NVIDIA software reverse engineering

Static-analysis corpus of NVIDIA App 11.0.9.585, NvContainer, FrameView SDK and the whole C:\Program Files\NVIDIA Corporation tree. 131 PE images, 1,180,302 decompiled functions, 14 recovered Protocol Buffers schemas.

View on GitHub

libEGL.dll

4206dead23c7224f3fc3863c80861d0e9da1b2a91084e0454d84b427f944ccbb

Identity

Property Value
Architecture AMD64
Source size 503,920 bytes
Preferred image base 0x180000000
Entry RVA 0x14010
Imports / exports 91 / 113
Exception/unwind ranges 1,354
Executable raw bytes 356,352

Physical paths:

Decompilation coverage

Complete: 1,542 successful reconstructions, 0 failures, 1,542 attempted entries, 1,542 reported discovered entries.

Counts refer to automated analysis, not manual review or recovered source code. Function boundaries can change during analysis.

Sections

Section RVA Raw offset Raw bytes Virtual bytes R / W / X Entropy
.text 0x1000 1024 356,352 355,914 yes / no / yes 6.4954
.rdata 0x58000 357376 94,720 94,340 yes / no / no 5.1601
.data 0x70000 452096 8,192 19,412 yes / yes / no 3.6129
.pdata 0x75000 460288 16,384 16,248 yes / no / no 5.6776
.gxfg 0x79000 476672 10,240 9,760 yes / no / no 5.0481
.retplne 0x7c000 486912 512 140 no / no / no 1.0506
.tls 0x7d000 487424 512 289 yes / yes / no 0.0204
_RDATA 0x7e000 487936 512 500 yes / no / no 4.205
.rsrc 0x7f000 488448 1,536 1,144 yes / no / no 2.7419
.reloc 0x80000 489984 3,584 3,128 yes / no / no 5.1774

PE mitigation flags

Flag Present
dynamic_base true
high_entropy_va true
nx_compat true
guard_cf_flag true
no_seh false
appcontainer false
force_integrity false

Evidence

Large artifacts require Git LFS. A filename hash identifies the original PE; the content of a generated artifact has a different digest.

Module catalog ยท Research overview