NVIDIA software reverse engineering

Static-analysis corpus of NVIDIA App 11.0.9.585, NvContainer, FrameView SDK and the whole C:\Program Files\NVIDIA Corporation tree. 131 PE images, 1,180,302 decompiled functions, 14 recovered Protocol Buffers schemas.

View on GitHub

NvMessageBusBroadcast.dll

e07a2df896f8e081117ae027ac4fce9613118c131030b0ccbbcc5731d750e595

Identity

Property Value
Architecture AMD64
Source size 3,395,696 bytes
Preferred image base 0x180000000
Entry RVA 0x20d370
Imports / exports 206 / 1
Exception/unwind ranges 13,386
Executable raw bytes 2,682,880

Physical paths:

Decompilation coverage

Complete with errors: 25,069 successful reconstructions, 9 failures, 25,078 attempted entries, 25,078 reported discovered entries.

Counts refer to automated analysis, not manual review or recovered source code. Function boundaries can change during analysis.

Sections

Section RVA Raw offset Raw bytes Virtual bytes R / W / X Entropy
.text 0x1000 1024 2,682,880 2,682,876 yes / no / yes 6.2975
.rdata 0x290000 2683904 504,832 504,380 yes / no / no 5.7389
.data 0x30c000 3188736 25,088 36,908 yes / yes / no 4.1745
.pdata 0x316000 3213824 160,768 160,632 yes / no / no 6.363
_RDATA 0x33e000 3374592 512 384 yes / no / no 3.289
.rsrc 0x33f000 3375104 1,536 1,488 yes / no / no 4.1867
.reloc 0x340000 3376640 8,704 8,312 yes / no / no 5.3695

PE mitigation flags

Flag Present
dynamic_base true
high_entropy_va true
nx_compat true
guard_cf_flag true
no_seh false
appcontainer false
force_integrity false

Evidence

Large artifacts require Git LFS. A filename hash identifies the original PE; the content of a generated artifact has a different digest.

Module catalog ยท Research overview