NVIDIA software reverse engineering

Static-analysis corpus of NVIDIA App 11.0.9.585, NvContainer, FrameView SDK and the whole C:\Program Files\NVIDIA Corporation tree. 131 PE images, 1,180,302 decompiled functions, 14 recovered Protocol Buffers schemas.

View on GitHub

MessageBusRouter.dll

517840f0c1ffbfd699c1f628e1d37449299d242e55ec13ed4a6ab3dc95a1858a

Identity

Property Value
Architecture AMD64
Source size 1,646,704 bytes
Preferred image base 0x180000000
Entry RVA 0x16f0
Imports / exports 371 / 1
Exception/unwind ranges 4,577
Executable raw bytes 1,318,400

Physical paths:

Decompilation coverage

Complete: 8,564 successful reconstructions, 0 failures, 8,564 attempted entries, 8,564 reported discovered entries.

Counts refer to automated analysis, not manual review or recovered source code. Function boundaries can change during analysis.

Sections

Section RVA Raw offset Raw bytes Virtual bytes R / W / X Entropy
.text 0x1000 1024 1,318,400 1,318,325 yes / no / yes 4.952
.rdata 0x143000 1319424 196,608 196,348 yes / no / no 4.677
.data 0x173000 1516032 18,432 23,441 yes / yes / no 3.8632
.pdata 0x179000 1534464 60,928 60,708 yes / no / no 5.7698
.idata 0x188000 1595392 25,600 25,521 yes / no / no 4.3688
.gfids 0x18f000 1620992 4,096 4,048 yes / no / no 3.3305
.giats 0x190000 1625088 512 280 yes / no / no 0.2287
.tls 0x191000 1625600 1,024 777 yes / yes / no 0.0112
.00cfg 0x192000 1626624 512 373 yes / no / no 0.4319
.rsrc 0x193000 1627136 2,048 1,542 yes / no / no 3.3183
.reloc 0x194000 1629184 7,168 6,739 yes / no / no 2.3383

PE mitigation flags

Flag Present
dynamic_base true
high_entropy_va true
nx_compat true
guard_cf_flag true
no_seh false
appcontainer false
force_integrity false

Evidence

Large artifacts require Git LFS. A filename hash identifies the original PE; the content of a generated artifact has a different digest.

Module catalog ยท Research overview