NVIDIA software reverse engineering

Static-analysis corpus of NVIDIA App 11.0.9.585, NvContainer, FrameView SDK and the whole C:\Program Files\NVIDIA Corporation tree. 131 PE images, 1,180,302 decompiled functions, 14 recovered Protocol Buffers schemas.

View on GitHub

nvxdapix.dll

f051472a239f3392bc59c23f3962e4dabb0ee64affdf7fa4856ace209adace6d

Identity

Property Value
Architecture AMD64
Source size 7,220,336 bytes
Preferred image base 0x60000000
Entry RVA 0x471b40
Imports / exports 356 / 5
Exception/unwind ranges 15,093
Executable raw bytes 5,040,128

Physical paths:

Decompilation coverage

Complete: 18,901 successful reconstructions, 0 failures, 18,901 attempted entries, 18,901 reported discovered entries.

Counts refer to automated analysis, not manual review or recovered source code. Function boundaries can change during analysis.

Sections

Section RVA Raw offset Raw bytes Virtual bytes R / W / X Entropy
.text 0x1000 1024 5,039,616 5,039,564 yes / no / yes 6.3711
.orpc 0x4d0000 5040640 512 413 yes / no / yes 4.3916
.rdata 0x4d1000 5041152 1,475,072 1,475,024 yes / no / no 5.1332
.data 0x63a000 6516224 427,008 557,316 yes / yes / no 4.9088
.pdata 0x6c3000 6943232 181,248 181,116 yes / no / no 6.3493
.didat 0x6f0000 7124480 1,024 664 yes / yes / no 2.1443
.rsrc 0x6f1000 7125504 55,808 55,740 yes / no / no 2.889
.reloc 0x6ff000 7181312 28,672 28,384 yes / no / no 5.4404

PE mitigation flags

Flag Present
dynamic_base true
high_entropy_va true
nx_compat true
guard_cf_flag true
no_seh false
appcontainer false
force_integrity false

Evidence

Large artifacts require Git LFS. A filename hash identifies the original PE; the content of a generated artifact has a different digest.

Module catalog ยท Research overview