NVIDIA software reverse engineering

Static-analysis corpus of NVIDIA App 11.0.9.585, NvContainer, FrameView SDK and the whole C:\Program Files\NVIDIA Corporation tree. 131 PE images, 1,180,302 decompiled functions, 14 recovered Protocol Buffers schemas.

View on GitHub

NVIDIA App.exe

0f166e95144447c5317d92b2e74f58507cccab17033588b486f40b026f932ceb

Identity

Property Value
Architecture AMD64
Source size 3,656,304 bytes
Preferred image base 0x140000000
Entry RVA 0x13ea0
Imports / exports 701 / 0
Exception/unwind ranges 9,571
Executable raw bytes 2,198,528

Physical paths:

Decompilation coverage

Complete with errors: 16,297 successful reconstructions, 1 failures, 16,298 attempted entries, 16,298 reported discovered entries.

Counts refer to automated analysis, not manual review or recovered source code. Function boundaries can change during analysis.

Sections

Section RVA Raw offset Raw bytes Virtual bytes R / W / X Entropy
.text 0x1000 1536 2,198,016 2,197,645 yes / no / yes 4.9857
.rdata 0x21a000 2199552 443,904 443,457 yes / no / no 4.3662
.data 0x287000 2643456 46,080 56,617 yes / yes / no 4.0987
.pdata 0x295000 2689536 126,976 126,636 yes / no / no 5.8676
.idata 0x2b4000 2816512 41,472 41,185 yes / no / no 4.2576
.gfids 0x2bf000 2857984 18,432 18,376 yes / no / no 4.5204
.giats 0x2c4000 2876416 512 280 yes / no / no 0.253
.00cfg 0x2c5000 2876928 512 373 yes / no / no 0.4266
.oldntma 0x2c6000 2877440 512 265 yes / yes / no 0.0
.crthunk 0x2c7000 2877952 512 332 yes / no / yes 0.0
.tls 0x2c8000 2878464 1,024 777 yes / yes / no 0.0112
.rsrc 0x2c9000 2879488 741,376 741,148 yes / no / no 4.8598
.reloc 0x37e000 3620864 25,088 24,735 yes / no / no 3.8097

PE mitigation flags

Flag Present
dynamic_base true
high_entropy_va true
nx_compat true
guard_cf_flag true
no_seh false
appcontainer false
force_integrity false

Evidence

Large artifacts require Git LFS. A filename hash identifies the original PE; the content of a generated artifact has a different digest.

Module catalog ยท Research overview