Function at 0x1400150c0
Capabilities:
Get system information on windows

Disassembly:
jmp 0x14014f810
push rdi
sub rsp, 0x160
lea rdi, [rsp + 0x20]
mov ecx, 0x50
mov eax, 0xcccccccc
rep stosd dword [rdi], eax
mov rax, qword [0x1405dc580]
xor rax, rsp
mov qword [rsp + 0x158], rax
mov eax, dword [0x1405e7f10]
imul rax, rax, 0x1000
mov edx, 0xffffffff
mov rcx, rax
call sym.ProcessHacker.exe_PhFormatSize
mov rcx, rax
call sym.ProcessHacker.exe_PhAutoDereferenceObject
mov r8, qword [rax + 8]
mov edx, 0x522
mov rcx, qword [0x1405e3d70]
call sym.ProcessHacker.exe_PhSetDialogItemText
mov eax, dword [0x1405e7f18]
imul rax, rax, 0x1000
mov edx, 0xffffffff
mov rcx, rax
call sym.ProcessHacker.exe_PhFormatSize
mov rcx, rax
call sym.ProcessHacker.exe_PhAutoDereferenceObject
mov r8, qword [rax + 8]
mov edx, 0x523
mov rcx, qword [0x1405e3d70]
call sym.ProcessHacker.exe_PhSetDialogItemText
mov eax, dword [0x1405e7f14]
imul rax, rax, 0x1000
mov edx, 0xffffffff
mov rcx, rax
call sym.ProcessHacker.exe_PhFormatSize
mov rcx, rax
call sym.ProcessHacker.exe_PhAutoDereferenceObject
mov r8, qword [rax + 8]
mov edx, 0x524
mov rcx, qword [0x1405e3d70]
call sym.ProcessHacker.exe_PhSetDialogItemText
mov eax, dword [0x1405e7f0c]
mov ecx, dword [0x1405e429c]
sub ecx, eax
mov eax, ecx
mov eax, eax
imul rax, rax, 0x1000
mov edx, 0xffffffff
mov rcx, rax
call sym.ProcessHacker.exe_PhFormatSize
mov rcx, rax
call sym.ProcessHacker.exe_PhAutoDereferenceObject
mov r8, qword [rax + 8]
mov edx, 0x525
mov rcx, qword [0x1405e3d70]
call sym.ProcessHacker.exe_PhSetDialogItemText
mov eax, dword [0x1405e429c]
imul rax, rax, 0x1000
mov edx, 0xffffffff
mov rcx, rax
call sym.ProcessHacker.exe_PhFormatSize
mov rcx, rax
call sym.ProcessHacker.exe_PhAutoDereferenceObject
mov r8, qword [rax + 8]
mov edx, 0x526
mov rcx, qword [0x1405e3d70]
call sym.ProcessHacker.exe_PhSetDialogItemText
cmp qword [0x1405e3df8], 0
je 0x14014f995
mov edx, 0xffffffff
mov rcx, qword [0x1405e3df8]
call sym.ProcessHacker.exe_PhFormatSize
mov rcx, rax
call sym.ProcessHacker.exe_PhAutoDereferenceObject
mov r8, qword [rax + 8]
mov edx, 0x533
mov rcx, qword [0x1405e3d70]
call sym.ProcessHacker.exe_PhSetDialogItemText
jmp 0x14014f9ad
lea r8, [0x1404d23c0]
mov edx, 0x533
mov rcx, qword [0x1405e3d70]
call sym.ProcessHacker.exe_PhSetDialogItemText
mov eax, dword [0x1405e7f84]
imul rax, rax, 0x1000
mov edx, 0xffffffff
mov rcx, rax
call sym.ProcessHacker.exe_PhFormatSize
mov rcx, rax
call sym.ProcessHacker.exe_PhAutoDereferenceObject
mov r8, qword [rax + 8]
mov edx, 0x527
mov rcx, qword [0x1405e3d70]
call sym.ProcessHacker.exe_PhSetDialogItemText
mov eax, dword [0x1405e7f6c]
imul rax, rax, 0x1000
mov edx, 0xffffffff
mov rcx, rax
call sym.ProcessHacker.exe_PhFormatSize
mov rcx, rax
call sym.ProcessHacker.exe_PhAutoDereferenceObject
mov r8, qword [rax + 8]
mov edx, 0x528
mov rcx, qword [0x1405e3d70]
call sym.ProcessHacker.exe_PhSetDialogItemText
mov eax, dword [0x1405e7f8c]
imul rax, rax, 0x1000
mov edx, 0xffffffff
mov rcx, rax
call sym.ProcessHacker.exe_PhFormatSize
mov rcx, rax
call sym.ProcessHacker.exe_PhAutoDereferenceObject
mov r8, qword [rax + 8]
mov edx, 0x529
mov rcx, qword [0x1405e3d70]
call sym.ProcessHacker.exe_PhSetDialogItemText
mov eax, dword [0x1405e7f88]
imul rax, rax, 0x1000
mov edx, 0xffffffff
mov rcx, rax
call sym.ProcessHacker.exe_PhFormatSize
mov rcx, rax
call sym.ProcessHacker.exe_PhAutoDereferenceObject
mov r8, qword [rax + 8]
mov edx, 0x52a
mov rcx, qword [0x1405e3d70]
call sym.ProcessHacker.exe_PhSetDialogItemText
mov eax, dword [0x1405e7f50]
imul rax, rax, 0x1000
mov edx, 0xffffffff
mov rcx, rax
call sym.ProcessHacker.exe_PhFormatSize
mov rcx, rax
call sym.ProcessHacker.exe_PhAutoDereferenceObject
mov r8, qword [rax + 8]
mov edx, 0x52b
mov rcx, qword [0x1405e3d70]
call sym.ProcessHacker.exe_PhSetDialogItemText
cmp dword [0x1405e3d78], 1
jbe 0x14014faf7
mov eax, dword [0x1405e3d84]
mov dl, 1
mov ecx, eax
call sym.ProcessHacker.exe_PhFormatUInt64
mov rcx, rax
call sym.ProcessHacker.exe_PhAutoDereferenceObject
mov r8, qword [rax + 8]
mov edx, 0x52d
mov rcx, qword [0x1405e3d70]
call sym.ProcessHacker.exe_PhSetDialogItemText
jmp 0x14014fb0f
lea r8, [0x1404d23c0]
mov edx, 0x52d
mov rcx, qword [0x1405e3d70]
call sym.ProcessHacker.exe_PhSetDialogItemText
cmp dword [0x1405e3d78], 1
jbe 0x14014fb46
mov eax, dword [0x1405e3d8c]
mov dl, 1
mov ecx, eax
call sym.ProcessHacker.exe_PhFormatUInt64
mov rcx, rax
call sym.ProcessHacker.exe_PhAutoDereferenceObject
mov r8, qword [rax + 8]
mov edx, 0x52e
mov rcx, qword [0x1405e3d70]
call sym.ProcessHacker.exe_PhSetDialogItemText
jmp 0x14014fb5e
lea r8, [0x1404d23c0]
mov edx, 0x52e
mov rcx, qword [0x1405e3d70]
call sym.ProcessHacker.exe_PhSetDialogItemText
mov eax, dword [0x1405e7f54]
imul rax, rax, 0x1000
mov edx, 0xffffffff
mov rcx, rax
call sym.ProcessHacker.exe_PhFormatSize
mov rcx, rax
call sym.ProcessHacker.exe_PhAutoDereferenceObject
mov r8, qword [rax + 8]
mov edx, 0x52f
mov rcx, qword [0x1405e3d70]
call sym.ProcessHacker.exe_PhSetDialogItemText
cmp dword [0x1405e3d78], 1
jbe 0x14014fbcc
mov eax, dword [0x1405e3d84]
mov dl, 1
mov ecx, eax
call sym.ProcessHacker.exe_PhFormatUInt64
mov rcx, rax
call sym.ProcessHacker.exe_PhAutoDereferenceObject
mov r8, qword [rax + 8]
mov edx, 0x531
mov rcx, qword [0x1405e3d70]
call sym.ProcessHacker.exe_PhSetDialogItemText
jmp 0x14014fbe4
lea r8, [0x1404d23c0]
mov edx, 0x531
mov rcx, qword [0x1405e3d70]
call sym.ProcessHacker.exe_PhSetDialogItemText
cmp dword [0x1405e3d78], 1
jbe 0x14014fc1b
mov eax, dword [0x1405e3d9c]
mov dl, 1
mov ecx, eax
call sym.ProcessHacker.exe_PhFormatUInt64
mov rcx, rax
call sym.ProcessHacker.exe_PhAutoDereferenceObject
mov r8, qword [rax + 8]
mov edx, 0x532
mov rcx, qword [0x1405e3d70]
call sym.ProcessHacker.exe_PhSetDialogItemText
jmp 0x14014fc33
lea r8, [0x1404d23c0]
mov edx, 0x532
mov rcx, qword [0x1405e3d70]
call sym.ProcessHacker.exe_PhSetDialogItemText
movzx eax, byte [0x1405e3d7c]
test eax, eax
je 0x14014fce9
cmp qword [0x1405e3de0], 0
jne 0x14014fc5a
cmp qword [0x1405e3de8], 0
je 0x14014fce9
lea rdx, [rsp + 0x128]
lea rcx, [rsp + 0x108]
call fcn.14001b1c0
cmp qword [rsp + 0x108], 0xffffffffffffffff
je 0x14014fc9f
mov edx, 0xffffffff
mov rcx, qword [rsp + 0x108]
call sym.ProcessHacker.exe_PhFormatSize
mov rcx, rax
call sym.ProcessHacker.exe_PhAutoDereferenceObject
mov rax, qword [rax + 8]
mov qword [rsp + 0x20], rax
jmp 0x14014fcab
lea rax, [0x1403de918]
mov qword [rsp + 0x20], rax
cmp qword [rsp + 0x128], 0xffffffffffffffff
je 0x14014fcdb
mov edx, 0xffffffff
mov rcx, qword [rsp + 0x128]
call sym.ProcessHacker.exe_PhFormatSize
mov rcx, rax
call sym.ProcessHacker.exe_PhAutoDereferenceObject
mov rax, qword [rax + 8]
mov qword [rsp + 0x28], rax
jmp 0x14014fce7
lea rax, [0x1403de918]
mov qword [rsp + 0x28], rax
jmp 0x14014fd23
call fcn.1400076c0
movzx eax, al
test eax, eax
jne 0x14014fd0d
lea rax, str.no_driver
mov qword [rsp + 0x28], rax
mov rax, qword [rsp + 0x28]
mov qword [rsp + 0x20], rax
jmp 0x14014fd23
lea rax, str.no_symbols
mov qword [rsp + 0x28], rax
mov rax, qword [rsp + 0x28]
mov qword [rsp + 0x20], rax
mov r8, qword [rsp + 0x20]
mov edx, 0x52c
mov rcx, qword [0x1405e3d70]
call sym.ProcessHacker.exe_PhSetDialogItemText
mov r8, qword [rsp + 0x28]
mov edx, 0x530
mov rcx, qword [0x1405e3d70]
call sym.ProcessHacker.exe_PhSetDialogItemText
cmp dword [0x1405e3d78], 1
jbe 0x14014fd86
mov eax, dword [0x1405e3da4]
mov dl, 1
mov ecx, eax
call sym.ProcessHacker.exe_PhFormatUInt64
mov rcx, rax
call sym.ProcessHacker.exe_PhAutoDereferenceObject
mov r8, qword [rax + 8]
mov edx, 0x558
mov rcx, qword [0x1405e3d70]
call sym.ProcessHacker.exe_PhSetDialogItemText
jmp 0x14014fd9e
lea r8, [0x1404d23c0]
mov edx, 0x558
mov rcx, qword [0x1405e3d70]
call sym.ProcessHacker.exe_PhSetDialogItemText
cmp dword [0x1405e3d78], 1
jbe 0x14014fdd5
mov eax, dword [0x1405e3dac]
mov dl, 1
mov ecx, eax
call sym.ProcessHacker.exe_PhFormatUInt64
mov rcx, rax
call sym.ProcessHacker.exe_PhAutoDereferenceObject
mov r8, qword [rax + 8]
mov edx, 0x559
mov rcx, qword [0x1405e3d70]
call sym.ProcessHacker.exe_PhSetDialogItemText
jmp 0x14014fded
lea r8, [0x1404d23c0]
mov edx, 0x559
mov rcx, qword [0x1405e3d70]
call sym.ProcessHacker.exe_PhSetDialogItemText
cmp dword [0x1405e3d78], 1
jbe 0x14014fe24
mov eax, dword [0x1405e3db4]
mov dl, 1
mov ecx, eax
call sym.ProcessHacker.exe_PhFormatUInt64
mov rcx, rax
call sym.ProcessHacker.exe_PhAutoDereferenceObject
mov r8, qword [rax + 8]
mov edx, 0x55a
mov rcx, qword [0x1405e3d70]
call sym.ProcessHacker.exe_PhSetDialogItemText
jmp 0x14014fe3c
lea r8, [0x1404d23c0]
mov edx, 0x55a
mov rcx, qword [0x1405e3d70]
call sym.ProcessHacker.exe_PhSetDialogItemText
cmp dword [0x1405e3d78], 1
jbe 0x14014fe73
mov eax, dword [0x1405e3dbc]
mov dl, 1
mov ecx, eax
call sym.ProcessHacker.exe_PhFormatUInt64
mov rcx, rax
call sym.ProcessHacker.exe_PhAutoDereferenceObject
mov r8, qword [rax + 8]
mov edx, 0x55b
mov rcx, qword [0x1405e3d70]
call sym.ProcessHacker.exe_PhSetDialogItemText
jmp 0x14014fe8b
lea r8, [0x1404d23c0]
mov edx, 0x55b
mov rcx, qword [0x1405e3d70]
call sym.ProcessHacker.exe_PhSetDialogItemText
cmp dword [0x1405e3d78], 1
jbe 0x14014fec4
mov edx, 0xffffffff
mov rcx, qword [0x1405e3dc8]
call sym.ProcessHacker.exe_PhFormatSize
mov rcx, rax
call sym.ProcessHacker.exe_PhAutoDereferenceObject
mov r8, qword [rax + 8]
mov edx, 0x55c
mov rcx, qword [0x1405e3d70]
call sym.ProcessHacker.exe_PhSetDialogItemText
jmp 0x14014fedc
lea r8, [0x1404d23c0]
mov edx, 0x55c
mov rcx, qword [0x1405e3d70]
call sym.ProcessHacker.exe_PhSetDialogItemText
cmp dword [0x1405e3d78], 1
jbe 0x14014ff15
mov edx, 0xffffffff
mov rcx, qword [0x1405e3dd8]
call sym.ProcessHacker.exe_PhFormatSize
mov rcx, rax
call sym.ProcessHacker.exe_PhAutoDereferenceObject
mov r8, qword [rax + 8]
mov edx, 0x55e
mov rcx, qword [0x1405e3d70]
call sym.ProcessHacker.exe_PhSetDialogItemText
jmp 0x14014ff2d
lea r8, [0x1404d23c0]
mov edx, 0x55e
mov rcx, qword [0x1405e3d70]
call sym.ProcessHacker.exe_PhSetDialogItemText
xor r9d, r9d
mov r8d, 0xb0
lea rdx, [rsp + 0x40]
mov ecx, 0x50
call qword [sym.imp.ntdll.dll_NtQuerySystemInformation]
test eax, eax
jl 0x140150316
mov qword [rsp + 0x138], 0
mov qword [rsp + 0x140], 0
mov dword [rsp + 0x148], 0
jmp 0x14014ff83
mov eax, dword [rsp + 0x148]
inc eax
mov dword [rsp + 0x148], eax
cmp dword [rsp + 0x148], 8
jae 0x14014ffd6
mov eax, dword [rsp + 0x148]
mov rax, qword [rsp + rax*8 + 0x68]
mov rcx, qword [rsp + 0x138]
add rcx, rax
mov rax, rcx
mov qword [rsp + 0x138], rax
mov eax, dword [rsp + 0x148]
mov rax, qword [rsp + rax*8 + 0xa8]
mov rcx, qword [rsp + 0x140]
add rcx, rax
mov rax, rcx
mov qword [rsp + 0x140], rax
jmp 0x14014ff73
imul rax, qword [rsp + 0x40], 0x1000
mov edx, 0xffffffff
mov rcx, rax
call sym.ProcessHacker.exe_PhFormatSize
mov rcx, rax
call sym.ProcessHacker.exe_PhAutoDereferenceObject
mov r8, qword [rax + 8]
mov edx, 0x534
mov rcx, qword [0x1405e3d70]
call sym.ProcessHacker.exe_PhSetDialogItemText
imul rax, qword [rsp + 0x48], 0x1000
mov edx, 0xffffffff
mov rcx, rax
call sym.ProcessHacker.exe_PhFormatSize
mov rcx, rax
call sym.ProcessHacker.exe_PhAutoDereferenceObject
mov r8, qword [rax + 8]
mov edx, 0x535
mov rcx, qword [0x1405e3d70]
call sym.ProcessHacker.exe_PhSetDialogItemText
imul rax, qword [rsp + 0x50], 0x1000
mov edx, 0xffffffff
mov rcx, rax
call sym.ProcessHacker.exe_PhFormatSize
mov rcx, rax
call sym.ProcessHacker.exe_PhAutoDereferenceObject
mov r8, qword [rax + 8]
mov edx, 0x536
mov rcx, qword [0x1405e3d70]
call sym.ProcessHacker.exe_PhSetDialogItemText
imul rax, qword [rsp + 0x58], 0x1000
mov edx, 0xffffffff
mov rcx, rax
call sym.ProcessHacker.exe_PhFormatSize
mov rcx, rax
call sym.ProcessHacker.exe_PhAutoDereferenceObject
mov r8, qword [rax + 8]
mov edx, 0x537
mov rcx, qword [0x1405e3d70]
call sym.ProcessHacker.exe_PhSetDialogItemText
imul rax, qword [rsp + 0x138], 0x1000
mov edx, 0xffffffff
mov rcx, rax
call sym.ProcessHacker.exe_PhFormatSize
mov rcx, rax
call sym.ProcessHacker.exe_PhAutoDereferenceObject
mov r8, qword [rax + 8]
mov edx, 0x539
mov rcx, qword [0x1405e3d70]
call sym.ProcessHacker.exe_PhSetDialogItemText
mov eax, 8
imul rax, rax, 0
imul rax, qword [rsp + rax + 0x68], 0x1000
mov edx, 0xffffffff
mov rcx, rax
call sym.ProcessHacker.exe_PhFormatSize
mov rcx, rax
call sym.ProcessHacker.exe_PhAutoDereferenceObject
mov r8, qword [rax + 8]
mov edx, 0x542
mov rcx, qword [0x1405e3d70]
call sym.ProcessHacker.exe_PhSetDialogItemText
mov eax, 8
imul rax, rax, 1
imul rax, qword [rsp + rax + 0x68], 0x1000
mov edx, 0xffffffff
mov rcx, rax
call sym.ProcessHacker.exe_PhFormatSize
mov rcx, rax
call sym.ProcessHacker.exe_PhAutoDereferenceObject
mov r8, qword [rax + 8]
mov edx, 0x543
mov rcx, qword [0x1405e3d70]
call sym.ProcessHacker.exe_PhSetDialogItemText
mov eax, 8
imul rax, rax, 2
imul rax, qword [rsp + rax + 0x68], 0x1000
mov edx, 0xffffffff
mov rcx, rax
call sym.ProcessHacker.exe_PhFormatSize
mov rcx, rax
call sym.ProcessHacker.exe_PhAutoDereferenceObject
mov r8, qword [rax + 8]
mov edx, 0x544
mov rcx, qword [0x1405e3d70]
call sym.ProcessHacker.exe_PhSetDialogItemText
mov eax, 8
imul rax, rax, 3
imul rax, qword [rsp + rax + 0x68], 0x1000
mov edx, 0xffffffff
mov rcx, rax
call sym.ProcessHacker.exe_PhFormatSize
mov rcx, rax
call sym.ProcessHacker.exe_PhAutoDereferenceObject
mov r8, qword [rax + 8]
mov edx, 0x545
mov rcx, qword [0x1405e3d70]
call sym.ProcessHacker.exe_PhSetDialogItemText
mov eax, 8
imul rax, rax, 4
imul rax, qword [rsp + rax + 0x68], 0x1000
mov edx, 0xffffffff
mov rcx, rax
call sym.ProcessHacker.exe_PhFormatSize
mov rcx, rax
call sym.ProcessHacker.exe_PhAutoDereferenceObject
mov r8, qword [rax + 8]
mov edx, 0x554
mov rcx, qword [0x1405e3d70]
call sym.ProcessHacker.exe_PhSetDialogItemText
mov eax, 8
imul rax, rax, 5
imul rax, qword [rsp + rax + 0x68], 0x1000
mov edx, 0xffffffff
mov rcx, rax
call sym.ProcessHacker.exe_PhFormatSize
mov rcx, rax
call sym.ProcessHacker.exe_PhAutoDereferenceObject
mov r8, qword [rax + 8]
mov edx, 0x555
mov rcx, qword [0x1405e3d70]
call sym.ProcessHacker.exe_PhSetDialogItemText
mov eax, 8
imul rax, rax, 6
imul rax, qword [rsp + rax + 0x68], 0x1000
mov edx, 0xffffffff
mov rcx, rax
call sym.ProcessHacker.exe_PhFormatSize
mov rcx, rax
call sym.ProcessHacker.exe_PhAutoDereferenceObject
mov r8, qword [rax + 8]
mov edx, 0x556
mov rcx, qword [0x1405e3d70]
call sym.ProcessHacker.exe_PhSetDialogItemText
mov eax, 8
imul rax, rax, 7
imul rax, qword [rsp + rax + 0x68], 0x1000
mov edx, 0xffffffff
mov rcx, rax
call sym.ProcessHacker.exe_PhFormatSize
mov rcx, rax
call sym.ProcessHacker.exe_PhAutoDereferenceObject
mov r8, qword [rax + 8]
mov edx, 0x557
mov rcx, qword [0x1405e3d70]
call sym.ProcessHacker.exe_PhSetDialogItemText
cmp dword [0x1405d62d4], 0x3e
jb 0x1401502f9
imul rax, qword [rsp + 0xe8], 0x1000
mov edx, 0xffffffff
mov rcx, rax
call sym.ProcessHacker.exe_PhFormatSize
mov rcx, rax
call sym.ProcessHacker.exe_PhAutoDereferenceObject
mov r8, qword [rax + 8]
mov edx, 0x55d
mov rcx, qword [0x1405e3d70]
call sym.ProcessHacker.exe_PhSetDialogItemText
jmp 0x140150311
lea r8, [0x1403de918]
mov edx, 0x55d
mov rcx, qword [0x1405e3d70]
call sym.ProcessHacker.exe_PhSetDialogItemText
jmp 0x140150466
lea r8, [0x1403de918]
mov edx, 0x534
mov rcx, qword [0x1405e3d70]
call sym.ProcessHacker.exe_PhSetDialogItemText
lea r8, [0x1403de918]
mov edx, 0x535
mov rcx, qword [0x1405e3d70]
call sym.ProcessHacker.exe_PhSetDialogItemText
lea r8, [0x1403de918]
mov edx, 0x536
mov rcx, qword [0x1405e3d70]
call sym.ProcessHacker.exe_PhSetDialogItemText
lea r8, [0x1403de918]
mov edx, 0x537
mov rcx, qword [0x1405e3d70]
call sym.ProcessHacker.exe_PhSetDialogItemText
lea r8, [0x1403de918]
mov edx, 0x55d
mov rcx, qword [0x1405e3d70]
call sym.ProcessHacker.exe_PhSetDialogItemText
lea r8, [0x1403de918]
mov edx, 0x539
mov rcx, qword [0x1405e3d70]
call sym.ProcessHacker.exe_PhSetDialogItemText
lea r8, [0x1403de918]
mov edx, 0x542
mov rcx, qword [0x1405e3d70]
call sym.ProcessHacker.exe_PhSetDialogItemText
lea r8, [0x1403de918]
mov edx, 0x543
mov rcx, qword [0x1405e3d70]
call sym.ProcessHacker.exe_PhSetDialogItemText
lea r8, [0x1403de918]
mov edx, 0x544
mov rcx, qword [0x1405e3d70]
call sym.ProcessHacker.exe_PhSetDialogItemText
lea r8, [0x1403de918]
mov edx, 0x545
mov rcx, qword [0x1405e3d70]
call sym.ProcessHacker.exe_PhSetDialogItemText
lea r8, [0x1403de918]
mov edx, 0x554
mov rcx, qword [0x1405e3d70]
call sym.ProcessHacker.exe_PhSetDialogItemText
lea r8, [0x1403de918]
mov edx, 0x555
mov rcx, qword [0x1405e3d70]
call sym.ProcessHacker.exe_PhSetDialogItemText
lea r8, [0x1403de918]
mov edx, 0x556
mov rcx, qword [0x1405e3d70]
call sym.ProcessHacker.exe_PhSetDialogItemText
lea r8, [0x1403de918]
mov edx, 0x557
mov rcx, qword [0x1405e3d70]
call sym.ProcessHacker.exe_PhSetDialogItemText
mov rcx, rsp
lea rdx, [0x1404d2bc0]
call fcn.140015750
mov rcx, qword [rsp + 0x158]
xor rcx, rsp
call fcn.14000d430
add rsp, 0x160
pop rdi
ret