Function at 0x1402eb7b0
Capabilities:
Get graphical window text

Disassembly:
mov qword [rsp + 8], rcx
push rbp
push rdi
mov eax, 0x14d8
call fcn.14020bc9d
sub rsp, rax
lea rbp, [rsp + 0x20]
lea rdi, [rsp + 0x20]
mov ecx, 0x3ae
mov eax, 0xcccccccc
rep stosd dword [rdi], eax
mov rcx, qword [rsp + 0x14f8]
mov rax, qword [0x140961e80]
xor rax, rbp
mov qword [rbp + 0x14a0], rax
mov edx, 0x577
mov rcx, qword [rbp + 0x14d0]
call qword [sym.imp.USER32.dll_GetDlgItem]
mov qword [rbp + 8], rax
lea rcx, str.SampleCount
call fcn.1402139d4
xor r9d, r9d
mov r8d, eax
mov edx, 0x500
mov rcx, qword [rbp + 0x14d0]
call sym.SystemInformer.exe_PhSetDialogItemValue
nop
lea rcx, str.SampleCountAutomatic
call fcn.1402139d4
test eax, eax
je 0x1402eb849
mov dword [rbp + 0x1494], 1
jmp 0x1402eb853
mov dword [rbp + 0x1494], 0
movsxd rax, dword [rbp + 0x1494]
mov qword [rbp + 0x1498], rax
mov edx, 0x551
mov rcx, qword [rbp + 0x14d0]
call qword [sym.imp.USER32.dll_GetDlgItem]
xor r9d, r9d
mov rcx, qword [rbp + 0x1498]
mov r8, rcx
mov edx, 0xf1
mov rcx, rax
call qword [sym.imp.USER32.dll_SendMessageW]
nop
lea rcx, str.SampleCountAutomatic
call fcn.1402139d4
test eax, eax
je 0x1402eb8bd
mov edx, 0x500
mov rcx, qword [rbp + 0x14d0]
call qword [sym.imp.USER32.dll_GetDlgItem]
xor edx, edx
mov rcx, rax
call qword [sym.imp.USER32.dll_EnableWindow]
nop
xor r9d, r9d
lea r8, str.Allow_only_one_instance
xor edx, edx
mov rcx, qword [rbp + 8]
call sym.SystemInformer.exe_PhAddListViewItem
nop
xor r9d, r9d
lea r8, str.Hide_when_closed
mov edx, 1
mov rcx, qword [rbp + 8]
call sym.SystemInformer.exe_PhAddListViewItem
nop
xor r9d, r9d
lea r8, str.Hide_when_minimized
mov edx, 2
mov rcx, qword [rbp + 8]
call sym.SystemInformer.exe_PhAddListViewItem
nop
xor r9d, r9d
lea r8, str.Start_when_I_log_on
mov edx, 3
mov rcx, qword [rbp + 8]
call sym.SystemInformer.exe_PhAddListViewItem
nop
xor r9d, r9d
lea r8, str.Start_hidden
mov edx, 4
mov rcx, qword [rbp + 8]
call sym.SystemInformer.exe_PhAddListViewItem
nop
xor r9d, r9d
lea r8, str.Enable_warnings
mov edx, 5
mov rcx, qword [rbp + 8]
call sym.SystemInformer.exe_PhAddListViewItem
nop
xor r9d, r9d
lea r8, str.Enable_kernel_mode_driver
mov edx, 6
mov rcx, qword [rbp + 8]
call sym.SystemInformer.exe_PhAddListViewItem
nop
xor r9d, r9d
lea r8, str.Enable_monospace_fonts
mov edx, 7
mov rcx, qword [rbp + 8]
call sym.SystemInformer.exe_PhAddListViewItem
nop
xor r9d, r9d
lea r8, str.Enable_plugins
mov edx, 8
mov rcx, qword [rbp + 8]
call sym.SystemInformer.exe_PhAddListViewItem
nop
xor r9d, r9d
lea r8, str.Enable_undecorated_symbols
mov edx, 9
mov rcx, qword [rbp + 8]
call sym.SystemInformer.exe_PhAddListViewItem
nop
xor r9d, r9d
lea r8, str.Enable_column_header_totals__experimental_
mov edx, 0xa
mov rcx, qword [rbp + 8]
call sym.SystemInformer.exe_PhAddListViewItem
nop
xor r9d, r9d
lea r8, str.Enable_cycle_based_CPU_usage
mov edx, 0xb
mov rcx, qword [rbp + 8]
call sym.SystemInformer.exe_PhAddListViewItem
nop
xor r9d, r9d
lea r8, str.Enable_fixed_graph_scaling__experimental_
mov edx, 0xc
mov rcx, qword [rbp + 8]
call sym.SystemInformer.exe_PhAddListViewItem
nop
xor r9d, r9d
lea r8, str.Enable_tray_information_window
mov edx, 0xd
mov rcx, qword [rbp + 8]
call sym.SystemInformer.exe_PhAddListViewItem
nop
xor r9d, r9d
lea r8, str.Remember_last_selected_window
mov edx, 0xe
mov rcx, qword [rbp + 8]
call sym.SystemInformer.exe_PhAddListViewItem
nop
xor r9d, r9d
lea r8, str.Enable_theme_support__experimental_
mov edx, 0xf
mov rcx, qword [rbp + 8]
call sym.SystemInformer.exe_PhAddListViewItem
nop
xor r9d, r9d
lea r8, str.Enable_start_as_admin__experimental_
mov edx, 0x10
mov rcx, qword [rbp + 8]
call sym.SystemInformer.exe_PhAddListViewItem
nop
xor r9d, r9d
lea r8, str.Enable_streamer_mode__disable_window_capture___experimental_
mov edx, 0x11
mov rcx, qword [rbp + 8]
call sym.SystemInformer.exe_PhAddListViewItem
nop
xor r9d, r9d
lea r8, str.Enable_silent_crash_notification__experimental_
mov edx, 0x12
mov rcx, qword [rbp + 8]
call sym.SystemInformer.exe_PhAddListViewItem
nop
xor r9d, r9d
lea r8, str.Resolve_network_addresses
mov edx, 0x13
mov rcx, qword [rbp + 8]
call sym.SystemInformer.exe_PhAddListViewItem
nop
xor r9d, r9d
lea r8, str.Resolve_DNS_over_HTTPS__DoH_
mov edx, 0x14
mov rcx, qword [rbp + 8]
call sym.SystemInformer.exe_PhAddListViewItem
nop
xor r9d, r9d
lea r8, str.Show_tooltips_instantly
mov edx, 0x15
mov rcx, qword [rbp + 8]
call sym.SystemInformer.exe_PhAddListViewItem
nop
xor r9d, r9d
lea r8, str.Check_images_for_coherency
mov edx, 0x16
mov rcx, qword [rbp + 8]
call sym.SystemInformer.exe_PhAddListViewItem
nop
xor r9d, r9d
lea r8, str.Check_images_for_digital_signatures
mov edx, 0x17
mov rcx, qword [rbp + 8]
call sym.SystemInformer.exe_PhAddListViewItem
nop
xor r9d, r9d
lea r8, str.Check_services_for_digital_signatures
mov edx, 0x18
mov rcx, qword [rbp + 8]
call sym.SystemInformer.exe_PhAddListViewItem
nop
xor r9d, r9d
lea r8, str.Single_click_tray_icons
mov edx, 0x19
mov rcx, qword [rbp + 8]
call sym.SystemInformer.exe_PhAddListViewItem
nop
xor r9d, r9d
lea r8, str.Icon_click_toggles_visibility
mov edx, 0x1a
mov rcx, qword [rbp + 8]
call sym.SystemInformer.exe_PhAddListViewItem
nop
xor r9d, r9d
lea r8, str.Include_usage_of_collapsed_processes
mov edx, 0x1b
mov rcx, qword [rbp + 8]
call sym.SystemInformer.exe_PhAddListViewItem
nop
xor r9d, r9d
lea r8, str.Show_advanced_options
mov edx, 0x1c
mov rcx, qword [rbp + 8]
call sym.SystemInformer.exe_PhAddListViewItem
nop
mov dword [rbp + 0x40], 0xf000
lea rcx, str.AllowOnlyOneInstance
call fcn.1402139d4
test eax, eax
je 0x1402ebbb2
mov dword [rbp + 0x1494], 1
jmp 0x1402ebbbc
mov dword [rbp + 0x1494], 0
cmp dword [rbp + 0x1494], 0
je 0x1402ebbd1
mov dword [rbp + 0x1498], 2
jmp 0x1402ebbdb
mov dword [rbp + 0x1498], 1
mov eax, dword [rbp + 0x1498]
shl eax, 0xc
mov dword [rbp + 0x3c], eax
lea r9, [rbp + 0x30]
xor r8d, r8d
mov edx, 0x102b
mov rcx, qword [rbp + 8]
call qword [sym.imp.USER32.dll_SendMessageW]
nop
mov dword [rbp + 0xc0], 0xf000
lea rcx, str.HideOnClose
call fcn.1402139d4
test eax, eax
je 0x1402ebc24
mov dword [rbp + 0x1494], 1
jmp 0x1402ebc2e
mov dword [rbp + 0x1494], 0
cmp dword [rbp + 0x1494], 0
je 0x1402ebc43
mov dword [rbp + 0x1498], 2
jmp 0x1402ebc4d
mov dword [rbp + 0x1498], 1
mov eax, dword [rbp + 0x1498]
shl eax, 0xc
mov dword [rbp + 0xbc], eax
lea r9, [rbp + 0xb0]
mov r8d, 1
mov edx, 0x102b
mov rcx, qword [rbp + 8]
call qword [sym.imp.USER32.dll_SendMessageW]
nop
mov dword [rbp + 0x140], 0xf000
lea rcx, str.HideOnMinimize
call fcn.1402139d4
test eax, eax
je 0x1402ebc9f
mov dword [rbp + 0x1494], 1
jmp 0x1402ebca9
mov dword [rbp + 0x1494], 0
cmp dword [rbp + 0x1494], 0
je 0x1402ebcbe
mov dword [rbp + 0x1498], 2
jmp 0x1402ebcc8
mov dword [rbp + 0x1498], 1
mov eax, dword [rbp + 0x1498]
shl eax, 0xc
mov dword [rbp + 0x13c], eax
lea r9, [rbp + 0x130]
mov r8d, 2
mov edx, 0x102b
mov rcx, qword [rbp + 8]
call qword [sym.imp.USER32.dll_SendMessageW]
nop
mov dword [rbp + 0x1c0], 0xf000
lea rcx, str.StartHidden
call fcn.1402139d4
test eax, eax
je 0x1402ebd1a
mov dword [rbp + 0x1494], 1
jmp 0x1402ebd24
mov dword [rbp + 0x1494], 0
cmp dword [rbp + 0x1494], 0
je 0x1402ebd39
mov dword [rbp + 0x1498], 2
jmp 0x1402ebd43
mov dword [rbp + 0x1498], 1
mov eax, dword [rbp + 0x1498]
shl eax, 0xc
mov dword [rbp + 0x1bc], eax
lea r9, [rbp + 0x1b0]
mov r8d, 4
mov edx, 0x102b
mov rcx, qword [rbp + 8]
call qword [sym.imp.USER32.dll_SendMessageW]
nop
mov dword [rbp + 0x240], 0xf000
lea rcx, str.MiniInfoWindowEnabled
call fcn.1402139d4
test eax, eax
je 0x1402ebd95
mov dword [rbp + 0x1494], 1
jmp 0x1402ebd9f
mov dword [rbp + 0x1494], 0
cmp dword [rbp + 0x1494], 0
je 0x1402ebdb4
mov dword [rbp + 0x1498], 2
jmp 0x1402ebdbe
mov dword [rbp + 0x1498], 1
mov eax, dword [rbp + 0x1498]
shl eax, 0xc
mov dword [rbp + 0x23c], eax
lea r9, [rbp + 0x230]
mov r8d, 0xd
mov edx, 0x102b
mov rcx, qword [rbp + 8]
call qword [sym.imp.USER32.dll_SendMessageW]
nop
mov dword [rbp + 0x2c0], 0xf000
lea rcx, str.MainWindowTabRestoreEnabled
call fcn.1402139d4
test eax, eax
je 0x1402ebe10
mov dword [rbp + 0x1494], 1
jmp 0x1402ebe1a
mov dword [rbp + 0x1494], 0
cmp dword [rbp + 0x1494], 0
je 0x1402ebe2f
mov dword [rbp + 0x1498], 2
jmp 0x1402ebe39
mov dword [rbp + 0x1498], 1
mov eax, dword [rbp + 0x1498]
shl eax, 0xc
mov dword [rbp + 0x2bc], eax
lea r9, [rbp + 0x2b0]
mov r8d, 0xe
mov edx, 0x102b
mov rcx, qword [rbp + 8]
call qword [sym.imp.USER32.dll_SendMessageW]
nop
mov dword [rbp + 0x340], 0xf000
lea rcx, str.KsiEnable
call fcn.1402139d4
test eax, eax
je 0x1402ebe8b
mov dword [rbp + 0x1494], 1
jmp 0x1402ebe95
mov dword [rbp + 0x1494], 0
cmp dword [rbp + 0x1494], 0
je 0x1402ebeaa
mov dword [rbp + 0x1498], 2
jmp 0x1402ebeb4
mov dword [rbp + 0x1498], 1
mov eax, dword [rbp + 0x1498]
shl eax, 0xc
mov dword [rbp + 0x33c], eax
lea r9, [rbp + 0x330]
mov r8d, 6
mov edx, 0x102b
mov rcx, qword [rbp + 8]
call qword [sym.imp.USER32.dll_SendMessageW]
nop
mov dword [rbp + 0x3c0], 0xf000
lea rcx, str.EnableWarnings
call fcn.1402139d4
test eax, eax
je 0x1402ebf06
mov dword [rbp + 0x1494], 1
jmp 0x1402ebf10
mov dword [rbp + 0x1494], 0
cmp dword [rbp + 0x1494], 0
je 0x1402ebf25
mov dword [rbp + 0x1498], 2
jmp 0x1402ebf2f
mov dword [rbp + 0x1498], 1
mov eax, dword [rbp + 0x1498]
shl eax, 0xc
mov dword [rbp + 0x3bc], eax
lea r9, [rbp + 0x3b0]
mov r8d, 5
mov edx, 0x102b
mov rcx, qword [rbp + 8]
call qword [sym.imp.USER32.dll_SendMessageW]
nop
mov dword [rbp + 0x440], 0xf000
lea rcx, str.EnablePlugins
call fcn.1402139d4
test eax, eax
je 0x1402ebf81
mov dword [rbp + 0x1494], 1
jmp 0x1402ebf8b
mov dword [rbp + 0x1494], 0
cmp dword [rbp + 0x1494], 0
je 0x1402ebfa0
mov dword [rbp + 0x1498], 2
jmp 0x1402ebfaa
mov dword [rbp + 0x1498], 1
mov eax, dword [rbp + 0x1498]
shl eax, 0xc
mov dword [rbp + 0x43c], eax
lea r9, [rbp + 0x430]
mov r8d, 8
mov edx, 0x102b
mov rcx, qword [rbp + 8]
call qword [sym.imp.USER32.dll_SendMessageW]
nop
mov dword [rbp + 0x4c0], 0xf000
lea rcx, str.DbgHelpUndecorate
call fcn.1402139d4
test eax, eax
je 0x1402ebffc
mov dword [rbp + 0x1494], 1
jmp 0x1402ec006
mov dword [rbp + 0x1494], 0
cmp dword [rbp + 0x1494], 0
je 0x1402ec01b
mov dword [rbp + 0x1498], 2
jmp 0x1402ec025
mov dword [rbp + 0x1498], 1
mov eax, dword [rbp + 0x1498]
shl eax, 0xc
mov dword [rbp + 0x4bc], eax
lea r9, [rbp + 0x4b0]
mov r8d, 9
mov edx, 0x102b
mov rcx, qword [rbp + 8]
call qword [sym.imp.USER32.dll_SendMessageW]
nop
mov dword [rbp + 0x540], 0xf000
lea rcx, str.TreeListEnableHeaderTotals
call fcn.1402139d4
test eax, eax
je 0x1402ec077
mov dword [rbp + 0x1494], 1
jmp 0x1402ec081
mov dword [rbp + 0x1494], 0
cmp dword [rbp + 0x1494], 0
je 0x1402ec096
mov dword [rbp + 0x1498], 2
jmp 0x1402ec0a0
mov dword [rbp + 0x1498], 1
mov eax, dword [rbp + 0x1498]
shl eax, 0xc
mov dword [rbp + 0x53c], eax
lea r9, [rbp + 0x530]
mov r8d, 0xa
mov edx, 0x102b
mov rcx, qword [rbp + 8]
call qword [sym.imp.USER32.dll_SendMessageW]
nop
mov dword [rbp + 0x5c0], 0xf000
lea rcx, str.EnableGraphMaxScale
call fcn.1402139d4
test eax, eax
je 0x1402ec0f2
mov dword [rbp + 0x1494], 1
jmp 0x1402ec0fc
mov dword [rbp + 0x1494], 0
cmp dword [rbp + 0x1494], 0
je 0x1402ec111
mov dword [rbp + 0x1498], 2
jmp 0x1402ec11b
mov dword [rbp + 0x1498], 1
mov eax, dword [rbp + 0x1498]
shl eax, 0xc
mov dword [rbp + 0x5bc], eax
lea r9, [rbp + 0x5b0]
mov r8d, 0xc
mov edx, 0x102b
mov rcx, qword [rbp + 8]
call qword [sym.imp.USER32.dll_SendMessageW]
nop
mov dword [rbp + 0x640], 0xf000
lea rcx, str.EnableCycleCpuUsage
call fcn.1402139d4
test eax, eax
je 0x1402ec16d
mov dword [rbp + 0x1494], 1
jmp 0x1402ec177
mov dword [rbp + 0x1494], 0
cmp dword [rbp + 0x1494], 0
je 0x1402ec18c
mov dword [rbp + 0x1498], 2
jmp 0x1402ec196
mov dword [rbp + 0x1498], 1
mov eax, dword [rbp + 0x1498]
shl eax, 0xc
mov dword [rbp + 0x63c], eax
lea r9, [rbp + 0x630]
mov r8d, 0xb
mov edx, 0x102b
mov rcx, qword [rbp + 8]
call qword [sym.imp.USER32.dll_SendMessageW]
nop
mov dword [rbp + 0x6c0], 0xf000
lea rcx, str.EnableThemeSupport
call fcn.1402139d4
test eax, eax
je 0x1402ec1e8
mov dword [rbp + 0x1494], 1
jmp 0x1402ec1f2
mov dword [rbp + 0x1494], 0
cmp dword [rbp + 0x1494], 0
je 0x1402ec207
mov dword [rbp + 0x1498], 2
jmp 0x1402ec211
mov dword [rbp + 0x1498], 1
mov eax, dword [rbp + 0x1498]
shl eax, 0xc
mov dword [rbp + 0x6bc], eax
lea r9, [rbp + 0x6b0]
mov r8d, 0xf
mov edx, 0x102b
mov rcx, qword [rbp + 8]
call qword [sym.imp.USER32.dll_SendMessageW]
nop
mov dword [rbp + 0x740], 0xf000
lea rcx, str.EnableStartAsAdmin
call fcn.1402139d4
test eax, eax
je 0x1402ec263
mov dword [rbp + 0x1494], 1
jmp 0x1402ec26d
mov dword [rbp + 0x1494], 0
cmp dword [rbp + 0x1494], 0
je 0x1402ec282
mov dword [rbp + 0x1498], 2
jmp 0x1402ec28c
mov dword [rbp + 0x1498], 1
mov eax, dword [rbp + 0x1498]
shl eax, 0xc
mov dword [rbp + 0x73c], eax
lea r9, [rbp + 0x730]
mov r8d, 0x10
mov edx, 0x102b
mov rcx, qword [rbp + 8]
call qword [sym.imp.USER32.dll_SendMessageW]
nop
mov dword [rbp + 0x7c0], 0xf000
lea rcx, str.EnableStreamerMode
call fcn.1402139d4
test eax, eax
je 0x1402ec2de
mov dword [rbp + 0x1494], 1
jmp 0x1402ec2e8
mov dword [rbp + 0x1494], 0
cmp dword [rbp + 0x1494], 0
je 0x1402ec2fd
mov dword [rbp + 0x1498], 2
jmp 0x1402ec307
mov dword [rbp + 0x1498], 1
mov eax, dword [rbp + 0x1498]
shl eax, 0xc
mov dword [rbp + 0x7bc], eax
lea r9, [rbp + 0x7b0]
mov r8d, 0x11
mov edx, 0x102b
mov rcx, qword [rbp + 8]
call qword [sym.imp.USER32.dll_SendMessageW]
nop
mov dword [rbp + 0x840], 0xf000
lea rcx, str.EnableSilentCrashNotify
call fcn.1402139d4
test eax, eax
je 0x1402ec359
mov dword [rbp + 0x1494], 1
jmp 0x1402ec363
mov dword [rbp + 0x1494], 0
cmp dword [rbp + 0x1494], 0
je 0x1402ec378
mov dword [rbp + 0x1498], 2
jmp 0x1402ec382
mov dword [rbp + 0x1498], 1
mov eax, dword [rbp + 0x1498]
shl eax, 0xc
mov dword [rbp + 0x83c], eax
lea r9, [rbp + 0x830]
mov r8d, 0x12
mov edx, 0x102b
mov rcx, qword [rbp + 8]
call qword [sym.imp.USER32.dll_SendMessageW]
nop
mov dword [rbp + 0x8c0], 0xf000
lea rcx, str.EnableMonospaceFont
call fcn.1402139d4
test eax, eax
je 0x1402ec3d4
mov dword [rbp + 0x1494], 1
jmp 0x1402ec3de
mov dword [rbp + 0x1494], 0
cmp dword [rbp + 0x1494], 0
je 0x1402ec3f3
mov dword [rbp + 0x1498], 2
jmp 0x1402ec3fd
mov dword [rbp + 0x1498], 1
mov eax, dword [rbp + 0x1498]
shl eax, 0xc
mov dword [rbp + 0x8bc], eax
lea r9, [rbp + 0x8b0]
mov r8d, 7
mov edx, 0x102b
mov rcx, qword [rbp + 8]
call qword [sym.imp.USER32.dll_SendMessageW]
nop
mov dword [rbp + 0x940], 0xf000
lea rcx, str.EnableNetworkResolve
call fcn.1402139d4
test eax, eax
je 0x1402ec44f
mov dword [rbp + 0x1494], 1
jmp 0x1402ec459
mov dword [rbp + 0x1494], 0
cmp dword [rbp + 0x1494], 0
je 0x1402ec46e
mov dword [rbp + 0x1498], 2
jmp 0x1402ec478
mov dword [rbp + 0x1498], 1
mov eax, dword [rbp + 0x1498]
shl eax, 0xc
mov dword [rbp + 0x93c], eax
lea r9, [rbp + 0x930]
mov r8d, 0x13
mov edx, 0x102b
mov rcx, qword [rbp + 8]
call qword [sym.imp.USER32.dll_SendMessageW]
nop
mov dword [rbp + 0x9c0], 0xf000
lea rcx, str.EnableNetworkResolveDoH
call fcn.1402139d4
test eax, eax
je 0x1402ec4ca
mov dword [rbp + 0x1494], 1
jmp 0x1402ec4d4
mov dword [rbp + 0x1494], 0
cmp dword [rbp + 0x1494], 0
je 0x1402ec4e9
mov dword [rbp + 0x1498], 2
jmp 0x1402ec4f3
mov dword [rbp + 0x1498], 1
mov eax, dword [rbp + 0x1498]
shl eax, 0xc
mov dword [rbp + 0x9bc], eax
lea r9, [rbp + 0x9b0]
mov r8d, 0x14
mov edx, 0x102b
mov rcx, qword [rbp + 8]
call qword [sym.imp.USER32.dll_SendMessageW]
nop
mov dword [rbp + 0xa40], 0xf000
lea rcx, str.EnableInstantTooltips
call fcn.1402139d4
test eax, eax
je 0x1402ec545
mov dword [rbp + 0x1494], 1
jmp 0x1402ec54f
mov dword [rbp + 0x1494], 0
cmp dword [rbp + 0x1494], 0
je 0x1402ec564
mov dword [rbp + 0x1498], 2
jmp 0x1402ec56e
mov dword [rbp + 0x1498], 1
mov eax, dword [rbp + 0x1498]
shl eax, 0xc
mov dword [rbp + 0xa3c], eax
lea r9, [rbp + 0xa30]
mov r8d, 0x15
mov edx, 0x102b
mov rcx, qword [rbp + 8]
call qword [sym.imp.USER32.dll_SendMessageW]
nop
mov dword [rbp + 0xac0], 0xf000
lea rcx, str.EnableImageCoherencySupport
call fcn.1402139d4
test eax, eax
je 0x1402ec5c0
mov dword [rbp + 0x1494], 1
jmp 0x1402ec5ca
mov dword [rbp + 0x1494], 0
cmp dword [rbp + 0x1494], 0
je 0x1402ec5df
mov dword [rbp + 0x1498], 2
jmp 0x1402ec5e9
mov dword [rbp + 0x1498], 1
mov eax, dword [rbp + 0x1498]
shl eax, 0xc
mov dword [rbp + 0xabc], eax
lea r9, [rbp + 0xab0]
mov r8d, 0x16
mov edx, 0x102b
mov rcx, qword [rbp + 8]
call qword [sym.imp.USER32.dll_SendMessageW]
nop
mov dword [rbp + 0xb40], 0xf000
lea rcx, str.EnableStage2
call fcn.1402139d4
test eax, eax
je 0x1402ec63b
mov dword [rbp + 0x1494], 1
jmp 0x1402ec645
mov dword [rbp + 0x1494], 0
cmp dword [rbp + 0x1494], 0
je 0x1402ec65a
mov dword [rbp + 0x1498], 2
jmp 0x1402ec664
mov dword [rbp + 0x1498], 1
mov eax, dword [rbp + 0x1498]
shl eax, 0xc
mov dword [rbp + 0xb3c], eax
lea r9, [rbp + 0xb30]
mov r8d, 0x17
mov edx, 0x102b
mov rcx, qword [rbp + 8]
call qword [sym.imp.USER32.dll_SendMessageW]
nop
mov dword [rbp + 0xbc0], 0xf000
lea rcx, str.EnableServiceStage2
call fcn.1402139d4
test eax, eax
je 0x1402ec6b6
mov dword [rbp + 0x1494], 1
jmp 0x1402ec6c0
mov dword [rbp + 0x1494], 0
cmp dword [rbp + 0x1494], 0
je 0x1402ec6d5
mov dword [rbp + 0x1498], 2
jmp 0x1402ec6df
mov dword [rbp + 0x1498], 1
mov eax, dword [rbp + 0x1498]
shl eax, 0xc
mov dword [rbp + 0xbbc], eax
lea r9, [rbp + 0xbb0]
mov r8d, 0x18
mov edx, 0x102b
mov rcx, qword [rbp + 8]
call qword [sym.imp.USER32.dll_SendMessageW]
nop
mov dword [rbp + 0xc40], 0xf000
lea rcx, str.IconSingleClick
call fcn.1402139d4
test eax, eax
je 0x1402ec731
mov dword [rbp + 0x1494], 1
jmp 0x1402ec73b
mov dword [rbp + 0x1494], 0
cmp dword [rbp + 0x1494], 0
je 0x1402ec750
mov dword [rbp + 0x1498], 2
jmp 0x1402ec75a
mov dword [rbp + 0x1498], 1
mov eax, dword [rbp + 0x1498]
shl eax, 0xc
mov dword [rbp + 0xc3c], eax
lea r9, [rbp + 0xc30]
mov r8d, 0x19
mov edx, 0x102b
mov rcx, qword [rbp + 8]
call qword [sym.imp.USER32.dll_SendMessageW]
nop
mov dword [rbp + 0xcc0], 0xf000
lea rcx, str.IconTogglesVisibility
call fcn.1402139d4
test eax, eax
je 0x1402ec7ac
mov dword [rbp + 0x1494], 1
jmp 0x1402ec7b6
mov dword [rbp + 0x1494], 0
cmp dword [rbp + 0x1494], 0
je 0x1402ec7cb
mov dword [rbp + 0x1498], 2
jmp 0x1402ec7d5
mov dword [rbp + 0x1498], 1
mov eax, dword [rbp + 0x1498]
shl eax, 0xc
mov dword [rbp + 0xcbc], eax
lea r9, [rbp + 0xcb0]
mov r8d, 0x1a
mov edx, 0x102b
mov rcx, qword [rbp + 8]
call qword [sym.imp.USER32.dll_SendMessageW]
nop
mov dword [rbp + 0xd40], 0xf000
lea rcx, str.PropagateCpuUsage
call fcn.1402139d4
test eax, eax
je 0x1402ec827
mov dword [rbp + 0x1494], 1
jmp 0x1402ec831
mov dword [rbp + 0x1494], 0
cmp dword [rbp + 0x1494], 0
je 0x1402ec846
mov dword [rbp + 0x1498], 2
jmp 0x1402ec850
mov dword [rbp + 0x1498], 1
mov eax, dword [rbp + 0x1498]
shl eax, 0xc
mov dword [rbp + 0xd3c], eax
lea r9, [rbp + 0xd30]
mov r8d, 0x1b
mov edx, 0x102b
mov rcx, qword [rbp + 8]
call qword [sym.imp.USER32.dll_SendMessageW]
nop
mov dword [rbp + 0xdc0], 0xf000
lea rcx, str.EnableAdvancedOptions
call fcn.1402139d4
test eax, eax
je 0x1402ec8a2
mov dword [rbp + 0x1494], 1
jmp 0x1402ec8ac
mov dword [rbp + 0x1494], 0
cmp dword [rbp + 0x1494], 0
je 0x1402ec8c1
mov dword [rbp + 0x1498], 2
jmp 0x1402ec8cb
mov dword [rbp + 0x1498], 1
mov eax, dword [rbp + 0x1498]
shl eax, 0xc
mov dword [rbp + 0xdbc], eax
lea r9, [rbp + 0xdb0]
mov r8d, 0x1c
mov edx, 0x102b
mov rcx, qword [rbp + 8]
call qword [sym.imp.USER32.dll_SendMessageW]
nop
movzx eax, byte [0x140967179]
test eax, eax
je 0x1402ec933
mov dword [rbp + 0xe40], 0xf000
mov dword [rbp + 0xe3c], 0x2000
lea r9, [rbp + 0xe30]
mov r8d, 3
mov edx, 0x102b
mov rcx, qword [rbp + 8]
call qword [sym.imp.USER32.dll_SendMessageW]
nop
lea rcx, str.EnableAdvancedOptions
call fcn.1402139d4
test eax, eax
je 0x1402ec94b
xor ecx, ecx
call fcn.1402f2b30
nop
lea rcx, [rbp - 0x20]
lea rdx, [0x1407554a0]
call fcn.1402124fd
mov rcx, qword [rbp + 0x14a0]
xor rcx, rbp
call fcn.14020ee98
lea rsp, [rbp + 0x14b8]
pop rdi
pop rbp
ret