Function at 0x14005aaf0
Capabilities:
Create process on windows
Persist via windows service
Set registry value

Disassembly:
mov rax, rsp
mov qword [rax + 0x10], rbx
mov qword [rax + 0x18], rsi
push rbp
push rdi
push r12
push r14
push r15
lea rbp, [rax - 0x108]
sub rsp, 0x1e0
movaps xmmword [rax - 0x38], xmm6
xor r14d, r14d
lea rcx, str.reg_add__HKCUSoftwareMicrosoftGameBar___v__AllowAutoGameMode___t_REG_DWORD__d__0___f
call fcn.140043310
lea rcx, str.reg_add__HKCUSoftwareMicrosoftGameBar___v__AutoGameModeEnabled___t_REG_DWORD__d__0___f
call fcn.140043310
lea rcx, [rsp + 0x60]
call fcn.14004ee60
nop
lea rdx, [0x1400e3e9c]
lea rcx, str.reg_query__HKLMSYSTEMCurrentControlSetControlClass4d36e968_e325_11ce_bfc1_08002be10318___s__v__DriverDesc___findstr__HKEY_AMD_ATI_
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll__popen]
mov rsi, rax
test rax, rax
je 0x140046922
mov rcx, rax
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll_feof]
test eax, eax
jne 0x140046919
movabs r15, 0x6544726576697244
nop word [rax + rax]
mov r8, rsi
mov edx, 0x80
lea rcx, [rbp + 0x50]
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll_fgets]
test rax, rax
je 0x140046908
lea rax, [rbp + 0x50]
mov r8, 0xffffffffffffffff
inc r8
cmp byte [rax + r8], 0
jne 0x140046806
lea rdx, [rbp + 0x50]
lea rcx, [rsp + 0x60]
call fcn.14003e940
lea rdi, [rsp + 0x60]
mov r8, qword [rsp + 0x60]
mov rdx, qword [rsp + 0x78]
cmp rdx, 0xf
cmova rdi, r8
add rdi, qword [rsp + 0x70]
lea rbx, [rsp + 0x60]
cmp rdx, 0xf
cmova rbx, r8
add rbx, qword [rsp + 0x70]
lea rcx, [rsp + 0x60]
cmp rdx, 0xf
cmova rcx, r8
mov r8b, 0xa
mov rdx, rbx
call fcn.1400bd410
mov r8, rax
cmp rax, rbx
je 0x14004688a
lea rcx, [rax + 1]
cmp rcx, rbx
je 0x14004688a
movzx eax, byte [rcx]
cmp al, 0xa
je 0x140046882
mov byte [r8], al
inc r8
inc rcx
cmp rcx, rbx
jne 0x140046875
lea rax, [rsp + 0x60]
cmp qword [rsp + 0x78], 0xf
cmova rax, qword [rsp + 0x60]
mov r9, r8
sub r9, rax
sub rdi, r8
mov rbx, qword [rsp + 0x70]
mov rax, rbx
sub rax, r9
cmp rax, rdi
cmovb rdi, rax
lea rcx, [rsp + 0x60]
cmp qword [rsp + 0x78], 0xf
cmova rcx, qword [rsp + 0x60]
add rcx, r9
sub rbx, rdi
mov r8, rbx
sub r8, r9
inc r8
lea rdx, [rcx + rdi]
call sub.VCRUNTIME140.dll_memmove
mov qword [rsp + 0x70], rbx
lea rax, [rsp + 0x60]
cmp qword [rsp + 0x78], 0xf
cmova rax, qword [rsp + 0x60]
cmp rbx, 0xa
jne 0x140046919
cmp qword [rax], r15
jne 0x140046919
cmp word [rax + 8], 0x6373
jne 0x140046919
mov rcx, rsi
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll_feof]
test eax, eax
je 0x1400467e0
mov rcx, rsi
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll__pclose]
lea r8, [rsp + 0x60]
lea rdx, str.reg_add__
lea rcx, [rsp + 0x40]
call fcn.14004f110
nop
lea r8, str.___v__3D_Refresh_Rate_Override_DEF___t_Reg_DWORD__d__0___f
mov rdx, rax
lea rcx, [rbp - 0x80]
call fcn.14003eb10
mov rcx, rax
call fcn.14003e720
mov rcx, rax
call fcn.140043310
mov rdx, qword [rbp - 0x68]
cmp rdx, 0xf
jbe 0x14004699a
inc rdx
mov rcx, qword [rbp - 0x80]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140046995
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140046995
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1400bd908
movdqa xmm6, xmmword [0x1400f17b0]
movdqu xmmword [rbp - 0x70], xmm6
mov byte [rbp - 0x80], 0
mov rdx, qword [rsp + 0x58]
cmp rdx, 0xf
jbe 0x1400469eb
inc rdx
mov rcx, qword [rsp + 0x40]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400469e6
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x1400469e6
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1400bd908
movabs rbx, 0x7fffffffffffffff
mov rax, rbx
mov rcx, qword [rsp + 0x70]
sub rax, rcx
cmp rax, 9
jb 0x140048d3a
lea rax, [rsp + 0x60]
cmp qword [rsp + 0x78], 0xf
cmova rax, qword [rsp + 0x60]
mov qword [rsp + 0x30], rcx
mov qword [rsp + 0x28], rax
mov qword [rsp + 0x20], 9
lea r9, str.reg_add__
lea r8, [rsp + 0x60]
movzx edx, byte [rbp + 0x110]
lea rcx, [rbp - 0x80]
call fcn.14003f510
nop
mov r8d, reloc.WLDAP32.dll_Ordinal_45
lea rdx, str.___v__3to2Pulldown_NA___t_Reg_DWORD__d__0___f
lea rcx, [rbp - 0x80]
call fcn.14003e8c0
xorps xmm0, xmm0
movups xmmword [rsp + 0x40], xmm0
xorps xmm1, xmm1
movdqu xmmword [rsp + 0x50], xmm1
movups xmm0, xmmword [rax]
movups xmmword [rsp + 0x40], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rsp + 0x50], xmm1
mov qword [rax + 0x10], r14
mov qword [rax + 0x18], reloc.WS2_32.dll_ntohs
mov byte [rax], 0
lea r9, [rsp + 0x40]
cmp qword [rsp + 0x58], 0xf
cmova r9, qword [rsp + 0x40]
mov dword [rsp + 0x28], r14d
mov qword [rsp + 0x20], r14
lea r8, str.cmd.exe
lea rdx, str.runas
xor ecx, ecx
call qword [sym.imp.SHELL32.dll_ShellExecuteA]
mov rdx, qword [rsp + 0x58]
cmp rdx, 0xf
jbe 0x140046b03
inc rdx
mov rcx, qword [rsp + 0x40]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140046afe
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140046afe
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1400bd908
movdqu xmmword [rsp + 0x50], xmm6
mov byte [rsp + 0x40], 0
mov rdx, qword [rbp - 0x68]
cmp rdx, 0xf
jbe 0x140046b4c
inc rdx
mov rcx, qword [rbp - 0x80]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140046b47
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140046b47
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1400bd908
mov rax, rbx
mov rcx, qword [rsp + 0x70]
sub rax, rcx
cmp rax, 9
jb 0x140048d40
lea rax, [rsp + 0x60]
cmp qword [rsp + 0x78], 0xf
cmova rax, qword [rsp + 0x60]
mov qword [rsp + 0x30], rcx
mov qword [rsp + 0x28], rax
mov qword [rsp + 0x20], 9
lea r9, str.reg_add__
lea r8, [rsp + 0x60]
movzx edx, byte [rbp + 0x110]
lea rcx, [rbp - 0x80]
call fcn.14003f510
nop
mov r8d, Ordinal_41
lea rdx, str.___v__AAF_NA___t_Reg_DWORD__d__0___f
lea rcx, [rbp - 0x80]
call fcn.14003e8c0
xorps xmm0, xmm0
movups xmmword [rsp + 0x40], xmm0
xorps xmm1, xmm1
movdqu xmmword [rsp + 0x50], xmm1
movups xmm0, xmmword [rax]
movups xmmword [rsp + 0x40], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rsp + 0x50], xmm1
mov qword [rax + 0x10], r14
mov qword [rax + 0x18], reloc.WS2_32.dll_ntohs
mov byte [rax], 0
lea r9, [rsp + 0x40]
cmp qword [rsp + 0x58], 0xf
cmova r9, qword [rsp + 0x40]
mov dword [rsp + 0x28], r14d
mov qword [rsp + 0x20], r14
lea r8, str.cmd.exe
lea rdx, str.runas
xor ecx, ecx
call qword [sym.imp.SHELL32.dll_ShellExecuteA]
mov rdx, qword [rsp + 0x58]
cmp rdx, 0xf
jbe 0x140046c5a
inc rdx
mov rcx, qword [rsp + 0x40]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140046c55
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140046c55
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1400bd908
movdqu xmmword [rsp + 0x50], xmm6
mov byte [rsp + 0x40], 0
mov rdx, qword [rbp - 0x68]
cmp rdx, 0xf
jbe 0x140046ca3
inc rdx
mov rcx, qword [rbp - 0x80]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140046c9e
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140046c9e
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1400bd908
mov rax, rbx
mov rcx, qword [rsp + 0x70]
sub rax, rcx
cmp rax, 9
jb 0x140048d46
lea rax, [rsp + 0x60]
cmp qword [rsp + 0x78], 0xf
cmova rax, qword [rsp + 0x60]
mov qword [rsp + 0x30], rcx
mov qword [rsp + 0x28], rax
mov qword [rsp + 0x20], 9
lea r9, str.reg_add__
lea r8, [rsp + 0x60]
movzx edx, byte [rbp + 0x110]
lea rcx, [rbp - 0x80]
call fcn.14003f510
nop
mov r8d, gethostname
lea rdx, str.___v__Adaptive_De_interlacing___t_Reg_DWORD__d__1___f
lea rcx, [rbp - 0x80]
call fcn.14003e8c0
xorps xmm0, xmm0
movups xmmword [rsp + 0x40], xmm0
xorps xmm1, xmm1
movdqu xmmword [rsp + 0x50], xmm1
movups xmm0, xmmword [rax]
movups xmmword [rsp + 0x40], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rsp + 0x50], xmm1
mov qword [rax + 0x10], r14
mov qword [rax + 0x18], reloc.WS2_32.dll_ntohs
mov byte [rax], 0
lea r9, [rsp + 0x40]
cmp qword [rsp + 0x58], 0xf
cmova r9, qword [rsp + 0x40]
mov dword [rsp + 0x28], r14d
mov qword [rsp + 0x20], r14
lea r8, str.cmd.exe
lea rdx, str.runas
xor ecx, ecx
call qword [sym.imp.SHELL32.dll_ShellExecuteA]
mov rdx, qword [rsp + 0x58]
cmp rdx, 0xf
jbe 0x140046db1
inc rdx
mov rcx, qword [rsp + 0x40]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140046dac
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140046dac
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1400bd908
movdqu xmmword [rsp + 0x50], xmm6
mov byte [rsp + 0x40], 0
mov rdx, qword [rbp - 0x68]
cmp rdx, 0xf
jbe 0x140046dfa
inc rdx
mov rcx, qword [rbp - 0x80]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140046df5
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140046df5
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1400bd908
mov rax, rbx
mov rcx, qword [rsp + 0x70]
sub rax, rcx
cmp rax, 9
jb 0x140048d4c
lea rax, [rsp + 0x60]
cmp qword [rsp + 0x78], 0xf
cmova rax, qword [rsp + 0x60]
mov qword [rsp + 0x30], rcx
mov qword [rsp + 0x28], rax
mov qword [rsp + 0x20], 9
lea r9, str.reg_add__
lea r8, [rsp + 0x60]
movzx edx, byte [rbp + 0x110]
lea rcx, [rbp - 0x80]
call fcn.14003f510
nop
mov r8d, reloc.WLDAP32.dll_Ordinal_45
lea rdx, str.___v__AllowRSOverlay___t_Reg_SZ__d__false___f
lea rcx, [rbp - 0x80]
call fcn.14003e8c0
xorps xmm0, xmm0
movups xmmword [rsp + 0x40], xmm0
xorps xmm1, xmm1
movdqu xmmword [rsp + 0x50], xmm1
movups xmm0, xmmword [rax]
movups xmmword [rsp + 0x40], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rsp + 0x50], xmm1
mov qword [rax + 0x10], r14
mov qword [rax + 0x18], reloc.WS2_32.dll_ntohs
mov byte [rax], 0
lea r9, [rsp + 0x40]
cmp qword [rsp + 0x58], 0xf
cmova r9, qword [rsp + 0x40]
mov dword [rsp + 0x28], r14d
mov qword [rsp + 0x20], r14
lea r8, str.cmd.exe
lea rdx, str.runas
xor ecx, ecx
call qword [sym.imp.SHELL32.dll_ShellExecuteA]
mov rdx, qword [rsp + 0x58]
cmp rdx, 0xf
jbe 0x140046f08
inc rdx
mov rcx, qword [rsp + 0x40]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140046f03
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140046f03
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1400bd908
movdqu xmmword [rsp + 0x50], xmm6
mov byte [rsp + 0x40], 0
mov rdx, qword [rbp - 0x68]
cmp rdx, 0xf
jbe 0x140046f51
inc rdx
mov rcx, qword [rbp - 0x80]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140046f4c
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140046f4c
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1400bd908
mov rax, rbx
mov rcx, qword [rsp + 0x70]
sub rax, rcx
cmp rax, 9
jb 0x140048d52
lea rax, [rsp + 0x60]
cmp qword [rsp + 0x78], 0xf
cmova rax, qword [rsp + 0x60]
mov qword [rsp + 0x30], rcx
mov qword [rsp + 0x28], rax
mov qword [rsp + 0x20], 9
lea r9, str.reg_add__
lea r8, [rsp + 0x60]
movzx edx, byte [rbp + 0x110]
lea rcx, [rbp - 0x80]
call fcn.14003f510
nop
mov r8d, reloc.WLDAP32.dll_Ordinal_41
lea rdx, str.___v__AllowSkins___t_Reg_SZ__d__false___f
lea rcx, [rbp - 0x80]
call fcn.14003e8c0
xorps xmm0, xmm0
movups xmmword [rsp + 0x40], xmm0
xorps xmm1, xmm1
movdqu xmmword [rsp + 0x50], xmm1
movups xmm0, xmmword [rax]
movups xmmword [rsp + 0x40], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rsp + 0x50], xmm1
mov qword [rax + 0x10], r14
mov qword [rax + 0x18], reloc.WS2_32.dll_ntohs
mov byte [rax], 0
lea r9, [rsp + 0x40]
cmp qword [rsp + 0x58], 0xf
cmova r9, qword [rsp + 0x40]
mov dword [rsp + 0x28], r14d
mov qword [rsp + 0x20], r14
lea r8, str.cmd.exe
lea rdx, str.runas
xor ecx, ecx
call qword [sym.imp.SHELL32.dll_ShellExecuteA]
mov rdx, qword [rsp + 0x58]
cmp rdx, 0xf
jbe 0x14004705f
inc rdx
mov rcx, qword [rsp + 0x40]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14004705a
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14004705a
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1400bd908
movdqu xmmword [rsp + 0x50], xmm6
mov byte [rsp + 0x40], 0
mov rdx, qword [rbp - 0x68]
cmp rdx, 0xf
jbe 0x1400470a8
inc rdx
mov rcx, qword [rbp - 0x80]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400470a3
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x1400470a3
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1400bd908
mov rax, rbx
mov rcx, qword [rsp + 0x70]
sub rax, rcx
cmp rax, 9
jb 0x140048d58
lea rax, [rsp + 0x60]
cmp qword [rsp + 0x78], 0xf
cmova rax, qword [rsp + 0x60]
mov qword [rsp + 0x30], rcx
mov qword [rsp + 0x28], rax
mov qword [rsp + 0x20], 9
lea r9, str.reg_add__
lea r8, [rsp + 0x60]
movzx edx, byte [rbp + 0x110]
lea rcx, [rbp - 0x80]
call fcn.14003f510
nop
mov r8d, Ordinal_46
lea rdx, str.___v__AllowSnapshot___t_Reg_DWORD__d__0___f
lea rcx, [rbp - 0x80]
call fcn.14003e8c0
xorps xmm0, xmm0
movups xmmword [rsp + 0x40], xmm0
xorps xmm1, xmm1
movdqu xmmword [rsp + 0x50], xmm1
movups xmm0, xmmword [rax]
movups xmmword [rsp + 0x40], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rsp + 0x50], xmm1
mov qword [rax + 0x10], r14
mov qword [rax + 0x18], reloc.WS2_32.dll_ntohs
mov byte [rax], 0
lea r9, [rsp + 0x40]
cmp qword [rsp + 0x58], 0xf
cmova r9, qword [rsp + 0x40]
mov dword [rsp + 0x28], r14d
mov qword [rsp + 0x20], r14
lea r8, str.cmd.exe
lea rdx, str.runas
xor ecx, ecx
call qword [sym.imp.SHELL32.dll_ShellExecuteA]
mov rdx, qword [rsp + 0x58]
cmp rdx, 0xf
jbe 0x1400471b6
inc rdx
mov rcx, qword [rsp + 0x40]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400471b1
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x1400471b1
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1400bd908
movdqu xmmword [rsp + 0x50], xmm6
mov byte [rsp + 0x40], 0
mov rdx, qword [rbp - 0x68]
cmp rdx, 0xf
jbe 0x1400471ff
inc rdx
mov rcx, qword [rbp - 0x80]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400471fa
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x1400471fa
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1400bd908
mov rax, rbx
mov rcx, qword [rsp + 0x70]
sub rax, rcx
cmp rax, 9
jb 0x140048d5e
lea rax, [rsp + 0x60]
cmp qword [rsp + 0x78], 0xf
cmova rax, qword [rsp + 0x60]
mov qword [rsp + 0x30], rcx
mov qword [rsp + 0x28], rax
mov qword [rsp + 0x20], 9
lea r9, str.reg_add__
lea r8, [rsp + 0x60]
movzx edx, byte [rbp + 0x110]
lea rcx, [rbp - 0x80]
call fcn.14003f510
nop
mov r8d, Ordinal_50
lea rdx, str.___v__AllowSubscription___t_Reg_DWORD__d__0___f
lea rcx, [rbp - 0x80]
call fcn.14003e8c0
xorps xmm0, xmm0
movups xmmword [rsp + 0x40], xmm0
xorps xmm1, xmm1
movdqu xmmword [rsp + 0x50], xmm1
movups xmm0, xmmword [rax]
movups xmmword [rsp + 0x40], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rsp + 0x50], xmm1
mov qword [rax + 0x10], r14
mov qword [rax + 0x18], reloc.WS2_32.dll_ntohs
mov byte [rax], 0
lea r9, [rsp + 0x40]
cmp qword [rsp + 0x58], 0xf
cmova r9, qword [rsp + 0x40]
mov dword [rsp + 0x28], r14d
mov qword [rsp + 0x20], r14
lea r8, str.cmd.exe
lea rdx, str.runas
xor ecx, ecx
call qword [sym.imp.SHELL32.dll_ShellExecuteA]
mov rdx, qword [rsp + 0x58]
cmp rdx, 0xf
jbe 0x14004730d
inc rdx
mov rcx, qword [rsp + 0x40]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140047308
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140047308
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1400bd908
movdqu xmmword [rsp + 0x50], xmm6
mov byte [rsp + 0x40], 0
mov rdx, qword [rbp - 0x68]
cmp rdx, 0xf
jbe 0x140047356
inc rdx
mov rcx, qword [rbp - 0x80]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140047351
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140047351
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1400bd908
mov rax, rbx
mov rcx, qword [rsp + 0x70]
sub rax, rcx
cmp rax, 9
jb 0x140048d64
lea rax, [rsp + 0x60]
cmp qword [rsp + 0x78], 0xf
cmova rax, qword [rsp + 0x60]
mov qword [rsp + 0x30], rcx
mov qword [rsp + 0x28], rax
mov qword [rsp + 0x20], 9
lea r9, str.reg_add__
lea r8, [rsp + 0x60]
movzx edx, byte [rbp + 0x110]
lea rcx, [rbp - 0x80]
call fcn.14003f510
nop
mov r8d, Ordinal_41
lea rdx, str.___v__AntiAlias_NA___t_Reg_SZ__d__0___f
lea rcx, [rbp - 0x80]
call fcn.14003e8c0
xorps xmm0, xmm0
movups xmmword [rsp + 0x40], xmm0
xorps xmm1, xmm1
movdqu xmmword [rsp + 0x50], xmm1
movups xmm0, xmmword [rax]
movups xmmword [rsp + 0x40], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rsp + 0x50], xmm1
mov qword [rax + 0x10], r14
mov qword [rax + 0x18], reloc.WS2_32.dll_ntohs
mov byte [rax], 0
lea r9, [rsp + 0x40]
cmp qword [rsp + 0x58], 0xf
cmova r9, qword [rsp + 0x40]
mov dword [rsp + 0x28], r14d
mov qword [rsp + 0x20], r14
lea r8, str.cmd.exe
lea rdx, str.runas
xor ecx, ecx
call qword [sym.imp.SHELL32.dll_ShellExecuteA]
mov rdx, qword [rsp + 0x58]
cmp rdx, 0xf
jbe 0x140047464
inc rdx
mov rcx, qword [rsp + 0x40]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14004745f
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14004745f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1400bd908
movdqu xmmword [rsp + 0x50], xmm6
mov byte [rsp + 0x40], 0
mov rdx, qword [rbp - 0x68]
cmp rdx, 0xf
jbe 0x1400474ad
inc rdx
mov rcx, qword [rbp - 0x80]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400474a8
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x1400474a8
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1400bd908
mov rax, rbx
mov rcx, qword [rsp + 0x70]
sub rax, rcx
cmp rax, 9
jb 0x140048d6a
lea rax, [rsp + 0x60]
cmp qword [rsp + 0x78], 0xf
cmova rax, qword [rsp + 0x60]
mov qword [rsp + 0x30], rcx
mov qword [rsp + 0x28], rax
mov qword [rsp + 0x20], 9
lea r9, str.reg_add__
lea r8, [rsp + 0x60]
movzx edx, byte [rbp + 0x110]
lea rcx, [rbp - 0x80]
call fcn.14003f510
nop
mov r8d, Ordinal_41
lea rdx, str.___v__AreaAniso_NA___t_Reg_SZ__d__0___f
lea rcx, [rbp - 0x80]
call fcn.14003e8c0
xorps xmm0, xmm0
movups xmmword [rsp + 0x40], xmm0
xorps xmm1, xmm1
movdqu xmmword [rsp + 0x50], xmm1
movups xmm0, xmmword [rax]
movups xmmword [rsp + 0x40], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rsp + 0x50], xmm1
mov qword [rax + 0x10], r14
mov qword [rax + 0x18], reloc.WS2_32.dll_ntohs
mov byte [rax], 0
lea r9, [rsp + 0x40]
cmp qword [rsp + 0x58], 0xf
cmova r9, qword [rsp + 0x40]
mov dword [rsp + 0x28], r14d
mov qword [rsp + 0x20], r14
lea r8, str.cmd.exe
lea rdx, str.runas
xor ecx, ecx
call qword [sym.imp.SHELL32.dll_ShellExecuteA]
mov rdx, qword [rsp + 0x58]
cmp rdx, 0xf
jbe 0x1400475bb
inc rdx
mov rcx, qword [rsp + 0x40]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400475b6
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x1400475b6
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1400bd908
movdqu xmmword [rsp + 0x50], xmm6
mov byte [rsp + 0x40], 0
mov rdx, qword [rbp - 0x68]
cmp rdx, 0xf
jbe 0x140047604
inc rdx
mov rcx, qword [rbp - 0x80]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400475ff
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x1400475ff
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1400bd908
mov rax, rbx
mov rcx, qword [rsp + 0x70]
sub rax, rcx
cmp rax, 9
jb 0x140048d70
lea rax, [rsp + 0x60]
cmp qword [rsp + 0x78], 0xf
cmova rax, qword [rsp + 0x60]
mov qword [rsp + 0x30], rcx
mov qword [rsp + 0x28], rax
mov qword [rsp + 0x20], 9
lea r9, str.reg_add__
lea r8, [rsp + 0x60]
movzx edx, byte [rbp + 0x110]
lea rcx, [rbp - 0x80]
call fcn.14003f510
nop
mov r8d, Ordinal_35
lea rdx, str.___v__ASTT_NA___t_Reg_SZ__d__0___f
lea rcx, [rbp - 0x80]
call fcn.14003e8c0
xorps xmm0, xmm0
movups xmmword [rsp + 0x40], xmm0
xorps xmm1, xmm1
movdqu xmmword [rsp + 0x50], xmm1
movups xmm0, xmmword [rax]
movups xmmword [rsp + 0x40], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rsp + 0x50], xmm1
mov qword [rax + 0x10], r14
mov qword [rax + 0x18], reloc.WS2_32.dll_ntohs
mov byte [rax], 0
lea r9, [rsp + 0x40]
cmp qword [rsp + 0x58], 0xf
cmova r9, qword [rsp + 0x40]
mov dword [rsp + 0x28], r14d
mov qword [rsp + 0x20], r14
lea r8, str.cmd.exe
lea rdx, str.runas
xor ecx, ecx
call qword [sym.imp.SHELL32.dll_ShellExecuteA]
mov rdx, qword [rsp + 0x58]
cmp rdx, 0xf
jbe 0x140047712
inc rdx
mov rcx, qword [rsp + 0x40]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14004770d
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14004770d
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1400bd908
movdqu xmmword [rsp + 0x50], xmm6
mov byte [rsp + 0x40], 0
mov rdx, qword [rbp - 0x68]
cmp rdx, 0xf
jbe 0x14004775b
inc rdx
mov rcx, qword [rbp - 0x80]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140047756
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140047756
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1400bd908
mov rax, rbx
mov rcx, qword [rsp + 0x70]
sub rax, rcx
cmp rax, 9
jb 0x140048d76
lea rax, [rsp + 0x60]
cmp qword [rsp + 0x78], 0xf
cmova rax, qword [rsp + 0x60]
mov qword [rsp + 0x30], rcx
mov qword [rsp + 0x28], rax
mov qword [rsp + 0x20], 9
lea r9, str.reg_add__
lea r8, [rsp + 0x60]
movzx edx, byte [rbp + 0x110]
lea rcx, [rbp - 0x80]
call fcn.14003f510
nop
mov r8d, gethostname
lea rdx, str.___v__AutoColorDepthReduction_NA___t_Reg_DWORD__d__0___f
lea rcx, [rbp - 0x80]
call fcn.14003e8c0
xorps xmm0, xmm0
movups xmmword [rsp + 0x40], xmm0
xorps xmm1, xmm1
movdqu xmmword [rsp + 0x50], xmm1
movups xmm0, xmmword [rax]
movups xmmword [rsp + 0x40], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rsp + 0x50], xmm1
mov qword [rax + 0x10], r14
mov qword [rax + 0x18], reloc.WS2_32.dll_ntohs
mov byte [rax], 0
lea r9, [rsp + 0x40]
cmp qword [rsp + 0x58], 0xf
cmova r9, qword [rsp + 0x40]
mov dword [rsp + 0x28], r14d
mov qword [rsp + 0x20], r14
lea r8, str.cmd.exe
lea rdx, str.runas
xor ecx, ecx
call qword [sym.imp.SHELL32.dll_ShellExecuteA]
mov rdx, qword [rsp + 0x58]
cmp rdx, 0xf
jbe 0x140047869
inc rdx
mov rcx, qword [rsp + 0x40]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140047864
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140047864
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1400bd908
movdqu xmmword [rsp + 0x50], xmm6
mov byte [rsp + 0x40], 0
mov rdx, qword [rbp - 0x68]
cmp rdx, 0xf
jbe 0x1400478b2
inc rdx
mov rcx, qword [rbp - 0x80]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400478ad
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x1400478ad
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1400bd908
mov rax, rbx
mov rcx, qword [rsp + 0x70]
sub rax, rcx
cmp rax, 9
jb 0x140048d7c
lea rax, [rsp + 0x60]
cmp qword [rsp + 0x78], 0xf
cmova rax, qword [rsp + 0x60]
mov qword [rsp + 0x30], rcx
mov qword [rsp + 0x28], rax
mov qword [rsp + 0x20], 9
lea r9, str.reg_add__
lea r8, [rsp + 0x60]
movzx edx, byte [rbp + 0x110]
lea rcx, [rbp - 0x80]
call fcn.14003f510
nop
mov r8d, gethostname
lea rdx, str.___v__DisableSAMUPowerGating___t_Reg_DWORD__d__1___f
lea rcx, [rbp - 0x80]
call fcn.14003e8c0
xorps xmm0, xmm0
movups xmmword [rsp + 0x40], xmm0
xorps xmm1, xmm1
movdqu xmmword [rsp + 0x50], xmm1
movups xmm0, xmmword [rax]
movups xmmword [rsp + 0x40], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rsp + 0x50], xmm1
mov qword [rax + 0x10], r14
mov qword [rax + 0x18], reloc.WS2_32.dll_ntohs
mov byte [rax], 0
lea r9, [rsp + 0x40]
cmp qword [rsp + 0x58], 0xf
cmova r9, qword [rsp + 0x40]
mov dword [rsp + 0x28], r14d
mov qword [rsp + 0x20], r14
lea r8, str.cmd.exe
lea rdx, str.runas
xor ecx, ecx
call qword [sym.imp.SHELL32.dll_ShellExecuteA]
mov rdx, qword [rsp + 0x58]
cmp rdx, 0xf
jbe 0x1400479c0
inc rdx
mov rcx, qword [rsp + 0x40]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400479bb
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x1400479bb
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1400bd908
movdqu xmmword [rsp + 0x50], xmm6
mov byte [rsp + 0x40], 0
mov rdx, qword [rbp - 0x68]
cmp rdx, 0xf
jbe 0x140047a09
inc rdx
mov rcx, qword [rbp - 0x80]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140047a04
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140047a04
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1400bd908
mov rax, rbx
mov rcx, qword [rsp + 0x70]
sub rax, rcx
cmp rax, 9
jb 0x140048d82
lea rax, [rsp + 0x60]
cmp qword [rsp + 0x78], 0xf
cmova rax, qword [rsp + 0x60]
mov qword [rsp + 0x30], rcx
mov qword [rsp + 0x28], rax
mov qword [rsp + 0x20], 9
lea r9, str.reg_add__
lea r8, [rsp + 0x60]
movzx edx, byte [rbp + 0x110]
lea rcx, [rbp - 0x80]
call fcn.14003f510
nop
mov r8d, Ordinal_60
lea rdx, str.___v__DisableUVDPowerGatingDynamic___t_Reg_DWORD__d__1___f
lea rcx, [rbp - 0x80]
call fcn.14003e8c0
xorps xmm0, xmm0
movups xmmword [rsp + 0x40], xmm0
xorps xmm1, xmm1
movdqu xmmword [rsp + 0x50], xmm1
movups xmm0, xmmword [rax]
movups xmmword [rsp + 0x40], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rsp + 0x50], xmm1
mov qword [rax + 0x10], r14
mov qword [rax + 0x18], reloc.WS2_32.dll_ntohs
mov byte [rax], 0
lea r9, [rsp + 0x40]
cmp qword [rsp + 0x58], 0xf
cmova r9, qword [rsp + 0x40]
mov dword [rsp + 0x28], r14d
mov qword [rsp + 0x20], r14
lea r8, str.cmd.exe
lea rdx, str.runas
xor ecx, ecx
call qword [sym.imp.SHELL32.dll_ShellExecuteA]
mov rdx, qword [rsp + 0x58]
cmp rdx, 0xf
jbe 0x140047b17
inc rdx
mov rcx, qword [rsp + 0x40]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140047b12
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140047b12
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1400bd908
movdqu xmmword [rsp + 0x50], xmm6
mov byte [rsp + 0x40], 0
mov rdx, qword [rbp - 0x68]
cmp rdx, 0xf
jbe 0x140047b60
inc rdx
mov rcx, qword [rbp - 0x80]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140047b5b
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140047b5b
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1400bd908
mov rax, rbx
mov rcx, qword [rsp + 0x70]
sub rax, rcx
cmp rax, 9
jb 0x140048d88
lea rax, [rsp + 0x60]
cmp qword [rsp + 0x78], 0xf
cmova rax, qword [rsp + 0x60]
mov qword [rsp + 0x30], rcx
mov qword [rsp + 0x28], rax
mov qword [rsp + 0x20], 9
lea r9, str.reg_add__
lea r8, [rsp + 0x60]
movzx edx, byte [rbp + 0x110]
lea rcx, [rbp - 0x80]
call fcn.14003f510
nop
mov r8d, 0x33
lea rdx, str.___v__DisableVCEPowerGating___t_Reg_DWORD__d__1___f
lea rcx, [rbp - 0x80]
call fcn.14003e8c0
xorps xmm0, xmm0
movups xmmword [rsp + 0x40], xmm0
xorps xmm1, xmm1
movdqu xmmword [rsp + 0x50], xmm1
movups xmm0, xmmword [rax]
movups xmmword [rsp + 0x40], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rsp + 0x50], xmm1
mov qword [rax + 0x10], r14
mov qword [rax + 0x18], reloc.WS2_32.dll_ntohs
mov byte [rax], 0
lea r9, [rsp + 0x40]
cmp qword [rsp + 0x58], 0xf
cmova r9, qword [rsp + 0x40]
mov dword [rsp + 0x28], r14d
mov qword [rsp + 0x20], r14
lea r8, str.cmd.exe
lea rdx, str.runas
xor ecx, ecx
call qword [sym.imp.SHELL32.dll_ShellExecuteA]
mov rdx, qword [rsp + 0x58]
cmp rdx, 0xf
jbe 0x140047c6e
inc rdx
mov rcx, qword [rsp + 0x40]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140047c69
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140047c69
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1400bd908
movdqu xmmword [rsp + 0x50], xmm6
mov byte [rsp + 0x40], 0
mov rdx, qword [rbp - 0x68]
cmp rdx, 0xf
jbe 0x140047cb7
inc rdx
mov rcx, qword [rbp - 0x80]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140047cb2
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140047cb2
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1400bd908
mov rax, rbx
mov rcx, qword [rsp + 0x70]
sub rax, rcx
cmp rax, 9
jb 0x140048d8e
lea rax, [rsp + 0x60]
cmp qword [rsp + 0x78], 0xf
cmova rax, qword [rsp + 0x60]
mov qword [rsp + 0x30], rcx
mov qword [rsp + 0x28], rax
mov qword [rsp + 0x20], 9
lea r9, str.reg_add__
lea r8, [rsp + 0x60]
movzx edx, byte [rbp + 0x110]
lea rcx, [rbp - 0x80]
call fcn.14003f510
nop
mov r8d, Ordinal_46
lea rdx, str.___v__EnableAspmL0s___t_Reg_DWORD__d__0___f
lea rcx, [rbp - 0x80]
call fcn.14003e8c0
xorps xmm0, xmm0
movups xmmword [rsp + 0x40], xmm0
xorps xmm1, xmm1
movdqu xmmword [rsp + 0x50], xmm1
movups xmm0, xmmword [rax]
movups xmmword [rsp + 0x40], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rsp + 0x50], xmm1
mov qword [rax + 0x10], r14
mov qword [rax + 0x18], reloc.WS2_32.dll_ntohs
mov byte [rax], 0
lea r9, [rsp + 0x40]
cmp qword [rsp + 0x58], 0xf
cmova r9, qword [rsp + 0x40]
mov dword [rsp + 0x28], r14d
mov qword [rsp + 0x20], r14
lea r8, str.cmd.exe
lea rdx, str.runas
xor ecx, ecx
call qword [sym.imp.SHELL32.dll_ShellExecuteA]
mov rdx, qword [rsp + 0x58]
cmp rdx, 0xf
jbe 0x140047dc5
inc rdx
mov rcx, qword [rsp + 0x40]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140047dc0
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140047dc0
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1400bd908
movdqu xmmword [rsp + 0x50], xmm6
mov byte [rsp + 0x40], 0
mov rdx, qword [rbp - 0x68]
cmp rdx, 0xf
jbe 0x140047e0e
inc rdx
mov rcx, qword [rbp - 0x80]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140047e09
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140047e09
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1400bd908
mov rax, rbx
mov rcx, qword [rsp + 0x70]
sub rax, rcx
cmp rax, 9
jb 0x140048d94
lea rax, [rsp + 0x60]
cmp qword [rsp + 0x78], 0xf
cmova rax, qword [rsp + 0x60]
mov qword [rsp + 0x30], rcx
mov qword [rsp + 0x28], rax
mov qword [rsp + 0x20], 9
lea r9, str.reg_add__
lea r8, [rsp + 0x60]
movzx edx, byte [rbp + 0x110]
lea rcx, [rbp - 0x80]
call fcn.14003f510
nop
mov r8d, Ordinal_46
lea rdx, str.___v__EnableAspmL1___t_Reg_DWORD__d__0___f
lea rcx, [rbp - 0x80]
call fcn.14003e8c0
xorps xmm0, xmm0
movups xmmword [rsp + 0x40], xmm0
xorps xmm1, xmm1
movdqu xmmword [rsp + 0x50], xmm1
movups xmm0, xmmword [rax]
movups xmmword [rsp + 0x40], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rsp + 0x50], xmm1
mov qword [rax + 0x10], r14
mov qword [rax + 0x18], reloc.WS2_32.dll_ntohs
mov byte [rax], 0
lea r9, [rsp + 0x40]
cmp qword [rsp + 0x58], 0xf
cmova r9, qword [rsp + 0x40]
mov dword [rsp + 0x28], r14d
mov qword [rsp + 0x20], r14
lea r8, str.cmd.exe
lea rdx, str.runas
xor ecx, ecx
call qword [sym.imp.SHELL32.dll_ShellExecuteA]
mov rdx, qword [rsp + 0x58]
cmp rdx, 0xf
jbe 0x140047f1c
inc rdx
mov rcx, qword [rsp + 0x40]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140047f17
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140047f17
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1400bd908
movdqu xmmword [rsp + 0x50], xmm6
mov byte [rsp + 0x40], 0
mov rdx, qword [rbp - 0x68]
cmp rdx, 0xf
jbe 0x140047f65
inc rdx
mov rcx, qword [rbp - 0x80]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140047f60
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140047f60
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1400bd908
mov rax, rbx
mov rcx, qword [rsp + 0x70]
sub rax, rcx
cmp rax, 9
jb 0x140048d9a
lea rax, [rsp + 0x60]
cmp qword [rsp + 0x78], 0xf
cmova rax, qword [rsp + 0x60]
mov qword [rsp + 0x30], rcx
mov qword [rsp + 0x28], rax
mov qword [rsp + 0x20], 9
lea r9, str.reg_add__
lea r8, [rsp + 0x60]
movzx edx, byte [rbp + 0x110]
lea rcx, [rbp - 0x80]
call fcn.14003f510
nop
mov r8d, Ordinal_41
lea rdx, str.___v__EnableUlps___t_Reg_DWORD__d__0___f
lea rcx, [rbp - 0x80]
call fcn.14003e8c0
xorps xmm0, xmm0
movups xmmword [rsp + 0x40], xmm0
xorps xmm1, xmm1
movdqu xmmword [rsp + 0x50], xmm1
movups xmm0, xmmword [rax]
movups xmmword [rsp + 0x40], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rsp + 0x50], xmm1
mov qword [rax + 0x10], r14
mov qword [rax + 0x18], reloc.WS2_32.dll_ntohs
mov byte [rax], 0
lea r9, [rsp + 0x40]
cmp qword [rsp + 0x58], 0xf
cmova r9, qword [rsp + 0x40]
mov dword [rsp + 0x28], r14d
mov qword [rsp + 0x20], r14
lea r8, str.cmd.exe
lea rdx, str.runas
xor ecx, ecx
call qword [sym.imp.SHELL32.dll_ShellExecuteA]
mov rdx, qword [rsp + 0x58]
cmp rdx, 0xf
jbe 0x140048073
inc rdx
mov rcx, qword [rsp + 0x40]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14004806e
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14004806e
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1400bd908
movdqu xmmword [rsp + 0x50], xmm6
mov byte [rsp + 0x40], 0
mov rdx, qword [rbp - 0x68]
cmp rdx, 0xf
jbe 0x1400480bc
inc rdx
mov rcx, qword [rbp - 0x80]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400480b7
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x1400480b7
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1400bd908
mov rcx, qword [rsp + 0x70]
sub rbx, rcx
cmp rbx, 9
jb 0x140048d34
lea rax, [rsp + 0x60]
cmp qword [rsp + 0x78], 0xf
cmova rax, qword [rsp + 0x60]
mov qword [rsp + 0x30], rcx
mov qword [rsp + 0x28], rax
mov qword [rsp + 0x20], 9
lea r9, str.reg_add__
lea r8, [rsp + 0x60]
movzx edx, byte [rbp + 0x110]
lea rcx, [rbp - 0x80]
call fcn.14003f510
nop
mov r8d, Ordinal_41
lea rdx, str.___v__EnableUlps_NA___t_Reg_SZ__d__0___f
lea rcx, [rbp - 0x80]
call fcn.14003e8c0
xorps xmm0, xmm0
movups xmmword [rsp + 0x40], xmm0
xorps xmm1, xmm1
movdqu xmmword [rsp + 0x50], xmm1
movups xmm0, xmmword [rax]
movups xmmword [rsp + 0x40], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rsp + 0x50], xmm1
mov qword [rax + 0x10], r14
mov qword [rax + 0x18], reloc.WS2_32.dll_ntohs
mov byte [rax], 0
lea r9, [rsp + 0x40]
cmp qword [rsp + 0x58], 0xf
cmova r9, qword [rsp + 0x40]
mov dword [rsp + 0x28], r14d
mov qword [rsp + 0x20], r14
lea r8, str.cmd.exe
lea rdx, str.runas
xor ecx, ecx
call qword [sym.imp.SHELL32.dll_ShellExecuteA]
mov rdx, qword [rsp + 0x58]
cmp rdx, 0xf
jbe 0x1400481c7
inc rdx
mov rcx, qword [rsp + 0x40]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400481c2
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x1400481c2
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1400bd908
movdqu xmmword [rsp + 0x50], xmm6
mov byte [rsp + 0x40], 0
lea rcx, [rbp - 0x80]
call fcn.14003e7d0
lea r8, [rsp + 0x60]
lea rdx, str.reg_add__
lea rcx, [rsp + 0x40]
call fcn.14004f110
nop
lea r8, str.___v__KMD_DeLagEnabled___t_Reg_DWORD__d__1___f
mov rdx, rax
lea rcx, [rbp - 0x80]
call fcn.14003eb10
mov rcx, rax
call fcn.14003e720
mov rcx, rax
call fcn.140043310
lea rcx, [rbp - 0x80]
call fcn.14003e7d0
nop
lea rcx, [rsp + 0x40]
call fcn.14003e7d0
lea r8, [rsp + 0x60]
lea rdx, str.reg_add__
lea rcx, [rsp + 0x40]
call fcn.14004f110
nop
lea r8, str.___v__KMD_FRTEnabled___t_Reg_DWORD__d__0___f
mov rdx, rax
lea rcx, [rbp - 0x80]
call fcn.14003eb10
mov rcx, rax
call fcn.14003e720
mov rcx, rax
call fcn.140043310
lea rcx, [rbp - 0x80]
call fcn.14003e7d0
nop
lea rcx, [rsp + 0x40]
call fcn.14003e7d0
lea r8, [rsp + 0x60]
lea rdx, str.reg_add__
lea rcx, [rsp + 0x40]
call fcn.14004f110
nop
lea r8, str.___v__DisableDMACopy___t_Reg_DWORD__d__1___f
mov rdx, rax
lea rcx, [rbp - 0x80]
call fcn.14003eb10
mov rcx, rax
call fcn.14003e720
mov rcx, rax
call fcn.140043310
lea rcx, [rbp - 0x80]
call fcn.14003e7d0
nop
lea rcx, [rsp + 0x40]
call fcn.14003e7d0
lea r8, [rsp + 0x60]
lea rdx, str.reg_add__
lea rcx, [rsp + 0x40]
call fcn.14004f110
nop
lea r8, str.___v__DisableBlockWrite___t_Reg_DWORD__d__0___f
mov rdx, rax
lea rcx, [rbp - 0x80]
call fcn.14003eb10
mov rcx, rax
call fcn.14003e720
mov rcx, rax
call fcn.140043310
lea rcx, [rbp - 0x80]
call fcn.14003e7d0
nop
lea rcx, [rsp + 0x40]
call fcn.14003e7d0
lea r8, [rsp + 0x60]
lea rdx, str.reg_add__
lea rcx, [rsp + 0x40]
call fcn.14004f110
nop
lea r8, str.___v__StutterMode___t_Reg_DWORD__d__0___f
mov rdx, rax
lea rcx, [rbp - 0x80]
call fcn.14003eb10
mov rcx, rax
call fcn.14003e720
mov rcx, rax
call fcn.140043310
lea rcx, [rbp - 0x80]
call fcn.14003e7d0
nop
lea rcx, [rsp + 0x40]
call fcn.14003e7d0
lea r8, [rsp + 0x60]
lea rdx, str.reg_add__
lea rcx, [rsp + 0x40]
call fcn.14004f110
nop
lea r8, str.___v__EnableUlps___t_Reg_DWORD__d__0___f
mov rdx, rax
lea rcx, [rbp - 0x80]
call fcn.14003eb10
mov rcx, rax
call fcn.14003e720
mov rcx, rax
call fcn.140043310
lea rcx, [rbp - 0x80]
call fcn.14003e7d0
nop
lea rcx, [rsp + 0x40]
call fcn.14003e7d0
lea r8, [rsp + 0x60]
lea rdx, str.reg_add__
lea rcx, [rsp + 0x40]
call fcn.14004f110
nop
lea r8, str.___v__PP_SclkDeepSleepDisable___t_Reg_DWORD__d__1___f
mov rdx, rax
lea rcx, [rbp - 0x80]
call fcn.14003eb10
mov rcx, rax
call fcn.14003e720
mov rcx, rax
call fcn.140043310
lea rcx, [rbp - 0x80]
call fcn.14003e7d0
nop
lea rcx, [rsp + 0x40]
call fcn.14003e7d0
lea r8, [rsp + 0x60]
lea rdx, str.reg_add__
lea rcx, [rsp + 0x40]
call fcn.14004f110
nop
lea r8, str.___v__PP_ThermalAutoThrottlingEnable___t_Reg_DWORD__d__0___f
mov rdx, rax
lea rcx, [rbp - 0x80]
call fcn.14003eb10
mov rcx, rax
call fcn.14003e720
mov rcx, rax
call fcn.140043310
lea rcx, [rbp - 0x80]
call fcn.14003e7d0
nop
lea rcx, [rsp + 0x40]
call fcn.14003e7d0
lea r8, [rsp + 0x60]
lea rdx, str.reg_add__
lea rcx, [rsp + 0x40]
call fcn.14004f110
nop
lea r8, str.___v__DisableDrmdmaPowerGating___t_Reg_DWORD__d__1___f
mov rdx, rax
lea rcx, [rbp - 0x80]
call fcn.14003eb10
mov rcx, rax
call fcn.14003e720
mov rcx, rax
call fcn.140043310
lea rcx, [rbp - 0x80]
call fcn.14003e7d0
nop
lea rcx, [rsp + 0x40]
call fcn.14003e7d0
lea r8, [rsp + 0x60]
lea rdx, str.reg_add__
lea rcx, [rsp + 0x40]
call fcn.14004f110
nop
lea r8, str.___v__KMD_EnableComputePreemption___t_Reg_DWORD__d__0___f
mov rdx, rax
lea rcx, [rbp - 0x80]
call fcn.14003eb10
mov rcx, rax
call fcn.14003e720
mov rcx, rax
call fcn.140043310
lea rcx, [rbp - 0x80]
call fcn.14003e7d0
nop
lea rcx, [rsp + 0x40]
call fcn.14003e7d0
lea r8, [rsp + 0x60]
lea rdx, str.reg_add__
lea rcx, [rsp + 0x40]
call fcn.14004f110
nop
lea r8, str.UMD___v__Main3D_DEF___t_Reg_SZ__d__1___f
mov rdx, rax
lea rcx, [rbp - 0x80]
call fcn.14003eb10
mov rcx, rax
call fcn.14003e720
mov rcx, rax
call fcn.140043310
lea rcx, [rbp - 0x80]
call fcn.14003e7d0
nop
lea rcx, [rsp + 0x40]
call fcn.14003e7d0
lea r8, [rsp + 0x60]
lea rdx, str.reg_add__
lea rcx, [rsp + 0x40]
call fcn.14004f110
nop
lea r8, str.UMD___v__Main3D___t_Reg_BINARY__d__3100___f
mov rdx, rax
lea rcx, [rbp - 0x80]
call fcn.14003eb10
mov rcx, rax
call fcn.14003e720
mov rcx, rax
call fcn.140043310
lea rcx, [rbp - 0x80]
call fcn.14003e7d0
nop
lea rcx, [rsp + 0x40]
call fcn.14003e7d0
lea r8, [rsp + 0x60]
lea rdx, str.reg_add__
lea rcx, [rsp + 0x40]
call fcn.14004f110
nop
lea r8, str.UMD___v__FlipQueueSize___t_Reg_BINARY__d__3100___f
mov rdx, rax
lea rcx, [rbp - 0x80]
call fcn.14003eb10
mov rcx, rax
call fcn.14003e720
mov rcx, rax
call fcn.140043310
lea rcx, [rbp - 0x80]
call fcn.14003e7d0
nop
lea rcx, [rsp + 0x40]
call fcn.14003e7d0
lea r8, [rsp + 0x60]
lea rdx, str.reg_add__
lea rcx, [rsp + 0x40]
call fcn.14004f110
nop
lea r8, str.UMD___v__ShaderCache___t_Reg_BINARY__d__3200___f
mov rdx, rax
lea rcx, [rbp - 0x80]
call fcn.14003eb10
mov rcx, rax
call fcn.14003e720
mov rcx, rax
call fcn.140043310
lea rcx, [rbp - 0x80]
call fcn.14003e7d0
nop
lea rcx, [rsp + 0x40]
call fcn.14003e7d0
lea r8, [rsp + 0x60]
lea rdx, str.reg_add__
lea rcx, [rsp + 0x40]
call fcn.14004f110
nop
lea r8, str.UMD___v__Tessellation_OPTION___t_Reg_BINARY__d__3200___f
mov rdx, rax
lea rcx, [rbp - 0x80]
call fcn.14003eb10
mov rcx, rax
call fcn.14003e720
mov rcx, rax
call fcn.140043310
lea rcx, [rbp - 0x80]
call fcn.14003e7d0
nop
lea rcx, [rsp + 0x40]
call fcn.14003e7d0
lea r8, [rsp + 0x60]
lea rdx, str.reg_add__
lea rcx, [rsp + 0x40]
call fcn.14004f110
nop
lea r8, str.UMD___v__Tessellation___t_Reg_BINARY__d__3100___f
mov rdx, rax
lea rcx, [rbp - 0x80]
call fcn.14003eb10
mov rcx, rax
call fcn.14003e720
mov rcx, rax
call fcn.140043310
lea rcx, [rbp - 0x80]
call fcn.14003e7d0
nop
lea rcx, [rsp + 0x40]
call fcn.14003e7d0
lea r8, [rsp + 0x60]
lea rdx, str.reg_add__
lea rcx, [rsp + 0x40]
call fcn.14004f110
nop
lea r8, str.UMD___v__VSyncControl___t_Reg_BINARY__d__3000___f
mov rdx, rax
lea rcx, [rbp - 0x80]
call fcn.14003eb10
mov rcx, rax
call fcn.14003e720
mov rcx, rax
call fcn.140043310
lea rcx, [rbp - 0x80]
call fcn.14003e7d0
nop
lea rcx, [rsp + 0x40]
call fcn.14003e7d0
lea r8, [rsp + 0x60]
lea rdx, str.reg_add__
lea rcx, [rsp + 0x40]
call fcn.14004f110
nop
lea r8, str.UMD___v__TFQ___t_Reg_BINARY__d__3200___f
mov rdx, rax
lea rcx, [rbp - 0x80]
call fcn.14003eb10
mov rcx, rax
call fcn.14003e720
mov rcx, rax
call fcn.140043310
lea rcx, [rbp - 0x80]
call fcn.14003e7d0
nop
lea rcx, [rsp + 0x40]
call fcn.14003e7d0
lea r8, [rsp + 0x60]
lea rdx, str.reg_add__
lea rcx, [rsp + 0x40]
call fcn.14004f110
nop
lea r8, str.DAL2_DATA__2_0DisplayPath_4EDID_D109_78E9Option___v__ProtectionControl___t_Reg_BINARY__d__0100000001000000___f
mov rdx, rax
lea rcx, [rbp - 0x80]
call fcn.14003eb10
mov rcx, rax
call fcn.14003e720
mov rcx, rax
call fcn.140043310
lea rcx, [rbp - 0x80]
call fcn.14003e7d0
nop
lea rcx, [rsp + 0x40]
call fcn.14003e7d0
lea rcx, str.reg_add__HKLMSYSTEMCurrentControlSetControlClass4d36e968_e325_11ce_bfc1_08002be103180000___v__3D_Refresh_Rate_Override_DEF___t_REG_DWORD__d__0___f
call fcn.140043310
lea rcx, str.reg_add__HKLMSYSTEMCurrentControlSetControlClass4d36e968_e325_11ce_bfc1_08002be103180000___v__AllowSnapshot___t_REG_DWORD__d__0___f
call fcn.140043310
lea rcx, str.reg_add__HKLMSYSTEMCurrentControlSetControlClass4d36e968_e325_11ce_bfc1_08002be103180000___v__AAF_NA___t_REG_DWORD__d__0___f
call fcn.140043310
lea rcx, str.reg_add__HKLMSYSTEMCurrentControlSetControlClass4d36e968_e325_11ce_bfc1_08002be103180000___v__AntiAlias_NA___t_REG_SZ__d__0___f
call fcn.140043310
lea rcx, str.reg_add__HKLMSYSTEMCurrentControlSetControlClass4d36e968_e325_11ce_bfc1_08002be103180000___v__ASTT_NA___t_REG_SZ__d__0___f
call fcn.140043310
lea rcx, str.reg_add__HKLMSYSTEMCurrentControlSetControlClass4d36e968_e325_11ce_bfc1_08002be103180000___v__AllowSubscription___t_REG_DWORD__d__0___f
call fcn.140043310
lea rcx, str.reg_add__HKLMSYSTEMCurrentControlSetControlClass4d36e968_e325_11ce_bfc1_08002be103180000___v__AreaAniso_NA___t_REG_SZ__d__0___f
call fcn.140043310
lea rcx, str.reg_add__HKLMSYSTEMCurrentControlSetControlClass4d36e968_e325_11ce_bfc1_08002be103180000___v__AllowRSOverlay___t_REG_SZ__d__false___f
call fcn.140043310
lea rcx, str.reg_add__HKLMSYSTEMCurrentControlSetControlClass4d36e968_e325_11ce_bfc1_08002be103180000___v__Adaptive_De_interlacing___t_REG_DWORD__d__1___f
call fcn.140043310
lea rcx, str.reg_add__HKLMSYSTEMCurrentControlSetControlClass4d36e968_e325_11ce_bfc1_08002be103180000___v__AllowSkins___t_REG_SZ__d__false___f
call fcn.140043310
lea rcx, str.reg_add__HKLMSYSTEMCurrentControlSetControlClass4d36e968_e325_11ce_bfc1_08002be103180000___v__AutoColorDepthReduction_NA___t_REG_DWORD__d__0___f
call fcn.140043310
lea rcx, str.reg_add__HKLMSYSTEMCurrentControlSetControlClass4d36e968_e325_11ce_bfc1_08002be103180000___v__DisableSAMUPowerGating___t_REG_DWORD__d__1___f
call fcn.140043310
lea rcx, str.reg_add__HKLMSYSTEMCurrentControlSetControlClass4d36e968_e325_11ce_bfc1_08002be103180000___v__DisableUVDPowerGatingDynamic___t_REG_DWORD__d__1___f
call fcn.140043310
lea rcx, str.reg_add__HKLMSYSTEMCurrentControlSetControlClass4d36e968_e325_11ce_bfc1_08002be103180000___v__DisableVCEPowerGating___t_REG_DWORD__d__1___f
call fcn.140043310
lea rcx, str.reg_add__HKLMSYSTEMCurrentControlSetControlClass4d36e968_e325_11ce_bfc1_08002be103180000___v__EnableAspmL0s___t_REG_DWORD__d__0___f
call fcn.140043310
lea rcx, str.reg_add__HKLMSYSTEMCurrentControlSetControlClass4d36e968_e325_11ce_bfc1_08002be103180000___v__EnableAspmL1___t_REG_DWORD__d__0___f
call fcn.140043310
lea rcx, str.reg_add__HKLMSYSTEMCurrentControlSetControlClass4d36e968_e325_11ce_bfc1_08002be103180000___v__EnableUlps___t_REG_DWORD__d__0___f
call fcn.140043310
lea rcx, str.reg_add__HKLMSYSTEMCurrentControlSetControlClass4d36e968_e325_11ce_bfc1_08002be103180000___v__EnableUlps_NA___t_REG_SZ__d__0___f
call fcn.140043310
lea rcx, str.reg_add__HKLMSYSTEMCurrentControlSetControlClass4d36e968_e325_11ce_bfc1_08002be103180000___v__KMD_DeLagEnabled___t_REG_DWORD__d__1___f
call fcn.140043310
lea rcx, str.reg_add__HKLMSYSTEMCurrentControlSetControlClass4d36e968_e325_11ce_bfc1_08002be103180000___v__KMD_FRTEnabled___t_REG_DWORD__d__0___f
call fcn.140043310
lea rcx, str.reg_add__HKLMSYSTEMCurrentControlSetControlClass4d36e968_e325_11ce_bfc1_08002be103180000___v__DisableDMACopy___t_REG_DWORD__d__1___f
call fcn.140043310
lea rcx, str.reg_add__HKLMSYSTEMCurrentControlSetControlClass4d36e968_e325_11ce_bfc1_08002be103180000___v__DisableBlockWrite___t_REG_DWORD__d__0___f
call fcn.140043310
lea rcx, str.reg_add__HKLMSYSTEMCurrentControlSetControlClass4d36e968_e325_11ce_bfc1_08002be103180000___v__StutterMode___t_REG_DWORD__d__0___f
call fcn.140043310
lea rcx, str.reg_add__HKLMSYSTEMCurrentControlSetControlClass4d36e968_e325_11ce_bfc1_08002be103180000___v__EnableUlps___t_REG_DWORD__d__0___f
call fcn.140043310
lea rcx, str.reg_add__HKLMSYSTEMCurrentControlSetControlClass4d36e968_e325_11ce_bfc1_08002be103180000___v__PP_SclkDeepSleepDisable___t_REG_DWORD__d__1___f
call fcn.140043310
lea rcx, str.reg_add__HKLMSYSTEMCurrentControlSetControlClass4d36e968_e325_11ce_bfc1_08002be103180000___v__PP_ThermalAutoThrottlingEnable___t_REG_DWORD__d__0___f
call fcn.140043310
lea rcx, str.reg_add__HKLMSYSTEMCurrentControlSetControlClass4d36e968_e325_11ce_bfc1_08002be103180000___v__DisableDrmdmaPowerGating___t_REG_DWORD__d__1___f
call fcn.140043310
lea rcx, str.reg_add__HKLMSYSTEMCurrentControlSetControlClass4d36e968_e325_11ce_bfc1_08002be103180000___v__KMD_EnableComputePreemption___t_REG_DWORD__d__0___f
call fcn.140043310
lea rcx, str.reg_add__HKLMSYSTEMCurrentControlSetControlClass4d36e968_e325_11ce_bfc1_08002be103180000UMD___v__Main3D_DEF___t_REG_SZ__d__1___f
call fcn.140043310
lea rcx, str.reg_add__HKLMSYSTEMCurrentControlSetControlClass4d36e968_e325_11ce_bfc1_08002be103180000UMD___v__Main3D___t_REG_BINARY__d__3100___f
call fcn.140043310
lea rcx, str.reg_add__HKLMSYSTEMCurrentControlSetControlClass4d36e968_e325_11ce_bfc1_08002be103180000UMD___v__FlipQueueSize___t_REG_BINARY__d__3100___f
call fcn.140043310
lea rcx, str.reg_add__HKLMSYSTEMCurrentControlSetControlClass4d36e968_e325_11ce_bfc1_08002be103180000UMD___v__ShaderCache___t_REG_BINARY__d__3200___f
call fcn.140043310
lea rcx, str.reg_add__HKLMSYSTEMCurrentControlSetControlClass4d36e968_e325_11ce_bfc1_08002be103180000UMD___v__Tessellation_OPTION___t_REG_BINARY__d__3200___f
call fcn.140043310
lea rcx, str.reg_add__HKLMSYSTEMCurrentControlSetControlClass4d36e968_e325_11ce_bfc1_08002be103180000UMD___v__Tessellation___t_REG_BINARY__d__3100___f
call fcn.140043310
lea rcx, str.reg_add__HKLMSYSTEMCurrentControlSetControlClass4d36e968_e325_11ce_bfc1_08002be103180000UMD___v__VSyncControl___t_REG_BINARY__d__3000___f
call fcn.140043310
lea rcx, str.reg_add__HKLMSYSTEMCurrentControlSetControlClass4d36e968_e325_11ce_bfc1_08002be103180000UMD___v__TFQ___t_REG_BINARY__d__3200___f
call fcn.140043310
lea rcx, str.reg_add__HKLMSYSTEMCurrentControlSetControlClass4d36e968_e325_11ce_bfc1_08002be103180000DAL2_DATA__2_0DisplayPath_4EDID_D109_78E9Option___v__ProtectionControl___t_REG_BINARY__d__0100000001000000___f
call fcn.140043310
lea rcx, str.reg_add__HKLMSYSTEMCurrentControlSetControlClass4d36e968_e325_11ce_bfc1_08002be103180000___v__PP_GPUPowerDownEnabled___t_REG_DWORD__d__1___f
call fcn.140043310
lea rcx, str.reg_add__HKLMSYSTEMCurrentControlSetServices_amdlog___v__Start___t_REG_DWORD__d__4___f
call fcn.140043310
lea rdx, str.LTRSnoopL1Latency
mov qword [rbp - 0x40], rdx
lea rax, str.LTRSnoopL0Latency
mov qword [rbp - 0x38], rax
lea rax, str.LTRNoSnoopL1Latency
mov qword [rbp - 0x30], rax
lea rax, str.LTRMaxNoSnoopLatency
mov qword [rbp - 0x28], rax
lea rax, str.KMD_RpmComputeLatency
mov qword [rbp - 0x20], rax
lea rax, str.DalUrgentLatencyNs
mov qword [rbp - 0x18], rax
lea rax, str.memClockSwitchLatency
mov qword [rbp - 0x10], rax
lea rax, str.PP_RTPMComputeF1Latency
mov qword [rbp - 8], rax
lea rax, str.PP_DGBMMMaxTransitionLatencyUvd
mov qword [rbp], rax
lea rax, str.PP_DGBPMMaxTransitionLatencyGfx
mov qword [rbp + 8], rax
lea rax, str.DalNBLatencyForUnderFlow
mov qword [rbp + 0x10], rax
lea rax, str.DalDramClockChangeLatencyNs
mov qword [rbp + 0x18], rax
lea rax, str.BGM_LTRSnoopL1Latency
mov qword [rbp + 0x20], rax
lea rax, str.BGM_LTRSnoopL0Latency
mov qword [rbp + 0x28], rax
lea rax, str.BGM_LTRNoSnoopL1Latency
mov qword [rbp + 0x30], rax
lea rax, str.BGM_LTRNoSnoopL0Latency
mov qword [rbp + 0x38], rax
lea rax, str.BGM_LTRMaxSnoopLatencyValue
mov qword [rbp + 0x40], rax
lea rax, str.BGM_LTRMaxNoSnoopLatencyValue
mov qword [rbp + 0x48], rax
lea rsi, [rbp - 0x40]
xorps xmm0, xmm0
movups xmmword [rbp - 0x60], xmm0
mov qword [rbp - 0x50], r14
mov qword [rbp - 0x48], r14
mov r8d, reloc.WS2_32.dll_recvfrom
lea rcx, [rbp - 0x60]
call fcn.14003f1e0
nop
lea r12, [0x1400e5fe6]
lea r15, str.reg_add__HKLMSYSTEMCurrentControlSetControlClass4d36e968_e325_11ce_bfc1_08002be103180000___v__
mov r8, qword [rbp - 0x50]
mov rcx, qword [rbp - 0x48]
mov rax, rcx
sub rax, r8
cmp rax, 0x66
jb 0x140048afa
lea rax, [r8 + 0x66]
mov qword [rbp - 0x50], rax
lea rbx, [rbp - 0x60]
cmp rcx, 0xf
cmova rbx, qword [rbp - 0x60]
cmp r12, rbx
jbe 0x140048ab9
lea rax, [rbx + r8]
cmp r15, rax
ja 0x140048ab9
cmp rbx, r15
ja 0x140048ab1
mov rdi, r14
jmp 0x140048abe
mov rdi, rbx
sub rdi, r15
jmp 0x140048abe
mov edi, 0x66
lea rcx, [rbx + 0x66]
inc r8
mov rdx, rbx
call sub.VCRUNTIME140.dll_memmove
mov r8, rdi
mov rdx, r15
mov rcx, rbx
call sub.VCRUNTIME140.dll_memcpy
lea rcx, [rbx + rdi]
mov r8d, 0x66
sub r8, rdi
lea rdx, [r15 + 0x66]
add rdx, rdi
call sub.VCRUNTIME140.dll_memcpy
lea rax, [rbp - 0x60]
jmp 0x140048b19
mov qword [rsp + 0x28], 0x66
mov qword [rsp + 0x20], r15
xor r9d, r9d
mov edx, 0x66
lea rcx, [rbp - 0x60]
call fcn.14003fb10
xorps xmm0, xmm0
movups xmmword [rsp + 0x40], xmm0
mov qword [rsp + 0x50], r14
mov qword [rsp + 0x58], r14
movups xmm0, xmmword [rax]
movups xmmword [rsp + 0x40], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rsp + 0x50], xmm1
mov qword [rax + 0x10], r14
mov qword [rax + 0x18], reloc.WS2_32.dll_ntohs
mov byte [rax], 0
mov r8d, Ordinal_27
lea rdx, str.___t_REG_DWORD__d__1___f
lea rcx, [rsp + 0x40]
call fcn.14003e8c0
xorps xmm0, xmm0
movups xmmword [rbp - 0x80], xmm0
mov qword [rbp - 0x70], r14
mov qword [rbp - 0x68], r14
movups xmm0, xmmword [rax]
movups xmmword [rbp - 0x80], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rbp - 0x70], xmm1
mov qword [rax + 0x10], r14
mov qword [rax + 0x18], reloc.WS2_32.dll_ntohs
mov byte [rax], 0
mov rdx, qword [rsp + 0x58]
cmp rdx, 0xf
jbe 0x140048bcc
inc rdx
mov rcx, qword [rsp + 0x40]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140048bc7
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140048cbe
call fcn.1400bd908
mov qword [rsp + 0x50], r14
mov qword [rsp + 0x58], reloc.WS2_32.dll_ntohs
mov byte [rsp + 0x40], 0
mov rdx, qword [rbp - 0x48]
cmp rdx, 0xf
jbe 0x140048c1a
inc rdx
mov rcx, qword [rbp - 0x60]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140048c15
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140048cc5
call fcn.1400bd908
lea r9, [rbp - 0x80]
cmp qword [rbp - 0x68], 0xf
cmova r9, qword [rbp - 0x80]
mov dword [rsp + 0x28], r14d
mov qword [rsp + 0x20], r14
lea r8, str.cmd.exe
lea rdx, str.runas
xor ecx, ecx
call qword [sym.imp.SHELL32.dll_ShellExecuteA]
mov rdx, qword [rbp - 0x68]
cmp rdx, 0xf
jbe 0x140048c7f
inc rdx
mov rcx, qword [rbp - 0x80]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140048c7a
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140048ccc
call fcn.1400bd908
add rsi, 8
lea rax, [rbp + 0x50]
cmp rsi, rax
je 0x140048cd3
mov rdx, qword [rsi]
xorps xmm0, xmm0
movups xmmword [rbp - 0x60], xmm0
mov qword [rbp - 0x50], r14
mov qword [rbp - 0x48], r14
mov r8, 0xffffffffffffffff
inc r8
cmp byte [rdx + r8], 0
jne 0x140048ca5
lea rcx, [rbp - 0x60]
call fcn.14003f1e0
nop
jmp 0x140048a70
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
nop
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
nop
mov rdx, qword [rsp + 0x78]
cmp rdx, 0xf
jbe 0x140048d13
inc rdx
mov rcx, qword [rsp + 0x60]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140048d0e
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140048d0e
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1400bd908
lea r11, [rsp + 0x1e0]
mov rbx, qword [r11 + 0x38]
mov rsi, qword [r11 + 0x40]
movaps xmm6, xmmword [r11 - 0x10]
mov rsp, r11
pop r15
pop r14
pop r12
pop rdi
pop rbp
ret
call fcn.140033040
nop
call fcn.140033040
int3
call fcn.140033040
int3
call fcn.140033040
int3
call fcn.140033040
int3
call fcn.140033040
int3
call fcn.140033040
int3
call fcn.140033040
int3
call fcn.140033040
int3
call fcn.140033040
int3
call fcn.140033040
int3
call fcn.140033040
int3
call fcn.140033040
int3
call fcn.140033040
int3
call fcn.140033040
int3
call fcn.140033040
int3
call fcn.140033040
int3
call fcn.140033040
int3
jmp 0x140046750