NVIDIA software reverse engineering

Static-analysis corpus of NVIDIA App 11.0.9.585, NvContainer, FrameView SDK and the whole C:\Program Files\NVIDIA Corporation tree. 131 PE images, 1,180,302 decompiled functions, 14 recovered Protocol Buffers schemas.

View on GitHub

HDAudioExt64.dll

a1dad609c7a2edcf2d458920ae20f9476c8c37722a089b4ddf0ab1172f04d106

Identity

Property Value
Architecture AMD64
Source size 1,254,120 bytes
Preferred image base 0x180000000
Entry RVA 0x8b8c0
Imports / exports 216 / 5
Exception/unwind ranges 3,278
Executable raw bytes 891,904

Physical paths:

Decompilation coverage

Complete with errors: 6,330 successful reconstructions, 1 failures, 6,331 attempted entries, 6,331 reported discovered entries.

Counts refer to automated analysis, not manual review or recovered source code. Function boundaries can change during analysis.

Sections

Section RVA Raw offset Raw bytes Virtual bytes R / W / X Entropy
.text 0x1000 1024 891,904 891,871 yes / no / yes 6.4029
.rdata 0xdb000 892928 249,344 249,304 yes / no / no 5.2546
.data 0x118000 1142272 27,648 35,684 yes / yes / no 4.5872
.pdata 0x121000 1169920 39,424 39,336 yes / no / no 6.0529
.fptable 0x12b000 1209344 512 256 yes / yes / no 0.0
.rsrc 0x12c000 1209856 17,408 17,264 yes / no / no 4.7658
.reloc 0x131000 1227264 6,656 6,280 yes / no / no 5.344

PE mitigation flags

Flag Present
dynamic_base true
high_entropy_va true
nx_compat true
guard_cf_flag true
no_seh false
appcontainer false
force_integrity false

Evidence

Large artifacts require Git LFS. A filename hash identifies the original PE; the content of a generated artifact has a different digest.

Module catalog ยท Research overview