NVIDIA software reverse engineering

Static-analysis corpus of NVIDIA App 11.0.9.585, NvContainer, FrameView SDK and the whole C:\Program Files\NVIDIA Corporation tree. 131 PE images, 1,180,302 decompiled functions, 14 recovered Protocol Buffers schemas.

View on GitHub

nvovapi64.dll

0827392efec1368d1ba6ec18225614e5cce17d53954a7f28a2bf8245429995ab

Identity

Property Value
Architecture AMD64
Source size 932,464 bytes
Preferred image base 0x180000000
Entry RVA 0x13b0
Imports / exports 154 / 1
Exception/unwind ranges 1,990
Executable raw bytes 724,992

Physical paths:

Decompilation coverage

Complete: 3,473 successful reconstructions, 0 failures, 3,473 attempted entries, 3,473 reported discovered entries.

Counts refer to automated analysis, not manual review or recovered source code. Function boundaries can change during analysis.

Sections

Section RVA Raw offset Raw bytes Virtual bytes R / W / X Entropy
.text 0x1000 1024 724,992 724,956 yes / no / yes 5.1916
.rdata 0xb2000 726016 144,896 144,415 yes / no / no 4.2912
.data 0xd6000 870912 7,168 17,392 yes / yes / no 1.8165
.pdata 0xdb000 878080 26,624 26,568 yes / no / no 5.6301
.idata 0xe2000 904704 8,192 8,183 yes / no / no 3.7606
.gfids 0xe4000 912896 1,536 1,072 yes / no / no 1.8685
.tls 0xe5000 914432 1,024 871 yes / yes / no 0.0112
.00cfg 0xe6000 915456 512 373 yes / no / no 0.4117
.rsrc 0xe7000 915968 1,024 880 yes / no / no 2.9229
.reloc 0xe8000 916992 5,120 5,001 yes / no / no 3.2048

PE mitigation flags

Flag Present
dynamic_base true
high_entropy_va true
nx_compat true
guard_cf_flag true
no_seh false
appcontainer false
force_integrity false

Evidence

Large artifacts require Git LFS. A filename hash identifies the original PE; the content of a generated artifact has a different digest.

Module catalog ยท Research overview