Function at 0x401320
Capabilities:
Capture network configuration via ipconfig
Delete volume shadow copies
Execute command
Schedule task via schtasks
Self delete
Set registry value

Disassembly:
push ebp
mov ebp, esp
and esp, 0xfffffff8
sub esp, 0x14
mov eax, dword [section..data]
xor eax, esp
mov dword [esp + 0x10], eax
mov ecx, dword [sym.imp.MSVCP140.dll_class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t___std::wcout]
mov edx, str.Starting_system_optimization..._n
push esi
call fcn.00401b30
mov esi, dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
push str.powercfg__setactive_SCHEME_MIN___nul_2_1
call esi
add esp, 4
push str.cmd.exe__c_del__q__f__temp____nul_2_1
call esi
add esp, 4
push str.cmd.exe__c_del__q__f_C:WindowsTemp___nul_2_1
call esi
add esp, 4
push str.ipconfig__flushdns___nul_2_1
call esi
add esp, 4
push str.wmic_pagefileset_where_name_C:pagefile.sys__set_InitialSize2048_MaximumSize2048___nul_2_1
call esi
add esp, 4
push str.netsh_interface_ip_set_dns__Wi_Fi__static_8.8.8.8___nul_2_1
call esi
add esp, 4
push str.netsh_interface_ip_add_dns__Wi_Fi__8.8.4.4_index2___nul_2_1
call esi
add esp, 4
push str.powercfg__h_off___nul_2_1
call esi
add esp, 4
push str.vssadmin_resize_shadowstorage__onC:__forC:__maxsize5____nul_2_1
call esi
add esp, 4
push str.dism__Online__Disable_Feature__FeatureName:Windows_Search___nul_2_1
call esi
add esp, 4
lea eax, [esp + 4]
push eax
push 2
push 0
push str.SoftwareMicrosoftWindowsCurrentVersionExplorerAdvanced
push 0x80000001
call dword [sym.imp.ADVAPI32.dll_RegOpenKeyExW]
test eax, eax
jne 0x4013f8
push 4
lea eax, [esp + 0xc]
mov dword [esp + 0xc], 2
push eax
push 4
push 0
push str.VisualFXSetting
push dword [esp + 0x18]
call dword [sym.imp.ADVAPI32.dll_RegSetValueExW]
push dword [esp + 4]
call dword [sym.imp.ADVAPI32.dll_RegCloseKey]
push str.RunDll32.exe_InetCpl.cpl_ClearMyTracksByProcess_255___nul_2_1
call esi
add esp, 4
push str.del__q__f___LOCALAPPDATA_GoogleChromeUser_DataDefaultCache____nul_2_1
call esi
add esp, 4
push str.del__q__f___LOCALAPPDATA_MicrosoftEdgeUser_DataDefaultCache____nul_2_1
call esi
add esp, 4
push str.schtasks__Change__TN__MicrosoftWindowsWindows_Error_ReportingQueuetoSubmit___DISABLE___nul_2_1
call esi
add esp, 4
push str.schtasks__Change__TN__MicrosoftWindowsWindows_Error_ReportingPostBugs___DISABLE___nul_2_1
call esi
add esp, 4
push str.cleanmgr__sagerun:1___nul_2_1
call esi
add esp, 4
push str.powercfg__setactive_SCHEME_MIN___nul_2_1
call esi
add esp, 4
push str.defrag_C:__w___nul_2_1
call esi
add esp, 4
push str.powershell__command__Get_AppxPackage__Where_Object____.Name__notlike_Spotify__and___.Name__notlike_Microsoft.WindowsStore__and___.Name__notlike_Microsoft.___Remove_AppxPackage____null_2_1_
call esi
add esp, 4
push str.powercfg__change_monitor_timeout_ac_5___nul_2_1
call esi
add esp, 4
push str.powercfg__change_monitor_timeout_dc_5___nul_2_1
call esi
add esp, 4
push str.powercfg__change_standby_timeout_ac_10___nul_2_1
call esi
add esp, 4
push str.powercfg__change_standby_timeout_dc_10___nul_2_1
call esi
add esp, 4
push str.powercfg__setacvalueindex_SCHEME_CURRENT_SUB_USB_USBSELECTIVE_Suspend_0___nul_2_1
call esi
add esp, 4
push str.powercfg__setdcvalueindex_SCHEME_CURRENT_SUB_USB_USBSELECTIVE_Suspend_0___nul_2_1
call esi
add esp, 4
push str.powercfg__apply___nul_2_1
call esi
add esp, 4
push str.sc_config__wuauserv__start_disabled___nul_2_1
call esi
add esp, 4
push str.sc_config__bits__start_disabled___nul_2_1
call esi
add esp, 4
push str.sc_config__Spooler__start_disabled___nul_2_1
call esi
add esp, 4
push str.nvidia_settings___assign_CurrentMetaModenvidia_auto_select_00__ForceFullCompositionPipeline__On____nul_2_1
call esi
add esp, 4
push str.powercfg__setacvalueindex_SCHEME_CURRENT_SUB_PROCESSOR_PROCTHROTTLEMAX_100___nul_2_1
call esi
add esp, 4
push str.powercfg__setdcvalueindex_SCHEME_CURRENT_SUB_PROCESSOR_PROCTHROTTLEMAX_100___nul_2_1
call esi
add esp, 4
push str.powershell__command__Start_Process_powershell__ArgumentList_Get_WindowsUpdate__AcceptAll__Install__Verb_RunAs___nul_2_1_
call esi
mov ecx, dword [sym.imp.MSVCP140.dll_class_std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t___std::wcout]
add esp, 4
mov edx, str.System_optimization_completed._n
call fcn.00401b30
lea ecx, [esp + 8]
mov dword [esp + 8], 1
mov dword [esp + 0xc], 0
call fcn.00401d90
mov ecx, dword [esp + 0x14]
pop esi
xor ecx, esp
call fcn.004024b5
mov esp, ebp
pop ebp
ret