Function at 0x20001280
Capabilities:
Get cpu information
Get memory capacity
Get system information on windows
Query or enumerate registry value

Disassembly:
push ebp
mov ebp, esp
and esp, 0xffffffc0
sub esp, 0xb4
xor eax, eax
push ebx
push esi
push edi
mov dword [esp + 0x60], eax
mov dword [esp + 0x64], eax
mov dword [esp + 0x68], eax
mov dword [esp + 0x6c], eax
mov dword [esp + 0x70], eax
mov dword [esp + 0x74], eax
mov dword [esp + 0x78], eax
mov dword [esp + 0x7c], eax
lea eax, [esp + 0x5c]
xor edi, edi
push eax
mov dword [esp + 0x60], edi
call dword [sym.imp.KERNEL32.dll_GetSystemInfo]
push 0x3c
lea ecx, [esp + 0x88]
push edi
push ecx
call fcn.2001af00
add esp, 0xc
lea edx, [esp + 0x80]
push edx
mov dword [esp + 0x84], 0x40
call dword [sym.imp.KERNEL32.dll_GlobalMemoryStatusEx]
call fcn.2000e120
cmp eax, edi
jne 0x20001301
push 0x80004005
call fcn.20001720
mov edx, dword [eax]
mov ecx, eax
mov eax, dword [edx + 0xc]
call eax
add eax, 0x10
lea esi, [esp + 0x3c]
mov dword [esp + 0x3c], eax
call fcn.2000baf0
lea ecx, [esp + 0x38]
push ecx
push 1
push edi
push str.HARDWAREDESCRIPTIONSystemCentralProcessor0
push reloc.OLEAUT32.dll_SysReAllocString
mov dword [esp + 0x5c], edi
call dword [sym.imp.ADVAPI32.dll_RegOpenKeyExW]
test eax, eax
jne 0x2000136d
lea edx, [esp + 0x4c]
push edx
mov edx, dword [esp + 0x3c]
lea eax, [esp + 0x4c]
push eax
lea ecx, [esp + 0x48]
push ecx
push edi
push str.MHz
push edx
mov dword [esp + 0x64], 4
call dword [sym.imp.ADVAPI32.dll_RegQueryValueExW]
mov eax, dword [esp + 0x38]
push eax
call dword [sym.imp.ADVAPI32.dll_RegCloseKey]
call fcn.2000e120
cmp eax, edi
jne 0x20001380
push 0x80004005
call fcn.20001720
mov edx, dword [eax]
mov ecx, eax
mov eax, dword [edx + 0xc]
call eax
add eax, 0x10
lea ebx, [esp + 0x3c]
mov dword [esp + 0x38], eax
call fcn.20001530
mov edi, eax
call fcn.200015b0
mov ecx, dword [esp + 0x88]
mov dword [esp + 0x40], ecx
mov esi, eax
mov eax, dword [esp + 0x8c]
mov ecx, eax
and eax, 0x7fffffff
mov dword [esp + 0x44], eax
fild qword [esp + 0x40]
and ecx, 0x80000000
mov dword [esp + 0x44], ecx
mov dword [esp + 0x40], 0
fild qword [esp + 0x40]
sub esp, 8
lea edx, [esp + 0x58]
fchs
faddp st(1)
fstp qword [esp]
push edx
call fcn.2000b4a0
mov edx, dword [eax]
mov ecx, esp
mov dword [ecx], edx
mov edx, dword [eax + 4]
mov eax, dword [eax + 8]
mov dword [ecx + 4], edx
mov edx, dword [esp + 0x7c]
mov dword [ecx + 8], eax
mov ecx, dword [esp + 0x54]
mov eax, dword [esi]
push ecx
push edx
push eax
lea ecx, [esp + 0x50]
push str.CPU:__s___d_Cores___u_MHz___RAM:__s
push ecx
call fcn.200018e0
xor eax, eax
add esp, 0x20
cmp dword [esp + 0x58], eax
jbe 0x20001443
jmp 0x20001430
mov edx, dword [esp + 0x50]
mov word [edx + eax*2], 0
add eax, 1
cmp eax, dword [esp + 0x58]
jb 0x20001430
mov eax, dword [esp + 0x54]
push eax
call fcn.2000e116
mov esi, dword [esp + 0x3c]
add esp, 4
push esi
call dword [sym.imp.OLEAUT32.dll_SysReAllocString]
mov ecx, dword [ebp + 8]
mov dword [ecx], eax
lea eax, [esi - 0x10]
lea edx, [eax + 0xc]
or ecx, 0xffffffff
lock xadd dword [edx], ecx
dec ecx
test ecx, ecx
jg 0x2000147c
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov eax, dword [esp + 0x3c]
add eax, 0xfffffff0
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x2000149c
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret