NvAppMcpServer.exe
1a8f14df4d2d1070f56d1307ecef35765ea9a7ceba6197cdca3bc5ae27ac0a6c
Identity
| Property | Value |
|---|---|
| Architecture | AMD64 |
| Source size | 754,288 bytes |
| Preferred image base | 0x140000000 |
| Entry RVA | 0x2ab0 |
| Imports / exports | 213 / 0 |
| Exception/unwind ranges | 428 |
| Executable raw bytes | 126,976 |
Physical paths:
NVIDIA App\McpServer\NvAppMcpServer.exe
Decompilation coverage
Complete: 948 successful reconstructions, 0 failures, 948 attempted entries, 948 reported discovered entries.
Counts refer to automated analysis, not manual review or recovered source code. Function boundaries can change during analysis.
Sections
| Section | RVA | Raw offset | Raw bytes | Virtual bytes | R / W / X | Entropy |
|---|---|---|---|---|---|---|
.text |
0x1000 |
1024 |
126,976 | 126,931 | yes / no / yes | 4.0223 |
.rdata |
0x20000 |
128000 |
35,840 | 35,449 | yes / no / no | 4.1778 |
.data |
0x29000 |
163840 |
2,560 | 4,337 | yes / yes / no | 2.0899 |
.pdata |
0x2b000 |
166400 |
6,144 | 5,940 | yes / no / no | 4.7194 |
.idata |
0x2d000 |
172544 |
14,848 | 14,819 | yes / no / no | 4.1146 |
.gfids |
0x31000 |
187392 |
1,024 | 628 | yes / no / no | 1.2413 |
.giats |
0x32000 |
188416 |
512 | 260 | yes / no / no | 0.0612 |
.00cfg |
0x33000 |
188928 |
512 | 373 | yes / no / no | 0.4238 |
.rsrc |
0x34000 |
189440 |
552,448 | 552,204 | yes / no / no | 2.9732 |
.reloc |
0xbb000 |
741888 |
2,048 | 1,606 | yes / no / no | 1.026 |
PE mitigation flags
| Flag | Present |
|---|---|
| dynamic_base | true |
| high_entropy_va | true |
| nx_compat | true |
| guard_cf_flag | true |
| no_seh | false |
| appcontainer | false |
| force_integrity | false |
Selected routines
| RVA | Function | Reconstruction |
|---|---|---|
0xf6e0 |
sub_14000F6E0 |
C text |
0x10f90 |
sub_140010F90 |
C text |
0x11360 |
sub_140011360 |
C text |
0x119a0 |
sub_1400119A0 |
C text |
Evidence
Large artifacts require Git LFS. A filename hash identifies the original PE; the content of a generated artifact has a different digest.