NVIDIA software reverse engineering

Static-analysis corpus of NVIDIA App 11.0.9.585, NvContainer, FrameView SDK and the whole C:\Program Files\NVIDIA Corporation tree. 131 PE images, 1,180,302 decompiled functions, 14 recovered Protocol Buffers schemas.

View on GitHub

nvSmartMaxapp.exe

08332e1367f23cd1a995804fe8d555de51cd835ad51d5304bdbb48acaf3ab933

Identity

Property Value
Architecture x86
Source size 264,816 bytes
Preferred image base 0x400000
Entry RVA 0x4950
Imports / exports 113 / 0
Exception/unwind ranges 0
Executable raw bytes 65,024

Physical paths:

Decompilation coverage

Complete with errors: 459 successful reconstructions, 4 failures, 463 attempted entries, 463 reported discovered entries.

Counts refer to automated analysis, not manual review or recovered source code. Function boundaries can change during analysis.

Sections

Section RVA Raw offset Raw bytes Virtual bytes R / W / X Entropy
.text 0x1000 1024 65,024 65,016 yes / no / yes 6.6254
.rdata 0x11000 66048 28,672 28,204 yes / no / no 4.8031
.data 0x18000 94720 3,584 6,320 yes / yes / no 1.9391
.didat 0x1a000 98304 512 24 yes / yes / no 0.2404
.rsrc 0x1b000 98816 150,528 150,157 yes / no / no 6.4484
.reloc 0x40000 249344 5,120 4,708 yes / no / no 6.3677

PE mitigation flags

Flag Present
dynamic_base true
high_entropy_va false
nx_compat true
guard_cf_flag true
no_seh false
appcontainer false
force_integrity false

Evidence

Large artifacts require Git LFS. A filename hash identifies the original PE; the content of a generated artifact has a different digest.

Module catalog ยท Research overview