Function at 0x1402a06f0
Capabilities:
Get cpu information
Get system information on windows
Query or enumerate registry value

Disassembly:
push rbp
push rbx
push rsi
push rdi
push r14
lea rbp, [rsp - 0x37]
sub rsp, 0x90
cmp dword [0x1407134a0], 0x38
je 0x1402a0df3
xorps xmm0, xmm0
xor eax, eax
movups xmmword [0x1407134a0], xmm0
movups xmmword [0x1407134b0], xmm0
movups xmmword [0x1407134c0], xmm0
mov qword [0x1407134d0], rax
mov dword [0x1407134a0], 0x38
xor ebx, ebx
mov edi, ebx
mov qword [rbp + 0x7f], rbx
lea rax, [rbp + 0x7f]
mov qword [rsp + 0x20], rax
mov r9d, 0x20019
xor r8d, r8d
lea rdx, str.HARDWAREDESCRIPTIONSystemCentralProcessor0
mov rcx, 0xffffffff80000002
call qword [sym.imp.ADVAPI32.dll_RegOpenKeyExA]
test eax, eax
jne 0x1402a07c7
mov dword [rbp + 0x6f], ebx
mov dword [rbp + 0x67], ebx
mov dword [rbp + 0x77], 4
lea rax, [rbp + 0x77]
mov qword [rsp + 0x28], rax
lea rax, [rbp + 0x6f]
mov qword [rsp + 0x20], rax
lea r9, [rbp + 0x67]
xor r8d, r8d
lea rdx, str.MHz
mov rcx, qword [rbp + 0x7f]
call qword [sym.imp.ADVAPI32.dll_RegQueryValueExA]
test eax, eax
jne 0x1402a07b8
cmp dword [rbp + 0x67], 4
jne 0x1402a07b8
mov eax, dword [rbp + 0x6f]
imul rdi, rax, 0xf4240
mov rcx, qword [rbp + 0x7f]
call qword [sym.imp.ADVAPI32.dll_RegCloseKey]
test rdi, rdi
jne 0x1402a07cc
mov edi, 0x77359400
mov qword [0x1407134b0], rdi
xorps xmm0, xmm0
movups xmmword [rbp - 1], xmm0
movups xmmword [rbp + 0xf], xmm0
movups xmmword [rbp + 0x1f], xmm0
lea rcx, [rbp - 1]
call qword [sym.imp.KERNEL32.dll_GetSystemInfo]
mov esi, dword [rbp + 0x1f]
mov edx, 4
lea rcx, [rbp - 0x29]
call fcn.1402a3780
nop
lea rcx, [rbp - 0x29]
call fcn.1402a4bb0
mov r14d, eax
lea rcx, [rbp - 0x29]
call fcn.1402a4ca0
mov edi, eax
mov qword [rbp - 0x19], rbx
mov qword [rbp - 0x21], rbx
call qword [sym.imp.KERNEL32.dll_GetCurrentProcess]
mov rcx, rax
lea r8, [rbp - 0x21]
lea rdx, [rbp - 0x19]
call qword [sym.imp.KERNEL32.dll_GetProcessAffinityMask]
test eax, eax
je 0x1402a084d
mov rcx, qword [rbp - 0x21]
test rcx, rcx
je 0x1402a084d
mov eax, ecx
and eax, 1
add ebx, eax
shr rcx, 1
jne 0x1402a0841
mov ecx, 1
cmp r14d, ecx
cmova ecx, r14d
mov eax, ecx
cmp esi, ecx
cmova eax, esi
cmp eax, edi
cmova edi, eax
cmp edi, ebx
cmova ebx, edi
mov byte [0x1407134a9], cl
mov byte [0x1407134a8], bl
and byte [0x1407134a5], 0xf7
mov eax, 1
xor ecx, ecx
cpuid
mov dword [rbp - 0x11], eax
mov dword [rbp - 0xd], ebx
mov dword [rbp - 9], ecx
mov dword [rbp - 5], edx
movzx r8d, cl
and r8b, 1
mov eax, 1
xor ecx, ecx
cpuid
mov dword [rbp - 0x11], eax
mov dword [rbp - 0xd], ebx
mov dword [rbp - 5], edx
shr ecx, 9
and cl, 1
movzx eax, byte [0x1407134a4]
and al, 0xdb
shl r8b, 5
or al, r8b
and al, 0xbf
shl cl, 6
or al, cl
or al, 0x1b
mov byte [0x1407134a4], al
cmp byte [0x1407133d8], 0
jne 0x1402a08fc
mov byte [0x1407133e4], 0
xor eax, eax
xor ecx, ecx
cpuid
mov dword [rbp - 0x11], eax
mov dword [0x1407133d8], ebx
mov dword [0x1407133dc], edx
mov dword [0x1407133e0], ecx
lea rdx, [0x1404bf808]
lea rdi, [0x1407133d8]
mov rcx, rdi
call fcn.140333d80
test eax, eax
je 0x1402a091b
xor r11b, r11b
jmp 0x1402a0938
mov eax, 0x80000001
xor ecx, ecx
cpuid
mov r11d, ecx
mov dword [rbp - 0x11], eax
mov dword [rbp - 0xd], ebx
mov dword [rbp - 5], edx
shr r11d, 6
and r11b, 1
mov eax, 1
xor ecx, ecx
cpuid
mov dword [rbp - 0x11], eax
mov dword [rbp - 0xd], ebx
mov dword [rbp - 5], edx
shr ecx, 0x13
and cl, 1
shl cl, 7
movzx eax, byte [0x1407134a4]
and al, 0x7f
or cl, al
mov byte [0x1407134a4], cl
mov eax, 1
xor ecx, ecx
cpuid
mov r9d, ecx
mov dword [rbp - 0x11], eax
mov dword [rbp - 0xd], ebx
mov dword [rbp - 5], edx
shr r9d, 0x14
and r9b, 1
mov eax, 1
xor ecx, ecx
cpuid
mov r8d, ecx
mov dword [rbp - 0x11], eax
mov dword [rbp - 0xd], ebx
mov dword [rbp - 5], edx
shr r8d, 0x19
and r8b, 1
mov eax, 1
xor ecx, ecx
cpuid
mov dword [rbp - 0x11], eax
mov dword [rbp - 0xd], ebx
mov dword [rbp - 5], edx
shr ecx, 0x1c
and cl, 1
movzx r10d, byte [0x1407134a5]
and r10b, 0xf8
or r10b, r9b
and r10b, 0xdf
shl r8b, 5
or r10b, r8b
and r10b, 0xbf
shl cl, 5
and r11b, 0xcd
or cl, r11b
add cl, cl
or r10b, cl
xor eax, eax
xor ecx, ecx
cpuid
mov dword [rbp - 0xd], ebx
mov dword [rbp - 9], ecx
mov dword [rbp - 5], edx
cmp eax, 7
jae 0x1402a09fb
xor bl, bl
jmp 0x1402a0a13
mov eax, 7
xor ecx, ecx
cpuid
mov dword [rbp - 0x11], eax
mov dword [rbp - 9], ecx
mov dword [rbp - 5], edx
shr ebx, 5
and bl, 1
and r10b, 0x7f
shl bl, 7
or r10b, bl
mov byte [0x1407134a5], r10b
xor eax, eax
xor ecx, ecx
cpuid
mov dword [rbp - 0xd], ebx
mov dword [rbp - 9], ecx
mov dword [rbp - 5], edx
cmp eax, 7
jae 0x1402a0a3c
xor bl, bl
jmp 0x1402a0a54
mov eax, 7
xor ecx, ecx
cpuid
mov dword [rbp - 0x11], eax
mov dword [rbp - 9], ecx
mov dword [rbp - 5], edx
shr ebx, 0x10
and bl, 1
movzx r8d, byte [0x1407134a6]
and r8b, 0xfe
or r8b, bl
xor eax, eax
xor ecx, ecx
cpuid
mov dword [rbp - 0xd], ebx
mov dword [rbp - 9], ecx
mov dword [rbp - 5], edx
cmp eax, 7
jae 0x1402a0a7b
xor bl, bl
jmp 0x1402a0a93
mov eax, 7
xor ecx, ecx
cpuid
mov dword [rbp - 0x11], eax
mov dword [rbp - 9], ecx
mov dword [rbp - 5], edx
shr ebx, 0x1a
and bl, 1
and r8b, 0xfd
add bl, bl
or r8b, bl
xor eax, eax
xor ecx, ecx
cpuid
mov dword [rbp - 0xd], ebx
mov dword [rbp - 9], ecx
mov dword [rbp - 5], edx
cmp eax, 7
jae 0x1402a0ab4
xor bl, bl
jmp 0x1402a0acc
mov eax, 7
xor ecx, ecx
cpuid
mov dword [rbp - 0x11], eax
mov dword [rbp - 9], ecx
mov dword [rbp - 5], edx
shr ebx, 0x1b
and bl, 1
and r8b, 0xfb
shl bl, 2
or r8b, bl
xor eax, eax
xor ecx, ecx
cpuid
mov dword [rbp - 0xd], ebx
mov dword [rbp - 9], ecx
mov dword [rbp - 5], edx
cmp eax, 7
jae 0x1402a0aee
xor bl, bl
jmp 0x1402a0b06
mov eax, 7
xor ecx, ecx
cpuid
mov dword [rbp - 0x11], eax
mov dword [rbp - 9], ecx
mov dword [rbp - 5], edx
shr ebx, 0x1c
and bl, 1
and r8b, 0xf7
shl bl, 3
or r8b, bl
xor eax, eax
xor ecx, ecx
cpuid
mov dword [rbp - 0xd], ebx
mov dword [rbp - 9], ecx
mov dword [rbp - 5], edx
cmp eax, 7
jae 0x1402a0b28
xor cl, cl
jmp 0x1402a0b40
mov eax, 7
xor ecx, ecx
cpuid
mov dword [rbp - 0x11], eax
mov dword [rbp - 0xd], ebx
mov dword [rbp - 5], edx
shr ecx, 0xb
and cl, 1
and r8b, 0xef
shl cl, 4
or r8b, cl
xor eax, eax
xor ecx, ecx
cpuid
mov dword [rbp - 0xd], ebx
mov dword [rbp - 9], ecx
mov dword [rbp - 5], edx
cmp eax, 7
jae 0x1402a0b63
xor r9b, r9b
jmp 0x1402a0b80
mov eax, 7
xor ecx, ecx
cpuid
mov r9d, ebx
mov dword [rbp - 0x11], eax
mov dword [rbp - 9], ecx
mov dword [rbp - 5], edx
shr r9d, 0x1d
and r9b, 1
mov eax, 1
xor ecx, ecx
cpuid
mov dword [rbp - 0x11], eax
mov dword [rbp - 0xd], ebx
mov dword [rbp - 5], edx
shr ecx, 0xd
and cl, 1
and r8b, 0xdf
shl r9b, 5
or r8b, r9b
and r8b, 0xbf
shl cl, 6
or r8b, cl
mov eax, 0x80000000
xor ecx, ecx
cpuid
mov dword [rbp - 0xd], ebx
mov dword [rbp - 9], ecx
mov dword [rbp - 5], edx
cmp eax, 0x80000000
ja 0x1402a0bca
xor al, al
jmp 0x1402a0be4
mov eax, 0x80000001
xor ecx, ecx
cpuid
mov dword [rbp - 0x11], eax
mov dword [rbp - 0xd], ebx
mov dword [rbp - 9], ecx
mov dword [rbp - 5], edx
movzx eax, cl
and al, 1
and r8b, 0x7f
shl al, 7
or r8b, al
mov byte [0x1407134a6], r8b
and byte [0x1407134a7], 0xfe
cmp byte [0x1407133d8], 0
jne 0x1402a0c27
mov byte [0x1407133e4], 0
xor eax, eax
xor ecx, ecx
cpuid
mov dword [rbp - 0x11], eax
mov dword [0x1407133d8], ebx
mov dword [0x1407133dc], edx
mov dword [0x1407133e0], ecx
mov qword [0x1407134b8], rdi
cmp byte [0x1407133e8], 0
jne 0x1402a0cc7
mov eax, 0x80000000
xor ecx, ecx
cpuid
mov dword [rbp - 0xd], ebx
mov dword [rbp - 9], ecx
mov dword [rbp - 5], edx
cmp eax, 0x80000004
jb 0x1402a0cb6
mov eax, 0x80000002
xor ecx, ecx
cpuid
mov dword [rbp - 0x11], eax
mov dword [rbp - 0xd], ebx
mov dword [rbp - 9], ecx
mov dword [rbp - 5], edx
movups xmm0, xmmword [rbp - 0x11]
movups xmmword [0x1407133e8], xmm0
mov eax, 0x80000003
xor ecx, ecx
cpuid
mov dword [rbp - 0x11], eax
mov dword [rbp - 0xd], ebx
mov dword [rbp - 9], ecx
mov dword [rbp - 5], edx
movups xmm0, xmmword [rbp - 0x11]
movups xmmword [0x1407133f8], xmm0
mov eax, 0x80000004
xor ecx, ecx
cpuid
mov dword [rbp - 0x11], eax
mov dword [rbp - 0xd], ebx
mov dword [rbp - 9], ecx
mov dword [rbp - 5], edx
movups xmm0, xmmword [rbp - 0x11]
movups xmmword [0x140713408], xmm0
jmp 0x1402a0cc7
movabs rax, 0x6e776f6e6b6e55
mov qword [0x1407133e8], rax
lea rax, [0x1407133e8]
mov qword [0x1407134c0], rax
xor eax, eax
xor ecx, ecx
cpuid
mov dword [rbp - 0x11], eax
mov dword [rbp - 0xd], ebx
mov dword [rbp - 9], ecx
mov dword [rbp - 5], edx
movups xmm0, xmmword [rbp - 0x11]
movaps xmmword [0x140713420], xmm0
mov eax, 1
xor ecx, ecx
cpuid
mov dword [rbp - 0x11], eax
mov dword [rbp - 0xd], ebx
mov dword [rbp - 9], ecx
mov dword [rbp - 5], edx
movups xmm0, xmmword [rbp - 0x11]
movaps xmmword [0x140713430], xmm0
mov eax, 2
xor ecx, ecx
cpuid
mov dword [rbp - 0x11], eax
mov dword [rbp - 0xd], ebx
mov dword [rbp - 9], ecx
mov dword [rbp - 5], edx
movups xmm0, xmmword [rbp - 0x11]
movaps xmmword [0x140713440], xmm0
mov eax, 4
xor ecx, ecx
cpuid
mov dword [rbp - 0x11], eax
mov dword [rbp - 0xd], ebx
mov dword [rbp - 9], ecx
mov dword [rbp - 5], edx
movups xmm0, xmmword [rbp - 0x11]
movaps xmmword [0x140713450], xmm0
mov eax, 5
xor ecx, ecx
cpuid
mov dword [rbp - 0x11], eax
mov dword [rbp - 0xd], ebx
mov dword [rbp - 9], ecx
mov dword [rbp - 5], edx
movups xmm0, xmmword [rbp - 0x11]
movaps xmmword [0x140713460], xmm0
mov eax, 6
xor ecx, ecx
cpuid
mov dword [rbp - 0x11], eax
mov dword [rbp - 0xd], ebx
mov dword [rbp - 9], ecx
mov dword [rbp - 5], edx
movups xmm0, xmmword [rbp - 0x11]
movaps xmmword [0x140713470], xmm0
mov eax, 9
xor ecx, ecx
cpuid
mov dword [rbp - 0x11], eax
mov dword [rbp - 0xd], ebx
mov dword [rbp - 9], ecx
mov dword [rbp - 5], edx
movups xmm0, xmmword [rbp - 0x11]
movaps xmmword [0x140713480], xmm0
mov eax, 0xa
xor ecx, ecx
cpuid
mov dword [rbp - 0x11], eax
mov dword [rbp - 0xd], ebx
mov dword [rbp - 9], ecx
mov dword [rbp - 5], edx
movups xmm0, xmmword [rbp - 0x11]
movaps xmmword [0x140713490], xmm0
mov dword [0x1407134c8], 0x80
lea rax, [0x140713420]
mov qword [0x1407134d0], rax
lea rcx, [rbp - 0x29]
call fcn.1402a3ff0
lea rax, [0x1407134a0]
add rsp, 0x90
pop r14
pop rdi
pop rsi
pop rbx
pop rbp
ret