NVIDIA software reverse engineering

Static-analysis corpus of NVIDIA App 11.0.9.585, NvContainer, FrameView SDK and the whole C:\Program Files\NVIDIA Corporation tree. 131 PE images, 1,180,302 decompiled functions, 14 recovered Protocol Buffers schemas.

View on GitHub

nvSmartMaxapp64.exe

e72e76aef792b9330eda6ad16ef43514d2c7c1419a1c173cbf03dfee780be8b1

Identity

Property Value
Architecture AMD64
Source size 278,640 bytes
Preferred image base 0x140000000
Entry RVA 0x50d0
Imports / exports 114 / 0
Exception/unwind ranges 316
Executable raw bytes 64,512

Physical paths:

Decompilation coverage

Complete: 370 successful reconstructions, 0 failures, 370 attempted entries, 370 reported discovered entries.

Counts refer to automated analysis, not manual review or recovered source code. Function boundaries can change during analysis.

Sections

Section RVA Raw offset Raw bytes Virtual bytes R / W / X Entropy
.text 0x1000 1024 64,512 64,192 yes / no / yes 6.4864
.rdata 0x11000 65536 42,496 42,278 yes / no / no 4.7617
.data 0x1c000 108032 3,072 7,856 yes / yes / no 1.7556
.pdata 0x1e000 111104 4,096 3,792 yes / no / no 4.6647
.didat 0x1f000 115200 512 24 yes / yes / no 0.1513
.rsrc 0x20000 115712 150,528 150,165 yes / no / no 6.4483
.reloc 0x45000 266240 2,048 1,608 yes / no / no 4.8309

PE mitigation flags

Flag Present
dynamic_base true
high_entropy_va true
nx_compat true
guard_cf_flag true
no_seh false
appcontainer false
force_integrity false

Evidence

Large artifacts require Git LFS. A filename hash identifies the original PE; the content of a generated artifact has a different digest.

Module catalog ยท Research overview