Function at 0x1800bc6f0
Capabilities:
Get graphical window text

Disassembly:
mov qword [rsp + 8], rcx
push rdi
sub rsp, 0x100
mov edx, 0x577
mov rcx, qword [rsp + 0x110]
call qword [sym.imp.USER32.dll_GetDlgItem]
mov qword [rsp + 0x20], rax
mov edx, 0x500
mov rcx, qword [rsp + 0x110]
call sym.ProcessMonitor.dll_PhGetDialogItemValue
mov dword [rsp + 0x28], eax
lea rcx, str.SampleCountAutomatic
call sym.ProcessMonitor.dll_PhGetIntegerSetting
test eax, eax
je 0x1800bc745
mov dword [rsp + 0x48], 1
jmp 0x1800bc74d
mov dword [rsp + 0x48], 0
movzx eax, byte [rsp + 0x48]
mov byte [rsp + 0x2c], al
mov edx, 0x551
mov rcx, qword [rsp + 0x110]
call qword [sym.imp.USER32.dll_GetDlgItem]
xor r9d, r9d
xor r8d, r8d
mov edx, 0xf0
mov rcx, rax
call qword [sym.imp.USER32.dll_SendMessageW]
cmp eax, 1
jne 0x1800bc78c
mov dword [rsp + 0x4c], 1
jmp 0x1800bc794
mov dword [rsp + 0x4c], 0
movzx eax, byte [rsp + 0x4c]
mov byte [rsp + 0x2d], al
movzx eax, byte [rsp + 0x2d]
movzx ecx, byte [rsp + 0x2c]
cmp eax, ecx
je 0x1800bc7b2
mov byte [0x1805aa088], 1
movzx eax, byte [rsp + 0x2d]
mov edx, eax
lea rcx, str.SampleCountAutomatic
call sym.ProcessMonitor.dll_PhSetIntegerSetting
cmp dword [rsp + 0x28], 0
jne 0x1800bc7d4
mov dword [rsp + 0x28], 1
lea rcx, str.SampleCount
call sym.ProcessMonitor.dll_PhGetIntegerSetting
cmp dword [rsp + 0x28], eax
je 0x1800bc7ed
mov byte [0x1805aa088], 1
mov edx, dword [rsp + 0x28]
lea rcx, str.SampleCount
call sym.ProcessMonitor.dll_PhSetIntegerSetting
mov edx, 0x477
mov rcx, qword [rsp + 0x110]
call qword [sym.imp.USER32.dll_GetDlgItem]
mov rcx, rax
call sym.ProcessMonitor.dll_PhGetWindowText
mov rcx, rax
call sym.ProcessMonitor.dll_PhAutoDereferenceObject
mov rdx, rax
lea rcx, str.SearchEngine
call sym.ProcessMonitor.dll_PhSetStringSetting2
mov edx, 0x47f
mov rcx, qword [rsp + 0x110]
call qword [sym.imp.USER32.dll_GetDlgItem]
mov rcx, rax
call sym.ProcessMonitor.dll_PhGetWindowText
mov rcx, rax
call sym.ProcessMonitor.dll_PhAutoDereferenceObject
mov rdx, rax
lea rcx, str.ProgramInspectExecutables
call sym.ProcessMonitor.dll_PhSetStringSetting2
mov edx, 0x478
mov rcx, qword [rsp + 0x110]
call qword [sym.imp.USER32.dll_GetDlgItem]
xor r9d, r9d
xor r8d, r8d
mov edx, 0x147
mov rcx, rax
call qword [sym.imp.USER32.dll_SendMessageW]
mov dword [0x18059fc24], eax
mov edx, dword [0x18059fc24]
lea rcx, str.MaxSizeUnit
call sym.ProcessMonitor.dll_PhSetIntegerSetting
mov edx, 0x4e0
mov rcx, qword [rsp + 0x110]
call sym.ProcessMonitor.dll_PhGetDialogItemValue
mov edx, eax
lea rcx, str.IconProcesses
call sym.ProcessMonitor.dll_PhSetIntegerSetting
lea rcx, str.DbgHelpSearchPath
call sym.ProcessMonitor.dll_PhGetStringSetting
mov rcx, rax
call sym.ProcessMonitor.dll_PhAutoDereferenceObject
mov qword [rsp + 0x50], rax
mov edx, 0x4c2
mov rcx, qword [rsp + 0x110]
call qword [sym.imp.USER32.dll_GetDlgItem]
mov rcx, rax
call sym.ProcessMonitor.dll_PhGetWindowText
mov rcx, rax
call sym.ProcessMonitor.dll_PhAutoDereferenceObject
mov r8b, 1
mov rcx, qword [rsp + 0x50]
mov rdx, rcx
mov rcx, rax
call fcn.1800104c0
movzx eax, al
test eax, eax
jne 0x1800bc94f
mov edx, 0x4c2
mov rcx, qword [rsp + 0x110]
call qword [sym.imp.USER32.dll_GetDlgItem]
mov rcx, rax
call sym.ProcessMonitor.dll_PhGetWindowText
mov rcx, rax
call sym.ProcessMonitor.dll_PhAutoDereferenceObject
mov rdx, rax
lea rcx, str.DbgHelpSearchPath
call sym.ProcessMonitor.dll_PhSetStringSetting2
mov byte [0x1805aa088], 1
mov r9d, 0xf000
xor r8d, r8d
mov edx, 0x102c
mov rcx, qword [rsp + 0x20]
call qword [sym.imp.USER32.dll_SendMessageW]
shr eax, 0xc
dec eax
cmp eax, 1
jne 0x1800bc97c
mov dword [rsp + 0x58], 1
jmp 0x1800bc984
mov dword [rsp + 0x58], 0
mov edx, dword [rsp + 0x58]
lea rcx, str.AllowOnlyOneInstance
call sym.ProcessMonitor.dll_PhSetIntegerSetting
mov r9d, 0xf000
mov r8d, 1
mov edx, 0x102c
mov rcx, qword [rsp + 0x20]
call qword [sym.imp.USER32.dll_SendMessageW]
shr eax, 0xc
dec eax
cmp eax, 1
jne 0x1800bc9c4
mov dword [rsp + 0x5c], 1
jmp 0x1800bc9cc
mov dword [rsp + 0x5c], 0
mov edx, dword [rsp + 0x5c]
lea rcx, str.HideOnClose
call sym.ProcessMonitor.dll_PhSetIntegerSetting
mov r9d, 0xf000
mov r8d, 2
mov edx, 0x102c
mov rcx, qword [rsp + 0x20]
call qword [sym.imp.USER32.dll_SendMessageW]
shr eax, 0xc
dec eax
cmp eax, 1
jne 0x1800bca0c
mov dword [rsp + 0x60], 1
jmp 0x1800bca14
mov dword [rsp + 0x60], 0
mov edx, dword [rsp + 0x60]
lea rcx, str.HideOnMinimize
call sym.ProcessMonitor.dll_PhSetIntegerSetting
mov r9d, 0xf000
mov r8d, 4
mov edx, 0x102c
mov rcx, qword [rsp + 0x20]
call qword [sym.imp.USER32.dll_SendMessageW]
shr eax, 0xc
dec eax
cmp eax, 1
jne 0x1800bca54
mov dword [rsp + 0x64], 1
jmp 0x1800bca5c
mov dword [rsp + 0x64], 0
mov edx, dword [rsp + 0x64]
lea rcx, str.StartHidden
call sym.ProcessMonitor.dll_PhSetIntegerSetting
lea rcx, str.MiniInfoWindowEnabled
call sym.ProcessMonitor.dll_PhGetIntegerSetting
test eax, eax
je 0x1800bca86
mov dword [rsp + 0x68], 1
jmp 0x1800bca8e
mov dword [rsp + 0x68], 0
movzx eax, byte [rsp + 0x68]
mov byte [rsp + 0x2e], al
mov r9d, 0xf000
mov r8d, 0xd
mov edx, 0x102c
mov rcx, qword [rsp + 0x20]
call qword [sym.imp.USER32.dll_SendMessageW]
shr eax, 0xc
dec eax
cmp eax, 1
jne 0x1800bcac7
mov dword [rsp + 0x6c], 1
jmp 0x1800bcacf
mov dword [rsp + 0x6c], 0
movzx eax, byte [rsp + 0x6c]
mov byte [rsp + 0x2f], al
movzx eax, byte [rsp + 0x2f]
movzx ecx, byte [rsp + 0x2e]
cmp eax, ecx
je 0x1800bcaed
mov byte [0x1805aa088], 1
movzx eax, byte [rsp + 0x2f]
mov edx, eax
lea rcx, str.MiniInfoWindowEnabled
call sym.ProcessMonitor.dll_PhSetIntegerSetting
mov r9d, 0xf000
mov r8d, 0xe
mov edx, 0x102c
mov rcx, qword [rsp + 0x20]
call qword [sym.imp.USER32.dll_SendMessageW]
shr eax, 0xc
dec eax
cmp eax, 1
jne 0x1800bcb30
mov dword [rsp + 0x70], 1
jmp 0x1800bcb38
mov dword [rsp + 0x70], 0
mov edx, dword [rsp + 0x70]
lea rcx, str.MainWindowTabRestoreEnabled
call sym.ProcessMonitor.dll_PhSetIntegerSetting
lea rcx, str.EnableKph
call sym.ProcessMonitor.dll_PhGetIntegerSetting
test eax, eax
je 0x1800bcb62
mov dword [rsp + 0x74], 1
jmp 0x1800bcb6a
mov dword [rsp + 0x74], 0
movzx eax, byte [rsp + 0x74]
mov byte [rsp + 0x30], al
mov r9d, 0xf000
mov r8d, 6
mov edx, 0x102c
mov rcx, qword [rsp + 0x20]
call qword [sym.imp.USER32.dll_SendMessageW]
shr eax, 0xc
dec eax
cmp eax, 1
jne 0x1800bcba3
mov dword [rsp + 0x78], 1
jmp 0x1800bcbab
mov dword [rsp + 0x78], 0
movzx eax, byte [rsp + 0x78]
mov byte [rsp + 0x31], al
movzx eax, byte [rsp + 0x31]
movzx ecx, byte [rsp + 0x30]
cmp eax, ecx
je 0x1800bcbc9
mov byte [0x1805aa088], 1
movzx eax, byte [rsp + 0x31]
mov edx, eax
lea rcx, str.EnableKph
call sym.ProcessMonitor.dll_PhSetIntegerSetting
mov r9d, 0xf000
mov r8d, 5
mov edx, 0x102c
mov rcx, qword [rsp + 0x20]
call qword [sym.imp.USER32.dll_SendMessageW]
shr eax, 0xc
dec eax
cmp eax, 1
jne 0x1800bcc0c
mov dword [rsp + 0x7c], 1
jmp 0x1800bcc14
mov dword [rsp + 0x7c], 0
mov edx, dword [rsp + 0x7c]
lea rcx, str.EnableWarnings
call sym.ProcessMonitor.dll_PhSetIntegerSetting
lea rcx, str.EnablePlugins
call sym.ProcessMonitor.dll_PhGetIntegerSetting
test eax, eax
je 0x1800bcc41
mov dword [rsp + 0x80], 1
jmp 0x1800bcc4c
mov dword [rsp + 0x80], 0
movzx eax, byte [rsp + 0x80]
mov byte [rsp + 0x32], al
mov r9d, 0xf000
mov r8d, 8
mov edx, 0x102c
mov rcx, qword [rsp + 0x20]
call qword [sym.imp.USER32.dll_SendMessageW]
shr eax, 0xc
dec eax
cmp eax, 1
jne 0x1800bcc8b
mov dword [rsp + 0x84], 1
jmp 0x1800bcc96
mov dword [rsp + 0x84], 0
movzx eax, byte [rsp + 0x84]
mov byte [rsp + 0x33], al
movzx eax, byte [rsp + 0x33]
movzx ecx, byte [rsp + 0x32]
cmp eax, ecx
je 0x1800bccb7
mov byte [0x1805aa088], 1
movzx eax, byte [rsp + 0x33]
mov edx, eax
lea rcx, str.EnablePlugins
call sym.ProcessMonitor.dll_PhSetIntegerSetting
mov r9d, 0xf000
mov r8d, 9
mov edx, 0x102c
mov rcx, qword [rsp + 0x20]
call qword [sym.imp.USER32.dll_SendMessageW]
shr eax, 0xc
dec eax
cmp eax, 1
jne 0x1800bccfd
mov dword [rsp + 0x88], 1
jmp 0x1800bcd08
mov dword [rsp + 0x88], 0
mov edx, dword [rsp + 0x88]
lea rcx, str.DbgHelpUndecorate
call sym.ProcessMonitor.dll_PhSetIntegerSetting
lea rcx, str.TreeListEnableHeaderTotals
call sym.ProcessMonitor.dll_PhGetIntegerSetting
test eax, eax
je 0x1800bcd38
mov dword [rsp + 0x8c], 1
jmp 0x1800bcd43
mov dword [rsp + 0x8c], 0
movzx eax, byte [rsp + 0x8c]
mov byte [rsp + 0x34], al
mov r9d, 0xf000
mov r8d, 0xa
mov edx, 0x102c
mov rcx, qword [rsp + 0x20]
call qword [sym.imp.USER32.dll_SendMessageW]
shr eax, 0xc
dec eax
cmp eax, 1
jne 0x1800bcd82
mov dword [rsp + 0x90], 1
jmp 0x1800bcd8d
mov dword [rsp + 0x90], 0
movzx eax, byte [rsp + 0x90]
mov byte [rsp + 0x35], al
movzx eax, byte [rsp + 0x35]
movzx ecx, byte [rsp + 0x34]
cmp eax, ecx
je 0x1800bcdae
mov byte [0x1805aa088], 1
movzx eax, byte [rsp + 0x35]
mov edx, eax
lea rcx, str.TreeListEnableHeaderTotals
call sym.ProcessMonitor.dll_PhSetIntegerSetting
lea rcx, str.EnableScaleCpuGraph
call sym.ProcessMonitor.dll_PhGetIntegerSetting
test eax, eax
je 0x1800bcdde
mov dword [rsp + 0x94], 1
jmp 0x1800bcde9
mov dword [rsp + 0x94], 0
movzx eax, byte [rsp + 0x94]
mov byte [rsp + 0x36], al
mov r9d, 0xf000
mov r8d, 0xc
mov edx, 0x102c
mov rcx, qword [rsp + 0x20]
call qword [sym.imp.USER32.dll_SendMessageW]
shr eax, 0xc
dec eax
cmp eax, 1
jne 0x1800bce28
mov dword [rsp + 0x98], 1
jmp 0x1800bce33
mov dword [rsp + 0x98], 0
movzx eax, byte [rsp + 0x98]
mov byte [rsp + 0x37], al
movzx eax, byte [rsp + 0x37]
movzx ecx, byte [rsp + 0x36]
cmp eax, ecx
je 0x1800bce54
mov byte [0x1805aa088], 1
movzx eax, byte [rsp + 0x37]
mov edx, eax
lea rcx, str.EnableScaleCpuGraph
call sym.ProcessMonitor.dll_PhSetIntegerSetting
lea rcx, str.EnableCycleCpuUsage
call sym.ProcessMonitor.dll_PhGetIntegerSetting
test eax, eax
je 0x1800bce84
mov dword [rsp + 0x9c], 1
jmp 0x1800bce8f
mov dword [rsp + 0x9c], 0
movzx eax, byte [rsp + 0x9c]
mov byte [rsp + 0x38], al
mov r9d, 0xf000
mov r8d, 0xb
mov edx, 0x102c
mov rcx, qword [rsp + 0x20]
call qword [sym.imp.USER32.dll_SendMessageW]
shr eax, 0xc
dec eax
cmp eax, 1
jne 0x1800bcece
mov dword [rsp + 0xa0], 1
jmp 0x1800bced9
mov dword [rsp + 0xa0], 0
movzx eax, byte [rsp + 0xa0]
mov byte [rsp + 0x39], al
movzx eax, byte [rsp + 0x39]
movzx ecx, byte [rsp + 0x38]
cmp eax, ecx
je 0x1800bcefa
mov byte [0x1805aa088], 1
movzx eax, byte [rsp + 0x39]
mov edx, eax
lea rcx, str.EnableCycleCpuUsage
call sym.ProcessMonitor.dll_PhSetIntegerSetting
lea rcx, str.EnableThemeSupport
call sym.ProcessMonitor.dll_PhGetIntegerSetting
test eax, eax
je 0x1800bcf2a
mov dword [rsp + 0xa4], 1
jmp 0x1800bcf35
mov dword [rsp + 0xa4], 0
movzx eax, byte [rsp + 0xa4]
mov byte [rsp + 0x3a], al
mov r9d, 0xf000
mov r8d, 0xf
mov edx, 0x102c
mov rcx, qword [rsp + 0x20]
call qword [sym.imp.USER32.dll_SendMessageW]
shr eax, 0xc
dec eax
cmp eax, 1
jne 0x1800bcf74
mov dword [rsp + 0xa8], 1
jmp 0x1800bcf7f
mov dword [rsp + 0xa8], 0
movzx eax, byte [rsp + 0xa8]
mov byte [rsp + 0x3b], al
movzx eax, byte [rsp + 0x3b]
movzx ecx, byte [rsp + 0x3a]
cmp eax, ecx
je 0x1800bcfa0
mov byte [0x1805aa088], 1
movzx eax, byte [rsp + 0x3b]
mov edx, eax
lea rcx, str.EnableThemeSupport
call sym.ProcessMonitor.dll_PhSetIntegerSetting
mov r9d, 0xf000
mov r8d, 0x10
mov edx, 0x102c
mov rcx, qword [rsp + 0x20]
call qword [sym.imp.USER32.dll_SendMessageW]
shr eax, 0xc
dec eax
cmp eax, 1
jne 0x1800bcfe6
mov dword [rsp + 0xac], 1
jmp 0x1800bcff1
mov dword [rsp + 0xac], 0
mov edx, dword [rsp + 0xac]
lea rcx, str.EnableStartAsAdmin
call sym.ProcessMonitor.dll_PhSetIntegerSetting
lea rcx, str.EnableNetworkResolve
call sym.ProcessMonitor.dll_PhGetIntegerSetting
test eax, eax
je 0x1800bd021
mov dword [rsp + 0xb0], 1
jmp 0x1800bd02c
mov dword [rsp + 0xb0], 0
movzx eax, byte [rsp + 0xb0]
mov byte [rsp + 0x3c], al
mov r9d, 0xf000
mov r8d, 0x11
mov edx, 0x102c
mov rcx, qword [rsp + 0x20]
call qword [sym.imp.USER32.dll_SendMessageW]
shr eax, 0xc
dec eax
cmp eax, 1
jne 0x1800bd06b
mov dword [rsp + 0xb4], 1
jmp 0x1800bd076
mov dword [rsp + 0xb4], 0
movzx eax, byte [rsp + 0xb4]
mov byte [rsp + 0x3d], al
movzx eax, byte [rsp + 0x3d]
movzx ecx, byte [rsp + 0x3c]
cmp eax, ecx
je 0x1800bd097
mov byte [0x1805aa088], 1
movzx eax, byte [rsp + 0x3d]
mov edx, eax
lea rcx, str.EnableNetworkResolve
call sym.ProcessMonitor.dll_PhSetIntegerSetting
lea rcx, str.EnableNetworkResolveDoH
call sym.ProcessMonitor.dll_PhGetIntegerSetting
test eax, eax
je 0x1800bd0c7
mov dword [rsp + 0xb8], 1
jmp 0x1800bd0d2
mov dword [rsp + 0xb8], 0
movzx eax, byte [rsp + 0xb8]
mov byte [rsp + 0x3e], al
mov r9d, 0xf000
mov r8d, 0x12
mov edx, 0x102c
mov rcx, qword [rsp + 0x20]
call qword [sym.imp.USER32.dll_SendMessageW]
shr eax, 0xc
dec eax
cmp eax, 1
jne 0x1800bd111
mov dword [rsp + 0xbc], 1
jmp 0x1800bd11c
mov dword [rsp + 0xbc], 0
movzx eax, byte [rsp + 0xbc]
mov byte [rsp + 0x3f], al
movzx eax, byte [rsp + 0x3f]
movzx ecx, byte [rsp + 0x3e]
cmp eax, ecx
je 0x1800bd13d
mov byte [0x1805aa088], 1
movzx eax, byte [rsp + 0x3f]
mov edx, eax
lea rcx, str.EnableNetworkResolveDoH
call sym.ProcessMonitor.dll_PhSetIntegerSetting
mov r9d, 0xf000
mov r8d, 0x13
mov edx, 0x102c
mov rcx, qword [rsp + 0x20]
call qword [sym.imp.USER32.dll_SendMessageW]
shr eax, 0xc
dec eax
cmp eax, 1
jne 0x1800bd183
mov dword [rsp + 0xc0], 1
jmp 0x1800bd18e
mov dword [rsp + 0xc0], 0
mov edx, dword [rsp + 0xc0]
lea rcx, str.EnableInstantTooltips
call sym.ProcessMonitor.dll_PhSetIntegerSetting
lea rcx, str.EnableImageCoherencySupport
call sym.ProcessMonitor.dll_PhGetIntegerSetting
test eax, eax
je 0x1800bd1be
mov dword [rsp + 0xc4], 1
jmp 0x1800bd1c9
mov dword [rsp + 0xc4], 0
movzx eax, byte [rsp + 0xc4]
mov byte [rsp + 0x40], al
mov r9d, 0xf000
mov r8d, 0x14
mov edx, 0x102c
mov rcx, qword [rsp + 0x20]
call qword [sym.imp.USER32.dll_SendMessageW]
shr eax, 0xc
dec eax
cmp eax, 1
jne 0x1800bd208
mov dword [rsp + 0xc8], 1
jmp 0x1800bd213
mov dword [rsp + 0xc8], 0
movzx eax, byte [rsp + 0xc8]
mov byte [rsp + 0x41], al
movzx eax, byte [rsp + 0x41]
movzx ecx, byte [rsp + 0x40]
cmp eax, ecx
je 0x1800bd234
mov byte [0x1805aa088], 1
movzx eax, byte [rsp + 0x41]
mov edx, eax
lea rcx, str.EnableImageCoherencySupport
call sym.ProcessMonitor.dll_PhSetIntegerSetting
lea rcx, str.EnableStage2
call sym.ProcessMonitor.dll_PhGetIntegerSetting
test eax, eax
je 0x1800bd264
mov dword [rsp + 0xcc], 1
jmp 0x1800bd26f
mov dword [rsp + 0xcc], 0
movzx eax, byte [rsp + 0xcc]
mov byte [rsp + 0x42], al
mov r9d, 0xf000
mov r8d, 0x15
mov edx, 0x102c
mov rcx, qword [rsp + 0x20]
call qword [sym.imp.USER32.dll_SendMessageW]
shr eax, 0xc
dec eax
cmp eax, 1
jne 0x1800bd2ae
mov dword [rsp + 0xd0], 1
jmp 0x1800bd2b9
mov dword [rsp + 0xd0], 0
movzx eax, byte [rsp + 0xd0]
mov byte [rsp + 0x43], al
movzx eax, byte [rsp + 0x43]
movzx ecx, byte [rsp + 0x42]
cmp eax, ecx
je 0x1800bd2da
mov byte [0x1805aa088], 1
movzx eax, byte [rsp + 0x43]
mov edx, eax
lea rcx, str.EnableStage2
call sym.ProcessMonitor.dll_PhSetIntegerSetting
lea rcx, str.EnableServiceStage2
call sym.ProcessMonitor.dll_PhGetIntegerSetting
test eax, eax
je 0x1800bd30a
mov dword [rsp + 0xd4], 1
jmp 0x1800bd315
mov dword [rsp + 0xd4], 0
movzx eax, byte [rsp + 0xd4]
mov byte [rsp + 0x44], al
mov r9d, 0xf000
mov r8d, 0x16
mov edx, 0x102c
mov rcx, qword [rsp + 0x20]
call qword [sym.imp.USER32.dll_SendMessageW]
shr eax, 0xc
dec eax
cmp eax, 1
jne 0x1800bd354
mov dword [rsp + 0xd8], 1
jmp 0x1800bd35f
mov dword [rsp + 0xd8], 0
movzx eax, byte [rsp + 0xd8]
mov byte [rsp + 0x45], al
movzx eax, byte [rsp + 0x45]
movzx ecx, byte [rsp + 0x44]
cmp eax, ecx
je 0x1800bd380
mov byte [0x1805aa088], 1
movzx eax, byte [rsp + 0x45]
mov edx, eax
lea rcx, str.EnableServiceStage2
call sym.ProcessMonitor.dll_PhSetIntegerSetting
mov r9d, 0xf000
mov r8d, 0x17
mov edx, 0x102c
mov rcx, qword [rsp + 0x20]
call qword [sym.imp.USER32.dll_SendMessageW]
shr eax, 0xc
dec eax
cmp eax, 1
jne 0x1800bd3c6
mov dword [rsp + 0xdc], 1
jmp 0x1800bd3d1
mov dword [rsp + 0xdc], 0
mov edx, dword [rsp + 0xdc]
lea rcx, str.IconSingleClick
call sym.ProcessMonitor.dll_PhSetIntegerSetting
mov r9d, 0xf000
mov r8d, 0x18
mov edx, 0x102c
mov rcx, qword [rsp + 0x20]
call qword [sym.imp.USER32.dll_SendMessageW]
shr eax, 0xc
dec eax
cmp eax, 1
jne 0x1800bd417
mov dword [rsp + 0xe0], 1
jmp 0x1800bd422
mov dword [rsp + 0xe0], 0
mov edx, dword [rsp + 0xe0]
lea rcx, str.IconTogglesVisibility
call sym.ProcessMonitor.dll_PhSetIntegerSetting
mov r9d, 0xf000
mov r8d, 0x19
mov edx, 0x102c
mov rcx, qword [rsp + 0x20]
call qword [sym.imp.USER32.dll_SendMessageW]
shr eax, 0xc
dec eax
cmp eax, 1
jne 0x1800bd468
mov dword [rsp + 0xe4], 1
jmp 0x1800bd473
mov dword [rsp + 0xe4], 0
mov edx, dword [rsp + 0xe4]
lea rcx, str.PropagateCpuUsage
call sym.ProcessMonitor.dll_PhSetIntegerSetting
mov r9d, 0xf000
mov r8d, 0x1a
mov edx, 0x102c
mov rcx, qword [rsp + 0x20]
call qword [sym.imp.USER32.dll_SendMessageW]
shr eax, 0xc
dec eax
cmp eax, 1
jne 0x1800bd4b9
mov dword [rsp + 0xe8], 1
jmp 0x1800bd4c4
mov dword [rsp + 0xe8], 0
mov edx, dword [rsp + 0xe8]
lea rcx, str.EnableAdvancedOptions
call sym.ProcessMonitor.dll_PhSetIntegerSetting
lea rcx, str.EnableThemeSupport
call sym.ProcessMonitor.dll_PhGetIntegerSetting
test eax, eax
je 0x1800bd4f8
mov edx, 1
lea rcx, str.GraphColorMode
call sym.ProcessMonitor.dll_PhSetIntegerSetting
mov r9d, 0xf000
mov r8d, 4
mov edx, 0x102c
mov rcx, qword [rsp + 0x20]
call qword [sym.imp.USER32.dll_SendMessageW]
shr eax, 0xc
dec eax
cmp eax, 1
jne 0x1800bd52b
mov dword [rsp + 0xec], 1
jmp 0x1800bd536
mov dword [rsp + 0xec], 0
mov r9d, 0xf000
mov r8d, 3
mov edx, 0x102c
mov rcx, qword [rsp + 0x20]
call qword [sym.imp.USER32.dll_SendMessageW]
shr eax, 0xc
dec eax
cmp eax, 1
jne 0x1800bd569
mov dword [rsp + 0xf0], 1
jmp 0x1800bd574
mov dword [rsp + 0xf0], 0
movzx edx, byte [rsp + 0xec]
movzx ecx, byte [rsp + 0xf0]
call fcn.1800bab70
lea r8, [0x1800bc610]
xor edx, edx
mov ecx, 0x10
call sym.ProcessMonitor.dll_PhPluginInvokeWindowCallback
add rsp, 0x100
pop rdi
ret