NvMessageBus.dll
348162a5948cd59e8b0ece73c7cdf9faa55d9a9f906879392c1527308b2af85d
Identity
| Property | Value |
|---|---|
| Architecture | AMD64 |
| Source size | 3,533,424 bytes |
| Preferred image base | 0x180000000 |
| Entry RVA | 0x21c610 |
| Imports / exports | 186 / 6 |
| Exception/unwind ranges | 14,098 |
| Executable raw bytes | 2,804,224 |
Physical paths:
NVIDIA App\MessageBus\NvMessageBus.dll
Decompilation coverage
Complete with errors: 26,178 successful reconstructions, 7 failures, 26,185 attempted entries, 26,185 reported discovered entries.
Counts refer to automated analysis, not manual review or recovered source code. Function boundaries can change during analysis.
Sections
| Section | RVA | Raw offset | Raw bytes | Virtual bytes | R / W / X | Entropy |
|---|---|---|---|---|---|---|
.text |
0x1000 |
1024 |
2,804,224 | 2,803,788 | yes / no / yes | 6.3167 |
.rdata |
0x2ae000 |
2805248 |
510,976 | 510,572 | yes / no / no | 5.7094 |
.data |
0x32b000 |
3316224 |
26,112 | 38,020 | yes / yes / no | 4.2122 |
.pdata |
0x335000 |
3342336 |
169,472 | 169,176 | yes / no / no | 6.3614 |
_RDATA |
0x35f000 |
3511808 |
1,024 | 640 | yes / no / no | 3.1777 |
.rsrc |
0x360000 |
3512832 |
1,536 | 1,440 | yes / no / no | 4.2551 |
.reloc |
0x361000 |
3514368 |
8,704 | 8,552 | yes / no / no | 5.432 |
PE mitigation flags
| Flag | Present |
|---|---|
| dynamic_base | true |
| high_entropy_va | true |
| nx_compat | true |
| guard_cf_flag | true |
| no_seh | false |
| appcontainer | false |
| force_integrity | false |
Evidence
Large artifacts require Git LFS. A filename hash identifies the original PE; the content of a generated artifact has a different digest.