Function at 0x403f7c
Capabilities:
Get cpu information
Query or enumerate registry value

Disassembly:
push 0x418
mov eax, 0x563754
call fcn.0053da79
xor ecx, ecx
mov dword [ebp - 0x420], ecx
xor eax, eax
inc eax
mov dword [ebp - 0x418], eax
mov dword [ebp - 0x41c], 0x400
mov dword [edi + 0x14], 0xf
mov dword [edi + 0x10], ecx
mov dword [ebp - 0x424], edi
mov byte [edi], cl
mov esi, str._nSystem_information
mov dword [ebp - 4], ecx
push esi
mov dword [ebp - 0x420], eax
call fcn.00538710
pop ecx
mov ebx, eax
push esi
mov eax, edi
call fcn.00401cd3
lea eax, [ebp - 0x414]
push eax
push 0x20019
xor ebx, ebx
push ebx
push str.HARDWAREDESCRIPTIONSystemCentralProcessor0
push reloc.OLEAUT32.dll_SysReAllocString
call dword [sym.imp.ADVAPI32.dll_RegOpenKeyExA]
mov esi, 0x599110
test eax, eax
jne 0x40407a
lea eax, [ebp - 0x41c]
push eax
lea eax, [ebp - 0x410]
push eax
lea eax, [ebp - 0x418]
push eax
push ebx
push str.ProcessorNameString
push dword [ebp - 0x414]
call dword [sym.imp.ADVAPI32.dll_RegQueryValueExA]
test eax, eax
jne 0x40406c
push esi
call fcn.00538710
pop ecx
mov ebx, eax
push esi
mov eax, edi
call fcn.00401cd3
mov ebx, str.____H_W_________:
push ebx
call fcn.00538710
pop ecx
push ebx
mov ebx, eax
mov eax, edi
call fcn.00401cd3
cmp byte [ebp - 0x410], 0
lea eax, [ebp - 0x410]
jne 0x404065
mov eax, 0x599274
push eax
push edi
call fcn.0040513e
push dword [ebp - 0x414]
call dword [sym.imp.ADVAPI32.dll_RegCloseKey]
xor ebx, ebx
lea eax, [ebp - 0x414]
push eax
push 0x20019
push ebx
push str.SOFTWAREMicrosoftWindows_NTCurrentVersion
push reloc.OLEAUT32.dll_SysReAllocString
call dword [sym.imp.ADVAPI32.dll_RegOpenKeyExA]
test eax, eax
jne 0x4042a3
push 0x400
lea eax, [ebp - 0x410]
push ebx
push eax
call fcn.00539100
add esp, 0xc
lea eax, [ebp - 0x41c]
push eax
lea eax, [ebp - 0x410]
push eax
lea eax, [ebp - 0x418]
push eax
push ebx
push 0x5992ac
push dword [ebp - 0x414]
call dword [sym.imp.ADVAPI32.dll_RegQueryValueExA]
test eax, eax
jne 0x404121
push esi
call fcn.00538710
pop ecx
mov ebx, eax
push esi
mov eax, edi
call fcn.00401cd3
mov ebx, str.____ProductName_:
push ebx
call fcn.00538710
pop ecx
push ebx
mov ebx, eax
mov eax, edi
call fcn.00401cd3
cmp byte [ebp - 0x410], 0
lea eax, [ebp - 0x410]
jne 0x40411a
mov eax, 0x599274
push eax
push edi
call fcn.0040513e
push 0x400
lea eax, [ebp - 0x410]
push 0
push eax
call fcn.00539100
add esp, 0xc
lea eax, [ebp - 0x41c]
push eax
lea eax, [ebp - 0x410]
push eax
lea eax, [ebp - 0x418]
push eax
push 0
push str.EditionID
push dword [ebp - 0x414]
call dword [sym.imp.ADVAPI32.dll_RegQueryValueExA]
test eax, eax
jne 0x4041a5
push esi
call fcn.00538710
pop ecx
mov ebx, eax
push esi
mov eax, edi
call fcn.00401cd3
mov ebx, str.____EditionID___:
push ebx
call fcn.00538710
pop ecx
push ebx
mov ebx, eax
mov eax, edi
call fcn.00401cd3
cmp byte [ebp - 0x410], 0
lea eax, [ebp - 0x410]
jne 0x40419e
mov eax, 0x599274
push eax
push edi
call fcn.0040513e
push 0x400
lea eax, [ebp - 0x410]
push 0
push eax
call fcn.00539100
add esp, 0xc
lea eax, [ebp - 0x41c]
push eax
lea eax, [ebp - 0x410]
push eax
lea eax, [ebp - 0x418]
push eax
push 0
push str.ReleaseId
push dword [ebp - 0x414]
call dword [sym.imp.ADVAPI32.dll_RegQueryValueExA]
test eax, eax
jne 0x404229
push esi
call fcn.00538710
pop ecx
mov ebx, eax
push esi
mov eax, edi
call fcn.00401cd3
mov ebx, str.____ReleaseId___:
push ebx
call fcn.00538710
pop ecx
push ebx
mov ebx, eax
mov eax, edi
call fcn.00401cd3
cmp byte [ebp - 0x410], 0
lea eax, [ebp - 0x410]
jne 0x404222
mov eax, 0x599274
push eax
push edi
call fcn.0040513e
lea eax, [ebp - 0x41c]
push eax
lea eax, [ebp - 0x410]
push eax
lea eax, [ebp - 0x418]
push eax
push 0
push str.CSDVersion
push dword [ebp - 0x414]
call dword [sym.imp.ADVAPI32.dll_RegQueryValueExA]
test eax, eax
jne 0x404297
push esi
call fcn.00538710
pop ecx
mov ebx, eax
push esi
mov eax, edi
call fcn.00401cd3
mov esi, str.____CSDVersion__:
push esi
call fcn.00538710
pop ecx
mov ebx, eax
push esi
mov eax, edi
call fcn.00401cd3
cmp byte [ebp - 0x410], 0
lea eax, [ebp - 0x410]
jne 0x404290
mov eax, 0x599274
push eax
push edi
call fcn.0040513e
push dword [ebp - 0x414]
call dword [sym.imp.ADVAPI32.dll_RegCloseKey]
mov eax, edi
call fcn.0053dafc
ret