Rise.dll
6fe292b656acf7611b1bfe6f94c386d01f3c9aa7312c6c29a135b8313a583f60
Identity
| Property | Value |
|---|---|
| Architecture | AMD64 |
| Source size | 3,748,464 bytes |
| Preferred image base | 0x180000000 |
| Entry RVA | 0x1d00 |
| Imports / exports | 410 / 1 |
| Exception/unwind ranges | 14,232 |
| Executable raw bytes | 2,935,296 |
Physical paths:
NVIDIA App\CEF\plugins\NVIDIA Overlay\Rise.dll
Decompilation coverage
Complete with errors: 15,513 successful reconstructions, 6 failures, 15,519 attempted entries, 15,519 reported discovered entries.
Counts refer to automated analysis, not manual review or recovered source code. Function boundaries can change during analysis.
Sections
| Section | RVA | Raw offset | Raw bytes | Virtual bytes | R / W / X | Entropy |
|---|---|---|---|---|---|---|
.text |
0x1000 |
1024 |
2,935,296 | 2,934,894 | yes / no / yes | 5.3298 |
.rdata |
0x2ce000 |
2936320 |
532,992 | 532,989 | yes / no / no | 5.0082 |
.data |
0x351000 |
3469312 |
29,696 | 57,529 | yes / yes / no | 3.8376 |
.pdata |
0x360000 |
3499008 |
188,416 | 188,160 | yes / no / no | 5.964 |
.idata |
0x38e000 |
3687424 |
27,136 | 27,003 | yes / no / no | 4.3518 |
.gfids |
0x395000 |
3714560 |
6,144 | 6,100 | yes / no / no | 3.6852 |
.giats |
0x397000 |
3720704 |
512 | 276 | yes / no / no | 0.1741 |
.tls |
0x398000 |
3721216 |
1,024 | 777 | yes / yes / no | 0.0112 |
.00cfg |
0x399000 |
3722240 |
512 | 373 | yes / no / no | 0.4266 |
.rsrc |
0x39a000 |
3722752 |
1,536 | 1,470 | yes / no / no | 3.9804 |
.reloc |
0x39b000 |
3724288 |
13,824 | 13,717 | yes / no / no | 2.0096 |
PE mitigation flags
| Flag | Present |
|---|---|
| dynamic_base | true |
| high_entropy_va | true |
| nx_compat | true |
| guard_cf_flag | true |
| no_seh | false |
| appcontainer | false |
| force_integrity | false |
Extracted native interfaces
| Name | Command | Notification | Description |
|---|---|---|---|
RiseSupported |
True | False | |
RiseRequestCompletion |
True | False | |
RiseRegister |
True | False | |
RiseGameNotification |
True | False | |
RiseUpdatesNotifications |
True | False | Completion tokens received as they are generated |
SaveCSV |
True | False | |
VqVoiceQuerySupported |
True | False | |
VqResisterVoiceQuery |
True | False | |
VqVoiceQueryResultNotfication |
True | False | Voice query result notification - Text output from ASR |
VqMicDeviceChangedNotification |
True | False | Voice query mic device changed notification |
VqSetVoiceQuery |
True | False | |
VqSetVoicePlayback |
True | False | |
VqEnumMicDevices |
True | False | Voice query mic enumeration |
VqEnumLanguages |
True | False | Voice query supported languages enumeration |
VqEnumVoiceCharacters |
True | False | Voice query supported voice characters enumeration |
VqPrepareMic |
True | False | Prepare microphone without triggering ‘in use’ indicator for reduced latency. Call before showing mic icon. NVBug 5734067 |
VqTeardownMic |
True | False | Teardown/finalize microphone when no longer needed. Call before G-Assist disable or when changing microphone. NVBug 5734067 |
GameAssistSupported |
True | False | |
GameAssistCreateSession |
True | False | |
GameAssistQueryResponseNotfication |
True | False | Game Assist Query Response notification |
GameAssistSubmitQuery |
True | False | |
EnsureNvAppReadyForGAssist |
True | False | Ensure NVIDIA App is running and ready for G-Assist commands |
Evidence
Large artifacts require Git LFS. A filename hash identifies the original PE; the content of a generated artifact has a different digest.