NVI2.DLL
fe0397022b4e1bf79c31d55c43fc99792d489a889c8790b712de5a022c7994a4
Identity
| Property | Value |
|---|---|
| Architecture | x86 |
| Source size | 7,291,112 bytes |
| Preferred image base | 0x10000000 |
| Entry RVA | 0x3610c0 |
| Imports / exports | 365 / 12 |
| Exception/unwind ranges | 0 |
| Executable raw bytes | 4,385,792 |
Physical paths:
Installer2\InstallerCore\NVI2.DLL
Decompilation coverage
Partial: 22,413 successful reconstructions, 446 failures, 22,859 attempted entries, 22,859 reported discovered entries.
Incremental autoanalysis was not complete; further functions may remain unidentified
Counts refer to automated analysis, not manual review or recovered source code. Function boundaries can change during analysis.
Sections
| Section | RVA | Raw offset | Raw bytes | Virtual bytes | R / W / X | Entropy |
|---|---|---|---|---|---|---|
.text |
0x1000 |
1024 |
4,385,792 | 4,385,532 | yes / no / yes | 6.4956 |
.rdata |
0x430000 |
4386816 |
1,521,664 | 1,521,592 | yes / no / no | 4.7131 |
.data |
0x5a4000 |
5908480 |
271,360 | 312,720 | yes / yes / no | 4.9897 |
.didat |
0x5f1000 |
6179840 |
512 | 96 | yes / yes / no | 1.2951 |
.fptable |
0x5f2000 |
6180352 |
512 | 128 | yes / yes / no | 0.0 |
.rsrc |
0x5f3000 |
6180864 |
638,464 | 638,464 | yes / no / no | 4.0418 |
.reloc |
0x68f000 |
6819328 |
451,584 | 451,520 | yes / no / no | 6.5989 |
PE mitigation flags
| Flag | Present |
|---|---|
| dynamic_base | true |
| high_entropy_va | false |
| nx_compat | true |
| guard_cf_flag | true |
| no_seh | false |
| appcontainer | false |
| force_integrity | false |
Evidence
Large artifacts require Git LFS. A filename hash identifies the original PE; the content of a generated artifact has a different digest.