Function at 0x14000e9c0
Capabilities:
Get cpu information
Query or enumerate registry value

Disassembly:
mov r11, rsp
push rbp
push rdi
push r14
sub rsp, 0x440
xor eax, eax
mov dword [r11 + 0x10], 0x3fe
mov dword [rsp + 0x30], eax
lea rdx, str.HARDWAREDESCRIPTIONSystemCentralProcessor0
lea rax, [r11 + 0x20]
mov rbp, rcx
xor r14d, r14d
mov qword [rsp + 0x20], rax
mov r9d, 0x20119
mov qword [r11 + 0x20], r14
xor r8d, r8d
mov dword [r11 + 0x18], r14d
mov rcx, 0xffffffff80000002
call qword [sym.imp.ADVAPI32.dll_RegOpenKeyExW]
test eax, eax
jne 0x14000ec6a
mov rcx, qword [rsp + 0x478]
lea rax, [rsp + 0x468]
mov qword [rsp + 0x28], rax
lea r9, [rsp + 0x470]
lea rax, [rsp + 0x30]
xor r8d, r8d
lea rdx, str.ProcessorNameString
mov qword [rsp + 0x20], rax
call qword [sym.imp.ADVAPI32.dll_RegQueryValueExW]
mov rcx, qword [rsp + 0x478]
mov edi, eax
call qword [sym.imp.ADVAPI32.dll_RegCloseKey]
test edi, edi
jne 0x14000ec6a
mov qword [rsp + 0x438], rbx
lea rax, [rsp + 0x30]
mov qword [rsp + 0x430], rsi
mov edi, r14d
mov esi, 0xffdf
mov word [rsp + 0x42e], r14w
nop dword [rax]
movzx edx, word [rax]
test dx, dx
je 0x14000eabd
cmp dx, 0x20
jne 0x14000ebe7
test word [rax + 2], si
je 0x14000eab1
mov ecx, edi
inc edi
mov word [rsp + rcx*2 + 0x30], dx
add rax, 2
cmp edi, 0x1ff
jb 0x14000ea90
mov eax, edi
lea rdx, str._Processor
lea rcx, [rsp + 0x30]
mov word [rsp + rax*2 + 0x30], r14w
call fcn.140030c6c
mov rbx, 0xffffffffffffffff
test rax, rax
je 0x14000eb1c
mov rdx, rbx
inc rdx
cmp word [rax + rdx*2 + 0x12], r14w
jne 0x14000eae5
add rdx, rdx
lea r8, [rax + 0x14]
mov rcx, rdx
mov rdi, rax
shr rcx, 2
mov rsi, r8
rep movsd dword [rdi], dword [rsi]
mov rcx, rdx
and ecx, 3
je 0x14000eb1c
and rdx, 0xfffffffffffffffc
lea rsi, [rdx + r8]
lea rdi, [rdx + rax]
rep movsb byte [rdi], byte [rsi]
lea rdx, str._Graphics
lea rcx, [rsp + 0x30]
call fcn.140030c6c
test rax, rax
je 0x14000eb69
inc rbx
cmp word [rax + rbx*2 + 0x10], r14w
jne 0x14000eb32
add rbx, rbx
lea rdx, [rax + 0x12]
mov rcx, rbx
mov rdi, rax
shr rcx, 2
mov rsi, rdx
rep movsd dword [rdi], dword [rsi]
mov rcx, rbx
and ecx, 3
je 0x14000eb69
and rbx, 0xfffffffffffffffc
lea rsi, [rbx + rdx]
lea rdi, [rbx + rax]
rep movsb byte [rdi], byte [rsi]
mov rbx, qword [rsp + 0x438]
cmp qword [rbp + 8], r14
je 0x14000ebd1
mov edx, dword [rbp + 0x14]
lea rcx, [rsp + 0x30]
call fcn.14003c814
mov ecx, dword [rbp + 0x14]
lea rsi, [rsp + 0x30]
cmp eax, ecx
lea r8d, [rcx - 1]
cmovb r8d, eax
mov rax, qword [rbp + 8]
mov rdi, rax
lea edx, [r8 + r8]
mov ecx, edx
shr rcx, 2
rep movsd dword [rdi], dword [rsi]
mov ecx, edx
and ecx, 3
je 0x14000ebc2
and rdx, 0xfffffffffffffffc
lea rsi, [rsp + 0x30]
add rsi, rdx
lea rdi, [rdx + rax]
rep movsb byte [rdi], byte [rsi]
mov ecx, r8d
mov dword [rbp + 0x10], ecx
mov rax, qword [rbp + 8]
mov word [rax + r8*2], r14w
mov rsi, qword [rsp + 0x430]
mov al, 1
add rsp, 0x440
pop r14
pop rdi
pop rbp
ret
cmp dx, 0x28
jne 0x14000ec41
movzx ecx, word [rax + 2]
cmp cx, 0x52
jne 0x14000ec0b
cmp word [rax + 4], 0x29
jne 0x14000eaa8
add rax, 4
jmp 0x14000eab1
cmp cx, 0x54
jne 0x14000ec30
cmp word [rax + 4], 0x4d
jne 0x14000eaa8
cmp word [rax + 6], 0x29
jne 0x14000eaa8
add rax, 6
jmp 0x14000eab1
cmp cx, 0x74
jne 0x14000eaa8
cmp word [rax + 4], 0x6d
jmp 0x14000ec16
cmp dx, 0x43
jne 0x14000eaa8
cmp word [rax + 2], 0x50
jne 0x14000eaa8
cmp word [rax + 4], 0x55
jne 0x14000eaa8
add rax, 4
jmp 0x14000eab1
xor al, al
add rsp, 0x440
pop r14
pop rdi
pop rbp
ret