McpServerPlugin.dll
c8fe52a475cdaececd2e7d1fff2f16ad2c932d9549492727fa3fc459a5a7943e
Identity
| Property | Value |
|---|---|
| Architecture | AMD64 |
| Source size | 2,732,656 bytes |
| Preferred image base | 0x180000000 |
| Entry RVA | 0x1be0 |
| Imports / exports | 420 / 1 |
| Exception/unwind ranges | 7,230 |
| Executable raw bytes | 2,182,144 |
Physical paths:
NVIDIA App\Plugins\aiuser\McpServerPlugin.dll
Decompilation coverage
Complete: 13,774 successful reconstructions, 0 failures, 13,774 attempted entries, 13,774 reported discovered entries.
Counts refer to automated analysis, not manual review or recovered source code. Function boundaries can change during analysis.
Sections
| Section | RVA | Raw offset | Raw bytes | Virtual bytes | R / W / X | Entropy |
|---|---|---|---|---|---|---|
.text |
0x1000 |
1024 |
2,182,144 | 2,181,857 | yes / no / yes | 5.0537 |
.rdata |
0x216000 |
2183168 |
365,056 | 364,711 | yes / no / no | 5.029 |
.data |
0x270000 |
2548224 |
28,160 | 33,473 | yes / yes / no | 4.2175 |
.pdata |
0x279000 |
2576384 |
95,744 | 95,736 | yes / no / no | 5.8732 |
.idata |
0x291000 |
2672128 |
28,160 | 28,016 | yes / no / no | 4.257 |
.gfids |
0x298000 |
2700288 |
6,144 | 5,716 | yes / no / no | 3.4615 |
.giats |
0x29a000 |
2706432 |
512 | 280 | yes / no / no | 0.2209 |
.tls |
0x29b000 |
2706944 |
1,024 | 777 | yes / yes / no | 0.0112 |
.00cfg |
0x29c000 |
2707968 |
512 | 373 | yes / no / no | 0.4241 |
.rsrc |
0x29d000 |
2708480 |
2,560 | 2,144 | yes / no / no | 2.514 |
.reloc |
0x29e000 |
2711040 |
11,264 | 10,859 | yes / no / no | 2.3234 |
PE mitigation flags
| Flag | Present |
|---|---|
| dynamic_base | true |
| high_entropy_va | true |
| nx_compat | true |
| guard_cf_flag | true |
| no_seh | false |
| appcontainer | false |
| force_integrity | false |
Extracted native interfaces
| Name | Command | Notification | Description |
|---|---|---|---|
GetStatus |
True | False | Returns MCP server status (active connections, registered tools) |
GetMcpServerTools |
True | False | Returns the list of MCP tools visible at the current access level, for UI display |
SetAccessLevel |
True | False | Set the global access-level ceiling live on the running MCP server. Persistence to HKLM is handled separately via NvIGOUtil SetMcpServerAccessLevel. |
McpOverlayToolCallNotification |
True | False | Broadcast when McpServer forwards an overlay tool call to Overlay UI |
SendMcpOverlayToolResponse |
True | False | Overlay UI sends tool execution result back to McpServer |
McpGameEventNotification |
True | False | Overlay UI fires a game event notification to McpServer for delivery to subscribed MCP clients |
McpOverlayStateChangedNotification |
True | False | Overlay UI fires a state change notification to McpServer for delivery to subscribed MCP clients as nvapp/state_changed |
Selected routines
| RVA | Function | Reconstruction |
|---|---|---|
0x72c80 |
sub_180072C80 |
C text |
0x7c320 |
sub_18007C320 |
C text |
0xf9ae0 |
sub_1800F9AE0 |
C text |
Evidence
Large artifacts require Git LFS. A filename hash identifies the original PE; the content of a generated artifact has a different digest.