NVIDIA software reverse engineering

Static-analysis corpus of NVIDIA App 11.0.9.585, NvContainer, FrameView SDK and the whole C:\Program Files\NVIDIA Corporation tree. 131 PE images, 1,180,302 decompiled functions, 14 recovered Protocol Buffers schemas.

View on GitHub

FvSDKTestClient_Public.exe

b7dd66f1674e05fff5f3aed3315f6789698a562f58998b9b2132febc589d5098

Identity

Property Value
Architecture AMD64
Source size 99,440 bytes
Preferred image base 0x140000000
Entry RVA 0xeca0
Imports / exports 112 / 0
Exception/unwind ranges 190
Executable raw bytes 60,416

Physical paths:

Decompilation coverage

Complete: 293 successful reconstructions, 0 failures, 293 attempted entries, 293 reported discovered entries.

Counts refer to automated analysis, not manual review or recovered source code. Function boundaries can change during analysis.

Sections

Section RVA Raw offset Raw bytes Virtual bytes R / W / X Entropy
.text 0x1000 1024 60,416 60,370 yes / no / yes 6.2505
.rdata 0x10000 61440 22,016 21,870 yes / no / no 4.9022
.data 0x16000 83456 1,024 3,328 yes / yes / no 3.4315
.pdata 0x17000 84480 2,560 2,280 yes / no / no 4.3965
.rsrc 0x18000 87040 1,536 1,400 yes / no / no 3.9482
.reloc 0x19000 88576 512 208 yes / no / no 2.6994

PE mitigation flags

Flag Present
dynamic_base true
high_entropy_va true
nx_compat true
guard_cf_flag true
no_seh false
appcontainer false
force_integrity false

Evidence

Large artifacts require Git LFS. A filename hash identifies the original PE; the content of a generated artifact has a different digest.

Module catalog ยท Research overview