Function at 0x1006846f
Capabilities:
Get cpu information
Get memory capacity
Query or enumerate registry value

Disassembly:
push 0x8c
mov eax, 0x100a0fbe
call fcn.10094bdd
push 8
pop ecx
xor eax, eax
xor esi, esi
mov dword [ebp - 0x98], esi
lea edi, [ebp - 0x94]
rep stosd dword es:[edi], eax
lea eax, [ebp - 0x98]
push eax
call fcn.100285a8
push dword [ebp - 0x80]
mov ecx, dword [ebx + 0x3c]
mov eax, dword [ecx]
push 0x10
push dword [ecx + 4]
call dword [eax + 0x14]
test eax, eax
jne 0x100684cb
call dword [sym.imp.KERNEL32.dll_GetLastError]
cmp eax, esi
jle 0x100684c7
and eax, 0xffff
or eax, 0x80070000
mov edi, eax
jmp 0x100684cd
xor edi, edi
push 0x100150a0
lea eax, [ebp - 0x68]
push eax
call fcn.1005f361
push edi
push ebx
lea edi, [ebp - 0x68]
mov dword [ebp - 4], esi
call fcn.10068d48
or dword [ebp - 4], 0xffffffff
mov eax, dword [ebp - 0x68]
add eax, 0xfffffff0
call fcn.10084b37
push dword [ebp - 0x84]
mov ecx, dword [ebx + 0x3c]
mov eax, dword [ecx]
push 0xf
push dword [ecx + 4]
call dword [eax + 0x14]
test eax, eax
jne 0x10068526
call dword [sym.imp.KERNEL32.dll_GetLastError]
cmp eax, esi
jle 0x10068522
and eax, 0xffff
or eax, 0x80070000
mov edi, eax
jmp 0x10068528
xor edi, edi
push 0x100150e8
lea eax, [ebp - 0x70]
push eax
call fcn.1005f361
push edi
push ebx
lea edi, [ebp - 0x70]
mov dword [ebp - 4], 1
call fcn.10068d48
or dword [ebp - 4], 0xffffffff
mov eax, dword [ebp - 0x70]
add eax, 0xfffffff0
call fcn.10084b37
lea eax, [ebp - 0x64]
push eax
push 0x20019
push esi
push 0x10015130
push reloc.OLEAUT32.dll_SysReAllocString
call dword [sym.imp.ADVAPI32.dll_RegOpenKeyExW]
push 4
pop edi
test eax, eax
jne 0x1006864e
lea eax, [ebp - 0x5c]
push eax
lea eax, [ebp - 0x60]
push eax
push esi
push esi
push 0x10015190
push dword [ebp - 0x64]
mov dword [ebp - 0x60], esi
mov esi, dword [sym.imp.ADVAPI32.dll_RegQueryValueExW]
mov dword [ebp - 0x5c], edi
call esi
mov dword [ebp - 0x58], eax
test eax, eax
je 0x100685de
lea eax, [ebp - 0x5c]
push eax
lea eax, [ebp - 0x60]
push eax
push 0
push 0
push 0x1001519c
push dword [ebp - 0x64]
mov dword [ebp - 0x5c], edi
call esi
mov dword [ebp - 0x58], eax
test eax, eax
je 0x100685de
lea eax, [ebp - 0x5c]
push eax
lea eax, [ebp - 0x60]
push eax
push 0
push 0
push 0x100151a8
push dword [ebp - 0x64]
mov dword [ebp - 0x5c], edi
call esi
mov dword [ebp - 0x58], eax
push dword [ebp - 0x64]
call dword [sym.imp.ADVAPI32.dll_RegCloseKey]
cmp dword [ebp - 0x58], 0
jne 0x1006864c
push dword [ebp - 0x60]
mov ecx, dword [ebx + 0x3c]
mov eax, dword [ecx]
push 0x13
push dword [ecx + 4]
call dword [eax + 0x14]
test eax, eax
jne 0x10068619
call dword [sym.imp.KERNEL32.dll_GetLastError]
test eax, eax
jle 0x10068615
and eax, 0xffff
or eax, 0x80070000
mov esi, eax
jmp 0x1006861b
xor esi, esi
push 0x100150e8
lea eax, [ebp - 0x58]
push eax
call fcn.1005f361
push esi
push ebx
lea edi, [ebp - 0x58]
mov dword [ebp - 4], 2
call fcn.10068d48
or dword [ebp - 4], 0xffffffff
mov eax, dword [ebp - 0x58]
add eax, 0xfffffff0
call fcn.10084b37
push 4
pop edi
xor esi, esi
push 0x3c
lea eax, [ebp - 0x50]
push esi
push eax
mov dword [ebp - 0x54], esi
call fcn.1008a7e0
add esp, 0xc
push 0x40
pop edx
mov ecx, edx
lea eax, [ebp - 0x54]
mov byte [eax], 0
inc eax
dec ecx
jne 0x10068668
lea eax, [ebp - 0x54]
push eax
mov dword [ebp - 0x54], edx
call dword [sym.imp.KERNEL32.dll_GlobalMemoryStatusEx]
test eax, eax
je 0x100686db
mov eax, dword [ebp - 0x4c]
mov ecx, dword [ebp - 0x48]
shrd eax, ecx, 0x14
push eax
push 3
pop edi
shr ecx, 0x14
mov ecx, dword [ebx + 0x3c]
mov edx, dword [ecx]
push edi
push dword [ecx + 4]
call dword [edx + 0x14]
test eax, eax
jne 0x100686b7
call dword [sym.imp.KERNEL32.dll_GetLastError]
cmp eax, esi
jle 0x100686b5
and eax, 0xffff
or eax, 0x80070000
mov esi, eax
push 0x100151b4
lea eax, [ebp - 0x74]
push eax
call fcn.1005f361
push esi
mov dword [ebp - 4], edi
push ebx
lea edi, [ebp - 0x74]
call fcn.10068d48
or dword [ebp - 4], 0xffffffff
mov eax, dword [ebp - 0x74]
jmp 0x10068703
push 0x100151f0
lea eax, [ebp - 0x6c]
push eax
call fcn.1005f361
mov dword [ebp - 4], edi
call dword [sym.imp.KERNEL32.dll_GetLastError]
push eax
push ebx
lea edi, [ebp - 0x6c]
call fcn.10068d48
or dword [ebp - 4], 0xffffffff
mov eax, dword [ebp - 0x6c]
add eax, 0xfffffff0
call fcn.10084b37
mov ecx, ebx
call fcn.1006b8d8
call fcn.10094c6f
ret