NVIDIA software reverse engineering

Static-analysis corpus of NVIDIA App 11.0.9.585, NvContainer, FrameView SDK and the whole C:\Program Files\NVIDIA Corporation tree. 131 PE images, 1,180,302 decompiled functions, 14 recovered Protocol Buffers schemas.

View on GitHub

dxcompiler.dll

f1b24c125aa3ce8e25aed1840843bd25ebfb8584b507af1594007abb26b1ffa0

Identity

Property Value
Architecture AMD64
Source size 21,792,368 bytes
Preferred image base 0x180000000
Entry RVA 0x1048ee0
Imports / exports 141 / 2
Exception/unwind ranges 46,735
Executable raw bytes 17,438,208

Physical paths:

Decompilation coverage

Partial: 26,229 successful reconstructions, 9 failures, 26,238 attempted entries, 48,896 reported discovered entries.

Initial pass plus bounded continuation; remaining functions were not attempted

Counts refer to automated analysis, not manual review or recovered source code. Function boundaries can change during analysis.

Sections

Section RVA Raw offset Raw bytes Virtual bytes R / W / X Entropy
.text 0x1000 1024 17,438,208 17,438,006 yes / no / yes 6.4521
.rdata 0x10a3000 17439232 3,666,432 3,666,392 yes / no / no 5.7938
.data 0x1423000 21105664 28,160 44,532 yes / yes / no 5.0772
.pdata 0x142e000 21133824 561,152 560,820 yes / no / no 6.7874
.gxfg 0x14b7000 21694976 12,800 12,480 yes / no / no 5.1222
.retplne 0x14bb000 21707776 512 140 no / no / no 1.0506
.tls 0x14bc000 21708288 512 25 yes / yes / no 0.0204
_RDATA 0x14bd000 21708800 512 500 yes / no / no 4.4221
.rsrc 0x14be000 21709312 1,024 1,016 yes / no / no 3.2895
.reloc 0x14bf000 21710336 71,680 71,348 yes / no / no 5.4737

PE mitigation flags

Flag Present
dynamic_base true
high_entropy_va true
nx_compat true
guard_cf_flag true
no_seh false
appcontainer false
force_integrity false

Evidence

Large artifacts require Git LFS. A filename hash identifies the original PE; the content of a generated artifact has a different digest.

Module catalog ยท Research overview