Function at 0x140097040
Capabilities:
Get system information on windows

Disassembly:
mov qword [rsp + 0x18], rbx
mov qword [rsp + 0x20], rdi
push rbp
lea rbp, [rsp - 0x57]
sub rsp, 0xf0
movzx eax, byte [0x140159800]
lea rcx, [rbp - 0x79]
mov byte [rbp - 0x6f], al
xor r8d, r8d
mov eax, dword [0x140160110]
shl rax, 0xc
mov qword [rbp - 0x69], rax
lea edx, [r8 + 1]
mov dword [rbp - 0x79], 0x10c
call sym.ProcessHacker.exe_PhFormat
mov rcx, rax
call sym.ProcessHacker.exe_PhAutoDereferenceObject
mov rcx, qword [0x14015e878]
mov edx, 0x522
mov r8, qword [rax + 8]
call qword [sym.imp.USER32.dll_SetDlgItemTextW]
movzx eax, byte [0x140159800]
lea rcx, [rbp - 0x79]
mov byte [rbp - 0x6f], al
xor r8d, r8d
mov eax, dword [0x140160118]
shl rax, 0xc
mov qword [rbp - 0x69], rax
lea edx, [r8 + 1]
mov dword [rbp - 0x79], 0x10c
call sym.ProcessHacker.exe_PhFormat
mov rcx, rax
call sym.ProcessHacker.exe_PhAutoDereferenceObject
mov rcx, qword [0x14015e878]
mov edx, 0x523
mov r8, qword [rax + 8]
call qword [sym.imp.USER32.dll_SetDlgItemTextW]
movzx eax, byte [0x140159800]
lea rcx, [rbp - 0x79]
mov byte [rbp - 0x6f], al
xor r8d, r8d
mov eax, dword [0x140160114]
shl rax, 0xc
mov qword [rbp - 0x69], rax
lea edx, [r8 + 1]
mov dword [rbp - 0x79], 0x10c
call sym.ProcessHacker.exe_PhFormat
mov rcx, rax
call sym.ProcessHacker.exe_PhAutoDereferenceObject
mov rcx, qword [0x14015e878]
mov edx, 0x524
mov r8, qword [rax + 8]
call qword [sym.imp.USER32.dll_SetDlgItemTextW]
mov ecx, dword [0x14015f02c]
xor r8d, r8d
sub ecx, dword [0x14016010c]
movzx eax, byte [0x140159800]
shl rcx, 0xc
mov qword [rbp - 0x69], rcx
lea edx, [r8 + 1]
lea rcx, [rbp - 0x79]
mov dword [rbp - 0x79], 0x10c
mov byte [rbp - 0x6f], al
call sym.ProcessHacker.exe_PhFormat
mov rcx, rax
call sym.ProcessHacker.exe_PhAutoDereferenceObject
mov rcx, qword [0x14015e878]
mov edx, 0x525
mov r8, qword [rax + 8]
call qword [sym.imp.USER32.dll_SetDlgItemTextW]
movzx eax, byte [0x140159800]
lea rcx, [rbp - 0x79]
mov byte [rbp - 0x6f], al
xor r8d, r8d
mov eax, dword [0x14015f02c]
shl rax, 0xc
mov qword [rbp - 0x69], rax
lea edx, [r8 + 1]
mov dword [rbp - 0x79], 0x10c
call sym.ProcessHacker.exe_PhFormat
mov rcx, rax
call sym.ProcessHacker.exe_PhAutoDereferenceObject
mov rcx, qword [0x14015e878]
mov edx, 0x526
mov r8, qword [rax + 8]
call qword [sym.imp.USER32.dll_SetDlgItemTextW]
mov rcx, qword [0x14015e9a8]
test rcx, rcx
je 0x14009722e
movzx eax, byte [0x140159800]
xor r8d, r8d
mov byte [rbp - 0x6f], al
mov eax, dword [0x14015f02c]
shl rax, 2
sub rcx, rax
mov dword [rbp - 0x79], 0x10c
shl rcx, 0xa
lea edx, [r8 + 1]
mov qword [rbp - 0x69], rcx
lea rcx, [rbp - 0x79]
call sym.ProcessHacker.exe_PhFormat
mov rcx, rax
call sym.ProcessHacker.exe_PhAutoDereferenceObject
mov r8, qword [rax + 8]
jmp 0x140097235
lea r8, [0x140131f38]
mov rcx, qword [0x14015e878]
mov edx, 0x533
call qword [sym.imp.USER32.dll_SetDlgItemTextW]
movzx eax, byte [0x140159800]
lea rcx, [rbp - 0x79]
mov byte [rbp - 0x6f], al
xor r8d, r8d
mov eax, dword [0x140160184]
shl rax, 0xc
mov qword [rbp - 0x69], rax
lea edx, [r8 + 1]
mov dword [rbp - 0x79], 0x10c
call sym.ProcessHacker.exe_PhFormat
mov rcx, rax
call sym.ProcessHacker.exe_PhAutoDereferenceObject
mov rcx, qword [0x14015e878]
mov edx, 0x527
mov r8, qword [rax + 8]
call qword [sym.imp.USER32.dll_SetDlgItemTextW]
movzx eax, byte [0x140159800]
lea rcx, [rbp - 0x79]
mov byte [rbp - 0x6f], al
xor r8d, r8d
mov eax, dword [0x14016016c]
shl rax, 0xc
mov qword [rbp - 0x69], rax
lea edx, [r8 + 1]
mov dword [rbp - 0x79], 0x10c
call sym.ProcessHacker.exe_PhFormat
mov rcx, rax
call sym.ProcessHacker.exe_PhAutoDereferenceObject
mov rcx, qword [0x14015e878]
mov edx, 0x528
mov r8, qword [rax + 8]
call qword [sym.imp.USER32.dll_SetDlgItemTextW]
movzx eax, byte [0x140159800]
lea rcx, [rbp - 0x79]
mov byte [rbp - 0x6f], al
xor r8d, r8d
mov eax, dword [0x14016018c]
shl rax, 0xc
mov qword [rbp - 0x69], rax
lea edx, [r8 + 1]
mov dword [rbp - 0x79], 0x10c
call sym.ProcessHacker.exe_PhFormat
mov rcx, rax
call sym.ProcessHacker.exe_PhAutoDereferenceObject
mov rcx, qword [0x14015e878]
mov edx, 0x529
mov r8, qword [rax + 8]
call qword [sym.imp.USER32.dll_SetDlgItemTextW]
movzx eax, byte [0x140159800]
lea rcx, [rbp - 0x79]
mov byte [rbp - 0x6f], al
xor r8d, r8d
mov eax, dword [0x140160188]
shl rax, 0xc
mov qword [rbp - 0x69], rax
lea edx, [r8 + 1]
mov dword [rbp - 0x79], 0x10c
call sym.ProcessHacker.exe_PhFormat
mov rcx, rax
call sym.ProcessHacker.exe_PhAutoDereferenceObject
mov rcx, qword [0x14015e878]
mov edx, 0x52a
mov r8, qword [rax + 8]
call qword [sym.imp.USER32.dll_SetDlgItemTextW]
movzx eax, byte [0x140159800]
lea rcx, [rbp - 0x79]
mov byte [rbp - 0x6f], al
xor r8d, r8d
mov eax, dword [0x140160150]
shl rax, 0xc
mov qword [rbp - 0x69], rax
lea edx, [r8 + 1]
mov dword [rbp - 0x79], 0x10c
call sym.ProcessHacker.exe_PhFormat
mov rcx, rax
call sym.ProcessHacker.exe_PhAutoDereferenceObject
mov edx, 0x52b
mov r8, qword [rax + 8]
mov rcx, qword [0x14015e878]
call qword [sym.imp.USER32.dll_SetDlgItemTextW]
cmp dword [0x14015eb74], 1
jbe 0x140097400
mov eax, dword [0x14015e88c]
lea rcx, [rbp - 0x79]
xor r8d, r8d
mov dword [rbp - 0x79], 0x10009
mov qword [rbp - 0x69], rax
lea edx, [r8 + 1]
call sym.ProcessHacker.exe_PhFormat
mov rcx, rax
call sym.ProcessHacker.exe_PhAutoDereferenceObject
mov r8, qword [rax + 8]
jmp 0x140097407
lea r8, [0x140131f38]
mov rcx, qword [0x14015e878]
mov edx, 0x52d
call qword [sym.imp.USER32.dll_SetDlgItemTextW]
cmp dword [0x14015eb74], 1
jbe 0x140097451
mov eax, dword [0x14015eb9c]
lea rcx, [rbp - 0x79]
xor r8d, r8d
mov dword [rbp - 0x79], 0x10009
mov qword [rbp - 0x69], rax
lea edx, [r8 + 1]
call sym.ProcessHacker.exe_PhFormat
mov rcx, rax
call sym.ProcessHacker.exe_PhAutoDereferenceObject
mov r8, qword [rax + 8]
jmp 0x140097458
lea r8, [0x140131f38]
mov rcx, qword [0x14015e878]
mov edx, 0x52e
call qword [sym.imp.USER32.dll_SetDlgItemTextW]
movzx eax, byte [0x140159800]
lea rcx, [rbp - 0x79]
mov byte [rbp - 0x6f], al
xor r8d, r8d
mov eax, dword [0x140160154]
shl rax, 0xc
mov qword [rbp - 0x69], rax
lea edx, [r8 + 1]
mov dword [rbp - 0x79], 0x10c
call sym.ProcessHacker.exe_PhFormat
mov rcx, rax
call sym.ProcessHacker.exe_PhAutoDereferenceObject
mov rcx, qword [0x14015e878]
mov edx, 0x52f
mov r8, qword [rax + 8]
call qword [sym.imp.USER32.dll_SetDlgItemTextW]
cmp dword [0x14015eb74], 1
jbe 0x1400974ef
mov eax, dword [0x14015e88c]
lea rcx, [rbp - 0x79]
xor r8d, r8d
mov dword [rbp - 0x79], 0x10009
mov qword [rbp - 0x69], rax
lea edx, [r8 + 1]
call sym.ProcessHacker.exe_PhFormat
mov rcx, rax
call sym.ProcessHacker.exe_PhAutoDereferenceObject
mov r8, qword [rax + 8]
jmp 0x1400974f6
lea r8, [0x140131f38]
mov rcx, qword [0x14015e878]
mov edx, 0x531
call qword [sym.imp.USER32.dll_SetDlgItemTextW]
cmp dword [0x14015eb74], 1
jbe 0x140097540
mov eax, dword [0x14015e9e4]
lea rcx, [rbp - 0x79]
xor r8d, r8d
mov dword [rbp - 0x79], 0x10009
mov qword [rbp - 0x69], rax
lea edx, [r8 + 1]
call sym.ProcessHacker.exe_PhFormat
mov rcx, rax
call sym.ProcessHacker.exe_PhAutoDereferenceObject
mov r8, qword [rax + 8]
jmp 0x140097547
lea r8, [0x140131f38]
mov rcx, qword [0x14015e878]
mov edx, 0x532
call qword [sym.imp.USER32.dll_SetDlgItemTextW]
cmp byte [0x14015d715], 0
je 0x1400975f3
cmp qword [0x14015eb78], 0
jne 0x14009757a
cmp qword [0x14015eb90], 0
je 0x1400975f3
lea rdx, [rbp + 0x6f]
lea rcx, [rbp + 0x67]
call fcn.140097ef0
movzx eax, byte [0x140159800]
lea rcx, [rbp - 0x79]
xor r8d, r8d
mov byte [rbp - 0x6f], al
mov rax, qword [rbp + 0x67]
mov dword [rbp - 0x79], 0x10c
mov qword [rbp - 0x69], rax
lea edx, [r8 + 1]
call sym.ProcessHacker.exe_PhFormat
mov rcx, rax
call sym.ProcessHacker.exe_PhAutoDereferenceObject
xor r8d, r8d
mov dword [rbp - 0x79], 0x10c
lea rcx, [rbp - 0x79]
mov rbx, qword [rax + 8]
movzx eax, byte [0x140159800]
lea edx, [r8 + 1]
mov byte [rbp - 0x6f], al
mov rax, qword [rbp + 0x6f]
mov qword [rbp - 0x69], rax
call sym.ProcessHacker.exe_PhFormat
mov rcx, rax
call sym.ProcessHacker.exe_PhAutoDereferenceObject
mov rdi, qword [rax + 8]
jmp 0x14009760e
cmp qword [0x14015c480], 0
lea rbx, str.no_driver
je 0x14009760b
lea rbx, str.no_symbols
mov rdi, rbx
mov rcx, qword [0x14015e878]
mov r8, rbx
mov edx, 0x52c
call qword [sym.imp.USER32.dll_SetDlgItemTextW]
mov rcx, qword [0x14015e878]
mov r8, rdi
mov edx, 0x530
call qword [sym.imp.USER32.dll_SetDlgItemTextW]
cmp dword [0x14015eb74], 1
jbe 0x140097670
mov eax, dword [0x14015eb84]
lea rcx, [rbp - 0x79]
xor r8d, r8d
mov dword [rbp - 0x79], 0x10009
mov qword [rbp - 0x69], rax
lea edx, [r8 + 1]
call sym.ProcessHacker.exe_PhFormat
mov rcx, rax
call sym.ProcessHacker.exe_PhAutoDereferenceObject
mov r8, qword [rax + 8]
jmp 0x140097677
lea r8, [0x140131f38]
mov rcx, qword [0x14015e878]
mov edx, 0x558
call qword [sym.imp.USER32.dll_SetDlgItemTextW]
cmp dword [0x14015eb74], 1
jbe 0x1400976c1
mov eax, dword [0x14015e884]
lea rcx, [rbp - 0x79]
xor r8d, r8d
mov dword [rbp - 0x79], 0x10009
mov qword [rbp - 0x69], rax
lea edx, [r8 + 1]
call sym.ProcessHacker.exe_PhFormat
mov rcx, rax
call sym.ProcessHacker.exe_PhAutoDereferenceObject
mov r8, qword [rax + 8]
jmp 0x1400976c8
lea r8, [0x140131f38]
mov rcx, qword [0x14015e878]
mov edx, 0x559
call qword [sym.imp.USER32.dll_SetDlgItemTextW]
cmp dword [0x14015eb74], 1
jbe 0x140097712
mov eax, dword [0x14015e844]
lea rcx, [rbp - 0x79]
xor r8d, r8d
mov dword [rbp - 0x79], 0x10009
mov qword [rbp - 0x69], rax
lea edx, [r8 + 1]
call sym.ProcessHacker.exe_PhFormat
mov rcx, rax
call sym.ProcessHacker.exe_PhAutoDereferenceObject
mov r8, qword [rax + 8]
jmp 0x140097719
lea r8, [0x140131f38]
mov rcx, qword [0x14015e878]
mov edx, 0x55a
call qword [sym.imp.USER32.dll_SetDlgItemTextW]
cmp dword [0x14015eb74], 1
jbe 0x140097763
mov eax, dword [0x14015e984]
lea rcx, [rbp - 0x79]
xor r8d, r8d
mov dword [rbp - 0x79], 0x10009
mov qword [rbp - 0x69], rax
lea edx, [r8 + 1]
call sym.ProcessHacker.exe_PhFormat
mov rcx, rax
call sym.ProcessHacker.exe_PhAutoDereferenceObject
mov r8, qword [rax + 8]
jmp 0x14009776a
lea r8, [0x140131f38]
mov rcx, qword [0x14015e878]
mov edx, 0x55b
call qword [sym.imp.USER32.dll_SetDlgItemTextW]
cmp dword [sym.ProcessHacker.exe_WindowsVersion], 0x3c
jb 0x140097d47
xor r9d, r9d
lea rdx, [rbp - 0x59]
mov r8d, 0xb0
lea ecx, [r9 + 0x50]
call qword [sym.imp.ntdll.dll_NtQuerySystemInformation]
test eax, eax
js 0x140097be9
movzx eax, byte [0x140159800]
lea rcx, [rbp - 0x79]
mov rbx, qword [rbp + 7]
xor r8d, r8d
add rbx, qword [rbp - 1]
add rbx, qword [rbp - 9]
add rbx, qword [rbp - 0x11]
add rbx, qword [rbp - 0x19]
lea edx, [r8 + 1]
add rbx, qword [rbp - 0x21]
add rbx, qword [rbp - 0x29]
add rbx, qword [rbp - 0x31]
mov byte [rbp - 0x6f], al
mov rax, qword [rbp - 0x59]
shl rax, 0xc
mov dword [rbp - 0x79], 0x10c
mov qword [rbp - 0x69], rax
call sym.ProcessHacker.exe_PhFormat
mov rcx, rax
call sym.ProcessHacker.exe_PhAutoDereferenceObject
mov rcx, qword [0x14015e878]
mov edx, 0x534
mov r8, qword [rax + 8]
call qword [sym.imp.USER32.dll_SetDlgItemTextW]
movzx eax, byte [0x140159800]
lea rcx, [rbp - 0x79]
mov byte [rbp - 0x6f], al
xor r8d, r8d
mov rax, qword [rbp - 0x51]
shl rax, 0xc
mov qword [rbp - 0x69], rax
lea edx, [r8 + 1]
mov dword [rbp - 0x79], 0x10c
call sym.ProcessHacker.exe_PhFormat
mov rcx, rax
call sym.ProcessHacker.exe_PhAutoDereferenceObject
mov rcx, qword [0x14015e878]
mov edx, 0x535
mov r8, qword [rax + 8]
call qword [sym.imp.USER32.dll_SetDlgItemTextW]
movzx eax, byte [0x140159800]
lea rcx, [rbp - 0x79]
mov byte [rbp - 0x6f], al
xor r8d, r8d
mov rax, qword [rbp - 0x49]
shl rax, 0xc
mov qword [rbp - 0x69], rax
lea edx, [r8 + 1]
mov dword [rbp - 0x79], 0x10c
call sym.ProcessHacker.exe_PhFormat
mov rcx, rax
call sym.ProcessHacker.exe_PhAutoDereferenceObject
mov rcx, qword [0x14015e878]
mov edx, 0x536
mov r8, qword [rax + 8]
call qword [sym.imp.USER32.dll_SetDlgItemTextW]
movzx eax, byte [0x140159800]
lea rcx, [rbp - 0x79]
mov byte [rbp - 0x6f], al
xor r8d, r8d
mov rax, qword [rbp - 0x41]
shl rax, 0xc
mov qword [rbp - 0x69], rax
lea edx, [r8 + 1]
mov dword [rbp - 0x79], 0x10c
call sym.ProcessHacker.exe_PhFormat
mov rcx, rax
call sym.ProcessHacker.exe_PhAutoDereferenceObject
mov rcx, qword [0x14015e878]
mov edx, 0x537
mov r8, qword [rax + 8]
call qword [sym.imp.USER32.dll_SetDlgItemTextW]
movzx eax, byte [0x140159800]
lea rcx, [rbp - 0x79]
xor r8d, r8d
shl rbx, 0xc
mov dword [rbp - 0x79], 0x10c
mov byte [rbp - 0x6f], al
mov qword [rbp - 0x69], rbx
lea edx, [r8 + 1]
call sym.ProcessHacker.exe_PhFormat
mov rcx, rax
call sym.ProcessHacker.exe_PhAutoDereferenceObject
mov rcx, qword [0x14015e878]
mov edx, 0x539
mov r8, qword [rax + 8]
call qword [sym.imp.USER32.dll_SetDlgItemTextW]
movzx eax, byte [0x140159800]
lea rcx, [rbp - 0x79]
mov byte [rbp - 0x6f], al
xor r8d, r8d
mov rax, qword [rbp - 0x31]
shl rax, 0xc
mov qword [rbp - 0x69], rax
lea edx, [r8 + 1]
mov dword [rbp - 0x79], 0x10c
call sym.ProcessHacker.exe_PhFormat
mov rcx, rax
call sym.ProcessHacker.exe_PhAutoDereferenceObject
mov rcx, qword [0x14015e878]
mov edx, 0x542
mov r8, qword [rax + 8]
call qword [sym.imp.USER32.dll_SetDlgItemTextW]
movzx eax, byte [0x140159800]
lea rcx, [rbp - 0x79]
mov byte [rbp - 0x6f], al
xor r8d, r8d
mov rax, qword [rbp - 0x29]
shl rax, 0xc
mov qword [rbp - 0x69], rax
lea edx, [r8 + 1]
mov dword [rbp - 0x79], 0x10c
call sym.ProcessHacker.exe_PhFormat
mov rcx, rax
call sym.ProcessHacker.exe_PhAutoDereferenceObject
mov rcx, qword [0x14015e878]
mov edx, 0x543
mov r8, qword [rax + 8]
call qword [sym.imp.USER32.dll_SetDlgItemTextW]
movzx eax, byte [0x140159800]
lea rcx, [rbp - 0x79]
mov byte [rbp - 0x6f], al
xor r8d, r8d
mov rax, qword [rbp - 0x21]
shl rax, 0xc
mov qword [rbp - 0x69], rax
lea edx, [r8 + 1]
mov dword [rbp - 0x79], 0x10c
call sym.ProcessHacker.exe_PhFormat
mov rcx, rax
call sym.ProcessHacker.exe_PhAutoDereferenceObject
mov rcx, qword [0x14015e878]
mov edx, 0x544
mov r8, qword [rax + 8]
call qword [sym.imp.USER32.dll_SetDlgItemTextW]
movzx eax, byte [0x140159800]
lea rcx, [rbp - 0x79]
mov byte [rbp - 0x6f], al
xor r8d, r8d
mov rax, qword [rbp - 0x19]
shl rax, 0xc
mov qword [rbp - 0x69], rax
lea edx, [r8 + 1]
mov dword [rbp - 0x79], 0x10c
call sym.ProcessHacker.exe_PhFormat
mov rcx, rax
call sym.ProcessHacker.exe_PhAutoDereferenceObject
mov rcx, qword [0x14015e878]
mov edx, 0x545
mov r8, qword [rax + 8]
call qword [sym.imp.USER32.dll_SetDlgItemTextW]
movzx eax, byte [0x140159800]
lea rcx, [rbp - 0x79]
mov byte [rbp - 0x6f], al
xor r8d, r8d
mov rax, qword [rbp - 0x11]
shl rax, 0xc
mov qword [rbp - 0x69], rax
lea edx, [r8 + 1]
mov dword [rbp - 0x79], 0x10c
call sym.ProcessHacker.exe_PhFormat
mov rcx, rax
call sym.ProcessHacker.exe_PhAutoDereferenceObject
mov rcx, qword [0x14015e878]
mov edx, 0x554
mov r8, qword [rax + 8]
call qword [sym.imp.USER32.dll_SetDlgItemTextW]
movzx eax, byte [0x140159800]
lea rcx, [rbp - 0x79]
mov byte [rbp - 0x6f], al
xor r8d, r8d
mov rax, qword [rbp - 9]
shl rax, 0xc
mov qword [rbp - 0x69], rax
lea edx, [r8 + 1]
mov dword [rbp - 0x79], 0x10c
call sym.ProcessHacker.exe_PhFormat
mov rcx, rax
call sym.ProcessHacker.exe_PhAutoDereferenceObject
mov rcx, qword [0x14015e878]
mov edx, 0x555
mov r8, qword [rax + 8]
call qword [sym.imp.USER32.dll_SetDlgItemTextW]
movzx eax, byte [0x140159800]
lea rcx, [rbp - 0x79]
mov byte [rbp - 0x6f], al
xor r8d, r8d
mov rax, qword [rbp - 1]
shl rax, 0xc
mov qword [rbp - 0x69], rax
lea edx, [r8 + 1]
mov dword [rbp - 0x79], 0x10c
call sym.ProcessHacker.exe_PhFormat
mov rcx, rax
call sym.ProcessHacker.exe_PhAutoDereferenceObject
mov rcx, qword [0x14015e878]
mov edx, 0x556
mov r8, qword [rax + 8]
call qword [sym.imp.USER32.dll_SetDlgItemTextW]
movzx eax, byte [0x140159800]
lea rcx, [rbp - 0x79]
mov byte [rbp - 0x6f], al
xor r8d, r8d
mov rax, qword [rbp + 7]
shl rax, 0xc
mov qword [rbp - 0x69], rax
lea edx, [r8 + 1]
mov dword [rbp - 0x79], 0x10c
call sym.ProcessHacker.exe_PhFormat
mov rcx, rax
call sym.ProcessHacker.exe_PhAutoDereferenceObject
mov rcx, qword [0x14015e878]
mov edx, 0x557
mov r8, qword [rax + 8]
call qword [sym.imp.USER32.dll_SetDlgItemTextW]
cmp dword [sym.ProcessHacker.exe_WindowsVersion], 0x3e
jb 0x140097bdf
movzx eax, byte [0x140159800]
lea rcx, [rbp - 0x79]
mov byte [rbp - 0x6f], al
xor r8d, r8d
mov rax, qword [rbp + 0x4f]
shl rax, 0xc
mov qword [rbp - 0x69], rax
lea edx, [r8 + 1]
mov dword [rbp - 0x79], 0x10c
call sym.ProcessHacker.exe_PhFormat
mov rcx, rax
call sym.ProcessHacker.exe_PhAutoDereferenceObject
mov edx, 0x55d
mov r8, qword [rax + 8]
jmp 0x140097d3a
mov edx, 0x55d
jmp 0x140097d33
mov rcx, qword [0x14015e878]
lea r8, [0x14012c230]
mov edx, 0x534
call qword [sym.imp.USER32.dll_SetDlgItemTextW]
mov rcx, qword [0x14015e878]
lea r8, [0x14012c230]
mov edx, 0x535
call qword [sym.imp.USER32.dll_SetDlgItemTextW]
mov rcx, qword [0x14015e878]
lea r8, [0x14012c230]
mov edx, 0x536
call qword [sym.imp.USER32.dll_SetDlgItemTextW]
mov rcx, qword [0x14015e878]
lea r8, [0x14012c230]
mov edx, 0x537
call qword [sym.imp.USER32.dll_SetDlgItemTextW]
mov rcx, qword [0x14015e878]
lea r8, [0x14012c230]
mov edx, 0x55d
call qword [sym.imp.USER32.dll_SetDlgItemTextW]
mov rcx, qword [0x14015e878]
lea r8, [0x14012c230]
mov edx, 0x539
call qword [sym.imp.USER32.dll_SetDlgItemTextW]
mov rcx, qword [0x14015e878]
lea r8, [0x14012c230]
mov edx, 0x542
call qword [sym.imp.USER32.dll_SetDlgItemTextW]
mov rcx, qword [0x14015e878]
lea r8, [0x14012c230]
mov edx, 0x543
call qword [sym.imp.USER32.dll_SetDlgItemTextW]
mov rcx, qword [0x14015e878]
lea r8, [0x14012c230]
mov edx, 0x544
call qword [sym.imp.USER32.dll_SetDlgItemTextW]
mov rcx, qword [0x14015e878]
lea r8, [0x14012c230]
mov edx, 0x545
call qword [sym.imp.USER32.dll_SetDlgItemTextW]
mov rcx, qword [0x14015e878]
lea r8, [0x14012c230]
mov edx, 0x554
call qword [sym.imp.USER32.dll_SetDlgItemTextW]
mov rcx, qword [0x14015e878]
lea r8, [0x14012c230]
mov edx, 0x555
call qword [sym.imp.USER32.dll_SetDlgItemTextW]
mov rcx, qword [0x14015e878]
lea r8, [0x14012c230]
mov edx, 0x556
call qword [sym.imp.USER32.dll_SetDlgItemTextW]
mov edx, 0x557
lea r8, [0x14012c230]
mov rcx, qword [0x14015e878]
call qword [sym.imp.USER32.dll_SetDlgItemTextW]
lea r11, [rsp + 0xf0]
mov rbx, qword [r11 + 0x20]
mov rdi, qword [r11 + 0x28]
mov rsp, r11
pop rbp
ret