libcef.dll
29bb51e0fc7ebd1d41c7781d1068c60253647013e578053b8bb93a52ad33dca7
Identity
| Property | Value |
|---|---|
| Architecture | AMD64 |
| Source size | 222,910,064 bytes |
| Preferred image base | 0x180000000 |
| Entry RVA | 0x3b1daa0 |
| Imports / exports | 632 / 216 |
| Exception/unwind ranges | 532,553 |
| Executable raw bytes | 188,048,896 |
Physical paths:
NVIDIA App\CEF\libcef.dll
Decompilation coverage
Partial: 11,758 successful reconstructions, 7 failures, 11,765 attempted entries, 533,816 reported discovered entries.
Incremental autoanalysis stopped at 360 seconds; further functions may remain unidentified; Not all identified functions were attempted within the 480-second pseudocode pass
Counts refer to automated analysis, not manual review or recovered source code. Function boundaries can change during analysis.
Sections
| Section | RVA | Raw offset | Raw bytes | Virtual bytes | R / W / X | Entropy |
|---|---|---|---|---|---|---|
.text |
0x1000 |
1536 |
188,039,168 | 188,038,980 | yes / no / yes | 6.554 |
.rdata |
0xb355000 |
188040704 |
25,887,744 | 25,887,384 | yes / no / no | 6.4084 |
.data |
0xcc06000 |
213928448 |
820,224 | 3,265,640 | yes / yes / no | 4.2644 |
.pdata |
0xcf24000 |
214748672 |
6,390,784 | 6,390,636 | yes / no / no | 6.9456 |
.gxfg |
0xd53d000 |
221139456 |
17,408 | 17,264 | yes / no / no | 5.209 |
.retplne |
0xd542000 |
221156864 |
512 | 256 | no / no / no | 2.1023 |
.rodata |
0xd543000 |
221157376 |
4,608 | 4,576 | yes / no / yes | 4.5868 |
.tls |
0xd545000 |
221161984 |
1,536 | 1,361 | yes / yes / no | 0.2107 |
CPADinfo |
0xd546000 |
221163520 |
512 | 56 | yes / yes / no | 0.1223 |
LZMADEC |
0xd547000 |
221164032 |
4,608 | 4,593 | yes / no / yes | 6.062 |
_RDATA |
0xd549000 |
221168640 |
512 | 500 | yes / no / no | 4.4453 |
flags_he |
0xd54a000 |
221169152 |
512 | 356 | yes / no / no | 3.8017 |
malloc_h |
0xd54b000 |
221169664 |
512 | 228 | yes / no / yes | 3.6724 |
prot |
0xd54c000 |
221170176 |
512 | 147 | yes / no / no | 0.0 |
.rsrc |
0xd54d000 |
221170688 |
148,480 | 148,296 | yes / no / no | 4.3392 |
.reloc |
0xd572000 |
221319168 |
1,580,544 | 1,580,128 | yes / no / no | 5.4711 |
PE mitigation flags
| Flag | Present |
|---|---|
| dynamic_base | true |
| high_entropy_va | true |
| nx_compat | true |
| guard_cf_flag | true |
| no_seh | false |
| appcontainer | false |
| force_integrity | false |
Evidence
Large artifacts require Git LFS. A filename hash identifies the original PE; the content of a generated artifact has a different digest.
- PE metadata
- Function inventory and decompilation results
- Reconstructed C
- Reconstructed-function line ranges
- Initial IDA function listing
- Capstone executable-section sweep
- Sweep counts and section coverage
- Call candidates
- Recognized API references
- Extracted strings
- Selected strings
- All recognized function entries