NvMessageBus.dll
4915c54254d22a538c82ed438a8b01ce3b3ccdb136a9853072d463d436e80ae3
Identity
| Property | Value |
|---|---|
| Architecture | AMD64 |
| Source size | 3,446,896 bytes |
| Preferred image base | 0x180000000 |
| Entry RVA | 0x217360 |
| Imports / exports | 195 / 6 |
| Exception/unwind ranges | 13,673 |
| Executable raw bytes | 2,723,328 |
Physical paths:
FrameViewSDK\FvContainer\NvMessageBus.dll
Decompilation coverage
Complete with errors: 25,671 successful reconstructions, 9 failures, 25,680 attempted entries, 25,680 reported discovered entries.
Counts refer to automated analysis, not manual review or recovered source code. Function boundaries can change during analysis.
Sections
| Section | RVA | Raw offset | Raw bytes | Virtual bytes | R / W / X | Entropy |
|---|---|---|---|---|---|---|
.text |
0x1000 |
1024 |
2,723,328 | 2,723,068 | yes / no / yes | 6.2879 |
.rdata |
0x29a000 |
2724352 |
510,976 | 510,790 | yes / no / no | 5.7319 |
.data |
0x317000 |
3235328 |
26,112 | 38,092 | yes / yes / no | 4.2276 |
.pdata |
0x321000 |
3261440 |
164,352 | 164,076 | yes / no / no | 6.3495 |
_RDATA |
0x34a000 |
3425792 |
512 | 384 | yes / no / no | 3.2816 |
.rsrc |
0x34b000 |
3426304 |
1,536 | 1,440 | yes / no / no | 4.2689 |
.reloc |
0x34c000 |
3427840 |
8,704 | 8,476 | yes / no / no | 5.4146 |
PE mitigation flags
| Flag | Present |
|---|---|
| dynamic_base | true |
| high_entropy_va | true |
| nx_compat | true |
| guard_cf_flag | true |
| no_seh | false |
| appcontainer | false |
| force_integrity | false |
Evidence
Large artifacts require Git LFS. A filename hash identifies the original PE; the content of a generated artifact has a different digest.