{
  "path": "NVIDIA App\\NvCpl\\Plugins\\LocalSystem\\NvXDCore.dll",
  "sha256": "fca581fcb45d60136a6907be06c50a9efa3dfbc682c01acb0bdb977a777dab52",
  "method": "Capstone linear sweep over raw bytes of all IMAGE_SCN_MEM_EXECUTE sections; skipdata enabled; no reachability proof",
  "sections": [
    {
      "name": ".text",
      "raw_bytes": 900608,
      "processed_bytes": 900608,
      "instructions": 245645,
      "skipdata_bytes": 9
    }
  ],
  "utc": "2026-11-11T21:40:15.592525+00:00",
  "instructions": 245645,
  "skipdata_bytes": 9,
  "calls": 18645,
  "api_reference_counts": {
    "KERNEL32.dll!InitializeCriticalSectionEx": 15,
    "KERNEL32.dll!GetLastError": 96,
    "KERNEL32.dll!GetCurrentThreadId": 5,
    "KERNEL32.dll!GetModuleFileNameA": 1,
    "KERNEL32.dll!LoadLibraryExW": 15,
    "KERNEL32.dll!LocalFree": 58,
    "KERNEL32.dll!VerSetConditionMask": 8,
    "KERNEL32.dll!VerifyVersionInfoW": 4,
    "KERNEL32.dll!SetLastError": 24,
    "KERNEL32.dll!GetSystemDirectoryW": 6,
    "KERNEL32.dll!LocalAlloc": 35,
    "KERNEL32.dll!GetFullPathNameW": 2,
    "KERNEL32.dll!GetProcAddress": 59,
    "KERNEL32.dll!GetModuleHandleW": 19,
    "KERNEL32.dll!GetModuleFileNameW": 5,
    "KERNEL32.dll!GetFileAttributesW": 5,
    "SETUPAPI.dll!SetupDiGetDeviceInstanceIdW": 3,
    "SETUPAPI.dll!SetupDiGetDeviceRegistryPropertyW": 5,
    "ADVAPI32.dll!RegOpenKeyExW": 20,
    "ADVAPI32.dll!RegQueryValueExW": 29,
    "ADVAPI32.dll!RegDeleteValueW": 3,
    "ADVAPI32.dll!RegCloseKey": 62,
    "ADVAPI32.dll!RegDeleteKeyW": 5,
    "USERENV.dll!CreateEnvironmentBlock": 1,
    "USERENV.dll!DestroyEnvironmentBlock": 1,
    "SHLWAPI.dll!PathAddBackslashW": 1,
    "ADVAPI32.dll!CreateProcessAsUserW": 1,
    "KERNEL32.dll!CloseHandle": 96,
    "KERNEL32.dll!WTSGetActiveConsoleSessionId": 4,
    "USER32.dll!GetSystemMetrics": 2,
    "WTSAPI32.dll!WTSEnumerateSessionsW": 3,
    "WTSAPI32.dll!WTSFreeMemory": 5,
    "WTSAPI32.dll!WTSQueryUserToken": 1,
    "SETUPAPI.dll!SetupDiGetClassDevsW": 2,
    "SHLWAPI.dll!StrStrIW": 2,
    "KERNEL32.dll!lstrcmpiW": 14,
    "CFGMGR32.dll!CM_Get_DevNode_Status": 2,
    "SETUPAPI.dll!SetupDiOpenDevRegKey": 1,
    "SETUPAPI.dll!SetupDiEnumDeviceInfo": 3,
    "SETUPAPI.dll!SetupDiDestroyDeviceInfoList": 2,
    "KERNEL32.dll!DecodePointer": 2,
    "KERNEL32.dll!DeleteCriticalSection": 28,
    "ADVAPI32.dll!RegEnumKeyExW": 3,
    "ole32.dll!CoTaskMemFree": 11,
    "ole32.dll!CoTaskMemRealloc": 4,
    "KERNEL32.dll!EnterCriticalSection": 20,
    "KERNEL32.dll!LeaveCriticalSection": 22,
    "KERNEL32.dll!FindResourceW": 2,
    "KERNEL32.dll!LoadResource": 2,
    "KERNEL32.dll!SizeofResource": 2,
    "KERNEL32.dll!MultiByteToWideChar": 11,
    "KERNEL32.dll!FreeLibrary": 10,
    "USER32.dll!CharNextW": 24,
    "ADVAPI32.dll!RegSetValueExW": 7,
    "OLEAUT32.dll!VarUI4FromStr": 1,
    "ole32.dll!CoTaskMemAlloc": 6,
    "ADVAPI32.dll!RegCreateKeyExW": 2,
    "ADVAPI32.dll!RegQueryInfoKeyW": 4,
    "KERNEL32.dll!GetCurrentProcess": 5,
    "KERNEL32.dll!GetProcessTimes": 1,
    "KERNEL32.dll!QueryPerformanceFrequency": 4,
    "KERNEL32.dll!QueryPerformanceCounter": 6,
    "SHLWAPI.dll!PathFindFileNameW": 1,
    "ADVAPI32.dll!RegEnumValueW": 2,
    "KERNEL32.dll!FormatMessageW": 1,
    "KERNEL32.dll!WideCharToMultiByte": 8,
    "KERNEL32.dll!FormatMessageA": 1,
    "KERNEL32.dll!ReleaseSemaphore": 11,
    "KERNEL32.dll!CreateEventA": 6,
    "KERNEL32.dll!WaitForSingleObjectEx": 4,
    "KERNEL32.dll!SetEvent": 17,
    "KERNEL32.dll!OutputDebugStringW": 3,
    "ADVAPI32.dll!TraceMessage": 1,
    "KERNEL32.dll!CreateMutexW": 2,
    "KERNEL32.dll!WriteFile": 7,
    "KERNEL32.dll!ExpandEnvironmentStringsW": 2,
    "KERNEL32.dll!CreateFileW": 9,
    "KERNEL32.dll!WaitForSingleObject": 15,
    "KERNEL32.dll!ReleaseMutex": 1,
    "KERNEL32.dll!GetFileSizeEx": 3,
    "KERNEL32.dll!CreateSemaphoreA": 5,
    "KERNEL32.dll!WaitForMultipleObjectsEx": 2,
    "KERNEL32.dll!CreateToolhelp32Snapshot": 1,
    "KERNEL32.dll!Process32FirstW": 1,
    "KERNEL32.dll!Process32NextW": 1,
    "KERNEL32.dll!GetSystemTimeAsFileTime": 4,
    "ole32.dll!CoCreateInstance": 7,
    "ole32.dll!StringFromGUID2": 1,
    "KERNEL32.dll!HeapAlloc": 5,
    "KERNEL32.dll!HeapFree": 17,
    "KERNEL32.dll!HeapReAlloc": 2,
    "KERNEL32.dll!HeapSize": 2,
    "KERNEL32.dll!HeapDestroy": 2,
    "KERNEL32.dll!GetProcessHeap": 19,
    "ADVAPI32.dll!GetTraceLoggerHandle": 1,
    "ADVAPI32.dll!GetTraceEnableLevel": 1,
    "ADVAPI32.dll!GetTraceEnableFlags": 1,
    "SHELL32.dll!SHGetFolderPathW": 1,
    "SHLWAPI.dll!PathFileExistsW": 10,
    "KERNEL32.dll!RemoveDirectoryW": 2,
    "KERNEL32.dll!CreateSymbolicLinkW": 1,
    "SHLWAPI.dll!SHGetValueW": 3,
    "SHLWAPI.dll!SHSetValueW": 1,
    "SHLWAPI.dll!SHDeleteValueW": 1,
    "ADVAPI32.dll!RegisterTraceGuidsW": 1,
    "KERNEL32.dll!Sleep": 6,
    "CFGMGR32.dll!CM_Register_Notification": 1,
    "USER32.dll!RegisterSuspendResumeNotification": 1,
    "WTSAPI32.dll!WTSRegisterSessionNotification": 1,
    "ADVAPI32.dll!UnregisterTraceGuids": 1,
    "KERNEL32.dll!WaitForMultipleObjects": 2,
    "KERNEL32.dll!CreateEventW": 7,
    "ADVAPI32.dll!ConvertStringSecurityDescriptorToSecurityDescriptorW": 2,
    "KERNEL32.dll!ResetEvent": 3,
    "KERNEL32.dll!OpenEventW": 5,
    "ole32.dll!CoRevokeClassObject": 2,
    "CFGMGR32.dll!CM_Unregister_Notification": 1,
    "WTSAPI32.dll!WTSUnRegisterSessionNotification": 1,
    "USER32.dll!UnregisterSuspendResumeNotification": 1,
    "KERNEL32.dll!RaiseException": 8,
    "KERNEL32.dll!DuplicateHandle": 1,
    "RPCRT4.dll!RpcRevertToSelfEx": 2,
    "ole32.dll!CoInitializeEx": 2,
    "ole32.dll!CoInitializeSecurity": 2,
    "RPCRT4.dll!RpcImpersonateClient": 1,
    "KERNEL32.dll!GetCurrentThread": 1,
    "ADVAPI32.dll!OpenThreadToken": 1,
    "ADVAPI32.dll!GetTokenInformation": 1,
    "WTSAPI32.dll!WTSQuerySessionInformationW": 2,
    "ole32.dll!CoRegisterClassObject": 1,
    "KERNEL32.dll!CreateThread": 2,
    "ole32.dll!CoResumeClassObjects": 2,
    "ole32.dll!CoAddRefServerProcess": 1,
    "USER32.dll!PostThreadMessageW": 1,
    "OLEAUT32.dll!SysAllocString": 3,
    "OLEAUT32.dll!SysFreeString": 1,
    "OLEAUT32.dll!VariantInit": 11,
    "OLEAUT32.dll!VariantClear": 18,
    "ole32.dll!CoInitialize": 2,
    "ole32.dll!CoUninitialize": 1,
    "ADVAPI32.dll!RegNotifyChangeKeyValue": 1,
    "ole32.dll!CoSetProxyBlanket": 1,
    "KERNEL32.dll!DeviceIoControl": 2,
    "KERNEL32.dll!FindResourceExW": 1,
    "KERNEL32.dll!LockResource": 1,
    "ole32.dll!CoCreateInstanceEx": 1,
    "KERNEL32.dll!InitializeCriticalSection": 1,
    "KERNEL32.dll!VirtualQuery": 2,
    "KERNEL32.dll!GetSystemInfo": 2,
    "KERNEL32.dll!VirtualProtect": 2,
    "KERNEL32.dll!LoadLibraryExA": 1,
    "KERNEL32.dll!SetUnhandledExceptionFilter": 3,
    "KERNEL32.dll!UnhandledExceptionFilter": 3,
    "KERNEL32.dll!TerminateProcess": 3,
    "KERNEL32.dll!IsProcessorFeaturePresent": 5,
    "KERNEL32.dll!RtlCaptureContext": 4,
    "KERNEL32.dll!RtlLookupFunctionEntry": 5,
    "KERNEL32.dll!RtlVirtualUnwind": 4,
    "KERNEL32.dll!AcquireSRWLockExclusive": 5,
    "KERNEL32.dll!ReleaseSRWLockExclusive": 4,
    "KERNEL32.dll!WakeAllConditionVariable": 2,
    "KERNEL32.dll!SleepConditionVariableSRW": 1,
    "KERNEL32.dll!InitializeSListHead": 1,
    "KERNEL32.dll!IsDebuggerPresent": 3,
    "KERNEL32.dll!GetCurrentProcessId": 3,
    "KERNEL32.dll!GetStringTypeW": 4,
    "KERNEL32.dll!TryAcquireSRWLockExclusive": 2,
    "KERNEL32.dll!EncodePointer": 3,
    "KERNEL32.dll!LCMapStringEx": 4,
    "KERNEL32.dll!GetLocaleInfoEx": 1,
    "KERNEL32.dll!GetCPInfo": 5,
    "KERNEL32.dll!CompareStringEx": 2,
    "KERNEL32.dll!SetWaitableTimer": 1,
    "KERNEL32.dll!OpenEventA": 2,
    "KERNEL32.dll!TlsFree": 3,
    "KERNEL32.dll!TlsAlloc": 3,
    "KERNEL32.dll!TlsGetValue": 3,
    "KERNEL32.dll!CreateWaitableTimerA": 1,
    "KERNEL32.dll!GetModuleHandleA": 1,
    "KERNEL32.dll!TlsSetValue": 3,
    "KERNEL32.dll!ResumeThread": 1,
    "KERNEL32.dll!CreateDirectoryExW": 1,
    "KERNEL32.dll!CreateDirectoryW": 1,
    "KERNEL32.dll!SetFileAttributesW": 2,
    "KERNEL32.dll!DeleteFileW": 1,
    "KERNEL32.dll!MoveFileExW": 1,
    "KERNEL32.dll!GetFileInformationByHandle": 1,
    "KERNEL32.dll!AreFileApisANSI": 2,
    "KERNEL32.dll!RtlUnwindEx": 3,
    "KERNEL32.dll!InterlockedFlushSList": 1,
    "KERNEL32.dll!InterlockedPushEntrySList": 1,
    "KERNEL32.dll!RtlPcToFileHeader": 3,
    "KERNEL32.dll!InitializeCriticalSectionAndSpinCount": 2,
    "KERNEL32.dll!VirtualAlloc": 1,
    "KERNEL32.dll!ExitProcess": 1,
    "KERNEL32.dll!GetModuleHandleExW": 2,
    "KERNEL32.dll!ExitThread": 2,
    "KERNEL32.dll!FreeLibraryAndExitThread": 1,
    "KERNEL32.dll!GetStartupInfoW": 1,
    "KERNEL32.dll!GetFileType": 2,
    "KERNEL32.dll!GetStdHandle": 1,
    "KERNEL32.dll!EnumSystemLocalesW": 4,
    "KERNEL32.dll!CompareStringW": 1,
    "KERNEL32.dll!GetDateFormatW": 1,
    "KERNEL32.dll!GetLocaleInfoW": 11,
    "KERNEL32.dll!GetTimeFormatW": 1,
    "KERNEL32.dll!GetUserDefaultLCID": 2,
    "KERNEL32.dll!IsValidLocale": 2,
    "KERNEL32.dll!LCMapStringW": 1,
    "KERNEL32.dll!GetTimeZoneInformation": 1,
    "KERNEL32.dll!FindFirstFileExW": 1,
    "KERNEL32.dll!FindNextFileW": 1,
    "KERNEL32.dll!FindClose": 1,
    "KERNEL32.dll!GetOEMCP": 1,
    "KERNEL32.dll!GetACP": 3,
    "KERNEL32.dll!IsValidCodePage": 3,
    "KERNEL32.dll!GetCommandLineA": 1,
    "KERNEL32.dll!GetCommandLineW": 1,
    "KERNEL32.dll!GetEnvironmentStringsW": 1,
    "KERNEL32.dll!FreeEnvironmentStringsW": 1,
    "KERNEL32.dll!SetFilePointerEx": 2,
    "KERNEL32.dll!FlushFileBuffers": 1,
    "KERNEL32.dll!GetConsoleCP": 1,
    "KERNEL32.dll!GetConsoleMode": 2,
    "KERNEL32.dll!ReadFile": 4,
    "KERNEL32.dll!SetStdHandle": 1,
    "KERNEL32.dll!SetEnvironmentVariableW": 1,
    "KERNEL32.dll!ReadConsoleW": 1,
    "KERNEL32.dll!WriteConsoleW": 2,
    "KERNEL32.dll!RtlUnwind": 1
  },
  "complete_linear_sweep": true
}