Function at 0x1400587f0
Capabilities:
Delete registry key
Persist via run registry key
Persist via windows service
Set registry value

Disassembly:
mov qword [rsp + 8], rbx
push rbp
lea rbp, [rsp - 0x57]
sub rsp, 0xb0
mov rax, qword [0x1400f80c0]
xor rax, rsp
mov qword [rbp + 0x47], rax
mov dword [rbp + 0x3f], 1
xorps xmm0, xmm0
movups xmmword [rbp + 0x17], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp + 0x27], xmm1
mov r8d, reloc.WS2_32.dll_recv
lea rdx, str.PowerMizerEnable
lea rcx, [rbp + 0x17]
call fcn.14000c490
nop
xorps xmm0, xmm0
movups xmmword [rbp - 9], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp + 7], xmm1
mov r8d, Ordinal_79
lea rdx, str.SystemControlSet001ControlClass4d36e968_e325_11ce_bfc1_08002be103180000
lea rcx, [rbp - 9]
call fcn.14000c490
lea rdx, [rbp - 9]
cmp qword [rbp + 0xf], 0xf
cmova rdx, qword [rbp - 9]
xor ebx, ebx
mov qword [rsp + 0x40], rbx
lea rax, [rbp + 0x37]
mov qword [rsp + 0x38], rax
mov qword [rsp + 0x30], rbx
mov dword [rsp + 0x28], 2
mov dword [rsp + 0x20], ebx
xor r9d, r9d
xor r8d, r8d
mov rcx, 0xffffffff80000002
call qword [sym.imp.ADVAPI32.dll_RegCreateKeyExA]
test eax, eax
jne 0x1400588e2
lea rdx, [rbp + 0x17]
cmp qword [rbp + 0x2f], 0xf
cmova rdx, qword [rbp + 0x17]
mov dword [rsp + 0x28], 4
lea rax, [rbp + 0x3f]
mov qword [rsp + 0x20], rax
lea r9d, [rbx + 4]
xor r8d, r8d
mov rcx, qword [rbp + 0x37]
call qword [sym.imp.ADVAPI32.dll_RegSetValueExA]
mov rcx, qword [rbp + 0x37]
call qword [sym.imp.ADVAPI32.dll_RegCloseKey]
mov rdx, qword [rbp + 0xf]
cmp rdx, 0xf
jbe 0x140058920
inc rdx
mov rcx, qword [rbp - 9]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14005891b
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14005891b
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1400c6110
movdqa xmm0, xmmword [0x1400e4600]
movdqu xmmword [rbp + 7], xmm0
mov byte [rbp - 9], bl
mov rdx, qword [rbp + 0x2f]
cmp rdx, 0xf
jbe 0x14005896e
inc rdx
mov rcx, qword [rbp + 0x17]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140058969
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140058969
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1400c6110
xorps xmm0, xmm0
movups xmmword [rbp + 0x17], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp + 0x27], xmm1
mov r8d, reloc.WS2_32.dll_ntohs
lea rdx, str.PowerMizerLevel
lea rcx, [rbp + 0x17]
call fcn.14000c490
nop
xorps xmm0, xmm0
movups xmmword [rbp - 9], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp + 7], xmm1
mov r8d, Ordinal_79
lea rdx, str.SystemControlSet001ControlClass4d36e968_e325_11ce_bfc1_08002be103180000
lea rcx, [rbp - 9]
call fcn.14000c490
lea rdx, [rbp - 9]
cmp qword [rbp + 0xf], 0xf
cmova rdx, qword [rbp - 9]
mov qword [rsp + 0x40], rbx
lea rax, [rbp + 0x37]
mov qword [rsp + 0x38], rax
mov qword [rsp + 0x30], rbx
mov dword [rsp + 0x28], 2
mov dword [rsp + 0x20], ebx
xor r9d, r9d
xor r8d, r8d
mov rcx, 0xffffffff80000002
call qword [sym.imp.ADVAPI32.dll_RegCreateKeyExA]
test eax, eax
jne 0x140058a39
lea rdx, [rbp + 0x17]
cmp qword [rbp + 0x2f], 0xf
cmova rdx, qword [rbp + 0x17]
mov dword [rsp + 0x28], 4
lea rax, [rbp + 0x3f]
mov qword [rsp + 0x20], rax
mov r9d, 4
xor r8d, r8d
mov rcx, qword [rbp + 0x37]
call qword [sym.imp.ADVAPI32.dll_RegSetValueExA]
mov rcx, qword [rbp + 0x37]
call qword [sym.imp.ADVAPI32.dll_RegCloseKey]
mov rdx, qword [rbp + 0xf]
cmp rdx, 0xf
jbe 0x140058a77
inc rdx
mov rcx, qword [rbp - 9]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140058a72
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140058a72
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1400c6110
movdqa xmm0, xmmword [0x1400e4600]
movdqu xmmword [rbp + 7], xmm0
mov byte [rbp - 9], 0
mov rdx, qword [rbp + 0x2f]
cmp rdx, 0xf
jbe 0x140058ac6
inc rdx
mov rcx, qword [rbp + 0x17]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140058ac1
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140058ac1
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1400c6110
xorps xmm0, xmm0
movups xmmword [rbp + 0x17], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp + 0x27], xmm1
mov r8d, reloc.WS2_32.dll_recvfrom
lea rdx, str.PowerMizerLevelAC
lea rcx, [rbp + 0x17]
call fcn.14000c490
nop
xorps xmm0, xmm0
movups xmmword [rbp - 9], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp + 7], xmm1
mov r8d, Ordinal_79
lea rdx, str.SystemControlSet001ControlClass4d36e968_e325_11ce_bfc1_08002be103180000
lea rcx, [rbp - 9]
call fcn.14000c490
lea rdx, [rbp - 9]
cmp qword [rbp + 0xf], 0xf
cmova rdx, qword [rbp - 9]
mov qword [rsp + 0x40], rbx
lea rax, [rbp + 0x37]
mov qword [rsp + 0x38], rax
mov qword [rsp + 0x30], rbx
mov dword [rsp + 0x28], 2
mov dword [rsp + 0x20], ebx
xor r9d, r9d
xor r8d, r8d
mov rcx, 0xffffffff80000002
call qword [sym.imp.ADVAPI32.dll_RegCreateKeyExA]
test eax, eax
jne 0x140058b91
lea rdx, [rbp + 0x17]
cmp qword [rbp + 0x2f], 0xf
cmova rdx, qword [rbp + 0x17]
mov dword [rsp + 0x28], 4
lea rax, [rbp + 0x3f]
mov qword [rsp + 0x20], rax
mov r9d, 4
xor r8d, r8d
mov rcx, qword [rbp + 0x37]
call qword [sym.imp.ADVAPI32.dll_RegSetValueExA]
mov rcx, qword [rbp + 0x37]
call qword [sym.imp.ADVAPI32.dll_RegCloseKey]
mov rdx, qword [rbp + 0xf]
cmp rdx, 0xf
jbe 0x140058bcf
inc rdx
mov rcx, qword [rbp - 9]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140058bca
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140058bca
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1400c6110
movdqa xmm0, xmmword [0x1400e4600]
movdqu xmmword [rbp + 7], xmm0
mov byte [rbp - 9], 0
mov rdx, qword [rbp + 0x2f]
cmp rdx, 0xf
jbe 0x140058c1e
inc rdx
mov rcx, qword [rbp + 0x17]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140058c19
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140058c19
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1400c6110
xorps xmm0, xmm0
movups xmmword [rbp + 0x17], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp + 0x27], xmm1
mov r8d, Ordinal_30
lea rdx, str.PreferSystemMemoryContiguous
lea rcx, [rbp + 0x17]
call fcn.14000c490
nop
xorps xmm0, xmm0
movups xmmword [rbp - 9], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp + 7], xmm1
mov r8d, Ordinal_79
lea rdx, str.SystemControlSet001ControlClass4d36e968_e325_11ce_bfc1_08002be103180000
lea rcx, [rbp - 9]
call fcn.14000c490
lea rdx, [rbp - 9]
cmp qword [rbp + 0xf], 0xf
cmova rdx, qword [rbp - 9]
mov qword [rsp + 0x40], rbx
lea rax, [rbp + 0x37]
mov qword [rsp + 0x38], rax
mov qword [rsp + 0x30], rbx
mov dword [rsp + 0x28], 2
mov dword [rsp + 0x20], ebx
xor r9d, r9d
xor r8d, r8d
mov rcx, 0xffffffff80000002
call qword [sym.imp.ADVAPI32.dll_RegCreateKeyExA]
test eax, eax
jne 0x140058ce9
lea rdx, [rbp + 0x17]
cmp qword [rbp + 0x2f], 0xf
cmova rdx, qword [rbp + 0x17]
mov dword [rsp + 0x28], 4
lea rax, [rbp + 0x3f]
mov qword [rsp + 0x20], rax
mov r9d, 4
xor r8d, r8d
mov rcx, qword [rbp + 0x37]
call qword [sym.imp.ADVAPI32.dll_RegSetValueExA]
mov rcx, qword [rbp + 0x37]
call qword [sym.imp.ADVAPI32.dll_RegCloseKey]
mov rdx, qword [rbp + 0xf]
cmp rdx, 0xf
jbe 0x140058d27
inc rdx
mov rcx, qword [rbp - 9]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140058d22
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140058d22
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1400c6110
movdqa xmm0, xmmword [0x1400e4600]
movdqu xmmword [rbp + 7], xmm0
mov byte [rbp - 9], 0
mov rdx, qword [rbp + 0x2f]
cmp rdx, 0xf
jbe 0x140058d76
inc rdx
mov rcx, qword [rbp + 0x17]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140058d71
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140058d71
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1400c6110
mov dword [rbp + 0x3f], 0x2222
xorps xmm0, xmm0
movups xmmword [rbp + 0x17], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp + 0x27], xmm1
mov r8d, recvfrom
lea rdx, str.PerfLevelSrc
lea rcx, [rbp + 0x17]
call fcn.14000c490
nop
xorps xmm0, xmm0
movups xmmword [rbp - 9], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp + 7], xmm1
mov r8d, Ordinal_79
lea rdx, str.SystemControlSet001ControlClass4d36e968_e325_11ce_bfc1_08002be103180000
lea rcx, [rbp - 9]
call fcn.14000c490
lea rdx, [rbp - 9]
cmp qword [rbp + 0xf], 0xf
cmova rdx, qword [rbp - 9]
mov qword [rsp + 0x40], rbx
lea rax, [rbp + 0x37]
mov qword [rsp + 0x38], rax
mov qword [rsp + 0x30], rbx
mov dword [rsp + 0x28], 2
mov dword [rsp + 0x20], ebx
xor r9d, r9d
xor r8d, r8d
mov rcx, 0xffffffff80000002
call qword [sym.imp.ADVAPI32.dll_RegCreateKeyExA]
test eax, eax
jne 0x140058e48
lea rdx, [rbp + 0x17]
cmp qword [rbp + 0x2f], 0xf
cmova rdx, qword [rbp + 0x17]
mov dword [rsp + 0x28], 4
lea rax, [rbp + 0x3f]
mov qword [rsp + 0x20], rax
mov r9d, 4
xor r8d, r8d
mov rcx, qword [rbp + 0x37]
call qword [sym.imp.ADVAPI32.dll_RegSetValueExA]
mov rcx, qword [rbp + 0x37]
call qword [sym.imp.ADVAPI32.dll_RegCloseKey]
mov rdx, qword [rbp + 0xf]
cmp rdx, 0xf
jbe 0x140058e86
inc rdx
mov rcx, qword [rbp - 9]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140058e81
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140058e81
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1400c6110
movdqa xmm0, xmmword [0x1400e4600]
movdqu xmmword [rbp + 7], xmm0
mov byte [rbp - 9], 0
mov rdx, qword [rbp + 0x2f]
cmp rdx, 0xf
jbe 0x140058ed5
inc rdx
mov rcx, qword [rbp + 0x17]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140058ed0
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140058ed0
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1400c6110
xorps xmm0, xmm0
movups xmmword [rbp + 0x17], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp + 0x27], xmm1
mov r8d, recvfrom
lea rdx, str.PerfLevelSrc
lea rcx, [rbp + 0x17]
call fcn.14000c490
nop
xorps xmm0, xmm0
movups xmmword [rbp - 9], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp + 7], xmm1
mov r8d, reloc.WLDAP32.dll_Ordinal_50
lea rdx, str.SoftwareNVIDIA_CorporationNvControlPanel2Client
lea rcx, [rbp - 9]
call fcn.14000c490
lea rdx, [rbp - 9]
cmp qword [rbp + 0xf], 0xf
cmova rdx, qword [rbp - 9]
mov qword [rsp + 0x40], rbx
lea rax, [rbp + 0x37]
mov qword [rsp + 0x38], rax
mov qword [rsp + 0x30], rbx
mov dword [rsp + 0x28], 2
mov dword [rsp + 0x20], ebx
xor r9d, r9d
xor r8d, r8d
mov rcx, 0xffffffff80000002
call qword [sym.imp.ADVAPI32.dll_RegCreateKeyExA]
test eax, eax
jne 0x140058fa0
lea rdx, [rbp + 0x17]
cmp qword [rbp + 0x2f], 0xf
cmova rdx, qword [rbp + 0x17]
mov dword [rsp + 0x28], 4
lea rax, [rbp + 0x3f]
mov qword [rsp + 0x20], rax
mov r9d, 4
xor r8d, r8d
mov rcx, qword [rbp + 0x37]
call qword [sym.imp.ADVAPI32.dll_RegSetValueExA]
mov rcx, qword [rbp + 0x37]
call qword [sym.imp.ADVAPI32.dll_RegCloseKey]
mov rdx, qword [rbp + 0xf]
cmp rdx, 0xf
jbe 0x140058fde
inc rdx
mov rcx, qword [rbp - 9]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140058fd9
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140058fd9
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1400c6110
movdqa xmm0, xmmword [0x1400e4600]
movdqu xmmword [rbp + 7], xmm0
mov byte [rbp - 9], 0
mov rdx, qword [rbp + 0x2f]
cmp rdx, 0xf
jbe 0x14005902d
inc rdx
mov rcx, qword [rbp + 0x17]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140059028
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140059028
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1400c6110
xorps xmm0, xmm0
movups xmmword [rbp + 0x17], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp + 0x27], xmm1
mov r8d, recvfrom
lea rdx, str.PerfLevelSrc
lea rcx, [rbp + 0x17]
call fcn.14000c490
nop
xorps xmm0, xmm0
movups xmmword [rbp - 9], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp + 7], xmm1
mov r8d, Ordinal_41
lea rdx, str.SoftwareNVIDIA_CorporationGlobalFTS
lea rcx, [rbp - 9]
call fcn.14000c490
lea rdx, [rbp - 9]
cmp qword [rbp + 0xf], 0xf
cmova rdx, qword [rbp - 9]
mov qword [rsp + 0x40], rbx
lea rax, [rbp + 0x37]
mov qword [rsp + 0x38], rax
mov qword [rsp + 0x30], rbx
mov dword [rsp + 0x28], 2
mov dword [rsp + 0x20], ebx
xor r9d, r9d
xor r8d, r8d
mov rcx, 0xffffffff80000002
call qword [sym.imp.ADVAPI32.dll_RegCreateKeyExA]
test eax, eax
jne 0x1400590f8
lea rdx, [rbp + 0x17]
cmp qword [rbp + 0x2f], 0xf
cmova rdx, qword [rbp + 0x17]
mov dword [rsp + 0x28], 4
lea rax, [rbp + 0x3f]
mov qword [rsp + 0x20], rax
mov r9d, 4
xor r8d, r8d
mov rcx, qword [rbp + 0x37]
call qword [sym.imp.ADVAPI32.dll_RegSetValueExA]
mov rcx, qword [rbp + 0x37]
call qword [sym.imp.ADVAPI32.dll_RegCloseKey]
mov rdx, qword [rbp + 0xf]
cmp rdx, 0xf
jbe 0x140059136
inc rdx
mov rcx, qword [rbp - 9]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140059131
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140059131
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1400c6110
movdqa xmm0, xmmword [0x1400e4600]
movdqu xmmword [rbp + 7], xmm0
mov byte [rbp - 9], 0
mov rdx, qword [rbp + 0x2f]
cmp rdx, 0xf
jbe 0x140059185
inc rdx
mov rcx, qword [rbp + 0x17]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140059180
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140059180
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1400c6110
xorps xmm0, xmm0
movups xmmword [rbp + 0x17], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp + 0x27], xmm1
mov r8d, recvfrom
lea rdx, str.PerfLevelSrc
lea rcx, [rbp + 0x17]
call fcn.14000c490
nop
xorps xmm0, xmm0
movups xmmword [rbp - 9], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp + 7], xmm1
mov r8d, reloc.WS2_32.dll_gethostname
lea rdx, str.SystemCurrentControlSetServices_nvlddmkmGlobalNVTweak
lea rcx, [rbp - 9]
call fcn.14000c490
lea rdx, [rbp - 9]
cmp qword [rbp + 0xf], 0xf
cmova rdx, qword [rbp - 9]
mov qword [rsp + 0x40], rbx
lea rax, [rbp + 0x37]
mov qword [rsp + 0x38], rax
mov qword [rsp + 0x30], rbx
mov dword [rsp + 0x28], 2
mov dword [rsp + 0x20], ebx
xor r9d, r9d
xor r8d, r8d
mov rcx, 0xffffffff80000002
call qword [sym.imp.ADVAPI32.dll_RegCreateKeyExA]
test eax, eax
jne 0x140059250
lea rdx, [rbp + 0x17]
cmp qword [rbp + 0x2f], 0xf
cmova rdx, qword [rbp + 0x17]
mov dword [rsp + 0x28], 4
lea rax, [rbp + 0x3f]
mov qword [rsp + 0x20], rax
mov r9d, 4
xor r8d, r8d
mov rcx, qword [rbp + 0x37]
call qword [sym.imp.ADVAPI32.dll_RegSetValueExA]
mov rcx, qword [rbp + 0x37]
call qword [sym.imp.ADVAPI32.dll_RegCloseKey]
mov rdx, qword [rbp + 0xf]
cmp rdx, 0xf
jbe 0x14005928e
inc rdx
mov rcx, qword [rbp - 9]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140059289
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140059289
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1400c6110
movdqa xmm0, xmmword [0x1400e4600]
movdqu xmmword [rbp + 7], xmm0
mov byte [rbp - 9], 0
mov rdx, qword [rbp + 0x2f]
cmp rdx, 0xf
jbe 0x1400592dd
inc rdx
mov rcx, qword [rbp + 0x17]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400592d8
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x1400592d8
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1400c6110
xorps xmm0, xmm0
movups xmmword [rbp + 0x17], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp + 0x27], xmm1
mov r8d, recvfrom
lea rdx, str.PerfLevelSrc
lea rcx, [rbp + 0x17]
call fcn.14000c490
nop
xorps xmm0, xmm0
movups xmmword [rbp - 9], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp + 7], xmm1
mov r8d, reloc.WLDAP32.dll_Ordinal_46
lea rdx, str.SystemCurrentControlSetServices_nvlddmkmFTS
lea rcx, [rbp - 9]
call fcn.14000c490
lea rdx, [rbp - 9]
cmp qword [rbp + 0xf], 0xf
cmova rdx, qword [rbp - 9]
mov qword [rsp + 0x40], rbx
lea rax, [rbp + 0x37]
mov qword [rsp + 0x38], rax
mov qword [rsp + 0x30], rbx
mov dword [rsp + 0x28], 2
mov dword [rsp + 0x20], ebx
xor r9d, r9d
xor r8d, r8d
mov rcx, 0xffffffff80000002
call qword [sym.imp.ADVAPI32.dll_RegCreateKeyExA]
test eax, eax
jne 0x1400593a8
lea rdx, [rbp + 0x17]
cmp qword [rbp + 0x2f], 0xf
cmova rdx, qword [rbp + 0x17]
mov dword [rsp + 0x28], 4
lea rax, [rbp + 0x3f]
mov qword [rsp + 0x20], rax
mov r9d, 4
xor r8d, r8d
mov rcx, qword [rbp + 0x37]
call qword [sym.imp.ADVAPI32.dll_RegSetValueExA]
mov rcx, qword [rbp + 0x37]
call qword [sym.imp.ADVAPI32.dll_RegCloseKey]
mov rdx, qword [rbp + 0xf]
cmp rdx, 0xf
jbe 0x1400593e6
inc rdx
mov rcx, qword [rbp - 9]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400593e1
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x1400593e1
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1400c6110
movdqa xmm0, xmmword [0x1400e4600]
movdqu xmmword [rbp + 7], xmm0
mov byte [rbp - 9], 0
mov rdx, qword [rbp + 0x2f]
cmp rdx, 0xf
jbe 0x140059435
inc rdx
mov rcx, qword [rbp + 0x17]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140059430
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140059430
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1400c6110
xorps xmm0, xmm0
movups xmmword [rbp + 0x17], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp + 0x27], xmm1
mov r8d, recvfrom
lea rdx, str.PerfLevelSrc
lea rcx, [rbp + 0x17]
call fcn.14000c490
nop
xorps xmm0, xmm0
movups xmmword [rbp - 9], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp + 7], xmm1
mov r8d, Ordinal_46
lea rdx, str.SystemCurrentControlSetServices_nvlddmkm
lea rcx, [rbp - 9]
call fcn.14000c490
lea rdx, [rbp - 9]
cmp qword [rbp + 0xf], 0xf
cmova rdx, qword [rbp - 9]
mov qword [rsp + 0x40], rbx
lea rax, [rbp + 0x37]
mov qword [rsp + 0x38], rax
mov qword [rsp + 0x30], rbx
mov dword [rsp + 0x28], 2
mov dword [rsp + 0x20], ebx
xor r9d, r9d
xor r8d, r8d
mov rcx, 0xffffffff80000002
call qword [sym.imp.ADVAPI32.dll_RegCreateKeyExA]
test eax, eax
jne 0x140059500
lea rdx, [rbp + 0x17]
cmp qword [rbp + 0x2f], 0xf
cmova rdx, qword [rbp + 0x17]
mov dword [rsp + 0x28], 4
lea rax, [rbp + 0x3f]
mov qword [rsp + 0x20], rax
mov r9d, 4
xor r8d, r8d
mov rcx, qword [rbp + 0x37]
call qword [sym.imp.ADVAPI32.dll_RegSetValueExA]
mov rcx, qword [rbp + 0x37]
call qword [sym.imp.ADVAPI32.dll_RegCloseKey]
mov rdx, qword [rbp + 0xf]
cmp rdx, 0xf
jbe 0x14005953e
inc rdx
mov rcx, qword [rbp - 9]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140059539
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140059539
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1400c6110
movdqa xmm0, xmmword [0x1400e4600]
movdqu xmmword [rbp + 7], xmm0
mov byte [rbp - 9], 0
mov rdx, qword [rbp + 0x2f]
cmp rdx, 0xf
jbe 0x14005958d
inc rdx
mov rcx, qword [rbp + 0x17]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140059588
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140059588
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1400c6110
xorps xmm0, xmm0
movups xmmword [rbp - 9], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp + 7], xmm1
mov r8d, Ordinal_60
lea rdx, str.SoftwareMicrosoftWindowsCurrentVersionRunNvBackend
lea rcx, [rbp - 9]
call fcn.14000c490
lea rdx, [rbp - 9]
cmp qword [rbp + 0xf], 0xf
cmova rdx, qword [rbp - 9]
lea rax, [rbp + 0x37]
mov qword [rsp + 0x20], rax
mov r9d, 0xf003f
xor r8d, r8d
mov rcx, 0xffffffff80000002
call qword [sym.imp.ADVAPI32.dll_RegOpenKeyExA]
test eax, eax
jne 0x140059611
lea rdx, [rbp - 9]
cmp qword [rbp + 0xf], 0xf
cmova rdx, qword [rbp - 9]
xor r9d, r9d
mov rcx, 0xffffffff80000002
mov r8d, 0x100
call qword [sym.imp.ADVAPI32.dll_RegDeleteKeyExA]
mov rcx, qword [rbp + 0x37]
call qword [sym.imp.ADVAPI32.dll_RegCloseKey]
mov rdx, qword [rbp + 0xf]
cmp rdx, 0xf
jbe 0x14005964f
inc rdx
mov rcx, qword [rbp - 9]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14005964a
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14005964a
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1400c6110
xorps xmm0, xmm0
movups xmmword [rbp + 0x17], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp + 0x27], xmm1
mov r8d, 0x5b
lea rdx, str.schtasks__change__disable__tn__NvTmRep_CrashReport1_B2FE1952_0186_46C3_BAEC_A80AA35AC5B8_
lea rcx, [rbp + 0x17]
call fcn.14000c490
lea rdx, [rbp + 0x17]
call fcn.1400153e0
mov rdx, qword [rbp + 0x2f]
cmp rdx, 0xf
jbe 0x1400596bb
inc rdx
mov rcx, qword [rbp + 0x17]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400596b6
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x1400596b6
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1400c6110
xorps xmm0, xmm0
movups xmmword [rbp + 0x17], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp + 0x27], xmm1
mov r8d, 0x5b
lea rdx, str.schtasks__change__disable__tn__NvTmRep_CrashReport2_B2FE1952_0186_46C3_BAEC_A80AA35AC5B8_
lea rcx, [rbp + 0x17]
call fcn.14000c490
lea rdx, [rbp + 0x17]
call fcn.1400153e0
mov rdx, qword [rbp + 0x2f]
cmp rdx, 0xf
jbe 0x140059727
inc rdx
mov rcx, qword [rbp + 0x17]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140059722
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140059722
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1400c6110
xorps xmm0, xmm0
movups xmmword [rbp + 0x17], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp + 0x27], xmm1
mov r8d, 0x5b
lea rdx, str.schtasks__change__disable__tn__NvTmRep_CrashReport3_B2FE1952_0186_46C3_BAEC_A80AA35AC5B8_
lea rcx, [rbp + 0x17]
call fcn.14000c490
lea rdx, [rbp + 0x17]
call fcn.1400153e0
mov rdx, qword [rbp + 0x2f]
cmp rdx, 0xf
jbe 0x140059793
inc rdx
mov rcx, qword [rbp + 0x17]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14005978e
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14005978e
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1400c6110
xorps xmm0, xmm0
movups xmmword [rbp + 0x17], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp + 0x27], xmm1
mov r8d, 0x5b
lea rdx, str.schtasks__change__disable__tn__NvTmRep_CrashReport4_B2FE1952_0186_46C3_BAEC_A80AA35AC5B8_
lea rcx, [rbp + 0x17]
call fcn.14000c490
lea rdx, [rbp + 0x17]
call fcn.1400153e0
mov rdx, qword [rbp + 0x2f]
cmp rdx, 0xf
jbe 0x1400597ff
inc rdx
mov rcx, qword [rbp + 0x17]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400597fa
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x1400597fa
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1400c6110
mov rcx, qword [rbp + 0x47]
xor rcx, rsp
call fcn.1400c60f0
mov rbx, qword [rsp + 0xc0]
add rsp, 0xb0
pop rbp
ret