nvmf64.dll
f6078b6640f711df12da1ca6cd5d1b6aa44c59acc37d98e488d2bb7415c8e91e
Identity
| Property | Value |
|---|---|
| Architecture | AMD64 |
| Source size | 1,399,920 bytes |
| Preferred image base | 0x180000000 |
| Entry RVA | 0x15c0 |
| Imports / exports | 151 / 1 |
| Exception/unwind ranges | 3,460 |
| Executable raw bytes | 1,057,280 |
Physical paths:
NVIDIA App\ShadowPlay\nvmf64.dll
Decompilation coverage
Complete: 5,638 successful reconstructions, 0 failures, 5,638 attempted entries, 5,638 reported discovered entries.
Counts refer to automated analysis, not manual review or recovered source code. Function boundaries can change during analysis.
Sections
| Section | RVA | Raw offset | Raw bytes | Virtual bytes | R / W / X | Entropy |
|---|---|---|---|---|---|---|
.text |
0x1000 |
1024 |
1,057,280 | 1,057,279 | yes / no / yes | 5.1049 |
.rdata |
0x104000 |
1058304 |
253,440 | 252,962 | yes / no / no | 5.0513 |
.data |
0x142000 |
1311744 |
11,264 | 21,840 | yes / yes / no | 2.706 |
.pdata |
0x148000 |
1323008 |
46,080 | 45,972 | yes / no / no | 5.6662 |
.idata |
0x154000 |
1369088 |
7,680 | 7,490 | yes / no / no | 3.7068 |
.gfids |
0x156000 |
1376768 |
2,560 | 2,508 | yes / no / no | 3.0189 |
.00cfg |
0x157000 |
1379328 |
512 | 373 | yes / no / no | 0.399 |
.tls |
0x158000 |
1379840 |
1,024 | 777 | yes / yes / no | 0.0112 |
.rsrc |
0x159000 |
1380864 |
1,024 | 896 | yes / no / no | 2.9904 |
.reloc |
0x15a000 |
1381888 |
7,680 | 7,249 | yes / no / no | 3.0964 |
PE mitigation flags
| Flag | Present |
|---|---|
| dynamic_base | true |
| high_entropy_va | true |
| nx_compat | true |
| guard_cf_flag | true |
| no_seh | false |
| appcontainer | false |
| force_integrity | false |
Evidence
Large artifacts require Git LFS. A filename hash identifies the original PE; the content of a generated artifact has a different digest.