capcore64.dll
ea21c7b665248ac378459dbead602436c45181cb9606b33eb6e59d30d5e9f3b4
Identity
| Property | Value |
|---|---|
| Architecture | AMD64 |
| Source size | 1,654,896 bytes |
| Preferred image base | 0x180000000 |
| Entry RVA | 0x1520 |
| Imports / exports | 191 / 1 |
| Exception/unwind ranges | 3,516 |
| Executable raw bytes | 1,193,984 |
Physical paths:
NVIDIA App\ShadowPlay\capcore64.dll
Decompilation coverage
Complete: 5,544 successful reconstructions, 0 failures, 5,544 attempted entries, 5,544 reported discovered entries.
Counts refer to automated analysis, not manual review or recovered source code. Function boundaries can change during analysis.
Sections
| Section | RVA | Raw offset | Raw bytes | Virtual bytes | R / W / X | Entropy |
|---|---|---|---|---|---|---|
.text |
0x1000 |
1024 |
1,193,984 | 1,193,504 | yes / no / yes | 5.2699 |
.rdata |
0x125000 |
1195008 |
357,376 | 357,140 | yes / no / no | 5.0894 |
.data |
0x17d000 |
1552384 |
20,480 | 45,712 | yes / yes / no | 1.5198 |
.pdata |
0x189000 |
1572864 |
47,104 | 46,704 | yes / no / no | 5.7426 |
.idata |
0x195000 |
1619968 |
10,240 | 10,097 | yes / no / no | 3.5805 |
.gfids |
0x198000 |
1630208 |
3,072 | 2,676 | yes / no / no | 2.5957 |
.giats |
0x199000 |
1633280 |
512 | 268 | yes / no / no | 0.1184 |
.00cfg |
0x19a000 |
1633792 |
512 | 373 | yes / no / no | 0.4039 |
.tls |
0x19b000 |
1634304 |
1,024 | 777 | yes / yes / no | 0.0112 |
.rsrc |
0x19c000 |
1635328 |
1,024 | 904 | yes / no / no | 3.017 |
.reloc |
0x19d000 |
1636352 |
8,192 | 7,953 | yes / no / no | 2.9672 |
PE mitigation flags
| Flag | Present |
|---|---|
| dynamic_base | true |
| high_entropy_va | true |
| nx_compat | true |
| guard_cf_flag | true |
| no_seh | false |
| appcontainer | false |
| force_integrity | false |
Evidence
Large artifacts require Git LFS. A filename hash identifies the original PE; the content of a generated artifact has a different digest.