NVIDIA software reverse engineering

Static-analysis corpus of NVIDIA App 11.0.9.585, NvContainer, FrameView SDK and the whole C:\Program Files\NVIDIA Corporation tree. 131 PE images, 1,180,302 decompiled functions, 14 recovered Protocol Buffers schemas.

View on GitHub

nvaudcap32v.dll

d41f77ca62e406125bb165450ef99d16ced0fac9a574058ca3cd31b6a3b58ca8

Identity

Property Value
Architecture x86
Source size 168,680 bytes
Preferred image base 0x10000000
Entry RVA 0x15980
Imports / exports 128 / 1
Exception/unwind ranges 0
Executable raw bytes 132,096

Physical paths:

Decompilation coverage

Complete: 318 successful reconstructions, 0 failures, 318 attempted entries, 318 reported discovered entries.

Counts refer to automated analysis, not manual review or recovered source code. Function boundaries can change during analysis.

Sections

Section RVA Raw offset Raw bytes Virtual bytes R / W / X Entropy
.text 0x1000 1024 132,096 132,001 yes / no / yes 6.5393
.rdata 0x22000 133120 8,192 8,088 yes / no / no 5.2905
.data 0x24000 141312 512 1,448 yes / yes / no 1.9093
.rsrc 0x25000 141824 1,024 936 yes / no / no 3.0519
.reloc 0x26000 142848 5,632 5,252 yes / no / no 6.5998

PE mitigation flags

Flag Present
dynamic_base true
high_entropy_va false
nx_compat true
guard_cf_flag true
no_seh false
appcontainer false
force_integrity false

Evidence

Large artifacts require Git LFS. A filename hash identifies the original PE; the content of a generated artifact has a different digest.

Module catalog ยท Research overview