NVIDIA software reverse engineering

Static-analysis corpus of NVIDIA App 11.0.9.585, NvContainer, FrameView SDK and the whole C:\Program Files\NVIDIA Corporation tree. 131 PE images, 1,180,302 decompiled functions, 14 recovered Protocol Buffers schemas.

View on GitHub

FvSDK_x64.dll

3d7fc2f6badbf9ba3796ef324638526e0438bf090cbc419654294ac7fc6bc513

Identity

Property Value
Architecture AMD64
Source size 301,168 bytes
Preferred image base 0x180000000
Entry RVA 0x2f880
Imports / exports 237 / 1
Exception/unwind ranges 854
Executable raw bytes 201,728

Physical paths:

Decompilation coverage

Complete: 1,094 successful reconstructions, 0 failures, 1,094 attempted entries, 1,094 reported discovered entries.

Counts refer to automated analysis, not manual review or recovered source code. Function boundaries can change during analysis.

Sections

Section RVA Raw offset Raw bytes Virtual bytes R / W / X Entropy
.text 0x1000 1024 201,728 201,659 yes / no / yes 6.3307
.rdata 0x33000 202752 66,560 66,122 yes / no / no 5.0759
.data 0x44000 269312 9,216 12,664 yes / yes / no 4.7277
.pdata 0x48000 278528 10,752 10,248 yes / no / no 5.3332
.rsrc 0x4b000 289280 512 248 yes / no / no 2.5274
.reloc 0x4c000 289792 1,024 840 yes / no / no 4.7922

PE mitigation flags

Flag Present
dynamic_base true
high_entropy_va true
nx_compat true
guard_cf_flag true
no_seh false
appcontainer false
force_integrity false

Evidence

Large artifacts require Git LFS. A filename hash identifies the original PE; the content of a generated artifact has a different digest.

Module catalog ยท Research overview