Function at 0x10072b9d
Capabilities:
Get cpu information
Get memory capacity
Query or enumerate registry value

Disassembly:
push 0x12c
mov eax, 0x100b1efb
call fcn.100a56bc
mov ebx, ecx
push 9
pop ecx
xor eax, eax
lea edi, [ebp - 0x138]
rep stosd dword es:[edi], eax
lea ecx, [ebp - 0x138]
call fcn.1003023e
mov edi, dword [ebx + 0x3c]
push dword [ebp - 0x120]
push 0x10
mov eax, dword [edi]
push dword [edi + 4]
mov esi, dword [eax + 0x14]
mov ecx, esi
call dword [0x100d0614]
mov ecx, edi
call esi
test eax, eax
jne 0x10072c00
call dword [sym.imp.kernel32.dll_GetLastError]
mov esi, eax
test esi, esi
jle 0x10072c02
movzx esi, si
or esi, 0x80070000
jmp 0x10072c02
xor esi, esi
push 0x10019cb8
lea ecx, [ebp - 0xe8]
call fcn.1006f4e2
and dword [ebp - 4], 0
lea eax, [ebp - 0xe8]
push eax
push esi
mov ecx, ebx
call fcn.1007235f
or dword [ebp - 4], 0xffffffff
mov ecx, dword [ebp - 0xe8]
lea ecx, [ecx - 0x10]
call fcn.1008ebf5
mov edi, dword [ebx + 0x3c]
push dword [ebp - 0x124]
push 0xf
mov eax, dword [edi]
push dword [edi + 4]
mov esi, dword [eax + 0x14]
mov ecx, esi
call dword [0x100d0614]
mov ecx, edi
call esi
test eax, eax
jne 0x10072c71
call dword [sym.imp.kernel32.dll_GetLastError]
mov esi, eax
test esi, esi
jle 0x10072c73
movzx esi, si
or esi, 0x80070000
jmp 0x10072c73
xor esi, esi
push 0x10019d10
lea ecx, [ebp - 0xec]
call fcn.1006f4e2
lea eax, [ebp - 0xec]
mov dword [ebp - 4], 1
push eax
push esi
mov ecx, ebx
call fcn.1007235f
or dword [ebp - 4], 0xffffffff
mov ecx, dword [ebp - 0xec]
lea ecx, [ecx - 0x10]
call fcn.1008ebf5
and dword [ebp - 0xdc], 0
lea eax, [ebp - 0xe0]
push eax
push 0x20019
push 0
push 0x10019d58
push reloc.OLEAUT32.dll_SysReAllocString
call dword [sym.imp.advapi32.dll_RegOpenKeyExW]
push 4
pop edi
test eax, eax
jne 0x10072deb
lea eax, [ebp - 0xd8]
mov dword [ebp - 0xd8], edi
push eax
lea eax, [ebp - 0xdc]
push eax
push 0
push 0
push 0x10019db8
push dword [ebp - 0xe0]
call dword [sym.imp.advapi32.dll_RegQueryValueExW]
mov esi, eax
test esi, esi
je 0x10072d64
lea eax, [ebp - 0xd8]
mov dword [ebp - 0xd8], edi
push eax
lea eax, [ebp - 0xdc]
push eax
push 0
push 0
push 0x10019dd4
push dword [ebp - 0xe0]
call dword [sym.imp.advapi32.dll_RegQueryValueExW]
mov esi, eax
test esi, esi
je 0x10072d64
lea eax, [ebp - 0xd8]
mov dword [ebp - 0xd8], edi
push eax
lea eax, [ebp - 0xdc]
push eax
push 0
push 0
push 0x10019df8
push dword [ebp - 0xe0]
call dword [sym.imp.advapi32.dll_RegQueryValueExW]
mov esi, eax
push dword [ebp - 0xe0]
call dword [sym.imp.advapi32.dll_RegCloseKey]
test esi, esi
jne 0x10072deb
mov edi, dword [ebx + 0x3c]
push dword [ebp - 0xdc]
push 0x13
mov eax, dword [edi]
push dword [edi + 4]
mov esi, dword [eax + 0x14]
mov ecx, esi
call dword [0x100d0614]
mov ecx, edi
call esi
test eax, eax
jne 0x10072dae
call dword [sym.imp.kernel32.dll_GetLastError]
mov esi, eax
test esi, esi
jle 0x10072db0
movzx esi, si
or esi, 0x80070000
jmp 0x10072db0
xor esi, esi
push 0x10019e04
lea ecx, [ebp - 0xf0]
call fcn.1006f4e2
lea eax, [ebp - 0xf0]
mov dword [ebp - 4], 2
push eax
push esi
mov ecx, ebx
call fcn.1007235f
or dword [ebp - 4], 0xffffffff
mov ecx, dword [ebp - 0xf0]
lea ecx, [ecx - 0x10]
call fcn.1008ebf5
push 4
pop edi
push 0x40
pop esi
push esi
lea eax, [ebp - 0xd4]
push 0
push eax
call fcn.10093d90
add esp, 0xc
lea eax, [ebp - 0xd4]
mov ecx, esi
mov byte [eax], 0
inc eax
sub ecx, 1
jne 0x10072e08
lea eax, [ebp - 0xd4]
mov dword [ebp - 0xd4], esi
push eax
xor esi, esi
call dword [sym.imp.kernel32.dll_GlobalMemoryStatusEx]
test eax, eax
je 0x10072ebe
mov ecx, dword [ebp - 0xcc]
mov eax, dword [ebp - 0xc8]
mov edi, dword [ebx + 0x3c]
shrd ecx, eax, 0x14
shr eax, 0x14
mov eax, dword [edi]
push ecx
push 3
push dword [edi + 4]
mov esi, dword [eax + 0x14]
mov dword [ebp - 0xe4], ecx
mov ecx, esi
call dword [0x100d0614]
mov ecx, edi
call esi
test eax, eax
jne 0x10072e7c
call dword [sym.imp.kernel32.dll_GetLastError]
mov esi, eax
test esi, esi
jle 0x10072e7e
movzx esi, si
or esi, 0x80070000
jmp 0x10072e7e
xor esi, esi
push 0x10019e3c
lea ecx, [ebp - 0xf4]
call fcn.1006f4e2
lea eax, [ebp - 0xf4]
mov dword [ebp - 4], 3
push eax
push esi
mov ecx, ebx
call fcn.1007235f
or dword [ebp - 4], 0xffffffff
mov ecx, dword [ebp - 0xf4]
lea ecx, [ecx - 0x10]
call fcn.1008ebf5
mov esi, dword [ebp - 0xe4]
jmp 0x10072ef8
push 0x10019e78
lea ecx, [ebp - 0xe4]
call fcn.1006f4e2
lea eax, [ebp - 0xe4]
mov dword [ebp - 4], edi
push eax
call dword [sym.imp.kernel32.dll_GetLastError]
push eax
mov ecx, ebx
call fcn.1007235f
or dword [ebp - 4], 0xffffffff
mov ecx, dword [ebp - 0xe4]
lea ecx, [ecx - 0x10]
call fcn.1008ebf5
mov ecx, ebx
call fcn.100777f4
cmp byte [ebx + 0x80], 0
mov edi, eax
je 0x10072ff9
cmp dword [0x100c6840], 5
jbe 0x10072ff9
push 0x2000
push 0
call fcn.10091a7b
test al, al
je 0x10072ff9
mov eax, dword [ebx + 0x84]
xor edx, edx
mov dword [ebp - 0x114], eax
lea eax, [ebp - 0x114]
mov dword [ebp - 0x74], eax
mov eax, dword [ebp - 0x120]
mov dword [ebp - 0xf8], eax
lea eax, [ebp - 0xf8]
mov dword [ebp - 0x64], eax
mov eax, dword [ebp - 0x124]
mov dword [ebp - 0xfc], eax
lea eax, [ebp - 0xfc]
mov dword [ebp - 0x54], eax
mov eax, dword [ebp - 0xdc]
mov dword [ebp - 0x100], eax
lea eax, [ebp - 0x100]
push 8
pop ecx
mov dword [ebp - 0x44], eax
lea eax, [ebp - 0x104]
push 4
pop ebx
mov dword [ebp - 0x34], eax
lea eax, [ebp - 0x108]
mov dword [ebp - 0x110], edx
mov dword [ebp - 0x70], edx
mov dword [ebp - 0x6c], ecx
mov dword [ebp - 0x68], edx
mov dword [ebp - 0x60], edx
mov dword [ebp - 0x5c], ebx
mov dword [ebp - 0x58], edx
mov dword [ebp - 0x50], edx
mov dword [ebp - 0x4c], ebx
mov dword [ebp - 0x48], edx
mov dword [ebp - 0x40], edx
mov dword [ebp - 0x3c], ebx
mov dword [ebp - 0x38], edx
mov dword [ebp - 0x104], esi
mov dword [ebp - 0x30], edx
mov dword [ebp - 0x2c], ebx
mov dword [ebp - 0x28], edx
mov dword [ebp - 0x108], edi
mov dword [ebp - 0x24], eax
mov dword [ebp - 0x20], edx
mov dword [ebp - 0x1c], ebx
mov dword [ebp - 0x18], edx
lea eax, [ebp - 0x94]
mov edx, 0x1002c376
push eax
push ecx
push ecx
push ecx
call fcn.10091a7b
call fcn.100a5666
ret