Function at 0x14004d5a0
Capabilities:
Create process on windows
Set registry value

Disassembly:
mov rax, rsp
mov qword [rax + 0x10], rbx
mov qword [rax + 0x18], rdi
push rbp
lea rbp, [rax - 0x5f]
sub rsp, 0xb0
movaps xmmword [rax - 0x18], xmm6
xor ebx, ebx
lea rdx, str.Starting_INTEL_GPU_optmization...
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.14004eef0
lea rdx, [0x14004f0d0]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
xorps xmm0, xmm0
movups xmmword [rbp - 0x19], xmm0
mov ecx, reloc.WLDAP32.dll_Ordinal_32
call fcn.1400bd5bc
mov qword [rbp - 0x19], rax
mov qword [rbp - 9], reloc.WS2_32.dll_send
mov qword [rbp - 1], Ordinal_33
movups xmm0, xmmword [str.HKLMSOFTWAREIntel]
movups xmmword [rax], xmm0
movzx ecx, word [0x1400ef318]
mov word [rax + 0x10], cx
movzx ecx, byte [0x1400ef31a]
mov byte [rax + 0x12], cl
mov byte [rax + 0x13], bl
mov qword [rsp + 0x30], reloc.WS2_32.dll_send
mov qword [rsp + 0x28], rax
mov qword [rsp + 0x20], 9
lea r9, str.reg_add__
lea r8, [rbp - 0x19]
movzx edx, byte [rbp + 0x67]
lea rcx, [rbp + 0x27]
call fcn.14003f510
nop
mov r8d, 0x41
lea rdx, str.___v__Disable_OverlayDSQualityEnhancement___t_REG_DWORD__d__1___f
lea rcx, [rbp + 0x27]
call fcn.14003e8c0
xorps xmm0, xmm0
movups xmmword [rbp + 7], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp + 0x17], xmm1
movups xmm0, xmmword [rax]
movups xmmword [rbp + 7], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rbp + 0x17], xmm1
mov qword [rax + 0x10], rbx
mov qword [rax + 0x18], reloc.WS2_32.dll_ntohs
mov byte [rax], bl
lea r9, [rbp + 7]
cmp qword [rbp + 0x1f], 0xf
cmova r9, qword [rbp + 7]
mov dword [rsp + 0x28], ebx
mov qword [rsp + 0x20], rbx
lea r8, str.cmd.exe
lea rdx, str.runas
xor ecx, ecx
call qword [sym.imp.SHELL32.dll_ShellExecuteA]
mov rdx, qword [rbp + 0x1f]
cmp rdx, 0xf
jbe 0x14004d704
inc rdx
mov rcx, qword [rbp + 7]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14004d6ff
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14004d6ff
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1400bd908
movdqa xmm6, xmmword [0x1400f17b0]
movdqu xmmword [rbp + 0x17], xmm6
mov byte [rbp + 7], 0
mov rdx, qword [rbp + 0x3f]
cmp rdx, 0xf
jbe 0x14004d753
inc rdx
mov rcx, qword [rbp + 0x27]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14004d74e
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14004d74e
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1400bd908
mov dword [rsp + 0x28], ebx
mov qword [rsp + 0x20], rbx
lea r9, str.reg_add__HKLMSOFTWAREIntelGMM___v__DedicatedSegmentSize___t_REG_DWORD__d__512___f
lea r8, str.cmd.exe
lea rdx, str.runas
xor ecx, ecx
call qword [sym.imp.SHELL32.dll_ShellExecuteA]
movabs rdi, 0x7fffffffffffffff
mov rax, rdi
mov rcx, qword [rbp - 9]
sub rax, rcx
cmp rax, 9
jb 0x14004e252
lea rax, [rbp - 0x19]
cmp qword [rbp - 1], 0xf
cmova rax, qword [rbp - 0x19]
mov qword [rsp + 0x30], rcx
mov qword [rsp + 0x28], rax
mov qword [rsp + 0x20], 9
lea r9, str.reg_add__
lea r8, [rbp - 0x19]
movzx edx, byte [rbp + 0x67]
lea rcx, [rbp + 0x27]
call fcn.14003f510
nop
mov r8d, reloc.WLDAP32.dll_Ordinal_50
lea rdx, str.___v__IncreaseFixedSegment___t_REG_DWORD__d__1___f
lea rcx, [rbp + 0x27]
call fcn.14003e8c0
xorps xmm0, xmm0
movups xmmword [rbp + 7], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp + 0x17], xmm1
movups xmm0, xmmword [rax]
movups xmmword [rbp + 7], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rbp + 0x17], xmm1
mov qword [rax + 0x10], rbx
mov qword [rax + 0x18], reloc.WS2_32.dll_ntohs
mov byte [rax], 0
lea r9, [rbp + 7]
cmp qword [rbp + 0x1f], 0xf
cmova r9, qword [rbp + 7]
mov dword [rsp + 0x28], ebx
mov qword [rsp + 0x20], rbx
lea r8, str.cmd.exe
lea rdx, str.runas
xor ecx, ecx
call qword [sym.imp.SHELL32.dll_ShellExecuteA]
mov rdx, qword [rbp + 0x1f]
cmp rdx, 0xf
jbe 0x14004d87f
inc rdx
mov rcx, qword [rbp + 7]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14004d87a
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14004d87a
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1400bd908
movdqu xmmword [rbp + 0x17], xmm6
mov byte [rbp + 7], 0
mov rdx, qword [rbp + 0x3f]
cmp rdx, 0xf
jbe 0x14004d8c6
inc rdx
mov rcx, qword [rbp + 0x27]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14004d8c1
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14004d8c1
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1400bd908
mov rax, rdi
mov rcx, qword [rbp - 9]
sub rax, rcx
cmp rax, 9
jb 0x14004e258
lea rax, [rbp - 0x19]
cmp qword [rbp - 1], 0xf
cmova rax, qword [rbp - 0x19]
mov qword [rsp + 0x30], rcx
mov qword [rsp + 0x28], rax
mov qword [rsp + 0x20], 9
lea r9, str.reg_add__
lea r8, [rbp - 0x19]
movzx edx, byte [rbp + 0x67]
lea rcx, [rbp + 0x27]
call fcn.14003f510
nop
mov r8d, Ordinal_50
lea rdx, str.___v__AdaptiveVsyncEnable___t_REG_DWORD__d__0___f
lea rcx, [rbp + 0x27]
call fcn.14003e8c0
xorps xmm0, xmm0
movups xmmword [rbp + 7], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp + 0x17], xmm1
movups xmm0, xmmword [rax]
movups xmmword [rbp + 7], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rbp + 0x17], xmm1
mov qword [rax + 0x10], rbx
mov qword [rax + 0x18], reloc.WS2_32.dll_ntohs
mov byte [rax], 0
lea r9, [rbp + 7]
cmp qword [rbp + 0x1f], 0xf
cmova r9, qword [rbp + 7]
mov dword [rsp + 0x28], ebx
mov qword [rsp + 0x20], rbx
lea r8, str.cmd.exe
lea rdx, str.runas
xor ecx, ecx
call qword [sym.imp.SHELL32.dll_ShellExecuteA]
mov rdx, qword [rbp + 0x1f]
cmp rdx, 0xf
jbe 0x14004d9c2
inc rdx
mov rcx, qword [rbp + 7]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14004d9bd
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14004d9bd
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1400bd908
movdqu xmmword [rbp + 0x17], xmm6
mov byte [rbp + 7], 0
mov rdx, qword [rbp + 0x3f]
cmp rdx, 0xf
jbe 0x14004da09
inc rdx
mov rcx, qword [rbp + 0x27]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14004da04
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14004da04
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1400bd908
mov rax, rdi
mov rcx, qword [rbp - 9]
sub rax, rcx
cmp rax, 9
jb 0x14004e25e
lea rax, [rbp - 0x19]
cmp qword [rbp - 1], 0xf
cmova rax, qword [rbp - 0x19]
mov qword [rsp + 0x30], rcx
mov qword [rsp + 0x28], rax
mov qword [rsp + 0x20], 9
lea r9, str.reg_add__
lea r8, [rbp - 0x19]
movzx edx, byte [rbp + 0x67]
lea rcx, [rbp + 0x27]
call fcn.14003f510
nop
mov r8d, Ordinal_46
lea rdx, str.___v__DisablePFonDP___t_REG_DWORD__d__1___f
lea rcx, [rbp + 0x27]
call fcn.14003e8c0
xorps xmm0, xmm0
movups xmmword [rbp + 7], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp + 0x17], xmm1
movups xmm0, xmmword [rax]
movups xmmword [rbp + 7], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rbp + 0x17], xmm1
mov qword [rax + 0x10], rbx
mov qword [rax + 0x18], reloc.WS2_32.dll_ntohs
mov byte [rax], 0
lea r9, [rbp + 7]
cmp qword [rbp + 0x1f], 0xf
cmova r9, qword [rbp + 7]
mov dword [rsp + 0x28], ebx
mov qword [rsp + 0x20], rbx
lea r8, str.cmd.exe
lea rdx, str.runas
xor ecx, ecx
call qword [sym.imp.SHELL32.dll_ShellExecuteA]
mov rdx, qword [rbp + 0x1f]
cmp rdx, 0xf
jbe 0x14004db05
inc rdx
mov rcx, qword [rbp + 7]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14004db00
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14004db00
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1400bd908
movdqu xmmword [rbp + 0x17], xmm6
mov byte [rbp + 7], 0
mov rdx, qword [rbp + 0x3f]
cmp rdx, 0xf
jbe 0x14004db4c
inc rdx
mov rcx, qword [rbp + 0x27]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14004db47
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14004db47
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1400bd908
mov rax, rdi
mov rcx, qword [rbp - 9]
sub rax, rcx
cmp rax, 9
jb 0x14004e264
lea rax, [rbp - 0x19]
cmp qword [rbp - 1], 0xf
cmova rax, qword [rbp - 0x19]
mov qword [rsp + 0x30], rcx
mov qword [rsp + 0x28], rax
mov qword [rsp + 0x20], 9
lea r9, str.reg_add__
lea r8, [rbp - 0x19]
movzx edx, byte [rbp + 0x67]
lea rcx, [rbp + 0x27]
call fcn.14003f510
nop
mov r8d, gethostname
lea rdx, str.___v__EnableCompensationForDVI___t_REG_DWORD__d__1___f
lea rcx, [rbp + 0x27]
call fcn.14003e8c0
xorps xmm0, xmm0
movups xmmword [rbp + 7], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp + 0x17], xmm1
movups xmm0, xmmword [rax]
movups xmmword [rbp + 7], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rbp + 0x17], xmm1
mov qword [rax + 0x10], rbx
mov qword [rax + 0x18], reloc.WS2_32.dll_ntohs
mov byte [rax], 0
lea r9, [rbp + 7]
cmp qword [rbp + 0x1f], 0xf
cmova r9, qword [rbp + 7]
mov dword [rsp + 0x28], ebx
mov qword [rsp + 0x20], rbx
lea r8, str.cmd.exe
lea rdx, str.runas
xor ecx, ecx
call qword [sym.imp.SHELL32.dll_ShellExecuteA]
mov rdx, qword [rbp + 0x1f]
cmp rdx, 0xf
jbe 0x14004dc48
inc rdx
mov rcx, qword [rbp + 7]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14004dc43
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14004dc43
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1400bd908
movdqu xmmword [rbp + 0x17], xmm6
mov byte [rbp + 7], 0
mov rdx, qword [rbp + 0x3f]
cmp rdx, 0xf
jbe 0x14004dc8f
inc rdx
mov rcx, qword [rbp + 0x27]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14004dc8a
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14004dc8a
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1400bd908
mov rax, rdi
mov rcx, qword [rbp - 9]
sub rax, rcx
cmp rax, 9
jb 0x14004e26a
lea rax, [rbp - 0x19]
cmp qword [rbp - 1], 0xf
cmova rax, qword [rbp - 0x19]
mov qword [rsp + 0x30], rcx
mov qword [rsp + 0x28], rax
mov qword [rsp + 0x20], 9
lea r9, str.reg_add__
lea r8, [rbp - 0x19]
movzx edx, byte [rbp + 0x67]
lea rcx, [rbp + 0x27]
call fcn.14003f510
nop
mov r8d, gethostname
lea rdx, str.___v__NoFastLinkTrainingForeDP___t_REG_DWORD__d__0___f
lea rcx, [rbp + 0x27]
call fcn.14003e8c0
xorps xmm0, xmm0
movups xmmword [rbp + 7], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp + 0x17], xmm1
movups xmm0, xmmword [rax]
movups xmmword [rbp + 7], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rbp + 0x17], xmm1
mov qword [rax + 0x10], rbx
mov qword [rax + 0x18], reloc.WS2_32.dll_ntohs
mov byte [rax], 0
lea r9, [rbp + 7]
cmp qword [rbp + 0x1f], 0xf
cmova r9, qword [rbp + 7]
mov dword [rsp + 0x28], ebx
mov qword [rsp + 0x20], rbx
lea r8, str.cmd.exe
lea rdx, str.runas
xor ecx, ecx
call qword [sym.imp.SHELL32.dll_ShellExecuteA]
mov rdx, qword [rbp + 0x1f]
cmp rdx, 0xf
jbe 0x14004dd8b
inc rdx
mov rcx, qword [rbp + 7]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14004dd86
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14004dd86
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1400bd908
movdqu xmmword [rbp + 0x17], xmm6
mov byte [rbp + 7], 0
mov rdx, qword [rbp + 0x3f]
cmp rdx, 0xf
jbe 0x14004ddd2
inc rdx
mov rcx, qword [rbp + 0x27]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14004ddcd
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14004ddcd
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1400bd908
mov rax, rdi
mov rcx, qword [rbp - 9]
sub rax, rcx
cmp rax, 9
jb 0x14004e270
lea rax, [rbp - 0x19]
cmp qword [rbp - 1], 0xf
cmova rax, qword [rbp - 0x19]
mov qword [rsp + 0x30], rcx
mov qword [rsp + 0x28], rax
mov qword [rsp + 0x20], 9
lea r9, str.reg_add__
lea r8, [rbp - 0x19]
movzx edx, byte [rbp + 0x67]
lea rcx, [rbp + 0x27]
call fcn.14003f510
nop
mov r8d, reloc.WLDAP32.dll_Ordinal_46
lea rdx, str.___v__AllowDeepCStates___t_REG_DWORD__d__0___f
lea rcx, [rbp + 0x27]
call fcn.14003e8c0
xorps xmm0, xmm0
movups xmmword [rbp + 7], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp + 0x17], xmm1
movups xmm0, xmmword [rax]
movups xmmword [rbp + 7], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rbp + 0x17], xmm1
mov qword [rax + 0x10], rbx
mov qword [rax + 0x18], reloc.WS2_32.dll_ntohs
mov byte [rax], 0
lea r9, [rbp + 7]
cmp qword [rbp + 0x1f], 0xf
cmova r9, qword [rbp + 7]
mov dword [rsp + 0x28], ebx
mov qword [rsp + 0x20], rbx
lea r8, str.cmd.exe
lea rdx, str.runas
xor ecx, ecx
call qword [sym.imp.SHELL32.dll_ShellExecuteA]
mov rdx, qword [rbp + 0x1f]
cmp rdx, 0xf
jbe 0x14004dece
inc rdx
mov rcx, qword [rbp + 7]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14004dec9
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14004dec9
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1400bd908
movdqu xmmword [rbp + 0x17], xmm6
mov byte [rbp + 7], 0
mov rdx, qword [rbp + 0x3f]
cmp rdx, 0xf
jbe 0x14004df15
inc rdx
mov rcx, qword [rbp + 0x27]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14004df10
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14004df10
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1400bd908
mov rax, rdi
mov rcx, qword [rbp - 9]
sub rax, rcx
cmp rax, 9
jb 0x14004e276
lea rax, [rbp - 0x19]
cmp qword [rbp - 1], 0xf
cmova rax, qword [rbp - 0x19]
mov qword [rsp + 0x30], rcx
mov qword [rsp + 0x28], rax
mov qword [rsp + 0x20], 9
lea r9, str.reg_add__
lea r8, [rbp - 0x19]
movzx edx, byte [rbp + 0x67]
lea rcx, [rbp + 0x27]
call fcn.14003f510
nop
mov r8d, gethostname
lea rdx, str.___v__ACPowerPolicyVersion___t_REG_DWORD__d__16898___f
lea rcx, [rbp + 0x27]
call fcn.14003e8c0
xorps xmm0, xmm0
movups xmmword [rbp + 7], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp + 0x17], xmm1
movups xmm0, xmmword [rax]
movups xmmword [rbp + 7], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rbp + 0x17], xmm1
mov qword [rax + 0x10], rbx
mov qword [rax + 0x18], reloc.WS2_32.dll_ntohs
mov byte [rax], 0
lea r9, [rbp + 7]
cmp qword [rbp + 0x1f], 0xf
cmova r9, qword [rbp + 7]
mov dword [rsp + 0x28], ebx
mov qword [rsp + 0x20], rbx
lea r8, str.cmd.exe
lea rdx, str.runas
xor ecx, ecx
call qword [sym.imp.SHELL32.dll_ShellExecuteA]
mov rdx, qword [rbp + 0x1f]
cmp rdx, 0xf
jbe 0x14004e011
inc rdx
mov rcx, qword [rbp + 7]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14004e00c
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14004e00c
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1400bd908
movdqu xmmword [rbp + 0x17], xmm6
mov byte [rbp + 7], 0
mov rdx, qword [rbp + 0x3f]
cmp rdx, 0xf
jbe 0x14004e058
inc rdx
mov rcx, qword [rbp + 0x27]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14004e053
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14004e053
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1400bd908
mov rax, rdi
mov rcx, qword [rbp - 9]
sub rax, rcx
cmp rax, 9
jb 0x14004e24c
lea rax, [rbp - 0x19]
cmp qword [rbp - 1], 0xf
cmova rax, qword [rbp - 0x19]
mov qword [rsp + 0x30], rcx
mov qword [rsp + 0x28], rax
mov qword [rsp + 0x20], 9
lea r9, str.reg_add__
lea r8, [rbp - 0x19]
movzx edx, byte [rbp + 0x67]
lea rcx, [rbp + 0x27]
call fcn.14003f510
nop
mov r8d, gethostname
lea rdx, str.___v__DCPowerPolicyVersion___t_REG_DWORD__d__16642___f
lea rcx, [rbp + 0x27]
call fcn.14003e8c0
xorps xmm0, xmm0
movups xmmword [rbp + 7], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp + 0x17], xmm1
movups xmm0, xmmword [rax]
movups xmmword [rbp + 7], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rbp + 0x17], xmm1
mov qword [rax + 0x10], rbx
mov qword [rax + 0x18], reloc.WS2_32.dll_ntohs
mov byte [rax], 0
lea r9, [rbp + 7]
cmp qword [rbp + 0x1f], 0xf
cmova r9, qword [rbp + 7]
mov dword [rsp + 0x28], ebx
mov qword [rsp + 0x20], rbx
lea r8, str.cmd.exe
lea rdx, str.runas
xor ecx, ecx
call qword [sym.imp.SHELL32.dll_ShellExecuteA]
mov rdx, qword [rbp + 0x1f]
cmp rdx, 0xf
jbe 0x14004e154
inc rdx
mov rcx, qword [rbp + 7]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14004e14f
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14004e14f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1400bd908
movdqu xmmword [rbp + 0x17], xmm6
mov byte [rbp + 7], 0
mov rdx, qword [rbp + 0x3f]
cmp rdx, 0xf
jbe 0x14004e19b
inc rdx
mov rcx, qword [rbp + 0x27]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14004e196
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14004e196
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1400bd908
lea rdx, str.INTEL_GPU_optimization_completed.
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.14004eef0
lea rdx, [0x14004f0d0]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
lea rcx, [rbp + 0x67]
call fcn.140043230
movabs rcx, 0x7fffffffc46535ff
mov rax, qword [rbp + 0x67]
cmp rax, rcx
jge 0x14004e1e6
add rax, 0x3b9aca00
mov qword [rbp + 0x67], rax
jmp 0x14004e1ea
mov qword [rbp + 0x67], rdi
lea rcx, [rbp + 0x67]
call fcn.14004f210
nop
mov rdx, qword [rbp - 1]
cmp rdx, 0xf
jbe 0x14004e232
inc rdx
mov rcx, qword [rbp - 0x19]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14004e22d
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14004e22d
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1400bd908
lea r11, [rsp + 0xb0]
mov rbx, qword [r11 + 0x18]
mov rdi, qword [r11 + 0x20]
movaps xmm6, xmmword [r11 - 0x10]
mov rsp, r11
pop rbp
ret
call fcn.140033040
nop
call fcn.140033040
int3
call fcn.140033040
int3
call fcn.140033040
int3
call fcn.140033040
int3
call fcn.140033040
int3
call fcn.140033040
int3
call fcn.140033040
int3
jmp 0x14004d5a0