NVIDIA software reverse engineering

Static-analysis corpus of NVIDIA App 11.0.9.585, NvContainer, FrameView SDK and the whole C:\Program Files\NVIDIA Corporation tree. 131 PE images, 1,180,302 decompiled functions, 14 recovered Protocol Buffers schemas.

View on GitHub

PhysXExt.dll

56e11e85b9e6a3dafb6f8c57e4a4e1f3dd5c1632553c88ad0d0f32b216c6fac7

Identity

Property Value
Architecture x86
Source size 968,816 bytes
Preferred image base 0x10000000
Entry RVA 0x6a310
Imports / exports 191 / 5
Exception/unwind ranges 0
Executable raw bytes 709,120

Physical paths:

Decompilation coverage

Complete with errors: 3,114 successful reconstructions, 12 failures, 3,126 attempted entries, 3,126 reported discovered entries.

Counts refer to automated analysis, not manual review or recovered source code. Function boundaries can change during analysis.

Sections

Section RVA Raw offset Raw bytes Virtual bytes R / W / X Entropy
.text 0x1000 1024 709,120 708,988 yes / no / yes 6.5728
.rdata 0xaf000 710144 169,984 169,484 yes / no / no 4.9388
.data 0xd9000 880128 18,944 23,776 yes / yes / no 4.8338
.fptable 0xdf000 899072 512 128 yes / yes / no 0.0
.rsrc 0xe0000 899584 17,408 17,216 yes / no / no 4.7443
.reloc 0xe5000 916992 41,472 41,040 yes / no / no 6.5803

PE mitigation flags

Flag Present
dynamic_base true
high_entropy_va false
nx_compat true
guard_cf_flag true
no_seh false
appcontainer false
force_integrity false

Evidence

Large artifacts require Git LFS. A filename hash identifies the original PE; the content of a generated artifact has a different digest.

Module catalog ยท Research overview