NVIDIA software reverse engineering

Static-analysis corpus of NVIDIA App 11.0.9.585, NvContainer, FrameView SDK and the whole C:\Program Files\NVIDIA Corporation tree. 131 PE images, 1,180,302 decompiled functions, 14 recovered Protocol Buffers schemas.

View on GitHub

nvxdsyncplugin.dll

870140e1f941c2043d5e5bd34b734f64f57b05d48f47ecf89fbf1a783371adf8

Identity

Property Value
Architecture AMD64
Source size 1,344,624 bytes
Preferred image base 0x180000000
Entry RVA 0x80260
Imports / exports 197 / 1
Exception/unwind ranges 3,162
Executable raw bytes 927,232

Physical paths:

Decompilation coverage

Complete with errors: 4,841 successful reconstructions, 1 failures, 4,842 attempted entries, 4,842 reported discovered entries.

Counts refer to automated analysis, not manual review or recovered source code. Function boundaries can change during analysis.

Sections

Section RVA Raw offset Raw bytes Virtual bytes R / W / X Entropy
.text 0x1000 1024 926,720 926,572 yes / no / yes 6.3869
.orpc 0xe4000 927744 512 261 yes / no / yes 3.6479
.rdata 0xe5000 928256 262,144 261,670 yes / no / no 4.9804
.data 0x125000 1190400 39,936 78,764 yes / yes / no 4.8339
.pdata 0x139000 1230336 38,400 37,944 yes / no / no 5.9831
.didat 0x143000 1268736 512 40 yes / yes / no 0.3443
.rsrc 0x144000 1269248 56,320 56,100 yes / no / no 2.9303
.reloc 0x152000 1325568 8,704 8,692 yes / no / no 5.4474

PE mitigation flags

Flag Present
dynamic_base true
high_entropy_va true
nx_compat true
guard_cf_flag true
no_seh false
appcontainer false
force_integrity false

Evidence

Large artifacts require Git LFS. A filename hash identifies the original PE; the content of a generated artifact has a different digest.

Module catalog ยท Research overview