirstLineW
SETUPAPI.dll89CM_Get_Device_ID_ListW
SETUPAPI.dll93CM_Get_Device_ID_List_SizeW
SETUPAPI.dll151CM_Locate_DevNodeW
SETUPAPI.dll82CM_Get_DevNode_Status
SETUPAPI.dll171CM_Query_And_Remove_SubTreeW
SETUPAPI.dll216CM_Setup_DevNode
SETUPAPI.dll433SetupDiSetDeviceRegistryPropertyW
SETUPAPI.dll85CM_Get_Device_IDW
SETUPAPI.dll401SetupDiOpenDevRegKey
SETUPAPI.dll361SetupDiGetDeviceInstanceIdW
SETUPAPI.dll304SetupDiCreateDeviceInfoList
SETUPAPI.dll359SetupDiGetDeviceInstallParamsW
SETUPAPI.dll428SetupDiSetDeviceInstallParamsW
SETUPAPI.dll289SetupDiBuildDriverInfoList
SETUPAPI.dll290SetupDiCallClassInstaller
SETUPAPI.dll386SetupDiGetSelectedDriverW
SETUPAPI.dll372SetupDiGetDriverInfoDetailW
SETUPAPI.dll403SetupDiOpenDeviceInfoW
SETUPAPI.dll436SetupDiSetSelectedDevice
SETUPAPI.dll300SetupDiClassNameFromGuidW
SETUPAPI.dll521SetupOpenInfFileW
SETUPAPI.dll273SetupCopyOEMInfW
SETUPAPI.dll519SetupOpenFileQueue
SETUPAPI.dll518SetupOpenAppendInfFileW
SETUPAPI.dll476SetupGetLineCountW
SETUPAPI.dll370SetupDiGetDeviceRegistryPropertyW
SETUPAPI.dll627pSetupGetGlobalFlags
SETUPAPI.dll656pSetupSetGlobalFlags
SETUPAPI.dll329SetupDiGetActualSectionToInstallW
ADVAPI32.dll623RegDeleteKeyW
ADVAPI32.dll665RegQueryValueExW
ADVAPI32.dll603RegCloseKey
ADVAPI32.dll331GetLengthSid
ADVAPI32.dll398InitializeAcl
ADVAPI32.dll16AddAccessAllowedAce
ADVAPI32.dll399InitializeSecurityDescriptor
ADVAPI32.dll32AllocateAndInitializeSid
ADVAPI32.dll744SetSecurityDescriptorDacl
ADVAPI32.dll95CheckTokenMembership
ADVAPI32.dll627RegDeleteValueW
ADVAPI32.dll728SetEntriesInAclW
ADVAPI32.dll592QueryServiceStatus
ADVAPI32.dll535OpenSCManagerW
ADVAPI32.dll537OpenServiceW
ADVAPI32.dll106ControlService
ADVAPI32.dll101CloseServiceHandle
ADVAPI32.dll236DeleteService
ADVAPI32.dll763StartServiceW
ADVAPI32.dll308FreeSid
ADVAPI32.dll652RegOpenKeyExW
ADVAPI32.dll612RegCreateKeyExW
ADVAPI32.dll681RegSetValueExW
ole32.dll144CoUninitialize
ole32.dll523StringFromCLSID
ole32.dll140CoTaskMemFree
ole32.dll43CoCreateInstance
ole32.dll96CoInitialize
WINTRUST.dll8CryptCATAdminCalcHashFromFileHandle
WINTRUST.dll143WinVerifyTrust
CRYPT32.dll64CertFreeCertificateContext
CRYPT32.dll68CertGetCTLContextProperty
CRYPT32.dll60CertFreeCTLContext
CRYPT32.dll197CryptQueryObject
ordentry_vafunction_name
10x1c30DIFXAPISetLogCallbackA
20x1c10DIFXAPISetLogCallbackW
30x1aa0DriverPackageGetPathA
40x1980DriverPackageGetPathW
50x15c0DriverPackageInstallA
60x1540DriverPackageInstallW
70x14b0DriverPackagePreinstallA
80x1440DriverPackagePreinstallW
90x17e0DriverPackageUninstallA
100x1760DriverPackageUninstallW
110x1be0SetDifxLogCallbackA
120x1bc0SetDifxLogCallbackW
module_nameDIFXAPI.dll
flags0
timestamp2101-09-22 13:33:22
version0.0
ordinal_base1
nFunctions12
nNames12
Names(12)0x521e8
Functions(12)0x521b8
NameOrdinals(12)0x52218

StringTable 040904b0

CompanyNameMicrosoft Corporation
FileDescriptionDriver Install Frameworks for API library module
FileVersion2.1
InternalNameDIFxAPI
LegalCopyright© Microsoft Corporation. All rights reserved.
OriginalFilenameDIFxAPI.dll
ProductNameDriver Install Frameworks API (DIFxAPI)
ProductVersion2.1

VS_FIXEDFILEINFO

FileVersion2.1.0.0
ProductVersion2.1.0.0
StrucVersion0x10000
FileFlagsMask0x3f
FileFlags8
FileOS0x40004
FileType2
FileSubtype0
offsetsizetypecomment
15c115HTM#
15d0343088BINoverlay data past EOF#
offset:( 0x )size:( 0x )hotkeys:-=[]<>, offset/size fields are also editable











everything is OK