NVIDIA software reverse engineering

Static-analysis corpus of NVIDIA App 11.0.9.585, NvContainer, FrameView SDK and the whole C:\Program Files\NVIDIA Corporation tree. 131 PE images, 1,180,302 decompiled functions, 14 recovered Protocol Buffers schemas.

View on GitHub

NvAppCore.dll

5b271506715f51d9690ddbfe95a9e808c1a4d616653d27eadf24da313976bc01

Identity

Property Value
Architecture AMD64
Source size 1,786,992 bytes
Preferred image base 0x180000000
Entry RVA 0x17c0
Imports / exports 380 / 12
Exception/unwind ranges 4,296
Executable raw bytes 1,428,480

Physical paths:

Decompilation coverage

Complete: 8,133 successful reconstructions, 0 failures, 8,133 attempted entries, 8,133 reported discovered entries.

Counts refer to automated analysis, not manual review or recovered source code. Function boundaries can change during analysis.

Sections

Section RVA Raw offset Raw bytes Virtual bytes R / W / X Entropy
.text 0x1000 1024 1,428,480 1,428,393 yes / no / yes 5.0411
.rdata 0x15e000 1429504 242,176 241,674 yes / no / no 5.0734
.data 0x19a000 1671680 9,216 13,209 yes / yes / no 3.2896
.pdata 0x19e000 1680896 57,344 57,000 yes / no / no 5.7695
.idata 0x1ac000 1738240 26,112 25,976 yes / no / no 4.2752
.gfids 0x1b3000 1764352 2,560 2,212 yes / no / no 2.7871
.giats 0x1b4000 1766912 512 276 yes / no / no 0.1701
.tls 0x1b5000 1767424 1,024 777 yes / yes / no 0.0112
.00cfg 0x1b6000 1768448 512 373 yes / no / no 0.4319
.rsrc 0x1b7000 1768960 1,536 1,113 yes / no / no 2.2533
.reloc 0x1b8000 1770496 6,144 6,039 yes / no / no 1.5168

PE mitigation flags

Flag Present
dynamic_base true
high_entropy_va true
nx_compat true
guard_cf_flag true
no_seh false
appcontainer false
force_integrity false

Evidence

Large artifacts require Git LFS. A filename hash identifies the original PE; the content of a generated artifact has a different digest.

Module catalog ยท Research overview