NVIDIA software reverse engineering

Static-analysis corpus of NVIDIA App 11.0.9.585, NvContainer, FrameView SDK and the whole C:\Program Files\NVIDIA Corporation tree. 131 PE images, 1,180,302 decompiled functions, 14 recovered Protocol Buffers schemas.

View on GitHub

DynamicBillboardPresentations.dll

c7b342b4b9f063726575d2e0ac54371c02a95ad2a82d5ebe4c6c31a21c02a65c

Identity

Property Value
Architecture x86
Source size 1,100,400 bytes
Preferred image base 0x10000000
Entry RVA 0x668f0
Imports / exports 202 / 5
Exception/unwind ranges 0
Executable raw bytes 779,264

Physical paths:

Decompilation coverage

Complete with errors: 4,055 successful reconstructions, 10 failures, 4,065 attempted entries, 4,065 reported discovered entries.

Counts refer to automated analysis, not manual review or recovered source code. Function boundaries can change during analysis.

Sections

Section RVA Raw offset Raw bytes Virtual bytes R / W / X Entropy
.text 0x1000 1024 779,264 778,956 yes / no / yes 6.5995
.rdata 0xc0000 780288 215,552 215,368 yes / no / no 5.1265
.data 0xf5000 995840 24,064 29,480 yes / yes / no 4.9312
.rsrc 0xfd000 1019904 19,456 19,368 yes / no / no 4.8089
.reloc 0x102000 1039360 50,688 50,220 yes / no / no 6.5902

PE mitigation flags

Flag Present
dynamic_base true
high_entropy_va false
nx_compat true
guard_cf_flag true
no_seh false
appcontainer false
force_integrity false

Evidence

Large artifacts require Git LFS. A filename hash identifies the original PE; the content of a generated artifact has a different digest.

Module catalog ยท Research overview