Function at 0x4a5440
Capabilities:
Get system information on windows

Disassembly:
push ebp
mov ebp, esp
and esp, 0xfffffff8
sub esp, 0xb4
mov eax, dword [0x5c7004]
xor eax, esp
mov dword [esp + 0xb0], eax
mov al, byte [0x5cc1a4]
push ebx
mov byte [esp + 0x2a], al
mov ebx, 0x1000
mov eax, dword [0x5cff50]
mul ebx
push esi
push edi
push 0
mov dword [esp + 0x3c], eax
lea eax, [esp + 0x2c]
push 1
push eax
mov dword [esp + 0x34], 0x10c
mov dword [esp + 0x48], edx
call sym.ProcessHacker.exe_PhFormat
push eax
call sym.ProcessHacker.exe_PhAutoDereferenceObject
push 0x522
push dword [0x5ceedc]
mov esi, dword [eax + 4]
call dword [sym.imp.USER32.dll_GetDlgItem]
test eax, eax
je 0x4a54ba
push esi
push 0
push 0xc
push eax
call dword [sym.imp.USER32.dll_SendMessageW]
mov al, byte [0x5cc1a4]
mov byte [esp + 0x32], al
mov eax, dword [0x5cff58]
mul ebx
push 0
mov dword [esp + 0x3c], eax
lea eax, [esp + 0x2c]
push 1
push eax
mov dword [esp + 0x34], 0x10c
mov dword [esp + 0x48], edx
call sym.ProcessHacker.exe_PhFormat
push eax
call sym.ProcessHacker.exe_PhAutoDereferenceObject
push 0x523
push dword [0x5ceedc]
mov esi, dword [eax + 4]
call dword [sym.imp.USER32.dll_GetDlgItem]
test eax, eax
je 0x4a5516
push esi
push 0
push 0xc
push eax
call dword [sym.imp.USER32.dll_SendMessageW]
mov al, byte [0x5cc1a4]
mov byte ds:[esp + 0x32], al
mov eax, dword [0x5cff54]
mul ebx
push 0
mov dword [esp + 0x3c], eax
lea eax, [esp + 0x2c]
push 1
push eax
mov dword [esp + 0x34], 0x10c
mov dword [esp + 0x48], edx
call sym.ProcessHacker.exe_PhFormat
push eax
call sym.ProcessHacker.exe_PhAutoDereferenceObject
push 0x524
push dword [0x5ceedc]
mov esi, dword [eax + 4]
call dword [sym.imp.USER32.dll_GetDlgItem]
nop
test eax, eax
je 0x4a5570
push esi
push 0
push 0xc
push eax
call dword [sym.imp.USER32.dll_SendMessageW]
mov al, byte [0x5cc1a4]
mov byte ds:[esp + 0x32], al
mov eax, dword [0x5cd53c]
sub eax, dword [0x5cff4c]
mul ebx
push 0
mov dword [esp + 0x3c], eax
lea eax, [esp + 0x2c]
push 1
push eax
mov dword [esp + 0x34], 0x10c
mov dword [esp + 0x48], edx
call sym.ProcessHacker.exe_PhFormat
push eax
call sym.ProcessHacker.exe_PhAutoDereferenceObject
push 0x525
push dword [0x5ceedc]
mov esi, dword [eax + 4]
call dword [sym.imp.USER32.dll_GetDlgItem]
nop
test eax, eax
je 0x4a55d0
push esi
push 0
push 0xc
push eax
call dword [sym.imp.USER32.dll_SendMessageW]
mov al, byte [0x5cc1a4]
mov byte [esp + 0x32], al
mov eax, dword [0x5cd53c]
mul ebx
push 0
mov dword [esp + 0x3c], eax
lea eax, [esp + 0x2c]
push 1
push eax
mov dword [esp + 0x34], 0x10c
mov dword [esp + 0x48], edx
call sym.ProcessHacker.exe_PhFormat
push eax
call sym.ProcessHacker.exe_PhAutoDereferenceObject
push 0x526
push dword [0x5ceedc]
mov esi, dword [eax + 4]
call dword [sym.imp.USER32.dll_GetDlgItem]
test eax, eax
je 0x4a5629
push esi
push 0
push 0xc
push eax
call dword [sym.imp.USER32.dll_SendMessageW]
mov ecx, dword [0x5cef88]
mov eax, ecx
mov edx, dword [0x5cef8c]
or eax, edx
je 0x4a5687
mov al, byte [0x5cc1a4]
push 0
mov byte [esp + 0x36], al
lea eax, [esp + 0x2c]
push 1
push eax
mov dword [esp + 0x34], 0x10c
mov dword [esp + 0x44], ecx
mov dword [esp + 0x48], edx
call sym.ProcessHacker.exe_PhFormat
push eax
call sym.ProcessHacker.exe_PhAutoDereferenceObject
push 0x533
push dword [0x5ceedc]
mov esi, dword [eax + 4]
call dword [sym.imp.USER32.dll_GetDlgItem]
nop
test eax, eax
je 0x4a56ac
push esi
jmp 0x4a56a1
push 0x533
push dword [0x5ceedc]
call dword [sym.imp.USER32.dll_GetDlgItem]
test eax, eax
je 0x4a56ac
push 0x596318
push 0
push 0xc
push eax
call dword [sym.imp.USER32.dll_SendMessageW]
mov al, byte [0x5cc1a4]
mov byte [esp + 0x32], al
mov eax, dword [0x5cffc4]
mul ebx
push 0
mov dword [esp + 0x3c], eax
lea eax, [esp + 0x2c]
push 1
push eax
mov dword [esp + 0x34], 0x10c
mov dword [esp + 0x48], edx
call sym.ProcessHacker.exe_PhFormat
push eax
call sym.ProcessHacker.exe_PhAutoDereferenceObject
push 0x527
push dword [0x5ceedc]
mov esi, dword [eax + 4]
call dword [sym.imp.USER32.dll_GetDlgItem]
test eax, eax
je 0x4a5709
push esi
push 0
push 0xc
push eax
call dword [sym.imp.USER32.dll_SendMessageW]
mov al, byte [0x5cc1a4]
mov byte [esp + 0x32], al
mov eax, dword [0x5cffac]
mul ebx
push 0
mov dword [esp + 0x3c], eax
lea eax, [esp + 0x2c]
push 1
push eax
mov dword [esp + 0x34], 0x10c
mov dword [esp + 0x48], edx
call sym.ProcessHacker.exe_PhFormat
push eax
call sym.ProcessHacker.exe_PhAutoDereferenceObject
push 0x528
push dword [0x5ceedc]
mov esi, dword [eax + 4]
call dword [sym.imp.USER32.dll_GetDlgItem]
test eax, eax
je 0x4a5766
push esi
push 0
push 0xc
push eax
call dword [sym.imp.USER32.dll_SendMessageW]
mov al, byte [0x5cc1a4]
mov byte [esp + 0x32], al
mov eax, dword [0x5cffcc]
mul ebx
push 0
mov dword [esp + 0x3c], eax
lea eax, [esp + 0x2c]
push 1
push eax
mov dword [esp + 0x34], 0x10c
mov dword [esp + 0x48], edx
call sym.ProcessHacker.exe_PhFormat
push eax
call sym.ProcessHacker.exe_PhAutoDereferenceObject
push 0x529
push dword [0x5ceedc]
mov esi, dword [eax + 4]
call dword [sym.imp.USER32.dll_GetDlgItem]
test eax, eax
je 0x4a57be
push esi
push 0
push 0xc
push eax
call dword [sym.imp.USER32.dll_SendMessageW]
mov al, byte [0x5cc1a4]
mov byte [esp + 0x32], al
mov eax, dword [0x5cffc8]
mul ebx
push 0
mov dword [esp + 0x3c], eax
lea eax, [esp + 0x2c]
push 1
push eax
mov dword [esp + 0x34], 0x10c
mov dword [esp + 0x48], edx
call sym.ProcessHacker.exe_PhFormat
push eax
call sym.ProcessHacker.exe_PhAutoDereferenceObject
push 0x52a
push dword [0x5ceedc]
mov esi, dword [eax + 4]
call dword [sym.imp.USER32.dll_GetDlgItem]
test eax, eax
je 0x4a5816
push esi
push 0
push 0xc
push eax
call dword [sym.imp.USER32.dll_SendMessageW]
mov al, byte [0x5cc1a4]
mov byte ds:[esp + 0x32], al
mov eax, dword [0x5cff90]
mul ebx
push 0
mov dword [esp + 0x3c], eax
lea eax, [esp + 0x2c]
push 1
push eax
mov dword [esp + 0x34], 0x10c
mov dword [esp + 0x48], edx
call sym.ProcessHacker.exe_PhFormat
push eax
call sym.ProcessHacker.exe_PhAutoDereferenceObject
push 0x52b
push dword [0x5ceedc]
mov esi, dword [eax + 4]
call dword [sym.imp.USER32.dll_GetDlgItem]
nop
test eax, eax
je 0x4a5870
push esi
push 0
push 0xc
push eax
call dword [sym.imp.USER32.dll_SendMessageW]
cmp dword [0x5cefd4], 1
jbe 0x4a58c7
mov eax, dword [0x5ceeec]
push 0
mov dword [esp + 0x24], eax
lea eax, [esp + 0x14]
push 1
push eax
mov dword [esp + 0x1c], 0x10009
mov dword [esp + 0x30], 0
call sym.ProcessHacker.exe_PhFormat
push eax
call sym.ProcessHacker.exe_PhAutoDereferenceObject
push 0x52d
push dword [0x5ceedc]
mov esi, dword [eax + 4]
call dword [sym.imp.USER32.dll_GetDlgItem]
nop
test eax, eax
je 0x4a58ec
push esi
jmp 0x4a58e1
push 0x52d
push dword [0x5ceedc]
call dword [sym.imp.USER32.dll_GetDlgItem]
test eax, eax
je 0x4a58ec
push 0x596318
push 0
push 0xc
push eax
call dword [sym.imp.USER32.dll_SendMessageW]
cmp dword [0x5cefd4], 1
jbe 0x4a5942
mov eax, dword [0x5cefb4]
push 0
mov dword [esp + 0x24], eax
lea eax, [esp + 0x14]
push 1
push eax
mov dword [esp + 0x1c], 0x10009
mov dword [esp + 0x30], 0
call sym.ProcessHacker.exe_PhFormat
push eax
call sym.ProcessHacker.exe_PhAutoDereferenceObject
push 0x52e
push dword [0x5ceedc]
mov esi, dword [eax + 4]
call dword [sym.imp.USER32.dll_GetDlgItem]
test eax, eax
je 0x4a5967
push esi
jmp 0x4a595c
push 0x52e
push dword [0x5ceedc]
call dword [sym.imp.USER32.dll_GetDlgItem]
test eax, eax
je 0x4a5967
push 0x596318
push 0
push 0xc
push eax
call dword [sym.imp.USER32.dll_SendMessageW]
mov al, byte [0x5cc1a4]
mov byte [esp + 0x32], al
mov eax, dword [0x5cff94]
mul ebx
push 0
mov dword [esp + 0x3c], eax
lea eax, [esp + 0x2c]
push 1
push eax
mov dword [esp + 0x34], 0x10c
mov dword [esp + 0x48], edx
call sym.ProcessHacker.exe_PhFormat
push eax
call sym.ProcessHacker.exe_PhAutoDereferenceObject
push 0x52f
push dword [0x5ceedc]
mov esi, dword [eax + 4]
call dword [sym.imp.USER32.dll_GetDlgItem]
test eax, eax
je 0x4a59bf
push esi
push 0
push 0xc
push eax
call dword [sym.imp.USER32.dll_SendMessageW]
cmp dword [0x5cefd4], 1
jbe 0x4a5a10
mov eax, dword [0x5ceeec]
push 0
mov dword [esp + 0x24], eax
lea eax, [esp + 0x14]
push 1
push eax
mov dword [esp + 0x1c], 0x10009
mov dword [esp + 0x30], 0
call sym.ProcessHacker.exe_PhFormat
push eax
call sym.ProcessHacker.exe_PhAutoDereferenceObject
push 0x531
push dword [0x5ceedc]
mov esi, dword [eax + 4]
call dword [sym.imp.USER32.dll_GetDlgItem]
test eax, eax
je 0x4a5a3a
push esi
jmp 0x4a5a2f
push 0x531
push dword [0x5ceedc]
call dword [sym.imp.USER32.dll_GetDlgItem]
test eax, eax
je 0x4a5a3a
push 0x596318
push 0
push 0xc
push eax
call dword [sym.imp.USER32.dll_SendMessageW]
cmp dword [0x5cefd4], 1
jbe 0x4a5a8d
mov eax, dword [0x5cef24]
push 0
mov dword [esp + 0x54], eax
lea eax, [esp + 0x44]
push 1
push eax
mov dword [esp + 0x4c], 0x10009
mov dword [esp + 0x60], 0
call sym.ProcessHacker.exe_PhFormat
push eax
call sym.ProcessHacker.exe_PhAutoDereferenceObject
push 0x532
push dword [0x5ceedc]
mov esi, dword [eax + 4]
call dword [sym.imp.USER32.dll_GetDlgItem]
test eax, eax
je 0x4a5ab4
push esi
jmp 0x4a5aa9
push 0x532
push dword [0x5ceedc]
call dword [sym.imp.USER32.dll_GetDlgItem]
mov edi, edi
test eax, eax
je 0x4a5ab4
push 0x596318
push 0
push 0xc
push eax
call dword [sym.imp.USER32.dll_SendMessageW]
cmp byte [0x5ceec4], 0
jmp 0x4a5ac0
je 0x4a5bd1
mov edx, dword [0x5cefa0]
mov eax, dword [0x5cefac]
test edx, edx
jne 0x4a5add
test eax, eax
je 0x4a5bd1
or ecx, 0xffffffff
or esi, 0xffffffff
mov dword [esp + 0xb4], ecx
mov dword [esp + 0xb8], esi
test edx, edx
je 0x4a5b25
cmp dword [0x5c7aa8], 0x3e
jae 0x4a5b25
push 0
push 4
lea eax, [esp + 0xbc]
push eax
push edx
push 0xffffffffffffffff
call fcn.004dd1b0
mov eax, dword [0x5cefac]
mov ecx, dword [esp + 0xb4]
mov esi, dword [esp + 0xb8]
test eax, eax
je 0x4a5b4b
push 0
push 4
lea ecx, [esp + 0xc0]
push ecx
push eax
push 0xffffffffffffffff
call fcn.004dd1b0
mov ecx, dword [esp + 0xb4]
mov esi, dword [esp + 0xb8]
cmp ecx, 0xffffffff
je 0x4a5b8a
mov al, byte [0x5cc1a4]
push 0
mov byte [esp + 0x36], al
lea eax, [esp + 0x2c]
push 1
push eax
mov dword [esp + 0x34], 0x10c
mov dword [esp + 0x44], ecx
mov dword [esp + 0x48], 0
call sym.ProcessHacker.exe_PhFormat
push eax
call sym.ProcessHacker.exe_PhAutoDereferenceObject
mov edi, dword [eax + 4]
jmp 0x4a5b8f
mov edi, 0x586ca8
cmp esi, 0xffffffff
je 0x4a5bca
mov al, byte [0x5cc1a4]
push 0
mov byte [esp + 0x1e], al
lea eax, [esp + 0x14]
push 1
push eax
mov dword [esp + 0x1c], 0x10c
mov dword [esp + 0x2c], esi
mov dword [esp + 0x30], 0
call sym.ProcessHacker.exe_PhFormat
push eax
call sym.ProcessHacker.exe_PhAutoDereferenceObject
mov esi, dword [eax + 4]
jmp 0x4a5bea
mov esi, 0x586ca8
jmp 0x4a5bea
cmp dword [0x5cd6d4], 0
jne 0x4a5be3
mov esi, str.no_driver
mov edi, esi
jmp 0x4a5bea
mov esi, str.no_symbols
mov edi, esi
push 0x52c
push dword [0x5ceedc]
call dword [sym.imp.USER32.dll_GetDlgItem]
test eax, eax
je 0x4a5c0b
push edi
push 0
push 0xc
push eax
call dword [sym.imp.USER32.dll_SendMessageW]
push 0x530
push dword [0x5ceedc]
call dword [sym.imp.USER32.dll_GetDlgItem]
lea esp, [esp]
test eax, eax
je 0x4a5c30
push esi
push 0
push 0xc
push eax
call dword [sym.imp.USER32.dll_SendMessageW]
cmp dword [0x5cefd4], 1
jbe 0x4a5c87
mov eax, dword [0x5cefa8]
push 0
mov dword [esp + 0x54], eax
lea eax, [esp + 0x44]
push 1
push eax
mov dword [esp + 0x4c], 0x10009
mov dword [esp + 0x60], 0
call sym.ProcessHacker.exe_PhFormat
push eax
call sym.ProcessHacker.exe_PhAutoDereferenceObject
push 0x558
push dword [0x5ceedc]
mov esi, dword [eax + 4]
call dword [sym.imp.USER32.dll_GetDlgItem]
nop
test eax, eax
je 0x4a5cac
push esi
jmp 0x4a5ca1
push 0x558
push dword [0x5ceedc]
call dword [sym.imp.USER32.dll_GetDlgItem]
test eax, eax
je 0x4a5cac
push 0x596318
push 0
push 0xc
push eax
call dword [sym.imp.USER32.dll_SendMessageW]
cmp dword [0x5cefd4], 1
jbe 0x4a5d02
mov eax, dword [0x5ceee4]
push 0
mov dword [esp + 0x54], eax
lea eax, [esp + 0x44]
push 1
push eax
mov dword [esp + 0x4c], 0x10009
mov dword [esp + 0x60], 0
call sym.ProcessHacker.exe_PhFormat
push eax
call sym.ProcessHacker.exe_PhAutoDereferenceObject
push 0x559
push dword [0x5ceedc]
mov esi, dword [eax + 4]
call dword [sym.imp.USER32.dll_GetDlgItem]
test eax, eax
je 0x4a5d27
push esi
jmp 0x4a5d1c
push 0x559
push dword [0x5ceedc]
call dword [sym.imp.USER32.dll_GetDlgItem]
test eax, eax
je 0x4a5d27
push 0x596318
push 0
push 0xc
push eax
call dword [sym.imp.USER32.dll_SendMessageW]
cmp dword [0x5cefd4], 1
jbe 0x4a5d78
mov eax, dword [0x5ceec0]
push 0
mov dword [esp + 0x54], eax
lea eax, [esp + 0x44]
push 1
push eax
mov dword [esp + 0x4c], 0x10009
mov dword [esp + 0x60], 0
call sym.ProcessHacker.exe_PhFormat
push eax
call sym.ProcessHacker.exe_PhAutoDereferenceObject
push 0x55a
push dword [0x5ceedc]
mov esi, dword [eax + 4]
call dword [sym.imp.USER32.dll_GetDlgItem]
test eax, eax
je 0x4a5d9d
push esi
jmp 0x4a5d92
push 0x55a
push dword [0x5ceedc]
call dword [sym.imp.USER32.dll_GetDlgItem]
test eax, eax
je 0x4a5d9d
push 0x596318
push 0
push 0xc
push eax
call dword [sym.imp.USER32.dll_SendMessageW]
cmp dword [0x5cefd4], 1
jbe 0x4a5dee
mov eax, dword [0x5ceef4]
push 0
mov dword [esp + 0x54], eax
lea eax, [esp + 0x44]
push 1
push eax
mov dword [esp + 0x4c], 0x10009
mov dword [esp + 0x60], 0
call sym.ProcessHacker.exe_PhFormat
push eax
call sym.ProcessHacker.exe_PhAutoDereferenceObject
push 0x55b
push dword [0x5ceedc]
mov esi, dword [eax + 4]
call dword [sym.imp.USER32.dll_GetDlgItem]
test eax, eax
je 0x4a5e14
push esi
jmp 0x4a5e09
push 0x55b
push dword [0x5ceedc]
call dword [sym.imp.USER32.dll_GetDlgItem]
nop
test eax, eax
je 0x4a5e14
push 0x596318
push 0
push 0xc
push eax
call dword [sym.imp.USER32.dll_SendMessageW]
cmp dword [0x5cefd4], 1
jbe 0x4a5e70
mov al, byte [0x5cc1a4]
mov ecx, dword [0x5cefec]
mov byte [esp + 0x1a], al
mov eax, dword [0x5cefe8]
push 0
mov dword [esp + 0x24], eax
lea eax, [esp + 0x14]
push 1
push eax
mov dword [esp + 0x1c], 0x10c
mov dword [esp + 0x30], ecx
call sym.ProcessHacker.exe_PhFormat
push eax
call sym.ProcessHacker.exe_PhAutoDereferenceObject
push 0x55c
push dword [0x5ceedc]
mov esi, dword [eax + 4]
call dword [sym.imp.USER32.dll_GetDlgItem]
test eax, eax
je 0x4a5e9a
push esi
jmp 0x4a5e8f
push 0x55c
push dword [0x5ceedc]
call dword [sym.imp.USER32.dll_GetDlgItem]
test eax, eax
je 0x4a5e9a
push 0x596318
push 0
push 0xc
push eax
call dword [sym.imp.USER32.dll_SendMessageW]
cmp dword [0x5cefd4], 1
jbe 0x4a5ef6
mov al, byte [0x5cc1a4]
mov ecx, dword [0x5ceed4]
mov byte [esp + 0x1a], al
mov eax, dword [0x5ceed0]
push 0
mov dword [esp + 0x24], eax
lea eax, [esp + 0x14]
push 1
push eax
mov dword [esp + 0x1c], 0x10c
mov dword [esp + 0x30], ecx
call sym.ProcessHacker.exe_PhFormat
push eax
call sym.ProcessHacker.exe_PhAutoDereferenceObject
push 0x55e
push dword [0x5ceedc]
mov esi, dword [eax + 4]
call dword [sym.imp.USER32.dll_GetDlgItem]
test eax, eax
je 0x4a5f1b
push esi
jmp 0x4a5f10
push 0x55e
push dword [0x5ceedc]
call dword [sym.imp.USER32.dll_GetDlgItem]
test eax, eax
je 0x4a5f1b
push 0x596318
push 0
push 0xc
push eax
call dword [sym.imp.USER32.dll_SendMessageW]
push 0
push 0x58
lea eax, [esp + 0x60]
push eax
push 0x50
call dword [sym.imp.ntdll.dll_NtQuerySystemInformation]
test eax, eax
js 0x4a6468
mov al, byte [0x5cc1a4]
mov esi, dword [esp + 0x88]
add esi, dword [esp + 0x84]
add esi, dword [esp + 0x80]
add esi, dword [esp + 0x7c]
add esi, dword [esp + 0x78]
add esi, dword [esp + 0x74]
add esi, dword [esp + 0x70]
add esi, dword [esp + 0x6c]
mov byte [esp + 0x1a], al
mov eax, dword [esp + 0x58]
mul ebx
push 0
mov dword [esp + 0x24], eax
lea eax, [esp + 0x14]
push 1
push eax
mov dword [esp + 0x1c], 0x10c
mov dword [esp + 0x30], edx
call sym.ProcessHacker.exe_PhFormat
push eax
call sym.ProcessHacker.exe_PhAutoDereferenceObject
push 0x534
push dword [0x5ceedc]
mov edi, dword [eax + 4]
call dword [sym.imp.USER32.dll_GetDlgItem]
test eax, eax
je 0x4a5fb6
push edi
push 0
push 0xc
push eax
call dword [sym.imp.USER32.dll_SendMessageW]
mov al, byte [0x5cc1a4]
mov byte ds:[esp + 0x1a], al
mov eax, dword [esp + 0x5c]
mul ebx
push 0
mov dword [esp + 0x24], eax
lea eax, [esp + 0x14]
push 1
push eax
mov dword [esp + 0x1c], 0x10c
mov dword [esp + 0x30], edx
call sym.ProcessHacker.exe_PhFormat
push eax
call sym.ProcessHacker.exe_PhAutoDereferenceObject
push 0x535
push dword [0x5ceedc]
mov edi, dword [eax + 4]
call dword [sym.imp.USER32.dll_GetDlgItem]
nop
test eax, eax
je 0x4a6010
push edi
push 0
push 0xc
push eax
call dword [sym.imp.USER32.dll_SendMessageW]
mov al, byte [0x5cc1a4]
mov byte [esp + 0x1a], al
mov eax, dword [esp + 0x60]
mul ebx
push 0
mov dword [esp + 0x24], eax
lea eax, [esp + 0x14]
push 1
push eax
mov dword [esp + 0x1c], 0x10c
mov dword [esp + 0x30], edx
call sym.ProcessHacker.exe_PhFormat
push eax
call sym.ProcessHacker.exe_PhAutoDereferenceObject
push 0x536
push dword [0x5ceedc]
mov edi, dword [eax + 4]
call dword [sym.imp.USER32.dll_GetDlgItem]
test eax, eax
je 0x4a6069
push edi
push 0
push 0xc
push eax
call dword [sym.imp.USER32.dll_SendMessageW]
mov al, byte [0x5cc1a4]
mov byte [esp + 0x1a], al
mov eax, dword [esp + 0x64]
mul ebx
push 0
mov dword [esp + 0x24], eax
lea eax, [esp + 0x14]
push 1
push eax
mov dword [esp + 0x1c], 0x10c
mov dword [esp + 0x30], edx
call sym.ProcessHacker.exe_PhFormat
push eax
call sym.ProcessHacker.exe_PhAutoDereferenceObject
push 0x537
push dword [0x5ceedc]
mov edi, dword [eax + 4]
call dword [sym.imp.USER32.dll_GetDlgItem]
test eax, eax
je 0x4a60c6
push edi
push 0
push 0xc
push eax
call dword [sym.imp.USER32.dll_SendMessageW]
mov cl, byte [0x5cc1a4]
mov eax, esi
mul ebx
push 0
mov dword [esp + 0x24], eax
lea eax, [esp + 0x14]
push 1
push eax
mov dword [esp + 0x1c], 0x10c
mov byte [esp + 0x26], cl
mov dword [esp + 0x30], edx
call sym.ProcessHacker.exe_PhFormat
push eax
call sym.ProcessHacker.exe_PhAutoDereferenceObject
push 0x539
push dword [0x5ceedc]
mov esi, dword [eax + 4]
call dword [sym.imp.USER32.dll_GetDlgItem]
test eax, eax
je 0x4a611c
push esi
push 0
push 0xc
push eax
call dword [sym.imp.USER32.dll_SendMessageW]
mov al, byte [0x5cc1a4]
mov byte [esp + 0x1a], al
mov eax, dword [esp + 0x6c]
mul ebx
push 0
mov dword [esp + 0x24], eax
lea eax, [esp + 0x14]
push 1
push eax
mov dword [esp + 0x1c], 0x10c
mov dword [esp + 0x30], edx
call sym.ProcessHacker.exe_PhFormat
push eax
call sym.ProcessHacker.exe_PhAutoDereferenceObject
push 0x542
push dword [0x5ceedc]
mov esi, dword [eax + 4]
call dword [sym.imp.USER32.dll_GetDlgItem]
test eax, eax
je 0x4a6176
push esi
push 0
push 0xc
push eax
call dword [sym.imp.USER32.dll_SendMessageW]
mov al, byte [0x5cc1a4]
mov byte ds:[esp + 0x1a], al
mov eax, dword [esp + 0x70]
mul ebx
push 0
mov dword [esp + 0x24], eax
lea eax, [esp + 0x14]
push 1
push eax
mov dword [esp + 0x1c], 0x10c
mov dword [esp + 0x30], edx
call sym.ProcessHacker.exe_PhFormat
push eax
call sym.ProcessHacker.exe_PhAutoDereferenceObject
push 0x543
push dword [0x5ceedc]
mov esi, dword [eax + 4]
call dword [sym.imp.USER32.dll_GetDlgItem]
nop
test eax, eax
je 0x4a61d0
push esi
push 0
push 0xc
push eax
call dword [sym.imp.USER32.dll_SendMessageW]
mov al, byte [0x5cc1a4]
mov byte [esp + 0x1a], al
mov eax, dword [esp + 0x74]
mul ebx
push 0
mov dword [esp + 0x24], eax
lea eax, [esp + 0x14]
push 1
push eax
mov dword [esp + 0x1c], 0x10c
mov dword [esp + 0x30], edx
call sym.ProcessHacker.exe_PhFormat
push eax
call sym.ProcessHacker.exe_PhAutoDereferenceObject
push 0x544
push dword [0x5ceedc]
mov esi, dword [eax + 4]
call dword [sym.imp.USER32.dll_GetDlgItem]
test eax, eax
je 0x4a6229
push esi
push 0
push 0xc
push eax
call dword [sym.imp.USER32.dll_SendMessageW]
mov al, byte [0x5cc1a4]
mov byte [esp + 0x1a], al
mov eax, dword [esp + 0x78]
mul ebx
push 0
mov dword [esp + 0x24], eax
lea eax, [esp + 0x14]
push 1
push eax
mov dword [esp + 0x1c], 0x10c
mov dword [esp + 0x30], edx
call sym.ProcessHacker.exe_PhFormat
push eax
call sym.ProcessHacker.exe_PhAutoDereferenceObject
push 0x545
push dword [0x5ceedc]
mov esi, dword [eax + 4]
call dword [sym.imp.USER32.dll_GetDlgItem]
test eax, eax
je 0x4a6286
push esi
push 0
push 0xc
push eax
call dword [sym.imp.USER32.dll_SendMessageW]
mov al, byte [0x5cc1a4]
mov byte [esp + 0x1a], al
mov eax, dword [esp + 0x7c]
mul ebx
push 0
mov dword [esp + 0x24], eax
lea eax, [esp + 0x14]
push 1
push eax
mov dword [esp + 0x1c], 0x10c
mov dword [esp + 0x30], edx
call sym.ProcessHacker.exe_PhFormat
push eax
call sym.ProcessHacker.exe_PhAutoDereferenceObject
push 0x554
push dword [0x5ceedc]
mov esi, dword [eax + 4]
call dword [sym.imp.USER32.dll_GetDlgItem]
test eax, eax
je 0x4a62dd
push esi
push 0
push 0xc
push eax
call dword [sym.imp.USER32.dll_SendMessageW]
mov al, byte [0x5cc1a4]
mov byte [esp + 0x1a], al
mov eax, dword [esp + 0x80]
mul ebx
push 0
mov dword [esp + 0x24], eax
lea eax, [esp + 0x14]
push 1
push eax
mov dword [esp + 0x1c], 0x10c
mov dword [esp + 0x30], edx
call sym.ProcessHacker.exe_PhFormat
push eax
call sym.ProcessHacker.exe_PhAutoDereferenceObject
push 0x555
push dword [0x5ceedc]
mov esi, dword [eax + 4]
call dword [sym.imp.USER32.dll_GetDlgItem]
test eax, eax
je 0x4a6337
push esi
push 0
push 0xc
push eax
call dword [sym.imp.USER32.dll_SendMessageW]
mov al, byte [0x5cc1a4]
mov byte [esp + 0x1a], al
mov eax, dword [esp + 0x84]
mul ebx
push 0
mov dword [esp + 0x24], eax
lea eax, [esp + 0x14]
push 1
push eax
mov dword [esp + 0x1c], 0x10c
mov dword [esp + 0x30], edx
call sym.ProcessHacker.exe_PhFormat
push eax
call sym.ProcessHacker.exe_PhAutoDereferenceObject
push 0x556
push dword [0x5ceedc]
mov esi, dword [eax + 4]
call dword [sym.imp.USER32.dll_GetDlgItem]
test eax, eax
je 0x4a6396
push esi
push 0
push 0xc
push eax
call dword [sym.imp.USER32.dll_SendMessageW]
mov al, byte [0x5cc1a4]
mov byte [esp + 0x1a], al
mov eax, dword [esp + 0x88]
mul ebx
push 0
mov dword [esp + 0x24], eax
lea eax, [esp + 0x14]
push 1
push eax
mov dword [esp + 0x1c], 0x10c
mov dword [esp + 0x30], edx
call sym.ProcessHacker.exe_PhFormat
push eax
call sym.ProcessHacker.exe_PhAutoDereferenceObject
push 0x557
push dword [0x5ceedc]
mov esi, dword [eax + 4]
call dword [sym.imp.USER32.dll_GetDlgItem]
test eax, eax
je 0x4a63f6
push esi
push 0
push 0xc
push eax
call dword [sym.imp.USER32.dll_SendMessageW]
cmp dword [0x5c7aa8], 0x3e
lea ecx, [ecx]
jb 0x4a645e
mov al, byte [0x5cc1a4]
mov byte [esp + 0x1a], al
mov eax, dword [esp + 0xac]
mul ebx
push 0
mov dword [esp + 0x24], eax
lea eax, [esp + 0x14]
push 1
push eax
mov dword [esp + 0x1c], 0x10c
mov dword [esp + 0x30], edx
call sym.ProcessHacker.exe_PhFormat
push eax
call sym.ProcessHacker.exe_PhAutoDereferenceObject
push 0x55d
push dword [0x5ceedc]
mov esi, dword [eax + 4]
call dword [sym.imp.USER32.dll_GetDlgItem]
test eax, eax
je 0x4a667f
push esi
jmp 0x4a6674
push 0x55d
jmp 0x4a665f
push 0x534
push dword [0x5ceedc]
call dword [sym.imp.USER32.dll_GetDlgItem]
test eax, eax
je 0x4a648d
push 0x586ca8
push 0
push 0xc
push eax
call dword [sym.imp.USER32.dll_SendMessageW]
push 0x535
push dword [0x5ceedc]
call dword [sym.imp.USER32.dll_GetDlgItem]
mov edi, edi
test eax, eax
je 0x4a64b4
push 0x586ca8
push 0
push 0xc
push eax
call dword [sym.imp.USER32.dll_SendMessageW]
push 0x536
push dword [0x5ceedc]
call dword [sym.imp.USER32.dll_GetDlgItem]
test eax, eax
je 0x4a64da
push 0x586ca8
push 0
push 0xc
push eax
call dword [sym.imp.USER32.dll_SendMessageW]
push 0x537
push dword [0x5ceedc]
call dword [sym.imp.USER32.dll_GetDlgItem]
test eax, eax
je 0x4a64ff
push 0x586ca8
push 0
push 0xc
push eax
call dword [sym.imp.USER32.dll_SendMessageW]
push 0x55d
push dword [0x5ceedc]
call dword [sym.imp.USER32.dll_GetDlgItem]
test eax, eax
je 0x4a6526
push 0x586ca8
push 0
push 0xc
push eax
call dword [sym.imp.USER32.dll_SendMessageW]
push 0x539
push dword [0x5ceedc]
call dword [sym.imp.USER32.dll_GetDlgItem]
test eax, eax
je 0x4a654b
push 0x586ca8
push 0
push 0xc
push eax
call dword [sym.imp.USER32.dll_SendMessageW]
push 0x542
push dword [0x5ceedc]
call dword [sym.imp.USER32.dll_GetDlgItem]
lea esp, [esp]
test eax, eax
je 0x4a6574
push 0x586ca8
push 0
push 0xc
push eax
call dword [sym.imp.USER32.dll_SendMessageW]
push 0x543
push dword [0x5ceedc]
call dword [sym.imp.USER32.dll_GetDlgItem]
test eax, eax
je 0x4a659a
push 0x586ca8
push 0
push 0xc
push eax
call dword [sym.imp.USER32.dll_SendMessageW]
push 0x544
push dword [0x5ceedc]
call dword [sym.imp.USER32.dll_GetDlgItem]
test eax, eax
je 0x4a65bf
push 0x586ca8
push 0
push 0xc
push eax
call dword [sym.imp.USER32.dll_SendMessageW]
push 0x545
push dword [0x5ceedc]
call dword [sym.imp.USER32.dll_GetDlgItem]
test eax, eax
je 0x4a65e6
push 0x586ca8
push 0
push 0xc
push eax
call dword [sym.imp.USER32.dll_SendMessageW]
push 0x554
push dword [0x5ceedc]
call dword [sym.imp.USER32.dll_GetDlgItem]
test eax, eax
je 0x4a660b
push 0x586ca8
push 0
push 0xc
push eax
call dword [sym.imp.USER32.dll_SendMessageW]
push 0x555
push dword [0x5ceedc]
call dword [sym.imp.USER32.dll_GetDlgItem]
lea esp, [esp]
test eax, eax
je 0x4a6634
push 0x586ca8
push 0
push 0xc
push eax
call dword [sym.imp.USER32.dll_SendMessageW]
push 0x556
push dword [0x5ceedc]
call dword [sym.imp.USER32.dll_GetDlgItem]
test eax, eax
je 0x4a665a
push 0x586ca8
push 0
push 0xc
push eax
call dword [sym.imp.USER32.dll_SendMessageW]
push 0x557
push dword [0x5ceedc]
call dword [sym.imp.USER32.dll_GetDlgItem]
test eax, eax
je 0x4a667f
push 0x586ca8
push 0
push 0xc
push eax
call dword [sym.imp.USER32.dll_SendMessageW]
mov ecx, dword [esp + 0xbc]
pop edi
pop esi
pop ebx
xor ecx, esp
call fcn.00534c91
mov esp, ebp
pop ebp
ret