NVIDIA software reverse engineering

Static-analysis corpus of NVIDIA App 11.0.9.585, NvContainer, FrameView SDK and the whole C:\Program Files\NVIDIA Corporation tree. 131 PE images, 1,180,302 decompiled functions, 14 recovered Protocol Buffers schemas.

View on GitHub

amd_ags_x64.dll

6f6eabdb872cc503beace295a349d379625b5c518646af203ec4f71f06a0ca16

Identity

Property Value
Architecture AMD64
Source size 176,752 bytes
Preferred image base 0x180000000
Entry RVA 0x7bb8
Imports / exports 74 / 41
Exception/unwind ranges 542
Executable raw bytes 104,448

Physical paths:

Decompilation coverage

Complete: 517 successful reconstructions, 0 failures, 517 attempted entries, 517 reported discovered entries.

Counts refer to automated analysis, not manual review or recovered source code. Function boundaries can change during analysis.

Sections

Section RVA Raw offset Raw bytes Virtual bytes R / W / X Entropy
.text 0x1000 1024 104,448 103,968 yes / no / yes 6.4055
.rdata 0x1b000 105472 47,616 47,476 yes / no / no 5.1799
.data 0x27000 153088 3,072 7,424 yes / yes / no 2.1726
.pdata 0x29000 156160 6,656 6,504 yes / no / no 5.1856
.rsrc 0x2b000 162816 1,536 1,208 yes / no / no 3.5833
.reloc 0x2c000 164352 2,048 1,620 yes / no / no 4.8528

PE mitigation flags

Flag Present
dynamic_base true
high_entropy_va true
nx_compat true
guard_cf_flag false
no_seh false
appcontainer false
force_integrity false

Evidence

Large artifacts require Git LFS. A filename hash identifies the original PE; the content of a generated artifact has a different digest.

Module catalog ยท Research overview