NVIDIA software reverse engineering

Static-analysis corpus of NVIDIA App 11.0.9.585, NvContainer, FrameView SDK and the whole C:\Program Files\NVIDIA Corporation tree. 131 PE images, 1,180,302 decompiled functions, 14 recovered Protocol Buffers schemas.

View on GitHub

libGLESv2.dll

8e94434d84530fef7224b8f5d55f5e0344b222f8883bca35863e2194bc03e821

Identity

Property Value
Architecture AMD64
Source size 8,244,848 bytes
Preferred image base 0x180000000
Entry RVA 0x4f2310
Imports / exports 142 / 1,789
Exception/unwind ranges 12,454
Executable raw bytes 6,415,360

Physical paths:

Decompilation coverage

Complete with errors: 16,632 successful reconstructions, 8 failures, 16,640 attempted entries, 16,640 reported discovered entries.

Counts refer to automated analysis, not manual review or recovered source code. Function boundaries can change during analysis.

Sections

Section RVA Raw offset Raw bytes Virtual bytes R / W / X Entropy
.text 0x1000 1024 6,415,360 6,415,349 yes / no / yes 6.4334
.rdata 0x620000 6416384 1,365,504 1,365,316 yes / no / no 6.1366
.data 0x76e000 7781888 233,472 268,516 yes / yes / no 2.4802
.pdata 0x7b0000 8015360 149,504 149,448 yes / no / no 6.0896
.gxfg 0x7d5000 8164864 11,776 11,536 yes / no / no 5.1458
.retplne 0x7d8000 8176640 512 140 no / no / no 1.0506
.tls 0x7d9000 8177152 512 322 yes / yes / no 0.0204
_RDATA 0x7da000 8177664 512 500 yes / no / no 4.2264
.rsrc 0x7db000 8178176 1,536 1,480 yes / no / no 3.3725
.reloc 0x7dc000 8179712 54,784 54,368 yes / no / no 5.4612

PE mitigation flags

Flag Present
dynamic_base true
high_entropy_va true
nx_compat true
guard_cf_flag true
no_seh false
appcontainer false
force_integrity false

Evidence

Large artifacts require Git LFS. A filename hash identifies the original PE; the content of a generated artifact has a different digest.

Module catalog ยท Research overview