Function at 0x490a00
Capabilities:
Get system information on windows

Disassembly:
push ebp
mov ebp, esp
and esp, 0xfffffff8
sub esp, 0x7c
mov al, byte [0x5484ac]
push ebx
mov byte [esp + 0x1a], al
mov ebx, 0x1000
mov eax, dword [0x54bd90]
mul ebx
push esi
push edi
push 0
mov dword [esp + 0x2c], eax
lea eax, [esp + 0x1c]
push 1
push eax
mov dword [esp + 0x24], 0x10c
mov dword [esp + 0x38], edx
call sym.ProcessHacker.exe_PhFormat
push eax
call sym.ProcessHacker.exe_PhAutoDereferenceObject
push 0x522
push dword [0x54ad5c]
mov esi, dword [eax + 4]
call dword [sym.imp.USER32.dll_GetDlgItem]
test eax, eax
je 0x490a69
push esi
push 0
push 0xc
push eax
call dword [sym.imp.USER32.dll_SendMessageW]
mov al, byte [0x5484ac]
mov byte [esp + 0x22], al
mov eax, dword [0x54bd98]
mul ebx
push 0
mov dword [esp + 0x2c], eax
lea eax, [esp + 0x1c]
push 1
push eax
mov dword [esp + 0x24], 0x10c
mov dword [esp + 0x38], edx
call sym.ProcessHacker.exe_PhFormat
push eax
call sym.ProcessHacker.exe_PhAutoDereferenceObject
push 0x523
push dword [0x54ad5c]
mov esi, dword [eax + 4]
call dword [sym.imp.USER32.dll_GetDlgItem]
test eax, eax
je 0x490ac1
push esi
push 0
push 0xc
push eax
call dword [sym.imp.USER32.dll_SendMessageW]
mov al, byte [0x5484ac]
mov byte [esp + 0x22], al
mov eax, dword [0x54bd94]
mul ebx
push 0
mov dword [esp + 0x2c], eax
lea eax, [esp + 0x1c]
push 1
push eax
mov dword [esp + 0x24], 0x10c
mov dword [esp + 0x38], edx
call sym.ProcessHacker.exe_PhFormat
push eax
call sym.ProcessHacker.exe_PhAutoDereferenceObject
push 0x524
push dword [0x54ad5c]
mov esi, dword [eax + 4]
call dword [sym.imp.USER32.dll_GetDlgItem]
test eax, eax
je 0x490b19
push esi
push 0
push 0xc
push eax
call dword [sym.imp.USER32.dll_SendMessageW]
mov al, byte [0x5484ac]
mov byte [esp + 0x22], al
mov eax, dword [0x54b64c]
sub eax, dword [0x54bd8c]
mul ebx
push 0
mov dword [esp + 0x2c], eax
lea eax, [esp + 0x1c]
push 1
push eax
mov dword [esp + 0x24], 0x10c
mov dword [esp + 0x38], edx
call sym.ProcessHacker.exe_PhFormat
push eax
call sym.ProcessHacker.exe_PhAutoDereferenceObject
push 0x525
push dword [0x54ad5c]
mov esi, dword [eax + 4]
call dword [sym.imp.USER32.dll_GetDlgItem]
test eax, eax
je 0x490b77
push esi
push 0
push 0xc
push eax
call dword [sym.imp.USER32.dll_SendMessageW]
mov al, byte [0x5484ac]
mov byte [esp + 0x22], al
mov eax, dword [0x54b64c]
mul ebx
push 0
mov dword [esp + 0x2c], eax
lea eax, [esp + 0x1c]
push 1
push eax
mov dword [esp + 0x24], 0x10c
mov dword [esp + 0x38], edx
call sym.ProcessHacker.exe_PhFormat
push eax
call sym.ProcessHacker.exe_PhAutoDereferenceObject
push 0x526
push dword [0x54ad5c]
mov esi, dword [eax + 4]
call dword [sym.imp.USER32.dll_GetDlgItem]
test eax, eax
je 0x490bcf
push esi
push 0
push 0xc
push eax
call dword [sym.imp.USER32.dll_SendMessageW]
mov ecx, dword [0x54ad80]
mov eax, ecx
mov esi, dword [0x54ad84]
or eax, esi
je 0x490c3b
mov al, byte [0x5484ac]
mov byte [esp + 0x22], al
mov eax, dword [0x54b64c]
mul ebx
shld esi, ecx, 0xa
push 0
shl ecx, 0xa
sub ecx, eax
mov dword [esp + 0x1c], 0x10c
push 1
lea eax, [esp + 0x20]
mov dword [esp + 0x30], ecx
sbb esi, edx
push eax
mov dword [esp + 0x38], esi
call sym.ProcessHacker.exe_PhFormat
push eax
call sym.ProcessHacker.exe_PhAutoDereferenceObject
push 0x533
push dword [0x54ad5c]
mov esi, dword [eax + 4]
call dword [sym.imp.USER32.dll_GetDlgItem]
test eax, eax
je 0x490c60
push esi
jmp 0x490c55
push 0x533
push dword [0x54ad5c]
call dword [sym.imp.USER32.dll_GetDlgItem]
test eax, eax
je 0x490c60
push 0x531958
push 0
push 0xc
push eax
call dword [sym.imp.USER32.dll_SendMessageW]
mov al, byte [0x5484ac]
mov byte [esp + 0x22], al
mov eax, dword [0x54be04]
mul ebx
push 0
mov dword [esp + 0x2c], eax
lea eax, [esp + 0x1c]
push 1
push eax
mov dword [esp + 0x24], 0x10c
mov dword [esp + 0x38], edx
call sym.ProcessHacker.exe_PhFormat
push eax
call sym.ProcessHacker.exe_PhAutoDereferenceObject
push 0x527
push dword [0x54ad5c]
mov esi, dword [eax + 4]
call dword [sym.imp.USER32.dll_GetDlgItem]
test eax, eax
je 0x490cb8
push esi
push 0
push 0xc
push eax
call dword [sym.imp.USER32.dll_SendMessageW]
mov al, byte [0x5484ac]
mov byte [esp + 0x22], al
mov eax, dword [0x54bdec]
mul ebx
push 0
mov dword [esp + 0x2c], eax
lea eax, [esp + 0x1c]
push 1
push eax
mov dword [esp + 0x24], 0x10c
mov dword [esp + 0x38], edx
call sym.ProcessHacker.exe_PhFormat
push eax
call sym.ProcessHacker.exe_PhAutoDereferenceObject
push 0x528
push dword [0x54ad5c]
mov esi, dword [eax + 4]
call dword [sym.imp.USER32.dll_GetDlgItem]
test eax, eax
je 0x490d10
push esi
push 0
push 0xc
push eax
call dword [sym.imp.USER32.dll_SendMessageW]
mov al, byte [0x5484ac]
mov byte [esp + 0x22], al
mov eax, dword [0x54be0c]
mul ebx
push 0
mov dword [esp + 0x2c], eax
lea eax, [esp + 0x1c]
push 1
push eax
mov dword [esp + 0x24], 0x10c
mov dword [esp + 0x38], edx
call sym.ProcessHacker.exe_PhFormat
push eax
call sym.ProcessHacker.exe_PhAutoDereferenceObject
push 0x529
push dword [0x54ad5c]
mov esi, dword [eax + 4]
call dword [sym.imp.USER32.dll_GetDlgItem]
test eax, eax
je 0x490d68
push esi
push 0
push 0xc
push eax
call dword [sym.imp.USER32.dll_SendMessageW]
mov al, byte [0x5484ac]
mov byte [esp + 0x22], al
mov eax, dword [0x54be08]
mul ebx
push 0
mov dword [esp + 0x2c], eax
lea eax, [esp + 0x1c]
push 1
push eax
mov dword [esp + 0x24], 0x10c
mov dword [esp + 0x38], edx
call sym.ProcessHacker.exe_PhFormat
push eax
call sym.ProcessHacker.exe_PhAutoDereferenceObject
push 0x52a
push dword [0x54ad5c]
mov esi, dword [eax + 4]
call dword [sym.imp.USER32.dll_GetDlgItem]
test eax, eax
je 0x490dc0
push esi
push 0
push 0xc
push eax
call dword [sym.imp.USER32.dll_SendMessageW]
mov al, byte [0x5484ac]
mov byte [esp + 0x22], al
mov eax, dword [0x54bdd0]
mul ebx
push 0
mov dword [esp + 0x2c], eax
lea eax, [esp + 0x1c]
push 1
push eax
mov dword [esp + 0x24], 0x10c
mov dword [esp + 0x38], edx
call sym.ProcessHacker.exe_PhFormat
push eax
call sym.ProcessHacker.exe_PhAutoDereferenceObject
push 0x52b
push dword [0x54ad5c]
mov esi, dword [eax + 4]
call dword [sym.imp.USER32.dll_GetDlgItem]
test eax, eax
je 0x490e18
push esi
push 0
push 0xc
push eax
call dword [sym.imp.USER32.dll_SendMessageW]
cmp dword [0x54ae50], 1
jbe 0x490e69
mov eax, dword [0x54ad6c]
push 0
mov dword [esp + 0x2c], eax
lea eax, [esp + 0x1c]
push 1
push eax
mov dword [esp + 0x24], 0x10009
mov dword [esp + 0x38], 0
call sym.ProcessHacker.exe_PhFormat
push eax
call sym.ProcessHacker.exe_PhAutoDereferenceObject
push 0x52d
push dword [0x54ad5c]
mov esi, dword [eax + 4]
call dword [sym.imp.USER32.dll_GetDlgItem]
test eax, eax
je 0x490e8e
push esi
jmp 0x490e83
push 0x52d
push dword [0x54ad5c]
call dword [sym.imp.USER32.dll_GetDlgItem]
test eax, eax
je 0x490e8e
push 0x531958
push 0
push 0xc
push eax
call dword [sym.imp.USER32.dll_SendMessageW]
cmp dword [0x54ae50], 1
jbe 0x490edf
mov eax, dword [0x54ae30]
push 0
mov dword [esp + 0x2c], eax
lea eax, [esp + 0x1c]
push 1
push eax
mov dword [esp + 0x24], 0x10009
mov dword [esp + 0x38], 0
call sym.ProcessHacker.exe_PhFormat
push eax
call sym.ProcessHacker.exe_PhAutoDereferenceObject
push 0x52e
push dword [0x54ad5c]
mov esi, dword [eax + 4]
call dword [sym.imp.USER32.dll_GetDlgItem]
test eax, eax
je 0x490f04
push esi
jmp 0x490ef9
push 0x52e
push dword [0x54ad5c]
call dword [sym.imp.USER32.dll_GetDlgItem]
test eax, eax
je 0x490f04
push 0x531958
push 0
push 0xc
push eax
call dword [sym.imp.USER32.dll_SendMessageW]
mov al, byte [0x5484ac]
mov byte [esp + 0x22], al
mov eax, dword [0x54bdd4]
mul ebx
push 0
mov dword [esp + 0x2c], eax
lea eax, [esp + 0x1c]
push 1
push eax
mov dword [esp + 0x24], 0x10c
mov dword [esp + 0x38], edx
call sym.ProcessHacker.exe_PhFormat
push eax
call sym.ProcessHacker.exe_PhAutoDereferenceObject
push 0x52f
push dword [0x54ad5c]
mov esi, dword [eax + 4]
call dword [sym.imp.USER32.dll_GetDlgItem]
test eax, eax
je 0x490f5c
push esi
push 0
push 0xc
push eax
call dword [sym.imp.USER32.dll_SendMessageW]
cmp dword [0x54ae50], 1
jbe 0x490fad
mov eax, dword [0x54ad6c]
push 0
mov dword [esp + 0x2c], eax
lea eax, [esp + 0x1c]
push 1
push eax
mov dword [esp + 0x24], 0x10009
mov dword [esp + 0x38], 0
call sym.ProcessHacker.exe_PhFormat
push eax
call sym.ProcessHacker.exe_PhAutoDereferenceObject
push 0x531
push dword [0x54ad5c]
mov esi, dword [eax + 4]
call dword [sym.imp.USER32.dll_GetDlgItem]
test eax, eax
je 0x490fd2
push esi
jmp 0x490fc7
push 0x531
push dword [0x54ad5c]
call dword [sym.imp.USER32.dll_GetDlgItem]
test eax, eax
je 0x490fd2
push 0x531958
push 0
push 0xc
push eax
call dword [sym.imp.USER32.dll_SendMessageW]
cmp dword [0x54ae50], 1
jbe 0x491023
mov eax, dword [0x54ad8c]
push 0
mov dword [esp + 0x2c], eax
lea eax, [esp + 0x1c]
push 1
push eax
mov dword [esp + 0x24], 0x10009
mov dword [esp + 0x38], 0
call sym.ProcessHacker.exe_PhFormat
push eax
call sym.ProcessHacker.exe_PhAutoDereferenceObject
push 0x532
push dword [0x54ad5c]
mov esi, dword [eax + 4]
call dword [sym.imp.USER32.dll_GetDlgItem]
test eax, eax
je 0x491048
push esi
jmp 0x49103d
push 0x532
push dword [0x54ad5c]
call dword [sym.imp.USER32.dll_GetDlgItem]
test eax, eax
je 0x491048
push 0x531958
push 0
push 0xc
push eax
call dword [sym.imp.USER32.dll_SendMessageW]
cmp byte [0x54abbb], 0
je 0x491144
mov edx, dword [0x54ae1c]
mov eax, dword [0x54ae28]
test edx, edx
jne 0x49106c
test eax, eax
je 0x491144
or ecx, 0xffffffff
or esi, 0xffffffff
mov dword [esp + 0x10], ecx
mov dword [esp + 0x14], esi
test edx, edx
je 0x4910a5
cmp dword [sym.ProcessHacker.exe_WindowsVersion], 0x3e
jae 0x4910a5
push 0
push 4
lea eax, [esp + 0x18]
push eax
push edx
push 0xffffffffffffffff
call fcn.004b3e70
mov eax, dword [0x54ae28]
mov ecx, dword [esp + 0x10]
mov esi, dword [esp + 0x14]
test eax, eax
je 0x4910c2
push 0
push 4
lea ecx, [esp + 0x1c]
push ecx
push eax
push 0xffffffffffffffff
call fcn.004b3e70
mov ecx, dword [esp + 0x10]
mov esi, dword [esp + 0x14]
cmp ecx, 0xffffffff
je 0x4910fd
mov al, byte [0x5484ac]
push 0
mov byte [esp + 0x26], al
lea eax, [esp + 0x1c]
push 1
push eax
mov dword [esp + 0x24], 0x10c
mov dword [esp + 0x34], ecx
mov dword [esp + 0x38], 0
call sym.ProcessHacker.exe_PhFormat
push eax
call sym.ProcessHacker.exe_PhAutoDereferenceObject
mov edi, dword [eax + 4]
jmp 0x491102
mov edi, 0x5291b0
cmp esi, 0xffffffff
je 0x49113d
mov al, byte [0x5484ac]
push 0
mov byte [esp + 0x26], al
lea eax, [esp + 0x1c]
push 1
push eax
mov dword [esp + 0x24], 0x10c
mov dword [esp + 0x34], esi
mov dword [esp + 0x38], 0
call sym.ProcessHacker.exe_PhFormat
push eax
call sym.ProcessHacker.exe_PhAutoDereferenceObject
mov esi, dword [eax + 4]
jmp 0x49115d
mov esi, 0x5291b0
jmp 0x49115d
cmp dword [0x5496ac], 0
jne 0x491156
mov esi, str.no_driver
mov edi, esi
jmp 0x49115d
mov esi, str.no_symbols
mov edi, esi
push 0x52c
push dword [0x54ad5c]
call dword [sym.imp.USER32.dll_GetDlgItem]
test eax, eax
je 0x49117e
push edi
push 0
push 0xc
push eax
call dword [sym.imp.USER32.dll_SendMessageW]
push 0x530
push dword [0x54ad5c]
call dword [sym.imp.USER32.dll_GetDlgItem]
test eax, eax
je 0x49119f
push esi
push 0
push 0xc
push eax
call dword [sym.imp.USER32.dll_SendMessageW]
cmp dword [0x54ae50], 1
jbe 0x4911f0
mov eax, dword [0x54ae24]
push 0
mov dword [esp + 0x2c], eax
lea eax, [esp + 0x1c]
push 1
push eax
mov dword [esp + 0x24], 0x10009
mov dword [esp + 0x38], 0
call sym.ProcessHacker.exe_PhFormat
push eax
call sym.ProcessHacker.exe_PhAutoDereferenceObject
push 0x558
push dword [0x54ad5c]
mov esi, dword [eax + 4]
call dword [sym.imp.USER32.dll_GetDlgItem]
test eax, eax
je 0x491215
push esi
jmp 0x49120a
push 0x558
push dword [0x54ad5c]
call dword [sym.imp.USER32.dll_GetDlgItem]
test eax, eax
je 0x491215
push 0x531958
push 0
push 0xc
push eax
call dword [sym.imp.USER32.dll_SendMessageW]
cmp dword [0x54ae50], 1
jbe 0x491266
mov eax, dword [0x54ad64]
push 0
mov dword [esp + 0x2c], eax
lea eax, [esp + 0x1c]
push 1
push eax
mov dword [esp + 0x24], 0x10009
mov dword [esp + 0x38], 0
call sym.ProcessHacker.exe_PhFormat
push eax
call sym.ProcessHacker.exe_PhAutoDereferenceObject
push 0x559
push dword [0x54ad5c]
mov esi, dword [eax + 4]
call dword [sym.imp.USER32.dll_GetDlgItem]
test eax, eax
je 0x49128b
push esi
jmp 0x491280
push 0x559
push dword [0x54ad5c]
call dword [sym.imp.USER32.dll_GetDlgItem]
test eax, eax
je 0x49128b
push 0x531958
push 0
push 0xc
push eax
call dword [sym.imp.USER32.dll_SendMessageW]
cmp dword [0x54ae50], 1
jbe 0x4912dc
mov eax, dword [0x54ad58]
push 0
mov dword [esp + 0x2c], eax
lea eax, [esp + 0x1c]
push 1
push eax
mov dword [esp + 0x24], 0x10009
mov dword [esp + 0x38], 0
call sym.ProcessHacker.exe_PhFormat
push eax
call sym.ProcessHacker.exe_PhAutoDereferenceObject
push 0x55a
push dword [0x54ad5c]
mov esi, dword [eax + 4]
call dword [sym.imp.USER32.dll_GetDlgItem]
test eax, eax
je 0x491301
push esi
jmp 0x4912f6
push 0x55a
push dword [0x54ad5c]
call dword [sym.imp.USER32.dll_GetDlgItem]
test eax, eax
je 0x491301
push 0x531958
push 0
push 0xc
push eax
call dword [sym.imp.USER32.dll_SendMessageW]
cmp dword [0x54ae50], 1
jbe 0x491352
mov eax, dword [0x54ad74]
push 0
mov dword [esp + 0x2c], eax
lea eax, [esp + 0x1c]
push 1
push eax
mov dword [esp + 0x24], 0x10009
mov dword [esp + 0x38], 0
call sym.ProcessHacker.exe_PhFormat
push eax
call sym.ProcessHacker.exe_PhAutoDereferenceObject
push 0x55b
push dword [0x54ad5c]
mov esi, dword [eax + 4]
call dword [sym.imp.USER32.dll_GetDlgItem]
test eax, eax
je 0x491377
push esi
jmp 0x49136c
push 0x55b
push dword [0x54ad5c]
call dword [sym.imp.USER32.dll_GetDlgItem]
test eax, eax
je 0x491377
push 0x531958
push 0
push 0xc
push eax
call dword [sym.imp.USER32.dll_SendMessageW]
push 0
push 0x58
lea eax, [esp + 0x38]
push eax
push 0x50
call dword [sym.imp.ntdll.dll_NtQuerySystemInformation]
test eax, eax
js 0x491892
mov al, byte [0x5484ac]
mov esi, dword [esp + 0x60]
add esi, dword [esp + 0x5c]
add esi, dword [esp + 0x58]
add esi, dword [esp + 0x54]
add esi, dword [esp + 0x50]
add esi, dword [esp + 0x4c]
add esi, dword [esp + 0x48]
add esi, dword [esp + 0x44]
mov byte [esp + 0x22], al
mov eax, dword [esp + 0x30]
mul ebx
push 0
mov dword [esp + 0x2c], eax
lea eax, [esp + 0x1c]
push 1
push eax
mov dword [esp + 0x24], 0x10c
mov dword [esp + 0x38], edx
call sym.ProcessHacker.exe_PhFormat
push eax
call sym.ProcessHacker.exe_PhAutoDereferenceObject
push 0x534
push dword [0x54ad5c]
mov edi, dword [eax + 4]
call dword [sym.imp.USER32.dll_GetDlgItem]
test eax, eax
je 0x491407
push edi
push 0
push 0xc
push eax
call dword [sym.imp.USER32.dll_SendMessageW]
mov al, byte [0x5484ac]
mov byte [esp + 0x22], al
mov eax, dword [esp + 0x34]
mul ebx
push 0
mov dword [esp + 0x2c], eax
lea eax, [esp + 0x1c]
push 1
push eax
mov dword [esp + 0x24], 0x10c
mov dword [esp + 0x38], edx
call sym.ProcessHacker.exe_PhFormat
push eax
call sym.ProcessHacker.exe_PhAutoDereferenceObject
push 0x535
push dword [0x54ad5c]
mov edi, dword [eax + 4]
call dword [sym.imp.USER32.dll_GetDlgItem]
test eax, eax
je 0x49145e
push edi
push 0
push 0xc
push eax
call dword [sym.imp.USER32.dll_SendMessageW]
mov al, byte [0x5484ac]
mov byte [esp + 0x22], al
mov eax, dword [esp + 0x38]
mul ebx
push 0
mov dword [esp + 0x2c], eax
lea eax, [esp + 0x1c]
push 1
push eax
mov dword [esp + 0x24], 0x10c
mov dword [esp + 0x38], edx
call sym.ProcessHacker.exe_PhFormat
push eax
call sym.ProcessHacker.exe_PhAutoDereferenceObject
push 0x536
push dword [0x54ad5c]
mov edi, dword [eax + 4]
call dword [sym.imp.USER32.dll_GetDlgItem]
test eax, eax
je 0x4914b5
push edi
push 0
push 0xc
push eax
call dword [sym.imp.USER32.dll_SendMessageW]
mov al, byte [0x5484ac]
mov byte [esp + 0x22], al
mov eax, dword [esp + 0x3c]
mul ebx
push 0
mov dword [esp + 0x2c], eax
lea eax, [esp + 0x1c]
push 1
push eax
mov dword [esp + 0x24], 0x10c
mov dword [esp + 0x38], edx
call sym.ProcessHacker.exe_PhFormat
push eax
call sym.ProcessHacker.exe_PhAutoDereferenceObject
push 0x537
push dword [0x54ad5c]
mov edi, dword [eax + 4]
call dword [sym.imp.USER32.dll_GetDlgItem]
test eax, eax
je 0x49150c
push edi
push 0
push 0xc
push eax
call dword [sym.imp.USER32.dll_SendMessageW]
mov cl, byte [0x5484ac]
mov eax, esi
mul ebx
push 0
mov dword [esp + 0x2c], eax
lea eax, [esp + 0x1c]
push 1
push eax
mov dword [esp + 0x24], 0x10c
mov byte [esp + 0x2e], cl
mov dword [esp + 0x38], edx
call sym.ProcessHacker.exe_PhFormat
push eax
call sym.ProcessHacker.exe_PhAutoDereferenceObject
push 0x539
push dword [0x54ad5c]
mov esi, dword [eax + 4]
call dword [sym.imp.USER32.dll_GetDlgItem]
test eax, eax
je 0x491562
push esi
push 0
push 0xc
push eax
call dword [sym.imp.USER32.dll_SendMessageW]
mov al, byte [0x5484ac]
mov byte [esp + 0x22], al
mov eax, dword [esp + 0x44]
mul ebx
push 0
mov dword [esp + 0x2c], eax
lea eax, [esp + 0x1c]
push 1
push eax
mov dword [esp + 0x24], 0x10c
mov dword [esp + 0x38], edx
call sym.ProcessHacker.exe_PhFormat
push eax
call sym.ProcessHacker.exe_PhAutoDereferenceObject
push 0x542
push dword [0x54ad5c]
mov esi, dword [eax + 4]
call dword [sym.imp.USER32.dll_GetDlgItem]
test eax, eax
je 0x4915b9
push esi
push 0
push 0xc
push eax
call dword [sym.imp.USER32.dll_SendMessageW]
mov al, byte [0x5484ac]
mov byte [esp + 0x22], al
mov eax, dword [esp + 0x48]
mul ebx
push 0
mov dword [esp + 0x2c], eax
lea eax, [esp + 0x1c]
push 1
push eax
mov dword [esp + 0x24], 0x10c
mov dword [esp + 0x38], edx
call sym.ProcessHacker.exe_PhFormat
push eax
call sym.ProcessHacker.exe_PhAutoDereferenceObject
push 0x543
push dword [0x54ad5c]
mov esi, dword [eax + 4]
call dword [sym.imp.USER32.dll_GetDlgItem]
test eax, eax
je 0x491610
push esi
push 0
push 0xc
push eax
call dword [sym.imp.USER32.dll_SendMessageW]
mov al, byte [0x5484ac]
mov byte [esp + 0x22], al
mov eax, dword [esp + 0x4c]
mul ebx
push 0
mov dword [esp + 0x2c], eax
lea eax, [esp + 0x1c]
push 1
push eax
mov dword [esp + 0x24], 0x10c
mov dword [esp + 0x38], edx
call sym.ProcessHacker.exe_PhFormat
push eax
call sym.ProcessHacker.exe_PhAutoDereferenceObject
push 0x544
push dword [0x54ad5c]
mov esi, dword [eax + 4]
call dword [sym.imp.USER32.dll_GetDlgItem]
test eax, eax
je 0x491667
push esi
push 0
push 0xc
push eax
call dword [sym.imp.USER32.dll_SendMessageW]
mov al, byte [0x5484ac]
mov byte [esp + 0x22], al
mov eax, dword [esp + 0x50]
mul ebx
push 0
mov dword [esp + 0x2c], eax
lea eax, [esp + 0x1c]
push 1
push eax
mov dword [esp + 0x24], 0x10c
mov dword [esp + 0x38], edx
call sym.ProcessHacker.exe_PhFormat
push eax
call sym.ProcessHacker.exe_PhAutoDereferenceObject
push 0x545
push dword [0x54ad5c]
mov esi, dword [eax + 4]
call dword [sym.imp.USER32.dll_GetDlgItem]
test eax, eax
je 0x4916be
push esi
push 0
push 0xc
push eax
call dword [sym.imp.USER32.dll_SendMessageW]
mov al, byte [0x5484ac]
mov byte [esp + 0x22], al
mov eax, dword [esp + 0x54]
mul ebx
push 0
mov dword [esp + 0x2c], eax
lea eax, [esp + 0x1c]
push 1
push eax
mov dword [esp + 0x24], 0x10c
mov dword [esp + 0x38], edx
call sym.ProcessHacker.exe_PhFormat
push eax
call sym.ProcessHacker.exe_PhAutoDereferenceObject
push 0x554
push dword [0x54ad5c]
mov esi, dword [eax + 4]
call dword [sym.imp.USER32.dll_GetDlgItem]
test eax, eax
je 0x491715
push esi
push 0
push 0xc
push eax
call dword [sym.imp.USER32.dll_SendMessageW]
mov al, byte [0x5484ac]
mov byte [esp + 0x22], al
mov eax, dword [esp + 0x58]
mul ebx
push 0
mov dword [esp + 0x2c], eax
lea eax, [esp + 0x1c]
push 1
push eax
mov dword [esp + 0x24], 0x10c
mov dword [esp + 0x38], edx
call sym.ProcessHacker.exe_PhFormat
push eax
call sym.ProcessHacker.exe_PhAutoDereferenceObject
push 0x555
push dword [0x54ad5c]
mov esi, dword [eax + 4]
call dword [sym.imp.USER32.dll_GetDlgItem]
test eax, eax
je 0x49176c
push esi
push 0
push 0xc
push eax
call dword [sym.imp.USER32.dll_SendMessageW]
mov al, byte [0x5484ac]
mov byte [esp + 0x22], al
mov eax, dword [esp + 0x5c]
mul ebx
push 0
mov dword [esp + 0x2c], eax
lea eax, [esp + 0x1c]
push 1
push eax
mov dword [esp + 0x24], 0x10c
mov dword [esp + 0x38], edx
call sym.ProcessHacker.exe_PhFormat
push eax
call sym.ProcessHacker.exe_PhAutoDereferenceObject
push 0x556
push dword [0x54ad5c]
mov esi, dword [eax + 4]
call dword [sym.imp.USER32.dll_GetDlgItem]
test eax, eax
je 0x4917c3
push esi
push 0
push 0xc
push eax
call dword [sym.imp.USER32.dll_SendMessageW]
mov al, byte [0x5484ac]
mov byte [esp + 0x22], al
mov eax, dword [esp + 0x60]
mul ebx
push 0
mov dword [esp + 0x2c], eax
lea eax, [esp + 0x1c]
push 1
push eax
mov dword [esp + 0x24], 0x10c
mov dword [esp + 0x38], edx
call sym.ProcessHacker.exe_PhFormat
push eax
call sym.ProcessHacker.exe_PhAutoDereferenceObject
push 0x557
push dword [0x54ad5c]
mov esi, dword [eax + 4]
call dword [sym.imp.USER32.dll_GetDlgItem]
test eax, eax
je 0x49181a
push esi
push 0
push 0xc
push eax
call dword [sym.imp.USER32.dll_SendMessageW]
cmp dword [sym.ProcessHacker.exe_WindowsVersion], 0x3e
jb 0x491888
mov al, byte [0x5484ac]
mov byte [esp + 0x22], al
mov eax, dword [esp + 0x84]
mul ebx
push 0
mov dword [esp + 0x2c], eax
lea eax, [esp + 0x1c]
push 1
push eax
mov dword [esp + 0x24], 0x10c
mov dword [esp + 0x38], edx
call sym.ProcessHacker.exe_PhFormat
push eax
call sym.ProcessHacker.exe_PhAutoDereferenceObject
push 0x55d
push dword [0x54ad5c]
mov esi, dword [eax + 4]
call dword [sym.imp.USER32.dll_GetDlgItem]
test eax, eax
je 0x491a98
push esi
push 0
push 0xc
push eax
call dword [sym.imp.USER32.dll_SendMessageW]
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
push 0x55d
jmp 0x491a78
push 0x534
push dword [0x54ad5c]
call dword [sym.imp.USER32.dll_GetDlgItem]
test eax, eax
je 0x4918b7
push 0x5291b0
push 0
push 0xc
push eax
call dword [sym.imp.USER32.dll_SendMessageW]
push 0x535
push dword [0x54ad5c]
call dword [sym.imp.USER32.dll_GetDlgItem]
test eax, eax
je 0x4918dc
push 0x5291b0
push 0
push 0xc
push eax
call dword [sym.imp.USER32.dll_SendMessageW]
push 0x536
push dword [0x54ad5c]
call dword [sym.imp.USER32.dll_GetDlgItem]
test eax, eax
je 0x491901
push 0x5291b0
push 0
push 0xc
push eax
call dword [sym.imp.USER32.dll_SendMessageW]
push 0x537
push dword [0x54ad5c]
call dword [sym.imp.USER32.dll_GetDlgItem]
test eax, eax
je 0x491926
push 0x5291b0
push 0
push 0xc
push eax
call dword [sym.imp.USER32.dll_SendMessageW]
push 0x55d
push dword [0x54ad5c]
call dword [sym.imp.USER32.dll_GetDlgItem]
test eax, eax
je 0x49194b
push 0x5291b0
push 0
push 0xc
push eax
call dword [sym.imp.USER32.dll_SendMessageW]
push 0x539
push dword [0x54ad5c]
call dword [sym.imp.USER32.dll_GetDlgItem]
test eax, eax
je 0x491970
push 0x5291b0
push 0
push 0xc
push eax
call dword [sym.imp.USER32.dll_SendMessageW]
push 0x542
push dword [0x54ad5c]
call dword [sym.imp.USER32.dll_GetDlgItem]
test eax, eax
je 0x491995
push 0x5291b0
push 0
push 0xc
push eax
call dword [sym.imp.USER32.dll_SendMessageW]
push 0x543
push dword [0x54ad5c]
call dword [sym.imp.USER32.dll_GetDlgItem]
test eax, eax
je 0x4919ba
push 0x5291b0
push 0
push 0xc
push eax
call dword [sym.imp.USER32.dll_SendMessageW]
push 0x544
push dword [0x54ad5c]
call dword [sym.imp.USER32.dll_GetDlgItem]
test eax, eax
je 0x4919df
push 0x5291b0
push 0
push 0xc
push eax
call dword [sym.imp.USER32.dll_SendMessageW]
push 0x545
push dword [0x54ad5c]
call dword [sym.imp.USER32.dll_GetDlgItem]
test eax, eax
je 0x491a04
push 0x5291b0
push 0
push 0xc
push eax
call dword [sym.imp.USER32.dll_SendMessageW]
push 0x554
push dword [0x54ad5c]
call dword [sym.imp.USER32.dll_GetDlgItem]
test eax, eax
je 0x491a29
push 0x5291b0
push 0
push 0xc
push eax
call dword [sym.imp.USER32.dll_SendMessageW]
push 0x555
push dword [0x54ad5c]
call dword [sym.imp.USER32.dll_GetDlgItem]
test eax, eax
je 0x491a4e
push 0x5291b0
push 0
push 0xc
push eax
call dword [sym.imp.USER32.dll_SendMessageW]
push 0x556
push dword [0x54ad5c]
call dword [sym.imp.USER32.dll_GetDlgItem]
test eax, eax
je 0x491a73
push 0x5291b0
push 0
push 0xc
push eax
call dword [sym.imp.USER32.dll_SendMessageW]
push 0x557
push dword [0x54ad5c]
call dword [sym.imp.USER32.dll_GetDlgItem]
test eax, eax
je 0x491a98
push 0x5291b0
push 0
push 0xc
push eax
call dword [sym.imp.USER32.dll_SendMessageW]
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret