NVIDIA software reverse engineering

Static-analysis corpus of NVIDIA App 11.0.9.585, NvContainer, FrameView SDK and the whole C:\Program Files\NVIDIA Corporation tree. 131 PE images, 1,180,302 decompiled functions, 14 recovered Protocol Buffers schemas.

View on GitHub

NvAppApi.dll

25fc3ecc6208e61cd08d09c8b35ebd6aa510f4d8bdfa6750bd7fca89407ec25d

Identity

Property Value
Architecture AMD64
Source size 851,056 bytes
Preferred image base 0x180000000
Entry RVA 0x1360
Imports / exports 250 / 1
Exception/unwind ranges 2,227
Executable raw bytes 658,944

Physical paths:

Decompilation coverage

Complete: 4,055 successful reconstructions, 0 failures, 4,055 attempted entries, 4,055 reported discovered entries.

Counts refer to automated analysis, not manual review or recovered source code. Function boundaries can change during analysis.

Sections

Section RVA Raw offset Raw bytes Virtual bytes R / W / X Entropy
.text 0x1000 1024 658,944 658,842 yes / no / yes 4.677
.rdata 0xa2000 659968 112,640 112,478 yes / no / no 4.3944
.data 0xbe000 772608 10,240 15,049 yes / yes / no 3.8632
.pdata 0xc2000 782848 29,696 29,688 yes / no / no 5.5641
.idata 0xca000 812544 17,408 17,043 yes / no / no 4.2844
.gfids 0xcf000 829952 3,072 2,704 yes / no / no 2.5988
.giats 0xd0000 833024 512 268 yes / no / no 0.1184
.00cfg 0xd1000 833536 512 373 yes / no / no 0.4193
.tls 0xd2000 834048 1,024 777 yes / yes / no 0.0112
.rsrc 0xd3000 835072 1,536 1,362 yes / no / no 3.9036
.reloc 0xd4000 836608 4,096 3,634 yes / no / no 2.2483

PE mitigation flags

Flag Present
dynamic_base true
high_entropy_va true
nx_compat true
guard_cf_flag true
no_seh false
appcontainer false
force_integrity false

Evidence

Large artifacts require Git LFS. A filename hash identifies the original PE; the content of a generated artifact has a different digest.

Module catalog ยท Research overview