NVIDIA software reverse engineering

Static-analysis corpus of NVIDIA App 11.0.9.585, NvContainer, FrameView SDK and the whole C:\Program Files\NVIDIA Corporation tree. 131 PE images, 1,180,302 decompiled functions, 14 recovered Protocol Buffers schemas.

View on GitHub

DisplayDriverExt64.dll

69c26a1b1ab9fd9278cfa31e582a3a51020a34a257f7cec866f66543b7ee42f1

Identity

Property Value
Architecture AMD64
Source size 2,350,824 bytes
Preferred image base 0x180000000
Entry RVA 0x10cbc0
Imports / exports 272 / 5
Exception/unwind ranges 5,100
Executable raw bytes 1,630,208

Physical paths:

Decompilation coverage

Complete with errors: 16,872 successful reconstructions, 2 failures, 16,874 attempted entries, 16,874 reported discovered entries.

Counts refer to automated analysis, not manual review or recovered source code. Function boundaries can change during analysis.

Sections

Section RVA Raw offset Raw bytes Virtual bytes R / W / X Entropy
.text 0x1000 1024 1,630,208 1,629,759 yes / no / yes 6.2416
.rdata 0x18f000 1631232 502,272 502,204 yes / no / no 5.4294
.data 0x20a000 2133504 106,496 115,196 yes / yes / no 4.8035
.pdata 0x227000 2240000 61,440 61,200 yes / no / no 6.163
.fptable 0x236000 2301440 512 256 yes / yes / no 0.0
.rsrc 0x237000 2301952 17,408 17,312 yes / no / no 4.7721
.reloc 0x23c000 2319360 11,264 11,192 yes / no / no 5.4426

PE mitigation flags

Flag Present
dynamic_base true
high_entropy_va true
nx_compat true
guard_cf_flag true
no_seh false
appcontainer false
force_integrity false

Evidence

Large artifacts require Git LFS. A filename hash identifies the original PE; the content of a generated artifact has a different digest.

Module catalog ยท Research overview