NVIDIA software reverse engineering

Static-analysis corpus of NVIDIA App 11.0.9.585, NvContainer, FrameView SDK and the whole C:\Program Files\NVIDIA Corporation tree. 131 PE images, 1,180,302 decompiled functions, 14 recovered Protocol Buffers schemas.

View on GitHub

NvDriverDiagnostics.dll

8dce136dde4d2f25ddf4df33373939a0e1c2ba30088fc0740a9539c1146cec30

Identity

Property Value
Architecture AMD64
Source size 3,313,264 bytes
Preferred image base 0x180000000
Entry RVA 0x1c60
Imports / exports 395 / 1
Exception/unwind ranges 7,766
Executable raw bytes 2,723,328

Physical paths:

Decompilation coverage

Complete with errors: 16,867 successful reconstructions, 7 failures, 16,874 attempted entries, 16,874 reported discovered entries.

Counts refer to automated analysis, not manual review or recovered source code. Function boundaries can change during analysis.

Sections

Section RVA Raw offset Raw bytes Virtual bytes R / W / X Entropy
.text 0x1000 1024 2,723,328 2,723,265 yes / no / yes 5.2502
.rdata 0x29a000 2724352 394,240 394,188 yes / no / no 5.0236
.data 0x2fb000 3118592 28,672 35,161 yes / yes / no 4.153
.pdata 0x304000 3147264 102,912 102,804 yes / no / no 5.9212
.idata 0x31e000 3250176 28,160 28,089 yes / no / no 4.4065
.gfids 0x325000 3278336 7,168 7,008 yes / no / no 3.5629
.giats 0x327000 3285504 512 292 yes / no / no 0.3227
.tls 0x328000 3286016 1,024 777 yes / yes / no 0.0112
.00cfg 0x329000 3287040 512 373 yes / no / no 0.4319
.rsrc 0x32a000 3287552 2,048 1,554 yes / no / no 3.3383
.reloc 0x32b000 3289600 13,312 12,866 yes / no / no 2.2517

PE mitigation flags

Flag Present
dynamic_base true
high_entropy_va true
nx_compat true
guard_cf_flag true
no_seh false
appcontainer false
force_integrity false

Extracted native interfaces

Name Command Notification Description
AddNocatFrameEvent True False  

Evidence

Large artifacts require Git LFS. A filename hash identifies the original PE; the content of a generated artifact has a different digest.

Module catalog · Research overview