NVIDIA software reverse engineering

Static-analysis corpus of NVIDIA App 11.0.9.585, NvContainer, FrameView SDK and the whole C:\Program Files\NVIDIA Corporation tree. 131 PE images, 1,180,302 decompiled functions, 14 recovered Protocol Buffers schemas.

View on GitHub

dxil.dll

2c93b092b20bcf0214f5eca09ae8fd1842c8a9197b77298dfe8184c65c4c7c86

Identity

Property Value
Architecture AMD64
Source size 1,508,976 bytes
Preferred image base 0x180000000
Entry RVA 0x10ce10
Imports / exports 89 / 2
Exception/unwind ranges 3,231
Executable raw bytes 1,171,456

Physical paths:

Decompilation coverage

Complete: 4,596 successful reconstructions, 0 failures, 4,596 attempted entries, 4,596 reported discovered entries.

Counts refer to automated analysis, not manual review or recovered source code. Function boundaries can change during analysis.

Sections

Section RVA Raw offset Raw bytes Virtual bytes R / W / X Entropy
.text 0x1000 1024 1,171,456 1,171,292 yes / no / yes 6.4669
.rdata 0x11f000 1172480 256,512 256,326 yes / no / no 5.3358
.data 0x15e000 1428992 21,504 31,644 yes / yes / no 3.8927
.pdata 0x166000 1450496 38,912 38,772 yes / no / no 6.0414
_RDATA 0x170000 1489408 512 244 yes / no / no 2.4305
.rsrc 0x171000 1489920 1,536 1,480 yes / no / no 4.0258
.reloc 0x172000 1491456 7,168 7,048 yes / no / no 5.435

PE mitigation flags

Flag Present
dynamic_base true
high_entropy_va true
nx_compat true
guard_cf_flag true
no_seh false
appcontainer false
force_integrity false

Evidence

Large artifacts require Git LFS. A filename hash identifies the original PE; the content of a generated artifact has a different digest.

Module catalog ยท Research overview