NVIDIA software reverse engineering

Static-analysis corpus of NVIDIA App 11.0.9.585, NvContainer, FrameView SDK and the whole C:\Program Files\NVIDIA Corporation tree. 131 PE images, 1,180,302 decompiled functions, 14 recovered Protocol Buffers schemas.

View on GitHub

NvMessageBusBroadcast.dll

63b000b70eaea5477e8d30e141f84ccf5391a8d098377768795e694aeda8372f

Identity

Property Value
Architecture AMD64
Source size 3,520,112 bytes
Preferred image base 0x180000000
Entry RVA 0x218a90
Imports / exports 195 / 1
Exception/unwind ranges 13,953
Executable raw bytes 2,794,496

Physical paths:

Decompilation coverage

Complete with errors: 25,947 successful reconstructions, 7 failures, 25,954 attempted entries, 25,954 reported discovered entries.

Counts refer to automated analysis, not manual review or recovered source code. Function boundaries can change during analysis.

Sections

Section RVA Raw offset Raw bytes Virtual bytes R / W / X Entropy
.text 0x1000 1024 2,794,496 2,794,412 yes / no / yes 6.3231
.rdata 0x2ac000 2795520 509,440 509,170 yes / no / no 5.7258
.data 0x329000 3304960 25,600 36,964 yes / yes / no 4.1108
.pdata 0x333000 3330560 167,936 167,436 yes / no / no 6.3625
_RDATA 0x35c000 3498496 1,024 640 yes / no / no 3.1946
.rsrc 0x35d000 3499520 1,536 1,488 yes / no / no 4.1898
.reloc 0x35e000 3501056 8,704 8,356 yes / no / no 5.4006

PE mitigation flags

Flag Present
dynamic_base true
high_entropy_va true
nx_compat true
guard_cf_flag true
no_seh false
appcontainer false
force_integrity false

Evidence

Large artifacts require Git LFS. A filename hash identifies the original PE; the content of a generated artifact has a different digest.

Module catalog ยท Research overview