NVIDIA software reverse engineering

Static-analysis corpus of NVIDIA App 11.0.9.585, NvContainer, FrameView SDK and the whole C:\Program Files\NVIDIA Corporation tree. 131 PE images, 1,180,302 decompiled functions, 14 recovered Protocol Buffers schemas.

View on GitHub

AggregatorContainerPlugin_x64.dll

bc832c7e2537e63712dd3f6822331749c67f1d8641c05154a22b9e93893d42b4

Identity

Property Value
Architecture AMD64
Source size 198,768 bytes
Preferred image base 0x180000000
Entry RVA 0x1c450
Imports / exports 193 / 1
Exception/unwind ranges 608
Executable raw bytes 123,392

Physical paths:

Decompilation coverage

Complete: 821 successful reconstructions, 0 failures, 821 attempted entries, 821 reported discovered entries.

Counts refer to automated analysis, not manual review or recovered source code. Function boundaries can change during analysis.

Sections

Section RVA Raw offset Raw bytes Virtual bytes R / W / X Entropy
.text 0x1000 1024 123,392 123,003 yes / no / yes 6.2523
.rdata 0x20000 124416 46,592 46,148 yes / no / no 5.099
.data 0x2c000 171008 8,192 10,656 yes / yes / no 4.7742
.pdata 0x2f000 179200 7,680 7,296 yes / no / no 5.1738
.rsrc 0x31000 186880 512 248 yes / no / no 2.5313
.reloc 0x32000 187392 1,024 724 yes / no / no 4.4173

PE mitigation flags

Flag Present
dynamic_base true
high_entropy_va true
nx_compat true
guard_cf_flag true
no_seh false
appcontainer false
force_integrity false

Evidence

Large artifacts require Git LFS. A filename hash identifies the original PE; the content of a generated artifact has a different digest.

Module catalog ยท Research overview