# RTX 3070 Ti VBIOS Reverse Engineering: mapping and analyzing GA104 firmware

> RTX 3070 Ti VBIOS Reverse Engineering documents analysis of an MSI GA104 VBIOS, covering its ROM layout, NPDE and BIT structures, x86 BIOS, compressed UEFI GOP and Falcon fuc5 microcode. Its workflow combines ROM parsers, REA with Ghidra, EfiCompress decompression, envydis and a Falcon MMIO probe; the repository includes scripts, format notes and an envydis ISA patch.

- Type: Case study
- Targets: Binary · Firmware
- Category: Community REA investigations
- Relationship: Author-reported mixed workflow
- Sources reviewed: 2026-11-06
- Added to the catalog: 2026-11-08
- Original resource: <https://github.com/jingx8885/rtx3070ti-vbios-re>
- Primary source: <https://github.com/jingx8885/rtx3070ti-vbios-re/blob/d481a28618fb3dd4b99858646422ddbcdc7ac277/README.md>
- Catalog page: <https://awesomerea.org/resources/rtx-3070-ti-vbios-re-case/>
- Record JSON: <https://awesomerea.org/resources/rtx-3070-ti-vbios-re-case/record.json>
- Chinese version: [简体中文](https://awesomerea.org/zh/resources/rtx-3070-ti-vbios-re-case/index.md)

## Requirements & limits

- **Prerequisites:** Requires a dump of the user’s own RTX 3070 Ti VBIOS; the repository includes no NVIDIA ROM or firmware blobs.
- **Prerequisites:** The documented workflow uses REA, Ghidra, EDK2 EfiDecompress and envydis; its REA scripts target WSL.
- **Limits:** The author reports that the encrypted Falcon HS block cannot be decrypted by static analysis; the MMIO debug test writes to Falcon registers and is documented for a bare card without a driver.
- **License:** MIT licence.

## Primary sources

1. <https://github.com/jingx8885/rtx3070ti-vbios-re/blob/d481a28618fb3dd4b99858646422ddbcdc7ac277/README.md>
2. <https://github.com/jingx8885/rtx3070ti-vbios-re/blob/d481a28618fb3dd4b99858646422ddbcdc7ac277/scripts/README.md>
3. <https://github.com/jingx8885/rtx3070ti-vbios-re/blob/d481a28618fb3dd4b99858646422ddbcdc7ac277/LICENSE>

## More in Firmware and hardware

- [hantek-dso: reconstructing Hantek DSO5000P USB control](https://awesomerea.org/resources/hantek-dso5000p-linux-case/index.md) · Case study
- [flipper-telink: replacement firmware for Tuya Zigbee remotes](https://awesomerea.org/resources/flipper-telink-tuya-remote-firmware-case/index.md) · Case study
- [Supermodel: initial Real3D Pro-1000 image-generator emulation](https://awesomerea.org/resources/supermodel-real3d-pro1000-emulation-case/index.md) · Case study
- [OpenDMCUFirm: a reimplemented Wii U DMCU display firmware](https://awesomerea.org/resources/opendmcufirm-wii-u-dmcu-firmware-case/index.md) · Case study
- [reflecticon-224: running Lexicon 224 reverb firmware on emulated hardware](https://awesomerea.org/resources/reflecticon-224-lexicon-emulation-case/index.md) · Case study
- [TeddyCloud: a self-hosted replacement for the Toniebox cloud](https://awesomerea.org/resources/teddycloud-toniebox-server-case/index.md) · Case study

## About this entry

The description was reviewed against primary sources.
Original editorial content: MIT. Linked projects, papers and assets retain their own rights and licenses.