NVIDIA software reverse engineering

Static-analysis corpus of NVIDIA App 11.0.9.585, NvContainer, FrameView SDK and the whole C:\Program Files\NVIDIA Corporation tree. 131 PE images, 1,180,302 decompiled functions, 14 recovered Protocol Buffers schemas.

View on GitHub

chrome_elf.dll

020972f183e435a7dc0d608be8d89e0f54f253bd7f7d3315c27c1715321d23ad

Identity

Property Value
Architecture AMD64
Source size 1,358,448 bytes
Preferred image base 0x180000000
Entry RVA 0x81860
Imports / exports 177 / 26
Exception/unwind ranges 2,716
Executable raw bytes 945,664

Physical paths:

Decompilation coverage

Complete with errors: 3,270 successful reconstructions, 63 failures, 3,333 attempted entries, 3,333 reported discovered entries.

Counts refer to automated analysis, not manual review or recovered source code. Function boundaries can change during analysis.

Sections

Section RVA Raw offset Raw bytes Virtual bytes R / W / X Entropy
.text 0x1000 1024 945,664 945,369 yes / no / yes 6.5828
.rdata 0xe8000 946688 185,856 185,452 yes / no / no 5.2318
.data 0x116000 1132544 160,256 202,716 yes / yes / no 1.2838
.pdata 0x148000 1292800 32,768 32,592 yes / no / no 5.9805
.crthunk 0x150000 1325568 512 128 yes / no / no 0.0
.gxfg 0x151000 1326080 11,776 11,488 yes / no / no 5.1559
.retplne 0x154000 1337856 512 140 no / no / no 1.0506
.tls 0x155000 1338368 512 370 yes / yes / no 0.0612
CPADinfo 0x156000 1338880 512 56 yes / yes / no 0.1223
_RDATA 0x157000 1339392 512 500 yes / no / no 4.1694
.rsrc 0x158000 1339904 2,048 1,664 yes / no / no 3.4334
.reloc 0x159000 1341952 6,144 6,124 yes / no / no 5.4481

PE mitigation flags

Flag Present
dynamic_base true
high_entropy_va true
nx_compat true
guard_cf_flag true
no_seh false
appcontainer false
force_integrity false

Evidence

Large artifacts require Git LFS. A filename hash identifies the original PE; the content of a generated artifact has a different digest.

Module catalog ยท Research overview