NVIDIA software reverse engineering

Static-analysis corpus of NVIDIA App 11.0.9.585, NvContainer, FrameView SDK and the whole C:\Program Files\NVIDIA Corporation tree. 131 PE images, 1,180,302 decompiled functions, 14 recovered Protocol Buffers schemas.

View on GitHub

NGXWrapper.dll

c7351623cc93c87d68d8cffafb2b48d58c61505f1f6ceb213c565b2b2652df07

Identity

Property Value
Architecture AMD64
Source size 1,246,320 bytes
Preferred image base 0x180000000
Entry RVA 0x1290
Imports / exports 283 / 4
Exception/unwind ranges 2,719
Executable raw bytes 945,664

Physical paths:

Decompilation coverage

Complete: 4,625 successful reconstructions, 0 failures, 4,625 attempted entries, 4,625 reported discovered entries.

Counts refer to automated analysis, not manual review or recovered source code. Function boundaries can change during analysis.

Sections

Section RVA Raw offset Raw bytes Virtual bytes R / W / X Entropy
.text 0x1000 1024 945,664 945,452 yes / no / yes 5.126
.rdata 0xe8000 946688 194,048 193,990 yes / no / no 4.6987
.data 0x118000 1140736 4,096 135,897 yes / yes / no 2.7512
.pdata 0x13a000 1144832 36,352 36,180 yes / no / no 5.6814
.idata 0x143000 1181184 17,920 17,571 yes / no / no 3.9917
.gfids 0x148000 1199104 11,776 11,344 yes / no / no 3.1831
.giats 0x14b000 1210880 512 268 yes / no / no 0.098
.tls 0x14c000 1211392 14,848 14,447 yes / yes / no 0.001
.00cfg 0x150000 1226240 512 373 yes / no / no 0.4238
.rsrc 0x151000 1226752 1,536 1,113 yes / no / no 2.2556
.reloc 0x152000 1228288 7,680 7,190 yes / no / no 3.1085

PE mitigation flags

Flag Present
dynamic_base true
high_entropy_va true
nx_compat true
guard_cf_flag true
no_seh false
appcontainer false
force_integrity false

Evidence

Large artifacts require Git LFS. A filename hash identifies the original PE; the content of a generated artifact has a different digest.

Module catalog ยท Research overview