NVIDIA software reverse engineering

Static-analysis corpus of NVIDIA App 11.0.9.585, NvContainer, FrameView SDK and the whole C:\Program Files\NVIDIA Corporation tree. 131 PE images, 1,180,302 decompiled functions, 14 recovered Protocol Buffers schemas.

View on GitHub

nvfvsdksvc_x64.exe

e2ca40523ce7cd0c1f3b4beab6d9adf897a119c52d3c54a9e77784705c1c98e8

Identity

Property Value
Architecture AMD64
Source size 939,120 bytes
Preferred image base 0x140000000
Entry RVA 0x39490
Imports / exports 175 / 0
Exception/unwind ranges 1,885
Executable raw bytes 583,168

Physical paths:

Decompilation coverage

Complete: 2,657 successful reconstructions, 0 failures, 2,657 attempted entries, 2,657 reported discovered entries.

Counts refer to automated analysis, not manual review or recovered source code. Function boundaries can change during analysis.

Sections

Section RVA Raw offset Raw bytes Virtual bytes R / W / X Entropy
.text 0x1000 1024 583,168 582,716 yes / no / yes 6.4802
.rdata 0x90000 584192 146,432 146,362 yes / no / no 5.0103
.data 0xb4000 730624 11,776 37,196 yes / yes / no 3.8783
.pdata 0xbe000 742400 23,040 22,620 yes / no / no 5.8029
.didat 0xc4000 765440 1,024 912 yes / yes / no 3.2418
_RDATA 0xc5000 766464 512 500 yes / no / no 4.1655
.rsrc 0xc6000 766976 157,184 156,760 yes / no / no 5.3521
.reloc 0xed000 924160 4,608 4,212 yes / no / no 5.257

PE mitigation flags

Flag Present
dynamic_base true
high_entropy_va true
nx_compat true
guard_cf_flag true
no_seh false
appcontainer false
force_integrity false

Evidence

Large artifacts require Git LFS. A filename hash identifies the original PE; the content of a generated artifact has a different digest.

Module catalog ยท Research overview