Function at 0x1400b4d30
Capabilities:
Get system information on windows

Disassembly:
push rbp
push rbx
lea rbp, [rsp - 0xe8]
sub rsp, 0x1e8
movzx eax, byte [0x140190e48]
lea rcx, [rsp + 0x50]
mov byte [rsp + 0x5a], al
xor r8d, r8d
mov eax, dword [0x1401973f0]
shl rax, 0xc
mov qword [rsp + 0x60], rax
lea edx, [r8 + 1]
mov qword [rsp + 0x1d8], rdi
mov dword [rsp + 0x50], 0x10c
call sym.ProcessHacker.exe_PhFormat
mov rcx, rax
call sym.ProcessHacker.exe_PhAutoDereferenceObject
mov rcx, qword [0x1401960c8]
mov edx, 0x522
mov r8, qword [rax + 8]
call qword [sym.imp.USER32.dll_SetDlgItemTextW]
movzx eax, byte [0x140190e48]
lea rcx, [rsp + 0x50]
mov byte [rsp + 0x5a], al
xor r8d, r8d
mov eax, dword [0x1401973f8]
shl rax, 0xc
mov qword [rsp + 0x60], rax
lea edx, [r8 + 1]
mov dword [rsp + 0x50], 0x10c
call sym.ProcessHacker.exe_PhFormat
mov rcx, rax
call sym.ProcessHacker.exe_PhAutoDereferenceObject
mov rcx, qword [0x1401960c8]
mov edx, 0x523
mov r8, qword [rax + 8]
call qword [sym.imp.USER32.dll_SetDlgItemTextW]
movzx eax, byte [0x140190e48]
lea rcx, [rsp + 0x50]
mov byte [rsp + 0x5a], al
xor r8d, r8d
mov eax, dword [0x1401973f4]
shl rax, 0xc
mov qword [rsp + 0x60], rax
lea edx, [r8 + 1]
mov dword [rsp + 0x50], 0x10c
call sym.ProcessHacker.exe_PhFormat
mov rcx, rax
call sym.ProcessHacker.exe_PhAutoDereferenceObject
mov rcx, qword [0x1401960c8]
mov edx, 0x524
mov r8, qword [rax + 8]
call qword [sym.imp.USER32.dll_SetDlgItemTextW]
mov ecx, dword [0x1401967ac]
xor r8d, r8d
sub ecx, dword [0x1401973ec]
movzx eax, byte [0x140190e48]
shl rcx, 0xc
mov qword [rsp + 0x60], rcx
lea edx, [r8 + 1]
lea rcx, [rsp + 0x50]
mov dword [rsp + 0x50], 0x10c
mov byte [rsp + 0x5a], al
call sym.ProcessHacker.exe_PhFormat
mov rcx, rax
call sym.ProcessHacker.exe_PhAutoDereferenceObject
mov rcx, qword [0x1401960c8]
mov edx, 0x525
mov r8, qword [rax + 8]
call qword [sym.imp.USER32.dll_SetDlgItemTextW]
movzx eax, byte [0x140190e48]
lea rcx, [rsp + 0x50]
mov byte [rsp + 0x5a], al
xor r8d, r8d
mov eax, dword [0x1401967ac]
shl rax, 0xc
mov qword [rsp + 0x60], rax
lea edx, [r8 + 1]
mov dword [rsp + 0x50], 0x10c
call sym.ProcessHacker.exe_PhFormat
mov rcx, rax
call sym.ProcessHacker.exe_PhAutoDereferenceObject
mov rcx, qword [0x1401960c8]
mov edx, 0x526
mov r8, qword [rax + 8]
call qword [sym.imp.USER32.dll_SetDlgItemTextW]
mov rcx, qword [0x1401960f0]
test rcx, rcx
je 0x1400b4f39
movzx eax, byte [0x140190e48]
xor r8d, r8d
mov byte [rsp + 0x5a], al
mov eax, dword [0x1401967ac]
shl rax, 2
sub rcx, rax
mov dword [rsp + 0x50], 0x10c
shl rcx, 0xa
lea edx, [r8 + 1]
mov qword [rsp + 0x60], rcx
lea rcx, [rsp + 0x50]
call sym.ProcessHacker.exe_PhFormat
mov rcx, rax
call sym.ProcessHacker.exe_PhAutoDereferenceObject
mov r8, qword [rax + 8]
jmp 0x1400b4f40
lea r8, [0x140167c68]
mov rcx, qword [0x1401960c8]
mov edx, 0x533
call qword [sym.imp.USER32.dll_SetDlgItemTextW]
movzx eax, byte [0x140190e48]
lea rcx, [rsp + 0x50]
mov byte [rsp + 0x5a], al
xor r8d, r8d
mov eax, dword [0x140197464]
shl rax, 0xc
mov qword [rsp + 0x60], rax
lea edx, [r8 + 1]
mov dword [rsp + 0x50], 0x10c
call sym.ProcessHacker.exe_PhFormat
mov rcx, rax
call sym.ProcessHacker.exe_PhAutoDereferenceObject
mov rcx, qword [0x1401960c8]
mov edx, 0x527
mov r8, qword [rax + 8]
call qword [sym.imp.USER32.dll_SetDlgItemTextW]
movzx eax, byte [0x140190e48]
lea rcx, [rsp + 0x50]
mov byte [rsp + 0x5a], al
xor r8d, r8d
mov eax, dword [0x14019744c]
shl rax, 0xc
mov qword [rsp + 0x60], rax
lea edx, [r8 + 1]
mov dword [rsp + 0x50], 0x10c
call sym.ProcessHacker.exe_PhFormat
mov rcx, rax
call sym.ProcessHacker.exe_PhAutoDereferenceObject
mov rcx, qword [0x1401960c8]
mov edx, 0x528
mov r8, qword [rax + 8]
call qword [sym.imp.USER32.dll_SetDlgItemTextW]
movzx eax, byte [0x140190e48]
lea rcx, [rsp + 0x50]
mov byte [rsp + 0x5a], al
xor r8d, r8d
mov eax, dword [0x14019746c]
shl rax, 0xc
mov qword [rsp + 0x60], rax
lea edx, [r8 + 1]
mov dword [rsp + 0x50], 0x10c
call sym.ProcessHacker.exe_PhFormat
mov rcx, rax
call sym.ProcessHacker.exe_PhAutoDereferenceObject
mov rcx, qword [0x1401960c8]
mov edx, 0x529
mov r8, qword [rax + 8]
call qword [sym.imp.USER32.dll_SetDlgItemTextW]
movzx eax, byte [0x140190e48]
lea rcx, [rsp + 0x50]
mov byte [rsp + 0x5a], al
xor r8d, r8d
mov eax, dword [0x140197468]
shl rax, 0xc
mov qword [rsp + 0x60], rax
lea edx, [r8 + 1]
mov dword [rsp + 0x50], 0x10c
call sym.ProcessHacker.exe_PhFormat
mov rcx, rax
call sym.ProcessHacker.exe_PhAutoDereferenceObject
mov rcx, qword [0x1401960c8]
mov edx, 0x52a
mov r8, qword [rax + 8]
call qword [sym.imp.USER32.dll_SetDlgItemTextW]
movzx eax, byte [0x140190e48]
lea rcx, [rsp + 0x50]
mov byte [rsp + 0x5a], al
xor r8d, r8d
mov eax, dword [0x140197430]
shl rax, 0xc
mov qword [rsp + 0x60], rax
lea edx, [r8 + 1]
mov dword [rsp + 0x50], 0x10c
call sym.ProcessHacker.exe_PhFormat
mov rcx, rax
call sym.ProcessHacker.exe_PhAutoDereferenceObject
mov edx, 0x52b
mov r8, qword [rax + 8]
mov rcx, qword [0x1401960c8]
call qword [sym.imp.USER32.dll_SetDlgItemTextW]
cmp dword [0x140196210], 1
jbe 0x1400b5122
mov eax, dword [0x1401960dc]
lea rcx, [rsp + 0x50]
xor r8d, r8d
mov dword [rsp + 0x50], 0x10009
mov qword [rsp + 0x60], rax
lea edx, [r8 + 1]
call sym.ProcessHacker.exe_PhFormat
mov rcx, rax
call sym.ProcessHacker.exe_PhAutoDereferenceObject
mov r8, qword [rax + 8]
jmp 0x1400b5129
lea r8, [0x140167c68]
mov rcx, qword [0x1401960c8]
mov edx, 0x52d
call qword [sym.imp.USER32.dll_SetDlgItemTextW]
cmp dword [0x140196210], 1
jbe 0x1400b5176
mov eax, dword [0x1401961dc]
lea rcx, [rsp + 0x50]
xor r8d, r8d
mov dword [rsp + 0x50], 0x10009
mov qword [rsp + 0x60], rax
lea edx, [r8 + 1]
call sym.ProcessHacker.exe_PhFormat
mov rcx, rax
call sym.ProcessHacker.exe_PhAutoDereferenceObject
mov r8, qword [rax + 8]
jmp 0x1400b517d
lea r8, [0x140167c68]
mov rcx, qword [0x1401960c8]
mov edx, 0x52e
call qword [sym.imp.USER32.dll_SetDlgItemTextW]
movzx eax, byte [0x140190e48]
lea rcx, [rsp + 0x50]
mov byte [rsp + 0x5a], al
xor r8d, r8d
mov eax, dword [0x140197434]
shl rax, 0xc
mov qword [rsp + 0x60], rax
lea edx, [r8 + 1]
mov dword [rsp + 0x50], 0x10c
call sym.ProcessHacker.exe_PhFormat
mov rcx, rax
call sym.ProcessHacker.exe_PhAutoDereferenceObject
mov rcx, qword [0x1401960c8]
mov edx, 0x52f
mov r8, qword [rax + 8]
call qword [sym.imp.USER32.dll_SetDlgItemTextW]
cmp dword [0x140196210], 1
jbe 0x1400b521b
mov eax, dword [0x1401960dc]
lea rcx, [rsp + 0x50]
xor r8d, r8d
mov dword [rsp + 0x50], 0x10009
mov qword [rsp + 0x60], rax
lea edx, [r8 + 1]
call sym.ProcessHacker.exe_PhFormat
mov rcx, rax
call sym.ProcessHacker.exe_PhAutoDereferenceObject
mov r8, qword [rax + 8]
jmp 0x1400b5222
lea r8, [0x140167c68]
mov rcx, qword [0x1401960c8]
mov edx, 0x531
call qword [sym.imp.USER32.dll_SetDlgItemTextW]
cmp dword [0x140196210], 1
jbe 0x1400b526f
mov eax, dword [0x1401960fc]
lea rcx, [rsp + 0x50]
xor r8d, r8d
mov dword [rsp + 0x50], 0x10009
mov qword [rsp + 0x60], rax
lea edx, [r8 + 1]
call sym.ProcessHacker.exe_PhFormat
mov rcx, rax
call sym.ProcessHacker.exe_PhAutoDereferenceObject
mov r8, qword [rax + 8]
jmp 0x1400b5276
lea r8, [0x140167c68]
mov rcx, qword [0x1401960c8]
mov edx, 0x532
call qword [sym.imp.USER32.dll_SetDlgItemTextW]
cmp byte [0x140195e83], 0
je 0x1400b54e2
mov rdx, qword [0x1401961c0]
mov rax, qword [0x1401961d0]
test rdx, rdx
jne 0x1400b52b1
test rax, rax
je 0x1400b54e2
or rcx, 0xffffffffffffffff
mov qword [rsp + 0x1e0], rsi
or rdi, rcx
mov qword [rbp + 0x110], rcx
xor ebx, ebx
mov qword [rbp + 0x118], rdi
lea rsi, [0x1400dd160]
test rdx, rdx
je 0x1400b539d
cmp dword [sym.ProcessHacker.exe_WindowsVersion], 0x3e
jae 0x1400b539d
mov dword [rsp + 0x48], ebx
lea rax, [rbp + 0x110]
mov qword [rbp - 0x80], rax
lea r8, [0x1400dcf20]
mov qword [rsp + 0x40], rbx
lea rax, [rsp + 0x70]
mov qword [rbp + 0x98], rax
xor r9d, r9d
mov dword [rsp + 0x38], 4
lea rax, [rbp + 0x100]
mov qword [rsp + 0x30], rax
lea rax, [rbp + 0x80]
mov qword [rsp + 0x70], rcx
mov rcx, qword [0x140193948]
mov qword [rsp + 0x78], rdx
xor edx, edx
mov dword [rsp + 0x28], 0x9999200b
mov qword [rsp + 0x20], rax
mov qword [rbp - 0x78], 8
mov qword [rbp - 0x70], rbx
mov dword [rbp - 0x68], ebx
mov dword [rbp + 0x100], 2
mov qword [rbp + 0x90], rsi
mov dword [rbp + 0xa0], 0xc0000001
call qword [sym.imp.ntdll.dll_NtDeviceIoControlFile]
call qword [sym.imp.ntdll.dll_NtTestAlert]
mov rax, qword [0x1401961d0]
mov rcx, qword [rbp + 0x110]
mov rdi, qword [rbp + 0x118]
test rax, rax
je 0x1400b5450
mov rcx, qword [0x140193948]
lea r8, [0x1400dcf20]
mov qword [rbp - 0x58], rax
xor r9d, r9d
mov dword [rsp + 0x48], ebx
lea rax, [rbp + 0x118]
mov qword [rbp - 0x50], rax
xor edx, edx
mov qword [rsp + 0x40], rbx
lea rax, [rbp - 0x60]
mov qword [rbp + 0xc0], rax
lea rax, [rbp + 0x108]
mov dword [rsp + 0x38], 4
mov qword [rsp + 0x30], rax
lea rax, [rbp + 0xa8]
mov dword [rsp + 0x28], 0x9999200b
mov qword [rsp + 0x20], rax
mov qword [rbp - 0x60], 0xffffffffffffffff
mov qword [rbp - 0x48], 8
mov qword [rbp - 0x40], rbx
mov dword [rbp - 0x38], ebx
mov dword [rbp + 0x108], 2
mov qword [rbp + 0xb8], rsi
mov dword [rbp + 0xc8], 0xc0000001
call qword [sym.imp.ntdll.dll_NtDeviceIoControlFile]
call qword [sym.imp.ntdll.dll_NtTestAlert]
mov rcx, qword [rbp + 0x110]
mov rdi, qword [rbp + 0x118]
mov rsi, qword [rsp + 0x1e0]
cmp rcx, 0xffffffffffffffff
je 0x1400b5495
movzx eax, byte [0x140190e48]
xor r8d, r8d
mov qword [rsp + 0x60], rcx
lea rcx, [rsp + 0x50]
mov dword [rsp + 0x50], 0x10c
mov byte [rsp + 0x5a], al
lea edx, [r8 + 1]
call sym.ProcessHacker.exe_PhFormat
mov rcx, rax
call sym.ProcessHacker.exe_PhAutoDereferenceObject
mov rbx, qword [rax + 8]
jmp 0x1400b549c
lea rbx, [0x14015f648]
cmp rdi, 0xffffffffffffffff
je 0x1400b54d9
movzx eax, byte [0x140190e48]
lea rcx, [rsp + 0x50]
xor r8d, r8d
mov dword [rsp + 0x50], 0x10c
mov byte [rsp + 0x5a], al
mov qword [rsp + 0x60], rdi
lea edx, [r8 + 1]
call sym.ProcessHacker.exe_PhFormat
mov rcx, rax
call sym.ProcessHacker.exe_PhAutoDereferenceObject
mov rdi, qword [rax + 8]
jmp 0x1400b54fd
lea rdi, [0x14015f648]
jmp 0x1400b54fd
cmp qword [0x140193948], 0
lea rbx, str.no_driver
je 0x1400b54fa
lea rbx, str.no_symbols
mov rdi, rbx
mov rcx, qword [0x1401960c8]
mov r8, rbx
mov edx, 0x52c
call qword [sym.imp.USER32.dll_SetDlgItemTextW]
mov rcx, qword [0x1401960c8]
mov r8, rdi
mov edx, 0x530
call qword [sym.imp.USER32.dll_SetDlgItemTextW]
cmp dword [0x140196210], 1
mov rdi, qword [rsp + 0x1d8]
jbe 0x1400b556a
mov eax, dword [0x1401961cc]
lea rcx, [rsp + 0x50]
xor r8d, r8d
mov dword [rsp + 0x50], 0x10009
mov qword [rsp + 0x60], rax
lea edx, [r8 + 1]
call sym.ProcessHacker.exe_PhFormat
mov rcx, rax
call sym.ProcessHacker.exe_PhAutoDereferenceObject
mov r8, qword [rax + 8]
jmp 0x1400b5571
lea r8, [0x140167c68]
mov rcx, qword [0x1401960c8]
mov edx, 0x558
call qword [sym.imp.USER32.dll_SetDlgItemTextW]
cmp dword [0x140196210], 1
jbe 0x1400b55be
mov eax, dword [0x1401960d4]
lea rcx, [rsp + 0x50]
xor r8d, r8d
mov dword [rsp + 0x50], 0x10009
mov qword [rsp + 0x60], rax
lea edx, [r8 + 1]
call sym.ProcessHacker.exe_PhFormat
mov rcx, rax
call sym.ProcessHacker.exe_PhAutoDereferenceObject
mov r8, qword [rax + 8]
jmp 0x1400b55c5
lea r8, [0x140167c68]
mov rcx, qword [0x1401960c8]
mov edx, 0x559
call qword [sym.imp.USER32.dll_SetDlgItemTextW]
cmp dword [0x140196210], 1
jbe 0x1400b5612
mov eax, dword [0x1401960c4]
lea rcx, [rsp + 0x50]
xor r8d, r8d
mov dword [rsp + 0x50], 0x10009
mov qword [rsp + 0x60], rax
lea edx, [r8 + 1]
call sym.ProcessHacker.exe_PhFormat
mov rcx, rax
call sym.ProcessHacker.exe_PhAutoDereferenceObject
mov r8, qword [rax + 8]
jmp 0x1400b5619
lea r8, [0x140167c68]
mov rcx, qword [0x1401960c8]
mov edx, 0x55a
call qword [sym.imp.USER32.dll_SetDlgItemTextW]
cmp dword [0x140196210], 1
jbe 0x1400b5666
mov eax, dword [0x1401960e4]
lea rcx, [rsp + 0x50]
xor r8d, r8d
mov dword [rsp + 0x50], 0x10009
mov qword [rsp + 0x60], rax
lea edx, [r8 + 1]
call sym.ProcessHacker.exe_PhFormat
mov rcx, rax
call sym.ProcessHacker.exe_PhAutoDereferenceObject
mov r8, qword [rax + 8]
jmp 0x1400b566d
lea r8, [0x140167c68]
mov rcx, qword [0x1401960c8]
mov edx, 0x55b
call qword [sym.imp.USER32.dll_SetDlgItemTextW]
xor r9d, r9d
lea rdx, [rbp - 0x30]
mov r8d, 0xb0
lea ecx, [r9 + 0x50]
call qword [sym.imp.ntdll.dll_NtQuerySystemInformation]
test eax, eax
js 0x1400b5b17
movzx eax, byte [0x140190e48]
lea rcx, [rsp + 0x50]
mov rbx, qword [rbp + 0x30]
xor r8d, r8d
add rbx, qword [rbp + 0x28]
add rbx, qword [rbp + 0x20]
add rbx, qword [rbp + 0x18]
add rbx, qword [rbp + 0x10]
lea edx, [r8 + 1]
add rbx, qword [rbp + 8]
add rbx, qword [rbp]
add rbx, qword [rbp - 8]
mov byte [rsp + 0x5a], al
mov rax, qword [rbp - 0x30]
shl rax, 0xc
mov dword [rsp + 0x50], 0x10c
mov qword [rsp + 0x60], rax
call sym.ProcessHacker.exe_PhFormat
mov rcx, rax
call sym.ProcessHacker.exe_PhAutoDereferenceObject
mov rcx, qword [0x1401960c8]
mov edx, 0x534
mov r8, qword [rax + 8]
call qword [sym.imp.USER32.dll_SetDlgItemTextW]
movzx eax, byte [0x140190e48]
lea rcx, [rsp + 0x50]
mov byte [rsp + 0x5a], al
xor r8d, r8d
mov rax, qword [rbp - 0x28]
shl rax, 0xc
mov qword [rsp + 0x60], rax
lea edx, [r8 + 1]
mov dword [rsp + 0x50], 0x10c
call sym.ProcessHacker.exe_PhFormat
mov rcx, rax
call sym.ProcessHacker.exe_PhAutoDereferenceObject
mov rcx, qword [0x1401960c8]
mov edx, 0x535
mov r8, qword [rax + 8]
call qword [sym.imp.USER32.dll_SetDlgItemTextW]
movzx eax, byte [0x140190e48]
lea rcx, [rsp + 0x50]
mov byte [rsp + 0x5a], al
xor r8d, r8d
mov rax, qword [rbp - 0x20]
shl rax, 0xc
mov qword [rsp + 0x60], rax
lea edx, [r8 + 1]
mov dword [rsp + 0x50], 0x10c
call sym.ProcessHacker.exe_PhFormat
mov rcx, rax
call sym.ProcessHacker.exe_PhAutoDereferenceObject
mov rcx, qword [0x1401960c8]
mov edx, 0x536
mov r8, qword [rax + 8]
call qword [sym.imp.USER32.dll_SetDlgItemTextW]
movzx eax, byte [0x140190e48]
lea rcx, [rsp + 0x50]
mov byte [rsp + 0x5a], al
xor r8d, r8d
mov rax, qword [rbp - 0x18]
shl rax, 0xc
mov qword [rsp + 0x60], rax
lea edx, [r8 + 1]
mov dword [rsp + 0x50], 0x10c
call sym.ProcessHacker.exe_PhFormat
mov rcx, rax
call sym.ProcessHacker.exe_PhAutoDereferenceObject
mov rcx, qword [0x1401960c8]
mov edx, 0x537
mov r8, qword [rax + 8]
call qword [sym.imp.USER32.dll_SetDlgItemTextW]
movzx eax, byte [0x140190e48]
lea rcx, [rsp + 0x50]
xor r8d, r8d
shl rbx, 0xc
mov dword [rsp + 0x50], 0x10c
mov byte [rsp + 0x5a], al
mov qword [rsp + 0x60], rbx
lea edx, [r8 + 1]
call sym.ProcessHacker.exe_PhFormat
mov rcx, rax
call sym.ProcessHacker.exe_PhAutoDereferenceObject
mov rcx, qword [0x1401960c8]
mov edx, 0x539
mov r8, qword [rax + 8]
call qword [sym.imp.USER32.dll_SetDlgItemTextW]
movzx eax, byte [0x140190e48]
lea rcx, [rsp + 0x50]
mov byte [rsp + 0x5a], al
xor r8d, r8d
mov rax, qword [rbp - 8]
shl rax, 0xc
mov qword [rsp + 0x60], rax
lea edx, [r8 + 1]
mov dword [rsp + 0x50], 0x10c
call sym.ProcessHacker.exe_PhFormat
mov rcx, rax
call sym.ProcessHacker.exe_PhAutoDereferenceObject
mov rcx, qword [0x1401960c8]
mov edx, 0x542
mov r8, qword [rax + 8]
call qword [sym.imp.USER32.dll_SetDlgItemTextW]
movzx eax, byte [0x140190e48]
lea rcx, [rsp + 0x50]
mov byte [rsp + 0x5a], al
xor r8d, r8d
mov rax, qword [rbp]
shl rax, 0xc
mov qword [rsp + 0x60], rax
lea edx, [r8 + 1]
mov dword [rsp + 0x50], 0x10c
call sym.ProcessHacker.exe_PhFormat
mov rcx, rax
call sym.ProcessHacker.exe_PhAutoDereferenceObject
mov rcx, qword [0x1401960c8]
mov edx, 0x543
mov r8, qword [rax + 8]
call qword [sym.imp.USER32.dll_SetDlgItemTextW]
movzx eax, byte [0x140190e48]
lea rcx, [rsp + 0x50]
mov byte [rsp + 0x5a], al
xor r8d, r8d
mov rax, qword [rbp + 8]
shl rax, 0xc
mov qword [rsp + 0x60], rax
lea edx, [r8 + 1]
mov dword [rsp + 0x50], 0x10c
call sym.ProcessHacker.exe_PhFormat
mov rcx, rax
call sym.ProcessHacker.exe_PhAutoDereferenceObject
mov rcx, qword [0x1401960c8]
mov edx, 0x544
mov r8, qword [rax + 8]
call qword [sym.imp.USER32.dll_SetDlgItemTextW]
movzx eax, byte [0x140190e48]
lea rcx, [rsp + 0x50]
mov byte [rsp + 0x5a], al
xor r8d, r8d
mov rax, qword [rbp + 0x10]
shl rax, 0xc
mov qword [rsp + 0x60], rax
lea edx, [r8 + 1]
mov dword [rsp + 0x50], 0x10c
call sym.ProcessHacker.exe_PhFormat
mov rcx, rax
call sym.ProcessHacker.exe_PhAutoDereferenceObject
mov rcx, qword [0x1401960c8]
mov edx, 0x545
mov r8, qword [rax + 8]
call qword [sym.imp.USER32.dll_SetDlgItemTextW]
movzx eax, byte [0x140190e48]
lea rcx, [rsp + 0x50]
mov byte [rsp + 0x5a], al
xor r8d, r8d
mov rax, qword [rbp + 0x18]
shl rax, 0xc
mov qword [rsp + 0x60], rax
lea edx, [r8 + 1]
mov dword [rsp + 0x50], 0x10c
call sym.ProcessHacker.exe_PhFormat
mov rcx, rax
call sym.ProcessHacker.exe_PhAutoDereferenceObject
mov rcx, qword [0x1401960c8]
mov edx, 0x554
mov r8, qword [rax + 8]
call qword [sym.imp.USER32.dll_SetDlgItemTextW]
movzx eax, byte [0x140190e48]
lea rcx, [rsp + 0x50]
mov byte [rsp + 0x5a], al
xor r8d, r8d
mov rax, qword [rbp + 0x20]
shl rax, 0xc
mov qword [rsp + 0x60], rax
lea edx, [r8 + 1]
mov dword [rsp + 0x50], 0x10c
call sym.ProcessHacker.exe_PhFormat
mov rcx, rax
call sym.ProcessHacker.exe_PhAutoDereferenceObject
mov rcx, qword [0x1401960c8]
mov edx, 0x555
mov r8, qword [rax + 8]
call qword [sym.imp.USER32.dll_SetDlgItemTextW]
movzx eax, byte [0x140190e48]
lea rcx, [rsp + 0x50]
mov byte [rsp + 0x5a], al
xor r8d, r8d
mov rax, qword [rbp + 0x28]
shl rax, 0xc
mov qword [rsp + 0x60], rax
lea edx, [r8 + 1]
mov dword [rsp + 0x50], 0x10c
call sym.ProcessHacker.exe_PhFormat
mov rcx, rax
call sym.ProcessHacker.exe_PhAutoDereferenceObject
mov rcx, qword [0x1401960c8]
mov edx, 0x556
mov r8, qword [rax + 8]
call qword [sym.imp.USER32.dll_SetDlgItemTextW]
movzx eax, byte [0x140190e48]
lea rcx, [rsp + 0x50]
mov byte [rsp + 0x5a], al
xor r8d, r8d
mov rax, qword [rbp + 0x30]
shl rax, 0xc
mov qword [rsp + 0x60], rax
lea edx, [r8 + 1]
mov dword [rsp + 0x50], 0x10c
call sym.ProcessHacker.exe_PhFormat
mov rcx, rax
call sym.ProcessHacker.exe_PhAutoDereferenceObject
mov rcx, qword [0x1401960c8]
mov edx, 0x557
mov r8, qword [rax + 8]
call qword [sym.imp.USER32.dll_SetDlgItemTextW]
cmp dword [sym.ProcessHacker.exe_WindowsVersion], 0x3e
jb 0x1400b5b0d
movzx eax, byte [0x140190e48]
lea rcx, [rsp + 0x50]
mov byte [rsp + 0x5a], al
xor r8d, r8d
mov rax, qword [rbp + 0x78]
shl rax, 0xc
mov qword [rsp + 0x60], rax
lea edx, [r8 + 1]
mov dword [rsp + 0x50], 0x10c
call sym.ProcessHacker.exe_PhFormat
mov rcx, rax
call sym.ProcessHacker.exe_PhAutoDereferenceObject
mov edx, 0x55d
mov r8, qword [rax + 8]
jmp 0x1400b5c68
mov edx, 0x55d
jmp 0x1400b5c61
mov rcx, qword [0x1401960c8]
lea r8, [0x14015f648]
mov edx, 0x534
call qword [sym.imp.USER32.dll_SetDlgItemTextW]
mov rcx, qword [0x1401960c8]
lea r8, [0x14015f648]
mov edx, 0x535
call qword [sym.imp.USER32.dll_SetDlgItemTextW]
mov rcx, qword [0x1401960c8]
lea r8, [0x14015f648]
mov edx, 0x536
call qword [sym.imp.USER32.dll_SetDlgItemTextW]
mov rcx, qword [0x1401960c8]
lea r8, [0x14015f648]
mov edx, 0x537
call qword [sym.imp.USER32.dll_SetDlgItemTextW]
mov rcx, qword [0x1401960c8]
lea r8, [0x14015f648]
mov edx, 0x55d
call qword [sym.imp.USER32.dll_SetDlgItemTextW]
mov rcx, qword [0x1401960c8]
lea r8, [0x14015f648]
mov edx, 0x539
call qword [sym.imp.USER32.dll_SetDlgItemTextW]
mov rcx, qword [0x1401960c8]
lea r8, [0x14015f648]
mov edx, 0x542
call qword [sym.imp.USER32.dll_SetDlgItemTextW]
mov rcx, qword [0x1401960c8]
lea r8, [0x14015f648]
mov edx, 0x543
call qword [sym.imp.USER32.dll_SetDlgItemTextW]
mov rcx, qword [0x1401960c8]
lea r8, [0x14015f648]
mov edx, 0x544
call qword [sym.imp.USER32.dll_SetDlgItemTextW]
mov rcx, qword [0x1401960c8]
lea r8, [0x14015f648]
mov edx, 0x545
call qword [sym.imp.USER32.dll_SetDlgItemTextW]
mov rcx, qword [0x1401960c8]
lea r8, [0x14015f648]
mov edx, 0x554
call qword [sym.imp.USER32.dll_SetDlgItemTextW]
mov rcx, qword [0x1401960c8]
lea r8, [0x14015f648]
mov edx, 0x555
call qword [sym.imp.USER32.dll_SetDlgItemTextW]
mov rcx, qword [0x1401960c8]
lea r8, [0x14015f648]
mov edx, 0x556
call qword [sym.imp.USER32.dll_SetDlgItemTextW]
mov edx, 0x557
lea r8, [0x14015f648]
mov rcx, qword [0x1401960c8]
call qword [sym.imp.USER32.dll_SetDlgItemTextW]
add rsp, 0x1e8
pop rbx
pop rbp
ret