Function at 0x40f300
Capabilities:
Access peb ldr_data
Contain obfuscated stackstrings
Get cpu information
Get number of processors
Query or enumerate registry value

Disassembly:
push 0xffffffffffffffff
push 0x4ae782
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
sub esp, 0x98
push esi
mov esi, ecx
lea ecx, [esp + 0x24]
mov dword [esp + 0x54], 0
call sub.MFC42.DLL_CString::CString_2
lea ecx, [esp + 0x18]
mov dword [esp + 0xa4], 1
call sub.MFC42.DLL_CString::CString_2
lea ecx, [esp + 0x1c]
mov byte [esp + 0xa4], 2
call sub.MFC42.DLL_CString::CString_2
lea eax, [esp + 0x28]
mov byte [esp + 0xa4], 3
push eax
push 1
push 0
push str.HardwareDescriptionSystemCentralProcessor0
push reloc.WS2_32.dll_bind
call dword [sym.imp.ADVAPI32.dll_RegOpenKeyExA]
test eax, eax
jne 0x40f41d
lea ecx, [esp + 0x14]
push edi
mov edi, dword [sym.imp.ADVAPI32.dll_RegQueryValueExA]
lea edx, [esp + 0x30]
push ecx
push edx
push eax
push eax
mov eax, dword [esp + 0x3c]
push str.MHz
push eax
mov dword [esp + 0x30], 4
call edi
test eax, eax
jne 0x40f3c1
mov ecx, dword [esp + 0x30]
lea edx, [esp + 0x1c]
push ecx
push str.Speed:__dMHz
push edx
call sub.MFC42.DLL_CString::Format_1
add esp, 0xc
jmp 0x40f3cf
push str.Speed:_Unknown
lea ecx, [esp + 0x20]
call sub.MFC42.DLL_CString::operator
mov edx, dword [esp + 0x2c]
lea eax, [esp + 0x18]
lea ecx, [esp + 0x60]
push eax
push ecx
push 0
push 0
push str.VendorIdentifier
push edx
mov dword [esp + 0x30], 0x40
call edi
test eax, eax
pop edi
jne 0x40f40f
lea eax, [esp + 0x5c]
lea ecx, [esp + 0x1c]
push eax
push str.Vendor:__s
push ecx
call sub.MFC42.DLL_CString::Format_1
add esp, 0xc
jmp 0x40f41d
push str.Vendor:_Unknown
lea ecx, [esp + 0x20]
call sub.MFC42.DLL_CString::operator
mov edx, dword [esp + 0x28]
push edx
call dword [sym.imp.ADVAPI32.dll_RegCloseKey]
lea ecx, [esp + 0x10]
call sub.MFC42.DLL_CString::CString_2
mov eax, dword [esi + 0x1c]
mov byte [esp + 0xa4], 4
cmp eax, 0x24a
ja 0x40f466
je 0x40f45f
sub eax, 0x182
je 0x40f458
sub eax, 0x64
jne 0x40f474
push str.Type:_Intel_486
jmp 0x40f487
push str.Type:_Intel_386
jmp 0x40f487
push str.Type:_Intel_Pentium_compatible
jmp 0x40f487
cmp eax, 0xfa0
je 0x40f482
cmp eax, 0x5248
je 0x40f47b
push str.Type:_Unknown
jmp 0x40f487
push str.Type:_Alpha
jmp 0x40f487
push str.Type:_MIPS
lea ecx, [esp + 0x14]
call sub.MFC42.DLL_CString::operator
lea ecx, [esp + 0x20]
call sub.MFC42.DLL_CString::CString_2
mov eax, dword [esi + 0x18]
lea ecx, [esp + 0x20]
push eax
push str.Number_Of_Processors:__lu
push ecx
mov byte [esp + 0xb0], 5
call sub.MFC42.DLL_CString::Format_1
add esp, 0xc
lea ecx, [esp + 0xc]
call sub.MFC42.DLL_CString::CString_2
lea ecx, [esp + 4]
mov byte [esp + 0xa4], 6
call sub.MFC42.DLL_CString::CString_2
lea ecx, [esp + 8]
mov byte [esp + 0xa4], 7
call sub.MFC42.DLL_CString::CString_2
xor eax, eax
mov byte [esp + 0xa4], 8
mov ax, word [esi + 4]
cmp eax, 2
jg 0x40f67c
je 0x40f626
mov ecx, eax
sub ecx, 0
je 0x40f567
dec ecx
jne 0x40f68c
push str.Architecture:_MIPS
lea ecx, [esp + 0x10]
call sub.MFC42.DLL_CString::operator
xor eax, eax
mov ax, word [esi + 0x24]
cmp eax, 4
je 0x40f53b
push eax
lea edx, [esp + 8]
push str.Level:_Unknown__u
push edx
call sub.MFC42.DLL_CString::Format_1
add esp, 0xc
jmp 0x40f549
push str.Level:_R4000
lea ecx, [esp + 8]
call sub.MFC42.DLL_CString::operator
xor eax, eax
lea ecx, [esp + 8]
mov ax, word [esi + 0x26]
push eax
push str.Stepping:_00_u
push ecx
call sub.MFC42.DLL_CString::Format_1
add esp, 0xc
jmp 0x40f7dd
push str.Architecture:_Intel
lea ecx, [esp + 0x10]
call sub.MFC42.DLL_CString::operator
xor eax, eax
mov ax, word [esi + 0x24]
lea ecx, [eax - 3]
cmp ecx, 3
ja case.default.0x40f587
jmp dword [ecx*4 + 0x40fa94]
push str.Level:_80386
lea ecx, [esp + 8]
call sub.MFC42.DLL_CString::operator
jmp 0x40f64d
push str.Level:_80486
lea ecx, [esp + 8]
call sub.MFC42.DLL_CString::operator
jmp 0x40f64d
push str.Level:_Pentium
lea ecx, [esp + 8]
call sub.MFC42.DLL_CString::operator
push str.IsProcessorFeaturePresentA
push str.kernel32.dll
call dword [sym.imp.KERNEL32.dll_GetModuleHandleA]
push eax
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
test eax, eax
je 0x40f6d9
push 3
call eax
add esp, 4
test eax, eax
je 0x40f6d9
push str._MMX
lea ecx, [esp + 8]
call fcn.004ac79a
jmp 0x40f6d9
push str.Level:_Pentium_II_Pro
lea ecx, [esp + 8]
call sub.MFC42.DLL_CString::operator
jmp 0x40f6d9
push eax
lea eax, [esp + 8]
push str.Level:_Unknown__u
push eax
jmp 0x40f6d1
push str.Architecture:_Alpha
lea ecx, [esp + 0x10]
call sub.MFC42.DLL_CString::operator
xor eax, eax
lea ecx, [esp + 4]
mov ax, word [esi + 0x24]
push eax
push str.Level:__u
push ecx
call sub.MFC42.DLL_CString::Format_1
add esp, 0xc
xor ecx, ecx
mov eax, 0x51eb851f
mov cx, word [esi + 0x26]
imul ecx
sar edx, 5
mov eax, edx
shr eax, 0x1f
add edx, eax
mov eax, ecx
mov esi, edx
mov ecx, 0x64
cdq
idiv ecx
push edx
push esi
push str.Stepping:__c_u
jmp 0x40f7d0
cmp eax, 3
je 0x40f708
cmp eax, 0xffff
je 0x40f6b2
push eax
lea eax, [esp + 0x10]
push str.Architecture:_Unknown__u
push eax
call sub.MFC42.DLL_CString::Format_1
add esp, 0xc
xor ecx, ecx
mov cx, word [esi + 0x24]
lea edx, [esp + 4]
push ecx
push str.Level:_Unknown__u
push edx
jmp 0x40f6d1
push str.Architecture:_Unknown
lea ecx, [esp + 0x10]
call sub.MFC42.DLL_CString::operator
xor eax, eax
lea ecx, [esp + 4]
mov ax, word [esi + 0x24]
push eax
push str.Level:_Unknown__u
push ecx
call sub.MFC42.DLL_CString::Format_1
add esp, 0xc
xor ecx, ecx
mov eax, 0x51eb851f
mov cx, word [esi + 0x26]
imul ecx
sar edx, 5
mov eax, edx
shr eax, 0x1f
add edx, eax
mov eax, ecx
mov esi, edx
mov ecx, 0x64
cdq
idiv ecx
push edx
push esi
push str.Stepping:__u__u
jmp 0x40f7d0
push str.Architecture:_PowerPC
lea ecx, [esp + 0x10]
call sub.MFC42.DLL_CString::operator
xor eax, eax
mov ax, word [esi + 0x24]
lea ecx, [eax - 1]
cmp ecx, 0x13
ja case.0x40f72c.7
xor edx, edx
mov dl, byte [ecx + 0x40fac0]
jmp dword [edx*4 + 0x40faa4]
push str.Level:_601
lea ecx, [esp + 8]
call sub.MFC42.DLL_CString::operator
jmp 0x40f7a6
push str.Level:_603
lea ecx, [esp + 8]
call sub.MFC42.DLL_CString::operator
jmp 0x40f7a6
push str.Level:_604
lea ecx, [esp + 8]
call sub.MFC42.DLL_CString::operator
jmp 0x40f7a6
push 0x4e05d4
lea ecx, [esp + 8]
call sub.MFC42.DLL_CString::operator
jmp 0x40f7a6
push 0x4e05c4
lea ecx, [esp + 8]
call sub.MFC42.DLL_CString::operator
jmp 0x40f7a6
push str.Level:_620
lea ecx, [esp + 8]
call sub.MFC42.DLL_CString::operator
jmp 0x40f7a6
push eax
lea eax, [esp + 8]
push str.Level:_Unknown__u
push eax
call sub.MFC42.DLL_CString::Format_1
add esp, 0xc
xor ecx, ecx
mov eax, 0x51eb851f
mov cx, word [esi + 0x26]
imul ecx
sar edx, 5
mov eax, edx
shr eax, 0x1f
add edx, eax
mov eax, ecx
mov esi, edx
mov ecx, 0x64
cdq
idiv ecx
push edx
push esi
push str.Stepping:__u._u
lea edx, [esp + 0x14]
push edx
call sub.MFC42.DLL_CString::Format_1
add esp, 0x10
lea eax, [esp + 0x1c]
push 0x4df1dc
lea ecx, [esp + 0x50]
push eax
push ecx
call sub.MFC42.DLL_operator_3
lea edx, [esp + 0x18]
mov byte [esp + 0xa4], 9
push edx
push eax
lea eax, [esp + 0x4c]
push eax
call sub.MFC42.DLL_operator_4
push 0x4df1dc
lea ecx, [esp + 0x40]
push eax
push ecx
mov byte [esp + 0xb0], 0xa
call sub.MFC42.DLL_operator_3
lea edx, [esp + 0x10]
mov byte [esp + 0xa4], 0xb
push edx
push eax
lea eax, [esp + 0x3c]
push eax
call sub.MFC42.DLL_operator_4
push 0x4df1dc
lea ecx, [esp + 0x4c]
push eax
push ecx
mov byte [esp + 0xb0], 0xc
call sub.MFC42.DLL_operator_3
lea edx, [esp + 0x20]
mov byte [esp + 0xa4], 0xd
push edx
push eax
lea eax, [esp + 0x58]
push eax
call sub.MFC42.DLL_operator_4
push 0x4df1dc
lea ecx, [esp + 0x44]
push eax
push ecx
mov byte [esp + 0xb0], 0xe
call sub.MFC42.DLL_operator_3
lea edx, [esp + 0xc]
mov byte [esp + 0xa4], 0xf
push edx
push eax
lea eax, [esp + 0x60]
push eax
call sub.MFC42.DLL_operator_4
push 0x4df1dc
lea ecx, [esp + 0x3c]
push eax
push ecx
mov byte [esp + 0xb0], 0x10
call sub.MFC42.DLL_operator_3
lea edx, [esp + 4]
mov byte [esp + 0xa4], 0x11
push edx
push eax
lea eax, [esp + 0x38]
push eax
call sub.MFC42.DLL_operator_4
push 0x4df1dc
lea ecx, [esp + 0x18]
push eax
push ecx
mov byte [esp + 0xb0], 0x12
call sub.MFC42.DLL_operator_3
lea edx, [esp + 8]
mov byte [esp + 0xa4], 0x13
push edx
push eax
lea eax, [esp + 0x34]
push eax
call sub.MFC42.DLL_operator_4
push eax
lea ecx, [esp + 0x28]
mov byte [esp + 0xa8], 0x14
call sub.MFC42.DLL_CString::operator_1
lea ecx, [esp + 0x2c]
mov byte [esp + 0xa4], 0x13
call sub.MFC42.DLL_CString::CString
lea ecx, [esp + 0x14]
mov byte [esp + 0xa4], 0x12
call sub.MFC42.DLL_CString::CString
lea ecx, [esp + 0x30]
mov byte [esp + 0xa4], 0x11
call sub.MFC42.DLL_CString::CString
lea ecx, [esp + 0x38]
mov byte [esp + 0xa4], 0x10
call sub.MFC42.DLL_CString::CString
lea ecx, [esp + 0x58]
mov byte [esp + 0xa4], 0xf
call sub.MFC42.DLL_CString::CString
lea ecx, [esp + 0x40]
mov byte [esp + 0xa4], 0xe
call sub.MFC42.DLL_CString::CString
lea ecx, [esp + 0x50]
mov byte [esp + 0xa4], 0xd
call sub.MFC42.DLL_CString::CString
lea ecx, [esp + 0x48]
mov byte [esp + 0xa4], 0xc
call sub.MFC42.DLL_CString::CString
lea ecx, [esp + 0x34]
mov byte [esp + 0xa4], 0xb
call sub.MFC42.DLL_CString::CString
lea ecx, [esp + 0x3c]
mov byte [esp + 0xa4], 0xa
call sub.MFC42.DLL_CString::CString
lea ecx, [esp + 0x44]
mov byte [esp + 0xa4], 9
call sub.MFC42.DLL_CString::CString
lea ecx, [esp + 0x4c]
mov byte [esp + 0xa4], 8
call sub.MFC42.DLL_CString::CString
mov esi, dword [esp + 0xac]
lea ecx, [esp + 0x24]
push ecx
mov ecx, esi
call sub.MFC42.DLL_CString::CString_1
mov dword [esp + 0x54], 1
lea ecx, [esp + 8]
mov byte [esp + 0xa4], 7
call sub.MFC42.DLL_CString::CString
lea ecx, [esp + 4]
mov byte [esp + 0xa4], 6
call sub.MFC42.DLL_CString::CString
lea ecx, [esp + 0xc]
mov byte [esp + 0xa4], 5
call sub.MFC42.DLL_CString::CString
lea ecx, [esp + 0x20]
mov byte [esp + 0xa4], 4
call sub.MFC42.DLL_CString::CString
lea ecx, [esp + 0x10]
mov byte [esp + 0xa4], 3
call sub.MFC42.DLL_CString::CString
lea ecx, [esp + 0x1c]
mov byte [esp + 0xa4], 2
call sub.MFC42.DLL_CString::CString
lea ecx, [esp + 0x18]
mov byte [esp + 0xa4], 1
call sub.MFC42.DLL_CString::CString
lea ecx, [esp + 0x24]
mov byte [esp + 0xa4], 0
call sub.MFC42.DLL_CString::CString
mov eax, esi
mov ecx, dword [esp + 0x9c]
pop esi
mov dword fs:[0], ecx
add esp, 0xa4
ret 4