Function at 0x1400aa310
Capabilities:
Get cpu information
Get system information on windows
Query or enumerate registry value

Disassembly:
mov qword [rsp + 0x18], rbx
push rbp
push rsi
push rdi
push r12
push r13
push r14
push r15
sub rsp, 0x3a0
mov rax, qword [0x140136348]
xor rax, rsp
mov qword [rsp + 0x390], rax
mov qword [rsp + 0x50], rdx
xor ebp, ebp
mov qword [rsp + 0x58], rcx
call fcn.1400b45a0
lea rcx, [rsp + 0x60]
call qword [sym.imp.KERNEL32.dll_GetSystemInfo]
mov edi, dword [rsp + 0x80]
lea edx, [rbp + 0x38]
mov ecx, edi
mov esi, edi
call fcn.1400a7ed0
mov r14, rax
test rax, rax
jne 0x1400aa378
lea ebx, [rbp + 0xe]
jmp 0x1400aa5d2
lea ebx, [rdi + rdi*2]
shl ebx, 4
mov ecx, ebx
call fcn.1400a8170
mov rbp, rax
test rax, rax
jne 0x1400aa392
lea ebx, [rax + 0xe]
jmp 0x1400aa3b6
lea r9, [rsp + 0x48]
mov r8d, ebx
mov rdx, rbp
mov ecx, 8
call qword [0x1403c1a20]
test eax, eax
jns 0x1400aa3c3
mov ecx, eax
call qword [0x1403c1a50]
mov ebx, eax
test edi, edi
je 0x1400aa5d2
jmp 0x1400aa5b8
xor r15d, r15d
test edi, edi
je 0x1400aa56e
lea r13, [rbp + 8]
lea r12, [r14 + 0x10]
nop word [rax + rax]
mov r9d, r15d
mov dword [rsp + 0x40], 4
lea r8, str.HARDWAREDESCRIPTIONSystemCentralProcessor_d
mov dword [rsp + 0x30], 0x200
mov edx, 0x80
lea rcx, [rsp + 0x90]
call fcn.1400a9950
lea rax, [rsp + 0x38]
mov r9d, 1
xor r8d, r8d
mov qword [rsp + 0x20], rax
lea rdx, [rsp + 0x90]
mov rcx, 0xffffffff80000002
call qword [sym.imp.ADVAPI32.dll_RegOpenKeyExW]
mov ebx, eax
test eax, eax
jne 0x1400aa5b8
mov rcx, qword [rsp + 0x38]
lea rax, [rsp + 0x40]
mov qword [rsp + 0x28], rax
lea rdx, str.MHz
lea rax, [rsp + 0x44]
xor r9d, r9d
xor r8d, r8d
mov qword [rsp + 0x20], rax
call qword [sym.imp.ADVAPI32.dll_RegQueryValueExW]
mov rcx, qword [rsp + 0x38]
mov ebx, eax
test eax, eax
jne 0x1400aa5b2
lea rax, [rsp + 0x30]
xor r9d, r9d
mov qword [rsp + 0x28], rax
lea rdx, str.ProcessorNameString
lea rax, [rsp + 0x190]
xor r8d, r8d
mov qword [rsp + 0x20], rax
call qword [sym.imp.ADVAPI32.dll_RegQueryValueExW]
mov rcx, qword [rsp + 0x38]
mov ebx, eax
call qword [sym.imp.ADVAPI32.dll_RegCloseKey]
test ebx, ebx
jne 0x1400aa5b8
mov eax, dword [rsp + 0x44]
movabs r8, 0x346dc5d63886594b
mov dword [r12 - 8], eax
mov rax, r8
imul qword [r13 + 8]
sar rdx, 0xb
mov rax, rdx
shr rax, 0x3f
add rdx, rax
mov rax, r8
mov qword [r12], rdx
mov rcx, qword [r13]
sub rcx, qword [r13 - 8]
imul rcx
lea rcx, [rsp + 0x190]
sar rdx, 0xb
mov rax, rdx
shr rax, 0x3f
add rdx, rax
mov rax, r8
mov qword [r12 + 0x10], rdx
imul qword [r13 - 8]
sar rdx, 0xb
mov rax, rdx
shr rax, 0x3f
add rdx, rax
mov rax, r8
mov qword [r12 + 0x18], rdx
lea r8, [r12 - 0x10]
imul qword [r13 + 0x18]
mov qword [r12 + 8], 0
sar rdx, 0xb
mov rax, rdx
shr rax, 0x3f
add rdx, rax
mov qword [r12 + 0x20], rdx
mov edx, dword [rsp + 0x30]
shr edx, 1
call fcn.1400a99b0
inc r15d
add r12, 0x38
add r13, 0x30
cmp r15d, edi
jb 0x1400aa3e0
mov rcx, rbp
call fcn.1400a7f70
mov rax, qword [rsp + 0x50]
mov dword [rax], edi
mov rax, qword [rsp + 0x58]
mov qword [rax], r14
xor eax, eax
mov rcx, qword [rsp + 0x390]
xor rcx, rsp
call fcn.1400cb6d0
mov rbx, qword [rsp + 0x3f0]
add rsp, 0x3a0
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbp
ret
call qword [sym.imp.ADVAPI32.dll_RegCloseKey]
mov rdi, r14
nop dword [rax + rax]
mov rcx, qword [rdi]
call fcn.1400a7f70
lea rdi, [rdi + 0x38]
sub rsi, 1
jne 0x1400aa5c0
mov rcx, r14
call fcn.1400a7f70
mov rcx, rbp
call fcn.1400a7f70
mov ecx, ebx
call fcn.1400b5700
jmp 0x1400aa587