Function at 0x180138900
Capabilities:
Get system information on windows

Disassembly:
jmp 0x180138900
push rbx
push rsi
push rdi
sub rsp, 0x520
lea rdi, [rsp + 0x30]
mov ecx, 0x13c
mov eax, 0xcccccccc
rep stosd dword [rdi], eax
mov rax, qword [0x1805a6200]
xor rax, rsp
mov qword [rsp + 0x518], rax
xorps xmm0, xmm0
movsd qword [rsp + 0x48], xmm0
mov byte [rsp + 0x50], 0
mov dword [rsp + 0xb4], 0
mov qword [rsp + 0xd8], 0
lea rax, [rsp + 0x478]
lea rcx, [0x1803ad3c8]
mov rdi, rax
mov rsi, rcx
mov ecx, 0x10
rep movsb byte [rdi], byte [rsi]
lea rax, [rsp + 0x488]
mov rdi, rax
xor eax, eax
mov ecx, 0x2e
rep stosb byte [rdi], al
cmp qword [0x1808e8a28], 0
je 0x1801389c1
cmp qword [0x1808e8a30], 0
je 0x1801389c1
lea rcx, [rsp + 0x38]
call fcn.18000b150
movzx eax, al
test eax, eax
je 0x1801389c1
movsd xmm0, qword [rsp + 0x38]
divsd xmm0, qword [0x1804a2828]
movsd qword [rsp + 0x48], xmm0
mov byte [rsp + 0x50], 1
movzx eax, byte [rsp + 0x50]
test eax, eax
jne 0x1801389f1
mov eax, 0x18
imul rax, rax, 0
mov rcx, qword [0x1808e8a20]
mov eax, dword [rcx + rax + 8]
cvtsi2sd xmm0, rax
divsd xmm0, qword [0x1804a2828]
movsd qword [rsp + 0x48], xmm0
mov eax, 0x20
imul rax, rax, 0
mov dword [rsp + rax + 0x1a0], 0x4b
cvtss2sd xmm0, dword [0x1805aaf44]
cvtss2sd xmm1, dword [0x1805aaf40]
addsd xmm0, xmm1
mulsd xmm0, qword [0x1803b2f28]
mov eax, 0x20
imul rax, rax, 0
movsd qword [rsp + rax + 0x1b0], xmm0
mov eax, 0x20
imul rax, rax, 0
movzx ecx, word [0x18059fc28]
mov word [rsp + rax + 0x1a4], cx
xor eax, eax
test eax, eax
jne 0x1801389f1
mov eax, 0x20
imul rax, rax, 1
mov dword [rsp + rax + 0x1a0], 0
mov eax, 0x20
imul rax, rax, 1
mov ecx, 0x25
mov word [rsp + rax + 0x1b0], cx
xor eax, eax
test eax, eax
jne 0x180138a51
mov qword [rsp + 0x20], 0
mov r9d, 0x200
lea r8, [rsp + 0x260]
mov edx, 2
lea rcx, [rsp + 0x1a0]
call sym.ProcessMonitor.dll_PhFormatToBuffer
movzx eax, al
test eax, eax
je 0x180138ac7
lea rdx, [rsp + 0x260]
mov rcx, qword [0x1808e8a60]
call sym.ProcessMonitor.dll_PhSetWindowText
jmp 0x180138b07
cvtss2sd xmm0, dword [0x1805aaf44]
cvtss2sd xmm1, dword [0x1805aaf40]
addsd xmm0, xmm1
mulsd xmm0, qword [0x1803b2f28]
movaps xmm1, xmm0
movq rdx, xmm1
lea rcx, str._.2f__
call fcn.180010960
mov rdx, qword [rax + 8]
mov rcx, qword [0x1808e8a60]
call sym.ProcessMonitor.dll_PhSetWindowText
mov eax, 0x20
imul rax, rax, 0
mov dword [rsp + rax + 0x1a0], 0x4b
mov eax, 0x20
imul rax, rax, 0
movsd xmm0, qword [rsp + 0x48]
movsd qword [rsp + rax + 0x1b0], xmm0
mov eax, 0x20
imul rax, rax, 0
mov ecx, 2
mov word [rsp + rax + 0x1a4], cx
xor eax, eax
test eax, eax
jne 0x180138b07
mov eax, 0x20
imul rax, rax, 1
mov dword [rsp + rax + 0x1a0], 1
mov eax, 0x20
imul rax, rax, 1
lea rax, [rsp + rax + 0x1b0]
lea rdx, [0x1804a27b8]
mov rcx, rax
call fcn.180005390
xor eax, eax
test eax, eax
jne 0x180138b4f
mov eax, 0x20
imul rax, rax, 2
mov dword [rsp + rax + 0x1a0], 0x4b
mov eax, dword [0x1808e8a0c]
cvtsi2sd xmm0, rax
divsd xmm0, qword [0x1804a2828]
mov eax, 0x20
imul rax, rax, 2
movsd qword [rsp + rax + 0x1b0], xmm0
mov eax, 0x20
imul rax, rax, 2
mov ecx, 2
mov word [rsp + rax + 0x1a4], cx
xor eax, eax
test eax, eax
jne 0x180138b89
mov eax, 0x20
imul rax, rax, 3
mov dword [rsp + rax + 0x1a0], 1
mov eax, 0x20
imul rax, rax, 3
lea rax, [rsp + rax + 0x1b0]
lea rdx, str._GHz
mov rcx, rax
call fcn.180005390
xor eax, eax
test eax, eax
jne 0x180138bde
mov qword [rsp + 0x20], 0
mov r9d, 0x200
lea r8, [rsp + 0x260]
mov edx, 4
lea rcx, [rsp + 0x1a0]
call sym.ProcessMonitor.dll_PhFormatToBuffer
movzx eax, al
test eax, eax
je 0x180138c5e
lea rdx, [rsp + 0x260]
mov rcx, qword [0x1808e8a68]
call sym.ProcessMonitor.dll_PhSetWindowText
jmp 0x180138ca0
mov eax, dword [0x1808e8a0c]
cvtsi2sd xmm0, rax
divsd xmm0, qword [0x1804a2828]
movaps xmm2, xmm0
movq r8, xmm2
movsd xmm1, qword [rsp + 0x48]
movq rdx, xmm1
lea rcx, str._.2f____.2f_GHz
call fcn.180010960
mov rdx, qword [rax + 8]
mov rcx, qword [0x1808e8a68]
call sym.ProcessMonitor.dll_PhSetWindowText
mov eax, 0x20
imul rax, rax, 0
mov dword [rsp + rax + 0x1a0], 0x10009
mov eax, 0x20
imul rax, rax, 0
mov ecx, dword [0x1805aaf18]
mov qword [rsp + rax + 0x1b0], rcx
xor eax, eax
test eax, eax
jne 0x180138ca0
mov qword [rsp + 0x20], 0
mov r9d, 0x200
lea r8, [rsp + 0x260]
mov edx, 1
lea rcx, [rsp + 0x1a0]
call sym.ProcessMonitor.dll_PhFormatToBuffer
movzx eax, al
test eax, eax
je 0x180138d17
lea rdx, [rsp + 0x260]
mov rcx, qword [0x1808e8a70]
call sym.ProcessMonitor.dll_PhSetWindowText
jmp 0x180138d3e
mov eax, dword [0x1805aaf18]
mov dl, 1
mov ecx, eax
call sym.ProcessMonitor.dll_PhFormatUInt64
mov rcx, rax
call sym.ProcessMonitor.dll_PhAutoDereferenceObject
mov rdx, qword [rax + 8]
mov rcx, qword [0x1808e8a70]
call sym.ProcessMonitor.dll_PhSetWindowText
mov eax, 0x20
imul rax, rax, 0
mov dword [rsp + rax + 0x1a0], 0x10009
mov eax, 0x20
imul rax, rax, 0
mov ecx, dword [0x1805aaf1c]
mov qword [rsp + rax + 0x1b0], rcx
xor eax, eax
test eax, eax
jne 0x180138d3e
mov qword [rsp + 0x20], 0
mov r9d, 0x200
lea r8, [rsp + 0x260]
mov edx, 1
lea rcx, [rsp + 0x1a0]
call sym.ProcessMonitor.dll_PhFormatToBuffer
movzx eax, al
test eax, eax
je 0x180138db5
lea rdx, [rsp + 0x260]
mov rcx, qword [0x1808e8a78]
call sym.ProcessMonitor.dll_PhSetWindowText
jmp 0x180138ddc
mov eax, dword [0x1805aaf1c]
mov dl, 1
mov ecx, eax
call sym.ProcessMonitor.dll_PhFormatUInt64
mov rcx, rax
call sym.ProcessMonitor.dll_PhAutoDereferenceObject
mov rdx, qword [rax + 8]
mov rcx, qword [0x1808e8a78]
call sym.ProcessMonitor.dll_PhSetWindowText
mov eax, 0x20
imul rax, rax, 0
mov dword [rsp + rax + 0x1a0], 0x10009
mov eax, 0x20
imul rax, rax, 0
mov ecx, dword [0x1805aaf20]
mov qword [rsp + rax + 0x1b0], rcx
xor eax, eax
test eax, eax
jne 0x180138ddc
mov qword [rsp + 0x20], 0
mov r9d, 0x200
lea r8, [rsp + 0x260]
mov edx, 1
lea rcx, [rsp + 0x1a0]
call sym.ProcessMonitor.dll_PhFormatToBuffer
movzx eax, al
test eax, eax
je 0x180138e53
lea rdx, [rsp + 0x260]
mov rcx, qword [0x1808e8a80]
call sym.ProcessMonitor.dll_PhSetWindowText
jmp 0x180138e7a
mov eax, dword [0x1805aaf20]
mov dl, 1
mov ecx, eax
call sym.ProcessMonitor.dll_PhFormatUInt64
mov rcx, rax
call sym.ProcessMonitor.dll_PhAutoDereferenceObject
mov rdx, qword [rax + 8]
mov rcx, qword [0x1808e8a80]
call sym.ProcessMonitor.dll_PhSetWindowText
xor r9d, r9d
mov r8d, 0x30
lea rdx, [rsp + 0x68]
mov ecx, 3
call qword [sym.imp.ntdll.dll_NtQuerySystemInformation]
test eax, eax
jl 0x180138ef4
mov eax, dword [rsp + 0x68]
mov dword [rsp + 0x4d8], eax
mov eax, dword [rsp + 0x6c]
mov dword [rsp + 0x4dc], eax
mov rax, qword [rsp + 0x88]
mov rcx, qword [rsp + 0x4d8]
sub rcx, rax
mov rax, rcx
mov qword [rsp + 0x4d8], rax
mov rax, qword [rsp + 0x4d8]
mov rcx, qword [rsp + 0x70]
sub rcx, rax
mov rax, rcx
mov r8d, 2
mov rdx, rax
lea rcx, [rsp + 0x478]
call sym.ProcessMonitor.dll_PhPrintTimeSpan
lea rdx, [rsp + 0x478]
mov rcx, qword [0x1808e8a88]
call sym.ProcessMonitor.dll_PhSetWindowText
cmp dword [0x1808e8a08], 1
jbe 0x180138fb5
mov eax, 0x20
imul rax, rax, 0
mov dword [rsp + rax + 0x1a0], 0x10009
mov eax, 0x20
imul rax, rax, 0
mov ecx, dword [0x1808e8a3c]
mov qword [rsp + rax + 0x1b0], rcx
xor eax, eax
test eax, eax
jne 0x180138f15
mov qword [rsp + 0x20], 0
mov r9d, 0x200
lea r8, [rsp + 0x260]
mov edx, 1
lea rcx, [rsp + 0x1a0]
call sym.ProcessMonitor.dll_PhFormatToBuffer
movzx eax, al
test eax, eax
je 0x180138f8c
lea rdx, [rsp + 0x260]
mov rcx, qword [0x1808e8a90]
call sym.ProcessMonitor.dll_PhSetWindowText
jmp 0x180138fb3
mov eax, dword [0x1808e8a3c]
mov dl, 1
mov ecx, eax
call sym.ProcessMonitor.dll_PhFormatUInt64
mov rcx, rax
call sym.ProcessMonitor.dll_PhAutoDereferenceObject
mov rdx, qword [rax + 8]
mov rcx, qword [0x1808e8a90]
call sym.ProcessMonitor.dll_PhSetWindowText
jmp 0x180138fc8
lea rdx, [0x1804a2800]
mov rcx, qword [0x1808e8a90]
call sym.ProcessMonitor.dll_PhSetWindowText
cmp dword [0x1808e8a08], 1
jbe 0x180139075
mov eax, 0x20
imul rax, rax, 0
mov dword [rsp + rax + 0x1a0], 0x10009
mov eax, 0x20
imul rax, rax, 0
mov ecx, dword [0x1808e8a44]
mov qword [rsp + rax + 0x1b0], rcx
xor eax, eax
test eax, eax
jne 0x180138fd5
mov qword [rsp + 0x20], 0
mov r9d, 0x200
lea r8, [rsp + 0x260]
mov edx, 1
lea rcx, [rsp + 0x1a0]
call sym.ProcessMonitor.dll_PhFormatToBuffer
movzx eax, al
test eax, eax
je 0x18013904c
lea rdx, [rsp + 0x260]
mov rcx, qword [0x1808e8a98]
call sym.ProcessMonitor.dll_PhSetWindowText
jmp 0x180139073
mov eax, dword [0x1808e8a44]
mov dl, 1
mov ecx, eax
call sym.ProcessMonitor.dll_PhFormatUInt64
mov rcx, rax
call sym.ProcessMonitor.dll_PhAutoDereferenceObject
mov rdx, qword [rax + 8]
mov rcx, qword [0x1808e8a98]
call sym.ProcessMonitor.dll_PhSetWindowText
jmp 0x180139088
lea rdx, [0x1804a2800]
mov rcx, qword [0x1808e8a98]
call sym.ProcessMonitor.dll_PhSetWindowText
cmp dword [0x1808e8a08], 1
jbe 0x180139135
mov eax, 0x20
imul rax, rax, 0
mov dword [rsp + rax + 0x1a0], 0x10009
mov eax, 0x20
imul rax, rax, 0
mov rcx, qword [0x1808e8a50]
mov qword [rsp + rax + 0x1b0], rcx
xor eax, eax
test eax, eax
jne 0x180139095
mov qword [rsp + 0x20], 0
mov r9d, 0x200
lea r8, [rsp + 0x260]
mov edx, 1
lea rcx, [rsp + 0x1a0]
call sym.ProcessMonitor.dll_PhFormatToBuffer
movzx eax, al
test eax, eax
je 0x18013910d
lea rdx, [rsp + 0x260]
mov rcx, qword [0x1808e8aa0]
call sym.ProcessMonitor.dll_PhSetWindowText
jmp 0x180139133
mov dl, 1
mov rcx, qword [0x1808e8a50]
call sym.ProcessMonitor.dll_PhFormatUInt64
mov rcx, rax
call sym.ProcessMonitor.dll_PhAutoDereferenceObject
mov rdx, qword [rax + 8]
mov rcx, qword [0x1808e8aa0]
call sym.ProcessMonitor.dll_PhSetWindowText
jmp 0x180139148
lea rdx, [0x1804a2800]
mov rcx, qword [0x1808e8aa0]
call sym.ProcessMonitor.dll_PhSetWindowText
cmp dword [0x1808e8a08], 1
jbe 0x1801391f5
mov eax, 0x20
imul rax, rax, 0
mov dword [rsp + rax + 0x1a0], 0x10009
mov eax, 0x20
imul rax, rax, 0
mov ecx, dword [0x1808e8a5c]
mov qword [rsp + rax + 0x1b0], rcx
xor eax, eax
test eax, eax
jne 0x180139155
mov qword [rsp + 0x20], 0
mov r9d, 0x200
lea r8, [rsp + 0x260]
mov edx, 1
lea rcx, [rsp + 0x1a0]
call sym.ProcessMonitor.dll_PhFormatToBuffer
movzx eax, al
test eax, eax
je 0x1801391cc
lea rdx, [rsp + 0x260]
mov rcx, qword [0x1808e8aa8]
call sym.ProcessMonitor.dll_PhSetWindowText
jmp 0x1801391f3
mov eax, dword [0x1808e8a5c]
mov dl, 1
mov ecx, eax
call sym.ProcessMonitor.dll_PhFormatUInt64
mov rcx, rax
call sym.ProcessMonitor.dll_PhAutoDereferenceObject
mov rdx, qword [rax + 8]
mov rcx, qword [0x1808e8aa8]
call sym.ProcessMonitor.dll_PhSetWindowText
jmp 0x180139208
lea rdx, [0x1804a2800]
mov rcx, qword [0x1808e8aa8]
call sym.ProcessMonitor.dll_PhSetWindowText
lea rdx, [rsp + 0xb4]
lea rcx, [rsp + 0xd8]
call fcn.180014bd0
test eax, eax
jl 0x18013953c
mov dword [rsp + 0x4e4], 0
mov dword [rsp + 0x4e8], 0
mov dword [rsp + 0x4ec], 0
mov dword [rsp + 0x4f0], 0
mov dword [rsp + 0x4f4], 0
jmp 0x18013926e
mov eax, dword [rsp + 0x4f4]
inc eax
mov dword [rsp + 0x4f4], eax
mov eax, dword [rsp + 0x4f4]
mov qword [rsp + 0x508], rax
mov ecx, dword [rsp + 0xb4]
xor edx, edx
mov eax, ecx
mov ecx, 0x20
div rcx
mov rcx, qword [rsp + 0x508]
cmp rcx, rax
jae 0x18013934f
mov eax, dword [rsp + 0x4f4]
imul rax, rax, 0x20
mov rcx, qword [rsp + 0xd8]
add rcx, rax
mov rax, rcx
mov qword [rsp + 0x4f8], rax
mov rax, qword [rsp + 0x4f8]
mov eax, dword [rax + 8]
mov dword [rsp + 0x510], eax
cmp dword [rsp + 0x510], 0
je 0x1801392f4
cmp dword [rsp + 0x510], 1
je 0x180139328
cmp dword [rsp + 0x510], 3
je 0x18013933a
jmp 0x18013934a
mov eax, dword [rsp + 0x4e8]
inc eax
mov dword [rsp + 0x4e8], eax
mov rax, qword [rsp + 0x4f8]
mov rcx, qword [rax]
call fcn.18000cee0
mov ecx, dword [rsp + 0x4ec]
add ecx, eax
mov eax, ecx
mov dword [rsp + 0x4ec], eax
jmp 0x18013934a
mov eax, dword [rsp + 0x4e4]
inc eax
mov dword [rsp + 0x4e4], eax
jmp 0x18013934a
mov eax, dword [rsp + 0x4f0]
inc eax
mov dword [rsp + 0x4f0], eax
jmp 0x18013925e
mov rcx, qword [rsp + 0xd8]
call sym.ProcessMonitor.dll_PhFree
mov eax, 0x20
imul rax, rax, 0
mov dword [rsp + rax + 0x1a0], 0x10009
mov eax, 0x20
imul rax, rax, 0
mov ecx, dword [rsp + 0x4e8]
mov qword [rsp + rax + 0x1b0], rcx
xor eax, eax
test eax, eax
jne 0x18013935c
mov qword [rsp + 0x20], 0
mov r9d, 0x200
lea r8, [rsp + 0x260]
mov edx, 1
lea rcx, [rsp + 0x1a0]
call sym.ProcessMonitor.dll_PhFormatToBuffer
movzx eax, al
test eax, eax
je 0x1801393d4
lea rdx, [rsp + 0x260]
mov rcx, qword [0x1808e8ab0]
call sym.ProcessMonitor.dll_PhSetWindowText
jmp 0x1801393fc
mov eax, dword [rsp + 0x4e8]
mov dl, 1
mov ecx, eax
call sym.ProcessMonitor.dll_PhFormatUInt64
mov rcx, rax
call sym.ProcessMonitor.dll_PhAutoDereferenceObject
mov rdx, qword [rax + 8]
mov rcx, qword [0x1808e8ab0]
call sym.ProcessMonitor.dll_PhSetWindowText
mov eax, 0x20
imul rax, rax, 0
mov dword [rsp + rax + 0x1a0], 0x10009
mov eax, 0x20
imul rax, rax, 0
mov ecx, dword [rsp + 0x4f0]
mov qword [rsp + rax + 0x1b0], rcx
xor eax, eax
test eax, eax
jne 0x1801393fc
mov qword [rsp + 0x20], 0
mov r9d, 0x200
lea r8, [rsp + 0x260]
mov edx, 1
lea rcx, [rsp + 0x1a0]
call sym.ProcessMonitor.dll_PhFormatToBuffer
movzx eax, al
test eax, eax
je 0x180139474
lea rdx, [rsp + 0x260]
mov rcx, qword [0x1808e8ab8]
call sym.ProcessMonitor.dll_PhSetWindowText
jmp 0x18013949c
mov eax, dword [rsp + 0x4f0]
mov dl, 1
mov ecx, eax
call sym.ProcessMonitor.dll_PhFormatUInt64
mov rcx, rax
call sym.ProcessMonitor.dll_PhAutoDereferenceObject
mov rdx, qword [rax + 8]
mov rcx, qword [0x1808e8ab8]
call sym.ProcessMonitor.dll_PhSetWindowText
mov eax, 0x20
imul rax, rax, 0
mov dword [rsp + rax + 0x1a0], 0x10009
mov eax, 0x20
imul rax, rax, 0
mov ecx, dword [rsp + 0x4ec]
mov qword [rsp + rax + 0x1b0], rcx
xor eax, eax
test eax, eax
jne 0x18013949c
mov qword [rsp + 0x20], 0
mov r9d, 0x200
lea r8, [rsp + 0x260]
mov edx, 1
lea rcx, [rsp + 0x1a0]
call sym.ProcessMonitor.dll_PhFormatToBuffer
movzx eax, al
test eax, eax
je 0x180139514
lea rdx, [rsp + 0x260]
mov rcx, qword [0x1808e8ac0]
call sym.ProcessMonitor.dll_PhSetWindowText
jmp 0x18013953c
mov eax, dword [rsp + 0x4ec]
mov dl, 1
mov ecx, eax
call sym.ProcessMonitor.dll_PhFormatUInt64
mov rcx, rax
call sym.ProcessMonitor.dll_PhAutoDereferenceObject
mov rdx, qword [rax + 8]
mov rcx, qword [0x1808e8ac0]
call sym.ProcessMonitor.dll_PhSetWindowText
xor edx, edx
lea rcx, [rsp + 0xf8]
call sym.ProcessMonitor.dll_PhQueryPerformanceCounter
call sym.ProcessMonitor.dll_PhReadTimeStampCounter
mov qword [rsp + 0x148], rax
lock or dword [rsp], 0
xor eax, eax
xor ecx, ecx
cpuid
lea rdi, [rsp + 0x168]
mov dword [rdi], eax
mov dword [rdi + 4], ebx
mov dword [rdi + 8], ecx
mov dword [rdi + 0xc], edx
lock or dword [rsp], 0
call sym.ProcessMonitor.dll_PhReadTimeStampCounter
mov qword [rsp + 0x150], rax
lock or dword [rsp], 0
xor edx, edx
lea rcx, [rsp + 0x118]
call sym.ProcessMonitor.dll_PhQueryPerformanceCounter
mov rax, qword [rsp + 0xf8]
mov rcx, qword [rsp + 0x118]
sub rcx, rax
mov rax, rcx
mov qword [rsp + 0x138], rax
cmp qword [rsp + 0x148], 0
jne 0x180139602
cmp qword [rsp + 0x150], 0
jne 0x180139602
mov eax, 4
imul rax, rax, 0
cmp dword [rsp + rax + 0x168], 0
jne 0x180139602
mov eax, 4
imul rax, rax, 3
cmp dword [rsp + rax + 0x168], 0
jne 0x180139602
mov qword [rsp + 0x138], 0
mov eax, 0x20
imul rax, rax, 0
mov dword [rsp + rax + 0x1a0], 0x10009
mov eax, 0x20
imul rax, rax, 0
mov rcx, qword [rsp + 0x138]
mov qword [rsp + rax + 0x1b0], rcx
xor eax, eax
test eax, eax
jne 0x180139602
mov eax, 0x20
imul rax, rax, 1
mov dword [rsp + rax + 0x1a0], 1
mov eax, 0x20
imul rax, rax, 1
lea rax, [rsp + rax + 0x1b0]
lea rdx, [0x1804a2808]
mov rcx, rax
call fcn.180005390
xor eax, eax
test eax, eax
jne 0x180139635
mov eax, 0x20
imul rax, rax, 2
mov dword [rsp + rax + 0x1a0], 0x10009
mov eax, 0x20
imul rax, rax, 2
mov ecx, dword [0x1805aaf24]
mov qword [rsp + rax + 0x1b0], rcx
xor eax, eax
test eax, eax
jne 0x18013966f
mov qword [rsp + 0x20], 0
mov r9d, 0x200
lea r8, [rsp + 0x260]
mov edx, 3
lea rcx, [rsp + 0x1a0]
call sym.ProcessMonitor.dll_PhFormatToBuffer
movzx eax, al
test eax, eax
je 0x1801396e6
lea rdx, [rsp + 0x260]
mov rcx, qword [0x1808e8ac8]
call sym.ProcessMonitor.dll_PhSetWindowText
jmp 0x18013970d
mov dl, 1
mov rcx, qword [rsp + 0x138]
call sym.ProcessMonitor.dll_PhFormatUInt64
mov rcx, rax
call sym.ProcessMonitor.dll_PhAutoDereferenceObject
mov rdx, qword [rax + 8]
mov rcx, qword [0x1808e8ac8]
call sym.ProcessMonitor.dll_PhSetWindowText
mov rcx, rsp
lea rdx, [0x1804a21d0]
call fcn.180014e20
mov rcx, qword [rsp + 0x518]
xor rcx, rsp
call fcn.18000ce90
add rsp, 0x520
pop rdi
pop rsi
pop rbx
ret