NVIDIA software reverse engineering

Static-analysis corpus of NVIDIA App 11.0.9.585, NvContainer, FrameView SDK and the whole C:\Program Files\NVIDIA Corporation tree. 131 PE images, 1,180,302 decompiled functions, 14 recovered Protocol Buffers schemas.

View on GitHub

LocalGames.dll

374d54b50b3aff21eeae03752a846bb0d0e16995e4f7fe9c55a69369348fbbde

Identity

Property Value
Architecture AMD64
Source size 2,234,480 bytes
Preferred image base 0x180000000
Entry RVA 0x18d0
Imports / exports 375 / 1
Exception/unwind ranges 5,580
Executable raw bytes 1,758,720

Physical paths:

Decompilation coverage

Complete with errors: 11,256 successful reconstructions, 3 failures, 11,259 attempted entries, 11,259 reported discovered entries.

Counts refer to automated analysis, not manual review or recovered source code. Function boundaries can change during analysis.

Sections

Section RVA Raw offset Raw bytes Virtual bytes R / W / X Entropy
.text 0x1000 1024 1,758,720 1,758,310 yes / no / yes 5.0933
.rdata 0x1af000 1759744 319,488 319,396 yes / no / no 4.9357
.data 0x1fd000 2079232 25,088 30,049 yes / yes / no 3.9892
.pdata 0x205000 2104320 74,240 73,956 yes / no / no 5.8254
.idata 0x218000 2178560 26,112 25,657 yes / no / no 4.3295
.gfids 0x21f000 2204672 5,632 5,596 yes / no / no 3.4405
.giats 0x221000 2210304 512 280 yes / no / no 0.2248
.tls 0x222000 2210816 1,024 777 yes / yes / no 0.0112
.00cfg 0x223000 2211840 512 373 yes / no / no 0.3953
.rsrc 0x224000 2212352 1,536 1,506 yes / no / no 4.0514
.reloc 0x225000 2213888 10,240 9,896 yes / no / no 2.7086

PE mitigation flags

Flag Present
dynamic_base true
high_entropy_va true
nx_compat true
guard_cf_flag true
no_seh false
appcontainer false
force_integrity false

Extracted native interfaces

Name Command Notification Description
GetApplications True False Returns array of detected applications.
RegisterApplicationChangedNotifications True False  
RegisterApplicationRemovedNotifications True False  
StartApplicationScan True False Starts application scan if it is not already running
RegisterApplicationScanProgressNotifications True False  
GetLastApplicationScanTime True False Returns time when last succesfull application scan finished
LaunchApplication True False Launches application
LaunchApplicationByPath True False Launches application by full executable path. Use for manually added apps when Application_Launch(localId) is not supported.
GetLauncherPID True False Returns PID of application launcher, see https://jirasw.nvidia.com/browse/CRIMSON-3899 for more details
GetApplicationSearchPaths True False Returns current list of the application search paths.
AddApplicationSearchPath True False Adds application search path
RemoveApplicationSearchPath True False Removes application search path
GetBatteryBoostState True False Returns current BatteryBoost state
SetBatteryBoostState True False Tunes BatteryBoost state
GetBatteryBoostSupportState True False Provides information about BatteryBoost support
GetIsSystemOPSCompatible True False Returns whether the system is OPS compatible
GetIsMultiGPUInferenceSupported True False Returns whether MultiGPU inference feature is supported
GetWhisperModeState True False Returns current WhisperMode state
SetWhisperModeState True False Enables or disables WhisperMode for the system
GetWhisperModeInfo True False returns Whisper mode information
RegisterWhisperModeStateNotifications True False  
GetWhisperModeSupportState True False Returns current WhisperMode support state
RegisterWhisperModeSupportStateNotifications True False  
GetSettingsTranslations True False Returns array of settings translations.
GetSettingsSpace True False Returns settings for the application settings space. Intended to use for the Slider feature.
SetTargetSettings True False Sets or reverts target settings for a specified power mode. If position is not provided, settings are reverted instead of being set.
GetApplicationState True False Returns current application state.
RegisterApplicationStateChangedNotifications True False Provides notifications when application state changes, either due to API calls or because of user actions.
RegisterMultiGPUStateChangedNotifications True False Provides notifications when MultiGPU state changes.
GetSignedGPUID True False Returns signed payload for given GPU.
LaunchMSSettings True False Launches MS Settings page.
SetOOTBStatus True False sets OOTB started or finished
FindAndGetAppMetadata True False Returns metadata for app available in fingerprint DB.
AddManualApplication True False Instructs NvBackend to add a given app to it’s tracking list.
DeleteManualApplication True False Instructs NvBackend to delete a given app to it’s tracking list.
GetAutoOptimizeEnabled True False Returns auto optimize game flag.
SetAutoOptimizeEnabled True False Sets auto optimize game flag.
TriggerNGXUpdater True False Downloads Latest NGX Override DLL’s.

Evidence

Large artifacts require Git LFS. A filename hash identifies the original PE; the content of a generated artifact has a different digest.

Module catalog · Research overview