NvIGOUtil.dll
15be24a489474a04851042b56d2c34e5928f32872ab7721f54ead26992f7f580
Identity
| Property | Value |
|---|---|
| Architecture | AMD64 |
| Source size | 1,558,640 bytes |
| Preferred image base | 0x180000000 |
| Entry RVA | 0x1630 |
| Imports / exports | 377 / 1 |
| Exception/unwind ranges | 4,083 |
| Executable raw bytes | 1,226,752 |
Physical paths:
NVIDIA App\CEF\plugins\NVIDIA App\NvIGOUtil.dll
Decompilation coverage
Complete with errors: 7,911 successful reconstructions, 3 failures, 7,914 attempted entries, 7,914 reported discovered entries.
Counts refer to automated analysis, not manual review or recovered source code. Function boundaries can change during analysis.
Sections
| Section | RVA | Raw offset | Raw bytes | Virtual bytes | R / W / X | Entropy |
|---|---|---|---|---|---|---|
.text |
0x1000 |
1024 |
1,226,752 | 1,226,470 | yes / no / yes | 4.9543 |
.rdata |
0x12d000 |
1227776 |
204,800 | 204,723 | yes / no / no | 4.7409 |
.data |
0x15f000 |
1432576 |
19,968 | 25,137 | yes / yes / no | 3.9614 |
.pdata |
0x166000 |
1452544 |
54,272 | 54,192 | yes / no / no | 5.7336 |
.idata |
0x174000 |
1506816 |
26,112 | 25,725 | yes / no / no | 4.3015 |
.gfids |
0x17b000 |
1532928 |
4,608 | 4,140 | yes / no / no | 3.0564 |
.giats |
0x17d000 |
1537536 |
512 | 276 | yes / no / no | 0.1741 |
.tls |
0x17e000 |
1538048 |
1,024 | 777 | yes / yes / no | 0.0112 |
.00cfg |
0x17f000 |
1539072 |
512 | 373 | yes / no / no | 0.4154 |
.rsrc |
0x180000 |
1539584 |
1,536 | 1,494 | yes / no / no | 4.0502 |
.reloc |
0x181000 |
1541120 |
7,168 | 6,994 | yes / no / no | 2.7231 |
PE mitigation flags
| Flag | Present |
|---|---|
| dynamic_base | true |
| high_entropy_va | true |
| nx_compat | true |
| guard_cf_flag | true |
| no_seh | false |
| appcontainer | false |
| force_integrity | false |
Extracted native interfaces
| Name | Command | Notification | Description |
|---|---|---|---|
ToggleIGO |
True | False | Toggle In-game overlay. |
GetShadowPlaySupported |
True | False | Gets ShadowPlay support state. |
GetShadowPlayStatus |
True | False | Gets ShadowPlay Status |
GetFilterPhotoModeState |
True | False | Gets Filter & PhotoMode state. |
SetFilterPhotoMode |
True | False | Sets Filter & PhotoMode state. |
SetGAssistInstall |
True | False | Set GAssist install state |
OpenIGO |
True | False | Opens IGO L0 menu(default) or Settings page |
GetHotkeyShortcut |
True | False | Gets the keys assigned to a specific ShadowPlay hotkey action |
SetNvAppReadyForGAssist |
True | False | Signal that NVIDIA App is ready for G-Assist function calls |
ToggleMcpServer |
True | False | Enable or disable MCP server access for AI agents. |
GetMcpServerStatus |
True | False | Get the current enabled/disabled state of the MCP server. |
SetMcpServerAccessLevel |
True | False | Persist the MCP server access level (global tier ceiling) to HKLM. On/off is controlled separately by ToggleMcpServer. |
Evidence
Large artifacts require Git LFS. A filename hash identifies the original PE; the content of a generated artifact has a different digest.