NVIDIA software reverse engineering

Static-analysis corpus of NVIDIA App 11.0.9.585, NvContainer, FrameView SDK and the whole C:\Program Files\NVIDIA Corporation tree. 131 PE images, 1,180,302 decompiled functions, 14 recovered Protocol Buffers schemas.

View on GitHub

d3dcompiler_47.dll

b09c5df3e2259d48b7559011d5e3929cc3688653ca6cb9d91951d29708be63fa

Identity

Property Value
Architecture AMD64
Source size 4,917,360 bytes
Preferred image base 0x180000000
Entry RVA 0x293cb0
Imports / exports 130 / 29
Exception/unwind ranges 10,915
Executable raw bytes 3,727,360

Physical paths:

Decompilation coverage

Complete with errors: 8,244 successful reconstructions, 1 failures, 8,245 attempted entries, 8,245 reported discovered entries.

Counts refer to automated analysis, not manual review or recovered source code. Function boundaries can change during analysis.

Sections

Section RVA Raw offset Raw bytes Virtual bytes R / W / X Entropy
.text 0x1000 4096 3,727,360 3,726,222 yes / no / yes 6.4031
.rdata 0x38f000 3731456 937,984 935,636 yes / no / no 5.3657
.data 0x474000 4669440 65,536 103,008 yes / yes / no 2.004
.pdata 0x48e000 4734976 131,072 130,980 yes / no / no 6.3872
.rsrc 0x4ae000 4866048 4,096 1,088 yes / no / no 1.1616
.reloc 0x4af000 4870144 36,864 35,244 yes / no / no 5.4019

PE mitigation flags

Flag Present
dynamic_base true
high_entropy_va true
nx_compat true
guard_cf_flag true
no_seh false
appcontainer false
force_integrity false

Evidence

Large artifacts require Git LFS. A filename hash identifies the original PE; the content of a generated artifact has a different digest.

Module catalog ยท Research overview