Function at 0x43f430
Capabilities:
Get graphical window text

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x58
push esi
push edi
mov edi, ecx
push 0x577
push edi
call dword [sym.imp.USER32.dll_GetDlgItem]
push str.SampleCount
mov esi, eax
call sym.ProcessHacker.exe_PhGetIntegerSetting
push 0xa
lea ecx, [ebp - 0x1c]
push ecx
push eax
call fcn.004dec37
add esp, 0xc
push 0x500
push edi
call dword [sym.imp.USER32.dll_GetDlgItem]
test eax, eax
je 0x43f480
lea ecx, [ebp - 0x1c]
push ecx
push 0
push 0xc
push eax
call dword [sym.imp.USER32.dll_SendMessageW]
push 0
push str.SampleCountAutomatic
call sym.ProcessHacker.exe_PhGetIntegerSetting
neg eax
sbb eax, eax
neg eax
push eax
push 0xf1
push 0x551
push edi
call dword [sym.imp.USER32.dll_GetDlgItem]
push eax
call dword [sym.imp.USER32.dll_SendMessageW]
push str.SampleCountAutomatic
call sym.ProcessHacker.exe_PhGetIntegerSetting
test eax, eax
je 0x43f4ce
push 0
push 0x500
push edi
call dword [sym.imp.USER32.dll_GetDlgItem]
push eax
call dword [sym.imp.USER32.dll_EnableWindow]
lea eax, [ebp - 0x58]
mov dword [ebp - 0x58], 5
push eax
push 0
push 0x104d
push esi
mov dword [ebp - 0x54], 0
mov dword [ebp - 0x50], 0
mov dword [ebp - 0x44], str.Allow_only_one_instance
mov dword [ebp - 0x38], 0
call dword [sym.imp.USER32.dll_SendMessageW]
lea eax, [ebp - 0x58]
mov dword [ebp - 0x58], 5
push eax
push 0
push 0x104d
push esi
mov dword [ebp - 0x54], 1
mov dword [ebp - 0x50], 0
mov dword [ebp - 0x44], str.Hide_when_closed
mov dword [ebp - 0x38], 0
call dword [sym.imp.USER32.dll_SendMessageW]
lea eax, [ebp - 0x58]
mov dword [ebp - 0x58], 5
push eax
push 0
push 0x104d
push esi
mov dword [ebp - 0x54], 2
mov dword [ebp - 0x50], 0
mov dword [ebp - 0x44], str.Hide_when_minimized
mov dword [ebp - 0x38], 0
call dword [sym.imp.USER32.dll_SendMessageW]
lea eax, [ebp - 0x58]
mov dword [ebp - 0x58], 5
push eax
push 0
push 0x104d
push esi
mov dword [ebp - 0x54], 3
mov dword [ebp - 0x50], 0
mov dword [ebp - 0x44], str.Start_when_I_log_on
mov dword [ebp - 0x38], 0
call dword [sym.imp.USER32.dll_SendMessageW]
lea eax, [ebp - 0x58]
mov dword [ebp - 0x58], 5
push eax
push 0
push 0x104d
push esi
mov dword [ebp - 0x54], 4
mov dword [ebp - 0x50], 0
mov dword [ebp - 0x44], str.Start_hidden
mov dword [ebp - 0x38], 0
call dword [sym.imp.USER32.dll_SendMessageW]
lea eax, [ebp - 0x58]
mov dword [ebp - 0x58], 5
push eax
push 0
push 0x104d
push esi
mov dword [ebp - 0x54], 5
mov dword [ebp - 0x50], 0
mov dword [ebp - 0x44], str.Enable_tray_information_window
mov dword [ebp - 0x38], 0
call dword [sym.imp.USER32.dll_SendMessageW]
lea eax, [ebp - 0x58]
mov dword [ebp - 0x58], 5
push eax
push 0
push 0x104d
push esi
mov dword [ebp - 0x54], 6
mov dword [ebp - 0x50], 0
mov dword [ebp - 0x44], str.Enable_kernel_mode_driver
mov dword [ebp - 0x38], 0
call dword [sym.imp.USER32.dll_SendMessageW]
mov dword [ebp - 0x58], 5
mov dword [ebp - 0x54], 7
mov dword [ebp - 0x50], 0
mov dword [ebp - 0x44], str.Enable_warnings
lea eax, [ebp - 0x58]
mov dword [ebp - 0x38], 0
push eax
push 0
push 0x104d
push esi
call dword [sym.imp.USER32.dll_SendMessageW]
lea eax, [ebp - 0x58]
mov dword [ebp - 0x58], 5
push eax
push 0
push 0x104d
push esi
mov dword [ebp - 0x54], 8
mov dword [ebp - 0x50], 0
mov dword [ebp - 0x44], str.Enable_plugins
mov dword [ebp - 0x38], 0
call dword [sym.imp.USER32.dll_SendMessageW]
lea eax, [ebp - 0x58]
mov dword [ebp - 0x58], 5
push eax
push 0
push 0x104d
push esi
mov dword [ebp - 0x54], 9
mov dword [ebp - 0x50], 0
mov dword [ebp - 0x44], str.Enable_undecorated_symbols
mov dword [ebp - 0x38], 0
call dword [sym.imp.USER32.dll_SendMessageW]
lea eax, [ebp - 0x58]
mov dword [ebp - 0x58], 5
push eax
push 0
push 0x104d
push esi
mov dword [ebp - 0x54], 0xa
mov dword [ebp - 0x50], 0
mov dword [ebp - 0x44], str.Resolve_network_addresses
mov dword [ebp - 0x38], 0
call dword [sym.imp.USER32.dll_SendMessageW]
lea eax, [ebp - 0x58]
mov dword [ebp - 0x58], 5
push eax
push 0
push 0x104d
push esi
mov dword [ebp - 0x54], 0xb
mov dword [ebp - 0x50], 0
mov dword [ebp - 0x44], str.Show_tooltips_instantly
mov dword [ebp - 0x38], 0
call dword [sym.imp.USER32.dll_SendMessageW]
lea eax, [ebp - 0x58]
mov dword [ebp - 0x58], 5
push eax
push 0
push 0x104d
push esi
mov dword [ebp - 0x54], 0xc
mov dword [ebp - 0x50], 0
mov dword [ebp - 0x44], str.Enable_cycle_based_CPU_usage
mov dword [ebp - 0x38], 0
call dword [sym.imp.USER32.dll_SendMessageW]
lea eax, [ebp - 0x58]
mov dword [ebp - 0x58], 5
push eax
push 0
push 0x104d
push esi
mov dword [ebp - 0x54], 0xd
mov dword [ebp - 0x50], 0
mov dword [ebp - 0x44], str.Check_images_for_digital_signatures
mov dword [ebp - 0x38], 0
call dword [sym.imp.USER32.dll_SendMessageW]
lea eax, [ebp - 0x58]
mov dword [ebp - 0x58], 5
push eax
mov dword [ebp - 0x54], 0xe
mov dword [ebp - 0x50], 0
mov dword [ebp - 0x44], str.Check_services_for_digital_signatures
mov dword [ebp - 0x38], 0
push 0
push 0x104d
push esi
call dword [sym.imp.USER32.dll_SendMessageW]
lea eax, [ebp - 0x58]
mov dword [ebp - 0x58], 5
push eax
push 0
push 0x104d
push esi
mov dword [ebp - 0x54], 0xf
mov dword [ebp - 0x50], 0
mov dword [ebp - 0x44], str.Collapse_services_on_start
mov dword [ebp - 0x38], 0
call dword [sym.imp.USER32.dll_SendMessageW]
lea eax, [ebp - 0x58]
mov dword [ebp - 0x58], 5
push eax
push 0
push 0x104d
push esi
mov dword [ebp - 0x54], 0x10
mov dword [ebp - 0x50], 0
mov dword [ebp - 0x44], str.Single_click_tray_icons
mov dword [ebp - 0x38], 0
call dword [sym.imp.USER32.dll_SendMessageW]
lea eax, [ebp - 0x58]
mov dword [ebp - 0x58], 5
push eax
push 0
push 0x104d
push esi
mov dword [ebp - 0x54], 0x11
mov dword [ebp - 0x50], 0
mov dword [ebp - 0x44], str.Icon_click_toggles_visibility
mov dword [ebp - 0x38], 0
call dword [sym.imp.USER32.dll_SendMessageW]
lea eax, [ebp - 0x58]
mov dword [ebp - 0x58], 5
push eax
push 0
push 0x104d
push esi
mov dword [ebp - 0x54], 0x12
mov dword [ebp - 0x50], 0
mov dword [ebp - 0x44], str.Include_usage_of_collapsed_processes
mov dword [ebp - 0x38], 0
call dword [sym.imp.USER32.dll_SendMessageW]
lea eax, [ebp - 0x58]
mov dword [ebp - 0x58], 5
push eax
push 0
push 0x104d
push esi
mov dword [ebp - 0x54], 0x13
mov dword [ebp - 0x50], 0
mov dword [ebp - 0x44], str.Show_advanced_options
mov dword [ebp - 0x38], 0
call dword [sym.imp.USER32.dll_SendMessageW]
push str.AllowOnlyOneInstance
mov dword [ebp - 0x48], 0xf000
call sym.ProcessHacker.exe_PhGetIntegerSetting
neg eax
sbb eax, eax
neg eax
inc eax
shl eax, 0xc
mov dword [ebp - 0x4c], eax
lea eax, [ebp - 0x58]
push eax
push 0
push 0x102b
push esi
call dword [sym.imp.USER32.dll_SendMessageW]
push str.HideOnClose
mov dword [ebp - 0x48], 0xf000
call sym.ProcessHacker.exe_PhGetIntegerSetting
neg eax
sbb eax, eax
neg eax
inc eax
shl eax, 0xc
mov dword [ebp - 0x4c], eax
lea eax, [ebp - 0x58]
push eax
push 1
push 0x102b
push esi
call dword [sym.imp.USER32.dll_SendMessageW]
push str.HideOnMinimize
mov dword [ebp - 0x48], 0xf000
call sym.ProcessHacker.exe_PhGetIntegerSetting
neg eax
sbb eax, eax
neg eax
inc eax
shl eax, 0xc
mov dword [ebp - 0x4c], eax
lea eax, [ebp - 0x58]
push eax
push 2
push 0x102b
push esi
call dword [sym.imp.USER32.dll_SendMessageW]
push str.MiniInfoWindowEnabled
mov dword [ebp - 0x48], 0xf000
call sym.ProcessHacker.exe_PhGetIntegerSetting
neg eax
sbb eax, eax
neg eax
inc eax
shl eax, 0xc
mov dword [ebp - 0x4c], eax
lea eax, [ebp - 0x58]
push eax
push 5
push 0x102b
push esi
call dword [sym.imp.USER32.dll_SendMessageW]
push str.EnableKph
mov dword [ebp - 0x48], 0xf000
call sym.ProcessHacker.exe_PhGetIntegerSetting
neg eax
sbb eax, eax
neg eax
inc eax
shl eax, 0xc
mov dword [ebp - 0x4c], eax
lea eax, [ebp - 0x58]
push eax
push 6
push 0x102b
push esi
call dword [sym.imp.USER32.dll_SendMessageW]
push str.EnableWarnings
mov dword [ebp - 0x48], 0xf000
call sym.ProcessHacker.exe_PhGetIntegerSetting
neg eax
sbb eax, eax
neg eax
inc eax
shl eax, 0xc
mov dword [ebp - 0x4c], eax
lea eax, [ebp - 0x58]
push eax
push 7
push 0x102b
push esi
call dword [sym.imp.USER32.dll_SendMessageW]
push str.EnablePlugins
mov dword [ebp - 0x48], 0xf000
call sym.ProcessHacker.exe_PhGetIntegerSetting
neg eax
sbb eax, eax
neg eax
inc eax
shl eax, 0xc
mov dword [ebp - 0x4c], eax
lea eax, [ebp - 0x58]
push eax
push 8
push 0x102b
push esi
call dword [sym.imp.USER32.dll_SendMessageW]
push str.DbgHelpUndecorate
mov dword [ebp - 0x48], 0xf000
call sym.ProcessHacker.exe_PhGetIntegerSetting
neg eax
sbb eax, eax
neg eax
inc eax
shl eax, 0xc
mov dword [ebp - 0x4c], eax
lea eax, [ebp - 0x58]
push eax
push 9
push 0x102b
push esi
call dword [sym.imp.USER32.dll_SendMessageW]
push str.EnableNetworkResolve
mov dword [ebp - 0x48], 0xf000
call sym.ProcessHacker.exe_PhGetIntegerSetting
neg eax
sbb eax, eax
neg eax
inc eax
shl eax, 0xc
mov dword [ebp - 0x4c], eax
lea eax, [ebp - 0x58]
push eax
push 0xa
push 0x102b
push esi
call dword [sym.imp.USER32.dll_SendMessageW]
push str.EnableInstantTooltips
mov dword [ebp - 0x48], 0xf000
call sym.ProcessHacker.exe_PhGetIntegerSetting
neg eax
sbb eax, eax
neg eax
inc eax
shl eax, 0xc
mov dword [ebp - 0x4c], eax
lea eax, [ebp - 0x58]
push eax
push 0xb
push 0x102b
push esi
call dword [sym.imp.USER32.dll_SendMessageW]
push str.EnableCycleCpuUsage
mov dword [ebp - 0x48], 0xf000
call sym.ProcessHacker.exe_PhGetIntegerSetting
neg eax
sbb eax, eax
neg eax
inc eax
shl eax, 0xc
mov dword [ebp - 0x4c], eax
lea eax, [ebp - 0x58]
push eax
push 0xc
push 0x102b
push esi
call dword [sym.imp.USER32.dll_SendMessageW]
push str.EnableStage2
mov dword [ebp - 0x48], 0xf000
call sym.ProcessHacker.exe_PhGetIntegerSetting
neg eax
sbb eax, eax
neg eax
inc eax
shl eax, 0xc
mov dword [ebp - 0x4c], eax
lea eax, [ebp - 0x58]
push eax
push 0xd
push 0x102b
push esi
call dword [sym.imp.USER32.dll_SendMessageW]
push str.EnableServiceStage2
mov dword [ebp - 0x48], 0xf000
call sym.ProcessHacker.exe_PhGetIntegerSetting
neg eax
sbb eax, eax
neg eax
inc eax
shl eax, 0xc
mov dword [ebp - 0x4c], eax
lea eax, [ebp - 0x58]
push eax
push 0xe
push 0x102b
push esi
call dword [sym.imp.USER32.dll_SendMessageW]
push str.CollapseServicesOnStart
mov dword [ebp - 0x48], 0xf000
call sym.ProcessHacker.exe_PhGetIntegerSetting
neg eax
sbb eax, eax
neg eax
inc eax
shl eax, 0xc
mov dword [ebp - 0x4c], eax
lea eax, [ebp - 0x58]
push eax
push 0xf
push 0x102b
push esi
call dword [sym.imp.USER32.dll_SendMessageW]
push str.IconSingleClick
mov dword [ebp - 0x48], 0xf000
call sym.ProcessHacker.exe_PhGetIntegerSetting
neg eax
sbb eax, eax
neg eax
inc eax
shl eax, 0xc
mov dword [ebp - 0x4c], eax
lea eax, [ebp - 0x58]
push eax
push 0x10
push 0x102b
push esi
call dword [sym.imp.USER32.dll_SendMessageW]
push str.IconTogglesVisibility
mov dword [ebp - 0x48], 0xf000
call sym.ProcessHacker.exe_PhGetIntegerSetting
neg eax
sbb eax, eax
neg eax
inc eax
shl eax, 0xc
mov dword [ebp - 0x4c], eax
lea eax, [ebp - 0x58]
push eax
push 0x11
push 0x102b
push esi
call dword [sym.imp.USER32.dll_SendMessageW]
push str.PropagateCpuUsage
mov dword [ebp - 0x48], 0xf000
call sym.ProcessHacker.exe_PhGetIntegerSetting
neg eax
sbb eax, eax
neg eax
inc eax
shl eax, 0xc
mov dword [ebp - 0x4c], eax
lea eax, [ebp - 0x58]
push eax
push 0x12
push 0x102b
push esi
call dword [sym.imp.USER32.dll_SendMessageW]
cmp byte [0x549de8], 0
lea eax, [ebp - 0x58]
mov dword [ebp - 0x48], 0xf000
push eax
je 0x43fc7a
push 3
push 0x102b
push esi
mov dword [ebp - 0x4c], 0x2000
call dword [sym.imp.USER32.dll_SendMessageW]
cmp byte [0x549c0a], 0
je 0x43fc8f
lea eax, [ebp - 0x58]
mov dword [ebp - 0x48], 0xf000
push eax
push 4
push 0x102b
push esi
mov dword [ebp - 0x4c], 0x2000
call dword [sym.imp.USER32.dll_SendMessageW]
pop edi
pop esi
mov esp, ebp
pop ebp
ret
push 4
push 0x102b
push esi
mov dword [ebp - 0x4c], 0
call dword [sym.imp.USER32.dll_SendMessageW]
pop edi
pop esi
mov esp, ebp
pop ebp
ret