_nvspcaps64.dll
0c8f771fa27f073701e99f1b3d49d45e6f99f1c2bba4291fa6003409a1c7ae1d
Identity
| Property | Value |
|---|---|
| Architecture | AMD64 |
| Source size | 3,992,176 bytes |
| Preferred image base | 0x180000000 |
| Entry RVA | 0x1c50 |
| Imports / exports | 344 / 1 |
| Exception/unwind ranges | 13,884 |
| Executable raw bytes | 3,005,440 |
Physical paths:
NVIDIA App\ShadowPlay\NVSPCAPS\_nvspcaps64.dll
Decompilation coverage
Complete: 14,150 successful reconstructions, 0 failures, 14,150 attempted entries, 14,150 reported discovered entries.
Counts refer to automated analysis, not manual review or recovered source code. Function boundaries can change during analysis.
Sections
| Section | RVA | Raw offset | Raw bytes | Virtual bytes | R / W / X | Entropy |
|---|---|---|---|---|---|---|
.text |
0x1000 |
1024 |
3,005,440 | 3,004,978 | yes / no / yes | 5.4612 |
.rdata |
0x2df000 |
3006464 |
732,160 | 731,922 | yes / no / no | 5.1699 |
.data |
0x392000 |
3738624 |
17,408 | 70,112 | yes / yes / no | 3.1248 |
.pdata |
0x3a4000 |
3756032 |
183,808 | 183,564 | yes / no / no | 5.968 |
.idata |
0x3d1000 |
3939840 |
17,920 | 17,415 | yes / no / no | 3.8194 |
.gfids |
0x3d6000 |
3957760 |
5,632 | 5,280 | yes / no / no | 3.381 |
.tls |
0x3d8000 |
3963392 |
1,024 | 871 | yes / yes / no | 0.0112 |
.00cfg |
0x3d9000 |
3964416 |
512 | 373 | yes / no / no | 0.4158 |
.rsrc |
0x3da000 |
3964928 |
1,024 | 884 | yes / no / no | 2.9503 |
.reloc |
0x3db000 |
3965952 |
15,872 | 15,869 | yes / no / no | 2.4084 |
PE mitigation flags
| Flag | Present |
|---|---|
| dynamic_base | true |
| high_entropy_va | true |
| nx_compat | true |
| guard_cf_flag | true |
| no_seh | false |
| appcontainer | false |
| force_integrity | false |
Evidence
Large artifacts require Git LFS. A filename hash identifies the original PE; the content of a generated artifact has a different digest.