NVIDIA software reverse engineering

Static-analysis corpus of NVIDIA App 11.0.9.585, NvContainer, FrameView SDK and the whole C:\Program Files\NVIDIA Corporation tree. 131 PE images, 1,180,302 decompiled functions, 14 recovered Protocol Buffers schemas.

View on GitHub

NvTelemetryBridge64.dll

e7ca48239c18ffb6e2fc2b645eef8cc843c23fd3fcd6b90569c6bf4660af97df

Identity

Property Value
Architecture AMD64
Source size 426,608 bytes
Preferred image base 0x180000000
Entry RVA 0x206a0
Imports / exports 110 / 23
Exception/unwind ranges 1,313
Executable raw bytes 293,888

Physical paths:

Decompilation coverage

Complete: 1,741 successful reconstructions, 0 failures, 1,741 attempted entries, 1,741 reported discovered entries.

Counts refer to automated analysis, not manual review or recovered source code. Function boundaries can change during analysis.

Sections

Section RVA Raw offset Raw bytes Virtual bytes R / W / X Entropy
.text 0x1000 1024 293,888 293,852 yes / no / yes 6.4641
.rdata 0x49000 294912 93,184 93,016 yes / no / no 5.1835
.data 0x60000 388096 6,656 13,116 yes / yes / no 3.4399
.pdata 0x64000 394752 15,872 15,756 yes / no / no 5.6155
_RDATA 0x68000 410624 1,024 640 yes / no / no 3.1707
.rsrc 0x69000 411648 1,536 1,400 yes / no / no 3.9093
.reloc 0x6a000 413184 3,072 2,952 yes / no / no 5.3707

PE mitigation flags

Flag Present
dynamic_base true
high_entropy_va true
nx_compat true
guard_cf_flag true
no_seh false
appcontainer false
force_integrity false

Evidence

Large artifacts require Git LFS. A filename hash identifies the original PE; the content of a generated artifact has a different digest.

Module catalog ยท Research overview