{
  "path": "FrameViewSDK\\bin\\nvrla.exe",
  "sha256": "ed1b58b59ac1dc101da0ddfa8a2d81fbf7adf62b83d92974fc317bccbae158d4",
  "method": "Capstone linear sweep over raw bytes of all IMAGE_SCN_MEM_EXECUTE sections; skipdata enabled; no reachability proof",
  "sections": [
    {
      "name": ".text",
      "raw_bytes": 1046528,
      "processed_bytes": 1046528,
      "instructions": 291678,
      "skipdata_bytes": 959
    }
  ],
  "utc": "2026-11-11T21:40:17.706663+00:00",
  "instructions": 291678,
  "skipdata_bytes": 959,
  "calls": 20568,
  "api_reference_counts": {
    "KERNEL32.dll!OutputDebugStringA": 2,
    "KERNEL32.dll!Sleep": 9,
    "KERNEL32.dll!SetEvent": 5,
    "ADVAPI32.dll!EventWriteTransfer": 1,
    "ADVAPI32.dll!EventRegister": 1,
    "ADVAPI32.dll!EventUnregister": 1,
    "KERNEL32.dll!GetModuleFileNameA": 1,
    "KERNEL32.dll!QueryPerformanceCounter": 3,
    "KERNEL32.dll!WaitForSingleObject": 3,
    "KERNEL32.dll!ResetEvent": 1,
    "KERNEL32.dll!WaitForMultipleObjects": 2,
    "USER32.dll!PostMessageW": 2,
    "USER32.dll!RegisterDeviceNotificationW": 2,
    "USER32.dll!DefWindowProcW": 1,
    "KERNEL32.dll!VerSetConditionMask": 14,
    "KERNEL32.dll!VerifyVersionInfoW": 6,
    "USER32.dll!UnregisterDeviceNotification": 2,
    "USER32.dll!PostQuitMessage": 1,
    "KERNEL32.dll!AllocConsole": 1,
    "KERNEL32.dll!GetCurrentProcessId": 2,
    "KERNEL32.dll!AttachConsole": 1,
    "KERNEL32.dll!SetConsoleTitleA": 1,
    "KERNEL32.dll!CreateEventW": 5,
    "KERNEL32.dll!GetLastError": 85,
    "KERNEL32.dll!CloseHandle": 20,
    "KERNEL32.dll!SetDefaultDllDirectories": 1,
    "KERNEL32.dll!GetCommandLineW": 2,
    "SHELL32.dll!CommandLineToArgvW": 1,
    "KERNEL32.dll!LocalAlloc": 18,
    "ADVAPI32.dll!AllocateAndInitializeSid": 1,
    "ADVAPI32.dll!SetEntriesInAclW": 1,
    "ADVAPI32.dll!InitializeSecurityDescriptor": 1,
    "ADVAPI32.dll!SetSecurityDescriptorDacl": 1,
    "USER32.dll!LoadIconW": 1,
    "USER32.dll!LoadCursorW": 1,
    "USER32.dll!RegisterClassW": 1,
    "USER32.dll!CreateWindowExW": 1,
    "USER32.dll!GetMessageW": 2,
    "USER32.dll!TranslateMessage": 1,
    "USER32.dll!DispatchMessageW": 1,
    "USER32.dll!DestroyWindow": 1,
    "ADVAPI32.dll!FreeSid": 1,
    "KERNEL32.dll!LocalFree": 34,
    "SHELL32.dll!SHGetKnownFolderPath": 2,
    "ole32.dll!CoTaskMemFree": 3,
    "SHELL32.dll!SHCreateDirectoryExW": 1,
    "HID.DLL!HidD_GetHidGuid": 1,
    "HID.DLL!HidD_GetFeature": 1,
    "HID.DLL!HidD_SetFeature": 1,
    "CFGMGR32.dll!CM_Get_Device_Interface_List_SizeW": 1,
    "CFGMGR32.dll!CM_Get_Device_Interface_ListW": 1,
    "KERNEL32.dll!CreateFileW": 7,
    "HID.DLL!HidD_GetAttributes": 1,
    "HID.DLL!HidD_GetPreparsedData": 1,
    "HID.DLL!HidP_GetCaps": 1,
    "HID.DLL!HidD_FreePreparsedData": 2,
    "KERNEL32.dll!CreateDirectoryW": 1,
    "bcrypt.dll!BCryptOpenAlgorithmProvider": 2,
    "bcrypt.dll!BCryptCreateHash": 1,
    "bcrypt.dll!BCryptGetProperty": 1,
    "bcrypt.dll!BCryptHashData": 1,
    "bcrypt.dll!BCryptFinishHash": 1,
    "bcrypt.dll!BCryptDestroyHash": 2,
    "bcrypt.dll!BCryptCloseAlgorithmProvider": 4,
    "bcrypt.dll!BCryptImportKeyPair": 1,
    "bcrypt.dll!BCryptVerifySignature": 1,
    "bcrypt.dll!BCryptDestroyKey": 2,
    "KERNEL32.dll!InitializeCriticalSection": 1,
    "KERNEL32.dll!GetProcAddress": 40,
    "KERNEL32.dll!FreeLibrary": 9,
    "KERNEL32.dll!EnterCriticalSection": 17,
    "KERNEL32.dll!LeaveCriticalSection": 17,
    "KERNEL32.dll!GetSystemDirectoryW": 4,
    "KERNEL32.dll!SetLastError": 28,
    "KERNEL32.dll!GetFullPathNameW": 9,
    "KERNEL32.dll!LoadLibraryExW": 6,
    "KERNEL32.dll!GetFileAttributesW": 2,
    "KERNEL32.dll!GetModuleHandleW": 5,
    "KERNEL32.dll!GetModuleFileNameW": 2,
    "KERNEL32.dll!AcquireSRWLockExclusive": 4,
    "KERNEL32.dll!ReleaseSRWLockExclusive": 6,
    "WS2_32.dll!WSACreateEvent": 2,
    "WS2_32.dll!WSACloseEvent": 3,
    "WS2_32.dll!getsockopt": 4,
    "WS2_32.dll!send": 9,
    "WS2_32.dll!WSAEventSelect": 5,
    "WS2_32.dll!WSAWaitForMultipleEvents": 1,
    "WS2_32.dll!WSAEnumNetworkEvents": 3,
    "WS2_32.dll!WSAResetEvent": 1,
    "KERNEL32.dll!DeleteCriticalSection": 9,
    "WS2_32.dll!closesocket": 12,
    "KERNEL32.dll!InitializeCriticalSectionEx": 2,
    "WS2_32.dll!WSAGetLastError": 48,
    "WS2_32.dll!socket": 4,
    "WS2_32.dll!htons": 17,
    "IPHLPAPI.DLL!if_nametoindex": 1,
    "WS2_32.dll!ntohs": 4,
    "WS2_32.dll!WSAStartup": 1,
    "WS2_32.dll!WSACleanup": 1,
    "KERNEL32.dll!QueryPerformanceFrequency": 1,
    "KERNEL32.dll!FormatMessageW": 2,
    "WS2_32.dll!recv": 3,
    "WS2_32.dll!connect": 3,
    "WS2_32.dll!WSASetLastError": 5,
    "WS2_32.dll!WSAIoctl": 1,
    "WS2_32.dll!setsockopt": 10,
    "WS2_32.dll!accept": 2,
    "WS2_32.dll!getpeername": 1,
    "WS2_32.dll!bind": 5,
    "WS2_32.dll!getsockname": 5,
    "KERNEL32.dll!SleepEx": 1,
    "KERNEL32.dll!GetTickCount": 1,
    "WS2_32.dll!select": 2,
    "KERNEL32.dll!MoveFileExA": 2,
    "WS2_32.dll!htonl": 3,
    "WS2_32.dll!listen": 2,
    "WS2_32.dll!getaddrinfo": 1,
    "WS2_32.dll!freeaddrinfo": 1,
    "KERNEL32.dll!CreateThread": 2,
    "KERNEL32.dll!WaitForSingleObjectEx": 2,
    "KERNEL32.dll!GetEnvironmentVariableA": 1,
    "CRYPT32.dll!CertCloseStore": 8,
    "KERNEL32.dll!GetModuleHandleA": 2,
    "ADVAPI32.dll!CryptAcquireContextA": 6,
    "ADVAPI32.dll!CryptCreateHash": 5,
    "ADVAPI32.dll!CryptHashData": 4,
    "ADVAPI32.dll!CryptGetHashParam": 10,
    "ADVAPI32.dll!CryptDestroyHash": 5,
    "ADVAPI32.dll!CryptReleaseContext": 11,
    "CRYPT32.dll!CertOpenStore": 2,
    "CRYPT32.dll!CryptStringToBinaryA": 1,
    "CRYPT32.dll!CertFindCertificateInStore": 2,
    "KERNEL32.dll!MultiByteToWideChar": 10,
    "CRYPT32.dll!PFXImportCertStore": 1,
    "CRYPT32.dll!CertFreeCertificateContext": 9,
    "CRYPT32.dll!CertEnumCertificatesInStore": 1,
    "KERNEL32.dll!GetStdHandle": 2,
    "KERNEL32.dll!GetFileType": 5,
    "KERNEL32.dll!PeekNamedPipe": 2,
    "KERNEL32.dll!ReadFile": 7,
    "WS2_32.dll!recvfrom": 1,
    "WS2_32.dll!sendto": 9,
    "WLDAP32.dll!#22": 3,
    "WLDAP32.dll!#211": 4,
    "WLDAP32.dll!#217": 1,
    "WLDAP32.dll!#143": 1,
    "WLDAP32.dll!#50": 1,
    "WLDAP32.dll!#26": 1,
    "WLDAP32.dll!#30": 1,
    "WLDAP32.dll!#200": 4,
    "WLDAP32.dll!#32": 1,
    "WLDAP32.dll!#35": 1,
    "WLDAP32.dll!#79": 2,
    "WLDAP32.dll!#33": 1,
    "WLDAP32.dll!#301": 3,
    "WLDAP32.dll!#27": 1,
    "WLDAP32.dll!#41": 1,
    "WLDAP32.dll!#46": 1,
    "WLDAP32.dll!#60": 1,
    "WLDAP32.dll!#45": 2,
    "WS2_32.dll!ioctlsocket": 1,
    "CRYPT32.dll!CertCreateCertificateChainEngine": 1,
    "CRYPT32.dll!CertGetCertificateChain": 1,
    "CRYPT32.dll!CertFreeCertificateChainEngine": 1,
    "CRYPT32.dll!CertFreeCertificateChain": 1,
    "CRYPT32.dll!CertFindExtension": 1,
    "CRYPT32.dll!CryptDecodeObjectEx": 1,
    "CRYPT32.dll!CertGetNameStringA": 2,
    "CRYPT32.dll!CryptQueryObject": 1,
    "CRYPT32.dll!CertAddCertificateContextToStore": 1,
    "KERNEL32.dll!CreateFileA": 1,
    "KERNEL32.dll!GetFileSizeEx": 2,
    "WS2_32.dll!gethostname": 1,
    "ADVAPI32.dll!CryptImportKey": 1,
    "ADVAPI32.dll!CryptEncrypt": 1,
    "ADVAPI32.dll!CryptDestroyKey": 1,
    "WS2_32.dll!__WSAFDIsSet": 1,
    "Secur32.dll!InitSecurityInterfaceA": 1,
    "KERNEL32.dll!VirtualQuery": 1,
    "KERNEL32.dll!GetSystemInfo": 1,
    "KERNEL32.dll!VirtualProtect": 1,
    "KERNEL32.dll!RaiseException": 7,
    "KERNEL32.dll!LoadLibraryExA": 1,
    "KERNEL32.dll!GetCurrentThreadId": 2,
    "KERNEL32.dll!GetExitCodeThread": 1,
    "KERNEL32.dll!WideCharToMultiByte": 3,
    "KERNEL32.dll!GetStringTypeW": 4,
    "KERNEL32.dll!EncodePointer": 3,
    "KERNEL32.dll!LCMapStringEx": 4,
    "KERNEL32.dll!WakeAllConditionVariable": 3,
    "KERNEL32.dll!GetLocaleInfoEx": 1,
    "KERNEL32.dll!GetCPInfo": 5,
    "KERNEL32.dll!CompareStringEx": 2,
    "KERNEL32.dll!SetUnhandledExceptionFilter": 4,
    "KERNEL32.dll!UnhandledExceptionFilter": 3,
    "KERNEL32.dll!GetCurrentProcess": 3,
    "KERNEL32.dll!TerminateProcess": 3,
    "KERNEL32.dll!IsProcessorFeaturePresent": 5,
    "KERNEL32.dll!RtlCaptureContext": 4,
    "KERNEL32.dll!RtlLookupFunctionEntry": 5,
    "KERNEL32.dll!RtlVirtualUnwind": 4,
    "KERNEL32.dll!SleepConditionVariableSRW": 1,
    "KERNEL32.dll!IsDebuggerPresent": 2,
    "KERNEL32.dll!GetStartupInfoW": 2,
    "KERNEL32.dll!GetSystemTimeAsFileTime": 2,
    "KERNEL32.dll!InitializeSListHead": 1,
    "bcrypt.dll!BCryptGenRandom": 1,
    "KERNEL32.dll!RtlUnwindEx": 3,
    "KERNEL32.dll!RtlPcToFileHeader": 1,
    "KERNEL32.dll!TlsAlloc": 1,
    "KERNEL32.dll!TlsFree": 1,
    "KERNEL32.dll!TlsGetValue": 1,
    "KERNEL32.dll!TlsSetValue": 1,
    "KERNEL32.dll!InitializeCriticalSectionAndSpinCount": 2,
    "KERNEL32.dll!ExitProcess": 1,
    "KERNEL32.dll!GetModuleHandleExW": 2,
    "KERNEL32.dll!ExitThread": 2,
    "KERNEL32.dll!FreeLibraryAndExitThread": 1,
    "KERNEL32.dll!SetConsoleCtrlHandler": 1,
    "KERNEL32.dll!GetFileInformationByHandle": 1,
    "KERNEL32.dll!FileTimeToSystemTime": 1,
    "KERNEL32.dll!SystemTimeToTzSpecificLocalTime": 1,
    "KERNEL32.dll!GetDriveTypeW": 2,
    "KERNEL32.dll!GetConsoleMode": 2,
    "KERNEL32.dll!ReadConsoleW": 1,
    "KERNEL32.dll!GetConsoleOutputCP": 1,
    "KERNEL32.dll!WriteFile": 6,
    "KERNEL32.dll!SetFilePointerEx": 2,
    "KERNEL32.dll!HeapAlloc": 2,
    "KERNEL32.dll!HeapFree": 1,
    "KERNEL32.dll!EnumSystemLocalesW": 4,
    "KERNEL32.dll!CompareStringW": 1,
    "KERNEL32.dll!FlsAlloc": 1,
    "KERNEL32.dll!FlsFree": 1,
    "KERNEL32.dll!FlsGetValue": 1,
    "KERNEL32.dll!FlsSetValue": 1,
    "KERNEL32.dll!GetDateFormatW": 1,
    "KERNEL32.dll!GetLocaleInfoW": 11,
    "KERNEL32.dll!GetTimeFormatW": 1,
    "KERNEL32.dll!GetUserDefaultLCID": 2,
    "KERNEL32.dll!IsValidLocale": 2,
    "KERNEL32.dll!LCMapStringW": 1,
    "KERNEL32.dll!FlushFileBuffers": 1,
    "KERNEL32.dll!HeapReAlloc": 1,
    "KERNEL32.dll!SetStdHandle": 2,
    "KERNEL32.dll!SetEndOfFile": 1,
    "KERNEL32.dll!GetCurrentDirectoryW": 2,
    "KERNEL32.dll!GetTimeZoneInformation": 1,
    "KERNEL32.dll!FindFirstFileExW": 1,
    "KERNEL32.dll!FindNextFileW": 1,
    "KERNEL32.dll!FindClose": 2,
    "KERNEL32.dll!GetOEMCP": 1,
    "KERNEL32.dll!GetACP": 3,
    "KERNEL32.dll!IsValidCodePage": 3,
    "KERNEL32.dll!GetCommandLineA": 1,
    "KERNEL32.dll!GetEnvironmentStringsW": 2,
    "KERNEL32.dll!FreeEnvironmentStringsW": 3,
    "KERNEL32.dll!SetEnvironmentVariableW": 2,
    "KERNEL32.dll!GetProcessHeap": 1,
    "KERNEL32.dll!DeleteFileW": 1,
    "KERNEL32.dll!WriteConsoleW": 2,
    "KERNEL32.dll!HeapSize": 1,
    "KERNEL32.dll!RtlUnwind": 1,
    "KERNEL32.dll!DecodePointer": 1
  },
  "complete_linear_sweep": true
}