Function at 0x1400be5e0
Capabilities:
Get graphical window text

Disassembly:
mov qword [rsp + 8], rbx
mov qword [rsp + 0x10], rsi
mov qword [rsp + 0x18], rdi
push rbp
lea rbp, [rsp - 0x57]
sub rsp, 0xe0
xor r9d, r9d
mov rbx, rcx
mov rcx, qword [rcx + 0x30]
mov edx, 0x109d
lea r8d, [r9 + 1]
call qword [sym.imp.USER32.dll_SendMessageW]
mov rcx, qword [rbx + 0x30]
lea r9, [rbp - 0x69]
xorps xmm0, xmm0
xor eax, eax
movups xmmword [rbp - 0x69], xmm0
mov qword [rbp + 0x27], rax
lea rax, [0x1401bc980]
movups xmmword [rbp - 0x49], xmm0
xor esi, esi
mov edx, 0x1091
movups xmmword [rbp - 0x39], xmm0
mov r8d, 0x7fffffff
mov qword [rbp - 0x61], rax
movups xmmword [rbp - 0x59], xmm0
mov dword [rbp - 0x69], 0x98
movups xmmword [rbp - 0x29], xmm0
mov dword [rbp - 0x65], 0x1d
movups xmmword [rbp - 0x19], xmm0
mov dword [rbp - 0x39], 1
movups xmmword [rbp - 9], xmm0
mov dword [rbp - 0x3d], 8
movups xmmword [rbp + 7], xmm0
mov dword [rbp - 0x45], esi
movups xmmword [rbp + 0x17], xmm0
call qword [sym.imp.USER32.dll_SendMessageW]
mov rcx, qword [rbx + 0x30]
lea r9, [rbp - 0x69]
xorps xmm0, xmm0
xor eax, eax
movups xmmword [rbp - 0x69], xmm0
mov qword [rbp + 0x27], rax
lea rax, [0x1401c44d0]
movups xmmword [rbp - 0x49], xmm0
mov edx, 0x1091
mov r8d, 0x7fffffff
movups xmmword [rbp - 0x39], xmm0
mov qword [rbp - 0x61], rax
movups xmmword [rbp - 0x59], xmm0
mov dword [rbp - 0x69], 0x98
movups xmmword [rbp - 0x29], xmm0
mov dword [rbp - 0x65], 0x1d
movups xmmword [rbp - 0x19], xmm0
mov dword [rbp - 0x39], 1
movups xmmword [rbp - 9], xmm0
mov dword [rbp - 0x3d], 8
movups xmmword [rbp + 7], xmm0
mov dword [rbp - 0x45], 1
movups xmmword [rbp + 0x17], xmm0
call qword [sym.imp.USER32.dll_SendMessageW]
mov rcx, qword [rbx + 0x30]
lea r9, [rbp - 0x69]
xorps xmm0, xmm0
xor eax, eax
movups xmmword [rbp - 0x69], xmm0
mov qword [rbp + 0x27], rax
lea rax, [0x1401bc9c8]
movups xmmword [rbp - 0x49], xmm0
mov edx, 0x1091
mov r8d, 0x7fffffff
movups xmmword [rbp - 0x39], xmm0
mov qword [rbp - 0x61], rax
movups xmmword [rbp - 0x59], xmm0
mov dword [rbp - 0x69], 0x98
movups xmmword [rbp - 0x29], xmm0
mov dword [rbp - 0x65], 0x1d
movups xmmword [rbp - 0x19], xmm0
mov dword [rbp - 0x39], 1
movups xmmword [rbp - 9], xmm0
mov dword [rbp - 0x3d], 8
movups xmmword [rbp + 7], xmm0
mov dword [rbp - 0x45], 2
movups xmmword [rbp + 0x17], xmm0
call qword [sym.imp.USER32.dll_SendMessageW]
xorps xmm0, xmm0
xor eax, eax
mov rcx, qword [rbx + 0x30]
lea rdi, [0x1401b7be0]
movups xmmword [rbp - 0x69], xmm0
lea r9, [rbp - 0x69]
mov edx, 0x1091
movups xmmword [rbp - 0x49], xmm0
mov r8d, 0x7fffffff
mov qword [rbp - 0x61], rdi
movups xmmword [rbp - 0x39], xmm0
mov qword [rbp + 0x27], rax
movups xmmword [rbp - 0x59], xmm0
mov dword [rbp - 0x69], 0x98
movups xmmword [rbp - 0x29], xmm0
mov dword [rbp - 0x65], 0x1d
movups xmmword [rbp - 0x19], xmm0
mov dword [rbp - 0x39], 1
movups xmmword [rbp - 9], xmm0
mov dword [rbp - 0x3d], 8
movups xmmword [rbp + 7], xmm0
mov dword [rbp - 0x45], 3
movups xmmword [rbp + 0x17], xmm0
call qword [sym.imp.USER32.dll_SendMessageW]
mov rcx, qword [rbx + 0x30]
lea r9, [rbp - 0x69]
xorps xmm0, xmm0
xor eax, eax
movups xmmword [rbp - 0x69], xmm0
mov qword [rbp + 0x27], rax
lea rax, str.Extension
movups xmmword [rbp - 0x49], xmm0
mov edx, 0x1091
mov r8d, 0x7fffffff
movups xmmword [rbp - 0x39], xmm0
mov qword [rbp - 0x61], rax
movups xmmword [rbp - 0x59], xmm0
mov dword [rbp - 0x69], 0x98
movups xmmword [rbp - 0x29], xmm0
mov dword [rbp - 0x65], 0x1d
movups xmmword [rbp - 0x19], xmm0
mov dword [rbp - 0x39], 1
movups xmmword [rbp - 9], xmm0
mov dword [rbp - 0x3d], 8
movups xmmword [rbp + 7], xmm0
mov dword [rbp - 0x45], 4
movups xmmword [rbp + 0x17], xmm0
call qword [sym.imp.USER32.dll_SendMessageW]
mov rcx, qword [rbx + 0x30]
lea rax, str.Priority
lea r9, [rbp - 0x69]
mov qword [rbp - 0x51], rax
xor r8d, r8d
mov qword [rbp - 0x69], 0x101
mov edx, 0x104d
mov dword [rbp - 0x61], esi
mov dword [rbp - 0x35], esi
call qword [sym.imp.USER32.dll_SendMessageW]
mov rcx, qword [rbx + 0x30]
lea rax, str.Cycles
lea r9, [rbp - 0x69]
mov qword [rbp - 0x51], rax
xor r8d, r8d
mov dword [rbp - 0x69], 0x101
mov edx, 0x104d
mov qword [rbp - 0x65], 1
mov dword [rbp - 0x35], esi
call qword [sym.imp.USER32.dll_SendMessageW]
mov rcx, qword [rbx + 0x30]
lea rax, str.Cycles_delta
lea r9, [rbp - 0x69]
mov qword [rbp - 0x51], rax
xor r8d, r8d
mov dword [rbp - 0x69], 0x101
mov edx, 0x104d
mov qword [rbp - 0x65], 2
mov dword [rbp - 0x35], esi
call qword [sym.imp.USER32.dll_SendMessageW]
lea rax, [0x1401c4510]
mov dword ds:[rbp - 0x69], 0x101
mov qword [rbp - 0x51], rax
mov qword [rbp - 0x65], 3
mov dword [rbp - 0x35], esi
mov rcx, qword [rbx + 0x30]
lea r9, [rbp - 0x69]
xor r8d, r8d
mov edx, 0x104d
call qword [sym.imp.USER32.dll_SendMessageW]
mov rcx, qword [rbx + 0x30]
lea rax, str.Kernel_delta
lea r9, [rbp - 0x69]
mov qword [rbp - 0x51], rax
xor r8d, r8d
mov dword [rbp - 0x69], 0x101
mov edx, 0x104d
mov qword [rbp - 0x65], 4
mov dword [rbp - 0x35], esi
call qword [sym.imp.USER32.dll_SendMessageW]
mov rcx, qword [rbx + 0x30]
lea rax, [0x1401c4548]
lea r9, [rbp - 0x69]
mov qword [rbp - 0x51], rax
xor r8d, r8d
mov dword [rbp - 0x69], 0x101
mov edx, 0x104d
mov qword [rbp - 0x65], 5
mov dword [rbp - 0x35], esi
call qword [sym.imp.USER32.dll_SendMessageW]
mov rcx, qword [rbx + 0x30]
lea rax, str.User_delta
lea r9, [rbp - 0x69]
mov qword [rbp - 0x51], rax
xor r8d, r8d
mov dword [rbp - 0x69], 0x101
mov edx, 0x104d
mov qword [rbp - 0x65], 6
mov dword [rbp - 0x35], esi
call qword [sym.imp.USER32.dll_SendMessageW]
mov rcx, qword [rbx + 0x30]
lea rax, str.Total_time
lea r9, [rbp - 0x69]
mov qword [rbp - 0x51], rax
xor r8d, r8d
mov dword [rbp - 0x69], 0x101
mov edx, 0x104d
mov qword [rbp - 0x65], 7
mov dword [rbp - 0x35], esi
call qword [sym.imp.USER32.dll_SendMessageW]
mov rcx, qword ds:[rbx + 0x30]
lea rax, str.Total_delta
lea r9, [rbp - 0x69]
mov qword [rbp - 0x51], rax
xor r8d, r8d
mov dword [rbp - 0x69], 0x101
mov edx, 0x104d
mov qword [rbp - 0x65], 8
mov dword [rbp - 0x35], esi
call qword [sym.imp.USER32.dll_SendMessageW]
mov rcx, qword [rbx + 0x30]
lea rax, [0x1401bcaf8]
lea r9, [rbp - 0x69]
mov qword [rbp - 0x51], rax
xor r8d, r8d
mov dword [rbp - 0x69], 0x101
mov edx, 0x104d
mov qword [rbp - 0x65], 9
mov dword [rbp - 0x35], 1
call qword [sym.imp.USER32.dll_SendMessageW]
mov rcx, qword [rbx + 0x30]
lea rax, str.Private_bytes_delta
lea r9, [rbp - 0x69]
mov qword [rbp - 0x51], rax
xor r8d, r8d
mov dword [rbp - 0x69], 0x101
mov edx, 0x104d
mov qword [rbp - 0x65], 0xa
mov dword [rbp - 0x35], 1
call qword [sym.imp.USER32.dll_SendMessageW]
lea rax, str.Peak_private_bytes
mov dword [rbp - 0x69], 0x101
mov qword [rbp - 0x51], rax
lea r9, [rbp - 0x69]
mov qword [rbp - 0x65], 0xb
mov dword [rbp - 0x35], 1
mov rcx, qword [rbx + 0x30]
xor r8d, r8d
mov edx, 0x104d
call qword [sym.imp.USER32.dll_SendMessageW]
mov rcx, qword ds:[rbx + 0x30]
lea rax, [0x1401b7918]
lea r9, [rbp - 0x69]
mov qword [rbp - 0x51], rax
xor r8d, r8d
mov dword [rbp - 0x69], 0x101
mov edx, 0x104d
mov qword [rbp - 0x65], 0xc
mov dword [rbp - 0x35], 1
call qword [sym.imp.USER32.dll_SendMessageW]
mov rcx, qword [rbx + 0x30]
lea rax, str.Peak_virtual_size
lea r9, [rbp - 0x69]
mov qword [rbp - 0x51], rax
xor r8d, r8d
mov dword [rbp - 0x69], 0x101
mov edx, 0x104d
mov qword [rbp - 0x65], 0xd
mov dword [rbp - 0x35], 1
call qword [sym.imp.USER32.dll_SendMessageW]
mov rcx, qword [rbx + 0x30]
lea rax, [0x1401c29d0]
lea r9, [rbp - 0x69]
mov qword [rbp - 0x51], rax
xor r8d, r8d
mov dword [rbp - 0x69], 0x101
mov edx, 0x104d
mov qword [rbp - 0x65], 0xe
mov dword [rbp - 0x35], 1
call qword [sym.imp.USER32.dll_SendMessageW]
mov rcx, qword [rbx + 0x30]
lea rax, [0x1401c2d00]
lea r9, [rbp - 0x69]
mov qword [rbp - 0x51], rax
xor r8d, r8d
mov dword [rbp - 0x69], 0x101
mov edx, 0x104d
mov qword [rbp - 0x65], 0xf
mov dword [rbp - 0x35], 1
call qword [sym.imp.USER32.dll_SendMessageW]
mov rcx, qword ds:[rbx + 0x30]
lea rax, [0x1401bcb38]
lea r9, [rbp - 0x69]
mov qword [rbp - 0x51], rax
xor r8d, r8d
mov dword [rbp - 0x69], 0x101
mov edx, 0x104d
mov qword [rbp - 0x65], 0x10
mov dword [rbp - 0x35], 1
call qword [sym.imp.USER32.dll_SendMessageW]
mov rcx, qword [rbx + 0x30]
lea rax, str.Peak_working_set
lea r9, [rbp - 0x69]
mov qword [rbp - 0x51], rax
xor r8d, r8d
mov dword [rbp - 0x69], 0x101
mov edx, 0x104d
mov qword [rbp - 0x65], 0x11
mov dword [rbp - 0x35], 1
call qword [sym.imp.USER32.dll_SendMessageW]
mov rcx, qword [rbx + 0x30]
lea rax, str.Private_WS
lea r9, [rbp - 0x69]
mov qword [rbp - 0x51], rax
xor r8d, r8d
mov dword [rbp - 0x69], 0x101
mov edx, 0x104d
mov qword [rbp - 0x65], 0x12
mov dword [rbp - 0x35], 1
call qword [sym.imp.USER32.dll_SendMessageW]
lea rax, str.Shareable_WS
mov dword [rbp - 0x69], 0x101
mov qword [rbp - 0x51], rax
lea r9, [rbp - 0x69]
mov qword [rbp - 0x65], 0x13
xor r8d, r8d
mov dword [rbp - 0x35], 1
mov rcx, qword [rbx + 0x30]
mov edx, 0x104d
call qword [sym.imp.USER32.dll_SendMessageW]
mov rcx, qword ds:[rbx + 0x30]
lea rax, str.Shared_WS
lea r9, [rbp - 0x69]
mov qword [rbp - 0x51], rax
xor r8d, r8d
mov dword [rbp - 0x69], 0x101
mov edx, 0x104d
mov qword [rbp - 0x65], 0x14
mov dword [rbp - 0x35], 1
call qword [sym.imp.USER32.dll_SendMessageW]
mov rcx, qword [rbx + 0x30]
lea rax, str.Paged_pool_bytes
lea r9, [rbp - 0x69]
mov qword [rbp - 0x51], rax
xor r8d, r8d
mov dword [rbp - 0x69], 0x101
mov edx, 0x104d
mov qword [rbp - 0x65], 0x27
mov dword [rbp - 0x35], 1
call qword [sym.imp.USER32.dll_SendMessageW]
mov rcx, qword [rbx + 0x30]
lea rax, str.Peak_paged_pool_bytes
lea r9, [rbp - 0x69]
mov qword [rbp - 0x51], rax
xor r8d, r8d
mov dword [rbp - 0x69], 0x101
mov edx, 0x104d
mov qword [rbp - 0x65], 0x28
mov dword [rbp - 0x35], 1
call qword [sym.imp.USER32.dll_SendMessageW]
mov rcx, qword [rbx + 0x30]
lea rax, str.Nonpaged_pool_bytes
lea r9, [rbp - 0x69]
mov qword [rbp - 0x51], rax
xor r8d, r8d
mov dword [rbp - 0x69], 0x101
mov edx, 0x104d
mov qword [rbp - 0x65], 0x29
mov dword [rbp - 0x35], 1
call qword [sym.imp.USER32.dll_SendMessageW]
mov rcx, qword ds:[rbx + 0x30]
lea rax, str.Peak_nonpaged_pool_bytes
lea r9, [rbp - 0x69]
mov qword [rbp - 0x51], rax
xor r8d, r8d
mov dword [rbp - 0x69], 0x101
mov edx, 0x104d
mov qword [rbp - 0x65], 0x2a
mov dword [rbp - 0x35], 1
call qword [sym.imp.USER32.dll_SendMessageW]
mov rcx, qword [rbx + 0x30]
lea rax, str.Page_priority
lea r9, [rbp - 0x69]
mov qword [rbp - 0x51], rax
xor r8d, r8d
mov dword [rbp - 0x69], 0x101
mov edx, 0x104d
mov qword [rbp - 0x65], 0x15
mov dword [rbp - 0x35], 1
call qword [sym.imp.USER32.dll_SendMessageW]
mov rcx, qword [rbx + 0x30]
lea rax, [0x1401c4660]
lea r9, [rbp - 0x69]
mov qword [rbp - 0x51], rax
xor r8d, r8d
mov dword [rbp - 0x69], 0x101
mov edx, 0x104d
mov qword [rbp - 0x65], 0x16
mov dword [rbp - 0x35], 2
call qword [sym.imp.USER32.dll_SendMessageW]
lea rax, [0x1401c4670]
mov dword [rbp - 0x69], 0x101
mov qword [rbp - 0x51], rax
lea r9, [rbp - 0x69]
mov qword [rbp - 0x65], 0x17
xor r8d, r8d
mov dword [rbp - 0x35], 2
mov edx, 0x104d
mov rcx, qword [rbx + 0x30]
call qword [sym.imp.USER32.dll_SendMessageW]
mov rcx, qword ds:[rbx + 0x30]
lea rax, [0x1401c4688]
lea r9, [rbp - 0x69]
mov qword [rbp - 0x51], rax
xor r8d, r8d
mov dword [rbp - 0x69], 0x101
mov edx, 0x104d
mov qword [rbp - 0x65], 0x18
mov dword [rbp - 0x35], 2
call qword [sym.imp.USER32.dll_SendMessageW]
mov rcx, qword [rbx + 0x30]
lea rax, [0x1401c46a0]
lea r9, [rbp - 0x69]
mov qword [rbp - 0x51], rax
xor r8d, r8d
mov dword [rbp - 0x69], 0x101
mov edx, 0x104d
mov qword [rbp - 0x65], 0x19
mov dword [rbp - 0x35], 2
call qword [sym.imp.USER32.dll_SendMessageW]
mov rcx, qword [rbx + 0x30]
lea rax, [0x1401c46c8]
lea r9, [rbp - 0x69]
mov qword [rbp - 0x51], rax
xor r8d, r8d
mov dword [rbp - 0x69], 0x101
mov edx, 0x104d
mov qword [rbp - 0x65], 0x1a
mov dword [rbp - 0x35], 2
call qword [sym.imp.USER32.dll_SendMessageW]
mov rcx, qword [rbx + 0x30]
lea rax, [0x1401c46d8]
lea r9, [rbp - 0x69]
mov qword [rbp - 0x51], rax
xor r8d, r8d
mov dword [rbp - 0x69], 0x101
mov edx, 0x104d
mov qword [rbp - 0x65], 0x1b
mov dword [rbp - 0x35], 2
call qword [sym.imp.USER32.dll_SendMessageW]
mov rcx, qword ds:[rbx + 0x30]
lea rax, [0x1401c46f8]
lea r9, [rbp - 0x69]
mov qword [rbp - 0x51], rax
xor r8d, r8d
mov dword [rbp - 0x69], 0x101
mov edx, 0x104d
mov qword [rbp - 0x65], 0x1c
mov dword [rbp - 0x35], 2
call qword [sym.imp.USER32.dll_SendMessageW]
mov rcx, qword [rbx + 0x30]
lea rax, [0x1401c4710]
lea r9, [rbp - 0x69]
mov qword [rbp - 0x51], rax
xor r8d, r8d
mov dword [rbp - 0x69], 0x101
mov edx, 0x104d
mov qword [rbp - 0x65], 0x1d
mov dword [rbp - 0x35], 2
call qword [sym.imp.USER32.dll_SendMessageW]
mov rcx, qword [rbx + 0x30]
lea r9, [rbp - 0x69]
xor r8d, r8d
mov dword [rbp - 0x69], 0x101
mov edx, 0x104d
mov qword [rbp - 0x65], 0x1e
mov qword [rbp - 0x51], rdi
mov dword [rbp - 0x35], 2
call qword [sym.imp.USER32.dll_SendMessageW]
mov rcx, qword ds:[rbx + 0x30]
lea rax, [0x1401c4738]
lea r9, [rbp - 0x69]
mov qword [rbp - 0x51], rax
xor r8d, r8d
mov dword [rbp - 0x69], 0x101
mov edx, 0x104d
mov qword [rbp - 0x65], 0x1f
mov dword [rbp - 0x35], 2
call qword [sym.imp.USER32.dll_SendMessageW]
mov rcx, qword [rbx + 0x30]
lea rax, [0x1401c4750]
lea r9, [rbp - 0x69]
mov qword [rbp - 0x51], rax
xor r8d, r8d
mov dword [rbp - 0x69], 0x101
mov edx, 0x104d
mov qword [rbp - 0x65], 0x20
mov dword [rbp - 0x35], 2
call qword [sym.imp.USER32.dll_SendMessageW]
mov rcx, qword [rbx + 0x30]
lea rax, [0x1401c4768]
lea r9, [rbp - 0x69]
mov qword [rbp - 0x51], rax
xor r8d, r8d
mov dword [rbp - 0x69], 0x101
mov edx, 0x104d
mov qword [rbp - 0x65], 0x21
mov dword [rbp - 0x35], 2
call qword [sym.imp.USER32.dll_SendMessageW]
mov rcx, qword [rbx + 0x30]
lea rax, str.I_O_priority
lea r9, [rbp - 0x69]
mov qword [rbp - 0x51], rax
xor r8d, r8d
mov dword [rbp - 0x69], 0x101
mov edx, 0x104d
mov qword [rbp - 0x65], 0x22
mov dword [rbp - 0x35], 2
call qword [sym.imp.USER32.dll_SendMessageW]
mov rcx, qword ds:[rbx + 0x30]
lea rax, [0x1401b78f8]
lea r9, [rbp - 0x69]
mov qword [rbp - 0x51], rax
xor r8d, r8d
mov dword [rbp - 0x69], 0x101
mov edx, 0x104d
mov qword [rbp - 0x65], 0x23
mov dword [rbp - 0x35], 3
call qword [sym.imp.USER32.dll_SendMessageW]
mov rcx, qword [rbx + 0x30]
lea rax, str.Peak_handles
lea r9, [rbp - 0x69]
mov qword [rbp - 0x51], rax
xor r8d, r8d
mov dword [rbp - 0x69], 0x101
mov edx, 0x104d
mov qword [rbp - 0x65], 0x24
mov dword [rbp - 0x35], 3
call qword [sym.imp.USER32.dll_SendMessageW]
mov rcx, qword [rbx + 0x30]
lea rax, str.GDI_handles
lea r9, [rbp - 0x69]
mov qword [rbp - 0x51], rax
xor r8d, r8d
mov dword [rbp - 0x69], 0x101
mov edx, 0x104d
mov qword [rbp - 0x65], 0x25
mov dword [rbp - 0x35], 3
call qword [sym.imp.USER32.dll_SendMessageW]
mov rcx, qword [rbx + 0x30]
lea rax, str.USER_handles
lea r9, [rbp - 0x69]
mov qword [rbp - 0x51], rax
xor r8d, r8d
mov dword [rbp - 0x69], 0x101
mov edx, 0x104d
mov qword [rbp - 0x65], 0x26
mov dword [rbp - 0x35], 3
call qword [sym.imp.USER32.dll_SendMessageW]
cmp dword [sym.ProcessHacker.exe_WindowsVersion], 0x68
jb 0x1400bf2eb
mov rcx, qword [rbx + 0x30]
lea rax, str.Running_time
lea r9, [rbp - 0x69]
mov qword [rbp - 0x51], rax
xor r8d, r8d
mov dword [rbp - 0x69], 0x101
mov edx, 0x104d
mov qword [rbp - 0x65], 0x2b
mov dword [rbp - 0x35], 3
call qword [sym.imp.USER32.dll_SendMessageW]
mov rcx, qword [rbx + 0x30]
lea rax, str.Suspended_time
lea r9, [rbp - 0x69]
mov qword [rbp - 0x51], rax
xor r8d, r8d
mov dword [rbp - 0x69], 0x101
mov edx, 0x104d
mov qword [rbp - 0x65], 0x2c
mov dword [rbp - 0x35], 3
call qword [sym.imp.USER32.dll_SendMessageW]
mov rcx, qword [rbx + 0x30]
lea rax, str.Hang_count
lea r9, [rbp - 0x69]
mov qword [rbp - 0x51], rax
xor r8d, r8d
mov dword [rbp - 0x69], 0x101
mov edx, 0x104d
mov qword [rbp - 0x65], 0x2d
mov dword [rbp - 0x35], 3
call qword [sym.imp.USER32.dll_SendMessageW]
mov rcx, qword [rbx + 0x30]
lea rax, str.Ghost_count
lea r9, [rbp - 0x69]
mov qword [rbp - 0x51], rax
xor r8d, r8d
mov dword [rbp - 0x69], 0x101
mov edx, 0x104d
mov qword [rbp - 0x65], 0x2e
mov dword [rbp - 0x35], 3
call qword [sym.imp.USER32.dll_SendMessageW]
cmp dword [sym.ProcessHacker.exe_WindowsVersion], 0x68
jb 0x1400bf2eb
mov rcx, qword [rbx + 0x30]
lea rax, str.ContextSwitches
lea r9, [rbp - 0x69]
mov qword [rbp - 0x51], rax
xor r8d, r8d
mov dword [rbp - 0x69], 0x101
mov edx, 0x104d
mov qword [rbp - 0x65], 0x2f
mov dword [rbp - 0x35], 4
call qword [sym.imp.USER32.dll_SendMessageW]
mov rcx, qword [rbx + 0x30]
lea rax, str.NetworkTxRxBytes
lea r9, [rbp - 0x69]
mov qword [rbp - 0x51], rax
xor r8d, r8d
mov dword [rbp - 0x69], 0x101
mov edx, 0x104d
mov qword [rbp - 0x65], 0x30
mov dword [rbp - 0x35], 4
call qword [sym.imp.USER32.dll_SendMessageW]
cmp byte [0x140212e24], sil
je 0x1400bf31e
mov rax, qword [rbx + 0x48]
lea rdx, [rbp + 0x37]
mov qword [rbp + 0x3f], rax
lea rcx, [0x140214f70]
mov rax, qword [rbx + 0x30]
mov qword [rbp + 0x47], rax
mov dword [rbp + 0x37], esi
mov dword [rbp + 0x3b], 1
call sym.ProcessHacker.exe_PhInvokeCallback
lea r11, [rsp + 0xe0]
mov rbx, qword [r11 + 0x10]
mov rsi, qword [r11 + 0x18]
mov rdi, qword [r11 + 0x20]
mov rsp, r11
pop rbp
ret