NVIDIA software reverse engineering

Static-analysis corpus of NVIDIA App 11.0.9.585, NvContainer, FrameView SDK and the whole C:\Program Files\NVIDIA Corporation tree. 131 PE images, 1,180,302 decompiled functions, 14 recovered Protocol Buffers schemas.

View on GitHub

NVPrxy64.DLL

599949b92a60f05705ba66c8611c177462cb44f877b16e6054c097ffb9d9e88e

Identity

Property Value
Architecture AMD64
Source size 1,240,296 bytes
Preferred image base 0x180000000
Entry RVA 0x8e120
Imports / exports 235 / 1
Exception/unwind ranges 3,241
Executable raw bytes 884,224

Physical paths:

Decompilation coverage

Complete with errors: 6,458 successful reconstructions, 2 failures, 6,460 attempted entries, 6,460 reported discovered entries.

Counts refer to automated analysis, not manual review or recovered source code. Function boundaries can change during analysis.

Sections

Section RVA Raw offset Raw bytes Virtual bytes R / W / X Entropy
.text 0x1000 1024 884,224 883,903 yes / no / yes 6.388
.rdata 0xd9000 885248 254,976 254,742 yes / no / no 5.2897
.data 0x118000 1140224 31,744 39,836 yes / yes / no 4.7104
.pdata 0x122000 1171968 38,912 38,892 yes / no / no 6.0564
.fptable 0x12c000 1210880 512 256 yes / yes / no 0.0
.rsrc 0x12d000 1211392 1,536 1,488 yes / no / no 4.0654
.reloc 0x12e000 1212928 7,168 6,760 yes / no / no 5.3267

PE mitigation flags

Flag Present
dynamic_base true
high_entropy_va true
nx_compat true
guard_cf_flag true
no_seh false
appcontainer false
force_integrity false

Evidence

Large artifacts require Git LFS. A filename hash identifies the original PE; the content of a generated artifact has a different digest.

Module catalog ยท Research overview