NVIDIA software reverse engineering

Static-analysis corpus of NVIDIA App 11.0.9.585, NvContainer, FrameView SDK and the whole C:\Program Files\NVIDIA Corporation tree. 131 PE images, 1,180,302 decompiled functions, 14 recovered Protocol Buffers schemas.

View on GitHub

InstallerExtension.dll

764358a378bf8ed483f6c2b5288736c014bed19c05039dd1e7fc26001d0b890b

Identity

Property Value
Architecture x86
Source size 1,214,064 bytes
Preferred image base 0x10000000
Entry RVA 0x66ad0
Imports / exports 195 / 5
Exception/unwind ranges 0
Executable raw bytes 863,232

Physical paths:

Decompilation coverage

Complete with errors: 4,190 successful reconstructions, 12 failures, 4,202 attempted entries, 4,202 reported discovered entries.

Counts refer to automated analysis, not manual review or recovered source code. Function boundaries can change during analysis.

Sections

Section RVA Raw offset Raw bytes Virtual bytes R / W / X Entropy
.text 0x1000 1024 863,232 863,087 yes / no / yes 6.6026
.rdata 0xd4000 864256 244,736 244,448 yes / no / no 5.0284
.data 0x110000 1108992 33,280 39,112 yes / yes / no 5.0307
.rsrc 0x11a000 1142272 2,048 1,808 yes / no / no 3.9742
.reloc 0x11b000 1144320 59,392 59,112 yes / no / no 6.5927

PE mitigation flags

Flag Present
dynamic_base true
high_entropy_va false
nx_compat true
guard_cf_flag true
no_seh false
appcontainer false
force_integrity false

Evidence

Large artifacts require Git LFS. A filename hash identifies the original PE; the content of a generated artifact has a different digest.

Module catalog ยท Research overview