Function at 0x4d56a0
Capabilities:
Get system information on windows

Disassembly:
push ebp
mov ebp, esp
and esp, 0xfffffff8
sub esp, 0xb4
mov eax, dword [0x62d040]
xor eax, esp
mov dword [esp + 0xb0], eax
mov al, byte [0x631938]
push ebx
mov byte [esp + 0x2a], al
mov ebx, 0x1000
mov eax, dword [0x636310]
mul ebx
push esi
push edi
push 0
mov dword [esp + 0x3c], eax
lea eax, [esp + 0x2c]
push 1
push eax
mov dword [esp + 0x34], 0x10c
mov dword [esp + 0x48], edx
call sym.SystemInformer.exe_PhFormat
push eax
call sym.SystemInformer.exe_PhAutoDereferenceObject
push 0x522
push dword [0x635124]
mov esi, dword [eax + 4]
call dword [sym.imp.USER32.dll_GetDlgItem]
test eax, eax
je 0x4d571a
push esi
push 0
push 0xc
push eax
call dword [sym.imp.USER32.dll_SendMessageW]
mov al, byte [0x631938]
mov byte [esp + 0x32], al
mov eax, dword [0x636318]
mul ebx
push 0
mov dword [esp + 0x3c], eax
lea eax, [esp + 0x2c]
push 1
push eax
mov dword [esp + 0x34], 0x10c
mov dword [esp + 0x48], edx
call sym.SystemInformer.exe_PhFormat
push eax
call sym.SystemInformer.exe_PhAutoDereferenceObject
push 0x523
push dword [0x635124]
mov esi, dword [eax + 4]
call dword [sym.imp.USER32.dll_GetDlgItem]
test eax, eax
je 0x4d5776
push esi
push 0
push 0xc
push eax
call dword [sym.imp.USER32.dll_SendMessageW]
mov al, byte [0x631938]
mov byte ds:[esp + 0x32], al
mov eax, dword [0x636314]
mul ebx
push 0
mov dword [esp + 0x3c], eax
lea eax, [esp + 0x2c]
push 1
push eax
mov dword [esp + 0x34], 0x10c
mov dword [esp + 0x48], edx
call sym.SystemInformer.exe_PhFormat
push eax
call sym.SystemInformer.exe_PhAutoDereferenceObject
push 0x524
push dword [0x635124]
mov esi, dword [eax + 4]
call dword [sym.imp.USER32.dll_GetDlgItem]
nop
test eax, eax
je 0x4d57d0
push esi
push 0
push 0xc
push eax
call dword [sym.imp.USER32.dll_SendMessageW]
mov al, byte [0x631938]
mov byte ds:[esp + 0x32], al
mov eax, dword [0x6337dc]
sub eax, dword [0x63630c]
mul ebx
push 0
mov dword [esp + 0x3c], eax
lea eax, [esp + 0x2c]
push 1
push eax
mov dword [esp + 0x34], 0x10c
mov dword [esp + 0x48], edx
call sym.SystemInformer.exe_PhFormat
push eax
call sym.SystemInformer.exe_PhAutoDereferenceObject
push 0x525
push dword [0x635124]
mov esi, dword [eax + 4]
call dword [sym.imp.USER32.dll_GetDlgItem]
nop
test eax, eax
je 0x4d5830
push esi
push 0
push 0xc
push eax
call dword [sym.imp.USER32.dll_SendMessageW]
mov al, byte [0x631938]
mov byte [esp + 0x32], al
mov eax, dword [0x6337dc]
mul ebx
push 0
mov dword [esp + 0x3c], eax
lea eax, [esp + 0x2c]
push 1
push eax
mov dword [esp + 0x34], 0x10c
mov dword [esp + 0x48], edx
call sym.SystemInformer.exe_PhFormat
push eax
call sym.SystemInformer.exe_PhAutoDereferenceObject
push 0x526
push dword [0x635124]
mov esi, dword [eax + 4]
call dword [sym.imp.USER32.dll_GetDlgItem]
test eax, eax
je 0x4d5889
push esi
push 0
push 0xc
push eax
call dword [sym.imp.USER32.dll_SendMessageW]
mov ecx, dword [0x6351d8]
mov eax, ecx
mov edx, dword [0x6351dc]
or eax, edx
je 0x4d58e7
mov al, byte [0x631938]
push 0
mov byte [esp + 0x36], al
lea eax, [esp + 0x2c]
push 1
push eax
mov dword [esp + 0x34], 0x10c
mov dword [esp + 0x44], ecx
mov dword [esp + 0x48], edx
call sym.SystemInformer.exe_PhFormat
push eax
call sym.SystemInformer.exe_PhAutoDereferenceObject
push 0x533
push dword [0x635124]
mov esi, dword [eax + 4]
call dword [sym.imp.USER32.dll_GetDlgItem]
nop
test eax, eax
je 0x4d590c
push esi
jmp 0x4d5901
push 0x533
push dword [0x635124]
call dword [sym.imp.USER32.dll_GetDlgItem]
test eax, eax
je 0x4d590c
push 0x601288
push 0
push 0xc
push eax
call dword [sym.imp.USER32.dll_SendMessageW]
mov al, byte [0x631938]
mov byte [esp + 0x32], al
mov eax, dword [0x636384]
mul ebx
push 0
mov dword [esp + 0x3c], eax
lea eax, [esp + 0x2c]
push 1
push eax
mov dword [esp + 0x34], 0x10c
mov dword [esp + 0x48], edx
call sym.SystemInformer.exe_PhFormat
push eax
call sym.SystemInformer.exe_PhAutoDereferenceObject
push 0x527
push dword [0x635124]
mov esi, dword [eax + 4]
call dword [sym.imp.USER32.dll_GetDlgItem]
test eax, eax
je 0x4d5969
push esi
push 0
push 0xc
push eax
call dword [sym.imp.USER32.dll_SendMessageW]
mov al, byte [0x631938]
mov byte [esp + 0x32], al
mov eax, dword [0x63636c]
mul ebx
push 0
mov dword [esp + 0x3c], eax
lea eax, [esp + 0x2c]
push 1
push eax
mov dword [esp + 0x34], 0x10c
mov dword [esp + 0x48], edx
call sym.SystemInformer.exe_PhFormat
push eax
call sym.SystemInformer.exe_PhAutoDereferenceObject
push 0x528
push dword [0x635124]
mov esi, dword [eax + 4]
call dword [sym.imp.USER32.dll_GetDlgItem]
test eax, eax
je 0x4d59c6
push esi
push 0
push 0xc
push eax
call dword [sym.imp.USER32.dll_SendMessageW]
mov al, byte [0x631938]
mov byte [esp + 0x32], al
mov eax, dword [0x63638c]
mul ebx
push 0
mov dword [esp + 0x3c], eax
lea eax, [esp + 0x2c]
push 1
push eax
mov dword [esp + 0x34], 0x10c
mov dword [esp + 0x48], edx
call sym.SystemInformer.exe_PhFormat
push eax
call sym.SystemInformer.exe_PhAutoDereferenceObject
push 0x529
push dword [0x635124]
mov esi, dword [eax + 4]
call dword [sym.imp.USER32.dll_GetDlgItem]
test eax, eax
je 0x4d5a1e
push esi
push 0
push 0xc
push eax
call dword [sym.imp.USER32.dll_SendMessageW]
mov al, byte [0x631938]
mov byte [esp + 0x32], al
mov eax, dword [0x636388]
mul ebx
push 0
mov dword [esp + 0x3c], eax
lea eax, [esp + 0x2c]
push 1
push eax
mov dword [esp + 0x34], 0x10c
mov dword [esp + 0x48], edx
call sym.SystemInformer.exe_PhFormat
push eax
call sym.SystemInformer.exe_PhAutoDereferenceObject
push 0x52a
push dword [0x635124]
mov esi, dword [eax + 4]
call dword [sym.imp.USER32.dll_GetDlgItem]
test eax, eax
je 0x4d5a76
push esi
push 0
push 0xc
push eax
call dword [sym.imp.USER32.dll_SendMessageW]
mov al, byte [0x631938]
mov byte ds:[esp + 0x32], al
mov eax, dword [0x636350]
mul ebx
push 0
mov dword [esp + 0x3c], eax
lea eax, [esp + 0x2c]
push 1
push eax
mov dword [esp + 0x34], 0x10c
mov dword [esp + 0x48], edx
call sym.SystemInformer.exe_PhFormat
push eax
call sym.SystemInformer.exe_PhAutoDereferenceObject
push 0x52b
push dword [0x635124]
mov esi, dword [eax + 4]
call dword [sym.imp.USER32.dll_GetDlgItem]
nop
test eax, eax
je 0x4d5ad0
push esi
push 0
push 0xc
push eax
call dword [sym.imp.USER32.dll_SendMessageW]
cmp dword [0x635220], 1
jbe 0x4d5b27
mov eax, dword [0x635144]
push 0
mov dword [esp + 0x24], eax
lea eax, [esp + 0x14]
push 1
push eax
mov dword [esp + 0x1c], 0x10009
mov dword [esp + 0x30], 0
call sym.SystemInformer.exe_PhFormat
push eax
call sym.SystemInformer.exe_PhAutoDereferenceObject
push 0x52d
push dword [0x635124]
mov esi, dword [eax + 4]
call dword [sym.imp.USER32.dll_GetDlgItem]
nop
test eax, eax
je 0x4d5b4c
push esi
jmp 0x4d5b41
push 0x52d
push dword [0x635124]
call dword [sym.imp.USER32.dll_GetDlgItem]
test eax, eax
je 0x4d5b4c
push 0x601288
push 0
push 0xc
push eax
call dword [sym.imp.USER32.dll_SendMessageW]
cmp dword [0x635220], 1
jbe 0x4d5ba2
mov eax, dword [0x635200]
push 0
mov dword [esp + 0x24], eax
lea eax, [esp + 0x14]
push 1
push eax
mov dword [esp + 0x1c], 0x10009
mov dword [esp + 0x30], 0
call sym.SystemInformer.exe_PhFormat
push eax
call sym.SystemInformer.exe_PhAutoDereferenceObject
push 0x52e
push dword [0x635124]
mov esi, dword [eax + 4]
call dword [sym.imp.USER32.dll_GetDlgItem]
test eax, eax
je 0x4d5bc7
push esi
jmp 0x4d5bbc
push 0x52e
push dword [0x635124]
call dword [sym.imp.USER32.dll_GetDlgItem]
test eax, eax
je 0x4d5bc7
push 0x601288
push 0
push 0xc
push eax
call dword [sym.imp.USER32.dll_SendMessageW]
mov al, byte [0x631938]
mov byte [esp + 0x32], al
mov eax, dword [0x636354]
mul ebx
push 0
mov dword [esp + 0x3c], eax
lea eax, [esp + 0x2c]
push 1
push eax
mov dword [esp + 0x34], 0x10c
mov dword [esp + 0x48], edx
call sym.SystemInformer.exe_PhFormat
push eax
call sym.SystemInformer.exe_PhAutoDereferenceObject
push 0x52f
push dword [0x635124]
mov esi, dword [eax + 4]
call dword [sym.imp.USER32.dll_GetDlgItem]
test eax, eax
je 0x4d5c1f
push esi
push 0
push 0xc
push eax
call dword [sym.imp.USER32.dll_SendMessageW]
cmp dword [0x635220], 1
jbe 0x4d5c70
mov eax, dword [0x635144]
push 0
mov dword [esp + 0x24], eax
lea eax, [esp + 0x14]
push 1
push eax
mov dword [esp + 0x1c], 0x10009
mov dword [esp + 0x30], 0
call sym.SystemInformer.exe_PhFormat
push eax
call sym.SystemInformer.exe_PhAutoDereferenceObject
push 0x531
push dword [0x635124]
mov esi, dword [eax + 4]
call dword [sym.imp.USER32.dll_GetDlgItem]
test eax, eax
je 0x4d5c9a
push esi
jmp 0x4d5c8f
push 0x531
push dword [0x635124]
call dword [sym.imp.USER32.dll_GetDlgItem]
test eax, eax
je 0x4d5c9a
push 0x601288
push 0
push 0xc
push eax
call dword [sym.imp.USER32.dll_SendMessageW]
cmp dword [0x635220], 1
jbe 0x4d5ced
mov eax, dword [0x635164]
push 0
mov dword [esp + 0x54], eax
lea eax, [esp + 0x44]
push 1
push eax
mov dword [esp + 0x4c], 0x10009
mov dword [esp + 0x60], 0
call sym.SystemInformer.exe_PhFormat
push eax
call sym.SystemInformer.exe_PhAutoDereferenceObject
push 0x532
push dword [0x635124]
mov esi, dword [eax + 4]
call dword [sym.imp.USER32.dll_GetDlgItem]
test eax, eax
je 0x4d5d14
push esi
jmp 0x4d5d09
push 0x532
push dword [0x635124]
call dword [sym.imp.USER32.dll_GetDlgItem]
mov edi, edi
test eax, eax
je 0x4d5d14
push 0x601288
push 0
push 0xc
push eax
call dword [sym.imp.USER32.dll_SendMessageW]
cmp byte [0x633c36], 0
jmp 0x4d5d20
je 0x4d5e6a
mov eax, dword [0x6351d4]
or ecx, 0xffffffff
or esi, 0xffffffff
mov dword [esp + 0xb8], ecx
mov dword [esp + 0xb4], esi
test eax, eax
je 0x4d5d73
cmp dword [0x6355f0], 3
jl 0x4d5d73
push 0
push 4
lea ecx, [esp + 0xc0]
push ecx
push eax
push 0xffffffffffffffff
call fcn.00523c80
mov ecx, dword [esp + 0xb8]
mov esi, dword [esp + 0xb4]
cmp dword [0x62dbb0], 0x3e
jb 0x4d5da8
mov esi, dword [0x6337dc]
mov eax, esi
mul ebx
cmp edx, 4
ja 0x4d5d9d
jb 0x4d5d91
test eax, eax
jne 0x4d5d9d
shl esi, 0xc
mov dword [esp + 0xb4], esi
jmp 0x4d5ddc
xor esi, esi
mov dword [esp + 0xb4], esi
jmp 0x4d5ddc
mov eax, dword [0x6351f8]
test eax, eax
je 0x4d5ddc
cmp dword [0x6355f0], 3
jl 0x4d5ddc
push 0
push 4
lea ecx, [esp + 0xbc]
push ecx
push eax
push 0xffffffffffffffff
call fcn.00523c80
mov ecx, dword [esp + 0xb8]
mov esi, dword [esp + 0xb4]
lea esp, [esp]
cmp ecx, 0xffffffff
je 0x4d5e1b
mov al, byte [0x631938]
push 0
mov byte [esp + 0x36], al
lea eax, [esp + 0x2c]
push 1
push eax
mov dword [esp + 0x34], 0x10c
mov dword [esp + 0x44], ecx
mov dword [esp + 0x48], 0
call sym.SystemInformer.exe_PhFormat
push eax
call sym.SystemInformer.exe_PhAutoDereferenceObject
mov edi, dword [eax + 4]
jmp 0x4d5e2f
cmp dword [0x6355f0], 0
mov edi, str.no_symbols
mov eax, str.no_driver
cmove edi, eax
cmp esi, 0xffffffff
je 0x4d5e7d
mov al, byte [0x631938]
push 0
mov byte [esp + 0x1e], al
lea eax, [esp + 0x14]
push 1
push eax
mov dword [esp + 0x1c], 0x10c
mov dword [esp + 0x2c], esi
mov dword [esp + 0x30], 0
call sym.SystemInformer.exe_PhFormat
push eax
call sym.SystemInformer.exe_PhAutoDereferenceObject
mov esi, dword [eax + 4]
jmp 0x4d5e82
cmp dword [0x6355f0], 0
mov edi, str.no_symbols
jne 0x4d5e7d
mov edi, str.no_driver
mov esi, 0x5fe21c
push 0x52c
push dword [0x635124]
call dword [sym.imp.USER32.dll_GetDlgItem]
test eax, eax
je 0x4d5ea6
push edi
push 0
push 0xc
push eax
call dword [sym.imp.USER32.dll_SendMessageW]
push 0x530
push dword [0x635124]
call dword [sym.imp.USER32.dll_GetDlgItem]
test eax, eax
je 0x4d5ec7
push esi
push 0
push 0xc
push eax
call dword [sym.imp.USER32.dll_SendMessageW]
cmp dword [0x635220], 1
jbe 0x4d5f18
mov eax, dword [0x6351f4]
push 0
mov dword [esp + 0x54], eax
lea eax, [esp + 0x44]
push 1
push eax
mov dword [esp + 0x4c], 0x10009
mov dword [esp + 0x60], 0
call sym.SystemInformer.exe_PhFormat
push eax
call sym.SystemInformer.exe_PhAutoDereferenceObject
push 0x558
push dword [0x635124]
mov esi, dword [eax + 4]
call dword [sym.imp.USER32.dll_GetDlgItem]
test eax, eax
je 0x4d5f3d
push esi
jmp 0x4d5f32
push 0x558
push dword [0x635124]
call dword [sym.imp.USER32.dll_GetDlgItem]
test eax, eax
je 0x4d5f3d
push 0x601288
push 0
push 0xc
push eax
call dword [sym.imp.USER32.dll_SendMessageW]
cmp dword [0x635220], 1
jbe 0x4d5f8e
mov eax, dword [0x63513c]
push 0
mov dword [esp + 0x54], eax
lea eax, [esp + 0x44]
push 1
push eax
mov dword [esp + 0x4c], 0x10009
mov dword [esp + 0x60], 0
call sym.SystemInformer.exe_PhFormat
push eax
call sym.SystemInformer.exe_PhAutoDereferenceObject
push 0x559
push dword [0x635124]
mov esi, dword [eax + 4]
call dword [sym.imp.USER32.dll_GetDlgItem]
test eax, eax
je 0x4d5fb4
push esi
jmp 0x4d5fa9
push 0x559
push dword [0x635124]
call dword [sym.imp.USER32.dll_GetDlgItem]
nop
test eax, eax
je 0x4d5fb4
push 0x601288
push 0
push 0xc
push eax
call dword [sym.imp.USER32.dll_SendMessageW]
cmp dword [0x635220], 1
jbe 0x4d6007
mov eax, dword [0x635120]
push 0
mov dword [esp + 0x54], eax
lea eax, [esp + 0x44]
push 1
push eax
mov dword [esp + 0x4c], 0x10009
mov dword [esp + 0x60], 0
call sym.SystemInformer.exe_PhFormat
push eax
call sym.SystemInformer.exe_PhAutoDereferenceObject
push 0x55a
push dword [0x635124]
mov esi, dword [eax + 4]
call dword [sym.imp.USER32.dll_GetDlgItem]
nop
test eax, eax
je 0x4d602c
push esi
jmp 0x4d6021
push 0x55a
push dword [0x635124]
call dword [sym.imp.USER32.dll_GetDlgItem]
test eax, eax
je 0x4d602c
push 0x601288
push 0
push 0xc
push eax
call dword [sym.imp.USER32.dll_SendMessageW]
cmp dword [0x635220], 1
jbe 0x4d6082
mov eax, dword [0x63514c]
push 0
mov dword [esp + 0x54], eax
lea eax, [esp + 0x44]
push 1
push eax
mov dword [esp + 0x4c], 0x10009
mov dword [esp + 0x60], 0
call sym.SystemInformer.exe_PhFormat
push eax
call sym.SystemInformer.exe_PhAutoDereferenceObject
push 0x55b
push dword [0x635124]
mov esi, dword [eax + 4]
call dword [sym.imp.USER32.dll_GetDlgItem]
test eax, eax
je 0x4d60a7
push esi
jmp 0x4d609c
push 0x55b
push dword [0x635124]
call dword [sym.imp.USER32.dll_GetDlgItem]
test eax, eax
je 0x4d60a7
push 0x601288
push 0
push 0xc
push eax
call dword [sym.imp.USER32.dll_SendMessageW]
cmp dword [0x635220], 1
jbe 0x4d6107
mov al, byte [0x631938]
mov ecx, dword [0x63523c]
mov byte ds:[esp + 0x1a], al
mov eax, dword [0x635238]
push 0
mov dword [esp + 0x24], eax
lea eax, [esp + 0x14]
push 1
push eax
mov dword [esp + 0x1c], 0x10c
mov dword [esp + 0x30], ecx
call sym.SystemInformer.exe_PhFormat
push eax
call sym.SystemInformer.exe_PhAutoDereferenceObject
push 0x55c
push dword [0x635124]
mov esi, dword [eax + 4]
call dword [sym.imp.USER32.dll_GetDlgItem]
nop
test eax, eax
je 0x4d612c
push esi
jmp 0x4d6121
push 0x55c
push dword [0x635124]
call dword [sym.imp.USER32.dll_GetDlgItem]
test eax, eax
je 0x4d612c
push 0x601288
push 0
push 0xc
push eax
call dword [sym.imp.USER32.dll_SendMessageW]
cmp dword [0x635220], 1
jbe 0x4d618d
mov al, byte [0x631938]
mov ecx, dword [0x635134]
mov byte [esp + 0x1a], al
mov eax, dword [0x635130]
push 0
mov dword [esp + 0x24], eax
lea eax, [esp + 0x14]
push 1
push eax
mov dword [esp + 0x1c], 0x10c
mov dword [esp + 0x30], ecx
call sym.SystemInformer.exe_PhFormat
push eax
call sym.SystemInformer.exe_PhAutoDereferenceObject
push 0x55e
push dword [0x635124]
mov esi, dword [eax + 4]
call dword [sym.imp.USER32.dll_GetDlgItem]
test eax, eax
je 0x4d61b4
push esi
jmp 0x4d61a9
push 0x55e
push dword [0x635124]
call dword [sym.imp.USER32.dll_GetDlgItem]
mov edi, edi
test eax, eax
je 0x4d61b4
push 0x601288
push 0
push 0xc
push eax
call dword [sym.imp.USER32.dll_SendMessageW]
push 0
push 0x58
lea eax, [esp + 0x60]
push eax
push 0x50
call dword [sym.imp.ntdll.dll_NtQuerySystemInformation]
test eax, eax
js 0x4d6708
mov al, byte [0x631938]
mov esi, dword ds:[esp + 0x88]
add esi, dword [esp + 0x84]
add esi, dword [esp + 0x80]
add esi, dword [esp + 0x7c]
add esi, dword [esp + 0x78]
add esi, dword [esp + 0x74]
add esi, dword [esp + 0x70]
add esi, dword [esp + 0x6c]
mov byte [esp + 0x1a], al
mov eax, dword [esp + 0x58]
mul ebx
push 0
mov dword [esp + 0x24], eax
lea eax, [esp + 0x14]
push 1
push eax
mov dword [esp + 0x1c], 0x10c
mov dword [esp + 0x30], edx
call sym.SystemInformer.exe_PhFormat
push eax
call sym.SystemInformer.exe_PhAutoDereferenceObject
push 0x534
push dword [0x635124]
mov edi, dword [eax + 4]
call dword [sym.imp.USER32.dll_GetDlgItem]
nop
test eax, eax
je 0x4d6250
push edi
push 0
push 0xc
push eax
call dword [sym.imp.USER32.dll_SendMessageW]
mov al, byte [0x631938]
mov byte [esp + 0x1a], al
mov eax, dword [esp + 0x5c]
mul ebx
push 0
mov dword [esp + 0x24], eax
lea eax, [esp + 0x14]
push 1
push eax
mov dword [esp + 0x1c], 0x10c
mov dword [esp + 0x30], edx
call sym.SystemInformer.exe_PhFormat
push eax
call sym.SystemInformer.exe_PhAutoDereferenceObject
push 0x535
push dword [0x635124]
mov edi, dword [eax + 4]
call dword [sym.imp.USER32.dll_GetDlgItem]
test eax, eax
je 0x4d62a9
push edi
push 0
push 0xc
push eax
call dword [sym.imp.USER32.dll_SendMessageW]
mov al, byte [0x631938]
mov byte [esp + 0x1a], al
mov eax, dword [esp + 0x60]
mul ebx
push 0
mov dword [esp + 0x24], eax
lea eax, [esp + 0x14]
push 1
push eax
mov dword [esp + 0x1c], 0x10c
mov dword [esp + 0x30], edx
call sym.SystemInformer.exe_PhFormat
push eax
call sym.SystemInformer.exe_PhAutoDereferenceObject
push 0x536
push dword [0x635124]
mov edi, dword [eax + 4]
call dword [sym.imp.USER32.dll_GetDlgItem]
test eax, eax
je 0x4d6306
push edi
push 0
push 0xc
push eax
call dword [sym.imp.USER32.dll_SendMessageW]
mov al, byte [0x631938]
mov byte [esp + 0x1a], al
mov eax, dword [esp + 0x64]
mul ebx
push 0
mov dword [esp + 0x24], eax
lea eax, [esp + 0x14]
push 1
push eax
mov dword [esp + 0x1c], 0x10c
mov dword [esp + 0x30], edx
call sym.SystemInformer.exe_PhFormat
push eax
call sym.SystemInformer.exe_PhAutoDereferenceObject
push 0x537
push dword [0x635124]
mov edi, dword [eax + 4]
call dword [sym.imp.USER32.dll_GetDlgItem]
test eax, eax
je 0x4d635d
push edi
push 0
push 0xc
push eax
call dword [sym.imp.USER32.dll_SendMessageW]
mov cl, byte [0x631938]
mov eax, esi
mul ebx
push 0
mov dword [esp + 0x24], eax
lea eax, [esp + 0x14]
push 1
push eax
mov dword [esp + 0x1c], 0x10c
mov byte [esp + 0x26], cl
mov dword [esp + 0x30], edx
call sym.SystemInformer.exe_PhFormat
push eax
call sym.SystemInformer.exe_PhAutoDereferenceObject
push 0x539
push dword [0x635124]
mov esi, dword [eax + 4]
call dword [sym.imp.USER32.dll_GetDlgItem]
test eax, eax
je 0x4d63b6
push esi
push 0
push 0xc
push eax
call dword [sym.imp.USER32.dll_SendMessageW]
mov al, byte [0x631938]
mov byte ds:[esp + 0x1a], al
mov eax, dword [esp + 0x6c]
mul ebx
push 0
mov dword [esp + 0x24], eax
lea eax, [esp + 0x14]
push 1
push eax
mov dword [esp + 0x1c], 0x10c
mov dword [esp + 0x30], edx
call sym.SystemInformer.exe_PhFormat
push eax
call sym.SystemInformer.exe_PhAutoDereferenceObject
push 0x542
push dword [0x635124]
mov esi, dword [eax + 4]
call dword [sym.imp.USER32.dll_GetDlgItem]
nop
test eax, eax
je 0x4d6410
push esi
push 0
push 0xc
push eax
call dword [sym.imp.USER32.dll_SendMessageW]
mov al, byte [0x631938]
mov byte [esp + 0x1a], al
mov eax, dword [esp + 0x70]
mul ebx
push 0
mov dword [esp + 0x24], eax
lea eax, [esp + 0x14]
push 1
push eax
mov dword [esp + 0x1c], 0x10c
mov dword [esp + 0x30], edx
call sym.SystemInformer.exe_PhFormat
push eax
call sym.SystemInformer.exe_PhAutoDereferenceObject
push 0x543
push dword [0x635124]
mov esi, dword [eax + 4]
call dword [sym.imp.USER32.dll_GetDlgItem]
test eax, eax
je 0x4d6469
push esi
push 0
push 0xc
push eax
call dword [sym.imp.USER32.dll_SendMessageW]
mov al, byte [0x631938]
mov byte [esp + 0x1a], al
mov eax, dword [esp + 0x74]
mul ebx
push 0
mov dword [esp + 0x24], eax
lea eax, [esp + 0x14]
push 1
push eax
mov dword [esp + 0x1c], 0x10c
mov dword [esp + 0x30], edx
call sym.SystemInformer.exe_PhFormat
push eax
call sym.SystemInformer.exe_PhAutoDereferenceObject
push 0x544
push dword [0x635124]
mov esi, dword [eax + 4]
call dword [sym.imp.USER32.dll_GetDlgItem]
test eax, eax
je 0x4d64c6
push esi
push 0
push 0xc
push eax
call dword [sym.imp.USER32.dll_SendMessageW]
mov al, byte [0x631938]
mov byte [esp + 0x1a], al
mov eax, dword [esp + 0x78]
mul ebx
push 0
mov dword [esp + 0x24], eax
lea eax, [esp + 0x14]
push 1
push eax
mov dword [esp + 0x1c], 0x10c
mov dword [esp + 0x30], edx
call sym.SystemInformer.exe_PhFormat
push eax
call sym.SystemInformer.exe_PhAutoDereferenceObject
push 0x545
push dword [0x635124]
mov esi, dword [eax + 4]
call dword [sym.imp.USER32.dll_GetDlgItem]
test eax, eax
je 0x4d651d
push esi
push 0
push 0xc
push eax
call dword [sym.imp.USER32.dll_SendMessageW]
mov al, byte [0x631938]
mov byte [esp + 0x1a], al
mov eax, dword [esp + 0x7c]
mul ebx
push 0
mov dword [esp + 0x24], eax
lea eax, [esp + 0x14]
push 1
push eax
mov dword [esp + 0x1c], 0x10c
mov dword [esp + 0x30], edx
call sym.SystemInformer.exe_PhFormat
push eax
call sym.SystemInformer.exe_PhAutoDereferenceObject
push 0x554
push dword [0x635124]
mov esi, dword [eax + 4]
call dword [sym.imp.USER32.dll_GetDlgItem]
test eax, eax
je 0x4d6576
push esi
push 0
push 0xc
push eax
call dword [sym.imp.USER32.dll_SendMessageW]
mov al, byte [0x631938]
mov byte [esp + 0x1a], al
mov eax, dword [esp + 0x80]
mul ebx
push 0
mov dword [esp + 0x24], eax
lea eax, [esp + 0x14]
push 1
push eax
mov dword [esp + 0x1c], 0x10c
mov dword [esp + 0x30], edx
call sym.SystemInformer.exe_PhFormat
push eax
call sym.SystemInformer.exe_PhAutoDereferenceObject
push 0x555
push dword [0x635124]
mov esi, dword [eax + 4]
call dword [sym.imp.USER32.dll_GetDlgItem]
test eax, eax
je 0x4d65d6
push esi
push 0
push 0xc
push eax
call dword [sym.imp.USER32.dll_SendMessageW]
mov al, byte [0x631938]
mov byte [esp + 0x1a], al
mov eax, dword [esp + 0x84]
mul ebx
push 0
mov dword [esp + 0x24], eax
lea eax, [esp + 0x14]
push 1
push eax
mov dword [esp + 0x1c], 0x10c
mov dword [esp + 0x30], edx
call sym.SystemInformer.exe_PhFormat
push eax
call sym.SystemInformer.exe_PhAutoDereferenceObject
push 0x556
push dword [0x635124]
mov esi, dword [eax + 4]
call dword [sym.imp.USER32.dll_GetDlgItem]
test eax, eax
je 0x4d6636
push esi
push 0
push 0xc
push eax
call dword [sym.imp.USER32.dll_SendMessageW]
mov al, byte [0x631938]
mov byte [esp + 0x1a], al
mov eax, dword [esp + 0x88]
mul ebx
push 0
mov dword [esp + 0x24], eax
lea eax, [esp + 0x14]
push 1
push eax
mov dword [esp + 0x1c], 0x10c
mov dword [esp + 0x30], edx
call sym.SystemInformer.exe_PhFormat
push eax
call sym.SystemInformer.exe_PhAutoDereferenceObject
push 0x557
push dword [0x635124]
mov esi, dword [eax + 4]
call dword [sym.imp.USER32.dll_GetDlgItem]
test eax, eax
je 0x4d6696
push esi
push 0
push 0xc
push eax
call dword [sym.imp.USER32.dll_SendMessageW]
cmp dword [0x62dbb0], 0x3e
lea ecx, [ecx]
jb 0x4d66fe
mov al, byte [0x631938]
mov byte [esp + 0x1a], al
mov eax, dword [esp + 0xac]
mul ebx
push 0
mov dword [esp + 0x24], eax
lea eax, [esp + 0x14]
push 1
push eax
mov dword [esp + 0x1c], 0x10c
mov dword [esp + 0x30], edx
call sym.SystemInformer.exe_PhFormat
push eax
call sym.SystemInformer.exe_PhAutoDereferenceObject
push 0x55d
push dword [0x635124]
mov esi, dword [eax + 4]
call dword [sym.imp.USER32.dll_GetDlgItem]
test eax, eax
je 0x4d691f
push esi
jmp 0x4d6914
push 0x55d
jmp 0x4d68ff
push 0x534
push dword [0x635124]
call dword [sym.imp.USER32.dll_GetDlgItem]
test eax, eax
je 0x4d672d
push 0x5fe21c
push 0
push 0xc
push eax
call dword [sym.imp.USER32.dll_SendMessageW]
push 0x535
push dword [0x635124]
call dword [sym.imp.USER32.dll_GetDlgItem]
mov edi, edi
test eax, eax
je 0x4d6754
push 0x5fe21c
push 0
push 0xc
push eax
call dword [sym.imp.USER32.dll_SendMessageW]
push 0x536
push dword [0x635124]
call dword [sym.imp.USER32.dll_GetDlgItem]
test eax, eax
je 0x4d677a
push 0x5fe21c
push 0
push 0xc
push eax
call dword [sym.imp.USER32.dll_SendMessageW]
push 0x537
push dword [0x635124]
call dword [sym.imp.USER32.dll_GetDlgItem]
test eax, eax
je 0x4d679f
push 0x5fe21c
push 0
push 0xc
push eax
call dword [sym.imp.USER32.dll_SendMessageW]
push 0x55d
push dword [0x635124]
call dword [sym.imp.USER32.dll_GetDlgItem]
test eax, eax
je 0x4d67c6
push 0x5fe21c
push 0
push 0xc
push eax
call dword [sym.imp.USER32.dll_SendMessageW]
push 0x539
push dword [0x635124]
call dword [sym.imp.USER32.dll_GetDlgItem]
test eax, eax
je 0x4d67eb
push 0x5fe21c
push 0
push 0xc
push eax
call dword [sym.imp.USER32.dll_SendMessageW]
push 0x542
push dword [0x635124]
call dword [sym.imp.USER32.dll_GetDlgItem]
lea esp, [esp]
test eax, eax
je 0x4d6814
push 0x5fe21c
push 0
push 0xc
push eax
call dword [sym.imp.USER32.dll_SendMessageW]
push 0x543
push dword [0x635124]
call dword [sym.imp.USER32.dll_GetDlgItem]
test eax, eax
je 0x4d683a
push 0x5fe21c
push 0
push 0xc
push eax
call dword [sym.imp.USER32.dll_SendMessageW]
push 0x544
push dword [0x635124]
call dword [sym.imp.USER32.dll_GetDlgItem]
test eax, eax
je 0x4d685f
push 0x5fe21c
push 0
push 0xc
push eax
call dword [sym.imp.USER32.dll_SendMessageW]
push 0x545
push dword [0x635124]
call dword [sym.imp.USER32.dll_GetDlgItem]
test eax, eax
je 0x4d6886
push 0x5fe21c
push 0
push 0xc
push eax
call dword [sym.imp.USER32.dll_SendMessageW]
push 0x554
push dword [0x635124]
call dword [sym.imp.USER32.dll_GetDlgItem]
test eax, eax
je 0x4d68ab
push 0x5fe21c
push 0
push 0xc
push eax
call dword [sym.imp.USER32.dll_SendMessageW]
push 0x555
push dword [0x635124]
call dword [sym.imp.USER32.dll_GetDlgItem]
lea esp, [esp]
test eax, eax
je 0x4d68d4
push 0x5fe21c
push 0
push 0xc
push eax
call dword [sym.imp.USER32.dll_SendMessageW]
push 0x556
push dword [0x635124]
call dword [sym.imp.USER32.dll_GetDlgItem]
test eax, eax
je 0x4d68fa
push 0x5fe21c
push 0
push 0xc
push eax
call dword [sym.imp.USER32.dll_SendMessageW]
push 0x557
push dword [0x635124]
call dword [sym.imp.USER32.dll_GetDlgItem]
test eax, eax
je 0x4d691f
push 0x5fe21c
push 0
push 0xc
push eax
call dword [sym.imp.USER32.dll_SendMessageW]
mov ecx, dword [esp + 0xbc]
pop edi
pop esi
pop ebx
xor ecx, esp
call fcn.0057fcaf
mov esp, ebp
pop ebp
ret