NVIDIA software reverse engineering

Static-analysis corpus of NVIDIA App 11.0.9.585, NvContainer, FrameView SDK and the whole C:\Program Files\NVIDIA Corporation tree. 131 PE images, 1,180,302 decompiled functions, 14 recovered Protocol Buffers schemas.

View on GitHub

nvngx_dlisr.dll

81e90273502d7f6d00f5fbd191bf9e68f2cc05851b54359458f6c6e2b30a9dad

Identity

Property Value
Architecture AMD64
Source size 58,958,448 bytes
Preferred image base 0x180000000
Entry RVA 0x7d960
Imports / exports 127 / 29
Exception/unwind ranges 1,575
Executable raw bytes 700,416

Physical paths:

Decompilation coverage

Complete: 1,718 successful reconstructions, 0 failures, 1,718 attempted entries, 1,718 reported discovered entries.

Counts refer to automated analysis, not manual review or recovered source code. Function boundaries can change during analysis.

Sections

Section RVA Raw offset Raw bytes Virtual bytes R / W / X Entropy
.text 0x1000 1024 700,416 700,252 yes / no / yes 6.0697
.rdata 0xac000 701440 58,025,472 58,025,134 yes / no / no 4.9723
.data 0x3803000 58726912 7,680 106,708 yes / yes / no 3.709
.pdata 0x381e000 58734592 18,944 18,900 yes / no / no 5.9082
.nv_fatb 0x3823000 58753536 186,880 186,568 yes / no / no 5.026
.nvFatBi 0x3851000 58940416 512 48 yes / no / no 0.3514
_RDATA 0x3852000 58940928 512 244 yes / no / no 2.4457
.rsrc 0x3853000 58941440 1,536 1,360 yes / no / no 3.1531
.reloc 0x3854000 58942976 5,120 5,044 yes / no / no 5.4469

PE mitigation flags

Flag Present
dynamic_base true
high_entropy_va true
nx_compat true
guard_cf_flag true
no_seh false
appcontainer false
force_integrity false

Evidence

Large artifacts require Git LFS. A filename hash identifies the original PE; the content of a generated artifact has a different digest.

Module catalog ยท Research overview