Function at 0x140001890
Capabilities:
Accept command line arguments
Allocate or change rwx memory
Execute shellcode via indirect call
Get token membership

Disassembly:
mov qword [rsp + 8], rbx
mov qword [rsp + 0x10], rsi
mov qword [rsp + 0x18], rdi
push rbp
push r12
push r13
push r14
push r15
lea rbp, [rsp - 0x200]
sub rsp, 0x300
mov rax, qword [0x14000b040]
xor rax, rsp
mov qword [rbp + 0x1f0], rax
xor r15d, r15d
lea rdx, str._nNvTrueHDR___RTX_HDR_toggler__v1.3_nby_emoose___https:__github.com_emoose_n_n
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.1400039f0
cmp dword [0x14000b7f8], r15d
je 0x1400018f3
lea rdx, str.Error:_failed_to_load_nvapi64.dll__do_you_have_NV_drivers_installed__n
jmp 0x1400036f4
mov rax, qword [0x14000b7a8]
test rax, rax
je 0x1400036ed
lea rdx, [rbp + 0x1b0]
lea rcx, [rbp + 0x38]
call rax
test eax, eax
jne 0x1400036ed
mov eax, 0x51eb851f
mov ebx, dword [rbp + 0x38]
mul ebx
mov edi, edx
shr edi, 5
imul eax, edi, 0x64
sub ebx, eax
cmp edi, 0x217
setl byte [0x14000b788]
lea rdx, str.Driver_version:
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.1400039f0
mov edx, edi
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___int____ptr64]
mov rcx, rax
lea rdx, [0x1400076b4]
call fcn.1400039f0
mov edx, ebx
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___int____ptr64]
cmp byte [0x14000b788], r15b
je 0x14000198d
lea rdx, str.__using_old_pre_535_TrueHDR_flags_
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.1400039f0
lea rdx, [0x1400076f4]
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.1400039f0
cmp edi, 0x213
jge 0x1400019bb
lea rdx, str._nWARNING:_you_seem_to_be_using_a_pre_531.18_driver._n__TrueHDR_is_only_included_in_531.18_onwards__this_likely_wont_have_any_effect_for_you._n
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.1400039f0
lea rdx, [0x1400076f4]
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.1400039f0
mov byte [rsp + 0x63], r15b
mov byte [rsp + 0x61], r15b
mov byte [rsp + 0x62], r15b
mov dword [rsp + 0x64], 2
mov dword [rbp - 0x78], r15d
mov dword [rbp - 0x74], r15d
mov word [rbp - 0x70], 0x500
lea rax, [rbp - 0x80]
mov qword [rsp + 0x50], rax
mov dword [rsp + 0x48], r15d
mov dword [rsp + 0x40], r15d
mov dword [rsp + 0x38], r15d
mov dword [rsp + 0x30], r15d
mov dword [rsp + 0x28], r15d
mov dword [rsp + 0x20], r15d
mov r9d, 0x220
mov r8d, 0x20
mov dl, 2
lea rcx, [rbp - 0x74]
call qword [sym.imp.ADVAPI32.dll_AllocateAndInitializeSid]
test eax, eax
je 0x140001a58
lea r8, [rbp - 0x78]
mov rdx, qword [rbp - 0x80]
xor ecx, ecx
call qword [sym.imp.ADVAPI32.dll_CheckTokenMembership]
test eax, eax
jne 0x140001a4e
mov dword [rbp - 0x78], r15d
mov rcx, qword [rbp - 0x80]
call qword [sym.imp.ADVAPI32.dll_FreeSid]
cmp dword [rbp - 0x78], r15d
sete bl
mov byte [rsp + 0x60], bl
xorps xmm0, xmm0
movups xmmword [rbp - 0x68], xmm0
mov qword [rbp - 0x58], r15
mov qword [rbp - 0x50], 7
mov word [rbp - 0x68], r15w
call qword [sym.imp.KERNEL32.dll_GetCommandLineW]
lea rdx, [rbp + 0x10]
mov rcx, rax
call qword [sym.imp.SHELL32.dll_CommandLineToArgvW]
mov rcx, rax
mov qword [rsp + 0x68], rax
mov r13d, 1
mov qword [rsp + 0x78], r13
mov esi, r13d
mov dword [rbp - 0x78], r13d
cmp dword [rbp + 0x10], r13d
jle 0x140001f2b
mov eax, r13d
mov qword [rbp - 0x80], rax
nop dword [rax]
mov rdx, qword [rcx + rax*8]
xorps xmm0, xmm0
movups xmmword [rbp + 0x18], xmm0
mov qword [rbp + 0x28], r15
mov qword [rbp + 0x30], r15
mov r8, 0xffffffffffffffff
nop word [rax + rax]
inc r8
cmp word [rdx + r8*2], 0
jne 0x140001ae0
lea rcx, [rbp + 0x18]
call fcn.140004120
nop
lea r8, [rbp + 0x18]
mov r12, qword [rbp + 0x30]
cmp r12, 7
seta bl
mov r14, qword [rbp + 0x18]
cmova r8, r14
mov rdi, qword [rbp + 0x28]
cmp rdi, 6
jne 0x140001b9e
mov rdx, rdi
lea rax, str.__help
mov rcx, rax
test rdi, rdi
je 0x140001b44
sub r8, rax
nop
movzx eax, word [r8 + rcx]
cmp ax, word [rcx]
jne 0x140001b9e
add rcx, 2
sub rdx, 1
jne 0x140001b30
lea rdx, str.Usage:_nvtruehdr____high_____medium_____low_____disable_____hud___appExeName__n
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.1400039f0
nop
test bl, bl
je 0x140001b91
lea rdx, [r12*2 + 2]
mov rax, r14
cmp rdx, 0x1000
jb 0x140001b89
add rdx, 0x27
mov r14, qword [r14 - 8]
sub rax, r14
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1400025e9
mov rcx, r14
call fcn.1400054d4
mov dword [rsp + 0x78], 3
jmp 0x1400036a3
lea r8, [rbp + 0x18]
test bl, bl
cmovne r8, r14
cmp rdi, 5
jne 0x140001beb
mov rdx, rdi
lea rax, str.__hud
mov rcx, rax
test rdi, rdi
je 0x140001bd7
sub r8, rax
movzx eax, word [r8 + rcx]
cmp ax, word [rcx]
jne 0x140001beb
add rcx, 2
sub rdx, 1
jne 0x140001bc3
mov byte [rsp + 0x63], 1
mov byte [rsp + 0x61], 1
mov byte [rsp + 0x62], 0
jmp 0x140001ecc
lea r8, [rbp + 0x18]
test bl, bl
cmovne r8, r14
cmp rdi, 8
jne 0x140001c38
mov rdx, rdi
lea rax, str.__enable
mov rcx, rax
test rdi, rdi
je 0x140001c24
sub r8, rax
movzx eax, word [rcx + r8]
cmp ax, word [rcx]
jne 0x140001c38
add rcx, 2
sub rdx, 1
jne 0x140001c10
mov byte [rsp + 0x63], 0
mov byte [rsp + 0x61], 1
mov byte [rsp + 0x62], 0
jmp 0x140001ecc
lea r8, [rbp + 0x18]
test bl, bl
cmovne r8, r14
cmp rdi, 6
jne 0x140001c8a
mov rdx, rdi
lea rax, str.__high
mov rcx, rax
test rdi, rdi
je 0x140001cc4
sub r8, rax
nop dword [rax]
movzx eax, word [r8 + rcx]
cmp ax, word [rcx]
jne 0x140001c8a
add rcx, 2
sub rdx, 1
jne 0x140001c60
mov byte [rsp + 0x61], 1
mov byte [rsp + 0x62], dl
mov dword [rsp + 0x64], 2
jmp 0x140001ecc
lea r8, [rbp + 0x18]
test bl, bl
cmovne r8, r14
cmp rdi, 0xa
jne 0x140001cdb
mov rdx, rdi
lea rax, str.__veryhigh
mov rcx, rax
test rdi, rdi
je 0x140001cc4
sub r8, rax
nop
movzx eax, word [r8 + rcx]
cmp ax, word [rcx]
jne 0x140001cdb
add rcx, 2
sub rdx, 1
jne 0x140001cb0
mov byte [rsp + 0x61], 1
mov byte [rsp + 0x62], 0
mov dword [rsp + 0x64], 2
jmp 0x140001ecc
lea r8, [rbp + 0x18]
test bl, bl
cmovne r8, r14
cmp rdi, 8
jne 0x140001d28
mov rdx, rdi
lea rax, str.__medium
mov rcx, rax
test rdi, rdi
je 0x140001d14
sub r8, rax
movzx eax, word [r8 + rcx]
cmp ax, word [rcx]
jne 0x140001d28
add rcx, 2
sub rdx, 1
jne 0x140001d00
mov byte [rsp + 0x61], 1
mov byte [rsp + 0x62], 0
mov dword [rsp + 0x64], r13d
jmp 0x140001ecc
lea r8, [rbp + 0x18]
test bl, bl
cmovne r8, r14
cmp rdi, 5
jne 0x140001d78
mov rdx, rdi
lea rax, str.__low
mov rcx, rax
test rdi, rdi
je 0x140001d64
sub r8, rax
nop dword [rax]
movzx eax, word [rcx + r8]
cmp ax, word [rcx]
jne 0x140001d78
add rcx, 2
sub rdx, 1
jne 0x140001d50
mov byte [rsp + 0x61], 1
mov byte [rsp + 0x62], 0
mov dword [rsp + 0x64], r15d
jmp 0x140001ecc
lea r8, [rbp + 0x18]
test bl, bl
cmovne r8, r14
cmp rdi, 9
jne 0x140001dc8
mov rdx, rdi
lea rax, str.__disable
mov rcx, rax
test rdi, rdi
je 0x140001db4
sub r8, rax
nop dword [rax]
movzx eax, word [r8 + rcx]
cmp ax, word [rcx]
jne 0x140001dc8
add rcx, 2
sub rdx, 1
jne 0x140001da0
mov byte [rsp + 0x63], 0
mov byte [rsp + 0x61], 0
mov byte [rsp + 0x62], 1
jmp 0x140001ecc
lea r8, [rbp + 0x18]
test bl, bl
cmovne r8, r14
cmp rdi, 7
jne 0x140001e0f
mov rdx, rdi
lea rax, str.__admin
mov rcx, rax
test rdi, rdi
je 0x140001e04
sub r8, rax
nop dword [rax]
movzx eax, word [r8 + rcx]
cmp ax, word [rcx]
jne 0x140001e0f
add rcx, 2
sub rdx, 1
jne 0x140001df0
xor bl, bl
mov byte [rsp + 0x60], bl
jmp 0x140001ed1
mov rsi, qword [rbp - 0x58]
test rsi, rsi
je 0x140001e67
mov rdx, qword [rbp - 0x50]
mov rax, rdx
sub rax, rsi
lea rcx, [rbp - 0x68]
cmp rax, 1
jb 0x140001e4f
lea rax, [rsi + 1]
mov qword [rbp - 0x58], rax
cmp rdx, 7
cmova rcx, qword [rbp - 0x68]
mov eax, dword [0x140007840]
mov word [rcx + rsi*2], ax
mov word [rcx + rsi*2 + 2], r15w
jmp 0x140001e63
mov qword [rsp + 0x20], r13
lea r9, [0x140007840]
mov rdx, r13
call fcn.1400045a0
mov rsi, qword [rbp - 0x58]
lea r9, [rbp + 0x18]
test bl, bl
cmovne r9, r14
mov rcx, qword [rbp - 0x50]
mov rax, rcx
sub rax, rsi
cmp rdi, rax
ja 0x140001eb0
lea rax, [rdi + rsi]
mov qword [rbp - 0x58], rax
lea rbx, [rbp - 0x68]
cmp rcx, 7
cmova rbx, qword [rbp - 0x68]
lea rcx, [rbx + rsi*2]
lea r8, [rdi + rdi]
mov rdx, r9
call sub.VCRUNTIME140.dll_memmove
lea rax, [rdi + rsi]
mov word [rbx + rax*2], r15w
jmp 0x140001ec9
mov qword [rsp + 0x20], rdi
mov rdx, rdi
lea rcx, [rbp - 0x68]
call fcn.1400045a0
mov r12, qword [rbp + 0x30]
mov r14, qword [rbp + 0x18]
mov esi, dword [rbp - 0x78]
movzx ebx, byte [rsp + 0x60]
cmp r12, 7
jbe 0x140001f0c
lea rdx, [r12*2 + 2]
mov rax, r14
cmp rdx, 0x1000
jb 0x140001f04
add rdx, 0x27
mov r14, qword [r14 - 8]
sub rax, r14
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1400025e9
mov rcx, r14
call fcn.1400054d4
inc esi
mov dword [rbp - 0x78], esi
mov rax, qword [rbp - 0x80]
inc rax
mov qword [rbp - 0x80], rax
cmp esi, dword [rbp + 0x10]
jge 0x140001f2b
mov rcx, qword [rsp + 0x68]
jmp 0x140001ac0
mov esi, 4
test bl, bl
je 0x14000248f
xorps xmm0, xmm0
movaps xmmword [rbp + 0x50], xmm0
movaps xmmword [rbp + 0x70], xmm0
movaps xmmword [rbp + 0x90], xmm0
movaps xmmword [rbp + 0xa0], xmm0
lea rax, str.84_C0_75_____77_FF_FF_FF_E9________
mov qword [rbp - 0x40], rax
mov qword [rbp - 0x38], 0x23
movups xmmword [rbp + 0x40], xmm0
mov qword [rbp + 0x50], r15
mov qword [rbp + 0x58], 0xf
mov byte [rbp + 0x40], 0
movups xmmword [rbp + 0x60], xmm0
mov qword [rbp + 0x70], r15
mov qword [rbp + 0x78], 0xf
mov byte [rbp + 0x60], 0
movdqa xmmword [rbp + 0x80], xmm0
mov qword [rbp + 0x90], r15
mov byte [rbp + 0x98], 0
mov rax, qword [0x14000b808]
mov qword [rbp + 0xa0], rax
mov qword [rbp + 0xa8], r15
movaps xmm0, xmmword [rbp - 0x40]
movdqa xmmword [rbp - 0x40], xmm0
lea r8, [rbp + 0x60]
lea rdx, [rbp + 0x40]
lea rcx, [rbp - 0x40]
call fcn.140004d10
nop
mov edx, 0xffffffff
lea rcx, [rbp + 0x40]
call fcn.140004e90
mov rax, qword [rbp + 0x88]
sub rax, qword [rbp + 0x80]
sar rax, 3
movabs rdi, 0x9090909090909090
cmp rax, 3
jne 0x1400021af
mov edx, 0xffffffff
lea rcx, [rbp + 0x40]
call fcn.140004e90
mov rax, qword [rbp + 0x80]
mov rbx, qword [rax]
lea r9, [rbp - 0x78]
lea r8d, [rsi + 0x3c]
mov edx, esi
lea rcx, [rbx + 5]
call qword [sym.imp.KERNEL32.dll_VirtualProtect]
mov dword [rbx + 5], r15d
lea r9, [rbp - 0x78]
mov r8d, dword [rbp - 0x78]
mov edx, esi
lea rcx, [rbx + 5]
call qword [sym.imp.KERNEL32.dll_VirtualProtect]
mov edx, 0xffffffff
lea rcx, [rbp + 0x40]
call fcn.140004e90
mov rax, qword [rbp + 0x80]
mov rbx, qword [rax]
lea r9, [rbp - 0x78]
lea r8d, [rsi + 0x3c]
mov edx, esi
lea rcx, [rbx + 5]
call qword [sym.imp.KERNEL32.dll_VirtualProtect]
mov dword [rbx + 5], r15d
lea r9, [rbp - 0x78]
mov r8d, dword [rbp - 0x78]
mov edx, esi
lea rcx, [rbx + 5]
call qword [sym.imp.KERNEL32.dll_VirtualProtect]
mov edx, 0xffffffff
lea rcx, [rbp + 0x40]
call fcn.140004e90
mov rax, qword [rbp + 0x80]
mov rbx, qword [rax]
lea r9, [rbp - 0x78]
lea r8d, [rsi + 0x3c]
mov edx, esi
lea rcx, [rbx + 5]
call qword [sym.imp.KERNEL32.dll_VirtualProtect]
mov dword [rbx + 5], r15d
lea r9, [rbp - 0x78]
mov r8d, dword [rbp - 0x78]
mov edx, esi
lea rcx, [rbx + 5]
call qword [sym.imp.KERNEL32.dll_VirtualProtect]
mov edx, 0xffffffff
lea rcx, [rbp + 0x40]
call fcn.140004e90
mov rax, qword [rbp + 0x80]
mov rbx, qword [rax]
lea r9, [rbp - 0x78]
lea edx, [rsi + 1]
lea r8d, [rsi + 0x3c]
lea rcx, [rbx + 9]
call qword [sym.imp.KERNEL32.dll_VirtualProtect]
mov dword [rbx + 9], edi
mov byte [rbx + 0xd], dil
lea r9, [rbp - 0x78]
mov r8d, dword [rbp - 0x78]
lea edx, [rsi + 1]
lea rcx, [rbx + 9]
call qword [sym.imp.KERNEL32.dll_VirtualProtect]
mov edx, 0xffffffff
lea rcx, [rbp + 0x40]
call fcn.140004e90
mov rax, qword [rbp + 0x80]
mov rbx, qword [rax + 8]
lea r9, [rbp - 0x78]
lea edx, [rsi + 1]
lea r8d, [rsi + 0x3c]
lea rcx, [rbx + 9]
call qword [sym.imp.KERNEL32.dll_VirtualProtect]
mov dword [rbx + 9], edi
mov byte [rbx + 0xd], dil
lea r9, [rbp - 0x78]
mov r8d, dword [rbp - 0x78]
lea edx, [rsi + 1]
lea rcx, [rbx + 9]
call qword [sym.imp.KERNEL32.dll_VirtualProtect]
mov edx, 0xffffffff
lea rcx, [rbp + 0x40]
call fcn.140004e90
mov rax, qword [rbp + 0x80]
mov rbx, qword [rax + 0x10]
lea r9, [rbp - 0x78]
lea edx, [rsi + 1]
lea r8d, [rsi + 0x3c]
lea rcx, [rbx + 9]
call qword [sym.imp.KERNEL32.dll_VirtualProtect]
mov dword [rbx + 9], edi
mov byte [rbx + 0xd], dil
lea r9, [rbp - 0x78]
mov r8d, dword [rbp - 0x78]
lea edx, [rsi + 1]
lea rcx, [rbx + 9]
call qword [sym.imp.KERNEL32.dll_VirtualProtect]
xorps xmm0, xmm0
movaps xmmword [rbp + 0x130], xmm0
movaps xmmword [rbp + 0x150], xmm0
movaps xmmword [rbp + 0x170], xmm0
movaps xmmword [rbp + 0x180], xmm0
lea rax, str.96_08_98_00_00_00_00_00
mov qword [rbp - 0x40], rax
mov qword [rbp - 0x38], 0x17
movups xmmword [rbp + 0x120], xmm0
mov qword [rbp + 0x130], r15
mov qword [rbp + 0x138], 0xf
mov byte [rbp + 0x120], 0
movups xmmword [rbp + 0x140], xmm0
mov qword [rbp + 0x150], r15
mov qword [rbp + 0x158], 0xf
mov byte [rbp + 0x140], 0
movdqa xmmword [rbp + 0x160], xmm0
mov qword [rbp + 0x170], r15
mov byte [rbp + 0x178], 0
mov rax, qword [0x14000b808]
mov qword [rbp + 0x180], rax
mov qword [rbp + 0x188], r15
movaps xmm0, xmmword [rbp - 0x40]
movdqa xmmword [rbp - 0x40], xmm0
lea r8, [rbp + 0x140]
lea rdx, [rbp + 0x120]
lea rcx, [rbp - 0x40]
call fcn.140004d10
nop
mov edx, 0xffffffff
lea rcx, [rbp + 0x120]
call fcn.140004e90
mov rax, qword [rbp + 0x168]
sub rax, qword [rbp + 0x160]
sar rax, 3
cmp rax, 1
jne 0x1400022df
mov edx, r13d
lea rcx, [rbp + 0x120]
call fcn.140004e90
mov rax, qword [rbp + 0x160]
mov rbx, qword [rax]
lea r9, [rbp - 0x78]
mov r8d, 0x40
mov rdx, rsi
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_VirtualProtect]
mov dword [rbx], 0x980897
lea r9, [rbp - 0x78]
mov r8d, dword [rbp - 0x78]
mov rdx, rsi
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_VirtualProtect]
xorps xmm0, xmm0
movaps xmmword [rbp + 0xc0], xmm0
movaps xmmword [rbp + 0xe0], xmm0
movaps xmmword [rbp + 0x100], xmm0
movaps xmmword [rbp + 0x110], xmm0
lea rax, str.3B_58_DC_75___39_38_0F_85
mov qword [rbp - 0x40], rax
mov qword [rbp - 0x38], 0x19
movups xmmword [rbp + 0xb0], xmm0
mov qword [rbp + 0xc0], r15
mov qword [rbp + 0xc8], 0xf
mov byte [rbp + 0xb0], 0
movups xmmword [rbp + 0xd0], xmm0
mov qword [rbp + 0xe0], r15
mov qword [rbp + 0xe8], 0xf
mov byte [rbp + 0xd0], 0
movdqa xmmword [rbp + 0xf0], xmm0
mov qword [rbp + 0x100], r15
mov byte [rbp + 0x108], 0
mov rax, qword [0x14000b808]
mov qword [rbp + 0x110], rax
mov qword [rbp + 0x118], r15
movaps xmm0, xmmword [rbp - 0x40]
movdqa xmmword [rbp - 0x40], xmm0
lea r8, [rbp + 0xd0]
lea rdx, [rbp + 0xb0]
lea rcx, [rbp - 0x40]
call fcn.140004d10
nop
mov edx, 0xffffffff
lea rcx, [rbp + 0xb0]
call fcn.140004e90
mov rax, qword [rbp + 0xf8]
sub rax, qword [rbp + 0xf0]
sar rax, 3
cmp rax, 2
jne 0x14000246c
mov edx, 0xffffffff
lea rcx, [rbp + 0xb0]
call fcn.140004e90
mov rax, qword [rbp + 0xf0]
mov rbx, qword [rax]
lea r9, [rbp - 0x78]
mov edx, 6
lea r8d, [rdx + 0x3a]
lea rcx, [rbx + 7]
call qword [sym.imp.KERNEL32.dll_VirtualProtect]
mov dword [rbx + 7], edi
mov word [rbx + 0xb], di
lea r9, [rbp - 0x78]
mov r8d, dword [rbp - 0x78]
mov edx, 6
lea rcx, [rbx + 7]
call qword [sym.imp.KERNEL32.dll_VirtualProtect]
mov edx, 0xffffffff
lea rcx, [rbp + 0xb0]
call fcn.140004e90
mov rax, qword [rbp + 0xf0]
mov rbx, qword [rax + 8]
lea r9, [rbp - 0x78]
mov edx, 6
lea r8d, [rdx + 0x3a]
lea rcx, [rbx + 7]
call qword [sym.imp.KERNEL32.dll_VirtualProtect]
mov dword [rbx + 7], edi
mov word [rbx + 0xb], di
lea r9, [rbp - 0x78]
mov r8d, dword [rbp - 0x78]
mov edx, 6
lea rcx, [rbx + 7]
call qword [sym.imp.KERNEL32.dll_VirtualProtect]
nop
lea rcx, [rbp + 0xb0]
call fcn.140001420
nop
lea rcx, [rbp + 0x120]
call fcn.140001420
nop
lea rcx, [rbp + 0x40]
call fcn.140001420
mov rcx, qword [rbp - 0x58]
test rcx, rcx
jne 0x140002539
mov byte [0x14000b789], 1
lea rdx, str.Usage:_nvtruehdr____high_____medium_____low_____disable_____hud___appExeName__n
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.1400039f0
lea rdx, [0x1400076f4]
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.1400039f0
lea rdx, str.Entering_interactive_mode_n_nEnter_app_executable_name__use__base__for_base_global_profile__n_
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.1400039f0
mov rbx, qword [sym.imp.MSVCP140.dll_class_std::basic_istream_wchar_t__struct_std::char_traits_wchar_t___std::wcin]
mov rax, qword [rbx]
movsxd rcx, dword [rax + 4]
add rcx, rbx
mov dl, 0xa
call qword [sym.imp.MSVCP140.dll_public:_wchar_t___cdecl_std::basic_ios_wchar_t__struct_std::char_traits_wchar_t__::widen_char_const___ptr64]
movzx r8d, ax
lea rdx, [rbp - 0x68]
mov rcx, rbx
call fcn.1400047a0
lea rdx, [0x1400076f4]
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.1400039f0
mov rcx, qword [rbp - 0x58]
test rcx, rcx
jne 0x140002539
lea rdx, str.Invalid_exe_name__exiting..._n
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.1400039f0
jmp 0x1400036a3
mov rdx, qword [rbp - 0x50]
mov r9, qword [rbp - 0x68]
cmp rcx, 1
jbe 0x140002614
lea rax, [rbp - 0x68]
cmp rdx, 7
seta r10b
cmova rax, r9
cmp word [rax], 0x22
jne 0x140002614
lea rax, [rbp - 0x68]
test r10b, r10b
cmovne rax, r9
cmp word [rax + rcx*2 - 2], 0x22
jne 0x140002614
lea r8, [rcx - 2]
xorps xmm0, xmm0
movups xmmword [rbp - 0x30], xmm0
mov qword [rbp - 0x20], r15
mov qword [rbp - 0x18], r15
lea rax, [rcx - 1]
cmp rax, r8
cmovb r8, rax
lea rdx, [rbp - 0x68]
test r10b, r10b
cmovne rdx, r9
add rdx, 2
lea rcx, [rbp - 0x30]
call fcn.140004120
mov rdx, qword [rbp - 0x50]
cmp rdx, 7
jbe 0x1400025f5
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp - 0x68]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400025f0
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x1400025f0
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1400054d4
movups xmm1, xmmword [rbp - 0x30]
movups xmmword [rbp - 0x68], xmm1
movups xmm0, xmmword [rbp - 0x20]
movups xmmword [rbp - 0x58], xmm0
psrldq xmm0, 8
movq rdx, xmm0
movq r9, xmm1
xorps xmm0, xmm0
movdqu xmmword [rbp - 0x40], xmm0
lea rcx, [rbp - 0x68]
cmp rdx, 7
cmova rcx, r9
lea rdx, str.base
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll__wcsicmp]
test eax, eax
je 0x140002b19
lea rcx, [rbp - 0x68]
cmp qword [rbp - 0x50], 7
cmova rcx, qword [rbp - 0x68]
lea rdx, str.global
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll__wcsicmp]
test eax, eax
je 0x140002b19
lea rdx, str.Fetching_settings_for_app_
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t___std::wcout]
call fcn.140003bc0
lea rdx, [rbp - 0x68]
cmp qword [rbp - 0x50], 7
cmova rdx, qword [rbp - 0x68]
mov r8, qword [rbp - 0x58]
mov rcx, rax
call fcn.140004950
mov rcx, rax
lea rdx, str...._n
call fcn.140003bc0
xorps xmm0, xmm0
movups xmmword [rbp - 0x10], xmm0
mov qword [rbp], r15
mov qword [rbp + 8], r15
mov r14, qword [rbp - 0x58]
lea r12, [rbp - 0x68]
cmp qword [rbp - 0x50], 7
cmova r12, qword [rbp - 0x68]
movabs rdi, 0x7ffffffffffffffe
cmp r14, rdi
ja 0x140003738
movabs rax, 0x7fffffffffffffff
mov ecx, 0xa
mov qword [rbp + 8], 7
cmp r14, 7
ja 0x1400026ff
mov qword [rbp], r14
movups xmm0, xmmword [r12]
movups xmmword [rbp - 0x10], xmm0
jmp 0x140002794
mov rbx, r14
or rbx, 7
cmp rbx, rdi
jbe 0x140002714
mov rbx, rdi
lea rcx, [rax + rax]
jmp 0x140002734
cmp rbx, rcx
cmovb rbx, rcx
lea rcx, [rbx + 1]
cmp rcx, rax
ja 0x140003732
add rcx, rcx
cmp rcx, 0x1000
jb 0x140002766
lea rax, [rcx + 0x27]
cmp rax, rcx
jbe 0x140003732
mov rcx, rax
call fcn.140005490
mov rcx, rax
test rax, rax
je 0x14000275f
add rax, 0x27
and rax, 0xffffffffffffffe0
mov qword [rax - 8], rcx
jmp 0x140002775
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
test rcx, rcx
je 0x140002772
call fcn.140005490
jmp 0x140002775
mov rax, r15
mov qword [rbp - 0x10], rax
mov qword [rbp], r14
mov qword [rbp + 8], rbx
lea r8, [r14*2 + 2]
mov rdx, r12
mov rcx, rax
call sub.VCRUNTIME140.dll_memcpy
lea r8, [rbp - 0x40]
lea rdx, [rbp - 0x10]
call fcn.140001530
test eax, eax
je 0x140002a4e
xorps xmm0, xmm0
movups xmmword [rbp - 0x10], xmm0
mov qword [rbp], r15
mov qword [rbp + 8], r15
mov rbx, qword [rbp - 0x58]
lea r12, [rbp - 0x68]
mov r8, qword [rbp - 0x68]
mov rdx, qword [rbp - 0x50]
cmp rdx, 7
cmova r12, r8
cmp rbx, rdi
ja 0x14000373e
mov qword [rbp + 8], 7
cmp rbx, 7
ja 0x1400027f9
mov qword [rbp], rbx
movups xmm0, xmmword [r12]
movups xmmword [rbp - 0x10], xmm0
jmp 0x1400028b1
mov r14, rbx
or r14, 7
cmp r14, rdi
jbe 0x140002818
mov r14, rdi
movabs rax, 0x7fffffffffffffff
lea rcx, [rax + rax]
jmp 0x140002848
cmp r14, 0xa
mov eax, 0xa
cmovb r14, rax
lea rcx, [r14 + 1]
movabs rax, 0x7fffffffffffffff
cmp rcx, rax
ja 0x140003750
add rcx, rcx
cmp rcx, 0x1000
jb 0x140002877
lea rax, [rcx + 0x27]
cmp rax, rcx
jbe 0x140003750
mov rcx, rax
call fcn.140005490
mov rcx, rax
test rax, rax
je 0x140002b03
add rax, 0x27
and rax, 0xffffffffffffffe0
mov qword [rax - 8], rcx
jmp 0x140002886
test rcx, rcx
je 0x140002883
call fcn.140005490
jmp 0x140002886
mov rax, r15
mov qword [rbp - 0x10], rax
mov qword [rbp], rbx
mov qword [rbp + 8], r14
lea r8, [rbx*2 + 2]
mov rdx, r12
mov rcx, rax
call sub.VCRUNTIME140.dll_memcpy
mov rdx, qword [rbp - 0x50]
mov rbx, qword [rbp - 0x58]
mov r8, qword [rbp - 0x68]
test rbx, rbx
je 0x140002a8f
mov rax, rdx
sub rax, rbx
lea rcx, [rbp - 0x68]
cmp rax, 4
jb 0x1400028ed
lea rax, [rbx + 4]
mov qword [rbp - 0x58], rax
cmp rdx, 7
cmova rcx, r8
mov rax, qword [str..exe]
mov qword [rcx + rbx*2], rax
mov word [rcx + rbx*2 + 8], r15w
jmp 0x140002901
mov qword [rsp + 0x20], rsi
lea r9, str..exe
mov rdx, rsi
call fcn.1400045a0
xorps xmm0, xmm0
movups xmmword [rbp - 0x30], xmm0
mov qword [rbp - 0x20], r15
mov qword [rbp - 0x18], r15
mov rbx, qword [rbp - 0x58]
lea r14, [rbp - 0x68]
cmp qword [rbp - 0x50], 7
cmova r14, qword [rbp - 0x68]
cmp rbx, rdi
ja 0x140003744
mov qword [rbp - 0x18], 7
cmp rbx, 7
ja 0x14000294a
mov qword [rbp - 0x20], rbx
movups xmm0, xmmword [r14]
movups xmmword [rbp - 0x30], xmm0
jmp 0x1400029f9
mov rax, rbx
or rax, 7
cmp rax, rdi
jbe 0x140002966
movabs rax, 0x7fffffffffffffff
lea rcx, [rax + rax]
jmp 0x140002999
cmp rax, 0xa
mov ecx, 0xa
cmovb rax, rcx
mov rdi, rax
lea rcx, [rax + 1]
movabs rax, 0x7fffffffffffffff
cmp rcx, rax
ja 0x14000374a
add rcx, rcx
cmp rcx, 0x1000
jb 0x1400029cb
lea rax, [rcx + 0x27]
cmp rax, rcx
jbe 0x14000374a
mov rcx, rax
call fcn.140005490
mov rcx, rax
test rax, rax
je 0x1400029c4
add rax, 0x27
and rax, 0xffffffffffffffe0
mov qword [rax - 8], rcx
jmp 0x1400029da
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
test rcx, rcx
je 0x1400029d7
call fcn.140005490
jmp 0x1400029da
mov rax, r15
mov qword [rbp - 0x30], rax
mov qword [rbp - 0x20], rbx
mov qword [rbp - 0x18], rdi
lea r8, [rbx*2 + 2]
mov rdx, r14
mov rcx, rax
call sub.VCRUNTIME140.dll_memcpy
lea r8, [rbp - 0x40]
lea rdx, [rbp - 0x30]
call fcn.140001530
test eax, eax
jne 0x140002a8f
mov rdx, qword [rbp + 8]
cmp rdx, 7
jbe 0x140002a4e
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp - 0x10]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140002a49
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140002b03
call fcn.1400054d4
lea rdx, str.Found_settings_for_app_
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t___std::wcout]
call fcn.140003bc0
lea rdx, [rbp - 0x68]
cmp qword [rbp - 0x50], 7
cmova rdx, qword [rbp - 0x68]
mov r8, qword [rbp - 0x58]
mov rcx, rax
call fcn.140004950
mov rcx, rax
lea rdx, [0x140007af8]
call fcn.140003bc0
jmp 0x140002b37
lea rdx, str.Failed_to_locate_app_profile_for_
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t___std::wcout]
call fcn.140003bc0
lea rdx, [rbp - 0x10]
cmp qword [rbp + 8], 7
cmova rdx, qword [rbp - 0x10]
mov r8, qword [rbp]
mov rcx, rax
call fcn.140004950
mov rcx, rax
lea rdx, str._n__Try_adding_it_in_NVIDIA_Control_Panel__retry_with_the_full_EXE_path._n
call fcn.140003bc0
nop
mov rdx, qword [rbp + 8]
cmp rdx, 7
jbe 0x140002b0f
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp - 0x10]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140002b0a
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140002b0a
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1400054d4
mov qword [rsp + 0x78], r13
jmp 0x1400036a3
lea rdx, str.Fetching_settings_for_base_global_profile..._n
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t___std::wcout]
call fcn.140003bc0
movups xmm0, xmmword [0x14000b7e8]
movups xmmword [rbp - 0x40], xmm0
mov ecx, 0x3020
call fcn.140005490
mov r14, rax
mov qword [rbp - 0x80], rax
xor edx, edx
mov r8d, 0x3020
mov rcx, rax
call sub.VCRUNTIME140.dll_memset
mov qword [rbp + 0x190], r14
mov ecx, 0x3020
call fcn.140005490
mov rdi, rax
xor edx, edx
mov r8d, 0x3020
mov rcx, rax
call sub.VCRUNTIME140.dll_memset
mov qword [rbp + 0x198], rdi
mov ecx, 0x3020
call fcn.140005490
mov rbx, rax
mov qword [rsp + 0x70], rax
xor edx, edx
mov r8d, 0x3020
mov rcx, rax
call sub.VCRUNTIME140.dll_memset
mov qword [rbp + 0x1a0], rbx
mov ecx, 0x3020
call fcn.140005490
mov r12, rax
mov qword [rsp + 0x68], rax
lea rcx, [rax + 4]
xor edx, edx
mov r8d, 0x301c
call sub.VCRUNTIME140.dll_memset
mov qword [rbp + 0x1a8], r12
mov dword [r14], 0x13020
mov dword [rdi], 0x13020
mov dword [rbx], 0x13020
mov dword [r12], 0x13020
mov dword [rbp - 0x78], r15d
mov rax, qword [0x14000b7a0]
lea rcx, [rbp - 0x78]
mov qword [rsp + 0x20], rcx
mov r9, r14
mov r8d, 0xdd48fb
mov r12, qword [rbp - 0x38]
mov rdx, r12
mov r13, qword [rbp - 0x40]
mov rcx, r13
call rax
mov ebx, eax
mov dword [rbp - 0x48], r15d
mov r10, qword [0x14000b7a0]
lea rax, [rbp - 0x48]
mov qword [rsp + 0x20], rax
mov r9, rdi
mov r8d, 0x432f84
mov rdx, r12
mov rcx, r13
call r10
mov dword [rbp - 0x44], eax
mov dword [rbp - 0x78], r15d
mov r10, qword [0x14000b7a0]
lea rax, [rbp - 0x78]
mov qword [rsp + 0x20], rax
mov r9, qword [rsp + 0x70]
mov r8d, 0x980896
mov rdx, r12
mov rcx, r13
call r10
mov dword [rbp - 0x74], eax
mov dword [rbp - 0x48], r15d
mov r10, qword [0x14000b7a0]
lea rax, [rbp - 0x48]
mov qword [rsp + 0x20], rax
mov r9, qword [rsp + 0x68]
mov r8d, 0x1077a11a
mov rdx, r12
mov rcx, r13
call r10
mov r9d, eax
test ebx, ebx
jne 0x140002cb2
cmp dword [r14 + 0x201c], 1
jne 0x140002cb2
mov r8b, 1
jmp 0x140002cb5
xor r8b, r8b
cmp dword [rbp - 0x44], 0
jne 0x140002cd1
cmp dword [rdi + 0x201c], 0
jne 0x140002ccd
cmp byte [0x14000b788], 0
je 0x140002cd1
mov dl, 1
jmp 0x140002cd3
xor dl, dl
cmp dword [rbp - 0x74], 0
jne 0x140002ceb
mov rax, qword [rsp + 0x70]
cmp dword [rax + 0x201c], 1
jne 0x140002ceb
mov cl, 1
jmp 0x140002ced
xor cl, cl
test r9d, r9d
jne 0x140002d04
mov rax, qword [rsp + 0x68]
cmp dword [rax + 0x201c], 1
jne 0x140002d04
mov al, 1
jmp 0x140002d06
xor al, al
test r8b, r8b
je 0x140002d1b
test dl, dl
je 0x140002d1b
test cl, cl
je 0x140002d1b
test al, al
je 0x140002d1b
mov al, 1
jmp 0x140002d1d
xor al, al
mov byte [rsp + 0x60], al
lea rcx, str.Enabled
lea rbx, str.Disabled
test al, al
cmovne rbx, rcx
lea rdx, str._nCurrent_TrueHDR_state:
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.1400039f0
mov rcx, rax
mov rdx, rbx
call fcn.1400039f0
mov rcx, rax
lea rdx, [0x140007b3c]
call fcn.1400039f0
mov edx, dword [r14 + 0x201c]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___unsigned_int____ptr64]
mov rcx, rax
lea rdx, [0x140007b38]
call fcn.1400039f0
mov edx, dword [rdi + 0x201c]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___unsigned_int____ptr64]
mov rcx, rax
lea rdx, [0x140007b38]
call fcn.1400039f0
mov rdx, qword [rsp + 0x70]
mov edx, dword [rdx + 0x201c]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___unsigned_int____ptr64]
mov rcx, rax
lea rdx, [0x140007b38]
call fcn.1400039f0
mov rdx, qword [rsp + 0x68]
mov edx, dword [rdx + 0x201c]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___unsigned_int____ptr64]
mov rcx, rax
lea rdx, [0x140007b34]
call fcn.1400039f0
mov rbx, rax
mov edx, dword [rdi + 0x201c]
lea rcx, [rbp - 0x30]
call fcn.140001690
nop
mov r8, qword [rax + 0x10]
cmp qword [rax + 0x18], 0xf
jbe 0x140002e06
mov rax, qword [rax]
mov rdx, rax
mov rcx, rbx
call fcn.140004b20
mov rcx, rax
lea rdx, [0x1400076f4]
call fcn.1400039f0
nop
mov rdx, qword [rbp - 0x18]
cmp rdx, 0xf
jbe 0x140002e5f
inc rdx
mov rcx, qword [rbp - 0x30]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140002e5a
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140002e5a
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1400054d4
cmp byte [0x14000b789], 0
je 0x140002fd9
lea rdx, str._nEnter_action__VeryHigh___Medium___Low___Disable___Hud___Quit___or_hit_enter_to_toggle_n_
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.1400039f0
xorps xmm0, xmm0
movups xmmword [rbp - 0x30], xmm0
mov qword [rbp - 0x20], r15
mov qword [rbp - 0x18], 7
mov word [rbp - 0x30], r15w
mov rbx, qword [sym.imp.MSVCP140.dll_class_std::basic_istream_wchar_t__struct_std::char_traits_wchar_t___std::wcin]
mov rax, qword [rbx]
movsxd rcx, dword [rax + 4]
add rcx, rbx
mov dl, 0xa
call qword [sym.imp.MSVCP140.dll_public:_wchar_t___cdecl_std::basic_ios_wchar_t__struct_std::char_traits_wchar_t__::widen_char_const___ptr64]
movzx r8d, ax
lea rdx, [rbp - 0x30]
mov rcx, rbx
call fcn.1400047a0
mov r14, qword [rbp - 0x18]
mov rbx, qword [rbp - 0x30]
cmp qword [rbp - 0x20], 0
je 0x140002f32
lea rcx, [rbp - 0x30]
cmp r14, 7
cmova rcx, rbx
movzx ecx, word [rcx]
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_towlower]
cmp ax, 0x76
je 0x140002f25
cmp ax, 0x65
je 0x140002f25
cmp ax, 0x6d
jne 0x140002f00
mov dword [rsp + 0x64], 1
jmp 0x140002f2d
cmp ax, 0x6c
jne 0x140002f0d
mov dword [rsp + 0x64], r15d
jmp 0x140002f2d
cmp ax, 0x64
jne 0x140002f1a
mov byte [rsp + 0x62], 1
jmp 0x140002f32
cmp ax, 0x68
jne 0x140002f80
mov byte [rsp + 0x63], 1
mov dword [rsp + 0x64], 2
mov byte [rsp + 0x61], 1
lea rdx, [0x1400076f4]
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.1400039f0
nop
cmp r14, 7
jbe 0x140002fd9
lea rdx, [r14*2 + 2]
mov rax, rbx
cmp rdx, 0x1000
jb 0x140002fd1
add rdx, 0x27
mov rbx, qword [rbx - 8]
sub rax, rbx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140002fd1
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
nop
cmp ax, 0x78
je 0x140002f8c
cmp ax, 0x71
jne 0x140002f32
cmp r14, 7
jbe 0x140002fc3
lea rdx, [r14*2 + 2]
mov rax, rbx
cmp rdx, 0x1000
jb 0x140002fbb
add rdx, 0x27
mov rbx, qword [rbx - 8]
sub rax, rbx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140002f79
mov rcx, rbx
call fcn.1400054d4
mov rsi, qword [rbp - 0x80]
mov rbx, qword [rsp + 0x70]
jmp 0x14000365f
mov rcx, rbx
call fcn.1400054d4
movzx eax, byte [rsp + 0x60]
xor al, 1
cmp byte [rsp + 0x61], 0
mov edx, 1
cmove edx, eax
mov ecx, r15d
movzx eax, dl
cmp byte [rsp + 0x62], r15b
cmove ecx, eax
movzx r14d, cl
mov rax, qword [rbp - 0x80]
mov dword [rax + 0x201c], r14d
mov eax, r14d
add eax, eax
mov dword [rdi + 0x201c], eax
mov rax, qword [rsp + 0x70]
mov dword [rax + 0x201c], r14d
mov rax, qword [rsp + 0x68]
mov dword [rax + 0x201c], r14d
movzx ecx, byte [0x14000b788]
test cl, cl
je 0x14000303f
and dword [rdi + 0x201c], 0xfffffffd
test r14b, r14b
je 0x140003084
cmp byte [rsp + 0x63], 0
je 0x140003052
or dword [rdi + 0x201c], 1
mov eax, dword [rsp + 0x64]
test cl, cl
je 0x14000306d
test eax, eax
je 0x14000307e
cmp eax, 1
je 0x14000307b
cmp eax, 2
jne 0x14000307b
lea esi, [rax + 0xe]
jmp 0x14000307e
test eax, eax
je 0x14000307e
cmp eax, 1
mov esi, 8
je 0x14000307e
mov esi, r15d
or dword [rdi + 0x201c], esi
lea rbx, str.Disabled
test r14b, r14b
lea rax, str.Enabled
cmovne rbx, rax
lea rdx, str.Applying_TrueHDR_state:
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.1400039f0
mov rcx, rax
mov rdx, rbx
call fcn.1400039f0
mov rcx, rax
lea rdx, [0x140007b3c]
call fcn.1400039f0
mov rsi, qword [rbp - 0x80]
mov edx, dword [rsi + 0x201c]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___unsigned_int____ptr64]
mov rcx, rax
lea rdx, [0x140007b38]
call fcn.1400039f0
mov edx, dword [rdi + 0x201c]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___unsigned_int____ptr64]
mov rcx, rax
lea rdx, [0x140007b38]
call fcn.1400039f0
mov rbx, qword [rsp + 0x70]
mov edx, dword [rbx + 0x201c]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___unsigned_int____ptr64]
mov rcx, rax
lea rdx, [0x140007b38]
call fcn.1400039f0
mov rdx, qword [rsp + 0x68]
mov edx, dword [rdx + 0x201c]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___unsigned_int____ptr64]
mov rcx, rax
lea rdx, [0x140007b34]
call fcn.1400039f0
mov qword [rbp - 0x80], rax
mov edx, dword [rdi + 0x201c]
lea rcx, [rbp - 0x30]
call fcn.140001690
nop
mov r8, qword [rax + 0x10]
cmp qword [rax + 0x18], 0xf
jbe 0x14000316e
mov rax, qword [rax]
mov rdx, rax
mov rcx, qword [rbp - 0x80]
call fcn.140004b20
mov rcx, rax
lea rdx, [0x1400076f4]
call fcn.1400039f0
nop
mov rdx, qword [rbp - 0x18]
cmp rdx, 0xf
jbe 0x1400031c8
inc rdx
mov rcx, qword [rbp - 0x30]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400031c3
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x1400031c3
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1400054d4
mov qword [rbp - 0x20], r15
mov qword [rbp - 0x18], 0xf
mov byte [rbp - 0x30], 0
mov dword [rsi + 0x1004], 0xdd48fb
mov dword [rdi + 0x1004], 0x432f84
mov dword [rbx + 0x1004], 0x980896
mov rax, qword [rsp + 0x68]
mov dword [rax + 0x1004], 0x1077a11a
mov rax, qword [0x14000b7d8]
mov dword [rsp + 0x20], r15d
xor r9d, r9d
mov r8, rsi
mov rdx, r12
mov rcx, r13
call rax
mov dword [rbp - 0x74], eax
mov r10, qword [0x14000b7d8]
mov dword [rsp + 0x20], r15d
xor r9d, r9d
mov r8, rdi
mov rdx, r12
mov rcx, r13
call r10
mov dword [rbp - 0x78], eax
mov r10, qword [0x14000b7d8]
mov dword [rsp + 0x20], r15d
xor r9d, r9d
mov r8, rbx
mov rdx, r12
mov rcx, r13
call r10
mov dword [rsp + 0x64], eax
mov r10, qword [0x14000b7d8]
mov dword [rsp + 0x20], r15d
xor r9d, r9d
mov r8, qword [rsp + 0x68]
mov rdx, r12
mov rcx, r13
call r10
mov ecx, eax
mov eax, dword [rbp - 0x74]
test eax, eax
jne 0x140003608
mov eax, dword [rbp - 0x78]
test eax, eax
jne 0x140003612
mov eax, dword [rsp + 0x64]
test eax, eax
jne 0x14000361d
test ecx, ecx
jne 0x140003624
test r14b, r14b
jne 0x140003359
mov rax, qword [0x14000b7d0]
mov r8d, 0x980896
mov rdx, r12
mov rcx, r13
call rax
mov r14d, eax
mov r9, qword [0x14000b7d0]
mov r8d, 0x1077a11a
mov rdx, r12
mov rcx, r13
call r9
mov ebx, eax
test r14d, r14d
jne 0x1400032ea
test eax, eax
je 0x140003359
lea rdx, str.NvAPI_DRS_DeleteProfileSetting_failed_with_error
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t___std::wcout]
call fcn.140003bc0
cmp r14d, 0xffffff77
je 0x14000333a
cmp ebx, 0xffffff77
je 0x14000333a
mov edx, r14d
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t___std::wcout]
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t______ptr64___cdecl_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t__::operator___int____ptr64]
mov rcx, rax
lea rdx, [0x140007da8]
call fcn.140003bc0
mov edx, ebx
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t______ptr64___cdecl_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t__::operator___int____ptr64]
jmp 0x140003346
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t___std::wcout]
call fcn.140003da0
lea rdx, str...._n__TrueHDR_might_not_be_fully_disabled__try_opening_game_settings_in_NVCP_and_use_Restore_button._n
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.1400039f0
mov rax, qword [0x14000b790]
mov rcx, qword [0x14000b7e0]
call rax
mov ebx, eax
test eax, eax
je 0x14000339c
lea rdx, str.NvAPI_DRS_SaveSettings_failed_with_error
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.1400039f0
mov edx, ebx
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___int____ptr64]
mov rcx, rax
lea rdx, str._____n
call fcn.1400039f0
lea rdx, str._nProfile_settings_saved__changes_should_take_effect_on_next_app_launch._n
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.1400039f0
mov dword [rbp - 0x74], r15d
mov rax, qword [0x14000b7a0]
lea rcx, [rbp - 0x74]
mov qword [rsp + 0x20], rcx
mov r9, rsi
mov r8d, 0xdd48fb
mov rdx, r12
mov rcx, r13
call rax
mov ebx, eax
mov dword [rbp - 0x44], r15d
mov r10, qword [0x14000b7a0]
lea rax, [rbp - 0x44]
mov qword [rsp + 0x20], rax
mov r9, rdi
mov r8d, 0x432f84
mov rdx, r12
mov rcx, r13
call r10
mov dword [rbp - 0x48], eax
mov dword [rbp - 0x74], r15d
mov r10, qword [0x14000b7a0]
lea rax, [rbp - 0x74]
mov qword [rsp + 0x20], rax
mov r9, qword [rsp + 0x70]
mov r8d, 0x980896
mov rdx, r12
mov rcx, r13
call r10
mov dword [rbp - 0x78], eax
mov dword [rbp - 0x44], r15d
mov r10, qword [0x14000b7a0]
lea rax, [rbp - 0x44]
mov qword [rsp + 0x20], rax
mov r14, qword [rsp + 0x68]
mov r9, r14
mov r8d, 0x1077a11a
mov rdx, r12
mov rcx, r13
call r10
test ebx, ebx
jne 0x140003467
cmp dword [rsi + 0x201c], 1
jne 0x140003467
mov r8b, 1
jmp 0x14000346a
xor r8b, r8b
cmp dword [rbp - 0x48], 0
jne 0x140003486
cmp dword [rdi + 0x201c], 0
jne 0x140003482
cmp byte [0x14000b788], 0
je 0x140003486
mov dl, 1
jmp 0x140003488
xor dl, dl
mov rbx, qword [rsp + 0x70]
cmp dword [rbp - 0x78], 0
jne 0x1400034a0
cmp dword [rbx + 0x201c], 1
jne 0x1400034a0
mov cl, 1
jmp 0x1400034a2
xor cl, cl
test eax, eax
jne 0x1400034b4
cmp dword [r14 + 0x201c], 1
jne 0x1400034b4
mov al, 1
jmp 0x1400034b6
xor al, al
test r8b, r8b
je 0x1400034cb
test dl, dl
je 0x1400034cb
test cl, cl
je 0x1400034cb
test al, al
je 0x1400034cb
mov al, 1
jmp 0x1400034cd
xor al, al
test al, al
lea r12, str.Disabled
lea rax, str.Enabled
cmovne r12, rax
lea rdx, str._nNew_TrueHDR_state:
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.1400039f0
mov rcx, rax
mov rdx, r12
call fcn.1400039f0
mov rcx, rax
lea rdx, [0x140007b3c]
call fcn.1400039f0
mov edx, dword [rsi + 0x201c]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___unsigned_int____ptr64]
mov rcx, rax
lea rdx, [0x140007b38]
call fcn.1400039f0
mov edx, dword [rdi + 0x201c]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___unsigned_int____ptr64]
mov rcx, rax
lea rdx, [0x140007b38]
call fcn.1400039f0
mov edx, dword [rbx + 0x201c]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___unsigned_int____ptr64]
mov rcx, rax
lea rdx, [0x140007b38]
call fcn.1400039f0
mov edx, dword [r14 + 0x201c]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___unsigned_int____ptr64]
mov rcx, rax
lea rdx, [0x140007b34]
call fcn.1400039f0
mov r12, rax
mov edx, dword [rdi + 0x201c]
lea rcx, [rbp - 0x30]
call fcn.140001690
nop
mov r8, qword [rax + 0x10]
cmp qword [rax + 0x18], 0xf
jbe 0x1400035a8
mov rax, qword [rax]
mov rdx, rax
mov rcx, r12
call fcn.140004b20
mov rcx, rax
lea rdx, [0x1400076f4]
call fcn.1400039f0
nop
mov rdx, qword [rbp - 0x18]
cmp rdx, 0xf
jbe 0x140003601
inc rdx
mov rcx, qword [rbp - 0x30]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400035fc
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x1400035fc
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1400054d4
mov dword [rsp + 0x78], r15d
jmp 0x14000366b
cmp eax, 0xffffff77
je 0x140003646
mov eax, dword [rbp - 0x78]
cmp eax, 0xffffff77
je 0x140003646
mov eax, dword [rsp + 0x64]
cmp eax, 0xffffff77
je 0x140003646
cmp ecx, 0xffffff77
je 0x140003646
lea rdx, str.Failed_to_apply_setting__aborting..._n
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.1400039f0
mov eax, 2
jmp 0x140003662
lea rdx, str.NvAPI_DRS_SetSetting_failed_with_error_NVAPI_INVALID_USER_PRIVILEGE__aborting..._nTry_relaunching_NvTrueHDR_as_admin._n
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t___std::wcout]
call fcn.140003bc0
mov r15d, 3
mov eax, r15d
mov dword [rsp + 0x78], eax
mov r14, qword [rsp + 0x68]
mov edx, 0x3020
mov rcx, r14
call fcn.1400054d4
nop
mov edx, 0x3020
mov rcx, rbx
call fcn.1400054d4
nop
mov edx, 0x3020
mov rcx, rdi
call fcn.1400054d4
nop
mov edx, 0x3020
mov rcx, rsi
call fcn.1400054d4
nop
mov rdx, qword [rbp - 0x50]
cmp rdx, 7
jbe 0x1400036e6
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp - 0x68]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400036e1
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x1400036e1
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1400054d4
mov rax, qword [rsp + 0x78]
jmp 0x140003702
lea rdx, str.Error:_failed_to_retrieve_driver_version__do_you_have_recent_NV_drivers_installed__n
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.1400039f0
xor eax, eax
mov rcx, qword [rbp + 0x1f0]
xor rcx, rsp
call fcn.140005470
lea r11, [rsp + 0x300]
mov rbx, qword [r11 + 0x30]
mov rsi, qword [r11 + 0x38]
mov rdi, qword [r11 + 0x40]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rbp
ret
call fcn.1400012a0
nop
call fcn.140001340
int3
call fcn.140001340
nop
call fcn.140001340
int3
call fcn.1400012a0
nop
call fcn.1400012a0
int3