NVIDIA software reverse engineering

Static-analysis corpus of NVIDIA App 11.0.9.585, NvContainer, FrameView SDK and the whole C:\Program Files\NVIDIA Corporation tree. 131 PE images, 1,180,302 decompiled functions, 14 recovered Protocol Buffers schemas.

View on GitHub

nvxdbat.dll

379ecc2cf34e0984e3bbfded7c8a4612f23b4375329c45ad3f253eaea19069d5

Identity

Property Value
Architecture AMD64
Source size 1,356,400 bytes
Preferred image base 0x61000000
Entry RVA 0x85250
Imports / exports 188 / 5
Exception/unwind ranges 3,184
Executable raw bytes 936,960

Physical paths:

Decompilation coverage

Complete with errors: 4,929 successful reconstructions, 1 failures, 4,930 attempted entries, 4,930 reported discovered entries.

Counts refer to automated analysis, not manual review or recovered source code. Function boundaries can change during analysis.

Sections

Section RVA Raw offset Raw bytes Virtual bytes R / W / X Entropy
.orpc 0x1000 1024 512 261 yes / no / yes 3.671
.text 0x2000 1536 936,448 936,316 yes / no / yes 6.3819
.rdata 0xe7000 937984 264,704 264,278 yes / no / no 4.9008
.data 0x128000 1202688 36,352 74,892 yes / yes / no 4.755
.pdata 0x13b000 1239040 38,400 38,208 yes / no / no 5.9531
.didat 0x145000 1277440 512 24 yes / yes / no 0.1513
.rsrc 0x146000 1277952 58,880 58,768 yes / no / no 3.1757
.reloc 0x155000 1336832 9,216 8,860 yes / no / no 5.4011

PE mitigation flags

Flag Present
dynamic_base true
high_entropy_va true
nx_compat true
guard_cf_flag true
no_seh false
appcontainer false
force_integrity false

Evidence

Large artifacts require Git LFS. A filename hash identifies the original PE; the content of a generated artifact has a different digest.

Module catalog ยท Research overview