Diagnostics.dll
ef4d98d1b68cf8e60bc51960b9b28be0a4e90b3291cf66953753a03f8fc056a4
Identity
| Property | Value |
|---|---|
| Architecture | AMD64 |
| Source size | 2,959,984 bytes |
| Preferred image base | 0x180000000 |
| Entry RVA | 0x1ad0 |
| Imports / exports | 393 / 1 |
| Exception/unwind ranges | 7,117 |
| Executable raw bytes | 2,426,880 |
Physical paths:
NVIDIA App\Plugins\localuser\NvApp\Diagnostics.dll
Decompilation coverage
Complete with errors: 15,179 successful reconstructions, 7 failures, 15,186 attempted entries, 15,186 reported discovered entries.
Counts refer to automated analysis, not manual review or recovered source code. Function boundaries can change during analysis.
Sections
| Section | RVA | Raw offset | Raw bytes | Virtual bytes | R / W / X | Entropy |
|---|---|---|---|---|---|---|
.text |
0x1000 |
1024 |
2,426,880 | 2,426,381 | yes / no / yes | 5.2111 |
.rdata |
0x252000 |
2427904 |
351,744 | 351,330 | yes / no / no | 4.985 |
.data |
0x2a8000 |
2779648 |
26,112 | 31,249 | yes / yes / no | 4.1018 |
.pdata |
0x2b0000 |
2805760 |
94,720 | 94,236 | yes / no / no | 5.8864 |
.idata |
0x2c8000 |
2900480 |
27,136 | 27,101 | yes / no / no | 4.4145 |
.gfids |
0x2cf000 |
2927616 |
6,656 | 6,148 | yes / no / no | 3.387 |
.giats |
0x2d1000 |
2934272 |
512 | 288 | yes / no / no | 0.2748 |
.tls |
0x2d2000 |
2934784 |
1,024 | 777 | yes / yes / no | 0.0112 |
.00cfg |
0x2d3000 |
2935808 |
512 | 373 | yes / no / no | 0.4319 |
.rsrc |
0x2d4000 |
2936320 |
1,536 | 1,506 | yes / no / no | 4.0508 |
.reloc |
0x2d5000 |
2937856 |
11,776 | 11,565 | yes / no / no | 2.3022 |
PE mitigation flags
| Flag | Present |
|---|---|
| dynamic_base | true |
| high_entropy_va | true |
| nx_compat | true |
| guard_cf_flag | true |
| no_seh | false |
| appcontainer | false |
| force_integrity | false |
Extracted native interfaces
| Name | Command | Notification | Description |
|---|---|---|---|
SendExceptionInfo |
True | False | |
SendUserFeedbackInfo |
True | False |
Evidence
Large artifacts require Git LFS. A filename hash identifies the original PE; the content of a generated artifact has a different digest.