NVIDIA software reverse engineering

Static-analysis corpus of NVIDIA App 11.0.9.585, NvContainer, FrameView SDK and the whole C:\Program Files\NVIDIA Corporation tree. 131 PE images, 1,180,302 decompiled functions, 14 recovered Protocol Buffers schemas.

View on GitHub

NvAppExt.dll

8b1f53246d0370b2f2d2712bfe7244ea3382c952540d030d637ad82c89d38b05

Identity

Property Value
Architecture x86
Source size 1,513,072 bytes
Preferred image base 0x10000000
Entry RVA 0x84990
Imports / exports 240 / 5
Exception/unwind ranges 0
Executable raw bytes 1,011,712

Physical paths:

Decompilation coverage

Complete with errors: 4,623 successful reconstructions, 11 failures, 4,634 attempted entries, 4,634 reported discovered entries.

Counts refer to automated analysis, not manual review or recovered source code. Function boundaries can change during analysis.

Sections

Section RVA Raw offset Raw bytes Virtual bytes R / W / X Entropy
.text 0x1000 1024 1,011,712 1,011,292 yes / no / yes 6.5934
.rdata 0xf8000 1012736 349,184 349,066 yes / no / no 5.0439
.data 0x14e000 1361920 49,664 55,684 yes / yes / no 5.0201
.rsrc 0x15c000 1411584 17,408 17,224 yes / no / no 4.7508
.reloc 0x161000 1428992 73,728 73,228 yes / no / no 6.5756

PE mitigation flags

Flag Present
dynamic_base true
high_entropy_va false
nx_compat true
guard_cf_flag true
no_seh false
appcontainer false
force_integrity false

Evidence

Large artifacts require Git LFS. A filename hash identifies the original PE; the content of a generated artifact has a different digest.

Module catalog ยท Research overview