Function at 0x49aba0
Capabilities:
Get system information on windows

Disassembly:
push ebp
mov ebp, esp
and esp, 0xfffffff8
sub esp, 0xb4
mov eax, dword [0x5ac004]
xor eax, esp
mov dword [esp + 0xb0], eax
mov al, byte [0x5b0a08]
push ebx
mov byte [esp + 0x2a], al
mov ebx, 0x1000
mov eax, dword [0x5b4770]
mul ebx
push esi
push edi
push 0
mov dword [esp + 0x3c], eax
lea eax, [esp + 0x2c]
push 1
push eax
mov dword [esp + 0x34], 0x10c
mov dword [esp + 0x48], edx
call sym.ProcessHacker.exe_PhFormat
push eax
call sym.ProcessHacker.exe_PhAutoDereferenceObject
push 0x522
push dword [0x5b370c]
mov esi, dword [eax + 4]
call dword [sym.imp.USER32.dll_GetDlgItem]
test eax, eax
je 0x49ac1a
push esi
push 0
push 0xc
push eax
call dword [sym.imp.USER32.dll_SendMessageW]
mov al, byte [0x5b0a08]
mov byte [esp + 0x32], al
mov eax, dword [0x5b4778]
mul ebx
push 0
mov dword [esp + 0x3c], eax
lea eax, [esp + 0x2c]
push 1
push eax
mov dword [esp + 0x34], 0x10c
mov dword [esp + 0x48], edx
call sym.ProcessHacker.exe_PhFormat
push eax
call sym.ProcessHacker.exe_PhAutoDereferenceObject
push 0x523
push dword [0x5b370c]
mov esi, dword [eax + 4]
call dword [sym.imp.USER32.dll_GetDlgItem]
test eax, eax
je 0x49ac76
push esi
push 0
push 0xc
push eax
call dword [sym.imp.USER32.dll_SendMessageW]
mov al, byte [0x5b0a08]
mov byte ds:[esp + 0x32], al
mov eax, dword [0x5b4774]
mul ebx
push 0
mov dword [esp + 0x3c], eax
lea eax, [esp + 0x2c]
push 1
push eax
mov dword [esp + 0x34], 0x10c
mov dword [esp + 0x48], edx
call sym.ProcessHacker.exe_PhFormat
push eax
call sym.ProcessHacker.exe_PhAutoDereferenceObject
push 0x524
push dword [0x5b370c]
mov esi, dword [eax + 4]
call dword [sym.imp.USER32.dll_GetDlgItem]
nop
test eax, eax
je 0x49acd0
push esi
push 0
push 0xc
push eax
call dword [sym.imp.USER32.dll_SendMessageW]
mov al, byte [0x5b0a08]
mov byte ds:[esp + 0x32], al
mov eax, dword [0x5b1d8c]
sub eax, dword [0x5b476c]
mul ebx
push 0
mov dword [esp + 0x3c], eax
lea eax, [esp + 0x2c]
push 1
push eax
mov dword [esp + 0x34], 0x10c
mov dword [esp + 0x48], edx
call sym.ProcessHacker.exe_PhFormat
push eax
call sym.ProcessHacker.exe_PhAutoDereferenceObject
push 0x525
push dword [0x5b370c]
mov esi, dword [eax + 4]
call dword [sym.imp.USER32.dll_GetDlgItem]
nop
test eax, eax
je 0x49ad30
push esi
push 0
push 0xc
push eax
call dword [sym.imp.USER32.dll_SendMessageW]
mov al, byte [0x5b0a08]
mov byte [esp + 0x32], al
mov eax, dword [0x5b1d8c]
mul ebx
push 0
mov dword [esp + 0x3c], eax
lea eax, [esp + 0x2c]
push 1
push eax
mov dword [esp + 0x34], 0x10c
mov dword [esp + 0x48], edx
call sym.ProcessHacker.exe_PhFormat
push eax
call sym.ProcessHacker.exe_PhAutoDereferenceObject
push 0x526
push dword [0x5b370c]
mov esi, dword [eax + 4]
call dword [sym.imp.USER32.dll_GetDlgItem]
test eax, eax
je 0x49ad89
push esi
push 0
push 0xc
push eax
call dword [sym.imp.USER32.dll_SendMessageW]
mov ecx, dword [0x5b37b8]
mov eax, ecx
mov edx, dword [0x5b37bc]
or eax, edx
je 0x49ade7
mov al, byte [0x5b0a08]
push 0
mov byte [esp + 0x36], al
lea eax, [esp + 0x2c]
push 1
push eax
mov dword [esp + 0x34], 0x10c
mov dword [esp + 0x44], ecx
mov dword [esp + 0x48], edx
call sym.ProcessHacker.exe_PhFormat
push eax
call sym.ProcessHacker.exe_PhAutoDereferenceObject
push 0x533
push dword [0x5b370c]
mov esi, dword [eax + 4]
call dword [sym.imp.USER32.dll_GetDlgItem]
nop
test eax, eax
je 0x49ae0c
push esi
jmp 0x49ae01
push 0x533
push dword [0x5b370c]
call dword [sym.imp.USER32.dll_GetDlgItem]
test eax, eax
je 0x49ae0c
push 0x57cb58
push 0
push 0xc
push eax
call dword [sym.imp.USER32.dll_SendMessageW]
mov al, byte [0x5b0a08]
mov byte [esp + 0x32], al
mov eax, dword [0x5b47e4]
mul ebx
push 0
mov dword [esp + 0x3c], eax
lea eax, [esp + 0x2c]
push 1
push eax
mov dword [esp + 0x34], 0x10c
mov dword [esp + 0x48], edx
call sym.ProcessHacker.exe_PhFormat
push eax
call sym.ProcessHacker.exe_PhAutoDereferenceObject
push 0x527
push dword [0x5b370c]
mov esi, dword [eax + 4]
call dword [sym.imp.USER32.dll_GetDlgItem]
test eax, eax
je 0x49ae69
push esi
push 0
push 0xc
push eax
call dword [sym.imp.USER32.dll_SendMessageW]
mov al, byte [0x5b0a08]
mov byte [esp + 0x32], al
mov eax, dword [0x5b47cc]
mul ebx
push 0
mov dword [esp + 0x3c], eax
lea eax, [esp + 0x2c]
push 1
push eax
mov dword [esp + 0x34], 0x10c
mov dword [esp + 0x48], edx
call sym.ProcessHacker.exe_PhFormat
push eax
call sym.ProcessHacker.exe_PhAutoDereferenceObject
push 0x528
push dword [0x5b370c]
mov esi, dword [eax + 4]
call dword [sym.imp.USER32.dll_GetDlgItem]
test eax, eax
je 0x49aec6
push esi
push 0
push 0xc
push eax
call dword [sym.imp.USER32.dll_SendMessageW]
mov al, byte [0x5b0a08]
mov byte [esp + 0x32], al
mov eax, dword [0x5b47ec]
mul ebx
push 0
mov dword [esp + 0x3c], eax
lea eax, [esp + 0x2c]
push 1
push eax
mov dword [esp + 0x34], 0x10c
mov dword [esp + 0x48], edx
call sym.ProcessHacker.exe_PhFormat
push eax
call sym.ProcessHacker.exe_PhAutoDereferenceObject
push 0x529
push dword [0x5b370c]
mov esi, dword [eax + 4]
call dword [sym.imp.USER32.dll_GetDlgItem]
test eax, eax
je 0x49af1e
push esi
push 0
push 0xc
push eax
call dword [sym.imp.USER32.dll_SendMessageW]
mov al, byte [0x5b0a08]
mov byte [esp + 0x32], al
mov eax, dword [0x5b47e8]
mul ebx
push 0
mov dword [esp + 0x3c], eax
lea eax, [esp + 0x2c]
push 1
push eax
mov dword [esp + 0x34], 0x10c
mov dword [esp + 0x48], edx
call sym.ProcessHacker.exe_PhFormat
push eax
call sym.ProcessHacker.exe_PhAutoDereferenceObject
push 0x52a
push dword [0x5b370c]
mov esi, dword [eax + 4]
call dword [sym.imp.USER32.dll_GetDlgItem]
test eax, eax
je 0x49af76
push esi
push 0
push 0xc
push eax
call dword [sym.imp.USER32.dll_SendMessageW]
mov al, byte [0x5b0a08]
mov byte ds:[esp + 0x32], al
mov eax, dword [0x5b47b0]
mul ebx
push 0
mov dword [esp + 0x3c], eax
lea eax, [esp + 0x2c]
push 1
push eax
mov dword [esp + 0x34], 0x10c
mov dword [esp + 0x48], edx
call sym.ProcessHacker.exe_PhFormat
push eax
call sym.ProcessHacker.exe_PhAutoDereferenceObject
push 0x52b
push dword [0x5b370c]
mov esi, dword [eax + 4]
call dword [sym.imp.USER32.dll_GetDlgItem]
nop
test eax, eax
je 0x49afd0
push esi
push 0
push 0xc
push eax
call dword [sym.imp.USER32.dll_SendMessageW]
cmp dword [0x5b3804], 1
jbe 0x49b027
mov eax, dword [0x5b371c]
push 0
mov dword [esp + 0x24], eax
lea eax, [esp + 0x14]
push 1
push eax
mov dword [esp + 0x1c], 0x10009
mov dword [esp + 0x30], 0
call sym.ProcessHacker.exe_PhFormat
push eax
call sym.ProcessHacker.exe_PhAutoDereferenceObject
push 0x52d
push dword [0x5b370c]
mov esi, dword [eax + 4]
call dword [sym.imp.USER32.dll_GetDlgItem]
nop
test eax, eax
je 0x49b04c
push esi
jmp 0x49b041
push 0x52d
push dword [0x5b370c]
call dword [sym.imp.USER32.dll_GetDlgItem]
test eax, eax
je 0x49b04c
push 0x57cb58
push 0
push 0xc
push eax
call dword [sym.imp.USER32.dll_SendMessageW]
cmp dword [0x5b3804], 1
jbe 0x49b0a2
mov eax, dword [0x5b37e4]
push 0
mov dword [esp + 0x24], eax
lea eax, [esp + 0x14]
push 1
push eax
mov dword [esp + 0x1c], 0x10009
mov dword [esp + 0x30], 0
call sym.ProcessHacker.exe_PhFormat
push eax
call sym.ProcessHacker.exe_PhAutoDereferenceObject
push 0x52e
push dword [0x5b370c]
mov esi, dword [eax + 4]
call dword [sym.imp.USER32.dll_GetDlgItem]
test eax, eax
je 0x49b0c7
push esi
jmp 0x49b0bc
push 0x52e
push dword [0x5b370c]
call dword [sym.imp.USER32.dll_GetDlgItem]
test eax, eax
je 0x49b0c7
push 0x57cb58
push 0
push 0xc
push eax
call dword [sym.imp.USER32.dll_SendMessageW]
mov al, byte [0x5b0a08]
mov byte [esp + 0x32], al
mov eax, dword [0x5b47b4]
mul ebx
push 0
mov dword [esp + 0x3c], eax
lea eax, [esp + 0x2c]
push 1
push eax
mov dword [esp + 0x34], 0x10c
mov dword [esp + 0x48], edx
call sym.ProcessHacker.exe_PhFormat
push eax
call sym.ProcessHacker.exe_PhAutoDereferenceObject
push 0x52f
push dword [0x5b370c]
mov esi, dword [eax + 4]
call dword [sym.imp.USER32.dll_GetDlgItem]
test eax, eax
je 0x49b11f
push esi
push 0
push 0xc
push eax
call dword [sym.imp.USER32.dll_SendMessageW]
cmp dword [0x5b3804], 1
jbe 0x49b170
mov eax, dword [0x5b371c]
push 0
mov dword [esp + 0x24], eax
lea eax, [esp + 0x14]
push 1
push eax
mov dword [esp + 0x1c], 0x10009
mov dword [esp + 0x30], 0
call sym.ProcessHacker.exe_PhFormat
push eax
call sym.ProcessHacker.exe_PhAutoDereferenceObject
push 0x531
push dword [0x5b370c]
mov esi, dword [eax + 4]
call dword [sym.imp.USER32.dll_GetDlgItem]
test eax, eax
je 0x49b19a
push esi
jmp 0x49b18f
push 0x531
push dword [0x5b370c]
call dword [sym.imp.USER32.dll_GetDlgItem]
test eax, eax
je 0x49b19a
push 0x57cb58
push 0
push 0xc
push eax
call dword [sym.imp.USER32.dll_SendMessageW]
cmp dword [0x5b3804], 1
jbe 0x49b1ed
mov eax, dword [0x5b3754]
push 0
mov dword [esp + 0x54], eax
lea eax, [esp + 0x44]
push 1
push eax
mov dword [esp + 0x4c], 0x10009
mov dword [esp + 0x60], 0
call sym.ProcessHacker.exe_PhFormat
push eax
call sym.ProcessHacker.exe_PhAutoDereferenceObject
push 0x532
push dword [0x5b370c]
mov esi, dword [eax + 4]
call dword [sym.imp.USER32.dll_GetDlgItem]
test eax, eax
je 0x49b214
push esi
jmp 0x49b209
push 0x532
push dword [0x5b370c]
call dword [sym.imp.USER32.dll_GetDlgItem]
mov edi, edi
test eax, eax
je 0x49b214
push 0x57cb58
push 0
push 0xc
push eax
call dword [sym.imp.USER32.dll_SendMessageW]
cmp byte [0x5b35f5], 0
jmp 0x49b220
je 0x49b331
mov edx, dword [0x5b37d0]
mov eax, dword [0x5b37dc]
test edx, edx
jne 0x49b23d
test eax, eax
je 0x49b331
or ecx, 0xffffffff
or esi, 0xffffffff
mov dword [esp + 0xb4], ecx
mov dword [esp + 0xb8], esi
test edx, edx
je 0x49b285
cmp dword [sym.ProcessHacker.exe_WindowsVersion], 0x3e
jae 0x49b285
push 0
push 4
lea eax, [esp + 0xbc]
push eax
push edx
push 0xffffffffffffffff
call fcn.004cc030
mov eax, dword [0x5b37dc]
mov ecx, dword [esp + 0xb4]
mov esi, dword [esp + 0xb8]
test eax, eax
je 0x49b2ab
push 0
push 4
lea ecx, [esp + 0xc0]
push ecx
push eax
push 0xffffffffffffffff
call fcn.004cc030
mov ecx, dword [esp + 0xb4]
mov esi, dword [esp + 0xb8]
cmp ecx, 0xffffffff
je 0x49b2ea
mov al, byte [0x5b0a08]
push 0
mov byte [esp + 0x36], al
lea eax, [esp + 0x2c]
push 1
push eax
mov dword [esp + 0x34], 0x10c
mov dword [esp + 0x44], ecx
mov dword [esp + 0x48], 0
call sym.ProcessHacker.exe_PhFormat
push eax
call sym.ProcessHacker.exe_PhAutoDereferenceObject
mov edi, dword [eax + 4]
jmp 0x49b2ef
mov edi, 0x56e3d4
cmp esi, 0xffffffff
je 0x49b32a
mov al, byte [0x5b0a08]
push 0
mov byte [esp + 0x1e], al
lea eax, [esp + 0x14]
push 1
push eax
mov dword [esp + 0x1c], 0x10c
mov dword [esp + 0x2c], esi
mov dword [esp + 0x30], 0
call sym.ProcessHacker.exe_PhFormat
push eax
call sym.ProcessHacker.exe_PhAutoDereferenceObject
mov esi, dword [eax + 4]
jmp 0x49b34a
mov esi, 0x56e3d4
jmp 0x49b34a
cmp dword [0x5b1f3c], 0
jne 0x49b343
mov esi, str.no_driver
mov edi, esi
jmp 0x49b34a
mov esi, str.no_symbols
mov edi, esi
push 0x52c
push dword [0x5b370c]
call dword [sym.imp.USER32.dll_GetDlgItem]
test eax, eax
je 0x49b36b
push edi
push 0
push 0xc
push eax
call dword [sym.imp.USER32.dll_SendMessageW]
push 0x530
push dword [0x5b370c]
call dword [sym.imp.USER32.dll_GetDlgItem]
lea esp, [esp]
test eax, eax
je 0x49b390
push esi
push 0
push 0xc
push eax
call dword [sym.imp.USER32.dll_SendMessageW]
cmp dword [0x5b3804], 1
jbe 0x49b3e7
mov eax, dword [0x5b37d8]
push 0
mov dword [esp + 0x54], eax
lea eax, [esp + 0x44]
push 1
push eax
mov dword [esp + 0x4c], 0x10009
mov dword [esp + 0x60], 0
call sym.ProcessHacker.exe_PhFormat
push eax
call sym.ProcessHacker.exe_PhAutoDereferenceObject
push 0x558
push dword [0x5b370c]
mov esi, dword [eax + 4]
call dword [sym.imp.USER32.dll_GetDlgItem]
nop
test eax, eax
je 0x49b40c
push esi
jmp 0x49b401
push 0x558
push dword [0x5b370c]
call dword [sym.imp.USER32.dll_GetDlgItem]
test eax, eax
je 0x49b40c
push 0x57cb58
push 0
push 0xc
push eax
call dword [sym.imp.USER32.dll_SendMessageW]
cmp dword [0x5b3804], 1
jbe 0x49b462
mov eax, dword [0x5b3714]
push 0
mov dword [esp + 0x54], eax
lea eax, [esp + 0x44]
push 1
push eax
mov dword [esp + 0x4c], 0x10009
mov dword [esp + 0x60], 0
call sym.ProcessHacker.exe_PhFormat
push eax
call sym.ProcessHacker.exe_PhAutoDereferenceObject
push 0x559
push dword [0x5b370c]
mov esi, dword [eax + 4]
call dword [sym.imp.USER32.dll_GetDlgItem]
test eax, eax
je 0x49b487
push esi
jmp 0x49b47c
push 0x559
push dword [0x5b370c]
call dword [sym.imp.USER32.dll_GetDlgItem]
test eax, eax
je 0x49b487
push 0x57cb58
push 0
push 0xc
push eax
call dword [sym.imp.USER32.dll_SendMessageW]
cmp dword [0x5b3804], 1
jbe 0x49b4d8
mov eax, dword [0x5b36f4]
push 0
mov dword [esp + 0x54], eax
lea eax, [esp + 0x44]
push 1
push eax
mov dword [esp + 0x4c], 0x10009
mov dword [esp + 0x60], 0
call sym.ProcessHacker.exe_PhFormat
push eax
call sym.ProcessHacker.exe_PhAutoDereferenceObject
push 0x55a
push dword [0x5b370c]
mov esi, dword [eax + 4]
call dword [sym.imp.USER32.dll_GetDlgItem]
test eax, eax
je 0x49b4fd
push esi
jmp 0x49b4f2
push 0x55a
push dword [0x5b370c]
call dword [sym.imp.USER32.dll_GetDlgItem]
test eax, eax
je 0x49b4fd
push 0x57cb58
push 0
push 0xc
push eax
call dword [sym.imp.USER32.dll_SendMessageW]
cmp dword [0x5b3804], 1
jbe 0x49b54e
mov eax, dword [0x5b3724]
push 0
mov dword [esp + 0x54], eax
lea eax, [esp + 0x44]
push 1
push eax
mov dword [esp + 0x4c], 0x10009
mov dword [esp + 0x60], 0
call sym.ProcessHacker.exe_PhFormat
push eax
call sym.ProcessHacker.exe_PhAutoDereferenceObject
push 0x55b
push dword [0x5b370c]
mov esi, dword [eax + 4]
call dword [sym.imp.USER32.dll_GetDlgItem]
test eax, eax
je 0x49b574
push esi
jmp 0x49b569
push 0x55b
push dword [0x5b370c]
call dword [sym.imp.USER32.dll_GetDlgItem]
nop
test eax, eax
je 0x49b574
push 0x57cb58
push 0
push 0xc
push eax
call dword [sym.imp.USER32.dll_SendMessageW]
cmp dword [0x5b3804], 1
jbe 0x49b5d0
mov al, byte [0x5b0a08]
mov ecx, dword [0x5b381c]
mov byte [esp + 0x1a], al
mov eax, dword [0x5b3818]
push 0
mov dword [esp + 0x24], eax
lea eax, [esp + 0x14]
push 1
push eax
mov dword [esp + 0x1c], 0x10c
mov dword [esp + 0x30], ecx
call sym.ProcessHacker.exe_PhFormat
push eax
call sym.ProcessHacker.exe_PhAutoDereferenceObject
push 0x55c
push dword [0x5b370c]
mov esi, dword [eax + 4]
call dword [sym.imp.USER32.dll_GetDlgItem]
test eax, eax
je 0x49b5fa
push esi
jmp 0x49b5ef
push 0x55c
push dword [0x5b370c]
call dword [sym.imp.USER32.dll_GetDlgItem]
test eax, eax
je 0x49b5fa
push 0x57cb58
push 0
push 0xc
push eax
call dword [sym.imp.USER32.dll_SendMessageW]
cmp dword [0x5b3804], 1
jbe 0x49b656
mov al, byte [0x5b0a08]
mov ecx, dword [0x5b3704]
mov byte [esp + 0x1a], al
mov eax, dword [0x5b3700]
push 0
mov dword [esp + 0x24], eax
lea eax, [esp + 0x14]
push 1
push eax
mov dword [esp + 0x1c], 0x10c
mov dword [esp + 0x30], ecx
call sym.ProcessHacker.exe_PhFormat
push eax
call sym.ProcessHacker.exe_PhAutoDereferenceObject
push 0x55e
push dword [0x5b370c]
mov esi, dword [eax + 4]
call dword [sym.imp.USER32.dll_GetDlgItem]
test eax, eax
je 0x49b67b
push esi
jmp 0x49b670
push 0x55e
push dword [0x5b370c]
call dword [sym.imp.USER32.dll_GetDlgItem]
test eax, eax
je 0x49b67b
push 0x57cb58
push 0
push 0xc
push eax
call dword [sym.imp.USER32.dll_SendMessageW]
push 0
push 0x58
lea eax, [esp + 0x60]
push eax
push 0x50
call dword [sym.imp.ntdll.dll_NtQuerySystemInformation]
test eax, eax
js 0x49bbc8
mov al, byte [0x5b0a08]
mov esi, dword [esp + 0x88]
add esi, dword [esp + 0x84]
add esi, dword [esp + 0x80]
add esi, dword [esp + 0x7c]
add esi, dword [esp + 0x78]
add esi, dword [esp + 0x74]
add esi, dword [esp + 0x70]
add esi, dword [esp + 0x6c]
mov byte [esp + 0x1a], al
mov eax, dword [esp + 0x58]
mul ebx
push 0
mov dword [esp + 0x24], eax
lea eax, [esp + 0x14]
push 1
push eax
mov dword [esp + 0x1c], 0x10c
mov dword [esp + 0x30], edx
call sym.ProcessHacker.exe_PhFormat
push eax
call sym.ProcessHacker.exe_PhAutoDereferenceObject
push 0x534
push dword [0x5b370c]
mov edi, dword [eax + 4]
call dword [sym.imp.USER32.dll_GetDlgItem]
test eax, eax
je 0x49b716
push edi
push 0
push 0xc
push eax
call dword [sym.imp.USER32.dll_SendMessageW]
mov al, byte [0x5b0a08]
mov byte ds:[esp + 0x1a], al
mov eax, dword [esp + 0x5c]
mul ebx
push 0
mov dword [esp + 0x24], eax
lea eax, [esp + 0x14]
push 1
push eax
mov dword [esp + 0x1c], 0x10c
mov dword [esp + 0x30], edx
call sym.ProcessHacker.exe_PhFormat
push eax
call sym.ProcessHacker.exe_PhAutoDereferenceObject
push 0x535
push dword [0x5b370c]
mov edi, dword [eax + 4]
call dword [sym.imp.USER32.dll_GetDlgItem]
nop
test eax, eax
je 0x49b770
push edi
push 0
push 0xc
push eax
call dword [sym.imp.USER32.dll_SendMessageW]
mov al, byte [0x5b0a08]
mov byte [esp + 0x1a], al
mov eax, dword [esp + 0x60]
mul ebx
push 0
mov dword [esp + 0x24], eax
lea eax, [esp + 0x14]
push 1
push eax
mov dword [esp + 0x1c], 0x10c
mov dword [esp + 0x30], edx
call sym.ProcessHacker.exe_PhFormat
push eax
call sym.ProcessHacker.exe_PhAutoDereferenceObject
push 0x536
push dword [0x5b370c]
mov edi, dword [eax + 4]
call dword [sym.imp.USER32.dll_GetDlgItem]
test eax, eax
je 0x49b7c9
push edi
push 0
push 0xc
push eax
call dword [sym.imp.USER32.dll_SendMessageW]
mov al, byte [0x5b0a08]
mov byte [esp + 0x1a], al
mov eax, dword [esp + 0x64]
mul ebx
push 0
mov dword [esp + 0x24], eax
lea eax, [esp + 0x14]
push 1
push eax
mov dword [esp + 0x1c], 0x10c
mov dword [esp + 0x30], edx
call sym.ProcessHacker.exe_PhFormat
push eax
call sym.ProcessHacker.exe_PhAutoDereferenceObject
push 0x537
push dword [0x5b370c]
mov edi, dword [eax + 4]
call dword [sym.imp.USER32.dll_GetDlgItem]
test eax, eax
je 0x49b826
push edi
push 0
push 0xc
push eax
call dword [sym.imp.USER32.dll_SendMessageW]
mov cl, byte [0x5b0a08]
mov eax, esi
mul ebx
push 0
mov dword [esp + 0x24], eax
lea eax, [esp + 0x14]
push 1
push eax
mov dword [esp + 0x1c], 0x10c
mov byte [esp + 0x26], cl
mov dword [esp + 0x30], edx
call sym.ProcessHacker.exe_PhFormat
push eax
call sym.ProcessHacker.exe_PhAutoDereferenceObject
push 0x539
push dword [0x5b370c]
mov esi, dword [eax + 4]
call dword [sym.imp.USER32.dll_GetDlgItem]
test eax, eax
je 0x49b87c
push esi
push 0
push 0xc
push eax
call dword [sym.imp.USER32.dll_SendMessageW]
mov al, byte [0x5b0a08]
mov byte [esp + 0x1a], al
mov eax, dword [esp + 0x6c]
mul ebx
push 0
mov dword [esp + 0x24], eax
lea eax, [esp + 0x14]
push 1
push eax
mov dword [esp + 0x1c], 0x10c
mov dword [esp + 0x30], edx
call sym.ProcessHacker.exe_PhFormat
push eax
call sym.ProcessHacker.exe_PhAutoDereferenceObject
push 0x542
push dword [0x5b370c]
mov esi, dword [eax + 4]
call dword [sym.imp.USER32.dll_GetDlgItem]
test eax, eax
je 0x49b8d6
push esi
push 0
push 0xc
push eax
call dword [sym.imp.USER32.dll_SendMessageW]
mov al, byte [0x5b0a08]
mov byte ds:[esp + 0x1a], al
mov eax, dword [esp + 0x70]
mul ebx
push 0
mov dword [esp + 0x24], eax
lea eax, [esp + 0x14]
push 1
push eax
mov dword [esp + 0x1c], 0x10c
mov dword [esp + 0x30], edx
call sym.ProcessHacker.exe_PhFormat
push eax
call sym.ProcessHacker.exe_PhAutoDereferenceObject
push 0x543
push dword [0x5b370c]
mov esi, dword [eax + 4]
call dword [sym.imp.USER32.dll_GetDlgItem]
nop
test eax, eax
je 0x49b930
push esi
push 0
push 0xc
push eax
call dword [sym.imp.USER32.dll_SendMessageW]
mov al, byte [0x5b0a08]
mov byte [esp + 0x1a], al
mov eax, dword [esp + 0x74]
mul ebx
push 0
mov dword [esp + 0x24], eax
lea eax, [esp + 0x14]
push 1
push eax
mov dword [esp + 0x1c], 0x10c
mov dword [esp + 0x30], edx
call sym.ProcessHacker.exe_PhFormat
push eax
call sym.ProcessHacker.exe_PhAutoDereferenceObject
push 0x544
push dword [0x5b370c]
mov esi, dword [eax + 4]
call dword [sym.imp.USER32.dll_GetDlgItem]
test eax, eax
je 0x49b989
push esi
push 0
push 0xc
push eax
call dword [sym.imp.USER32.dll_SendMessageW]
mov al, byte [0x5b0a08]
mov byte [esp + 0x1a], al
mov eax, dword [esp + 0x78]
mul ebx
push 0
mov dword [esp + 0x24], eax
lea eax, [esp + 0x14]
push 1
push eax
mov dword [esp + 0x1c], 0x10c
mov dword [esp + 0x30], edx
call sym.ProcessHacker.exe_PhFormat
push eax
call sym.ProcessHacker.exe_PhAutoDereferenceObject
push 0x545
push dword [0x5b370c]
mov esi, dword [eax + 4]
call dword [sym.imp.USER32.dll_GetDlgItem]
test eax, eax
je 0x49b9e6
push esi
push 0
push 0xc
push eax
call dword [sym.imp.USER32.dll_SendMessageW]
mov al, byte [0x5b0a08]
mov byte [esp + 0x1a], al
mov eax, dword [esp + 0x7c]
mul ebx
push 0
mov dword [esp + 0x24], eax
lea eax, [esp + 0x14]
push 1
push eax
mov dword [esp + 0x1c], 0x10c
mov dword [esp + 0x30], edx
call sym.ProcessHacker.exe_PhFormat
push eax
call sym.ProcessHacker.exe_PhAutoDereferenceObject
push 0x554
push dword [0x5b370c]
mov esi, dword [eax + 4]
call dword [sym.imp.USER32.dll_GetDlgItem]
test eax, eax
je 0x49ba3d
push esi
push 0
push 0xc
push eax
call dword [sym.imp.USER32.dll_SendMessageW]
mov al, byte [0x5b0a08]
mov byte [esp + 0x1a], al
mov eax, dword [esp + 0x80]
mul ebx
push 0
mov dword [esp + 0x24], eax
lea eax, [esp + 0x14]
push 1
push eax
mov dword [esp + 0x1c], 0x10c
mov dword [esp + 0x30], edx
call sym.ProcessHacker.exe_PhFormat
push eax
call sym.ProcessHacker.exe_PhAutoDereferenceObject
push 0x555
push dword [0x5b370c]
mov esi, dword [eax + 4]
call dword [sym.imp.USER32.dll_GetDlgItem]
test eax, eax
je 0x49ba97
push esi
push 0
push 0xc
push eax
call dword [sym.imp.USER32.dll_SendMessageW]
mov al, byte [0x5b0a08]
mov byte [esp + 0x1a], al
mov eax, dword [esp + 0x84]
mul ebx
push 0
mov dword [esp + 0x24], eax
lea eax, [esp + 0x14]
push 1
push eax
mov dword [esp + 0x1c], 0x10c
mov dword [esp + 0x30], edx
call sym.ProcessHacker.exe_PhFormat
push eax
call sym.ProcessHacker.exe_PhAutoDereferenceObject
push 0x556
push dword [0x5b370c]
mov esi, dword [eax + 4]
call dword [sym.imp.USER32.dll_GetDlgItem]
test eax, eax
je 0x49baf6
push esi
push 0
push 0xc
push eax
call dword [sym.imp.USER32.dll_SendMessageW]
mov al, byte [0x5b0a08]
mov byte [esp + 0x1a], al
mov eax, dword [esp + 0x88]
mul ebx
push 0
mov dword [esp + 0x24], eax
lea eax, [esp + 0x14]
push 1
push eax
mov dword [esp + 0x1c], 0x10c
mov dword [esp + 0x30], edx
call sym.ProcessHacker.exe_PhFormat
push eax
call sym.ProcessHacker.exe_PhAutoDereferenceObject
push 0x557
push dword [0x5b370c]
mov esi, dword [eax + 4]
call dword [sym.imp.USER32.dll_GetDlgItem]
test eax, eax
je 0x49bb56
push esi
push 0
push 0xc
push eax
call dword [sym.imp.USER32.dll_SendMessageW]
cmp dword [sym.ProcessHacker.exe_WindowsVersion], 0x3e
lea ecx, [ecx]
jb 0x49bbbe
mov al, byte [0x5b0a08]
mov byte [esp + 0x1a], al
mov eax, dword [esp + 0xac]
mul ebx
push 0
mov dword [esp + 0x24], eax
lea eax, [esp + 0x14]
push 1
push eax
mov dword [esp + 0x1c], 0x10c
mov dword [esp + 0x30], edx
call sym.ProcessHacker.exe_PhFormat
push eax
call sym.ProcessHacker.exe_PhAutoDereferenceObject
push 0x55d
push dword [0x5b370c]
mov esi, dword [eax + 4]
call dword [sym.imp.USER32.dll_GetDlgItem]
test eax, eax
je 0x49bddf
push esi
jmp 0x49bdd4
push 0x55d
jmp 0x49bdbf
push 0x534
push dword [0x5b370c]
call dword [sym.imp.USER32.dll_GetDlgItem]
test eax, eax
je 0x49bbed
push 0x56e3d4
push 0
push 0xc
push eax
call dword [sym.imp.USER32.dll_SendMessageW]
push 0x535
push dword [0x5b370c]
call dword [sym.imp.USER32.dll_GetDlgItem]
mov edi, edi
test eax, eax
je 0x49bc14
push 0x56e3d4
push 0
push 0xc
push eax
call dword [sym.imp.USER32.dll_SendMessageW]
push 0x536
push dword [0x5b370c]
call dword [sym.imp.USER32.dll_GetDlgItem]
test eax, eax
je 0x49bc3a
push 0x56e3d4
push 0
push 0xc
push eax
call dword [sym.imp.USER32.dll_SendMessageW]
push 0x537
push dword [0x5b370c]
call dword [sym.imp.USER32.dll_GetDlgItem]
test eax, eax
je 0x49bc5f
push 0x56e3d4
push 0
push 0xc
push eax
call dword [sym.imp.USER32.dll_SendMessageW]
push 0x55d
push dword [0x5b370c]
call dword [sym.imp.USER32.dll_GetDlgItem]
test eax, eax
je 0x49bc86
push 0x56e3d4
push 0
push 0xc
push eax
call dword [sym.imp.USER32.dll_SendMessageW]
push 0x539
push dword [0x5b370c]
call dword [sym.imp.USER32.dll_GetDlgItem]
test eax, eax
je 0x49bcab
push 0x56e3d4
push 0
push 0xc
push eax
call dword [sym.imp.USER32.dll_SendMessageW]
push 0x542
push dword [0x5b370c]
call dword [sym.imp.USER32.dll_GetDlgItem]
lea esp, [esp]
test eax, eax
je 0x49bcd4
push 0x56e3d4
push 0
push 0xc
push eax
call dword [sym.imp.USER32.dll_SendMessageW]
push 0x543
push dword [0x5b370c]
call dword [sym.imp.USER32.dll_GetDlgItem]
test eax, eax
je 0x49bcfa
push 0x56e3d4
push 0
push 0xc
push eax
call dword [sym.imp.USER32.dll_SendMessageW]
push 0x544
push dword [0x5b370c]
call dword [sym.imp.USER32.dll_GetDlgItem]
test eax, eax
je 0x49bd1f
push 0x56e3d4
push 0
push 0xc
push eax
call dword [sym.imp.USER32.dll_SendMessageW]
push 0x545
push dword [0x5b370c]
call dword [sym.imp.USER32.dll_GetDlgItem]
test eax, eax
je 0x49bd46
push 0x56e3d4
push 0
push 0xc
push eax
call dword [sym.imp.USER32.dll_SendMessageW]
push 0x554
push dword [0x5b370c]
call dword [sym.imp.USER32.dll_GetDlgItem]
test eax, eax
je 0x49bd6b
push 0x56e3d4
push 0
push 0xc
push eax
call dword [sym.imp.USER32.dll_SendMessageW]
push 0x555
push dword [0x5b370c]
call dword [sym.imp.USER32.dll_GetDlgItem]
lea esp, [esp]
test eax, eax
je 0x49bd94
push 0x56e3d4
push 0
push 0xc
push eax
call dword [sym.imp.USER32.dll_SendMessageW]
push 0x556
push dword [0x5b370c]
call dword [sym.imp.USER32.dll_GetDlgItem]
test eax, eax
je 0x49bdba
push 0x56e3d4
push 0
push 0xc
push eax
call dword [sym.imp.USER32.dll_SendMessageW]
push 0x557
push dword [0x5b370c]
call dword [sym.imp.USER32.dll_GetDlgItem]
test eax, eax
je 0x49bddf
push 0x56e3d4
push 0
push 0xc
push eax
call dword [sym.imp.USER32.dll_SendMessageW]
mov ecx, dword [esp + 0xbc]
pop edi
pop esi
pop ebx
xor ecx, esp
call fcn.0051e068
mov esp, ebp
pop ebp
ret