Function at 0x403fcc
Capabilities:
Get cpu information
Query or enumerate registry value

Disassembly:
push 0x418
mov eax, 0x56301b
call fcn.0053d399
xor ecx, ecx
mov dword [ebp - 0x420], ecx
xor eax, eax
inc eax
mov dword [ebp - 0x418], eax
mov dword [ebp - 0x41c], 0x400
mov dword [edi + 0x14], 0xf
mov dword [edi + 0x10], ecx
mov dword [ebp - 0x424], edi
mov byte [edi], cl
mov esi, str._nSystem_information
mov dword [ebp - 4], ecx
push esi
mov dword [ebp - 0x420], eax
call fcn.00538030
pop ecx
mov ebx, eax
push esi
mov eax, edi
call fcn.00401cce
lea eax, [ebp - 0x414]
push eax
push 0x20019
xor ebx, ebx
push ebx
push str.HARDWAREDESCRIPTIONSystemCentralProcessor0
push reloc.OLEAUT32.dll_SysReAllocString
call dword [sym.imp.ADVAPI32.dll_RegOpenKeyExA]
mov esi, 0x599110
test eax, eax
jne 0x4040ca
lea eax, [ebp - 0x41c]
push eax
lea eax, [ebp - 0x410]
push eax
lea eax, [ebp - 0x418]
push eax
push ebx
push str.ProcessorNameString
push dword [ebp - 0x414]
call dword [sym.imp.ADVAPI32.dll_RegQueryValueExA]
test eax, eax
jne 0x4040bc
push esi
call fcn.00538030
pop ecx
mov ebx, eax
push esi
mov eax, edi
call fcn.00401cce
mov ebx, str.____H_W_________:
push ebx
call fcn.00538030
pop ecx
push ebx
mov ebx, eax
mov eax, edi
call fcn.00401cce
cmp byte [ebp - 0x410], 0
lea eax, [ebp - 0x410]
jne 0x4040b5
mov eax, 0x599274
push eax
push edi
call fcn.004051bb
push dword [ebp - 0x414]
call dword [sym.imp.ADVAPI32.dll_RegCloseKey]
xor ebx, ebx
lea eax, [ebp - 0x414]
push eax
push 0x20019
push ebx
push str.SOFTWAREMicrosoftWindows_NTCurrentVersion
push reloc.OLEAUT32.dll_SysReAllocString
call dword [sym.imp.ADVAPI32.dll_RegOpenKeyExA]
test eax, eax
jne 0x4042f3
push 0x400
lea eax, [ebp - 0x410]
push ebx
push eax
call fcn.00538a20
add esp, 0xc
lea eax, [ebp - 0x41c]
push eax
lea eax, [ebp - 0x410]
push eax
lea eax, [ebp - 0x418]
push eax
push ebx
push 0x5992ac
push dword [ebp - 0x414]
call dword [sym.imp.ADVAPI32.dll_RegQueryValueExA]
test eax, eax
jne 0x404171
push esi
call fcn.00538030
pop ecx
mov ebx, eax
push esi
mov eax, edi
call fcn.00401cce
mov ebx, str.____ProductName_:
push ebx
call fcn.00538030
pop ecx
push ebx
mov ebx, eax
mov eax, edi
call fcn.00401cce
cmp byte [ebp - 0x410], 0
lea eax, [ebp - 0x410]
jne 0x40416a
mov eax, 0x599274
push eax
push edi
call fcn.004051bb
push 0x400
lea eax, [ebp - 0x410]
push 0
push eax
call fcn.00538a20
add esp, 0xc
lea eax, [ebp - 0x41c]
push eax
lea eax, [ebp - 0x410]
push eax
lea eax, [ebp - 0x418]
push eax
push 0
push str.EditionID
push dword [ebp - 0x414]
call dword [sym.imp.ADVAPI32.dll_RegQueryValueExA]
test eax, eax
jne 0x4041f5
push esi
call fcn.00538030
pop ecx
mov ebx, eax
push esi
mov eax, edi
call fcn.00401cce
mov ebx, str.____EditionID___:
push ebx
call fcn.00538030
pop ecx
push ebx
mov ebx, eax
mov eax, edi
call fcn.00401cce
cmp byte [ebp - 0x410], 0
lea eax, [ebp - 0x410]
jne 0x4041ee
mov eax, 0x599274
push eax
push edi
call fcn.004051bb
push 0x400
lea eax, [ebp - 0x410]
push 0
push eax
call fcn.00538a20
add esp, 0xc
lea eax, [ebp - 0x41c]
push eax
lea eax, [ebp - 0x410]
push eax
lea eax, [ebp - 0x418]
push eax
push 0
push str.ReleaseId
push dword [ebp - 0x414]
call dword [sym.imp.ADVAPI32.dll_RegQueryValueExA]
test eax, eax
jne 0x404279
push esi
call fcn.00538030
pop ecx
mov ebx, eax
push esi
mov eax, edi
call fcn.00401cce
mov ebx, str.____ReleaseId___:
push ebx
call fcn.00538030
pop ecx
push ebx
mov ebx, eax
mov eax, edi
call fcn.00401cce
cmp byte [ebp - 0x410], 0
lea eax, [ebp - 0x410]
jne 0x404272
mov eax, 0x599274
push eax
push edi
call fcn.004051bb
lea eax, [ebp - 0x41c]
push eax
lea eax, [ebp - 0x410]
push eax
lea eax, [ebp - 0x418]
push eax
push 0
push str.CSDVersion
push dword [ebp - 0x414]
call dword [sym.imp.ADVAPI32.dll_RegQueryValueExA]
test eax, eax
jne 0x4042e7
push esi
call fcn.00538030
pop ecx
mov ebx, eax
push esi
mov eax, edi
call fcn.00401cce
mov esi, str.____CSDVersion__:
push esi
call fcn.00538030
pop ecx
mov ebx, eax
push esi
mov eax, edi
call fcn.00401cce
cmp byte [ebp - 0x410], 0
lea eax, [ebp - 0x410]
jne 0x4042e0
mov eax, 0x599274
push eax
push edi
call fcn.004051bb
push dword [ebp - 0x414]
call dword [sym.imp.ADVAPI32.dll_RegCloseKey]
mov eax, edi
call fcn.0053d41c
ret