NVIDIA software reverse engineering

Static-analysis corpus of NVIDIA App 11.0.9.585, NvContainer, FrameView SDK and the whole C:\Program Files\NVIDIA Corporation tree. 131 PE images, 1,180,302 decompiled functions, 14 recovered Protocol Buffers schemas.

View on GitHub

nvaudcap64v.dll

cfaffaea819a28bc1c837a8da021afe8da3cc22b787a2ecca8ec90e04109ebcc

Identity

Property Value
Architecture AMD64
Source size 192,232 bytes
Preferred image base 0x180000000
Entry RVA 0x18d80
Imports / exports 131 / 1
Exception/unwind ranges 461
Executable raw bytes 145,920

Physical paths:

Decompilation coverage

Complete: 306 successful reconstructions, 0 failures, 306 attempted entries, 306 reported discovered entries.

Counts refer to automated analysis, not manual review or recovered source code. Function boundaries can change during analysis.

Sections

Section RVA Raw offset Raw bytes Virtual bytes R / W / X Entropy
.text 0x1000 1024 145,920 145,487 yes / no / yes 6.4683
.rdata 0x25000 146944 17,408 17,028 yes / no / no 5.0593
.data 0x2a000 164352 512 2,240 yes / yes / no 2.1199
.pdata 0x2b000 164864 5,632 5,532 yes / no / no 5.2809
.rsrc 0x2d000 170496 1,024 936 yes / no / no 3.0546
.reloc 0x2e000 171520 512 144 yes / no / no 2.0213

PE mitigation flags

Flag Present
dynamic_base true
high_entropy_va true
nx_compat true
guard_cf_flag true
no_seh false
appcontainer false
force_integrity false

Evidence

Large artifacts require Git LFS. A filename hash identifies the original PE; the content of a generated artifact has a different digest.

Module catalog ยท Research overview