NVI2UI.DLL
e0840001809399d9028d5edeeccd12b30c3dcbd2196742b04a902dd1a6989bb2
Identity
| Property | Value |
|---|---|
| Architecture | x86 |
| Source size | 2,004,200 bytes |
| Preferred image base | 0x10000000 |
| Entry RVA | 0xf4a90 |
| Imports / exports | 370 / 5 |
| Exception/unwind ranges | 0 |
| Executable raw bytes | 1,358,848 |
Physical paths:
Installer2\InstallerCore\NVI2UI.DLL
Decompilation coverage
Complete with errors: 4,850 successful reconstructions, 9 failures, 4,859 attempted entries, 4,859 reported discovered entries.
Counts refer to automated analysis, not manual review or recovered source code. Function boundaries can change during analysis.
Sections
| Section | RVA | Raw offset | Raw bytes | Virtual bytes | R / W / X | Entropy |
|---|---|---|---|---|---|---|
.text |
0x1000 |
1024 |
1,358,848 | 1,358,444 | yes / no / yes | 6.4961 |
.rdata |
0x14d000 |
1359872 |
405,504 | 405,024 | yes / no / no | 4.7898 |
.data |
0x1b0000 |
1765376 |
76,288 | 82,724 | yes / yes / no | 5.003 |
.fptable |
0x1c5000 |
1841664 |
512 | 128 | yes / yes / no | 0.0 |
.rsrc |
0x1c6000 |
1842176 |
26,624 | 26,152 | yes / no / no | 4.7963 |
.reloc |
0x1cd000 |
1868800 |
115,200 | 115,056 | yes / no / no | 6.6044 |
PE mitigation flags
| Flag | Present |
|---|---|
| dynamic_base | true |
| high_entropy_va | false |
| nx_compat | true |
| guard_cf_flag | true |
| no_seh | false |
| appcontainer | false |
| force_integrity | false |
Evidence
Large artifacts require Git LFS. A filename hash identifies the original PE; the content of a generated artifact has a different digest.