NVIDIA software reverse engineering

Static-analysis corpus of NVIDIA App 11.0.9.585, NvContainer, FrameView SDK and the whole C:\Program Files\NVIDIA Corporation tree. 131 PE images, 1,180,302 decompiled functions, 14 recovered Protocol Buffers schemas.

View on GitHub

nvxdplcy.dll

76b583ae106d2e2c670c3abeacea24624e68bc629cf201492326723e38744e6e

Identity

Property Value
Architecture AMD64
Source size 1,539,696 bytes
Preferred image base 0x63000000
Entry RVA 0xcd530
Imports / exports 177 / 5
Exception/unwind ranges 3,765
Executable raw bytes 1,074,176

Physical paths:

Decompilation coverage

Complete: 5,664 successful reconstructions, 0 failures, 5,664 attempted entries, 5,664 reported discovered entries.

Counts refer to automated analysis, not manual review or recovered source code. Function boundaries can change during analysis.

Sections

Section RVA Raw offset Raw bytes Virtual bytes R / W / X Entropy
.text 0x1000 1024 1,073,664 1,073,532 yes / no / yes 6.4269
.orpc 0x108000 1074688 512 261 yes / no / yes 3.6267
.rdata 0x109000 1075200 306,176 305,768 yes / no / no 5.1661
.data 0x154000 1381376 37,376 77,708 yes / yes / no 4.7321
.pdata 0x167000 1418752 45,568 45,180 yes / no / no 5.9733
.didat 0x173000 1464320 512 16 yes / yes / no 0.0815
.rsrc 0x174000 1464832 55,808 55,748 yes / no / no 2.8925
.reloc 0x182000 1520640 8,704 8,508 yes / no / no 5.4152

PE mitigation flags

Flag Present
dynamic_base true
high_entropy_va true
nx_compat true
guard_cf_flag true
no_seh false
appcontainer false
force_integrity false

Evidence

Large artifacts require Git LFS. A filename hash identifies the original PE; the content of a generated artifact has a different digest.

Module catalog ยท Research overview