NvOc.dll
c1a24f75b1db3cccdeab14906a32154254e03ee1f6f9d74d8cfb0dcb726ef2ee
Identity
| Property | Value |
|---|---|
| Architecture | AMD64 |
| Source size | 2,772,592 bytes |
| Preferred image base | 0x180000000 |
| Entry RVA | 0x1a80 |
| Imports / exports | 387 / 1 |
| Exception/unwind ranges | 12,038 |
| Executable raw bytes | 2,128,896 |
Physical paths:
NVIDIA App\CEF\plugins\NVIDIA App\NvOc.dll
Decompilation coverage
Complete with errors: 11,404 successful reconstructions, 4 failures, 11,408 attempted entries, 11,408 reported discovered entries.
Counts refer to automated analysis, not manual review or recovered source code. Function boundaries can change during analysis.
Sections
| Section | RVA | Raw offset | Raw bytes | Virtual bytes | R / W / X | Entropy |
|---|---|---|---|---|---|---|
.text |
0x1000 |
1024 |
2,128,896 | 2,128,857 | yes / no / yes | 5.167 |
.rdata |
0x209000 |
2129920 |
406,016 | 405,741 | yes / no / no | 4.924 |
.data |
0x26d000 |
2535936 |
20,480 | 47,953 | yes / yes / no | 3.9259 |
.pdata |
0x279000 |
2556416 |
159,232 | 159,192 | yes / no / no | 5.9288 |
.idata |
0x2a0000 |
2715648 |
27,136 | 26,641 | yes / no / no | 4.228 |
.gfids |
0x2a7000 |
2742784 |
5,120 | 4,692 | yes / no / no | 3.2771 |
.giats |
0x2a9000 |
2747904 |
512 | 276 | yes / no / no | 0.1741 |
.tls |
0x2aa000 |
2748416 |
1,024 | 777 | yes / yes / no | 0.0112 |
.00cfg |
0x2ab000 |
2749440 |
512 | 373 | yes / no / no | 0.4117 |
.rsrc |
0x2ac000 |
2749952 |
1,536 | 1,470 | yes / no / no | 3.9944 |
.reloc |
0x2ad000 |
2751488 |
10,752 | 10,320 | yes / no / no | 1.9882 |
PE mitigation flags
| Flag | Present |
|---|---|
| dynamic_base | true |
| high_entropy_va | true |
| nx_compat | true |
| guard_cf_flag | true |
| no_seh | false |
| appcontainer | false |
| force_integrity | false |
Extracted native interfaces
| Name | Command | Notification | Description |
|---|---|---|---|
GetFeatureSupportState |
True | False | Provides information about OverClocking support |
GetManualOCLimits |
True | False | |
GetLastOcScanResults |
True | False | |
GetLastIncompleteOcScannerResults |
True | False | |
GetFanSettings |
True | False | |
OcScanStatusUpdatesNotifications |
True | False | Scan progress status updates |
GetOCConfig |
True | False | |
GetGpuInfo |
True | False | Provides information about OverClocking support |
GetOCAdminConsent |
True | False | Provides information about OverClocking admin consent |
SetOCAdminConsent |
True | False | Sets OverClocking admin consent |
powerStatusNotification |
True | False | Power status updates. 0-AC , 1-DC, 2-Short term power supply like UPS, 3-Unknown or out of range |
GetVFPoints |
True | False | Provides information about base and offset VF points. (VF Curve) |
EnableCurrentVFPointNotification |
True | False | enable/disable sending current VF point notification |
CurrentVFPointNotification |
True | False | Voltage in current VF point on VF curve |
GetPerfProfiles |
True | False |
Evidence
Large artifacts require Git LFS. A filename hash identifies the original PE; the content of a generated artifact has a different digest.