NVIDIA software reverse engineering

Static-analysis corpus of NVIDIA App 11.0.9.585, NvContainer, FrameView SDK and the whole C:\Program Files\NVIDIA Corporation tree. 131 PE images, 1,180,302 decompiled functions, 14 recovered Protocol Buffers schemas.

View on GitHub

nvaudcap64a.dll

e92db4d1b75fb4669eb320c1a33d656bb439c8211589f482b1dbc403df871de8

Identity

Property Value
Architecture ARM64
Source size 185,576 bytes
Preferred image base 0x180000000
Entry RVA 0x1a150
Imports / exports 125 / 1
Exception/unwind ranges 221
Executable raw bytes 147,968

Physical paths:

Decompilation coverage

Complete: 308 successful reconstructions, 0 failures, 308 attempted entries, 308 reported discovered entries.

Counts refer to automated analysis, not manual review or recovered source code. Function boundaries can change during analysis.

Sections

Section RVA Raw offset Raw bytes Virtual bytes R / W / X Entropy
.text 0x1000 1024 147,968 147,640 yes / no / yes 6.6019
.rdata 0x26000 148992 12,288 11,906 yes / no / no 4.8531
.data 0x29000 161280 512 1,800 yes / yes / no 2.0513
.pdata 0x2a000 161792 2,048 1,768 yes / no / no 4.7835
.rsrc 0x2b000 163840 1,024 936 yes / no / no 3.0527
.reloc 0x2c000 164864 512 124 yes / no / no 1.8089

PE mitigation flags

Flag Present
dynamic_base true
high_entropy_va true
nx_compat true
guard_cf_flag true
no_seh false
appcontainer false
force_integrity false

Evidence

Large artifacts require Git LFS. A filename hash identifies the original PE; the content of a generated artifact has a different digest.

Module catalog ยท Research overview