NVIDIA software reverse engineering

Static-analysis corpus of NVIDIA App 11.0.9.585, NvContainer, FrameView SDK and the whole C:\Program Files\NVIDIA Corporation tree. 131 PE images, 1,180,302 decompiled functions, 14 recovered Protocol Buffers schemas.

View on GitHub

FrameViewSdkExt.dll

24db8717b792cce09ee877d73c37f2c65c448cadefe98ce2887250615e688ff0

Identity

Property Value
Architecture x86
Source size 1,705,584 bytes
Preferred image base 0x10000000
Entry RVA 0xbf890
Imports / exports 231 / 5
Exception/unwind ranges 0
Executable raw bytes 1,280,000

Physical paths:

Decompilation coverage

Complete with errors: 9,394 successful reconstructions, 17 failures, 9,411 attempted entries, 9,411 reported discovered entries.

Counts refer to automated analysis, not manual review or recovered source code. Function boundaries can change during analysis.

Sections

Section RVA Raw offset Raw bytes Virtual bytes R / W / X Entropy
.text 0x1000 1024 1,280,000 1,279,544 yes / no / yes 6.5267
.rdata 0x13a000 1281024 297,472 297,394 yes / no / no 4.8109
.data 0x183000 1578496 24,064 31,520 yes / yes / no 4.936
.rsrc 0x18b000 1602560 17,408 17,312 yes / no / no 4.7733
.reloc 0x190000 1619968 75,264 75,052 yes / no / no 6.6394

PE mitigation flags

Flag Present
dynamic_base true
high_entropy_va false
nx_compat true
guard_cf_flag true
no_seh false
appcontainer false
force_integrity false

Evidence

Large artifacts require Git LFS. A filename hash identifies the original PE; the content of a generated artifact has a different digest.

Module catalog ยท Research overview