NVIDIA software reverse engineering

Static-analysis corpus of NVIDIA App 11.0.9.585, NvContainer, FrameView SDK and the whole C:\Program Files\NVIDIA Corporation tree. 131 PE images, 1,180,302 decompiled functions, 14 recovered Protocol Buffers schemas.

View on GitHub

libcrypto-3-x64.dll

bf7031536634118b6d476d3af2247141d37f3034fbbe2e8c7a9a60608f5ec393

Identity

Property Value
Architecture AMD64
Source size 7,544,432 bytes
Preferred image base 0x180000000
Entry RVA 0x1860
Imports / exports 196 / 5,895
Exception/unwind ranges 17,582
Executable raw bytes 5,261,312

Physical paths:

Decompilation coverage

Complete with errors: 24,089 successful reconstructions, 7 failures, 24,096 attempted entries, 24,096 reported discovered entries.

Counts refer to automated analysis, not manual review or recovered source code. Function boundaries can change during analysis.

Sections

Section RVA Raw offset Raw bytes Virtual bytes R / W / X Entropy
.text 0x1000 1024 5,261,312 5,260,916 yes / no / yes 5.8322
.rdata 0x506000 5262336 1,866,752 1,866,392 yes / no / no 5.067
.data 0x6ce000 7129088 19,456 34,817 yes / yes / no 3.7284
.pdata 0x6d7000 7148544 232,448 232,380 yes / no / no 6.015
.idata 0x710000 7380992 10,752 10,373 yes / no / no 3.2198
.gfids 0x713000 7391744 64,000 63,568 yes / no / no 4.2415
.00cfg 0x723000 7455744 512 373 yes / no / no 0.4319
.rsrc 0x724000 7456256 2,048 1,651 yes / no / no 1.813
.reloc 0x725000 7458304 75,776 75,280 yes / no / no 4.4982

PE mitigation flags

Flag Present
dynamic_base true
high_entropy_va true
nx_compat true
guard_cf_flag true
no_seh false
appcontainer false
force_integrity false

Evidence

Large artifacts require Git LFS. A filename hash identifies the original PE; the content of a generated artifact has a different digest.

Module catalog ยท Research overview