NVIDIA software reverse engineering

Static-analysis corpus of NVIDIA App 11.0.9.585, NvContainer, FrameView SDK and the whole C:\Program Files\NVIDIA Corporation tree. 131 PE images, 1,180,302 decompiled functions, 14 recovered Protocol Buffers schemas.

View on GitHub

nvSmartMax64.dll

c9e3f66e8827874042abdbc574a350762dcf17bdc01000bd23d70f4035e0dca7

Identity

Property Value
Architecture AMD64
Source size 224,880 bytes
Preferred image base 0x180000000
Entry RVA 0x18f0
Imports / exports 152 / 17
Exception/unwind ranges 452
Executable raw bytes 132,608

Physical paths:

Decompilation coverage

Complete: 495 successful reconstructions, 0 failures, 495 attempted entries, 495 reported discovered entries.

Counts refer to automated analysis, not manual review or recovered source code. Function boundaries can change during analysis.

Sections

Section RVA Raw offset Raw bytes Virtual bytes R / W / X Entropy
.text 0x1000 1024 132,608 132,512 yes / no / yes 6.0373
.rdata 0x22000 133632 62,464 62,264 yes / no / no 4.2389
.data 0x32000 196096 8,704 17,592 yes / yes / no 2.9079
.pdata 0x37000 204800 5,632 5,424 yes / no / no 5.0769
.rsrc 0x39000 210432 1,536 1,373 yes / no / no 3.8884
.reloc 0x3a000 211968 2,560 2,220 yes / no / no 5.1309

PE mitigation flags

Flag Present
dynamic_base true
high_entropy_va true
nx_compat true
guard_cf_flag true
no_seh false
appcontainer false
force_integrity false

Evidence

Large artifacts require Git LFS. A filename hash identifies the original PE; the content of a generated artifact has a different digest.

Module catalog ยท Research overview