NVIDIA software reverse engineering

Static-analysis corpus of NVIDIA App 11.0.9.585, NvContainer, FrameView SDK and the whole C:\Program Files\NVIDIA Corporation tree. 131 PE images, 1,180,302 decompiled functions, 14 recovered Protocol Buffers schemas.

View on GitHub

HDAudioExt.dll

3496720838dd19a05c76cc45f061a09bc168d409cd3883833c9e9445387a1ab4

Identity

Property Value
Architecture x86
Source size 1,083,112 bytes
Preferred image base 0x10000000
Entry RVA 0x79420
Imports / exports 211 / 5
Exception/unwind ranges 0
Executable raw bytes 782,336

Physical paths:

Decompilation coverage

Complete with errors: 3,300 successful reconstructions, 12 failures, 3,312 attempted entries, 3,312 reported discovered entries.

Counts refer to automated analysis, not manual review or recovered source code. Function boundaries can change during analysis.

Sections

Section RVA Raw offset Raw bytes Virtual bytes R / W / X Entropy
.text 0x1000 1024 782,336 781,836 yes / no / yes 6.5432
.rdata 0xc0000 783360 190,464 189,982 yes / no / no 4.9117
.data 0xef000 973824 23,552 28,464 yes / yes / no 4.9652
.fptable 0xf6000 997376 512 128 yes / yes / no 0.0
.rsrc 0xf7000 997888 17,408 17,264 yes / no / no 4.7634
.reloc 0xfc000 1015296 47,616 47,196 yes / no / no 6.5823

PE mitigation flags

Flag Present
dynamic_base true
high_entropy_va false
nx_compat true
guard_cf_flag true
no_seh false
appcontainer false
force_integrity false

Evidence

Large artifacts require Git LFS. A filename hash identifies the original PE; the content of a generated artifact has a different digest.

Module catalog ยท Research overview