{
  "path": "NVIDIA App\\NvBackend\\ApplicationOntology\\Ontology64.dll",
  "sha256": "fb6f988c718b4482eda67b2924fb088b2664b4053e0280f9a5229d05da2ba525",
  "method": "Capstone linear sweep over raw bytes of all IMAGE_SCN_MEM_EXECUTE sections; skipdata enabled; no reachability proof",
  "sections": [
    {
      "name": ".text",
      "raw_bytes": 3257344,
      "processed_bytes": 3257344,
      "instructions": 894445,
      "skipdata_bytes": 1538
    }
  ],
  "utc": "2026-11-11T21:40:45.846696+00:00",
  "instructions": 894445,
  "skipdata_bytes": 1538,
  "calls": 53236,
  "api_reference_counts": {
    "KERNEL32.dll!GetFileAttributesW": 10,
    "KERNEL32.dll!CreateFileW": 9,
    "KERNEL32.dll!GetLastError": 104,
    "KERNEL32.dll!CloseHandle": 42,
    "KERNEL32.dll!WriteFile": 9,
    "KERNEL32.dll!GetModuleHandleExW": 3,
    "KERNEL32.dll!GetModuleFileNameW": 3,
    "KERNEL32.dll!GetCurrentProcess": 4,
    "ADVAPI32.dll!OpenProcessToken": 1,
    "ADVAPI32.dll!GetTokenInformation": 2,
    "ADVAPI32.dll!ConvertSidToStringSidW": 1,
    "KERNEL32.dll!LocalFree": 76,
    "SHELL32.dll!SHGetFolderPathW": 2,
    "KERNEL32.dll!WideCharToMultiByte": 10,
    "KERNEL32.dll!MultiByteToWideChar": 11,
    "ADVAPI32.dll!CryptGetHashParam": 2,
    "ADVAPI32.dll!CryptAcquireContextW": 1,
    "ADVAPI32.dll!CryptCreateHash": 1,
    "ADVAPI32.dll!CryptDestroyHash": 8,
    "ADVAPI32.dll!CryptReleaseContext": 8,
    "ADVAPI32.dll!CryptHashData": 6,
    "KERNEL32.dll!SetCurrentDirectoryW": 1,
    "KERNEL32.dll!VerSetConditionMask": 8,
    "KERNEL32.dll!VerifyVersionInfoW": 4,
    "USER32.dll!GetSystemMetrics": 1,
    "KERNEL32.dll!WaitForSingleObject": 4,
    "ole32.dll!CoUninitialize": 2,
    "KERNEL32.dll!CreatePipe": 3,
    "KERNEL32.dll!SetHandleInformation": 3,
    "KERNEL32.dll!ReadFile": 9,
    "KERNEL32.dll!GetExitCodeProcess": 1,
    "KERNEL32.dll!CreateProcessW": 3,
    "KERNEL32.dll!FindResourceW": 1,
    "KERNEL32.dll!LoadResource": 1,
    "KERNEL32.dll!LockResource": 1,
    "KERNEL32.dll!SizeofResource": 1,
    "api-ms-win-core-winrt-string-l1-1-0.dll!WindowsDeleteString": 25,
    "api-ms-win-core-winrt-l1-1-0.dll!RoUninitialize": 6,
    "api-ms-win-core-winrt-string-l1-1-0.dll!WindowsCreateString": 5,
    "api-ms-win-core-winrt-l1-1-0.dll!RoGetActivationFactory": 3,
    "api-ms-win-core-winrt-l1-1-0.dll!RoInitialize": 4,
    "api-ms-win-core-winrt-string-l1-1-0.dll!WindowsGetStringRawBuffer": 4,
    "ole32.dll!CoCreateInstance": 2,
    "ole32.dll!CoAllowSetForegroundWindow": 1,
    "ADVAPI32.dll!RegCloseKey": 33,
    "KERNEL32.dll!FindFirstFileW": 5,
    "KERNEL32.dll!FindNextFileW": 6,
    "KERNEL32.dll!FindClose": 9,
    "KERNEL32.dll!ExpandEnvironmentStringsW": 4,
    "KERNEL32.dll!GetPrivateProfileStringW": 2,
    "KERNEL32.dll!InitializeCriticalSectionEx": 2,
    "ole32.dll!CoInitialize": 1,
    "VERSION.dll!GetFileVersionInfoSizeW": 1,
    "VERSION.dll!GetFileVersionInfoW": 1,
    "VERSION.dll!VerQueryValueW": 1,
    "KERNEL32.dll!GetFileAttributesExW": 5,
    "KERNEL32.dll!GetModuleFileNameA": 1,
    "KERNEL32.dll!GetSystemDirectoryW": 16,
    "KERNEL32.dll!LocalAlloc": 43,
    "KERNEL32.dll!LoadLibraryExW": 12,
    "KERNEL32.dll!SetLastError": 39,
    "KERNEL32.dll!GetProcAddress": 57,
    "KERNEL32.dll!GetFullPathNameW": 3,
    "KERNEL32.dll!lstrcmpA": 4,
    "KERNEL32.dll!FileTimeToSystemTime": 1,
    "KERNEL32.dll!GetModuleHandleW": 5,
    "ADVAPI32.dll!RegOpenKeyExW": 3,
    "ADVAPI32.dll!RegQueryInfoKeyW": 2,
    "ADVAPI32.dll!RegEnumKeyExW": 1,
    "ADVAPI32.dll!RegEnumValueW": 1,
    "ADVAPI32.dll!RegQueryValueExW": 2,
    "KERNEL32.dll!InitializeCriticalSection": 3,
    "KERNEL32.dll!DeleteCriticalSection": 11,
    "KERNEL32.dll!EnterCriticalSection": 7,
    "KERNEL32.dll!TryEnterCriticalSection": 1,
    "KERNEL32.dll!LeaveCriticalSection": 7,
    "KERNEL32.dll!GetCurrentThreadId": 3,
    "KERNEL32.dll!GetSystemTimeAsFileTime": 5,
    "KERNEL32.dll!GetCurrentProcessId": 4,
    "SHLWAPI.dll!PathFileExistsW": 1,
    "ADVAPI32.dll!RegOpenKeyA": 2,
    "ADVAPI32.dll!RegQueryValueExA": 4,
    "KERNEL32.dll!DeleteFileW": 4,
    "KERNEL32.dll!DeleteFileA": 2,
    "KERNEL32.dll!CopyFileW": 1,
    "KERNEL32.dll!MoveFileW": 1,
    "KERNEL32.dll!GlobalMemoryStatusEx": 1,
    "ADVAPI32.dll!RegGetValueW": 2,
    "ADVAPI32.dll!RegCreateKeyExW": 1,
    "ADVAPI32.dll!RegSetValueExW": 1,
    "ole32.dll!StringFromGUID2": 1,
    "KERNEL32.dll!SetFileTime": 1,
    "ADVAPI32.dll!RegCreateKeyExA": 1,
    "ADVAPI32.dll!RegSetValueExA": 1,
    "USER32.dll!EnumDisplayDevicesA": 4,
    "USER32.dll!EnumDisplaySettingsA": 2,
    "KERNEL32.dll!GetTempPathW": 3,
    "KERNEL32.dll!WritePrivateProfileStringW": 1,
    "KERNEL32.dll!OpenEventW": 2,
    "KERNEL32.dll!Sleep": 8,
    "KERNEL32.dll!CallNamedPipeW": 1,
    "KERNEL32.dll!FreeLibrary": 20,
    "bcrypt.dll!BCryptOpenAlgorithmProvider": 5,
    "bcrypt.dll!BCryptSetProperty": 1,
    "bcrypt.dll!BCryptGenerateSymmetricKey": 3,
    "bcrypt.dll!BCryptGetProperty": 4,
    "bcrypt.dll!BCryptCreateHash": 2,
    "bcrypt.dll!BCryptHashData": 5,
    "bcrypt.dll!BCryptFinishHash": 2,
    "bcrypt.dll!BCryptDestroyHash": 3,
    "bcrypt.dll!BCryptCloseAlgorithmProvider": 5,
    "bcrypt.dll!BCryptDecrypt": 1,
    "bcrypt.dll!BCryptDestroyKey": 3,
    "bcrypt.dll!BCryptEncrypt": 1,
    "KERNEL32.dll!InitializeSRWLock": 1,
    "KERNEL32.dll!InitializeConditionVariable": 1,
    "KERNEL32.dll!ReleaseSRWLockExclusive": 7,
    "KERNEL32.dll!AcquireSRWLockExclusive": 5,
    "KERNEL32.dll!WakeConditionVariable": 1,
    "KERNEL32.dll!SleepConditionVariableSRW": 2,
    "KERNEL32.dll!OutputDebugStringA": 2,
    "KERNEL32.dll!RtlCaptureStackBackTrace": 1,
    "dbghelp.dll!SymFromAddr": 1,
    "KERNEL32.dll!GetSystemInfo": 3,
    "KERNEL32.dll!VirtualAlloc": 1,
    "KERNEL32.dll!GetLocaleInfoEx": 1,
    "KERNEL32.dll!FormatMessageA": 2,
    "KERNEL32.dll!GetStringTypeW": 4,
    "KERNEL32.dll!SwitchToThread": 1,
    "KERNEL32.dll!QueryPerformanceCounter": 5,
    "KERNEL32.dll!QueryPerformanceFrequency": 2,
    "KERNEL32.dll!EncodePointer": 3,
    "KERNEL32.dll!LCMapStringEx": 4,
    "KERNEL32.dll!CompareStringEx": 1,
    "KERNEL32.dll!WakeAllConditionVariable": 2,
    "KERNEL32.dll!SetUnhandledExceptionFilter": 3,
    "KERNEL32.dll!UnhandledExceptionFilter": 3,
    "KERNEL32.dll!TerminateProcess": 3,
    "KERNEL32.dll!IsProcessorFeaturePresent": 5,
    "KERNEL32.dll!RtlCaptureContext": 4,
    "KERNEL32.dll!RtlLookupFunctionEntry": 5,
    "KERNEL32.dll!RtlVirtualUnwind": 4,
    "KERNEL32.dll!InitializeSListHead": 1,
    "KERNEL32.dll!IsDebuggerPresent": 3,
    "KERNEL32.dll!RtlUnwindEx": 3,
    "KERNEL32.dll!RtlPcToFileHeader": 1,
    "KERNEL32.dll!RaiseException": 7,
    "KERNEL32.dll!InterlockedFlushSList": 1,
    "KERNEL32.dll!TlsAlloc": 1,
    "KERNEL32.dll!TlsFree": 1,
    "KERNEL32.dll!TlsGetValue": 1,
    "KERNEL32.dll!TlsSetValue": 1,
    "KERNEL32.dll!InitializeCriticalSectionAndSpinCount": 2,
    "KERNEL32.dll!GetFileType": 3,
    "KERNEL32.dll!GetConsoleMode": 2,
    "KERNEL32.dll!ReadConsoleW": 1,
    "KERNEL32.dll!GetConsoleOutputCP": 1,
    "KERNEL32.dll!ExitProcess": 1,
    "KERNEL32.dll!GetCPInfo": 4,
    "KERNEL32.dll!ExitThread": 2,
    "KERNEL32.dll!FreeLibraryAndExitThread": 1,
    "KERNEL32.dll!CreateThread": 1,
    "KERNEL32.dll!SetFilePointerEx": 2,
    "KERNEL32.dll!GetStartupInfoW": 1,
    "KERNEL32.dll!GetStdHandle": 1,
    "KERNEL32.dll!HeapAlloc": 3,
    "KERNEL32.dll!HeapFree": 2,
    "KERNEL32.dll!EnumSystemLocalesW": 4,
    "KERNEL32.dll!CompareStringW": 1,
    "KERNEL32.dll!FlsAlloc": 1,
    "KERNEL32.dll!FlsFree": 1,
    "KERNEL32.dll!FlsGetValue": 1,
    "KERNEL32.dll!FlsSetValue": 1,
    "KERNEL32.dll!GetDateFormatW": 1,
    "KERNEL32.dll!GetLocaleInfoW": 11,
    "KERNEL32.dll!GetTimeFormatW": 1,
    "KERNEL32.dll!GetUserDefaultLCID": 2,
    "KERNEL32.dll!IsValidLocale": 2,
    "KERNEL32.dll!LCMapStringW": 1,
    "KERNEL32.dll!SetEnvironmentVariableW": 2,
    "KERNEL32.dll!SetStdHandle": 2,
    "KERNEL32.dll!SetEndOfFile": 2,
    "KERNEL32.dll!FlushFileBuffers": 2,
    "KERNEL32.dll!GetFileSizeEx": 1,
    "KERNEL32.dll!HeapReAlloc": 2,
    "KERNEL32.dll!GetTimeZoneInformation": 1,
    "KERNEL32.dll!FindFirstFileExW": 2,
    "KERNEL32.dll!GetOEMCP": 1,
    "KERNEL32.dll!GetACP": 3,
    "KERNEL32.dll!IsValidCodePage": 3,
    "KERNEL32.dll!GetCommandLineA": 1,
    "KERNEL32.dll!GetCommandLineW": 1,
    "KERNEL32.dll!GetEnvironmentStringsW": 2,
    "KERNEL32.dll!FreeEnvironmentStringsW": 3,
    "KERNEL32.dll!GetProcessHeap": 2,
    "KERNEL32.dll!WriteConsoleW": 2,
    "KERNEL32.dll!HeapSize": 2,
    "KERNEL32.dll!GetLogicalProcessorInformation": 2,
    "KERNEL32.dll!WaitForSingleObjectEx": 1,
    "KERNEL32.dll!OutputDebugStringW": 3,
    "KERNEL32.dll!LoadLibraryW": 1,
    "KERNEL32.dll!RtlUnwind": 2,
    "KERNEL32.dll!AreFileApisANSI": 2,
    "KERNEL32.dll!CreateDirectoryW": 1,
    "KERNEL32.dll!GetFileInformationByHandleEx": 3,
    "KERNEL32.dll!HeapCreate": 1,
    "KERNEL32.dll!GetDiskFreeSpaceW": 1,
    "KERNEL32.dll!LockFile": 1,
    "KERNEL32.dll!SetFilePointer": 1,
    "KERNEL32.dll!GetFullPathNameA": 1,
    "KERNEL32.dll!UnlockFileEx": 1,
    "KERNEL32.dll!CreateMutexW": 1,
    "KERNEL32.dll!UnmapViewOfFile": 1,
    "KERNEL32.dll!HeapValidate": 1,
    "KERNEL32.dll!GetTempPathA": 1,
    "KERNEL32.dll!FormatMessageW": 1,
    "KERNEL32.dll!GetDiskFreeSpaceA": 1,
    "KERNEL32.dll!GetFileAttributesA": 1,
    "KERNEL32.dll!FlushViewOfFile": 1,
    "KERNEL32.dll!CreateFileA": 1,
    "KERNEL32.dll!LoadLibraryA": 1,
    "KERNEL32.dll!HeapCompact": 1,
    "KERNEL32.dll!HeapDestroy": 1,
    "KERNEL32.dll!UnlockFile": 1,
    "KERNEL32.dll!LockFileEx": 1,
    "KERNEL32.dll!GetFileSize": 1,
    "KERNEL32.dll!SystemTimeToFileTime": 1,
    "KERNEL32.dll!GetSystemTime": 1,
    "KERNEL32.dll!CreateFileMappingW": 1,
    "KERNEL32.dll!MapViewOfFile": 1,
    "KERNEL32.dll!GetTickCount": 1,
    "KERNEL32.dll!VirtualQuery": 1,
    "KERNEL32.dll!VirtualProtect": 1,
    "KERNEL32.dll!LoadLibraryExA": 1,
    "KERNEL32.dll!MoveFileExW": 1,
    "KERNEL32.dll!DecodePointer": 1
  },
  "complete_linear_sweep": true
}