Function at 0x4039d3
Capabilities:
Get cpu information
Query or enumerate registry value

Disassembly:
push 0x418
mov eax, 0x562d1f
call fcn.0053cea9
xor ecx, ecx
mov dword [ebp - 0x420], ecx
xor eax, eax
inc eax
mov dword [ebp - 0x418], eax
mov dword [ebp - 0x41c], 0x400
mov dword [edi + 0x14], 0xf
mov dword [edi + 0x10], ecx
mov dword [ebp - 0x424], edi
mov byte [edi], cl
mov esi, str._nSystem_information
mov dword [ebp - 4], ecx
push esi
mov dword [ebp - 0x420], eax
call fcn.00537b40
pop ecx
mov ebx, eax
push esi
mov eax, edi
call fcn.00401cd3
lea eax, [ebp - 0x414]
push eax
push 0x20019
xor ebx, ebx
push ebx
push str.HARDWAREDESCRIPTIONSystemCentralProcessor0
push reloc.OLEAUT32.dll_SysReAllocString
call dword [sym.imp.ADVAPI32.dll_RegOpenKeyExA]
mov esi, 0x598ee0
test eax, eax
jne 0x403ad1
lea eax, [ebp - 0x41c]
push eax
lea eax, [ebp - 0x410]
push eax
lea eax, [ebp - 0x418]
push eax
push ebx
push str.ProcessorNameString
push dword [ebp - 0x414]
call dword [sym.imp.ADVAPI32.dll_RegQueryValueExA]
test eax, eax
jne 0x403ac3
push esi
call fcn.00537b40
pop ecx
mov ebx, eax
push esi
mov eax, edi
call fcn.00401cd3
mov ebx, str.____H_W_________:
push ebx
call fcn.00537b40
pop ecx
push ebx
mov ebx, eax
mov eax, edi
call fcn.00401cd3
cmp byte [ebp - 0x410], 0
lea eax, [ebp - 0x410]
jne 0x403abc
mov eax, 0x599044
push eax
push edi
call fcn.00404b95
push dword [ebp - 0x414]
call dword [sym.imp.ADVAPI32.dll_RegCloseKey]
xor ebx, ebx
lea eax, [ebp - 0x414]
push eax
push 0x20019
push ebx
push str.SOFTWAREMicrosoftWindows_NTCurrentVersion
push reloc.OLEAUT32.dll_SysReAllocString
call dword [sym.imp.ADVAPI32.dll_RegOpenKeyExA]
test eax, eax
jne 0x403cfa
push 0x400
lea eax, [ebp - 0x410]
push ebx
push eax
call fcn.00538530
add esp, 0xc
lea eax, [ebp - 0x41c]
push eax
lea eax, [ebp - 0x410]
push eax
lea eax, [ebp - 0x418]
push eax
push ebx
push 0x59907c
push dword [ebp - 0x414]
call dword [sym.imp.ADVAPI32.dll_RegQueryValueExA]
test eax, eax
jne 0x403b78
push esi
call fcn.00537b40
pop ecx
mov ebx, eax
push esi
mov eax, edi
call fcn.00401cd3
mov ebx, str.____ProductName_:
push ebx
call fcn.00537b40
pop ecx
push ebx
mov ebx, eax
mov eax, edi
call fcn.00401cd3
cmp byte [ebp - 0x410], 0
lea eax, [ebp - 0x410]
jne 0x403b71
mov eax, 0x599044
push eax
push edi
call fcn.00404b95
push 0x400
lea eax, [ebp - 0x410]
push 0
push eax
call fcn.00538530
add esp, 0xc
lea eax, [ebp - 0x41c]
push eax
lea eax, [ebp - 0x410]
push eax
lea eax, [ebp - 0x418]
push eax
push 0
push str.EditionID
push dword [ebp - 0x414]
call dword [sym.imp.ADVAPI32.dll_RegQueryValueExA]
test eax, eax
jne 0x403bfc
push esi
call fcn.00537b40
pop ecx
mov ebx, eax
push esi
mov eax, edi
call fcn.00401cd3
mov ebx, str.____EditionID___:
push ebx
call fcn.00537b40
pop ecx
push ebx
mov ebx, eax
mov eax, edi
call fcn.00401cd3
cmp byte [ebp - 0x410], 0
lea eax, [ebp - 0x410]
jne 0x403bf5
mov eax, 0x599044
push eax
push edi
call fcn.00404b95
push 0x400
lea eax, [ebp - 0x410]
push 0
push eax
call fcn.00538530
add esp, 0xc
lea eax, [ebp - 0x41c]
push eax
lea eax, [ebp - 0x410]
push eax
lea eax, [ebp - 0x418]
push eax
push 0
push str.ReleaseId
push dword [ebp - 0x414]
call dword [sym.imp.ADVAPI32.dll_RegQueryValueExA]
test eax, eax
jne 0x403c80
push esi
call fcn.00537b40
pop ecx
mov ebx, eax
push esi
mov eax, edi
call fcn.00401cd3
mov ebx, str.____ReleaseId___:
push ebx
call fcn.00537b40
pop ecx
push ebx
mov ebx, eax
mov eax, edi
call fcn.00401cd3
cmp byte [ebp - 0x410], 0
lea eax, [ebp - 0x410]
jne 0x403c79
mov eax, 0x599044
push eax
push edi
call fcn.00404b95
lea eax, [ebp - 0x41c]
push eax
lea eax, [ebp - 0x410]
push eax
lea eax, [ebp - 0x418]
push eax
push 0
push str.CSDVersion
push dword [ebp - 0x414]
call dword [sym.imp.ADVAPI32.dll_RegQueryValueExA]
test eax, eax
jne 0x403cee
push esi
call fcn.00537b40
pop ecx
mov ebx, eax
push esi
mov eax, edi
call fcn.00401cd3
mov esi, str.____CSDVersion__:
push esi
call fcn.00537b40
pop ecx
mov ebx, eax
push esi
mov eax, edi
call fcn.00401cd3
cmp byte [ebp - 0x410], 0
lea eax, [ebp - 0x410]
jne 0x403ce7
mov eax, 0x599044
push eax
push edi
call fcn.00404b95
push dword [ebp - 0x414]
call dword [sym.imp.ADVAPI32.dll_RegCloseKey]
mov eax, edi
call fcn.0053cf2c
ret