NVIDIA software reverse engineering

Static-analysis corpus of NVIDIA App 11.0.9.585, NvContainer, FrameView SDK and the whole C:\Program Files\NVIDIA Corporation tree. 131 PE images, 1,180,302 decompiled functions, 14 recovered Protocol Buffers schemas.

View on GitHub

Ontology64.dll

fb6f988c718b4482eda67b2924fb088b2664b4053e0280f9a5229d05da2ba525

Identity

Property Value
Architecture AMD64
Source size 4,054,128 bytes
Preferred image base 0x180000000
Entry RVA 0x208060
Imports / exports 230 / 3
Exception/unwind ranges 11,264
Executable raw bytes 3,257,344

Physical paths:

Decompilation coverage

Complete with errors: 11,677 successful reconstructions, 1 failures, 11,678 attempted entries, 11,678 reported discovered entries.

Counts refer to automated analysis, not manual review or recovered source code. Function boundaries can change during analysis.

Sections

Section RVA Raw offset Raw bytes Virtual bytes R / W / X Entropy
.text 0x1000 1024 3,257,344 3,257,324 yes / no / yes 6.4754
.rdata 0x31d000 3258368 588,800 588,366 yes / no / no 5.8871
.data 0x3ad000 3847168 43,520 81,620 yes / yes / no 4.0612
.pdata 0x3c1000 3890688 135,168 135,168 yes / no / no 6.3442
.didat 0x3e2000 4025856 512 64 yes / yes / no 0.4958
_RDATA 0x3e3000 4026368 1,024 640 yes / no / no 3.1912
.rsrc 0x3e4000 4027392 3,072 2,808 yes / no / no 4.5302
.reloc 0x3e5000 4030464 13,312 13,012 yes / no / no 5.4426

PE mitigation flags

Flag Present
dynamic_base true
high_entropy_va true
nx_compat true
guard_cf_flag true
no_seh false
appcontainer false
force_integrity false

Evidence

Large artifacts require Git LFS. A filename hash identifies the original PE; the content of a generated artifact has a different digest.

Module catalog ยท Research overview