Function at 0x18013fff0
Capabilities:
Get system information on windows

Disassembly:
jmp 0x18013fff0
push rdi
sub rsp, 0x160
lea rdi, [rsp + 0x20]
mov ecx, 0x50
mov eax, 0xcccccccc
rep stosd dword [rdi], eax
mov rax, qword [0x1805a6200]
xor rax, rsp
mov qword [rsp + 0x158], rax
mov eax, dword [0x1808ecf50]
imul rax, rax, 0x1000
mov edx, 0xffffffff
mov rcx, rax
call sym.ProcessMonitor.dll_PhFormatSize
mov rcx, rax
call sym.ProcessMonitor.dll_PhAutoDereferenceObject
mov r8, qword [rax + 8]
mov edx, 0x522
mov rcx, qword [0x1808e8de0]
call sym.ProcessMonitor.dll_PhSetDialogItemText
mov eax, dword [0x1808ecf58]
imul rax, rax, 0x1000
mov edx, 0xffffffff
mov rcx, rax
call sym.ProcessMonitor.dll_PhFormatSize
mov rcx, rax
call sym.ProcessMonitor.dll_PhAutoDereferenceObject
mov r8, qword [rax + 8]
mov edx, 0x523
mov rcx, qword [0x1808e8de0]
call sym.ProcessMonitor.dll_PhSetDialogItemText
mov eax, dword [0x1808ecf54]
imul rax, rax, 0x1000
mov edx, 0xffffffff
mov rcx, rax
call sym.ProcessMonitor.dll_PhFormatSize
mov rcx, rax
call sym.ProcessMonitor.dll_PhAutoDereferenceObject
mov r8, qword [rax + 8]
mov edx, 0x524
mov rcx, qword [0x1808e8de0]
call sym.ProcessMonitor.dll_PhSetDialogItemText
mov eax, dword [0x1808ecf4c]
mov ecx, dword [0x1808e92fc]
sub ecx, eax
mov eax, ecx
mov eax, eax
imul rax, rax, 0x1000
mov edx, 0xffffffff
mov rcx, rax
call sym.ProcessMonitor.dll_PhFormatSize
mov rcx, rax
call sym.ProcessMonitor.dll_PhAutoDereferenceObject
mov r8, qword [rax + 8]
mov edx, 0x525
mov rcx, qword [0x1808e8de0]
call sym.ProcessMonitor.dll_PhSetDialogItemText
mov eax, dword [0x1808e92fc]
imul rax, rax, 0x1000
mov edx, 0xffffffff
mov rcx, rax
call sym.ProcessMonitor.dll_PhFormatSize
mov rcx, rax
call sym.ProcessMonitor.dll_PhAutoDereferenceObject
mov r8, qword [rax + 8]
mov edx, 0x526
mov rcx, qword [0x1808e8de0]
call sym.ProcessMonitor.dll_PhSetDialogItemText
cmp qword [0x1808e8e68], 0
je 0x180140175
mov edx, 0xffffffff
mov rcx, qword [0x1808e8e68]
call sym.ProcessMonitor.dll_PhFormatSize
mov rcx, rax
call sym.ProcessMonitor.dll_PhAutoDereferenceObject
mov r8, qword [rax + 8]
mov edx, 0x533
mov rcx, qword [0x1808e8de0]
call sym.ProcessMonitor.dll_PhSetDialogItemText
jmp 0x18014018d
lea r8, [0x1804a2800]
mov edx, 0x533
mov rcx, qword [0x1808e8de0]
call sym.ProcessMonitor.dll_PhSetDialogItemText
mov eax, dword [0x1808ecfc4]
imul rax, rax, 0x1000
mov edx, 0xffffffff
mov rcx, rax
call sym.ProcessMonitor.dll_PhFormatSize
mov rcx, rax
call sym.ProcessMonitor.dll_PhAutoDereferenceObject
mov r8, qword [rax + 8]
mov edx, 0x527
mov rcx, qword [0x1808e8de0]
call sym.ProcessMonitor.dll_PhSetDialogItemText
mov eax, dword [0x1808ecfac]
imul rax, rax, 0x1000
mov edx, 0xffffffff
mov rcx, rax
call sym.ProcessMonitor.dll_PhFormatSize
mov rcx, rax
call sym.ProcessMonitor.dll_PhAutoDereferenceObject
mov r8, qword [rax + 8]
mov edx, 0x528
mov rcx, qword [0x1808e8de0]
call sym.ProcessMonitor.dll_PhSetDialogItemText
mov eax, dword [0x1808ecfcc]
imul rax, rax, 0x1000
mov edx, 0xffffffff
mov rcx, rax
call sym.ProcessMonitor.dll_PhFormatSize
mov rcx, rax
call sym.ProcessMonitor.dll_PhAutoDereferenceObject
mov r8, qword [rax + 8]
mov edx, 0x529
mov rcx, qword [0x1808e8de0]
call sym.ProcessMonitor.dll_PhSetDialogItemText
mov eax, dword [0x1808ecfc8]
imul rax, rax, 0x1000
mov edx, 0xffffffff
mov rcx, rax
call sym.ProcessMonitor.dll_PhFormatSize
mov rcx, rax
call sym.ProcessMonitor.dll_PhAutoDereferenceObject
mov r8, qword [rax + 8]
mov edx, 0x52a
mov rcx, qword [0x1808e8de0]
call sym.ProcessMonitor.dll_PhSetDialogItemText
mov eax, dword [0x1808ecf90]
imul rax, rax, 0x1000
mov edx, 0xffffffff
mov rcx, rax
call sym.ProcessMonitor.dll_PhFormatSize
mov rcx, rax
call sym.ProcessMonitor.dll_PhAutoDereferenceObject
mov r8, qword [rax + 8]
mov edx, 0x52b
mov rcx, qword [0x1808e8de0]
call sym.ProcessMonitor.dll_PhSetDialogItemText
cmp dword [0x1808e8de8], 1
jbe 0x1801402d7
mov eax, dword [0x1808e8df4]
mov dl, 1
mov ecx, eax
call sym.ProcessMonitor.dll_PhFormatUInt64
mov rcx, rax
call sym.ProcessMonitor.dll_PhAutoDereferenceObject
mov r8, qword [rax + 8]
mov edx, 0x52d
mov rcx, qword [0x1808e8de0]
call sym.ProcessMonitor.dll_PhSetDialogItemText
jmp 0x1801402ef
lea r8, [0x1804a2800]
mov edx, 0x52d
mov rcx, qword [0x1808e8de0]
call sym.ProcessMonitor.dll_PhSetDialogItemText
cmp dword [0x1808e8de8], 1
jbe 0x180140326
mov eax, dword [0x1808e8dfc]
mov dl, 1
mov ecx, eax
call sym.ProcessMonitor.dll_PhFormatUInt64
mov rcx, rax
call sym.ProcessMonitor.dll_PhAutoDereferenceObject
mov r8, qword [rax + 8]
mov edx, 0x52e
mov rcx, qword [0x1808e8de0]
call sym.ProcessMonitor.dll_PhSetDialogItemText
jmp 0x18014033e
lea r8, [0x1804a2800]
mov edx, 0x52e
mov rcx, qword [0x1808e8de0]
call sym.ProcessMonitor.dll_PhSetDialogItemText
mov eax, dword [0x1808ecf94]
imul rax, rax, 0x1000
mov edx, 0xffffffff
mov rcx, rax
call sym.ProcessMonitor.dll_PhFormatSize
mov rcx, rax
call sym.ProcessMonitor.dll_PhAutoDereferenceObject
mov r8, qword [rax + 8]
mov edx, 0x52f
mov rcx, qword [0x1808e8de0]
call sym.ProcessMonitor.dll_PhSetDialogItemText
cmp dword [0x1808e8de8], 1
jbe 0x1801403ac
mov eax, dword [0x1808e8df4]
mov dl, 1
mov ecx, eax
call sym.ProcessMonitor.dll_PhFormatUInt64
mov rcx, rax
call sym.ProcessMonitor.dll_PhAutoDereferenceObject
mov r8, qword [rax + 8]
mov edx, 0x531
mov rcx, qword [0x1808e8de0]
call sym.ProcessMonitor.dll_PhSetDialogItemText
jmp 0x1801403c4
lea r8, [0x1804a2800]
mov edx, 0x531
mov rcx, qword [0x1808e8de0]
call sym.ProcessMonitor.dll_PhSetDialogItemText
cmp dword [0x1808e8de8], 1
jbe 0x1801403fb
mov eax, dword [0x1808e8e0c]
mov dl, 1
mov ecx, eax
call sym.ProcessMonitor.dll_PhFormatUInt64
mov rcx, rax
call sym.ProcessMonitor.dll_PhAutoDereferenceObject
mov r8, qword [rax + 8]
mov edx, 0x532
mov rcx, qword [0x1808e8de0]
call sym.ProcessMonitor.dll_PhSetDialogItemText
jmp 0x180140413
lea r8, [0x1804a2800]
mov edx, 0x532
mov rcx, qword [0x1808e8de0]
call sym.ProcessMonitor.dll_PhSetDialogItemText
movzx eax, byte [0x1808e8dec]
test eax, eax
je 0x1801404c9
cmp qword [0x1808e8e50], 0
jne 0x18014043a
cmp qword [0x1808e8e58], 0
je 0x1801404c9
lea rdx, [rsp + 0x128]
lea rcx, [rsp + 0x108]
call fcn.18001a540
cmp qword [rsp + 0x108], 0xffffffffffffffff
je 0x18014047f
mov edx, 0xffffffff
mov rcx, qword [rsp + 0x108]
call sym.ProcessMonitor.dll_PhFormatSize
mov rcx, rax
call sym.ProcessMonitor.dll_PhAutoDereferenceObject
mov rax, qword [rax + 8]
mov qword [rsp + 0x20], rax
jmp 0x18014048b
lea rax, [0x1803b2e88]
mov qword [rsp + 0x20], rax
cmp qword [rsp + 0x128], 0xffffffffffffffff
je 0x1801404bb
mov edx, 0xffffffff
mov rcx, qword [rsp + 0x128]
call sym.ProcessMonitor.dll_PhFormatSize
mov rcx, rax
call sym.ProcessMonitor.dll_PhAutoDereferenceObject
mov rax, qword [rax + 8]
mov qword [rsp + 0x28], rax
jmp 0x1801404c7
lea rax, [0x1803b2e88]
mov qword [rsp + 0x28], rax
jmp 0x180140503
call fcn.180007390
movzx eax, al
test eax, eax
jne 0x1801404ed
lea rax, str.no_driver
mov qword [rsp + 0x28], rax
mov rax, qword [rsp + 0x28]
mov qword [rsp + 0x20], rax
jmp 0x180140503
lea rax, str.no_symbols
mov qword [rsp + 0x28], rax
mov rax, qword [rsp + 0x28]
mov qword [rsp + 0x20], rax
mov r8, qword [rsp + 0x20]
mov edx, 0x52c
mov rcx, qword [0x1808e8de0]
call sym.ProcessMonitor.dll_PhSetDialogItemText
mov r8, qword [rsp + 0x28]
mov edx, 0x530
mov rcx, qword [0x1808e8de0]
call sym.ProcessMonitor.dll_PhSetDialogItemText
cmp dword [0x1808e8de8], 1
jbe 0x180140566
mov eax, dword [0x1808e8e14]
mov dl, 1
mov ecx, eax
call sym.ProcessMonitor.dll_PhFormatUInt64
mov rcx, rax
call sym.ProcessMonitor.dll_PhAutoDereferenceObject
mov r8, qword [rax + 8]
mov edx, 0x558
mov rcx, qword [0x1808e8de0]
call sym.ProcessMonitor.dll_PhSetDialogItemText
jmp 0x18014057e
lea r8, [0x1804a2800]
mov edx, 0x558
mov rcx, qword [0x1808e8de0]
call sym.ProcessMonitor.dll_PhSetDialogItemText
cmp dword [0x1808e8de8], 1
jbe 0x1801405b5
mov eax, dword [0x1808e8e1c]
mov dl, 1
mov ecx, eax
call sym.ProcessMonitor.dll_PhFormatUInt64
mov rcx, rax
call sym.ProcessMonitor.dll_PhAutoDereferenceObject
mov r8, qword [rax + 8]
mov edx, 0x559
mov rcx, qword [0x1808e8de0]
call sym.ProcessMonitor.dll_PhSetDialogItemText
jmp 0x1801405cd
lea r8, [0x1804a2800]
mov edx, 0x559
mov rcx, qword [0x1808e8de0]
call sym.ProcessMonitor.dll_PhSetDialogItemText
cmp dword [0x1808e8de8], 1
jbe 0x180140604
mov eax, dword [0x1808e8e24]
mov dl, 1
mov ecx, eax
call sym.ProcessMonitor.dll_PhFormatUInt64
mov rcx, rax
call sym.ProcessMonitor.dll_PhAutoDereferenceObject
mov r8, qword [rax + 8]
mov edx, 0x55a
mov rcx, qword [0x1808e8de0]
call sym.ProcessMonitor.dll_PhSetDialogItemText
jmp 0x18014061c
lea r8, [0x1804a2800]
mov edx, 0x55a
mov rcx, qword [0x1808e8de0]
call sym.ProcessMonitor.dll_PhSetDialogItemText
cmp dword [0x1808e8de8], 1
jbe 0x180140653
mov eax, dword [0x1808e8e2c]
mov dl, 1
mov ecx, eax
call sym.ProcessMonitor.dll_PhFormatUInt64
mov rcx, rax
call sym.ProcessMonitor.dll_PhAutoDereferenceObject
mov r8, qword [rax + 8]
mov edx, 0x55b
mov rcx, qword [0x1808e8de0]
call sym.ProcessMonitor.dll_PhSetDialogItemText
jmp 0x18014066b
lea r8, [0x1804a2800]
mov edx, 0x55b
mov rcx, qword [0x1808e8de0]
call sym.ProcessMonitor.dll_PhSetDialogItemText
cmp dword [0x1808e8de8], 1
jbe 0x1801406a4
mov edx, 0xffffffff
mov rcx, qword [0x1808e8e38]
call sym.ProcessMonitor.dll_PhFormatSize
mov rcx, rax
call sym.ProcessMonitor.dll_PhAutoDereferenceObject
mov r8, qword [rax + 8]
mov edx, 0x55c
mov rcx, qword [0x1808e8de0]
call sym.ProcessMonitor.dll_PhSetDialogItemText
jmp 0x1801406bc
lea r8, [0x1804a2800]
mov edx, 0x55c
mov rcx, qword [0x1808e8de0]
call sym.ProcessMonitor.dll_PhSetDialogItemText
cmp dword [0x1808e8de8], 1
jbe 0x1801406f5
mov edx, 0xffffffff
mov rcx, qword [0x1808e8e48]
call sym.ProcessMonitor.dll_PhFormatSize
mov rcx, rax
call sym.ProcessMonitor.dll_PhAutoDereferenceObject
mov r8, qword [rax + 8]
mov edx, 0x55e
mov rcx, qword [0x1808e8de0]
call sym.ProcessMonitor.dll_PhSetDialogItemText
jmp 0x18014070d
lea r8, [0x1804a2800]
mov edx, 0x55e
mov rcx, qword [0x1808e8de0]
call sym.ProcessMonitor.dll_PhSetDialogItemText
xor r9d, r9d
mov r8d, 0xb0
lea rdx, [rsp + 0x40]
mov ecx, 0x50
call qword [sym.imp.ntdll.dll_NtQuerySystemInformation]
test eax, eax
jl 0x180140af6
mov qword [rsp + 0x138], 0
mov qword [rsp + 0x140], 0
mov dword [rsp + 0x148], 0
jmp 0x180140763
mov eax, dword [rsp + 0x148]
inc eax
mov dword [rsp + 0x148], eax
cmp dword [rsp + 0x148], 8
jae 0x1801407b6
mov eax, dword [rsp + 0x148]
mov rax, qword [rsp + rax*8 + 0x68]
mov rcx, qword [rsp + 0x138]
add rcx, rax
mov rax, rcx
mov qword [rsp + 0x138], rax
mov eax, dword [rsp + 0x148]
mov rax, qword [rsp + rax*8 + 0xa8]
mov rcx, qword [rsp + 0x140]
add rcx, rax
mov rax, rcx
mov qword [rsp + 0x140], rax
jmp 0x180140753
imul rax, qword [rsp + 0x40], 0x1000
mov edx, 0xffffffff
mov rcx, rax
call sym.ProcessMonitor.dll_PhFormatSize
mov rcx, rax
call sym.ProcessMonitor.dll_PhAutoDereferenceObject
mov r8, qword [rax + 8]
mov edx, 0x534
mov rcx, qword [0x1808e8de0]
call sym.ProcessMonitor.dll_PhSetDialogItemText
imul rax, qword [rsp + 0x48], 0x1000
mov edx, 0xffffffff
mov rcx, rax
call sym.ProcessMonitor.dll_PhFormatSize
mov rcx, rax
call sym.ProcessMonitor.dll_PhAutoDereferenceObject
mov r8, qword [rax + 8]
mov edx, 0x535
mov rcx, qword [0x1808e8de0]
call sym.ProcessMonitor.dll_PhSetDialogItemText
imul rax, qword [rsp + 0x50], 0x1000
mov edx, 0xffffffff
mov rcx, rax
call sym.ProcessMonitor.dll_PhFormatSize
mov rcx, rax
call sym.ProcessMonitor.dll_PhAutoDereferenceObject
mov r8, qword [rax + 8]
mov edx, 0x536
mov rcx, qword [0x1808e8de0]
call sym.ProcessMonitor.dll_PhSetDialogItemText
imul rax, qword [rsp + 0x58], 0x1000
mov edx, 0xffffffff
mov rcx, rax
call sym.ProcessMonitor.dll_PhFormatSize
mov rcx, rax
call sym.ProcessMonitor.dll_PhAutoDereferenceObject
mov r8, qword [rax + 8]
mov edx, 0x537
mov rcx, qword [0x1808e8de0]
call sym.ProcessMonitor.dll_PhSetDialogItemText
imul rax, qword [rsp + 0x138], 0x1000
mov edx, 0xffffffff
mov rcx, rax
call sym.ProcessMonitor.dll_PhFormatSize
mov rcx, rax
call sym.ProcessMonitor.dll_PhAutoDereferenceObject
mov r8, qword [rax + 8]
mov edx, 0x539
mov rcx, qword [0x1808e8de0]
call sym.ProcessMonitor.dll_PhSetDialogItemText
mov eax, 8
imul rax, rax, 0
imul rax, qword [rsp + rax + 0x68], 0x1000
mov edx, 0xffffffff
mov rcx, rax
call sym.ProcessMonitor.dll_PhFormatSize
mov rcx, rax
call sym.ProcessMonitor.dll_PhAutoDereferenceObject
mov r8, qword [rax + 8]
mov edx, 0x542
mov rcx, qword [0x1808e8de0]
call sym.ProcessMonitor.dll_PhSetDialogItemText
mov eax, 8
imul rax, rax, 1
imul rax, qword [rsp + rax + 0x68], 0x1000
mov edx, 0xffffffff
mov rcx, rax
call sym.ProcessMonitor.dll_PhFormatSize
mov rcx, rax
call sym.ProcessMonitor.dll_PhAutoDereferenceObject
mov r8, qword [rax + 8]
mov edx, 0x543
mov rcx, qword [0x1808e8de0]
call sym.ProcessMonitor.dll_PhSetDialogItemText
mov eax, 8
imul rax, rax, 2
imul rax, qword [rsp + rax + 0x68], 0x1000
mov edx, 0xffffffff
mov rcx, rax
call sym.ProcessMonitor.dll_PhFormatSize
mov rcx, rax
call sym.ProcessMonitor.dll_PhAutoDereferenceObject
mov r8, qword [rax + 8]
mov edx, 0x544
mov rcx, qword [0x1808e8de0]
call sym.ProcessMonitor.dll_PhSetDialogItemText
mov eax, 8
imul rax, rax, 3
imul rax, qword [rsp + rax + 0x68], 0x1000
mov edx, 0xffffffff
mov rcx, rax
call sym.ProcessMonitor.dll_PhFormatSize
mov rcx, rax
call sym.ProcessMonitor.dll_PhAutoDereferenceObject
mov r8, qword [rax + 8]
mov edx, 0x545
mov rcx, qword [0x1808e8de0]
call sym.ProcessMonitor.dll_PhSetDialogItemText
mov eax, 8
imul rax, rax, 4
imul rax, qword [rsp + rax + 0x68], 0x1000
mov edx, 0xffffffff
mov rcx, rax
call sym.ProcessMonitor.dll_PhFormatSize
mov rcx, rax
call sym.ProcessMonitor.dll_PhAutoDereferenceObject
mov r8, qword [rax + 8]
mov edx, 0x554
mov rcx, qword [0x1808e8de0]
call sym.ProcessMonitor.dll_PhSetDialogItemText
mov eax, 8
imul rax, rax, 5
imul rax, qword [rsp + rax + 0x68], 0x1000
mov edx, 0xffffffff
mov rcx, rax
call sym.ProcessMonitor.dll_PhFormatSize
mov rcx, rax
call sym.ProcessMonitor.dll_PhAutoDereferenceObject
mov r8, qword [rax + 8]
mov edx, 0x555
mov rcx, qword [0x1808e8de0]
call sym.ProcessMonitor.dll_PhSetDialogItemText
mov eax, 8
imul rax, rax, 6
imul rax, qword [rsp + rax + 0x68], 0x1000
mov edx, 0xffffffff
mov rcx, rax
call sym.ProcessMonitor.dll_PhFormatSize
mov rcx, rax
call sym.ProcessMonitor.dll_PhAutoDereferenceObject
mov r8, qword [rax + 8]
mov edx, 0x556
mov rcx, qword [0x1808e8de0]
call sym.ProcessMonitor.dll_PhSetDialogItemText
mov eax, 8
imul rax, rax, 7
imul rax, qword [rsp + rax + 0x68], 0x1000
mov edx, 0xffffffff
mov rcx, rax
call sym.ProcessMonitor.dll_PhFormatSize
mov rcx, rax
call sym.ProcessMonitor.dll_PhAutoDereferenceObject
mov r8, qword [rax + 8]
mov edx, 0x557
mov rcx, qword [0x1808e8de0]
call sym.ProcessMonitor.dll_PhSetDialogItemText
cmp dword [0x18059ff7c], 0x3e
jb 0x180140ad9
imul rax, qword [rsp + 0xe8], 0x1000
mov edx, 0xffffffff
mov rcx, rax
call sym.ProcessMonitor.dll_PhFormatSize
mov rcx, rax
call sym.ProcessMonitor.dll_PhAutoDereferenceObject
mov r8, qword [rax + 8]
mov edx, 0x55d
mov rcx, qword [0x1808e8de0]
call sym.ProcessMonitor.dll_PhSetDialogItemText
jmp 0x180140af1
lea r8, [0x1803b2e88]
mov edx, 0x55d
mov rcx, qword [0x1808e8de0]
call sym.ProcessMonitor.dll_PhSetDialogItemText
jmp 0x180140c46
lea r8, [0x1803b2e88]
mov edx, 0x534
mov rcx, qword [0x1808e8de0]
call sym.ProcessMonitor.dll_PhSetDialogItemText
lea r8, [0x1803b2e88]
mov edx, 0x535
mov rcx, qword [0x1808e8de0]
call sym.ProcessMonitor.dll_PhSetDialogItemText
lea r8, [0x1803b2e88]
mov edx, 0x536
mov rcx, qword [0x1808e8de0]
call sym.ProcessMonitor.dll_PhSetDialogItemText
lea r8, [0x1803b2e88]
mov edx, 0x537
mov rcx, qword [0x1808e8de0]
call sym.ProcessMonitor.dll_PhSetDialogItemText
lea r8, [0x1803b2e88]
mov edx, 0x55d
mov rcx, qword [0x1808e8de0]
call sym.ProcessMonitor.dll_PhSetDialogItemText
lea r8, [0x1803b2e88]
mov edx, 0x539
mov rcx, qword [0x1808e8de0]
call sym.ProcessMonitor.dll_PhSetDialogItemText
lea r8, [0x1803b2e88]
mov edx, 0x542
mov rcx, qword [0x1808e8de0]
call sym.ProcessMonitor.dll_PhSetDialogItemText
lea r8, [0x1803b2e88]
mov edx, 0x543
mov rcx, qword [0x1808e8de0]
call sym.ProcessMonitor.dll_PhSetDialogItemText
lea r8, [0x1803b2e88]
mov edx, 0x544
mov rcx, qword [0x1808e8de0]
call sym.ProcessMonitor.dll_PhSetDialogItemText
lea r8, [0x1803b2e88]
mov edx, 0x545
mov rcx, qword [0x1808e8de0]
call sym.ProcessMonitor.dll_PhSetDialogItemText
lea r8, [0x1803b2e88]
mov edx, 0x554
mov rcx, qword [0x1808e8de0]
call sym.ProcessMonitor.dll_PhSetDialogItemText
lea r8, [0x1803b2e88]
mov edx, 0x555
mov rcx, qword [0x1808e8de0]
call sym.ProcessMonitor.dll_PhSetDialogItemText
lea r8, [0x1803b2e88]
mov edx, 0x556
mov rcx, qword [0x1808e8de0]
call sym.ProcessMonitor.dll_PhSetDialogItemText
lea r8, [0x1803b2e88]
mov edx, 0x557
mov rcx, qword [0x1808e8de0]
call sym.ProcessMonitor.dll_PhSetDialogItemText
mov rcx, rsp
lea rdx, [0x1804a2eb0]
call fcn.180014e20
mov rcx, qword [rsp + 0x158]
xor rcx, rsp
call fcn.18000ce90
add rsp, 0x160
pop rdi
ret