Function at 0x14009a070
Capabilities:
Get system information on windows

Disassembly:
mov qword [rsp + 0x18], rbx
mov qword [rsp + 0x20], rdi
push rbp
lea rbp, [rsp - 0x57]
sub rsp, 0x100
movzx eax, byte [0x140158690]
lea rcx, [rbp - 0x79]
mov byte [rbp - 0x6f], al
xor r8d, r8d
mov eax, dword [0x14015ef90]
shl rax, 0xc
mov qword [rbp - 0x69], rax
lea edx, [r8 + 1]
mov dword [rbp - 0x79], 0x10c
call sym.ProcessJacker.exe_PhFormat
mov rcx, rax
call sym.ProcessJacker.exe_PhAutoDereferenceObject
mov rcx, qword [0x14015d978]
mov edx, 0x522
mov r8, qword [rax + 8]
call qword [sym.imp.USER32.dll_SetDlgItemTextW]
movzx eax, byte [0x140158690]
lea rcx, [rbp - 0x79]
mov byte [rbp - 0x6f], al
xor r8d, r8d
mov eax, dword [0x14015ef98]
shl rax, 0xc
mov qword [rbp - 0x69], rax
lea edx, [r8 + 1]
mov dword [rbp - 0x79], 0x10c
call sym.ProcessJacker.exe_PhFormat
mov rcx, rax
call sym.ProcessJacker.exe_PhAutoDereferenceObject
mov rcx, qword [0x14015d978]
mov edx, 0x523
mov r8, qword [rax + 8]
call qword [sym.imp.USER32.dll_SetDlgItemTextW]
movzx eax, byte [0x140158690]
lea rcx, [rbp - 0x79]
mov byte [rbp - 0x6f], al
xor r8d, r8d
mov eax, dword [0x14015ef94]
shl rax, 0xc
mov qword [rbp - 0x69], rax
lea edx, [r8 + 1]
mov dword [rbp - 0x79], 0x10c
call sym.ProcessJacker.exe_PhFormat
mov rcx, rax
call sym.ProcessJacker.exe_PhAutoDereferenceObject
mov rcx, qword [0x14015d978]
mov edx, 0x524
mov r8, qword [rax + 8]
call qword [sym.imp.USER32.dll_SetDlgItemTextW]
mov ecx, dword [0x14015de8c]
xor r8d, r8d
sub ecx, dword [0x14015ef8c]
movzx eax, byte [0x140158690]
shl rcx, 0xc
mov qword [rbp - 0x69], rcx
lea edx, [r8 + 1]
lea rcx, [rbp - 0x79]
mov dword [rbp - 0x79], 0x10c
mov byte [rbp - 0x6f], al
call sym.ProcessJacker.exe_PhFormat
mov rcx, rax
call sym.ProcessJacker.exe_PhAutoDereferenceObject
mov rcx, qword [0x14015d978]
mov edx, 0x525
mov r8, qword [rax + 8]
call qword [sym.imp.USER32.dll_SetDlgItemTextW]
movzx eax, byte [0x140158690]
lea rcx, [rbp - 0x79]
mov byte [rbp - 0x6f], al
xor r8d, r8d
mov eax, dword [0x14015de8c]
shl rax, 0xc
mov qword [rbp - 0x69], rax
lea edx, [r8 + 1]
mov dword [rbp - 0x79], 0x10c
call sym.ProcessJacker.exe_PhFormat
mov rcx, rax
call sym.ProcessJacker.exe_PhAutoDereferenceObject
mov rcx, qword [0x14015d978]
mov edx, 0x526
mov r8, qword [rax + 8]
call qword [sym.imp.USER32.dll_SetDlgItemTextW]
mov rcx, qword [0x14015d9a0]
test rcx, rcx
je 0x14009a25e
movzx eax, byte [0x140158690]
xor r8d, r8d
mov byte [rbp - 0x6f], al
mov eax, dword [0x14015de8c]
shl rax, 2
sub rcx, rax
mov dword [rbp - 0x79], 0x10c
shl rcx, 0xa
lea edx, [r8 + 1]
mov qword [rbp - 0x69], rcx
lea rcx, [rbp - 0x79]
call sym.ProcessJacker.exe_PhFormat
mov rcx, rax
call sym.ProcessJacker.exe_PhAutoDereferenceObject
mov r8, qword [rax + 8]
jmp 0x14009a265
lea r8, [0x140131f08]
mov rcx, qword [0x14015d978]
mov edx, 0x533
call qword [sym.imp.USER32.dll_SetDlgItemTextW]
movzx eax, byte [0x140158690]
lea rcx, [rbp - 0x79]
mov byte [rbp - 0x6f], al
xor r8d, r8d
mov eax, dword [0x14015f004]
shl rax, 0xc
mov qword [rbp - 0x69], rax
lea edx, [r8 + 1]
mov dword [rbp - 0x79], 0x10c
call sym.ProcessJacker.exe_PhFormat
mov rcx, rax
call sym.ProcessJacker.exe_PhAutoDereferenceObject
mov rcx, qword [0x14015d978]
mov edx, 0x527
mov r8, qword [rax + 8]
call qword [sym.imp.USER32.dll_SetDlgItemTextW]
movzx eax, byte [0x140158690]
lea rcx, [rbp - 0x79]
mov byte [rbp - 0x6f], al
xor r8d, r8d
mov eax, dword [0x14015efec]
shl rax, 0xc
mov qword [rbp - 0x69], rax
lea edx, [r8 + 1]
mov dword [rbp - 0x79], 0x10c
call sym.ProcessJacker.exe_PhFormat
mov rcx, rax
call sym.ProcessJacker.exe_PhAutoDereferenceObject
mov rcx, qword [0x14015d978]
mov edx, 0x528
mov r8, qword [rax + 8]
call qword [sym.imp.USER32.dll_SetDlgItemTextW]
movzx eax, byte [0x140158690]
lea rcx, [rbp - 0x79]
mov byte [rbp - 0x6f], al
xor r8d, r8d
mov eax, dword [0x14015f00c]
shl rax, 0xc
mov qword [rbp - 0x69], rax
lea edx, [r8 + 1]
mov dword [rbp - 0x79], 0x10c
call sym.ProcessJacker.exe_PhFormat
mov rcx, rax
call sym.ProcessJacker.exe_PhAutoDereferenceObject
mov rcx, qword [0x14015d978]
mov edx, 0x529
mov r8, qword [rax + 8]
call qword [sym.imp.USER32.dll_SetDlgItemTextW]
movzx eax, byte [0x140158690]
lea rcx, [rbp - 0x79]
mov byte [rbp - 0x6f], al
xor r8d, r8d
mov eax, dword [0x14015f008]
shl rax, 0xc
mov qword [rbp - 0x69], rax
lea edx, [r8 + 1]
mov dword [rbp - 0x79], 0x10c
call sym.ProcessJacker.exe_PhFormat
mov rcx, rax
call sym.ProcessJacker.exe_PhAutoDereferenceObject
mov rcx, qword [0x14015d978]
mov edx, 0x52a
mov r8, qword [rax + 8]
call qword [sym.imp.USER32.dll_SetDlgItemTextW]
movzx eax, byte [0x140158690]
lea rcx, [rbp - 0x79]
mov byte [rbp - 0x6f], al
xor r8d, r8d
mov eax, dword [0x14015efd0]
shl rax, 0xc
mov qword [rbp - 0x69], rax
lea edx, [r8 + 1]
mov dword [rbp - 0x79], 0x10c
call sym.ProcessJacker.exe_PhFormat
mov rcx, rax
call sym.ProcessJacker.exe_PhAutoDereferenceObject
mov edx, 0x52b
mov r8, qword [rax + 8]
mov rcx, qword [0x14015d978]
call qword [sym.imp.USER32.dll_SetDlgItemTextW]
cmp dword [0x14015dac0], 1
jbe 0x14009a430
mov eax, dword [0x14015d98c]
lea rcx, [rbp - 0x79]
xor r8d, r8d
mov dword [rbp - 0x79], 0x10009
mov qword [rbp - 0x69], rax
lea edx, [r8 + 1]
call sym.ProcessJacker.exe_PhFormat
mov rcx, rax
call sym.ProcessJacker.exe_PhAutoDereferenceObject
mov r8, qword [rax + 8]
jmp 0x14009a437
lea r8, [0x140131f08]
mov rcx, qword [0x14015d978]
mov edx, 0x52d
call qword [sym.imp.USER32.dll_SetDlgItemTextW]
cmp dword [0x14015dac0], 1
jbe 0x14009a481
mov eax, dword [0x14015da8c]
lea rcx, [rbp - 0x79]
xor r8d, r8d
mov dword [rbp - 0x79], 0x10009
mov qword [rbp - 0x69], rax
lea edx, [r8 + 1]
call sym.ProcessJacker.exe_PhFormat
mov rcx, rax
call sym.ProcessJacker.exe_PhAutoDereferenceObject
mov r8, qword [rax + 8]
jmp 0x14009a488
lea r8, [0x140131f08]
mov rcx, qword [0x14015d978]
mov edx, 0x52e
call qword [sym.imp.USER32.dll_SetDlgItemTextW]
movzx eax, byte [0x140158690]
lea rcx, [rbp - 0x79]
mov byte [rbp - 0x6f], al
xor r8d, r8d
mov eax, dword [0x14015efd4]
shl rax, 0xc
mov qword [rbp - 0x69], rax
lea edx, [r8 + 1]
mov dword [rbp - 0x79], 0x10c
call sym.ProcessJacker.exe_PhFormat
mov rcx, rax
call sym.ProcessJacker.exe_PhAutoDereferenceObject
mov rcx, qword [0x14015d978]
mov edx, 0x52f
mov r8, qword [rax + 8]
call qword [sym.imp.USER32.dll_SetDlgItemTextW]
cmp dword [0x14015dac0], 1
jbe 0x14009a51f
mov eax, dword [0x14015d98c]
lea rcx, [rbp - 0x79]
xor r8d, r8d
mov dword [rbp - 0x79], 0x10009
mov qword [rbp - 0x69], rax
lea edx, [r8 + 1]
call sym.ProcessJacker.exe_PhFormat
mov rcx, rax
call sym.ProcessJacker.exe_PhAutoDereferenceObject
mov r8, qword [rax + 8]
jmp 0x14009a526
lea r8, [0x140131f08]
mov rcx, qword [0x14015d978]
mov edx, 0x531
call qword [sym.imp.USER32.dll_SetDlgItemTextW]
cmp dword [0x14015dac0], 1
jbe 0x14009a570
mov eax, dword [0x14015d9ac]
lea rcx, [rbp - 0x79]
xor r8d, r8d
mov dword [rbp - 0x79], 0x10009
mov qword [rbp - 0x69], rax
lea edx, [r8 + 1]
call sym.ProcessJacker.exe_PhFormat
mov rcx, rax
call sym.ProcessJacker.exe_PhAutoDereferenceObject
mov r8, qword [rax + 8]
jmp 0x14009a577
lea r8, [0x140131f08]
mov rcx, qword [0x14015d978]
mov edx, 0x532
call qword [sym.imp.USER32.dll_SetDlgItemTextW]
cmp byte [0x14015d73a], 0
je 0x14009a682
mov rax, qword [0x14015da70]
mov rdx, qword [0x14015da80]
test rax, rax
jne 0x14009a5b2
test rdx, rdx
je 0x14009a682
or rcx, 0xffffffffffffffff
mov qword [rbp + 0x67], rcx
mov rdi, rcx
mov qword [rbp + 0x6f], rcx
test rax, rax
je 0x14009a5ea
cmp dword [sym.ProcessJacker.exe_WindowsVersion], 0x3e
jae 0x14009a5ea
lea r8, [rbp + 0x67]
mov rdx, rax
call fcn.1400c05c0
mov rdx, qword [0x14015da80]
mov rcx, qword [rbp + 0x67]
mov rdi, qword [rbp + 0x6f]
test rdx, rdx
je 0x14009a600
lea r8, [rbp + 0x6f]
call fcn.1400c05c0
mov rcx, qword [rbp + 0x67]
mov rdi, qword [rbp + 0x6f]
cmp rcx, 0xffffffffffffffff
je 0x14009a639
movzx eax, byte [0x140158690]
xor r8d, r8d
mov qword [rbp - 0x69], rcx
lea rcx, [rbp - 0x79]
mov dword [rbp - 0x79], 0x10c
mov byte [rbp - 0x6f], al
lea edx, [r8 + 1]
call sym.ProcessJacker.exe_PhFormat
mov rcx, rax
call sym.ProcessJacker.exe_PhAutoDereferenceObject
mov rbx, qword [rax + 8]
jmp 0x14009a640
lea rbx, [0x14012c110]
cmp rdi, 0xffffffffffffffff
je 0x14009a679
movzx eax, byte [0x140158690]
lea rcx, [rbp - 0x79]
xor r8d, r8d
mov dword [rbp - 0x79], 0x10c
mov byte [rbp - 0x6f], al
mov qword [rbp - 0x69], rdi
lea edx, [r8 + 1]
call sym.ProcessJacker.exe_PhFormat
mov rcx, rax
call sym.ProcessJacker.exe_PhAutoDereferenceObject
mov rdi, qword [rax + 8]
jmp 0x14009a69d
lea rdi, [0x14012c110]
jmp 0x14009a69d
cmp qword [0x14015b300], 0
lea rbx, str.no_driver
je 0x14009a69a
lea rbx, str.no_symbols
mov rdi, rbx
mov rcx, qword [0x14015d978]
mov r8, rbx
mov edx, 0x52c
call qword [sym.imp.USER32.dll_SetDlgItemTextW]
mov rcx, qword [0x14015d978]
mov r8, rdi
mov edx, 0x530
call qword [sym.imp.USER32.dll_SetDlgItemTextW]
cmp dword [0x14015dac0], 1
jbe 0x14009a6ff
mov eax, dword [0x14015da7c]
lea rcx, [rbp - 0x79]
xor r8d, r8d
mov dword [rbp - 0x79], 0x10009
mov qword [rbp - 0x69], rax
lea edx, [r8 + 1]
call sym.ProcessJacker.exe_PhFormat
mov rcx, rax
call sym.ProcessJacker.exe_PhAutoDereferenceObject
mov r8, qword [rax + 8]
jmp 0x14009a706
lea r8, [0x140131f08]
mov rcx, qword [0x14015d978]
mov edx, 0x558
call qword [sym.imp.USER32.dll_SetDlgItemTextW]
cmp dword [0x14015dac0], 1
jbe 0x14009a750
mov eax, dword [0x14015d984]
lea rcx, [rbp - 0x79]
xor r8d, r8d
mov dword [rbp - 0x79], 0x10009
mov qword [rbp - 0x69], rax
lea edx, [r8 + 1]
call sym.ProcessJacker.exe_PhFormat
mov rcx, rax
call sym.ProcessJacker.exe_PhAutoDereferenceObject
mov r8, qword [rax + 8]
jmp 0x14009a757
lea r8, [0x140131f08]
mov rcx, qword [0x14015d978]
mov edx, 0x559
call qword [sym.imp.USER32.dll_SetDlgItemTextW]
cmp dword [0x14015dac0], 1
jbe 0x14009a7a1
mov eax, dword [0x14015d974]
lea rcx, [rbp - 0x79]
xor r8d, r8d
mov dword [rbp - 0x79], 0x10009
mov qword [rbp - 0x69], rax
lea edx, [r8 + 1]
call sym.ProcessJacker.exe_PhFormat
mov rcx, rax
call sym.ProcessJacker.exe_PhAutoDereferenceObject
mov r8, qword [rax + 8]
jmp 0x14009a7a8
lea r8, [0x140131f08]
mov rcx, qword [0x14015d978]
mov edx, 0x55a
call qword [sym.imp.USER32.dll_SetDlgItemTextW]
cmp dword [0x14015dac0], 1
jbe 0x14009a7f2
mov eax, dword [0x14015d994]
lea rcx, [rbp - 0x79]
xor r8d, r8d
mov dword [rbp - 0x79], 0x10009
mov qword [rbp - 0x69], rax
lea edx, [r8 + 1]
call sym.ProcessJacker.exe_PhFormat
mov rcx, rax
call sym.ProcessJacker.exe_PhAutoDereferenceObject
mov r8, qword [rax + 8]
jmp 0x14009a7f9
lea r8, [0x140131f08]
mov rcx, qword [0x14015d978]
mov edx, 0x55b
call qword [sym.imp.USER32.dll_SetDlgItemTextW]
cmp dword [sym.ProcessJacker.exe_WindowsVersion], 0x3c
jb 0x14009add6
xor r9d, r9d
lea rdx, [rbp - 0x59]
mov r8d, 0xb0
lea ecx, [r9 + 0x50]
call qword [sym.imp.ntdll.dll_NtQuerySystemInformation]
test eax, eax
js 0x14009ac78
movzx eax, byte [0x140158690]
lea rcx, [rbp - 0x79]
mov rbx, qword [rbp + 7]
xor r8d, r8d
add rbx, qword [rbp - 1]
add rbx, qword [rbp - 9]
add rbx, qword [rbp - 0x11]
add rbx, qword [rbp - 0x19]
lea edx, [r8 + 1]
add rbx, qword [rbp - 0x21]
add rbx, qword [rbp - 0x29]
add rbx, qword [rbp - 0x31]
mov byte [rbp - 0x6f], al
mov rax, qword [rbp - 0x59]
shl rax, 0xc
mov dword [rbp - 0x79], 0x10c
mov qword [rbp - 0x69], rax
call sym.ProcessJacker.exe_PhFormat
mov rcx, rax
call sym.ProcessJacker.exe_PhAutoDereferenceObject
mov rcx, qword [0x14015d978]
mov edx, 0x534
mov r8, qword [rax + 8]
call qword [sym.imp.USER32.dll_SetDlgItemTextW]
movzx eax, byte [0x140158690]
lea rcx, [rbp - 0x79]
mov byte [rbp - 0x6f], al
xor r8d, r8d
mov rax, qword [rbp - 0x51]
shl rax, 0xc
mov qword [rbp - 0x69], rax
lea edx, [r8 + 1]
mov dword [rbp - 0x79], 0x10c
call sym.ProcessJacker.exe_PhFormat
mov rcx, rax
call sym.ProcessJacker.exe_PhAutoDereferenceObject
mov rcx, qword [0x14015d978]
mov edx, 0x535
mov r8, qword [rax + 8]
call qword [sym.imp.USER32.dll_SetDlgItemTextW]
movzx eax, byte [0x140158690]
lea rcx, [rbp - 0x79]
mov byte [rbp - 0x6f], al
xor r8d, r8d
mov rax, qword [rbp - 0x49]
shl rax, 0xc
mov qword [rbp - 0x69], rax
lea edx, [r8 + 1]
mov dword [rbp - 0x79], 0x10c
call sym.ProcessJacker.exe_PhFormat
mov rcx, rax
call sym.ProcessJacker.exe_PhAutoDereferenceObject
mov rcx, qword [0x14015d978]
mov edx, 0x536
mov r8, qword [rax + 8]
call qword [sym.imp.USER32.dll_SetDlgItemTextW]
movzx eax, byte [0x140158690]
lea rcx, [rbp - 0x79]
mov byte [rbp - 0x6f], al
xor r8d, r8d
mov rax, qword [rbp - 0x41]
shl rax, 0xc
mov qword [rbp - 0x69], rax
lea edx, [r8 + 1]
mov dword [rbp - 0x79], 0x10c
call sym.ProcessJacker.exe_PhFormat
mov rcx, rax
call sym.ProcessJacker.exe_PhAutoDereferenceObject
mov rcx, qword [0x14015d978]
mov edx, 0x537
mov r8, qword [rax + 8]
call qword [sym.imp.USER32.dll_SetDlgItemTextW]
movzx eax, byte [0x140158690]
lea rcx, [rbp - 0x79]
xor r8d, r8d
shl rbx, 0xc
mov dword [rbp - 0x79], 0x10c
mov byte [rbp - 0x6f], al
mov qword [rbp - 0x69], rbx
lea edx, [r8 + 1]
call sym.ProcessJacker.exe_PhFormat
mov rcx, rax
call sym.ProcessJacker.exe_PhAutoDereferenceObject
mov rcx, qword [0x14015d978]
mov edx, 0x539
mov r8, qword [rax + 8]
call qword [sym.imp.USER32.dll_SetDlgItemTextW]
movzx eax, byte [0x140158690]
lea rcx, [rbp - 0x79]
mov byte [rbp - 0x6f], al
xor r8d, r8d
mov rax, qword [rbp - 0x31]
shl rax, 0xc
mov qword [rbp - 0x69], rax
lea edx, [r8 + 1]
mov dword [rbp - 0x79], 0x10c
call sym.ProcessJacker.exe_PhFormat
mov rcx, rax
call sym.ProcessJacker.exe_PhAutoDereferenceObject
mov rcx, qword [0x14015d978]
mov edx, 0x542
mov r8, qword [rax + 8]
call qword [sym.imp.USER32.dll_SetDlgItemTextW]
movzx eax, byte [0x140158690]
lea rcx, [rbp - 0x79]
mov byte [rbp - 0x6f], al
xor r8d, r8d
mov rax, qword [rbp - 0x29]
shl rax, 0xc
mov qword [rbp - 0x69], rax
lea edx, [r8 + 1]
mov dword [rbp - 0x79], 0x10c
call sym.ProcessJacker.exe_PhFormat
mov rcx, rax
call sym.ProcessJacker.exe_PhAutoDereferenceObject
mov rcx, qword [0x14015d978]
mov edx, 0x543
mov r8, qword [rax + 8]
call qword [sym.imp.USER32.dll_SetDlgItemTextW]
movzx eax, byte [0x140158690]
lea rcx, [rbp - 0x79]
mov byte [rbp - 0x6f], al
xor r8d, r8d
mov rax, qword [rbp - 0x21]
shl rax, 0xc
mov qword [rbp - 0x69], rax
lea edx, [r8 + 1]
mov dword [rbp - 0x79], 0x10c
call sym.ProcessJacker.exe_PhFormat
mov rcx, rax
call sym.ProcessJacker.exe_PhAutoDereferenceObject
mov rcx, qword [0x14015d978]
mov edx, 0x544
mov r8, qword [rax + 8]
call qword [sym.imp.USER32.dll_SetDlgItemTextW]
movzx eax, byte [0x140158690]
lea rcx, [rbp - 0x79]
mov byte [rbp - 0x6f], al
xor r8d, r8d
mov rax, qword [rbp - 0x19]
shl rax, 0xc
mov qword [rbp - 0x69], rax
lea edx, [r8 + 1]
mov dword [rbp - 0x79], 0x10c
call sym.ProcessJacker.exe_PhFormat
mov rcx, rax
call sym.ProcessJacker.exe_PhAutoDereferenceObject
mov rcx, qword [0x14015d978]
mov edx, 0x545
mov r8, qword [rax + 8]
call qword [sym.imp.USER32.dll_SetDlgItemTextW]
movzx eax, byte [0x140158690]
lea rcx, [rbp - 0x79]
mov byte [rbp - 0x6f], al
xor r8d, r8d
mov rax, qword [rbp - 0x11]
shl rax, 0xc
mov qword [rbp - 0x69], rax
lea edx, [r8 + 1]
mov dword [rbp - 0x79], 0x10c
call sym.ProcessJacker.exe_PhFormat
mov rcx, rax
call sym.ProcessJacker.exe_PhAutoDereferenceObject
mov rcx, qword [0x14015d978]
mov edx, 0x554
mov r8, qword [rax + 8]
call qword [sym.imp.USER32.dll_SetDlgItemTextW]
movzx eax, byte [0x140158690]
lea rcx, [rbp - 0x79]
mov byte [rbp - 0x6f], al
xor r8d, r8d
mov rax, qword [rbp - 9]
shl rax, 0xc
mov qword [rbp - 0x69], rax
lea edx, [r8 + 1]
mov dword [rbp - 0x79], 0x10c
call sym.ProcessJacker.exe_PhFormat
mov rcx, rax
call sym.ProcessJacker.exe_PhAutoDereferenceObject
mov rcx, qword [0x14015d978]
mov edx, 0x555
mov r8, qword [rax + 8]
call qword [sym.imp.USER32.dll_SetDlgItemTextW]
movzx eax, byte [0x140158690]
lea rcx, [rbp - 0x79]
mov byte [rbp - 0x6f], al
xor r8d, r8d
mov rax, qword [rbp - 1]
shl rax, 0xc
mov qword [rbp - 0x69], rax
lea edx, [r8 + 1]
mov dword [rbp - 0x79], 0x10c
call sym.ProcessJacker.exe_PhFormat
mov rcx, rax
call sym.ProcessJacker.exe_PhAutoDereferenceObject
mov rcx, qword [0x14015d978]
mov edx, 0x556
mov r8, qword [rax + 8]
call qword [sym.imp.USER32.dll_SetDlgItemTextW]
movzx eax, byte [0x140158690]
lea rcx, [rbp - 0x79]
mov byte [rbp - 0x6f], al
xor r8d, r8d
mov rax, qword [rbp + 7]
shl rax, 0xc
mov qword [rbp - 0x69], rax
lea edx, [r8 + 1]
mov dword [rbp - 0x79], 0x10c
call sym.ProcessJacker.exe_PhFormat
mov rcx, rax
call sym.ProcessJacker.exe_PhAutoDereferenceObject
mov rcx, qword [0x14015d978]
mov edx, 0x557
mov r8, qword [rax + 8]
call qword [sym.imp.USER32.dll_SetDlgItemTextW]
cmp dword [sym.ProcessJacker.exe_WindowsVersion], 0x3e
jb 0x14009ac6e
movzx eax, byte [0x140158690]
lea rcx, [rbp - 0x79]
mov byte [rbp - 0x6f], al
xor r8d, r8d
mov rax, qword [rbp + 0x4f]
shl rax, 0xc
mov qword [rbp - 0x69], rax
lea edx, [r8 + 1]
mov dword [rbp - 0x79], 0x10c
call sym.ProcessJacker.exe_PhFormat
mov rcx, rax
call sym.ProcessJacker.exe_PhAutoDereferenceObject
mov edx, 0x55d
mov r8, qword [rax + 8]
jmp 0x14009adc9
mov edx, 0x55d
jmp 0x14009adc2
mov rcx, qword [0x14015d978]
lea r8, [0x14012c110]
mov edx, 0x534
call qword [sym.imp.USER32.dll_SetDlgItemTextW]
mov rcx, qword [0x14015d978]
lea r8, [0x14012c110]
mov edx, 0x535
call qword [sym.imp.USER32.dll_SetDlgItemTextW]
mov rcx, qword [0x14015d978]
lea r8, [0x14012c110]
mov edx, 0x536
call qword [sym.imp.USER32.dll_SetDlgItemTextW]
mov rcx, qword [0x14015d978]
lea r8, [0x14012c110]
mov edx, 0x537
call qword [sym.imp.USER32.dll_SetDlgItemTextW]
mov rcx, qword [0x14015d978]
lea r8, [0x14012c110]
mov edx, 0x55d
call qword [sym.imp.USER32.dll_SetDlgItemTextW]
mov rcx, qword [0x14015d978]
lea r8, [0x14012c110]
mov edx, 0x539
call qword [sym.imp.USER32.dll_SetDlgItemTextW]
mov rcx, qword [0x14015d978]
lea r8, [0x14012c110]
mov edx, 0x542
call qword [sym.imp.USER32.dll_SetDlgItemTextW]
mov rcx, qword [0x14015d978]
lea r8, [0x14012c110]
mov edx, 0x543
call qword [sym.imp.USER32.dll_SetDlgItemTextW]
mov rcx, qword [0x14015d978]
lea r8, [0x14012c110]
mov edx, 0x544
call qword [sym.imp.USER32.dll_SetDlgItemTextW]
mov rcx, qword [0x14015d978]
lea r8, [0x14012c110]
mov edx, 0x545
call qword [sym.imp.USER32.dll_SetDlgItemTextW]
mov rcx, qword [0x14015d978]
lea r8, [0x14012c110]
mov edx, 0x554
call qword [sym.imp.USER32.dll_SetDlgItemTextW]
mov rcx, qword [0x14015d978]
lea r8, [0x14012c110]
mov edx, 0x555
call qword [sym.imp.USER32.dll_SetDlgItemTextW]
mov rcx, qword [0x14015d978]
lea r8, [0x14012c110]
mov edx, 0x556
call qword [sym.imp.USER32.dll_SetDlgItemTextW]
mov edx, 0x557
lea r8, [0x14012c110]
mov rcx, qword [0x14015d978]
call qword [sym.imp.USER32.dll_SetDlgItemTextW]
lea r11, [rsp + 0x100]
mov rbx, qword [r11 + 0x20]
mov rdi, qword [r11 + 0x28]
mov rsp, r11
pop rbp
ret