NVIDIA software reverse engineering

Static-analysis corpus of NVIDIA App 11.0.9.585, NvContainer, FrameView SDK and the whole C:\Program Files\NVIDIA Corporation tree. 131 PE images, 1,180,302 decompiled functions, 14 recovered Protocol Buffers schemas.

View on GitHub

NvInstallerUtil.dll

e08b544f697e003cda488f09b28210b6339ed333b7d4e95beadb59fa8485b822

Identity

Property Value
Architecture x86
Source size 5,961,960 bytes
Preferred image base 0x10000000
Entry RVA 0x184700
Imports / exports 327 / 31
Exception/unwind ranges 0
Executable raw bytes 4,568,576

Physical paths:

Decompilation coverage

Complete with errors: 17,319 successful reconstructions, 328 failures, 17,647 attempted entries, 17,647 reported discovered entries.

Counts refer to automated analysis, not manual review or recovered source code. Function boundaries can change during analysis.

Sections

Section RVA Raw offset Raw bytes Virtual bytes R / W / X Entropy
.text 0x1000 1024 4,568,576 4,568,355 yes / no / yes 6.7811
.rdata 0x45d000 4569600 1,089,024 1,088,618 yes / no / no 5.8456
.data 0x567000 5658624 64,000 81,564 yes / yes / no 5.498
.rsrc 0x57b000 5722624 1,536 1,368 yes / no / no 3.8399
.reloc 0x57c000 5724160 217,600 217,508 yes / no / no 6.6418

PE mitigation flags

Flag Present
dynamic_base true
high_entropy_va false
nx_compat true
guard_cf_flag true
no_seh false
appcontainer false
force_integrity false

Evidence

Large artifacts require Git LFS. A filename hash identifies the original PE; the content of a generated artifact has a different digest.

Module catalog ยท Research overview