ipccommon64.dll
0c2568f255d2a966bf61638c03f51bd92c0b641d70ef0c233c67120ff8fd71ea
Identity
| Property | Value |
|---|---|
| Architecture | AMD64 |
| Source size | 1,296,496 bytes |
| Preferred image base | 0x180000000 |
| Entry RVA | 0x15c0 |
| Imports / exports | 175 / 2 |
| Exception/unwind ranges | 3,108 |
| Executable raw bytes | 1,034,752 |
Physical paths:
NVIDIA App\ShadowPlay\ipccommon64.dll
Decompilation coverage
Complete: 5,430 successful reconstructions, 0 failures, 5,430 attempted entries, 5,430 reported discovered entries.
Counts refer to automated analysis, not manual review or recovered source code. Function boundaries can change during analysis.
Sections
| Section | RVA | Raw offset | Raw bytes | Virtual bytes | R / W / X | Entropy |
|---|---|---|---|---|---|---|
.text |
0x1000 |
1024 |
1,034,752 | 1,034,547 | yes / no / yes | 5.0962 |
.rdata |
0xfe000 |
1035776 |
176,128 | 175,819 | yes / no / no | 4.5769 |
.data |
0x129000 |
1211904 |
11,264 | 22,904 | yes / yes / no | 3.0455 |
.pdata |
0x12f000 |
1223168 |
41,472 | 41,316 | yes / no / no | 5.7111 |
.idata |
0x13a000 |
1264640 |
8,704 | 8,475 | yes / no / no | 3.9399 |
.gfids |
0x13d000 |
1273344 |
2,560 | 2,064 | yes / no / no | 2.5475 |
.giats |
0x13e000 |
1275904 |
512 | 264 | yes / no / no | 0.0612 |
.00cfg |
0x13f000 |
1276416 |
512 | 373 | yes / no / no | 0.3548 |
.tls |
0x140000 |
1276928 |
1,024 | 777 | yes / yes / no | 0.0112 |
.rsrc |
0x141000 |
1277952 |
1,024 | 884 | yes / no / no | 2.9307 |
.reloc |
0x142000 |
1278976 |
7,168 | 6,712 | yes / no / no | 3.0676 |
PE mitigation flags
| Flag | Present |
|---|---|
| dynamic_base | true |
| high_entropy_va | true |
| nx_compat | true |
| guard_cf_flag | true |
| no_seh | false |
| appcontainer | false |
| force_integrity | false |
Evidence
Large artifacts require Git LFS. A filename hash identifies the original PE; the content of a generated artifact has a different digest.