Function at 0x14007a770
Capabilities:
Get system information on windows

Disassembly:
mov qword [rsp + 8], rcx
sub rsp, 0xf8
xor r9d, r9d
mov r8d, 0xb0
lea rdx, [rsp + 0x40]
mov ecx, 0x50
call qword [sym.imp.ntdll.dll_NtQuerySystemInformation]
test eax, eax
jl 0x14007ae16
mov qword [rsp + 0x28], 0
mov qword [rsp + 0x30], 0
mov dword [rsp + 0x20], 0
jmp 0x14007a7c3
mov eax, dword [rsp + 0x20]
inc eax
mov dword [rsp + 0x20], eax
cmp dword [rsp + 0x20], 8
jae 0x14007a801
mov eax, dword [rsp + 0x20]
mov rax, qword [rsp + rax*8 + 0x68]
mov rcx, qword [rsp + 0x28]
add rcx, rax
mov rax, rcx
mov qword [rsp + 0x28], rax
mov eax, dword [rsp + 0x20]
mov rax, qword [rsp + rax*8 + 0xa8]
mov rcx, qword [rsp + 0x30]
add rcx, rax
mov rax, rcx
mov qword [rsp + 0x30], rax
jmp 0x14007a7b9
mov rax, qword [rsp + 0x40]
imul rax, rax, 0x1000
mov edx, 0xffffffff
mov rcx, rax
call sym.ProcessHacker.exe_PhFormatSize
mov rcx, rax
call fcn.140006e90
mov r8, qword [rax + 8]
mov edx, 0x534
mov rcx, qword [rsp + 0x100]
call qword [sym.imp.USER32.dll_SetDlgItemTextW]
mov rax, qword [rsp + 0x48]
imul rax, rax, 0x1000
mov edx, 0xffffffff
mov rcx, rax
call sym.ProcessHacker.exe_PhFormatSize
mov rcx, rax
call fcn.140006e90
mov r8, qword [rax + 8]
mov edx, 0x535
mov rcx, qword [rsp + 0x100]
call qword [sym.imp.USER32.dll_SetDlgItemTextW]
mov rax, qword [rsp + 0x50]
imul rax, rax, 0x1000
mov edx, 0xffffffff
mov rcx, rax
call sym.ProcessHacker.exe_PhFormatSize
mov rcx, rax
call fcn.140006e90
mov r8, qword [rax + 8]
mov edx, 0x536
mov rcx, qword [rsp + 0x100]
call qword [sym.imp.USER32.dll_SetDlgItemTextW]
mov rax, qword [rsp + 0x58]
imul rax, rax, 0x1000
mov edx, 0xffffffff
mov rcx, rax
call sym.ProcessHacker.exe_PhFormatSize
mov rcx, rax
call fcn.140006e90
mov r8, qword [rax + 8]
mov edx, 0x537
mov rcx, qword [rsp + 0x100]
call qword [sym.imp.USER32.dll_SetDlgItemTextW]
mov rax, qword [rsp + 0x60]
imul rax, rax, 0x1000
mov edx, 0xffffffff
mov rcx, rax
call sym.ProcessHacker.exe_PhFormatSize
mov rcx, rax
call fcn.140006e90
mov r8, qword [rax + 8]
mov edx, 0x546
mov rcx, qword [rsp + 0x100]
call qword [sym.imp.USER32.dll_SetDlgItemTextW]
mov rax, qword [rsp + 0x28]
imul rax, rax, 0x1000
mov edx, 0xffffffff
mov rcx, rax
call sym.ProcessHacker.exe_PhFormatSize
mov rcx, rax
call fcn.140006e90
mov r8, qword [rax + 8]
mov edx, 0x539
mov rcx, qword [rsp + 0x100]
call qword [sym.imp.USER32.dll_SetDlgItemTextW]
mov eax, 8
imul rax, rax, 0
mov rax, qword [rsp + rax + 0x68]
imul rax, rax, 0x1000
mov edx, 0xffffffff
mov rcx, rax
call sym.ProcessHacker.exe_PhFormatSize
mov rcx, rax
call fcn.140006e90
mov r8, qword [rax + 8]
mov edx, 0x542
mov rcx, qword [rsp + 0x100]
call qword [sym.imp.USER32.dll_SetDlgItemTextW]
mov eax, 8
imul rax, rax, 1
mov rax, qword [rsp + rax + 0x68]
imul rax, rax, 0x1000
mov edx, 0xffffffff
mov rcx, rax
call sym.ProcessHacker.exe_PhFormatSize
mov rcx, rax
call fcn.140006e90
mov r8, qword [rax + 8]
mov edx, 0x543
mov rcx, qword [rsp + 0x100]
call qword [sym.imp.USER32.dll_SetDlgItemTextW]
mov eax, 8
imul rax, rax, 2
mov rax, qword [rsp + rax + 0x68]
imul rax, rax, 0x1000
mov edx, 0xffffffff
mov rcx, rax
call sym.ProcessHacker.exe_PhFormatSize
mov rcx, rax
call fcn.140006e90
mov r8, qword [rax + 8]
mov edx, 0x544
mov rcx, qword [rsp + 0x100]
call qword [sym.imp.USER32.dll_SetDlgItemTextW]
mov eax, 8
imul rax, rax, 3
mov rax, qword [rsp + rax + 0x68]
imul rax, rax, 0x1000
mov edx, 0xffffffff
mov rcx, rax
call sym.ProcessHacker.exe_PhFormatSize
mov rcx, rax
call fcn.140006e90
mov r8, qword [rax + 8]
mov edx, 0x545
mov rcx, qword [rsp + 0x100]
call qword [sym.imp.USER32.dll_SetDlgItemTextW]
mov eax, 8
imul rax, rax, 4
mov rax, qword [rsp + rax + 0x68]
imul rax, rax, 0x1000
mov edx, 0xffffffff
mov rcx, rax
call sym.ProcessHacker.exe_PhFormatSize
mov rcx, rax
call fcn.140006e90
mov r8, qword [rax + 8]
mov edx, 0x554
mov rcx, qword [rsp + 0x100]
call qword [sym.imp.USER32.dll_SetDlgItemTextW]
mov eax, 8
imul rax, rax, 5
mov rax, qword [rsp + rax + 0x68]
imul rax, rax, 0x1000
mov edx, 0xffffffff
mov rcx, rax
call sym.ProcessHacker.exe_PhFormatSize
mov rcx, rax
call fcn.140006e90
mov r8, qword [rax + 8]
mov edx, 0x555
mov rcx, qword [rsp + 0x100]
call qword [sym.imp.USER32.dll_SetDlgItemTextW]
mov eax, 8
imul rax, rax, 6
mov rax, qword [rsp + rax + 0x68]
imul rax, rax, 0x1000
mov edx, 0xffffffff
mov rcx, rax
call sym.ProcessHacker.exe_PhFormatSize
mov rcx, rax
call fcn.140006e90
mov r8, qword [rax + 8]
mov edx, 0x556
mov rcx, qword [rsp + 0x100]
call qword [sym.imp.USER32.dll_SetDlgItemTextW]
mov eax, 8
imul rax, rax, 7
mov rax, qword [rsp + rax + 0x68]
imul rax, rax, 0x1000
mov edx, 0xffffffff
mov rcx, rax
call sym.ProcessHacker.exe_PhFormatSize
mov rcx, rax
call fcn.140006e90
mov r8, qword [rax + 8]
mov edx, 0x557
mov rcx, qword [rsp + 0x100]
call qword [sym.imp.USER32.dll_SetDlgItemTextW]
mov rax, qword [rsp + 0x30]
imul rax, rax, 0x1000
mov edx, 0xffffffff
mov rcx, rax
call sym.ProcessHacker.exe_PhFormatSize
mov rcx, rax
call fcn.140006e90
mov r8, qword [rax + 8]
mov edx, 0x547
mov rcx, qword [rsp + 0x100]
call qword [sym.imp.USER32.dll_SetDlgItemTextW]
mov eax, 8
imul rax, rax, 0
mov rax, qword [rsp + rax + 0xa8]
imul rax, rax, 0x1000
mov edx, 0xffffffff
mov rcx, rax
call sym.ProcessHacker.exe_PhFormatSize
mov rcx, rax
call fcn.140006e90
mov r8, qword [rax + 8]
mov edx, 0x548
mov rcx, qword [rsp + 0x100]
call qword [sym.imp.USER32.dll_SetDlgItemTextW]
mov eax, 8
imul rax, rax, 1
mov rax, qword [rsp + rax + 0xa8]
imul rax, rax, 0x1000
mov edx, 0xffffffff
mov rcx, rax
call sym.ProcessHacker.exe_PhFormatSize
mov rcx, rax
call fcn.140006e90
mov r8, qword [rax + 8]
mov edx, 0x549
mov rcx, qword [rsp + 0x100]
call qword [sym.imp.USER32.dll_SetDlgItemTextW]
mov eax, 8
imul rax, rax, 2
mov rax, qword [rsp + rax + 0xa8]
imul rax, rax, 0x1000
mov edx, 0xffffffff
mov rcx, rax
call sym.ProcessHacker.exe_PhFormatSize
mov rcx, rax
call fcn.140006e90
mov r8, qword [rax + 8]
mov edx, 0x54a
mov rcx, qword [rsp + 0x100]
call qword [sym.imp.USER32.dll_SetDlgItemTextW]
mov eax, 8
imul rax, rax, 3
mov rax, qword [rsp + rax + 0xa8]
imul rax, rax, 0x1000
mov edx, 0xffffffff
mov rcx, rax
call sym.ProcessHacker.exe_PhFormatSize
mov rcx, rax
call fcn.140006e90
mov r8, qword [rax + 8]
mov edx, 0x54b
mov rcx, qword [rsp + 0x100]
call qword [sym.imp.USER32.dll_SetDlgItemTextW]
mov eax, 8
imul rax, rax, 4
mov rax, qword [rsp + rax + 0xa8]
imul rax, rax, 0x1000
mov edx, 0xffffffff
mov rcx, rax
call sym.ProcessHacker.exe_PhFormatSize
mov rcx, rax
call fcn.140006e90
mov r8, qword [rax + 8]
mov edx, 0x54c
mov rcx, qword [rsp + 0x100]
call qword [sym.imp.USER32.dll_SetDlgItemTextW]
mov eax, 8
imul rax, rax, 5
mov rax, qword [rsp + rax + 0xa8]
imul rax, rax, 0x1000
mov edx, 0xffffffff
mov rcx, rax
call sym.ProcessHacker.exe_PhFormatSize
mov rcx, rax
call fcn.140006e90
mov r8, qword [rax + 8]
mov edx, 0x54d
mov rcx, qword [rsp + 0x100]
call qword [sym.imp.USER32.dll_SetDlgItemTextW]
mov eax, 8
imul rax, rax, 6
mov rax, qword [rsp + rax + 0xa8]
imul rax, rax, 0x1000
mov edx, 0xffffffff
mov rcx, rax
call sym.ProcessHacker.exe_PhFormatSize
mov rcx, rax
call fcn.140006e90
mov r8, qword [rax + 8]
mov edx, 0x54e
mov rcx, qword [rsp + 0x100]
call qword [sym.imp.USER32.dll_SetDlgItemTextW]
mov eax, 8
imul rax, rax, 7
mov rax, qword [rsp + rax + 0xa8]
imul rax, rax, 0x1000
mov edx, 0xffffffff
mov rcx, rax
call sym.ProcessHacker.exe_PhFormatSize
mov rcx, rax
call fcn.140006e90
mov r8, qword [rax + 8]
mov edx, 0x54f
mov rcx, qword [rsp + 0x100]
call qword [sym.imp.USER32.dll_SetDlgItemTextW]
cmp dword [sym.ProcessHacker.exe_WindowsVersion], 0x3e
jb 0x14007adf7
mov rax, qword [rsp + 0xe8]
imul rax, rax, 0x1000
mov edx, 0xffffffff
mov rcx, rax
call sym.ProcessHacker.exe_PhFormatSize
mov rcx, rax
call fcn.140006e90
mov r8, qword [rax + 8]
mov edx, 0x55d
mov rcx, qword [rsp + 0x100]
call qword [sym.imp.USER32.dll_SetDlgItemTextW]
jmp 0x14007ae11
lea r8, [0x14011d660]
mov edx, 0x55d
mov rcx, qword [rsp + 0x100]
call qword [sym.imp.USER32.dll_SetDlgItemTextW]
jmp 0x14007b086
lea r8, [0x140113bc8]
mov edx, 0x534
mov rcx, qword [rsp + 0x100]
call qword [sym.imp.USER32.dll_SetDlgItemTextW]
lea r8, [0x140113bc8]
mov edx, 0x535
mov rcx, qword [rsp + 0x100]
call qword [sym.imp.USER32.dll_SetDlgItemTextW]
lea r8, [0x140113bc8]
mov edx, 0x536
mov rcx, qword [rsp + 0x100]
call qword [sym.imp.USER32.dll_SetDlgItemTextW]
lea r8, [0x140113bc8]
mov edx, 0x537
mov rcx, qword [rsp + 0x100]
call qword [sym.imp.USER32.dll_SetDlgItemTextW]
lea r8, [0x140113bc8]
mov edx, 0x55d
mov rcx, qword [rsp + 0x100]
call qword [sym.imp.USER32.dll_SetDlgItemTextW]
lea r8, [0x140113bc8]
mov edx, 0x546
mov rcx, qword [rsp + 0x100]
call qword [sym.imp.USER32.dll_SetDlgItemTextW]
lea r8, [0x140113bc8]
mov edx, 0x539
mov rcx, qword [rsp + 0x100]
call qword [sym.imp.USER32.dll_SetDlgItemTextW]
lea r8, [0x140113bc8]
mov edx, 0x542
mov rcx, qword [rsp + 0x100]
call qword [sym.imp.USER32.dll_SetDlgItemTextW]
lea r8, [0x140113bc8]
mov edx, 0x543
mov rcx, qword [rsp + 0x100]
call qword [sym.imp.USER32.dll_SetDlgItemTextW]
lea r8, [0x140113bc8]
mov edx, 0x544
mov rcx, qword [rsp + 0x100]
call qword [sym.imp.USER32.dll_SetDlgItemTextW]
lea r8, [0x140113bc8]
mov edx, 0x545
mov rcx, qword [rsp + 0x100]
call qword [sym.imp.USER32.dll_SetDlgItemTextW]
lea r8, [0x140113bc8]
mov edx, 0x554
mov rcx, qword [rsp + 0x100]
call qword [sym.imp.USER32.dll_SetDlgItemTextW]
lea r8, [0x140113bc8]
mov edx, 0x555
mov rcx, qword [rsp + 0x100]
call qword [sym.imp.USER32.dll_SetDlgItemTextW]
lea r8, [0x140113bc8]
mov edx, 0x556
mov rcx, qword [rsp + 0x100]
call qword [sym.imp.USER32.dll_SetDlgItemTextW]
lea r8, [0x140113bc8]
mov edx, 0x557
mov rcx, qword [rsp + 0x100]
call qword [sym.imp.USER32.dll_SetDlgItemTextW]
lea r8, [0x140113bc8]
mov edx, 0x547
mov rcx, qword [rsp + 0x100]
call qword [sym.imp.USER32.dll_SetDlgItemTextW]
lea r8, [0x140113bc8]
mov edx, 0x548
mov rcx, qword [rsp + 0x100]
call qword [sym.imp.USER32.dll_SetDlgItemTextW]
lea r8, [0x140113bc8]
mov edx, 0x549
mov rcx, qword [rsp + 0x100]
call qword [sym.imp.USER32.dll_SetDlgItemTextW]
lea r8, [0x140113bc8]
mov edx, 0x54a
mov rcx, qword [rsp + 0x100]
call qword [sym.imp.USER32.dll_SetDlgItemTextW]
lea r8, [0x140113bc8]
mov edx, 0x54b
mov rcx, qword [rsp + 0x100]
call qword [sym.imp.USER32.dll_SetDlgItemTextW]
lea r8, [0x140113bc8]
mov edx, 0x54c
mov rcx, qword [rsp + 0x100]
call qword [sym.imp.USER32.dll_SetDlgItemTextW]
lea r8, [0x140113bc8]
mov edx, 0x54d
mov rcx, qword [rsp + 0x100]
call qword [sym.imp.USER32.dll_SetDlgItemTextW]
lea r8, [0x140113bc8]
mov edx, 0x54e
mov rcx, qword [rsp + 0x100]
call qword [sym.imp.USER32.dll_SetDlgItemTextW]
lea r8, [0x140113bc8]
mov edx, 0x54f
mov rcx, qword [rsp + 0x100]
call qword [sym.imp.USER32.dll_SetDlgItemTextW]
add rsp, 0xf8
ret