NVIDIA software reverse engineering

Static-analysis corpus of NVIDIA App 11.0.9.585, NvContainer, FrameView SDK and the whole C:\Program Files\NVIDIA Corporation tree. 131 PE images, 1,180,302 decompiled functions, 14 recovered Protocol Buffers schemas.

View on GitHub

OAWrapper.exe

64ece426504fc9f057e8ce36a70659d6811f08f7117affb79b5765e8a67c88fe

Identity

Property Value
Architecture AMD64
Source size 506,992 bytes
Preferred image base 0x140000000
Entry RVA 0x18160
Imports / exports 94 / 0
Exception/unwind ranges 972
Executable raw bytes 242,176

Physical paths:

Decompilation coverage

Complete: 1,175 successful reconstructions, 0 failures, 1,175 attempted entries, 1,175 reported discovered entries.

Counts refer to automated analysis, not manual review or recovered source code. Function boundaries can change during analysis.

Sections

Section RVA Raw offset Raw bytes Virtual bytes R / W / X Entropy
.text 0x1000 1024 242,176 241,916 yes / no / yes 6.4991
.rdata 0x3d000 243200 81,920 81,526 yes / no / no 5.1443
.data 0x51000 325120 5,120 11,800 yes / yes / no 3.0388
.pdata 0x54000 330240 11,776 11,664 yes / no / no 5.5634
_RDATA 0x57000 342016 1,024 640 yes / no / no 3.1847
.rsrc 0x58000 343040 151,040 150,640 yes / no / no 6.4524
.reloc 0x7d000 494080 2,560 2,496 yes / no / no 5.3892

PE mitigation flags

Flag Present
dynamic_base true
high_entropy_va true
nx_compat true
guard_cf_flag true
no_seh false
appcontainer false
force_integrity false

Evidence

Large artifacts require Git LFS. A filename hash identifies the original PE; the content of a generated artifact has a different digest.

Module catalog ยท Research overview