NVIDIA software reverse engineering

Static-analysis corpus of NVIDIA App 11.0.9.585, NvContainer, FrameView SDK and the whole C:\Program Files\NVIDIA Corporation tree. 131 PE images, 1,180,302 decompiled functions, 14 recovered Protocol Buffers schemas.

View on GitHub

PhysXExt64.dll

2d333ab49dcd59d874683c6467608bc77f87cad1fd350a6f61257262995c5c7d

Identity

Property Value
Architecture AMD64
Source size 1,130,608 bytes
Preferred image base 0x180000000
Entry RVA 0x7a950
Imports / exports 196 / 5
Exception/unwind ranges 3,017
Executable raw bytes 810,496

Physical paths:

Decompilation coverage

Complete with errors: 5,504 successful reconstructions, 1 failures, 5,505 attempted entries, 5,505 reported discovered entries.

Counts refer to automated analysis, not manual review or recovered source code. Function boundaries can change during analysis.

Sections

Section RVA Raw offset Raw bytes Virtual bytes R / W / X Entropy
.text 0x1000 1024 810,496 810,063 yes / no / yes 6.4151
.rdata 0xc7000 811520 225,792 225,766 yes / no / no 5.2082
.data 0xff000 1037312 22,528 30,436 yes / yes / no 4.4507
.pdata 0x107000 1059840 36,352 36,204 yes / no / no 5.9879
.fptable 0x110000 1096192 512 256 yes / yes / no 0.0
.rsrc 0x111000 1096704 17,408 17,216 yes / no / no 4.7468
.reloc 0x116000 1114112 6,144 5,844 yes / no / no 5.374

PE mitigation flags

Flag Present
dynamic_base true
high_entropy_va true
nx_compat true
guard_cf_flag true
no_seh false
appcontainer false
force_integrity false

Evidence

Large artifacts require Git LFS. A filename hash identifies the original PE; the content of a generated artifact has a different digest.

Module catalog ยท Research overview