Function at 0x485f00
Capabilities:
Get graphical window text

Disassembly:
push ebp
mov ebp, esp
and esp, 0xfffffff8
sub esp, 0x84
mov eax, dword [0x5c7004]
xor eax, esp
mov dword [esp + 0x80], eax
push esi
push 0
mov esi, ecx
push 1
push 0x109d
push dword [esi + 0x1c]
call dword [sym.imp.USER32.dll_SendMessageW]
push 0x60
lea eax, [esp + 0xc]
push 0
push eax
call fcn.00536b00
add esp, 0xc
mov dword [esp + 8], 0x60
lea eax, [esp + 8]
mov dword [esp + 0xc], 0x1d
mov dword [esp + 0x2c], 1
mov dword [esp + 0x28], 8
push eax
push 0x7fffffff
push 0x1091
push dword [esi + 0x1c]
mov dword [esp + 0x30], 0
mov dword [esp + 0x20], 0x58ba2c
call dword [sym.imp.USER32.dll_SendMessageW]
push 0x60
lea eax, [esp + 0xc]
push 0
push eax
call fcn.00536b00
add esp, 0xc
mov dword [esp + 8], 0x60
lea eax, [esp + 8]
mov dword [esp + 0xc], 0x1d
mov dword [esp + 0x2c], 1
mov dword [esp + 0x28], 8
push eax
push 0x7fffffff
push 0x1091
push dword [esi + 0x1c]
mov dword [esp + 0x30], 1
mov dword [esp + 0x20], 0x593e94
call dword [sym.imp.USER32.dll_SendMessageW]
push 0x60
lea eax, [esp + 0xc]
push 0
push eax
call fcn.00536b00
add esp, 0xc
mov dword [esp + 8], 0x60
lea eax, [esp + 8]
mov dword [esp + 0xc], 0x1d
mov dword [esp + 0x2c], 1
mov dword [esp + 0x28], 8
push eax
push 0x7fffffff
push 0x1091
push dword [esi + 0x1c]
mov dword [esp + 0x30], 2
mov dword [esp + 0x20], 0x58ba70
call dword [sym.imp.USER32.dll_SendMessageW]
push 0x60
lea eax, [esp + 0xc]
push 0
push eax
call fcn.00536b00
add esp, 0xc
mov dword [esp + 8], 0x60
lea eax, [esp + 8]
mov dword [esp + 0xc], 0x1d
mov dword [esp + 0x2c], 1
mov dword [esp + 0x28], 8
push eax
push 0x7fffffff
push 0x1091
push dword [esi + 0x1c]
mov dword [esp + 0x30], 3
mov dword [esp + 0x20], 0x586c48
call dword [sym.imp.USER32.dll_SendMessageW]
push 0x60
push 0
lea eax, [esp + 0x10]
push eax
call fcn.00536b00
add esp, 0xc
mov dword [esp + 8], 0x60
lea eax, [esp + 8]
mov dword [esp + 0xc], 0x1d
mov dword [esp + 0x2c], 1
mov dword [esp + 0x28], 8
push eax
push 0x7fffffff
push 0x1091
push dword [esi + 0x1c]
mov dword [esp + 0x30], 4
mov dword [esp + 0x20], str.Extension
call dword [sym.imp.USER32.dll_SendMessageW]
lea eax, [esp + 8]
mov dword [esp + 8], 0x101
push eax
push 0
push 0x104d
push dword [esi + 0x1c]
mov dword [esp + 0x1c], 0
mov dword [esp + 0x20], 0
mov dword [esp + 0x2c], str.Priority
mov dword [esp + 0x40], 0
call dword [sym.imp.USER32.dll_SendMessageW]
lea eax, [esp + 8]
mov dword [esp + 0xc], 1
push eax
push 0
push 0x104d
push dword [esi + 0x1c]
mov dword [esp + 0x20], 0
mov dword [esp + 0x2c], str.Cycles
mov dword [esp + 0x40], 0
mov dword [esp + 0x18], 0x105
mov dword [esp + 0x38], 1
call dword [sym.imp.USER32.dll_SendMessageW]
lea eax, [esp + 8]
mov dword [esp + 0xc], 2
push eax
push 0
push 0x104d
push dword [esi + 0x1c]
mov dword [esp + 0x20], 0
mov dword [esp + 0x2c], str.Cycles_delta
mov dword [esp + 0x40], 0
mov dword [esp + 0x18], 0x105
mov dword [esp + 0x38], 2
call dword [sym.imp.USER32.dll_SendMessageW]
lea eax, [esp + 8]
mov dword [esp + 0xc], 3
push eax
push 0
push 0x104d
push dword [esi + 0x1c]
mov dword [esp + 0x20], 0
mov dword [esp + 0x2c], 0x593ecc
mov dword [esp + 0x40], 0
mov dword [esp + 0x18], 0x105
mov dword [esp + 0x38], 3
call dword [sym.imp.USER32.dll_SendMessageW]
lea eax, ds:[esp + 8]
mov dword [esp + 0xc], 4
push eax
push 0
push 0x104d
push dword [esi + 0x1c]
mov dword [esp + 0x20], 0
mov dword [esp + 0x2c], str.Kernel_delta
mov dword [esp + 0x40], 0
mov dword [esp + 0x18], 0x105
mov dword [esp + 0x38], 4
call dword [sym.imp.USER32.dll_SendMessageW]
mov dword [esp + 0xc], 5
mov dword [esp + 0x10], 0
mov dword [esp + 0x1c], 0x593f00
mov dword [esp + 0x30], 0
mov dword [esp + 8], 0x105
mov dword [esp + 0x28], 5
lea eax, [esp + 8]
push eax
push 0
push 0x104d
push dword [esi + 0x1c]
call dword [sym.imp.USER32.dll_SendMessageW]
lea eax, [esp + 8]
mov dword [esp + 0xc], 6
push eax
push 0
push 0x104d
push dword [esi + 0x1c]
mov dword [esp + 0x20], 0
mov dword [esp + 0x2c], str.User_delta
mov dword [esp + 0x40], 0
mov dword [esp + 0x18], 0x105
mov dword [esp + 0x38], 6
call dword [sym.imp.USER32.dll_SendMessageW]
lea eax, [esp + 8]
mov dword [esp + 0xc], 7
push eax
push 0
push 0x104d
push dword [esi + 0x1c]
mov dword [esp + 0x20], 0
mov dword [esp + 0x2c], str.Total_time
mov dword [esp + 0x40], 0
mov dword [esp + 0x18], 0x105
mov dword [esp + 0x38], 7
call dword [sym.imp.USER32.dll_SendMessageW]
lea eax, [esp + 8]
mov dword [esp + 0xc], 8
push eax
push 0
push 0x104d
push dword [esi + 0x1c]
mov dword [esp + 0x20], 0
mov dword [esp + 0x2c], str.Total_delta
mov dword [esp + 0x40], 0
mov dword [esp + 0x18], 0x105
mov dword [esp + 0x38], 8
call dword [sym.imp.USER32.dll_SendMessageW]
lea eax, [esp + 8]
mov dword [esp + 0xc], 9
push eax
push 0
push 0x104d
push dword [esi + 0x1c]
mov dword [esp + 0x20], 0
mov dword [esp + 0x2c], 0x58bb94
mov dword [esp + 0x40], 1
mov dword [esp + 0x18], 0x105
mov dword [esp + 0x38], 9
call dword [sym.imp.USER32.dll_SendMessageW]
lea eax, ds:[esp + 8]
mov dword [esp + 0xc], 0xa
push eax
push 0
push 0x104d
push dword [esi + 0x1c]
mov dword [esp + 0x20], 0
mov dword [esp + 0x2c], str.Private_bytes_delta
mov dword [esp + 0x40], 1
mov dword [esp + 0x18], 0x105
mov dword [esp + 0x38], 0xa
call dword [sym.imp.USER32.dll_SendMessageW]
lea eax, [esp + 8]
mov dword [esp + 0xc], 0xb
push eax
push 0
push 0x104d
push dword [esi + 0x1c]
mov dword [esp + 0x20], 0
mov dword [esp + 0x2c], str.Peak_private_bytes
mov dword [esp + 0x40], 1
mov dword [esp + 0x18], 0x105
mov dword [esp + 0x38], 0xb
call dword [sym.imp.USER32.dll_SendMessageW]
mov dword [esp + 0xc], 0xc
mov dword [esp + 0x10], 0
mov dword [esp + 0x1c], 0x5869b8
lea eax, [esp + 8]
mov dword [esp + 0x30], 1
push eax
push 0
push 0x104d
push dword [esi + 0x1c]
mov dword [esp + 0x18], 0x105
mov dword [esp + 0x38], 0xc
call dword [sym.imp.USER32.dll_SendMessageW]
lea eax, [esp + 8]
mov dword [esp + 0xc], 0xd
push eax
push 0
push 0x104d
push dword [esi + 0x1c]
mov dword [esp + 0x20], 0
mov dword [esp + 0x2c], str.Peak_virtual_size
mov dword [esp + 0x40], 1
mov dword [esp + 0x18], 0x105
mov dword [esp + 0x38], 0xd
call dword [sym.imp.USER32.dll_SendMessageW]
lea eax, [esp + 8]
mov dword [esp + 0xc], 0xe
push eax
push 0
push 0x104d
push dword [esi + 0x1c]
mov dword [esp + 0x20], 0
mov dword [esp + 0x2c], 0x5922a8
mov dword [esp + 0x40], 1
mov dword [esp + 0x18], 0x105
mov dword [esp + 0x38], 0xe
call dword [sym.imp.USER32.dll_SendMessageW]
lea eax, [esp + 8]
mov dword [esp + 0xc], 0xf
push eax
push 0
push 0x104d
push dword [esi + 0x1c]
mov dword [esp + 0x20], 0
mov dword [esp + 0x2c], 0x5925a4
mov dword [esp + 0x40], 1
mov dword [esp + 0x18], 0x105
mov dword [esp + 0x38], 0xf
call dword [sym.imp.USER32.dll_SendMessageW]
lea eax, ds:[esp + 8]
mov dword [esp + 0xc], 0x10
push eax
push 0
push 0x104d
push dword [esi + 0x1c]
mov dword [esp + 0x20], 0
mov dword [esp + 0x2c], 0x58bbcc
mov dword [esp + 0x40], 1
mov dword [esp + 0x18], 0x105
mov dword [esp + 0x38], 0x10
call dword [sym.imp.USER32.dll_SendMessageW]
lea eax, [esp + 8]
mov dword [esp + 0xc], 0x11
push eax
push 0
push 0x104d
push dword [esi + 0x1c]
mov dword [esp + 0x20], 0
mov dword [esp + 0x2c], str.Peak_working_set
mov dword [esp + 0x40], 1
mov dword [esp + 0x18], 0x105
mov dword [esp + 0x38], 0x11
call dword [sym.imp.USER32.dll_SendMessageW]
lea eax, [esp + 8]
mov dword [esp + 0xc], 0x12
push eax
push 0
push 0x104d
push dword [esi + 0x1c]
mov dword [esp + 0x20], 0
mov dword [esp + 0x2c], str.Private_WS
mov dword [esp + 0x40], 1
mov dword [esp + 0x18], 0x105
mov dword [esp + 0x38], 0x12
call dword [sym.imp.USER32.dll_SendMessageW]
lea eax, [esp + 8]
mov dword [esp + 0xc], 0x13
push eax
push 0
push 0x104d
push dword [esi + 0x1c]
mov dword [esp + 0x20], 0
mov dword [esp + 0x2c], str.Shareable_WS
mov dword [esp + 0x40], 1
mov dword [esp + 0x18], 0x105
mov dword [esp + 0x38], 0x13
call dword [sym.imp.USER32.dll_SendMessageW]
lea eax, [esp + 8]
mov dword [esp + 0xc], 0x14
push eax
push 0
push 0x104d
push dword [esi + 0x1c]
mov dword [esp + 0x20], 0
mov dword [esp + 0x2c], str.Shared_WS
mov dword [esp + 0x40], 1
mov dword [esp + 0x18], 0x105
mov dword [esp + 0x38], 0x14
call dword [sym.imp.USER32.dll_SendMessageW]
lea eax, [esp + 8]
mov dword [esp + 0xc], 0x2a
push eax
push 0
push 0x104d
push dword [esi + 0x1c]
mov dword [esp + 0x20], 0
mov dword [esp + 0x2c], str.Paged_pool_bytes
mov dword [esp + 0x40], 1
mov dword [esp + 0x18], 0x105
mov dword [esp + 0x38], 0x2a
call dword [sym.imp.USER32.dll_SendMessageW]
lea eax, ds:[esp + 8]
mov dword [esp + 0xc], 0x2b
push eax
push 0
push 0x104d
push dword [esi + 0x1c]
mov dword [esp + 0x20], 0
mov dword [esp + 0x2c], str.Peak_paged_pool_bytes
mov dword [esp + 0x40], 1
mov dword [esp + 0x18], 0x105
mov dword [esp + 0x38], 0x2b
call dword [sym.imp.USER32.dll_SendMessageW]
lea eax, [esp + 8]
mov dword [esp + 0xc], 0x2c
push eax
push 0
push 0x104d
push dword [esi + 0x1c]
mov dword [esp + 0x20], 0
mov dword [esp + 0x2c], str.Nonpaged_pool_bytes
mov dword [esp + 0x40], 1
mov dword [esp + 0x18], 0x105
mov dword [esp + 0x38], 0x2c
call dword [sym.imp.USER32.dll_SendMessageW]
lea eax, [esp + 8]
mov dword [esp + 0xc], 0x2d
push eax
push 0
push 0x104d
push dword [esi + 0x1c]
mov dword [esp + 0x20], 0
mov dword [esp + 0x2c], str.Peak_nonpaged_pool_bytes
mov dword [esp + 0x40], 1
mov dword [esp + 0x18], 0x105
mov dword [esp + 0x38], 0x2d
call dword [sym.imp.USER32.dll_SendMessageW]
lea eax, [esp + 8]
mov dword [esp + 0xc], 0x15
push eax
mov dword [esp + 0x14], 0
mov dword [esp + 0x20], str.Shared_commit
mov dword [esp + 0x34], 1
mov dword [esp + 0xc], 0x105
mov dword [esp + 0x2c], 0x15
push 0
push 0x104d
push dword [esi + 0x1c]
call dword [sym.imp.USER32.dll_SendMessageW]
lea eax, [esp + 8]
mov dword [esp + 0xc], 0x16
push eax
push 0
push 0x104d
push dword [esi + 0x1c]
mov dword [esp + 0x20], 0
mov dword [esp + 0x2c], str.Private_commit
mov dword [esp + 0x40], 1
mov dword [esp + 0x18], 0x105
mov dword [esp + 0x38], 0x16
call dword [sym.imp.USER32.dll_SendMessageW]
lea eax, [esp + 8]
mov dword [esp + 0xc], 0x17
push eax
push 0
push 0x104d
push dword [esi + 0x1c]
mov dword [esp + 0x20], 0
mov dword [esp + 0x2c], str.Peak_private_commit
mov dword [esp + 0x40], 1
mov dword [esp + 0x18], 0x105
mov dword [esp + 0x38], 0x17
call dword [sym.imp.USER32.dll_SendMessageW]
lea eax, ds:[esp + 8]
mov dword [esp + 0xc], 0x18
push eax
push 0
push 0x104d
push dword [esi + 0x1c]
mov dword [esp + 0x20], 0
mov dword [esp + 0x2c], str.Page_priority
mov dword [esp + 0x40], 1
mov dword [esp + 0x18], 0x105
mov dword [esp + 0x38], 0x18
call dword [sym.imp.USER32.dll_SendMessageW]
lea eax, [esp + 8]
mov dword [esp + 0xc], 0x19
push eax
push 0
push 0x104d
push dword [esi + 0x1c]
mov dword [esp + 0x20], 0
mov dword [esp + 0x2c], 0x59406c
mov dword [esp + 0x40], 2
mov dword [esp + 0x18], 0x105
mov dword [esp + 0x38], 0x19
call dword [sym.imp.USER32.dll_SendMessageW]
lea eax, [esp + 8]
mov dword [esp + 0xc], 0x1a
push eax
push 0
push 0x104d
push dword [esi + 0x1c]
mov dword [esp + 0x20], 0
mov dword [esp + 0x2c], 0x594078
mov dword [esp + 0x40], 2
mov dword [esp + 0x18], 0x105
mov dword [esp + 0x38], 0x1a
call dword [sym.imp.USER32.dll_SendMessageW]
lea eax, [esp + 8]
mov dword [esp + 0xc], 0x1b
push eax
push 0
push 0x104d
push dword [esi + 0x1c]
mov dword [esp + 0x20], 0
mov dword [esp + 0x2c], 0x594090
mov dword [esp + 0x40], 2
mov dword [esp + 0x18], 0x105
mov dword [esp + 0x38], 0x1b
call dword [sym.imp.USER32.dll_SendMessageW]
mov dword [esp + 0xc], 0x1c
mov dword [esp + 0x10], 0
mov dword [esp + 0x1c], 0x5940a8
mov dword [esp + 0x30], 2
mov dword [esp + 8], 0x105
mov dword [esp + 0x28], 0x1c
lea eax, [esp + 8]
push eax
push 0
push 0x104d
push dword [esi + 0x1c]
call dword [sym.imp.USER32.dll_SendMessageW]
lea eax, [esp + 8]
mov dword [esp + 0xc], 0x1d
push eax
push 0
push 0x104d
push dword [esi + 0x1c]
mov dword [esp + 0x20], 0
mov dword [esp + 0x2c], 0x5940cc
mov dword [esp + 0x40], 2
mov dword [esp + 0x18], 0x105
mov dword [esp + 0x38], 0x1d
call dword [sym.imp.USER32.dll_SendMessageW]
lea eax, ds:[esp + 8]
mov dword [esp + 0xc], 0x1e
push eax
push 0
push 0x104d
push dword [esi + 0x1c]
mov dword [esp + 0x20], 0
mov dword [esp + 0x2c], 0x5940dc
mov dword [esp + 0x40], 2
mov dword [esp + 0x18], 0x105
mov dword [esp + 0x38], 0x1e
call dword [sym.imp.USER32.dll_SendMessageW]
lea eax, [esp + 8]
mov dword [esp + 0xc], 0x1f
push eax
push 0
push 0x104d
push dword [esi + 0x1c]
mov dword [esp + 0x20], 0
mov dword [esp + 0x2c], 0x5940f8
mov dword [esp + 0x40], 2
mov dword [esp + 0x18], 0x105
mov dword [esp + 0x38], 0x1f
call dword [sym.imp.USER32.dll_SendMessageW]
lea eax, [esp + 8]
mov dword [esp + 0xc], 0x20
push eax
push 0
push 0x104d
push dword [esi + 0x1c]
mov dword [esp + 0x20], 0
mov dword [esp + 0x2c], 0x594110
mov dword [esp + 0x40], 2
mov dword [esp + 0x18], 0x105
mov dword [esp + 0x38], 0x20
call dword [sym.imp.USER32.dll_SendMessageW]
lea eax, [esp + 8]
mov dword [esp + 0xc], 0x21
push eax
push 0
push 0x104d
push dword [esi + 0x1c]
mov dword [esp + 0x20], 0
mov dword [esp + 0x2c], 0x586c48
mov dword [esp + 0x40], 2
mov dword [esp + 0x18], 0x105
mov dword [esp + 0x38], 0x21
call dword [sym.imp.USER32.dll_SendMessageW]
lea eax, [esp + 8]
mov dword [esp + 0xc], 0x22
push eax
push 0
push 0x104d
push dword [esi + 0x1c]
mov dword [esp + 0x20], 0
mov dword [esp + 0x2c], 0x594134
mov dword [esp + 0x40], 2
mov dword [esp + 0x18], 0x105
mov dword [esp + 0x38], 0x22
call dword [sym.imp.USER32.dll_SendMessageW]
mov dword [esp + 0xc], 0x23
mov dword [esp + 0x10], 0
mov dword [esp + 0x1c], 0x59414c
lea eax, [esp + 8]
mov dword [esp + 0x30], 2
push eax
push 0
push 0x104d
push dword [esi + 0x1c]
mov dword [esp + 0x18], 0x105
mov dword [esp + 0x38], 0x23
call dword [sym.imp.USER32.dll_SendMessageW]
lea eax, ds:[esp + 8]
mov dword [esp + 0xc], 0x24
push eax
push 0
push 0x104d
push dword [esi + 0x1c]
mov dword [esp + 0x20], 0
mov dword [esp + 0x2c], 0x594164
mov dword [esp + 0x40], 2
mov dword [esp + 0x18], 0x105
mov dword [esp + 0x38], 0x24
call dword [sym.imp.USER32.dll_SendMessageW]
lea eax, [esp + 8]
mov dword [esp + 0xc], 0x25
push eax
push 0
push 0x104d
push dword [esi + 0x1c]
mov dword [esp + 0x20], 0
mov dword [esp + 0x2c], str.I_O_priority
mov dword [esp + 0x40], 2
mov dword [esp + 0x18], 0x105
mov dword [esp + 0x38], 0x25
call dword [sym.imp.USER32.dll_SendMessageW]
lea eax, [esp + 8]
mov dword [esp + 0xc], 0x26
push eax
push 0
push 0x104d
push dword [esi + 0x1c]
mov dword [esp + 0x20], 0
mov dword [esp + 0x2c], 0x58699c
mov dword [esp + 0x40], 3
mov dword [esp + 0x18], 0x105
mov dword [esp + 0x38], 0x26
call dword [sym.imp.USER32.dll_SendMessageW]
lea eax, [esp + 8]
mov dword [esp + 0xc], 0x27
push eax
push 0
push 0x104d
push dword [esi + 0x1c]
mov dword [esp + 0x20], 0
mov dword [esp + 0x2c], str.Peak_handles
mov dword [esp + 0x40], 3
mov dword [esp + 0x18], 0x105
mov dword [esp + 0x38], 0x27
call dword [sym.imp.USER32.dll_SendMessageW]
lea eax, [esp + 8]
mov dword [esp + 0xc], 0x28
push eax
push 0
push 0x104d
push dword [esi + 0x1c]
mov dword [esp + 0x20], 0
mov dword [esp + 0x2c], str.GDI_handles
mov dword [esp + 0x40], 3
mov dword [esp + 0x18], 0x105
mov dword [esp + 0x38], 0x28
call dword [sym.imp.USER32.dll_SendMessageW]
lea eax, [esp + 8]
mov dword [esp + 0xc], 0x29
push eax
push 0
push 0x104d
push dword [esi + 0x1c]
mov dword [esp + 0x20], 0
mov dword [esp + 0x2c], str.USER_handles
mov dword [esp + 0x40], 3
mov dword [esp + 0x18], 0x105
mov dword [esp + 0x38], 0x29
call dword [sym.imp.USER32.dll_SendMessageW]
cmp dword [0x5c7aa8], 0x68
jb 0x486f6b
lea eax, [esp + 8]
mov dword [esp + 0xc], 0x2e
push eax
push 0
push 0x104d
push dword [esi + 0x1c]
mov dword [esp + 0x20], 0
mov dword [esp + 0x2c], str.Running_time
mov dword [esp + 0x40], 3
mov dword [esp + 0x18], 0x105
mov dword [esp + 0x38], 0x2e
call dword [sym.imp.USER32.dll_SendMessageW]
lea eax, [esp + 8]
mov dword [esp + 0xc], 0x2f
push eax
push 0
push 0x104d
push dword [esi + 0x1c]
mov dword [esp + 0x20], 0
mov dword [esp + 0x2c], str.Suspended_time
mov dword [esp + 0x40], 3
mov dword [esp + 0x18], 0x105
mov dword [esp + 0x38], 0x2f
call dword [sym.imp.USER32.dll_SendMessageW]
lea eax, [esp + 8]
mov dword [esp + 0xc], 0x30
push eax
push 0
push 0x104d
push dword [esi + 0x1c]
mov dword [esp + 0x20], 0
mov dword [esp + 0x2c], str.Hang_count
mov dword [esp + 0x40], 3
mov dword [esp + 0x18], 0x105
mov dword [esp + 0x38], 0x30
call dword [sym.imp.USER32.dll_SendMessageW]
lea eax, ds:[esp + 8]
mov dword [esp + 0xc], 0x31
push eax
push 0
push 0x104d
push dword [esi + 0x1c]
mov dword [esp + 0x20], 0
mov dword [esp + 0x2c], str.Ghost_count
mov dword [esp + 0x40], 3
mov dword [esp + 0x18], 0x105
mov dword [esp + 0x38], 0x31
call dword [sym.imp.USER32.dll_SendMessageW]
cmp dword [0x5c7aa8], 0x68
jb 0x486f6b
cmp byte [0x5ceec7], 0
jne 0x486ed2
push 0
push 4
lea eax, [esp + 0x74]
push eax
push 0x1a
push 0xffffffffffffffff
call dword [sym.imp.ntdll.dll_NtQueryInformationProcess]
test eax, eax
js 0x486ebf
cmp dword [esp + 0x6c], 0
setne byte [0x5ceec6]
xor ecx, ecx
lea eax, [esp + 0x80]
lock or dword [eax], ecx
mov byte [0x5ceec7], 1
cmp byte [0x5ceec6], 0
jne 0x486f6b
lea eax, ds:[esp + 8]
mov dword [esp + 0xc], 0x32
push eax
push 0
push 0x104d
push dword [esi + 0x1c]
mov dword [esp + 0x20], 0
mov dword [esp + 0x2c], str.ContextSwitches
mov dword [esp + 0x40], 4
mov dword [esp + 0x18], 0x105
mov dword [esp + 0x38], 0x32
call dword [sym.imp.USER32.dll_SendMessageW]
lea eax, [esp + 8]
mov dword [esp + 0xc], 0x33
push eax
push 0
push 0x104d
push dword [esi + 0x1c]
mov dword [esp + 0x20], 0
mov dword [esp + 0x2c], str.NetworkTxRxBytes
mov dword [esp + 0x40], 4
mov dword [esp + 0x18], 0x105
mov dword [esp + 0x38], 0x33
call dword [sym.imp.USER32.dll_SendMessageW]
cmp byte [0x5ccf74], 0
je 0x486fa5
mov eax, dword ds:[esi + 0x28]
mov dword [esp + 0x78], eax
mov eax, dword [esi + 0x1c]
mov dword [esp + 0x7c], eax
lea eax, [esp + 0x70]
push eax
push 0x5ce180
mov dword [esp + 0x78], 0
mov dword [esp + 0x7c], 1
call sym.ProcessHacker.exe_PhInvokeCallback
mov ecx, dword [esp + 0x84]
pop esi
xor ecx, esp
call fcn.00534c91
mov esp, ebp
pop ebp
ret