Function at 0x403fb7
Capabilities:
Get cpu information
Query or enumerate registry value

Disassembly:
push 0x418
mov eax, 0x562a3f
call fcn.0053cd89
xor ecx, ecx
mov dword [ebp - 0x420], ecx
xor eax, eax
inc eax
mov dword [ebp - 0x418], eax
mov dword [ebp - 0x41c], 0x400
mov dword [edi + 0x14], 0xf
mov dword [edi + 0x10], ecx
mov dword [ebp - 0x424], edi
mov byte [edi], cl
mov esi, str._nSystem_information
mov dword [ebp - 4], ecx
push esi
mov dword [ebp - 0x420], eax
call fcn.00537a20
pop ecx
mov ebx, eax
push esi
mov eax, edi
call fcn.00401ce8
lea eax, [ebp - 0x414]
push eax
push 0x20019
xor ebx, ebx
push ebx
push str.HARDWAREDESCRIPTIONSystemCentralProcessor0
push reloc.OLEAUT32.dll_SysReAllocString
call dword [sym.imp.ADVAPI32.dll_RegOpenKeyExA]
mov esi, 0x5990f0
test eax, eax
jne 0x4040b5
lea eax, [ebp - 0x41c]
push eax
lea eax, [ebp - 0x410]
push eax
lea eax, [ebp - 0x418]
push eax
push ebx
push str.ProcessorNameString
push dword [ebp - 0x414]
call dword [sym.imp.ADVAPI32.dll_RegQueryValueExA]
test eax, eax
jne 0x4040a7
push esi
call fcn.00537a20
pop ecx
mov ebx, eax
push esi
mov eax, edi
call fcn.00401ce8
mov ebx, str.____H_W_________:
push ebx
call fcn.00537a20
pop ecx
push ebx
mov ebx, eax
mov eax, edi
call fcn.00401ce8
cmp byte [ebp - 0x410], 0
lea eax, [ebp - 0x410]
jne 0x4040a0
mov eax, 0x599254
push eax
push edi
call fcn.00405179
push dword [ebp - 0x414]
call dword [sym.imp.ADVAPI32.dll_RegCloseKey]
xor ebx, ebx
lea eax, [ebp - 0x414]
push eax
push 0x20019
push ebx
push str.SOFTWAREMicrosoftWindows_NTCurrentVersion
push reloc.OLEAUT32.dll_SysReAllocString
call dword [sym.imp.ADVAPI32.dll_RegOpenKeyExA]
test eax, eax
jne 0x4042de
push 0x400
lea eax, [ebp - 0x410]
push ebx
push eax
call fcn.00538410
add esp, 0xc
lea eax, [ebp - 0x41c]
push eax
lea eax, [ebp - 0x410]
push eax
lea eax, [ebp - 0x418]
push eax
push ebx
push 0x59928c
push dword [ebp - 0x414]
call dword [sym.imp.ADVAPI32.dll_RegQueryValueExA]
test eax, eax
jne 0x40415c
push esi
call fcn.00537a20
pop ecx
mov ebx, eax
push esi
mov eax, edi
call fcn.00401ce8
mov ebx, str.____ProductName_:
push ebx
call fcn.00537a20
pop ecx
push ebx
mov ebx, eax
mov eax, edi
call fcn.00401ce8
cmp byte [ebp - 0x410], 0
lea eax, [ebp - 0x410]
jne 0x404155
mov eax, 0x599254
push eax
push edi
call fcn.00405179
push 0x400
lea eax, [ebp - 0x410]
push 0
push eax
call fcn.00538410
add esp, 0xc
lea eax, [ebp - 0x41c]
push eax
lea eax, [ebp - 0x410]
push eax
lea eax, [ebp - 0x418]
push eax
push 0
push str.EditionID
push dword [ebp - 0x414]
call dword [sym.imp.ADVAPI32.dll_RegQueryValueExA]
test eax, eax
jne 0x4041e0
push esi
call fcn.00537a20
pop ecx
mov ebx, eax
push esi
mov eax, edi
call fcn.00401ce8
mov ebx, str.____EditionID___:
push ebx
call fcn.00537a20
pop ecx
push ebx
mov ebx, eax
mov eax, edi
call fcn.00401ce8
cmp byte [ebp - 0x410], 0
lea eax, [ebp - 0x410]
jne 0x4041d9
mov eax, 0x599254
push eax
push edi
call fcn.00405179
push 0x400
lea eax, [ebp - 0x410]
push 0
push eax
call fcn.00538410
add esp, 0xc
lea eax, [ebp - 0x41c]
push eax
lea eax, [ebp - 0x410]
push eax
lea eax, [ebp - 0x418]
push eax
push 0
push str.ReleaseId
push dword [ebp - 0x414]
call dword [sym.imp.ADVAPI32.dll_RegQueryValueExA]
test eax, eax
jne 0x404264
push esi
call fcn.00537a20
pop ecx
mov ebx, eax
push esi
mov eax, edi
call fcn.00401ce8
mov ebx, str.____ReleaseId___:
push ebx
call fcn.00537a20
pop ecx
push ebx
mov ebx, eax
mov eax, edi
call fcn.00401ce8
cmp byte [ebp - 0x410], 0
lea eax, [ebp - 0x410]
jne 0x40425d
mov eax, 0x599254
push eax
push edi
call fcn.00405179
lea eax, [ebp - 0x41c]
push eax
lea eax, [ebp - 0x410]
push eax
lea eax, [ebp - 0x418]
push eax
push 0
push str.CSDVersion
push dword [ebp - 0x414]
call dword [sym.imp.ADVAPI32.dll_RegQueryValueExA]
test eax, eax
jne 0x4042d2
push esi
call fcn.00537a20
pop ecx
mov ebx, eax
push esi
mov eax, edi
call fcn.00401ce8
mov esi, str.____CSDVersion__:
push esi
call fcn.00537a20
pop ecx
mov ebx, eax
push esi
mov eax, edi
call fcn.00401ce8
cmp byte [ebp - 0x410], 0
lea eax, [ebp - 0x410]
jne 0x4042cb
mov eax, 0x599254
push eax
push edi
call fcn.00405179
push dword [ebp - 0x414]
call dword [sym.imp.ADVAPI32.dll_RegCloseKey]
mov eax, edi
call fcn.0053ce0c
ret