NVIDIA software reverse engineering

Static-analysis corpus of NVIDIA App 11.0.9.585, NvContainer, FrameView SDK and the whole C:\Program Files\NVIDIA Corporation tree. 131 PE images, 1,180,302 decompiled functions, 14 recovered Protocol Buffers schemas.

View on GitHub

nvcpl.dll

a7703de492d47d4e75d6f77e7350a860b927f35be719b5e78a94e4d50d236da1

Identity

Property Value
Architecture AMD64
Source size 8,748,656 bytes
Preferred image base 0x64000000
Entry RVA 0x461fc0
Imports / exports 462 / 383
Exception/unwind ranges 19,914
Executable raw bytes 6,640,640

Physical paths:

Decompilation coverage

Complete with errors: 34,372 successful reconstructions, 20 failures, 34,392 attempted entries, 34,392 reported discovered entries.

Counts refer to automated analysis, not manual review or recovered source code. Function boundaries can change during analysis.

Sections

Section RVA Raw offset Raw bytes Virtual bytes R / W / X Entropy
.text 0x1000 1024 6,640,640 6,640,401 yes / no / yes 6.3947
.rdata 0x657000 6641664 1,459,712 1,459,332 yes / no / no 5.0411
.data 0x7bc000 8101376 263,680 481,372 yes / yes / no 5.0003
.pdata 0x832000 8365056 239,104 238,968 yes / no / no 6.4043
.didat 0x86d000 8604160 2,048 1,936 yes / yes / no 3.2015
.rsrc 0x86e000 8606208 53,248 53,080 yes / no / no 2.626
.reloc 0x87b000 8659456 78,848 78,432 yes / no / no 5.4532

PE mitigation flags

Flag Present
dynamic_base true
high_entropy_va true
nx_compat true
guard_cf_flag true
no_seh false
appcontainer false
force_integrity false

Evidence

Large artifacts require Git LFS. A filename hash identifies the original PE; the content of a generated artifact has a different digest.

Module catalog ยท Research overview