Function at 0x4042d2
Capabilities:
Get cpu information
Query or enumerate registry value

Disassembly:
push 0x418
mov eax, 0x563459
call fcn.0053d749
xor ecx, ecx
mov dword [ebp - 0x420], ecx
xor eax, eax
inc eax
mov dword [ebp - 0x418], eax
mov dword [ebp - 0x41c], 0x400
mov dword [edi + 0x14], 0xf
mov dword [edi + 0x10], ecx
mov dword [ebp - 0x424], edi
mov byte [edi], cl
mov esi, str._nSystem_information
mov dword [ebp - 4], ecx
push esi
mov dword [ebp - 0x420], eax
call fcn.005383f0
pop ecx
mov ebx, eax
push esi
mov eax, edi
call fcn.00401fe3
lea eax, [ebp - 0x414]
push eax
push 0x20019
xor ebx, ebx
push ebx
push str.HARDWAREDESCRIPTIONSystemCentralProcessor0
push reloc.OLEAUT32.dll_SysReAllocString
call dword [sym.imp.ADVAPI32.dll_RegOpenKeyExA]
mov esi, 0x5991d8
test eax, eax
jne 0x4043d0
lea eax, [ebp - 0x41c]
push eax
lea eax, [ebp - 0x410]
push eax
lea eax, [ebp - 0x418]
push eax
push ebx
push str.ProcessorNameString
push dword [ebp - 0x414]
call dword [sym.imp.ADVAPI32.dll_RegQueryValueExA]
test eax, eax
jne 0x4043c2
push esi
call fcn.005383f0
pop ecx
mov ebx, eax
push esi
mov eax, edi
call fcn.00401fe3
mov ebx, str.____H_W_________:
push ebx
call fcn.005383f0
pop ecx
push ebx
mov ebx, eax
mov eax, edi
call fcn.00401fe3
cmp byte [ebp - 0x410], 0
lea eax, [ebp - 0x410]
jne 0x4043bb
mov eax, 0x59933c
push eax
push edi
call fcn.004054c1
push dword [ebp - 0x414]
call dword [sym.imp.ADVAPI32.dll_RegCloseKey]
xor ebx, ebx
lea eax, [ebp - 0x414]
push eax
push 0x20019
push ebx
push str.SOFTWAREMicrosoftWindows_NTCurrentVersion
push reloc.OLEAUT32.dll_SysReAllocString
call dword [sym.imp.ADVAPI32.dll_RegOpenKeyExA]
test eax, eax
jne 0x4045f9
push 0x400
lea eax, [ebp - 0x410]
push ebx
push eax
call fcn.00538860
add esp, 0xc
lea eax, [ebp - 0x41c]
push eax
lea eax, [ebp - 0x410]
push eax
lea eax, [ebp - 0x418]
push eax
push ebx
push 0x599374
push dword [ebp - 0x414]
call dword [sym.imp.ADVAPI32.dll_RegQueryValueExA]
test eax, eax
jne 0x404477
push esi
call fcn.005383f0
pop ecx
mov ebx, eax
push esi
mov eax, edi
call fcn.00401fe3
mov ebx, str.____ProductName_:
push ebx
call fcn.005383f0
pop ecx
push ebx
mov ebx, eax
mov eax, edi
call fcn.00401fe3
cmp byte [ebp - 0x410], 0
lea eax, [ebp - 0x410]
jne 0x404470
mov eax, 0x59933c
push eax
push edi
call fcn.004054c1
push 0x400
lea eax, [ebp - 0x410]
push 0
push eax
call fcn.00538860
add esp, 0xc
lea eax, [ebp - 0x41c]
push eax
lea eax, [ebp - 0x410]
push eax
lea eax, [ebp - 0x418]
push eax
push 0
push str.EditionID
push dword [ebp - 0x414]
call dword [sym.imp.ADVAPI32.dll_RegQueryValueExA]
test eax, eax
jne 0x4044fb
push esi
call fcn.005383f0
pop ecx
mov ebx, eax
push esi
mov eax, edi
call fcn.00401fe3
mov ebx, str.____EditionID___:
push ebx
call fcn.005383f0
pop ecx
push ebx
mov ebx, eax
mov eax, edi
call fcn.00401fe3
cmp byte [ebp - 0x410], 0
lea eax, [ebp - 0x410]
jne 0x4044f4
mov eax, 0x59933c
push eax
push edi
call fcn.004054c1
push 0x400
lea eax, [ebp - 0x410]
push 0
push eax
call fcn.00538860
add esp, 0xc
lea eax, [ebp - 0x41c]
push eax
lea eax, [ebp - 0x410]
push eax
lea eax, [ebp - 0x418]
push eax
push 0
push str.ReleaseId
push dword [ebp - 0x414]
call dword [sym.imp.ADVAPI32.dll_RegQueryValueExA]
test eax, eax
jne 0x40457f
push esi
call fcn.005383f0
pop ecx
mov ebx, eax
push esi
mov eax, edi
call fcn.00401fe3
mov ebx, str.____ReleaseId___:
push ebx
call fcn.005383f0
pop ecx
push ebx
mov ebx, eax
mov eax, edi
call fcn.00401fe3
cmp byte [ebp - 0x410], 0
lea eax, [ebp - 0x410]
jne 0x404578
mov eax, 0x59933c
push eax
push edi
call fcn.004054c1
lea eax, [ebp - 0x41c]
push eax
lea eax, [ebp - 0x410]
push eax
lea eax, [ebp - 0x418]
push eax
push 0
push str.CSDVersion
push dword [ebp - 0x414]
call dword [sym.imp.ADVAPI32.dll_RegQueryValueExA]
test eax, eax
jne 0x4045ed
push esi
call fcn.005383f0
pop ecx
mov ebx, eax
push esi
mov eax, edi
call fcn.00401fe3
mov esi, str.____CSDVersion__:
push esi
call fcn.005383f0
pop ecx
mov ebx, eax
push esi
mov eax, edi
call fcn.00401fe3
cmp byte [ebp - 0x410], 0
lea eax, [ebp - 0x410]
jne 0x4045e6
mov eax, 0x59933c
push eax
push edi
call fcn.004054c1
push dword [ebp - 0x414]
call dword [sym.imp.ADVAPI32.dll_RegCloseKey]
mov eax, edi
call fcn.0053d7cc
ret