Function at 0x140098de0
Capabilities:
Get graphical window text

Disassembly:
mov qword [rsp + 0x10], rbx
mov qword [rsp + 0x18], rsi
mov qword [rsp + 0x20], rdi
push rbp
push r14
push r15
lea rbp, [rsp - 0x47]
sub rsp, 0xb0
mov rax, qword [0x1402b5020]
xor rax, rsp
mov qword [rbp + 0x37], rax
mov edx, 0x577
mov rdi, rcx
call qword [sym.imp.USER32.dll_GetDlgItem]
lea rcx, [rbp + 0x17]
mov qword [rbp + 0x17], 0x16
mov rsi, rax
lea rax, str.SampleCount
mov qword [rbp + 0x1f], rax
call sym.SystemInformer.exe_PhGetIntegerStringRefSetting
mov r8d, 0xa
lea rdx, [rbp + 0x17]
mov ecx, eax
call fcn.1401e4a70
mov edx, 0x500
mov rcx, rdi
call qword [sym.imp.USER32.dll_GetDlgItem]
test rax, rax
je 0x140098e73
xor r8d, r8d
lea r9, [rbp + 0x17]
mov rcx, rax
lea edx, [r8 + 0xc]
call qword [sym.imp.USER32.dll_SendMessageW]
lea r14, str.SampleCountAutomatic
mov qword [rbp + 0x17], 0x28
lea rcx, [rbp + 0x17]
mov qword [rbp + 0x1f], r14
call sym.SystemInformer.exe_PhGetIntegerStringRefSetting
xor r15d, r15d
mov edx, 0x551
test eax, eax
mov ebx, r15d
mov rcx, rdi
setne bl
call qword [sym.imp.USER32.dll_GetDlgItem]
xor r9d, r9d
mov r8, rbx
mov rcx, rax
mov edx, 0xf1
call qword [sym.imp.USER32.dll_SendMessageW]
lea rcx, [rbp + 0x17]
mov qword [rbp + 0x17], 0x28
mov qword [rbp + 0x1f], r14
call sym.SystemInformer.exe_PhGetIntegerStringRefSetting
test eax, eax
je 0x140098ef1
mov edx, 0x500
mov rcx, rdi
call qword [sym.imp.USER32.dll_GetDlgItem]
mov rcx, rax
xor edx, edx
call qword [sym.imp.USER32.dll_EnableWindow]
lea rax, str.Allow_only_one_instance
mov qword ds:[rbp - 0x49], 5
lea r9, [rbp - 0x49]
mov qword [rbp - 0x31], rax
xor r8d, r8d
mov dword [rbp - 0x41], r15d
mov edx, 0x104d
mov qword [rbp - 0x21], r15
mov rcx, rsi
call qword [sym.imp.USER32.dll_SendMessageW]
lea rax, str.Hide_when_closed
mov dword [rbp - 0x49], 5
lea r9, [rbp - 0x49]
mov qword [rbp - 0x31], rax
xor r8d, r8d
mov qword [rbp - 0x45], 1
mov edx, 0x104d
mov qword [rbp - 0x21], r15
mov rcx, rsi
call qword [sym.imp.USER32.dll_SendMessageW]
lea rax, str.Hide_when_minimized
mov dword [rbp - 0x49], 5
lea r9, [rbp - 0x49]
mov qword [rbp - 0x31], rax
xor r8d, r8d
mov qword [rbp - 0x45], 2
mov edx, 0x104d
mov qword [rbp - 0x21], r15
mov rcx, rsi
call qword [sym.imp.USER32.dll_SendMessageW]
lea rax, str.Start_when_I_log_on
mov dword [rbp - 0x49], 5
lea r9, [rbp - 0x49]
mov qword [rbp - 0x31], rax
xor r8d, r8d
mov qword [rbp - 0x45], 3
mov edx, 0x104d
mov qword [rbp - 0x21], r15
mov rcx, rsi
call qword [sym.imp.USER32.dll_SendMessageW]
lea rax, str.Start_hidden
mov dword [rbp - 0x49], 5
lea r9, [rbp - 0x49]
mov qword [rbp - 0x31], rax
xor r8d, r8d
mov qword [rbp - 0x45], 4
mov edx, 0x104d
mov qword [rbp - 0x21], r15
mov rcx, rsi
call qword [sym.imp.USER32.dll_SendMessageW]
lea rax, str.Enable_warnings
mov dword ds:[rbp - 0x49], 5
lea r9, [rbp - 0x49]
mov qword [rbp - 0x31], rax
xor r8d, r8d
mov qword [rbp - 0x45], 5
mov edx, 0x104d
mov qword [rbp - 0x21], r15
mov rcx, rsi
call qword [sym.imp.USER32.dll_SendMessageW]
lea rax, str.Enable_kernel_mode_driver
mov dword [rbp - 0x49], 5
lea r9, [rbp - 0x49]
mov qword [rbp - 0x31], rax
xor r8d, r8d
mov qword [rbp - 0x45], 6
mov edx, 0x104d
mov qword [rbp - 0x21], r15
mov rcx, rsi
call qword [sym.imp.USER32.dll_SendMessageW]
lea rax, str.Enable_monospace_fonts
mov dword [rbp - 0x49], 5
lea r9, [rbp - 0x49]
mov qword [rbp - 0x31], rax
xor r8d, r8d
mov qword [rbp - 0x45], 7
mov edx, 0x104d
mov qword [rbp - 0x21], r15
mov rcx, rsi
call qword [sym.imp.USER32.dll_SendMessageW]
mov dword [rbp - 0x49], 5
lea rax, str.Enable_plugins
mov qword [rbp - 0x45], 8
lea r9, [rbp - 0x49]
mov qword [rbp - 0x31], rax
xor r8d, r8d
mov qword [rbp - 0x21], r15
mov edx, 0x104d
mov rcx, rsi
call qword [sym.imp.USER32.dll_SendMessageW]
lea rax, str.Enable_undecorated_symbols
mov dword [rbp - 0x49], 5
lea r9, [rbp - 0x49]
mov qword [rbp - 0x31], rax
xor r8d, r8d
mov qword [rbp - 0x45], 9
mov edx, 0x104d
mov qword [rbp - 0x21], r15
mov rcx, rsi
call qword [sym.imp.USER32.dll_SendMessageW]
lea rax, str.Enable_column_header_totals__experimental_
mov dword ds:[rbp - 0x49], 5
lea r9, [rbp - 0x49]
mov qword [rbp - 0x31], rax
xor r8d, r8d
mov qword [rbp - 0x45], 0xa
mov edx, 0x104d
mov qword [rbp - 0x21], r15
mov rcx, rsi
call qword [sym.imp.USER32.dll_SendMessageW]
lea rax, str.Enable_cycle_based_CPU_usage
mov dword [rbp - 0x49], 5
lea r9, [rbp - 0x49]
mov qword [rbp - 0x31], rax
xor r8d, r8d
mov qword [rbp - 0x45], 0xb
mov edx, 0x104d
mov qword [rbp - 0x21], r15
mov rcx, rsi
call qword [sym.imp.USER32.dll_SendMessageW]
lea rax, str.Enable_fixed_graph_scaling__experimental_
mov dword [rbp - 0x49], 5
lea r9, [rbp - 0x49]
mov qword [rbp - 0x31], rax
xor r8d, r8d
mov qword [rbp - 0x45], 0xc
mov edx, 0x104d
mov qword [rbp - 0x21], r15
mov rcx, rsi
call qword [sym.imp.USER32.dll_SendMessageW]
lea rax, str.Enable_tray_information_window
mov dword [rbp - 0x49], 5
lea r9, [rbp - 0x49]
mov qword [rbp - 0x31], rax
xor r8d, r8d
mov qword [rbp - 0x45], 0xd
mov edx, 0x104d
mov qword [rbp - 0x21], r15
mov rcx, rsi
call qword [sym.imp.USER32.dll_SendMessageW]
lea rax, str.Remember_last_selected_window
mov dword [rbp - 0x49], 5
lea r9, [rbp - 0x49]
mov qword [rbp - 0x31], rax
xor r8d, r8d
mov qword [rbp - 0x45], 0xe
mov edx, 0x104d
mov qword [rbp - 0x21], r15
mov rcx, rsi
call qword [sym.imp.USER32.dll_SendMessageW]
lea rax, str.Enable_theme_support__experimental_
mov dword ds:[rbp - 0x49], 5
lea r9, [rbp - 0x49]
mov qword [rbp - 0x31], rax
xor r8d, r8d
mov qword [rbp - 0x45], 0xf
mov edx, 0x104d
mov qword [rbp - 0x21], r15
mov rcx, rsi
call qword [sym.imp.USER32.dll_SendMessageW]
mov dword [rbp - 0x49], 5
mov qword [rbp - 0x45], 0x10
lea rax, str.Enable_start_as_admin__experimental_
mov qword [rbp - 0x21], r15
lea r9, [rbp - 0x49]
mov qword [rbp - 0x31], rax
xor r8d, r8d
mov edx, 0x104d
mov rcx, rsi
call qword [sym.imp.USER32.dll_SendMessageW]
lea rax, str.Enable_streamer_mode__disable_window_capture___experimental_
mov dword [rbp - 0x49], 5
lea r9, [rbp - 0x49]
mov qword [rbp - 0x31], rax
xor r8d, r8d
mov qword [rbp - 0x45], 0x11
mov edx, 0x104d
mov qword [rbp - 0x21], r15
mov rcx, rsi
call qword [sym.imp.USER32.dll_SendMessageW]
lea rax, str.Enable_silent_crash_notification__experimental_
mov dword [rbp - 0x49], 5
lea r9, [rbp - 0x49]
mov qword [rbp - 0x31], rax
xor r8d, r8d
mov qword [rbp - 0x45], 0x12
mov edx, 0x104d
mov qword [rbp - 0x21], r15
mov rcx, rsi
call qword [sym.imp.USER32.dll_SendMessageW]
lea rax, str.Resolve_network_addresses
mov dword [rbp - 0x49], 5
lea r9, [rbp - 0x49]
mov qword [rbp - 0x31], rax
xor r8d, r8d
mov qword [rbp - 0x45], 0x13
mov edx, 0x104d
mov qword [rbp - 0x21], r15
mov rcx, rsi
call qword [sym.imp.USER32.dll_SendMessageW]
lea rax, str.Resolve_DNS_over_HTTPS__DoH_
mov dword ds:[rbp - 0x49], 5
lea r9, [rbp - 0x49]
mov qword [rbp - 0x31], rax
xor r8d, r8d
mov qword [rbp - 0x45], 0x14
mov edx, 0x104d
mov qword [rbp - 0x21], r15
mov rcx, rsi
call qword [sym.imp.USER32.dll_SendMessageW]
lea rax, str.Show_tooltips_instantly
mov dword [rbp - 0x49], 5
lea r9, [rbp - 0x49]
mov qword [rbp - 0x31], rax
xor r8d, r8d
mov qword [rbp - 0x45], 0x15
mov edx, 0x104d
mov qword [rbp - 0x21], r15
mov rcx, rsi
call qword [sym.imp.USER32.dll_SendMessageW]
lea rax, str.Check_images_for_coherency
mov dword [rbp - 0x49], 5
lea r9, [rbp - 0x49]
mov qword [rbp - 0x31], rax
xor r8d, r8d
mov qword [rbp - 0x45], 0x16
mov edx, 0x104d
mov qword [rbp - 0x21], r15
mov rcx, rsi
call qword [sym.imp.USER32.dll_SendMessageW]
lea rax, str.Check_images_for_digital_signatures
mov dword [rbp - 0x49], 5
lea r9, [rbp - 0x49]
mov qword [rbp - 0x31], rax
xor r8d, r8d
mov qword [rbp - 0x45], 0x17
mov edx, 0x104d
mov qword [rbp - 0x21], r15
mov rcx, rsi
call qword [sym.imp.USER32.dll_SendMessageW]
lea rax, str.Check_services_for_digital_signatures
mov dword [rbp - 0x49], 5
mov qword [rbp - 0x45], 0x18
lea r9, [rbp - 0x49]
mov qword [rbp - 0x31], rax
xor r8d, r8d
mov qword [rbp - 0x21], r15
mov edx, 0x104d
mov rcx, rsi
call qword [sym.imp.USER32.dll_SendMessageW]
lea rax, str.Single_click_tray_icons
mov dword ds:[rbp - 0x49], 5
lea r9, [rbp - 0x49]
mov qword [rbp - 0x31], rax
xor r8d, r8d
mov qword [rbp - 0x45], 0x19
mov edx, 0x104d
mov qword [rbp - 0x21], r15
mov rcx, rsi
call qword [sym.imp.USER32.dll_SendMessageW]
lea rax, str.Icon_click_toggles_visibility
mov dword [rbp - 0x49], 5
lea r9, [rbp - 0x49]
mov qword [rbp - 0x31], rax
xor r8d, r8d
mov qword [rbp - 0x45], 0x1a
mov edx, 0x104d
mov qword [rbp - 0x21], r15
mov rcx, rsi
call qword [sym.imp.USER32.dll_SendMessageW]
lea rax, str.Include_usage_of_collapsed_processes
mov dword [rbp - 0x49], 5
lea r9, [rbp - 0x49]
mov qword [rbp - 0x31], rax
xor r8d, r8d
mov qword [rbp - 0x45], 0x1b
mov edx, 0x104d
mov qword [rbp - 0x21], r15
mov rcx, rsi
call qword [sym.imp.USER32.dll_SendMessageW]
lea rax, str.Show_advanced_options
mov dword [rbp - 0x49], 5
lea r9, [rbp - 0x49]
mov qword [rbp - 0x31], rax
xor r8d, r8d
mov qword [rbp - 0x45], 0x1c
mov edx, 0x104d
mov qword [rbp - 0x21], r15
mov rcx, rsi
call qword [sym.imp.USER32.dll_SendMessageW]
lea rax, str.AllowOnlyOneInstance
mov dword ds:[rbp - 0x39], 0xf000
lea rcx, [rbp + 0x17]
mov qword [rbp + 0x1f], rax
mov qword [rbp + 0x17], 0x28
call sym.SystemInformer.exe_PhGetIntegerStringRefSetting
mov ebx, 0x1000
lea r9, [rbp - 0x49]
test eax, eax
mov ecx, ebx
mov edi, 0x2000
cmovne ecx, edi
xor r8d, r8d
mov dword [rbp - 0x3d], ecx
lea edx, [rbx + 0x2b]
mov rcx, rsi
call qword [sym.imp.USER32.dll_SendMessageW]
lea rax, str.HideOnClose
mov dword [rbp - 0x39], 0xf000
lea rcx, [rbp + 0x17]
mov qword [rbp + 0x1f], rax
mov qword [rbp + 0x17], 0x16
call sym.SystemInformer.exe_PhGetIntegerStringRefSetting
test eax, eax
lea r9, [rbp - 0x49]
mov ecx, ebx
lea edx, [rbx + 0x2b]
cmovne ecx, edi
mov r8d, 1
mov dword [rbp - 0x3d], ecx
mov rcx, rsi
call qword [sym.imp.USER32.dll_SendMessageW]
mov dword [rbp - 0x39], 0xf000
mov qword [rbp + 0x17], 0x1c
lea rax, str.HideOnMinimize
lea rcx, [rbp + 0x17]
mov qword [rbp + 0x1f], rax
call sym.SystemInformer.exe_PhGetIntegerStringRefSetting
test eax, eax
lea r9, [rbp - 0x49]
mov ecx, ebx
lea edx, [rbx + 0x2b]
cmovne ecx, edi
mov r8d, 2
mov dword [rbp - 0x3d], ecx
mov rcx, rsi
call qword [sym.imp.USER32.dll_SendMessageW]
lea rax, str.StartHidden
mov dword [rbp - 0x39], 0xf000
lea rcx, [rbp + 0x17]
mov qword [rbp + 0x1f], rax
mov qword [rbp + 0x17], 0x16
call sym.SystemInformer.exe_PhGetIntegerStringRefSetting
test eax, eax
lea r9, [rbp - 0x49]
mov ecx, ebx
lea edx, [rbx + 0x2b]
cmovne ecx, edi
mov r8d, 4
mov dword [rbp - 0x3d], ecx
mov rcx, rsi
call qword [sym.imp.USER32.dll_SendMessageW]
lea rax, str.MiniInfoWindowEnabled
mov dword [rbp - 0x39], 0xf000
lea rcx, [rbp + 0x17]
mov qword [rbp + 0x1f], rax
mov qword [rbp + 0x17], 0x2a
call sym.SystemInformer.exe_PhGetIntegerStringRefSetting
test eax, eax
lea r9, [rbp - 0x49]
mov ecx, ebx
lea edx, [rbx + 0x2b]
cmovne ecx, edi
mov r8d, 0xd
mov dword [rbp - 0x3d], ecx
mov rcx, rsi
call qword [sym.imp.USER32.dll_SendMessageW]
lea rax, str.MainWindowTabRestoreEnabled
mov dword [rbp - 0x39], 0xf000
lea rcx, [rbp + 0x17]
mov qword [rbp + 0x1f], rax
mov qword [rbp + 0x17], 0x36
call sym.SystemInformer.exe_PhGetIntegerStringRefSetting
test eax, eax
lea r9, [rbp - 0x49]
mov ecx, ebx
lea edx, [rbx + 0x2b]
cmovne ecx, edi
mov r8d, 0xe
mov dword [rbp - 0x3d], ecx
mov rcx, rsi
call qword [sym.imp.USER32.dll_SendMessageW]
lea rax, str.KsiEnable
mov dword [rbp - 0x39], 0xf000
lea rcx, [rbp + 0x17]
mov qword [rbp + 0x1f], rax
mov qword [rbp + 0x17], 0x12
call sym.SystemInformer.exe_PhGetIntegerStringRefSetting
test eax, eax
lea r9, [rbp - 0x49]
mov ecx, ebx
lea edx, [rbx + 0x2b]
cmovne ecx, edi
mov r8d, 6
mov dword [rbp - 0x3d], ecx
mov rcx, rsi
call qword [sym.imp.USER32.dll_SendMessageW]
lea rax, str.EnableWarnings
mov dword ds:[rbp - 0x39], 0xf000
lea rcx, [rbp + 0x17]
mov qword [rbp + 0x1f], rax
mov qword [rbp + 0x17], 0x1c
call sym.SystemInformer.exe_PhGetIntegerStringRefSetting
mov ecx, ebx
test eax, eax
cmovne ecx, edi
lea r9, [rbp - 0x49]
mov dword [rbp - 0x3d], ecx
lea edx, [rbx + 0x2b]
mov rcx, rsi
mov r8d, 5
call qword [sym.imp.USER32.dll_SendMessageW]
lea rax, str.EnablePlugins
mov dword [rbp - 0x39], 0xf000
lea rcx, [rbp + 0x17]
mov qword [rbp + 0x1f], rax
mov qword [rbp + 0x17], 0x1a
call sym.SystemInformer.exe_PhGetIntegerStringRefSetting
test eax, eax
lea r9, [rbp - 0x49]
mov ecx, ebx
lea edx, [rbx + 0x2b]
cmovne ecx, edi
mov r8d, 8
mov dword [rbp - 0x3d], ecx
mov rcx, rsi
call qword [sym.imp.USER32.dll_SendMessageW]
lea rax, str.DbgHelpUndecorate
mov dword [rbp - 0x39], 0xf000
lea rcx, [rbp + 0x17]
mov qword [rbp + 0x1f], rax
mov qword [rbp + 0x17], 0x22
call sym.SystemInformer.exe_PhGetIntegerStringRefSetting
test eax, eax
lea r9, [rbp - 0x49]
mov ecx, ebx
lea edx, [rbx + 0x2b]
cmovne ecx, edi
mov r8d, 9
mov dword [rbp - 0x3d], ecx
mov rcx, rsi
call qword [sym.imp.USER32.dll_SendMessageW]
lea rax, str.TreeListEnableHeaderTotals
mov dword [rbp - 0x39], 0xf000
lea rcx, [rbp + 0x17]
mov qword [rbp + 0x1f], rax
mov qword [rbp + 0x17], 0x34
call sym.SystemInformer.exe_PhGetIntegerStringRefSetting
test eax, eax
lea r9, [rbp - 0x49]
mov ecx, ebx
lea edx, [rbx + 0x2b]
cmovne ecx, edi
mov r8d, 0xa
mov dword [rbp - 0x3d], ecx
mov rcx, rsi
call qword [sym.imp.USER32.dll_SendMessageW]
lea rax, str.EnableGraphMaxScale
mov dword [rbp - 0x39], 0xf000
lea rcx, [rbp + 0x17]
mov qword [rbp + 0x1f], rax
mov qword [rbp + 0x17], 0x26
call sym.SystemInformer.exe_PhGetIntegerStringRefSetting
test eax, eax
lea r9, [rbp - 0x49]
mov ecx, ebx
lea edx, [rbx + 0x2b]
cmovne ecx, edi
mov r8d, 0xc
mov dword [rbp - 0x3d], ecx
mov rcx, rsi
call qword [sym.imp.USER32.dll_SendMessageW]
lea rax, str.EnableCycleCpuUsage
mov dword [rbp - 0x39], 0xf000
lea rcx, [rbp + 0x17]
mov qword [rbp + 0x1f], rax
mov qword [rbp + 0x17], 0x26
call sym.SystemInformer.exe_PhGetIntegerStringRefSetting
mov ecx, ebx
lea r9, [rbp - 0x49]
test eax, eax
lea edx, [rbx + 0x2b]
mov r8d, 0xb
cmovne ecx, edi
mov dword [rbp - 0x3d], ecx
mov rcx, rsi
call qword [sym.imp.USER32.dll_SendMessageW]
lea rax, str.EnableThemeSupport
mov dword [rbp - 0x39], 0xf000
lea rcx, [rbp + 0x17]
mov qword [rbp + 0x1f], rax
mov qword [rbp + 0x17], 0x24
call sym.SystemInformer.exe_PhGetIntegerStringRefSetting
test eax, eax
lea r9, [rbp - 0x49]
mov ecx, ebx
lea edx, [rbx + 0x2b]
cmovne ecx, edi
mov r8d, 0xf
mov dword [rbp - 0x3d], ecx
mov rcx, rsi
call qword [sym.imp.USER32.dll_SendMessageW]
lea rax, str.EnableStartAsAdmin
mov dword [rbp - 0x39], 0xf000
lea rcx, [rbp + 0x17]
mov qword [rbp + 0x1f], rax
mov qword [rbp + 0x17], 0x24
call sym.SystemInformer.exe_PhGetIntegerStringRefSetting
test eax, eax
lea r9, [rbp - 0x49]
mov ecx, ebx
lea edx, [rbx + 0x2b]
cmovne ecx, edi
mov r8d, 0x10
mov dword [rbp - 0x3d], ecx
mov rcx, rsi
call qword [sym.imp.USER32.dll_SendMessageW]
lea rax, str.EnableStreamerMode
mov dword [rbp - 0x39], 0xf000
lea rcx, [rbp + 0x17]
mov qword [rbp + 0x1f], rax
mov qword [rbp + 0x17], 0x24
call sym.SystemInformer.exe_PhGetIntegerStringRefSetting
test eax, eax
lea r9, [rbp - 0x49]
mov ecx, ebx
lea edx, [rbx + 0x2b]
cmovne ecx, edi
mov r8d, 0x11
mov dword [rbp - 0x3d], ecx
mov rcx, rsi
call qword [sym.imp.USER32.dll_SendMessageW]
lea rax, str.EnableSilentCrashNotify
mov dword ds:[rbp - 0x39], 0xf000
lea rcx, [rbp + 0x17]
mov qword [rbp + 0x1f], rax
mov qword [rbp + 0x17], 0x2e
call sym.SystemInformer.exe_PhGetIntegerStringRefSetting
test eax, eax
lea r9, [rbp - 0x49]
mov ecx, ebx
lea edx, [rbx + 0x2b]
cmovne ecx, edi
mov r8d, 0x12
mov dword [rbp - 0x3d], ecx
mov rcx, rsi
call qword [sym.imp.USER32.dll_SendMessageW]
lea rax, str.EnableMonospaceFont
mov dword [rbp - 0x39], 0xf000
lea rcx, [rbp + 0x17]
mov qword [rbp + 0x1f], rax
mov qword [rbp + 0x17], 0x26
call sym.SystemInformer.exe_PhGetIntegerStringRefSetting
test eax, eax
lea r9, [rbp - 0x49]
mov ecx, ebx
lea edx, [rbx + 0x2b]
cmovne ecx, edi
mov r8d, 7
mov dword [rbp - 0x3d], ecx
mov rcx, rsi
call qword [sym.imp.USER32.dll_SendMessageW]
lea rax, str.EnableNetworkResolve
mov dword [rbp - 0x39], 0xf000
mov qword [rbp + 0x1f], rax
lea rcx, [rbp + 0x17]
mov qword [rbp + 0x17], 0x28
call sym.SystemInformer.exe_PhGetIntegerStringRefSetting
test eax, eax
lea r9, [rbp - 0x49]
mov ecx, ebx
lea edx, [rbx + 0x2b]
cmovne ecx, edi
mov r8d, 0x13
mov dword [rbp - 0x3d], ecx
mov rcx, rsi
call qword [sym.imp.USER32.dll_SendMessageW]
lea rax, str.EnableNetworkResolveDoH
mov dword [rbp - 0x39], 0xf000
lea rcx, [rbp + 0x17]
mov qword [rbp + 0x1f], rax
mov qword [rbp + 0x17], 0x2e
call sym.SystemInformer.exe_PhGetIntegerStringRefSetting
test eax, eax
lea r9, [rbp - 0x49]
mov ecx, ebx
lea edx, [rbx + 0x2b]
cmovne ecx, edi
mov r8d, 0x14
mov dword [rbp - 0x3d], ecx
mov rcx, rsi
call qword [sym.imp.USER32.dll_SendMessageW]
lea rax, str.EnableInstantTooltips
mov dword [rbp - 0x39], 0xf000
lea rcx, [rbp + 0x17]
mov qword [rbp + 0x1f], rax
mov qword [rbp + 0x17], 0x2a
call sym.SystemInformer.exe_PhGetIntegerStringRefSetting
test eax, eax
lea r9, [rbp - 0x49]
mov ecx, ebx
lea edx, [rbx + 0x2b]
cmovne ecx, edi
mov r8d, 0x15
mov dword [rbp - 0x3d], ecx
mov rcx, rsi
call qword [sym.imp.USER32.dll_SendMessageW]
lea rax, str.EnableImageCoherencySupport
mov dword [rbp - 0x39], 0xf000
lea rcx, [rbp + 0x17]
mov qword [rbp + 0x1f], rax
mov qword [rbp + 0x17], 0x36
call sym.SystemInformer.exe_PhGetIntegerStringRefSetting
test eax, eax
lea r9, [rbp - 0x49]
mov ecx, ebx
lea edx, [rbx + 0x2b]
cmovne ecx, edi
mov r8d, 0x16
mov dword [rbp - 0x3d], ecx
mov rcx, rsi
call qword [sym.imp.USER32.dll_SendMessageW]
lea rax, str.EnableStage2
mov dword [rbp - 0x39], 0xf000
lea rcx, [rbp + 0x17]
mov qword [rbp + 0x1f], rax
mov qword [rbp + 0x17], 0x18
call sym.SystemInformer.exe_PhGetIntegerStringRefSetting
test eax, eax
lea r9, [rbp - 0x49]
mov ecx, ebx
lea edx, [rbx + 0x2b]
cmovne ecx, edi
mov r8d, 0x17
mov dword [rbp - 0x3d], ecx
mov rcx, rsi
call qword [sym.imp.USER32.dll_SendMessageW]
lea rax, str.EnableServiceStage2
mov dword [rbp - 0x39], 0xf000
lea rcx, [rbp + 0x17]
mov qword [rbp + 0x1f], rax
mov qword [rbp + 0x17], 0x26
call sym.SystemInformer.exe_PhGetIntegerStringRefSetting
test eax, eax
lea r9, [rbp - 0x49]
mov ecx, ebx
cmovne ecx, edi
mov dword [rbp - 0x3d], ecx
lea edx, [rbx + 0x2b]
mov r8d, 0x18
mov rcx, rsi
call qword [sym.imp.USER32.dll_SendMessageW]
lea rax, str.IconSingleClick
mov dword [rbp - 0x39], 0xf000
lea rcx, [rbp + 0x17]
mov qword [rbp + 0x1f], rax
mov qword [rbp + 0x17], 0x1e
call sym.SystemInformer.exe_PhGetIntegerStringRefSetting
test eax, eax
lea r9, [rbp - 0x49]
mov ecx, ebx
lea edx, [rbx + 0x2b]
cmovne ecx, edi
mov r8d, 0x19
mov dword [rbp - 0x3d], ecx
mov rcx, rsi
call qword [sym.imp.USER32.dll_SendMessageW]
lea rax, str.IconTogglesVisibility
mov dword ds:[rbp - 0x39], 0xf000
lea rcx, [rbp + 0x17]
mov qword [rbp + 0x1f], rax
mov qword [rbp + 0x17], 0x2a
call sym.SystemInformer.exe_PhGetIntegerStringRefSetting
test eax, eax
lea r9, [rbp - 0x49]
mov ecx, ebx
lea edx, [rbx + 0x2b]
cmovne ecx, edi
mov r8d, 0x1a
mov dword [rbp - 0x3d], ecx
mov rcx, rsi
call qword [sym.imp.USER32.dll_SendMessageW]
lea rax, str.PropagateCpuUsage
mov dword [rbp - 0x39], 0xf000
lea rcx, [rbp + 0x17]
mov qword [rbp + 0x1f], rax
mov qword [rbp + 0x17], 0x22
call sym.SystemInformer.exe_PhGetIntegerStringRefSetting
test eax, eax
lea r9, [rbp - 0x49]
mov ecx, ebx
lea edx, [rbx + 0x2b]
cmovne ecx, edi
mov r8d, 0x1b
mov dword [rbp - 0x3d], ecx
mov rcx, rsi
call qword [sym.imp.USER32.dll_SendMessageW]
lea r14, str.EnableAdvancedOptions
mov dword [rbp - 0x39], 0xf000
lea rcx, [rbp + 0x17]
mov qword [rbp + 0x1f], r14
mov qword [rbp + 0x17], 0x2a
call sym.SystemInformer.exe_PhGetIntegerStringRefSetting
test eax, eax
lea r9, [rbp - 0x49]
mov edx, 0x102b
mov r8d, 0x1c
cmovne ebx, edi
mov rcx, rsi
mov dword [rbp - 0x3d], ebx
call qword [sym.imp.USER32.dll_SendMessageW]
cmp byte [0x1402c001f], r15b
je 0x140099c57
lea r9, [rbp - 0x49]
mov dword [rbp - 0x39], 0xf000
mov edx, 0x102b
mov dword [rbp - 0x3d], edi
mov r8d, 3
mov rcx, rsi
call qword [sym.imp.USER32.dll_SendMessageW]
lea rcx, [rbp + 0x17]
mov qword [rbp + 0x17], 0x2a
mov qword [rbp + 0x1f], r14
call sym.SystemInformer.exe_PhGetIntegerStringRefSetting
test eax, eax
je 0x140099cb5
lea rcx, [0x1402b8148]
call fcn.1400975e0
lea rcx, [0x1402b8138]
mov rdi, rax
call fcn.1400975e0
mov rbx, rax
test rdi, rdi
je 0x140099cb5
test rax, rax
je 0x140099cb5
cmp qword [rax + 0x38], r15
jne 0x140099cb5
mov rdx, qword [0x1402b8140]
mov r8, rax
mov rcx, qword [rdi + 0x38]
call fcn.140096360
mov qword [rbx + 0x38], rax
mov rcx, qword ds:[rbp + 0x37]
xor rcx, rsp
call fcn.1401dd6a0
lea r11, [rsp + 0xb0]
mov rbx, qword [r11 + 0x28]
mov rsi, qword [r11 + 0x30]
mov rdi, qword [r11 + 0x38]
mov rsp, r11
pop r15
pop r14
pop rbp
ret