Function at 0x140147970
Capabilities:
Get system information on windows

Disassembly:
jmp 0x140147970
push rbx
push rsi
push rdi
sub rsp, 0x520
lea rdi, [rsp + 0x30]
mov ecx, 0x13c
mov eax, 0xcccccccc
rep stosd dword [rdi], eax
mov rax, qword [0x1405dc580]
xor rax, rsp
mov qword [rsp + 0x518], rax
xorps xmm0, xmm0
movsd qword [rsp + 0x48], xmm0
mov byte [rsp + 0x50], 0
mov dword [rsp + 0xb4], 0
mov qword [rsp + 0xd8], 0
lea rax, [rsp + 0x478]
lea rcx, [0x1403d8e58]
mov rdi, rax
mov rsi, rcx
mov ecx, 0x10
rep movsb byte [rdi], byte [rsi]
lea rax, [rsp + 0x488]
mov rdi, rax
xor eax, eax
mov ecx, 0x2e
rep stosb byte [rdi], al
cmp qword [0x1405e39b8], 0
je 0x140147a31
cmp qword [0x1405e39c0], 0
je 0x140147a31
lea rcx, [rsp + 0x38]
call fcn.14000b600
movzx eax, al
test eax, eax
je 0x140147a31
movsd xmm0, qword [rsp + 0x38]
divsd xmm0, qword [0x1404d23e8]
movsd qword [rsp + 0x48], xmm0
mov byte [rsp + 0x50], 1
movzx eax, byte [rsp + 0x50]
test eax, eax
jne 0x140147a61
mov eax, 0x18
imul rax, rax, 0
mov rcx, qword [0x1405e39b0]
mov eax, dword [rcx + rax + 8]
cvtsi2sd xmm0, rax
divsd xmm0, qword [0x1404d23e8]
movsd qword [rsp + 0x48], xmm0
mov eax, 0x20
imul rax, rax, 0
mov dword [rsp + rax + 0x1a0], 0x4b
cvtss2sd xmm0, dword [0x1405e1464]
cvtss2sd xmm1, dword [0x1405e1460]
addsd xmm0, xmm1
mulsd xmm0, qword [0x1403de9b8]
mov eax, 0x20
imul rax, rax, 0
movsd qword [rsp + rax + 0x1b0], xmm0
mov eax, 0x20
imul rax, rax, 0
movzx ecx, word [0x1405d5f58]
mov word [rsp + rax + 0x1a4], cx
xor eax, eax
test eax, eax
jne 0x140147a61
mov eax, 0x20
imul rax, rax, 1
mov dword [rsp + rax + 0x1a0], 0
mov eax, 0x20
imul rax, rax, 1
mov ecx, 0x25
mov word [rsp + rax + 0x1b0], cx
xor eax, eax
test eax, eax
jne 0x140147ac1
mov qword [rsp + 0x20], 0
mov r9d, 0x200
lea r8, [rsp + 0x260]
mov edx, 2
lea rcx, [rsp + 0x1a0]
call sym.ProcessHacker.exe_PhFormatToBuffer
movzx eax, al
test eax, eax
je 0x140147b37
lea rdx, [rsp + 0x260]
mov rcx, qword [0x1405e39f0]
call sym.ProcessHacker.exe_PhSetWindowText
jmp 0x140147b77
cvtss2sd xmm0, dword [0x1405e1464]
cvtss2sd xmm1, dword [0x1405e1460]
addsd xmm0, xmm1
mulsd xmm0, qword [0x1403de9b8]
movaps xmm1, xmm0
movq rdx, xmm1
lea rcx, str._.2f__
call fcn.1400110d0
mov rdx, qword [rax + 8]
mov rcx, qword [0x1405e39f0]
call sym.ProcessHacker.exe_PhSetWindowText
mov eax, 0x20
imul rax, rax, 0
mov dword [rsp + rax + 0x1a0], 0x4b
mov eax, 0x20
imul rax, rax, 0
movsd xmm0, qword [rsp + 0x48]
movsd qword [rsp + rax + 0x1b0], xmm0
mov eax, 0x20
imul rax, rax, 0
mov ecx, 2
mov word [rsp + rax + 0x1a4], cx
xor eax, eax
test eax, eax
jne 0x140147b77
mov eax, 0x20
imul rax, rax, 1
mov dword [rsp + rax + 0x1a0], 1
mov eax, 0x20
imul rax, rax, 1
lea rax, [rsp + rax + 0x1b0]
lea rdx, [0x1404d2378]
mov rcx, rax
call fcn.140005530
xor eax, eax
test eax, eax
jne 0x140147bbf
mov eax, 0x20
imul rax, rax, 2
mov dword [rsp + rax + 0x1a0], 0x4b
mov eax, dword [0x1405e399c]
cvtsi2sd xmm0, rax
divsd xmm0, qword [0x1404d23e8]
mov eax, 0x20
imul rax, rax, 2
movsd qword [rsp + rax + 0x1b0], xmm0
mov eax, 0x20
imul rax, rax, 2
mov ecx, 2
mov word [rsp + rax + 0x1a4], cx
xor eax, eax
test eax, eax
jne 0x140147bf9
mov eax, 0x20
imul rax, rax, 3
mov dword [rsp + rax + 0x1a0], 1
mov eax, 0x20
imul rax, rax, 3
lea rax, [rsp + rax + 0x1b0]
lea rdx, str._GHz
mov rcx, rax
call fcn.140005530
xor eax, eax
test eax, eax
jne 0x140147c4e
mov qword [rsp + 0x20], 0
mov r9d, 0x200
lea r8, [rsp + 0x260]
mov edx, 4
lea rcx, [rsp + 0x1a0]
call sym.ProcessHacker.exe_PhFormatToBuffer
movzx eax, al
test eax, eax
je 0x140147cce
lea rdx, [rsp + 0x260]
mov rcx, qword [0x1405e39f8]
call sym.ProcessHacker.exe_PhSetWindowText
jmp 0x140147d10
mov eax, dword [0x1405e399c]
cvtsi2sd xmm0, rax
divsd xmm0, qword [0x1404d23e8]
movaps xmm2, xmm0
movq r8, xmm2
movsd xmm1, qword [rsp + 0x48]
movq rdx, xmm1
lea rcx, str._.2f____.2f_GHz
call fcn.1400110d0
mov rdx, qword [rax + 8]
mov rcx, qword [0x1405e39f8]
call sym.ProcessHacker.exe_PhSetWindowText
mov eax, 0x20
imul rax, rax, 0
mov dword [rsp + rax + 0x1a0], 0x10009
mov eax, 0x20
imul rax, rax, 0
mov ecx, dword [0x1405e1438]
mov qword [rsp + rax + 0x1b0], rcx
xor eax, eax
test eax, eax
jne 0x140147d10
mov qword [rsp + 0x20], 0
mov r9d, 0x200
lea r8, [rsp + 0x260]
mov edx, 1
lea rcx, [rsp + 0x1a0]
call sym.ProcessHacker.exe_PhFormatToBuffer
movzx eax, al
test eax, eax
je 0x140147d87
lea rdx, [rsp + 0x260]
mov rcx, qword [0x1405e3a00]
call sym.ProcessHacker.exe_PhSetWindowText
jmp 0x140147dae
mov eax, dword [0x1405e1438]
mov dl, 1
mov ecx, eax
call sym.ProcessHacker.exe_PhFormatUInt64
mov rcx, rax
call sym.ProcessHacker.exe_PhAutoDereferenceObject
mov rdx, qword [rax + 8]
mov rcx, qword [0x1405e3a00]
call sym.ProcessHacker.exe_PhSetWindowText
mov eax, 0x20
imul rax, rax, 0
mov dword [rsp + rax + 0x1a0], 0x10009
mov eax, 0x20
imul rax, rax, 0
mov ecx, dword [0x1405e143c]
mov qword [rsp + rax + 0x1b0], rcx
xor eax, eax
test eax, eax
jne 0x140147dae
mov qword [rsp + 0x20], 0
mov r9d, 0x200
lea r8, [rsp + 0x260]
mov edx, 1
lea rcx, [rsp + 0x1a0]
call sym.ProcessHacker.exe_PhFormatToBuffer
movzx eax, al
test eax, eax
je 0x140147e25
lea rdx, [rsp + 0x260]
mov rcx, qword [0x1405e3a08]
call sym.ProcessHacker.exe_PhSetWindowText
jmp 0x140147e4c
mov eax, dword [0x1405e143c]
mov dl, 1
mov ecx, eax
call sym.ProcessHacker.exe_PhFormatUInt64
mov rcx, rax
call sym.ProcessHacker.exe_PhAutoDereferenceObject
mov rdx, qword [rax + 8]
mov rcx, qword [0x1405e3a08]
call sym.ProcessHacker.exe_PhSetWindowText
mov eax, 0x20
imul rax, rax, 0
mov dword [rsp + rax + 0x1a0], 0x10009
mov eax, 0x20
imul rax, rax, 0
mov ecx, dword [0x1405e1440]
mov qword [rsp + rax + 0x1b0], rcx
xor eax, eax
test eax, eax
jne 0x140147e4c
mov qword [rsp + 0x20], 0
mov r9d, 0x200
lea r8, [rsp + 0x260]
mov edx, 1
lea rcx, [rsp + 0x1a0]
call sym.ProcessHacker.exe_PhFormatToBuffer
movzx eax, al
test eax, eax
je 0x140147ec3
lea rdx, [rsp + 0x260]
mov rcx, qword [0x1405e3a10]
call sym.ProcessHacker.exe_PhSetWindowText
jmp 0x140147eea
mov eax, dword [0x1405e1440]
mov dl, 1
mov ecx, eax
call sym.ProcessHacker.exe_PhFormatUInt64
mov rcx, rax
call sym.ProcessHacker.exe_PhAutoDereferenceObject
mov rdx, qword [rax + 8]
mov rcx, qword [0x1405e3a10]
call sym.ProcessHacker.exe_PhSetWindowText
xor r9d, r9d
mov r8d, 0x30
lea rdx, [rsp + 0x68]
mov ecx, 3
call qword [sym.imp.ntdll.dll_NtQuerySystemInformation]
test eax, eax
jl 0x140147f64
mov eax, dword [rsp + 0x68]
mov dword [rsp + 0x4d8], eax
mov eax, dword [rsp + 0x6c]
mov dword [rsp + 0x4dc], eax
mov rax, qword [rsp + 0x88]
mov rcx, qword [rsp + 0x4d8]
sub rcx, rax
mov rax, rcx
mov qword [rsp + 0x4d8], rax
mov rax, qword [rsp + 0x4d8]
mov rcx, qword [rsp + 0x70]
sub rcx, rax
mov rax, rcx
mov r8d, 2
mov rdx, rax
lea rcx, [rsp + 0x478]
call sym.ProcessHacker.exe_PhPrintTimeSpan
lea rdx, [rsp + 0x478]
mov rcx, qword [0x1405e3a18]
call sym.ProcessHacker.exe_PhSetWindowText
cmp dword [0x1405e3998], 1
jbe 0x140148025
mov eax, 0x20
imul rax, rax, 0
mov dword [rsp + rax + 0x1a0], 0x10009
mov eax, 0x20
imul rax, rax, 0
mov ecx, dword [0x1405e39cc]
mov qword [rsp + rax + 0x1b0], rcx
xor eax, eax
test eax, eax
jne 0x140147f85
mov qword [rsp + 0x20], 0
mov r9d, 0x200
lea r8, [rsp + 0x260]
mov edx, 1
lea rcx, [rsp + 0x1a0]
call sym.ProcessHacker.exe_PhFormatToBuffer
movzx eax, al
test eax, eax
je 0x140147ffc
lea rdx, [rsp + 0x260]
mov rcx, qword [0x1405e3a20]
call sym.ProcessHacker.exe_PhSetWindowText
jmp 0x140148023
mov eax, dword [0x1405e39cc]
mov dl, 1
mov ecx, eax
call sym.ProcessHacker.exe_PhFormatUInt64
mov rcx, rax
call sym.ProcessHacker.exe_PhAutoDereferenceObject
mov rdx, qword [rax + 8]
mov rcx, qword [0x1405e3a20]
call sym.ProcessHacker.exe_PhSetWindowText
jmp 0x140148038
lea rdx, [0x1404d23c0]
mov rcx, qword [0x1405e3a20]
call sym.ProcessHacker.exe_PhSetWindowText
cmp dword [0x1405e3998], 1
jbe 0x1401480e5
mov eax, 0x20
imul rax, rax, 0
mov dword [rsp + rax + 0x1a0], 0x10009
mov eax, 0x20
imul rax, rax, 0
mov ecx, dword [0x1405e39d4]
mov qword [rsp + rax + 0x1b0], rcx
xor eax, eax
test eax, eax
jne 0x140148045
mov qword [rsp + 0x20], 0
mov r9d, 0x200
lea r8, [rsp + 0x260]
mov edx, 1
lea rcx, [rsp + 0x1a0]
call sym.ProcessHacker.exe_PhFormatToBuffer
movzx eax, al
test eax, eax
je 0x1401480bc
lea rdx, [rsp + 0x260]
mov rcx, qword [0x1405e3a28]
call sym.ProcessHacker.exe_PhSetWindowText
jmp 0x1401480e3
mov eax, dword [0x1405e39d4]
mov dl, 1
mov ecx, eax
call sym.ProcessHacker.exe_PhFormatUInt64
mov rcx, rax
call sym.ProcessHacker.exe_PhAutoDereferenceObject
mov rdx, qword [rax + 8]
mov rcx, qword [0x1405e3a28]
call sym.ProcessHacker.exe_PhSetWindowText
jmp 0x1401480f8
lea rdx, [0x1404d23c0]
mov rcx, qword [0x1405e3a28]
call sym.ProcessHacker.exe_PhSetWindowText
cmp dword [0x1405e3998], 1
jbe 0x1401481a5
mov eax, 0x20
imul rax, rax, 0
mov dword [rsp + rax + 0x1a0], 0x10009
mov eax, 0x20
imul rax, rax, 0
mov rcx, qword [0x1405e39e0]
mov qword [rsp + rax + 0x1b0], rcx
xor eax, eax
test eax, eax
jne 0x140148105
mov qword [rsp + 0x20], 0
mov r9d, 0x200
lea r8, [rsp + 0x260]
mov edx, 1
lea rcx, [rsp + 0x1a0]
call sym.ProcessHacker.exe_PhFormatToBuffer
movzx eax, al
test eax, eax
je 0x14014817d
lea rdx, [rsp + 0x260]
mov rcx, qword [0x1405e3a30]
call sym.ProcessHacker.exe_PhSetWindowText
jmp 0x1401481a3
mov dl, 1
mov rcx, qword [0x1405e39e0]
call sym.ProcessHacker.exe_PhFormatUInt64
mov rcx, rax
call sym.ProcessHacker.exe_PhAutoDereferenceObject
mov rdx, qword [rax + 8]
mov rcx, qword [0x1405e3a30]
call sym.ProcessHacker.exe_PhSetWindowText
jmp 0x1401481b8
lea rdx, [0x1404d23c0]
mov rcx, qword [0x1405e3a30]
call sym.ProcessHacker.exe_PhSetWindowText
cmp dword [0x1405e3998], 1
jbe 0x140148265
mov eax, 0x20
imul rax, rax, 0
mov dword [rsp + rax + 0x1a0], 0x10009
mov eax, 0x20
imul rax, rax, 0
mov ecx, dword [0x1405e39ec]
mov qword [rsp + rax + 0x1b0], rcx
xor eax, eax
test eax, eax
jne 0x1401481c5
mov qword [rsp + 0x20], 0
mov r9d, 0x200
lea r8, [rsp + 0x260]
mov edx, 1
lea rcx, [rsp + 0x1a0]
call sym.ProcessHacker.exe_PhFormatToBuffer
movzx eax, al
test eax, eax
je 0x14014823c
lea rdx, [rsp + 0x260]
mov rcx, qword [0x1405e3a38]
call sym.ProcessHacker.exe_PhSetWindowText
jmp 0x140148263
mov eax, dword [0x1405e39ec]
mov dl, 1
mov ecx, eax
call sym.ProcessHacker.exe_PhFormatUInt64
mov rcx, rax
call sym.ProcessHacker.exe_PhAutoDereferenceObject
mov rdx, qword [rax + 8]
mov rcx, qword [0x1405e3a38]
call sym.ProcessHacker.exe_PhSetWindowText
jmp 0x140148278
lea rdx, [0x1404d23c0]
mov rcx, qword [0x1405e3a38]
call sym.ProcessHacker.exe_PhSetWindowText
lea r8, [rsp + 0xb4]
lea rdx, [rsp + 0xd8]
mov ecx, 0xffff
call fcn.14000a620
test eax, eax
jl 0x1401485e7
mov dword [rsp + 0x4e4], 0
mov dword [rsp + 0x4e8], 0
mov dword [rsp + 0x4ec], 0
mov dword [rsp + 0x4f0], 0
mov rax, qword [rsp + 0xd8]
mov qword [rsp + 0x4f8], rax
jmp 0x1401482f9
mov rax, qword [rsp + 0x4f8]
mov eax, dword [rax + 4]
mov rcx, qword [rsp + 0x4f8]
add rcx, rax
mov rax, rcx
mov qword [rsp + 0x4f8], rax
mov eax, dword [rsp + 0xb4]
mov rcx, qword [rsp + 0xd8]
add rcx, rax
mov rax, rcx
cmp qword [rsp + 0x4f8], rax
jae 0x1401483fa
mov rax, qword [rsp + 0x4f8]
mov eax, dword [rax]
mov dword [rsp + 0x510], eax
cmp dword [rsp + 0x510], 0
je 0x140148358
cmp dword [rsp + 0x510], 1
je 0x1401483d3
cmp dword [rsp + 0x510], 3
je 0x1401483e5
jmp 0x1401483f5
mov eax, dword [rsp + 0x4e8]
inc eax
mov dword [rsp + 0x4e8], eax
xor eax, eax
mov word [rsp + 0x500], ax
jmp 0x140148387
movzx eax, word [rsp + 0x500]
inc ax
mov word [rsp + 0x500], ax
movzx eax, word [rsp + 0x500]
mov rcx, qword [rsp + 0x4f8]
movzx ecx, word [rcx + 0x1e]
cmp eax, ecx
jge 0x1401483d1
movzx eax, word [rsp + 0x500]
imul rax, rax, 0x10
mov rcx, qword [rsp + 0x4f8]
mov rcx, qword [rcx + rax + 0x20]
call fcn.14000d480
mov ecx, dword [rsp + 0x4ec]
add ecx, eax
mov eax, ecx
mov dword [rsp + 0x4ec], eax
jmp 0x140148374
jmp 0x1401483f5
mov eax, dword [rsp + 0x4e4]
inc eax
mov dword [rsp + 0x4e4], eax
jmp 0x1401483f5
mov eax, dword [rsp + 0x4f0]
inc eax
mov dword [rsp + 0x4f0], eax
jmp 0x1401482d8
mov rcx, qword [rsp + 0xd8]
call sym.ProcessHacker.exe_PhFree
mov eax, 0x20
imul rax, rax, 0
mov dword [rsp + rax + 0x1a0], 0x10009
mov eax, 0x20
imul rax, rax, 0
mov ecx, dword [rsp + 0x4e8]
mov qword [rsp + rax + 0x1b0], rcx
xor eax, eax
test eax, eax
jne 0x140148407
mov qword [rsp + 0x20], 0
mov r9d, 0x200
lea r8, [rsp + 0x260]
mov edx, 1
lea rcx, [rsp + 0x1a0]
call sym.ProcessHacker.exe_PhFormatToBuffer
movzx eax, al
test eax, eax
je 0x14014847f
lea rdx, [rsp + 0x260]
mov rcx, qword [0x1405e3a40]
call sym.ProcessHacker.exe_PhSetWindowText
jmp 0x1401484a7
mov eax, dword [rsp + 0x4e8]
mov dl, 1
mov ecx, eax
call sym.ProcessHacker.exe_PhFormatUInt64
mov rcx, rax
call sym.ProcessHacker.exe_PhAutoDereferenceObject
mov rdx, qword [rax + 8]
mov rcx, qword [0x1405e3a40]
call sym.ProcessHacker.exe_PhSetWindowText
mov eax, 0x20
imul rax, rax, 0
mov dword [rsp + rax + 0x1a0], 0x10009
mov eax, 0x20
imul rax, rax, 0
mov ecx, dword [rsp + 0x4f0]
mov qword [rsp + rax + 0x1b0], rcx
xor eax, eax
test eax, eax
jne 0x1401484a7
mov qword [rsp + 0x20], 0
mov r9d, 0x200
lea r8, [rsp + 0x260]
mov edx, 1
lea rcx, [rsp + 0x1a0]
call sym.ProcessHacker.exe_PhFormatToBuffer
movzx eax, al
test eax, eax
je 0x14014851f
lea rdx, [rsp + 0x260]
mov rcx, qword [0x1405e3a48]
call sym.ProcessHacker.exe_PhSetWindowText
jmp 0x140148547
mov eax, dword [rsp + 0x4f0]
mov dl, 1
mov ecx, eax
call sym.ProcessHacker.exe_PhFormatUInt64
mov rcx, rax
call sym.ProcessHacker.exe_PhAutoDereferenceObject
mov rdx, qword [rax + 8]
mov rcx, qword [0x1405e3a48]
call sym.ProcessHacker.exe_PhSetWindowText
mov eax, 0x20
imul rax, rax, 0
mov dword [rsp + rax + 0x1a0], 0x10009
mov eax, 0x20
imul rax, rax, 0
mov ecx, dword [rsp + 0x4ec]
mov qword [rsp + rax + 0x1b0], rcx
xor eax, eax
test eax, eax
jne 0x140148547
mov qword [rsp + 0x20], 0
mov r9d, 0x200
lea r8, [rsp + 0x260]
mov edx, 1
lea rcx, [rsp + 0x1a0]
call sym.ProcessHacker.exe_PhFormatToBuffer
movzx eax, al
test eax, eax
je 0x1401485bf
lea rdx, [rsp + 0x260]
mov rcx, qword [0x1405e3a50]
call sym.ProcessHacker.exe_PhSetWindowText
jmp 0x1401485e7
mov eax, dword [rsp + 0x4ec]
mov dl, 1
mov ecx, eax
call sym.ProcessHacker.exe_PhFormatUInt64
mov rcx, rax
call sym.ProcessHacker.exe_PhAutoDereferenceObject
mov rdx, qword [rax + 8]
mov rcx, qword [0x1405e3a50]
call sym.ProcessHacker.exe_PhSetWindowText
xor edx, edx
lea rcx, [rsp + 0xf8]
call sym.ProcessHacker.exe_PhQueryPerformanceCounter
call sym.ProcessHacker.exe_PhReadTimeStampCounter
mov qword [rsp + 0x148], rax
lock or dword [rsp], 0
xor eax, eax
xor ecx, ecx
cpuid
lea rdi, [rsp + 0x168]
mov dword [rdi], eax
mov dword [rdi + 4], ebx
mov dword [rdi + 8], ecx
mov dword [rdi + 0xc], edx
lock or dword [rsp], 0
call sym.ProcessHacker.exe_PhReadTimeStampCounter
mov qword [rsp + 0x150], rax
lock or dword [rsp], 0
xor edx, edx
lea rcx, [rsp + 0x118]
call sym.ProcessHacker.exe_PhQueryPerformanceCounter
mov rax, qword [rsp + 0xf8]
mov rcx, qword [rsp + 0x118]
sub rcx, rax
mov rax, rcx
mov qword [rsp + 0x138], rax
cmp qword [rsp + 0x148], 0
jne 0x1401486ad
cmp qword [rsp + 0x150], 0
jne 0x1401486ad
mov eax, 4
imul rax, rax, 0
cmp dword [rsp + rax + 0x168], 0
jne 0x1401486ad
mov eax, 4
imul rax, rax, 3
cmp dword [rsp + rax + 0x168], 0
jne 0x1401486ad
mov qword [rsp + 0x138], 0
mov eax, 0x20
imul rax, rax, 0
mov dword [rsp + rax + 0x1a0], 0x10009
mov eax, 0x20
imul rax, rax, 0
mov rcx, qword [rsp + 0x138]
mov qword [rsp + rax + 0x1b0], rcx
xor eax, eax
test eax, eax
jne 0x1401486ad
mov eax, 0x20
imul rax, rax, 1
mov dword [rsp + rax + 0x1a0], 1
mov eax, 0x20
imul rax, rax, 1
lea rax, [rsp + rax + 0x1b0]
lea rdx, [0x1404d23c8]
mov rcx, rax
call fcn.140005530
xor eax, eax
test eax, eax
jne 0x1401486e0
mov eax, 0x20
imul rax, rax, 2
mov dword [rsp + rax + 0x1a0], 0x10009
mov eax, 0x20
imul rax, rax, 2
mov ecx, dword [0x1405e1444]
mov qword [rsp + rax + 0x1b0], rcx
xor eax, eax
test eax, eax
jne 0x14014871a
mov qword [rsp + 0x20], 0
mov r9d, 0x200
lea r8, [rsp + 0x260]
mov edx, 3
lea rcx, [rsp + 0x1a0]
call sym.ProcessHacker.exe_PhFormatToBuffer
movzx eax, al
test eax, eax
je 0x140148791
lea rdx, [rsp + 0x260]
mov rcx, qword [0x1405e3a58]
call sym.ProcessHacker.exe_PhSetWindowText
jmp 0x1401487b8
mov dl, 1
mov rcx, qword [rsp + 0x138]
call sym.ProcessHacker.exe_PhFormatUInt64
mov rcx, rax
call sym.ProcessHacker.exe_PhAutoDereferenceObject
mov rdx, qword [rax + 8]
mov rcx, qword [0x1405e3a58]
call sym.ProcessHacker.exe_PhSetWindowText
mov rcx, rsp
lea rdx, [0x1404d1bc0]
call fcn.140015750
mov rcx, qword [rsp + 0x518]
xor rcx, rsp
call fcn.14000d430
add rsp, 0x520
pop rdi
pop rsi
pop rbx
ret