NVIDIA software reverse engineering

Static-analysis corpus of NVIDIA App 11.0.9.585, NvContainer, FrameView SDK and the whole C:\Program Files\NVIDIA Corporation tree. 131 PE images, 1,180,302 decompiled functions, 14 recovered Protocol Buffers schemas.

View on GitHub

NvBackend64.dll

7a84c83e7437cf63c94f9edd389f4b1e6f072ef1b7bb6fa1013a22e670132a50

Identity

Property Value
Architecture AMD64
Source size 8,795,760 bytes
Preferred image base 0x180000000
Entry RVA 0x376030
Imports / exports 354 / 1
Exception/unwind ranges 18,946
Executable raw bytes 6,316,032

Physical paths:

Decompilation coverage

Complete with errors: 29,567 successful reconstructions, 7 failures, 29,574 attempted entries, 29,574 reported discovered entries.

Counts refer to automated analysis, not manual review or recovered source code. Function boundaries can change during analysis.

Sections

Section RVA Raw offset Raw bytes Virtual bytes R / W / X Entropy
.text 0x1000 1024 6,316,032 6,315,955 yes / no / yes 6.6477
.rdata 0x607000 6317056 2,108,416 2,108,100 yes / no / no 5.5765
.data 0x80a000 8425472 68,608 113,356 yes / yes / no 4.8508
.pdata 0x826000 8494080 227,840 227,352 yes / no / no 6.4006
_RDATA 0x85e000 8721920 1,024 640 yes / no / no 3.1891
.rsrc 0x85f000 8722944 2,048 1,792 yes / no / no 4.3592
.reloc 0x860000 8724992 60,416 60,096 yes / no / no 5.4456

PE mitigation flags

Flag Present
dynamic_base true
high_entropy_va true
nx_compat true
guard_cf_flag true
no_seh false
appcontainer false
force_integrity false

Evidence

Large artifacts require Git LFS. A filename hash identifies the original PE; the content of a generated artifact has a different digest.

Module catalog ยท Research overview