_OverClockingNvc.dll
34bf6504e387f5e00ad3d662b90a2ec23a124794352af02fbcd504d3d573a39d
Identity
| Property | Value |
|---|---|
| Architecture | AMD64 |
| Source size | 2,902,640 bytes |
| Preferred image base | 0x180000000 |
| Entry RVA | 0x1b10 |
| Imports / exports | 387 / 1 |
| Exception/unwind ranges | 12,717 |
| Executable raw bytes | 2,244,608 |
Physical paths:
NVIDIA App\Plugins\oc\_OverClockingNvc.dll
Decompilation coverage
Complete with errors: 12,569 successful reconstructions, 4 failures, 12,573 attempted entries, 12,573 reported discovered entries.
Counts refer to automated analysis, not manual review or recovered source code. Function boundaries can change during analysis.
Sections
| Section | RVA | Raw offset | Raw bytes | Virtual bytes | R / W / X | Entropy |
|---|---|---|---|---|---|---|
.text |
0x1000 |
1024 |
2,244,608 | 2,244,416 | yes / no / yes | 5.1408 |
.rdata |
0x225000 |
2245632 |
407,040 | 406,968 | yes / no / no | 4.8596 |
.data |
0x289000 |
2652672 |
23,552 | 51,073 | yes / yes / no | 4.0168 |
.pdata |
0x296000 |
2676224 |
168,448 | 168,156 | yes / no / no | 5.9217 |
.idata |
0x2c0000 |
2844672 |
26,624 | 26,395 | yes / no / no | 4.2755 |
.gfids |
0x2c7000 |
2871296 |
5,120 | 5,064 | yes / no / no | 3.5122 |
.giats |
0x2c9000 |
2876416 |
512 | 280 | yes / no / no | 0.2287 |
.tls |
0x2ca000 |
2876928 |
1,024 | 777 | yes / yes / no | 0.0112 |
.00cfg |
0x2cb000 |
2877952 |
512 | 373 | yes / no / no | 0.4319 |
.rsrc |
0x2cc000 |
2878464 |
2,560 | 2,153 | yes / no / no | 2.5285 |
.reloc |
0x2cd000 |
2881024 |
11,264 | 11,013 | yes / no / no | 2.1248 |
PE mitigation flags
| Flag | Present |
|---|---|
| dynamic_base | true |
| high_entropy_va | true |
| nx_compat | true |
| guard_cf_flag | true |
| no_seh | false |
| appcontainer | false |
| force_integrity | false |
Extracted native interfaces
| Name | Command | Notification | Description |
|---|---|---|---|
SetManualOCLimits |
True | False | |
StartOcManualScan |
True | False | |
StopOcManualScan |
True | False | |
EnableBackgroundOcScan |
True | False | |
EnableAutotuneOc |
True | False | |
RestoreOcDefault |
True | False | |
SetFanSettings |
True | False | |
SetPerfProfile |
True | False |
Evidence
Large artifacts require Git LFS. A filename hash identifies the original PE; the content of a generated artifact has a different digest.