NVIDIA software reverse engineering

Static-analysis corpus of NVIDIA App 11.0.9.585, NvContainer, FrameView SDK and the whole C:\Program Files\NVIDIA Corporation tree. 131 PE images, 1,180,302 decompiled functions, 14 recovered Protocol Buffers schemas.

View on GitHub

7z.dll

3dfedba6e092428ed5a33c4e38d646f706ced851783442a2bb2dd281499fe2ea

Identity

Property Value
Architecture AMD64
Source size 1,722,480 bytes
Preferred image base 0x180000000
Entry RVA 0x12e080
Imports / exports 123 / 15
Exception/unwind ranges 4,228
Executable raw bytes 1,318,400

Physical paths:

Decompilation coverage

Complete: 5,824 successful reconstructions, 0 failures, 5,824 attempted entries, 5,824 reported discovered entries.

Counts refer to automated analysis, not manual review or recovered source code. Function boundaries can change during analysis.

Sections

Section RVA Raw offset Raw bytes Virtual bytes R / W / X Entropy
.text 0x1000 1024 1,318,400 1,318,080 yes / no / yes 6.4274
.rdata 0x143000 1319424 221,184 221,108 yes / no / no 5.6442
.data 0x179000 1540608 4,096 64,252 yes / yes / no 2.7348
.pdata 0x189000 1544704 51,200 50,736 yes / no / no 5.9954
.fptable 0x196000 1595904 512 256 yes / yes / no 0.0
.rsrc 0x197000 1596416 104,960 104,816 yes / no / no 3.8978
.reloc 0x1b1000 1701376 10,752 10,552 yes / no / no 5.4442

PE mitigation flags

Flag Present
dynamic_base true
high_entropy_va true
nx_compat true
guard_cf_flag true
no_seh false
appcontainer false
force_integrity false

Evidence

Large artifacts require Git LFS. A filename hash identifies the original PE; the content of a generated artifact has a different digest.

Module catalog ยท Research overview