PresentMon_x64.exe
045a5c1465886bd8435ceab20805b119367e2d71ba02a635547c81c91e791b01
Identity
| Property | Value |
|---|---|
| Architecture | AMD64 |
| Source size | 1,108,080 bytes |
| Preferred image base | 0x140000000 |
| Entry RVA | 0x8e720 |
| Imports / exports | 167 / 89 |
| Exception/unwind ranges | 2,850 |
| Executable raw bytes | 788,992 |
Physical paths:
FrameViewSDK\bin\PresentMon_x64.exe
Decompilation coverage
Complete with errors: 4,038 successful reconstructions, 1 failures, 4,039 attempted entries, 4,039 reported discovered entries.
Counts refer to automated analysis, not manual review or recovered source code. Function boundaries can change during analysis.
Sections
| Section | RVA | Raw offset | Raw bytes | Virtual bytes | R / W / X | Entropy |
|---|---|---|---|---|---|---|
.text |
0x1000 |
1024 |
788,992 | 788,766 | yes / no / yes | 6.4412 |
.rdata |
0xc2000 |
790016 |
214,528 | 214,382 | yes / no / no | 5.2109 |
.data |
0xf7000 |
1004544 |
34,304 | 72,020 | yes / yes / no | 3.9642 |
.pdata |
0x109000 |
1038848 |
34,304 | 34,200 | yes / no / no | 5.977 |
.didat |
0x112000 |
1073152 |
1,024 | 592 | yes / yes / no | 2.2515 |
_RDATA |
0x113000 |
1074176 |
512 | 500 | yes / no / no | 4.1712 |
.rsrc |
0x114000 |
1074688 |
17,920 | 17,728 | yes / no / no | 3.8307 |
.reloc |
0x119000 |
1092608 |
5,120 | 4,784 | yes / no / no | 5.317 |
PE mitigation flags
| Flag | Present |
|---|---|
| dynamic_base | true |
| high_entropy_va | true |
| nx_compat | true |
| guard_cf_flag | true |
| no_seh | false |
| appcontainer | false |
| force_integrity | false |
Evidence
Large artifacts require Git LFS. A filename hash identifies the original PE; the content of a generated artifact has a different digest.