nvspapi64.dll
25b2b108a502619e6f2248abaddb52b0f81667b60adb7c371d416eb12c7c9be1
Identity
| Property | Value |
|---|---|
| Architecture | AMD64 |
| Source size | 3,356,784 bytes |
| Preferred image base | 0x180000000 |
| Entry RVA | 0x1a30 |
| Imports / exports | 289 / 5 |
| Exception/unwind ranges | 12,749 |
| Executable raw bytes | 2,562,560 |
Physical paths:
NVIDIA App\ShadowPlay\nvspapi64.dll
Decompilation coverage
Complete: 12,141 successful reconstructions, 0 failures, 12,141 attempted entries, 12,141 reported discovered entries.
Counts refer to automated analysis, not manual review or recovered source code. Function boundaries can change during analysis.
Sections
| Section | RVA | Raw offset | Raw bytes | Virtual bytes | R / W / X | Entropy |
|---|---|---|---|---|---|---|
.text |
0x1000 |
1024 |
2,562,560 | 2,562,174 | yes / no / yes | 5.4338 |
.rdata |
0x273000 |
2563584 |
564,224 | 563,849 | yes / no / no | 4.9195 |
.data |
0x2fd000 |
3127808 |
14,336 | 51,376 | yes / yes / no | 2.9237 |
.pdata |
0x30a000 |
3142144 |
168,960 | 168,576 | yes / no / no | 5.942 |
.idata |
0x334000 |
3311104 |
14,336 | 14,295 | yes / no / no | 3.7976 |
.gfids |
0x338000 |
3325440 |
4,608 | 4,420 | yes / no / no | 3.3224 |
.tls |
0x33a000 |
3330048 |
1,024 | 871 | yes / yes / no | 0.0112 |
.00cfg |
0x33b000 |
3331072 |
512 | 373 | yes / no / no | 0.4199 |
.rsrc |
0x33c000 |
3331584 |
1,024 | 884 | yes / no / no | 2.9569 |
.reloc |
0x33d000 |
3332608 |
13,824 | 13,651 | yes / no / no | 2.455 |
PE mitigation flags
| Flag | Present |
|---|---|
| dynamic_base | true |
| high_entropy_va | true |
| nx_compat | true |
| guard_cf_flag | true |
| no_seh | false |
| appcontainer | false |
| force_integrity | false |
Evidence
Large artifacts require Git LFS. A filename hash identifies the original PE; the content of a generated artifact has a different digest.