Function at 0x1400c93e0
Capabilities:
Get graphical window text

Disassembly:
mov qword [rsp + 8], rcx
push rdi
sub rsp, 0x100
mov edx, 0x577
mov rcx, qword [rsp + 0x110]
call qword [sym.imp.USER32.dll_GetDlgItem]
mov qword [rsp + 0x20], rax
mov edx, 0x500
mov rcx, qword [rsp + 0x110]
call sym.ProcessHacker.exe_PhGetDialogItemValue
mov dword [rsp + 0x28], eax
lea rcx, str.SampleCountAutomatic
call sym.ProcessHacker.exe_PhGetIntegerSetting
test eax, eax
je 0x1400c9435
mov dword [rsp + 0x48], 1
jmp 0x1400c943d
mov dword [rsp + 0x48], 0
movzx eax, byte [rsp + 0x48]
mov byte [rsp + 0x2c], al
mov edx, 0x551
mov rcx, qword [rsp + 0x110]
call qword [sym.imp.USER32.dll_GetDlgItem]
xor r9d, r9d
xor r8d, r8d
mov edx, 0xf0
mov rcx, rax
call qword [sym.imp.USER32.dll_SendMessageW]
cmp eax, 1
jne 0x1400c947c
mov dword [rsp + 0x4c], 1
jmp 0x1400c9484
mov dword [rsp + 0x4c], 0
movzx eax, byte [rsp + 0x4c]
mov byte [rsp + 0x2d], al
movzx eax, byte [rsp + 0x2d]
movzx ecx, byte [rsp + 0x2c]
cmp eax, ecx
je 0x1400c94a2
mov byte [0x1405e0878], 1
movzx eax, byte [rsp + 0x2d]
mov edx, eax
lea rcx, str.SampleCountAutomatic
call sym.ProcessHacker.exe_PhSetIntegerSetting
cmp dword [rsp + 0x28], 0
jne 0x1400c94c4
mov dword [rsp + 0x28], 1
lea rcx, str.SampleCount
call sym.ProcessHacker.exe_PhGetIntegerSetting
cmp dword [rsp + 0x28], eax
je 0x1400c94dd
mov byte [0x1405e0878], 1
mov edx, dword [rsp + 0x28]
lea rcx, str.SampleCount
call sym.ProcessHacker.exe_PhSetIntegerSetting
mov edx, 0x477
mov rcx, qword [rsp + 0x110]
call qword [sym.imp.USER32.dll_GetDlgItem]
mov rcx, rax
call sym.ProcessHacker.exe_PhGetWindowText
mov rcx, rax
call sym.ProcessHacker.exe_PhAutoDereferenceObject
mov rdx, rax
lea rcx, str.SearchEngine
call sym.ProcessHacker.exe_PhSetStringSetting2
mov edx, 0x47f
mov rcx, qword [rsp + 0x110]
call qword [sym.imp.USER32.dll_GetDlgItem]
mov rcx, rax
call sym.ProcessHacker.exe_PhGetWindowText
mov rcx, rax
call sym.ProcessHacker.exe_PhAutoDereferenceObject
mov rdx, rax
lea rcx, str.ProgramInspectExecutables
call sym.ProcessHacker.exe_PhSetStringSetting2
mov edx, 0x478
mov rcx, qword [rsp + 0x110]
call qword [sym.imp.USER32.dll_GetDlgItem]
xor r9d, r9d
xor r8d, r8d
mov edx, 0x147
mov rcx, rax
call qword [sym.imp.USER32.dll_SendMessageW]
mov dword [0x1405d5f54], eax
mov edx, dword [0x1405d5f54]
lea rcx, str.MaxSizeUnit
call sym.ProcessHacker.exe_PhSetIntegerSetting
mov edx, 0x4e0
mov rcx, qword [rsp + 0x110]
call sym.ProcessHacker.exe_PhGetDialogItemValue
mov edx, eax
lea rcx, str.IconProcesses
call sym.ProcessHacker.exe_PhSetIntegerSetting
lea rcx, str.DbgHelpSearchPath
call sym.ProcessHacker.exe_PhGetStringSetting
mov rcx, rax
call sym.ProcessHacker.exe_PhAutoDereferenceObject
mov qword [rsp + 0x50], rax
mov edx, 0x4c2
mov rcx, qword [rsp + 0x110]
call qword [sym.imp.USER32.dll_GetDlgItem]
mov rcx, rax
call sym.ProcessHacker.exe_PhGetWindowText
mov rcx, rax
call sym.ProcessHacker.exe_PhAutoDereferenceObject
mov r8b, 1
mov rcx, qword [rsp + 0x50]
mov rdx, rcx
mov rcx, rax
call fcn.140010bf0
movzx eax, al
test eax, eax
jne 0x1400c963f
mov edx, 0x4c2
mov rcx, qword [rsp + 0x110]
call qword [sym.imp.USER32.dll_GetDlgItem]
mov rcx, rax
call sym.ProcessHacker.exe_PhGetWindowText
mov rcx, rax
call sym.ProcessHacker.exe_PhAutoDereferenceObject
mov rdx, rax
lea rcx, str.DbgHelpSearchPath
call sym.ProcessHacker.exe_PhSetStringSetting2
mov byte [0x1405e0878], 1
mov r9d, 0xf000
xor r8d, r8d
mov edx, 0x102c
mov rcx, qword [rsp + 0x20]
call qword [sym.imp.USER32.dll_SendMessageW]
shr eax, 0xc
dec eax
cmp eax, 1
jne 0x1400c966c
mov dword [rsp + 0x58], 1
jmp 0x1400c9674
mov dword [rsp + 0x58], 0
mov edx, dword [rsp + 0x58]
lea rcx, str.AllowOnlyOneInstance
call sym.ProcessHacker.exe_PhSetIntegerSetting
mov r9d, 0xf000
mov r8d, 1
mov edx, 0x102c
mov rcx, qword [rsp + 0x20]
call qword [sym.imp.USER32.dll_SendMessageW]
shr eax, 0xc
dec eax
cmp eax, 1
jne 0x1400c96b4
mov dword [rsp + 0x5c], 1
jmp 0x1400c96bc
mov dword [rsp + 0x5c], 0
mov edx, dword [rsp + 0x5c]
lea rcx, str.HideOnClose
call sym.ProcessHacker.exe_PhSetIntegerSetting
mov r9d, 0xf000
mov r8d, 2
mov edx, 0x102c
mov rcx, qword [rsp + 0x20]
call qword [sym.imp.USER32.dll_SendMessageW]
shr eax, 0xc
dec eax
cmp eax, 1
jne 0x1400c96fc
mov dword [rsp + 0x60], 1
jmp 0x1400c9704
mov dword [rsp + 0x60], 0
mov edx, dword [rsp + 0x60]
lea rcx, str.HideOnMinimize
call sym.ProcessHacker.exe_PhSetIntegerSetting
mov r9d, 0xf000
mov r8d, 4
mov edx, 0x102c
mov rcx, qword [rsp + 0x20]
call qword [sym.imp.USER32.dll_SendMessageW]
shr eax, 0xc
dec eax
cmp eax, 1
jne 0x1400c9744
mov dword [rsp + 0x64], 1
jmp 0x1400c974c
mov dword [rsp + 0x64], 0
mov edx, dword [rsp + 0x64]
lea rcx, str.StartHidden
call sym.ProcessHacker.exe_PhSetIntegerSetting
lea rcx, str.MiniInfoWindowEnabled
call sym.ProcessHacker.exe_PhGetIntegerSetting
test eax, eax
je 0x1400c9776
mov dword [rsp + 0x68], 1
jmp 0x1400c977e
mov dword [rsp + 0x68], 0
movzx eax, byte [rsp + 0x68]
mov byte [rsp + 0x2e], al
mov r9d, 0xf000
mov r8d, 0xd
mov edx, 0x102c
mov rcx, qword [rsp + 0x20]
call qword [sym.imp.USER32.dll_SendMessageW]
shr eax, 0xc
dec eax
cmp eax, 1
jne 0x1400c97b7
mov dword [rsp + 0x6c], 1
jmp 0x1400c97bf
mov dword [rsp + 0x6c], 0
movzx eax, byte [rsp + 0x6c]
mov byte [rsp + 0x2f], al
movzx eax, byte [rsp + 0x2f]
movzx ecx, byte [rsp + 0x2e]
cmp eax, ecx
je 0x1400c97dd
mov byte [0x1405e0878], 1
movzx eax, byte [rsp + 0x2f]
mov edx, eax
lea rcx, str.MiniInfoWindowEnabled
call sym.ProcessHacker.exe_PhSetIntegerSetting
mov r9d, 0xf000
mov r8d, 0xe
mov edx, 0x102c
mov rcx, qword [rsp + 0x20]
call qword [sym.imp.USER32.dll_SendMessageW]
shr eax, 0xc
dec eax
cmp eax, 1
jne 0x1400c9820
mov dword [rsp + 0x70], 1
jmp 0x1400c9828
mov dword [rsp + 0x70], 0
mov edx, dword [rsp + 0x70]
lea rcx, str.MainWindowTabRestoreEnabled
call sym.ProcessHacker.exe_PhSetIntegerSetting
lea rcx, str.EnableKph
call sym.ProcessHacker.exe_PhGetIntegerSetting
test eax, eax
je 0x1400c9852
mov dword [rsp + 0x74], 1
jmp 0x1400c985a
mov dword [rsp + 0x74], 0
movzx eax, byte [rsp + 0x74]
mov byte [rsp + 0x30], al
mov r9d, 0xf000
mov r8d, 6
mov edx, 0x102c
mov rcx, qword [rsp + 0x20]
call qword [sym.imp.USER32.dll_SendMessageW]
shr eax, 0xc
dec eax
cmp eax, 1
jne 0x1400c9893
mov dword [rsp + 0x78], 1
jmp 0x1400c989b
mov dword [rsp + 0x78], 0
movzx eax, byte [rsp + 0x78]
mov byte [rsp + 0x31], al
movzx eax, byte [rsp + 0x31]
movzx ecx, byte [rsp + 0x30]
cmp eax, ecx
je 0x1400c98b9
mov byte [0x1405e0878], 1
movzx eax, byte [rsp + 0x31]
mov edx, eax
lea rcx, str.EnableKph
call sym.ProcessHacker.exe_PhSetIntegerSetting
mov r9d, 0xf000
mov r8d, 5
mov edx, 0x102c
mov rcx, qword [rsp + 0x20]
call qword [sym.imp.USER32.dll_SendMessageW]
shr eax, 0xc
dec eax
cmp eax, 1
jne 0x1400c98fc
mov dword [rsp + 0x7c], 1
jmp 0x1400c9904
mov dword [rsp + 0x7c], 0
mov edx, dword [rsp + 0x7c]
lea rcx, str.EnableWarnings
call sym.ProcessHacker.exe_PhSetIntegerSetting
lea rcx, str.EnablePlugins
call sym.ProcessHacker.exe_PhGetIntegerSetting
test eax, eax
je 0x1400c9931
mov dword [rsp + 0x80], 1
jmp 0x1400c993c
mov dword [rsp + 0x80], 0
movzx eax, byte [rsp + 0x80]
mov byte [rsp + 0x32], al
mov r9d, 0xf000
mov r8d, 8
mov edx, 0x102c
mov rcx, qword [rsp + 0x20]
call qword [sym.imp.USER32.dll_SendMessageW]
shr eax, 0xc
dec eax
cmp eax, 1
jne 0x1400c997b
mov dword [rsp + 0x84], 1
jmp 0x1400c9986
mov dword [rsp + 0x84], 0
movzx eax, byte [rsp + 0x84]
mov byte [rsp + 0x33], al
movzx eax, byte [rsp + 0x33]
movzx ecx, byte [rsp + 0x32]
cmp eax, ecx
je 0x1400c99a7
mov byte [0x1405e0878], 1
movzx eax, byte [rsp + 0x33]
mov edx, eax
lea rcx, str.EnablePlugins
call sym.ProcessHacker.exe_PhSetIntegerSetting
mov r9d, 0xf000
mov r8d, 9
mov edx, 0x102c
mov rcx, qword [rsp + 0x20]
call qword [sym.imp.USER32.dll_SendMessageW]
shr eax, 0xc
dec eax
cmp eax, 1
jne 0x1400c99ed
mov dword [rsp + 0x88], 1
jmp 0x1400c99f8
mov dword [rsp + 0x88], 0
mov edx, dword [rsp + 0x88]
lea rcx, str.DbgHelpUndecorate
call sym.ProcessHacker.exe_PhSetIntegerSetting
lea rcx, str.TreeListEnableHeaderTotals
call sym.ProcessHacker.exe_PhGetIntegerSetting
test eax, eax
je 0x1400c9a28
mov dword [rsp + 0x8c], 1
jmp 0x1400c9a33
mov dword [rsp + 0x8c], 0
movzx eax, byte [rsp + 0x8c]
mov byte [rsp + 0x34], al
mov r9d, 0xf000
mov r8d, 0xa
mov edx, 0x102c
mov rcx, qword [rsp + 0x20]
call qword [sym.imp.USER32.dll_SendMessageW]
shr eax, 0xc
dec eax
cmp eax, 1
jne 0x1400c9a72
mov dword [rsp + 0x90], 1
jmp 0x1400c9a7d
mov dword [rsp + 0x90], 0
movzx eax, byte [rsp + 0x90]
mov byte [rsp + 0x35], al
movzx eax, byte [rsp + 0x35]
movzx ecx, byte [rsp + 0x34]
cmp eax, ecx
je 0x1400c9a9e
mov byte [0x1405e0878], 1
movzx eax, byte [rsp + 0x35]
mov edx, eax
lea rcx, str.TreeListEnableHeaderTotals
call sym.ProcessHacker.exe_PhSetIntegerSetting
lea rcx, str.EnableScaleCpuGraph
call sym.ProcessHacker.exe_PhGetIntegerSetting
test eax, eax
je 0x1400c9ace
mov dword [rsp + 0x94], 1
jmp 0x1400c9ad9
mov dword [rsp + 0x94], 0
movzx eax, byte [rsp + 0x94]
mov byte [rsp + 0x36], al
mov r9d, 0xf000
mov r8d, 0xc
mov edx, 0x102c
mov rcx, qword [rsp + 0x20]
call qword [sym.imp.USER32.dll_SendMessageW]
shr eax, 0xc
dec eax
cmp eax, 1
jne 0x1400c9b18
mov dword [rsp + 0x98], 1
jmp 0x1400c9b23
mov dword [rsp + 0x98], 0
movzx eax, byte [rsp + 0x98]
mov byte [rsp + 0x37], al
movzx eax, byte [rsp + 0x37]
movzx ecx, byte [rsp + 0x36]
cmp eax, ecx
je 0x1400c9b44
mov byte [0x1405e0878], 1
movzx eax, byte [rsp + 0x37]
mov edx, eax
lea rcx, str.EnableScaleCpuGraph
call sym.ProcessHacker.exe_PhSetIntegerSetting
lea rcx, str.EnableCycleCpuUsage
call sym.ProcessHacker.exe_PhGetIntegerSetting
test eax, eax
je 0x1400c9b74
mov dword [rsp + 0x9c], 1
jmp 0x1400c9b7f
mov dword [rsp + 0x9c], 0
movzx eax, byte [rsp + 0x9c]
mov byte [rsp + 0x38], al
mov r9d, 0xf000
mov r8d, 0xb
mov edx, 0x102c
mov rcx, qword [rsp + 0x20]
call qword [sym.imp.USER32.dll_SendMessageW]
shr eax, 0xc
dec eax
cmp eax, 1
jne 0x1400c9bbe
mov dword [rsp + 0xa0], 1
jmp 0x1400c9bc9
mov dword [rsp + 0xa0], 0
movzx eax, byte [rsp + 0xa0]
mov byte [rsp + 0x39], al
movzx eax, byte [rsp + 0x39]
movzx ecx, byte [rsp + 0x38]
cmp eax, ecx
je 0x1400c9bea
mov byte [0x1405e0878], 1
movzx eax, byte [rsp + 0x39]
mov edx, eax
lea rcx, str.EnableCycleCpuUsage
call sym.ProcessHacker.exe_PhSetIntegerSetting
lea rcx, str.EnableThemeSupport
call sym.ProcessHacker.exe_PhGetIntegerSetting
test eax, eax
je 0x1400c9c1a
mov dword [rsp + 0xa4], 1
jmp 0x1400c9c25
mov dword [rsp + 0xa4], 0
movzx eax, byte [rsp + 0xa4]
mov byte [rsp + 0x3a], al
mov r9d, 0xf000
mov r8d, 0xf
mov edx, 0x102c
mov rcx, qword [rsp + 0x20]
call qword [sym.imp.USER32.dll_SendMessageW]
shr eax, 0xc
dec eax
cmp eax, 1
jne 0x1400c9c64
mov dword [rsp + 0xa8], 1
jmp 0x1400c9c6f
mov dword [rsp + 0xa8], 0
movzx eax, byte [rsp + 0xa8]
mov byte [rsp + 0x3b], al
movzx eax, byte [rsp + 0x3b]
movzx ecx, byte [rsp + 0x3a]
cmp eax, ecx
je 0x1400c9c90
mov byte [0x1405e0878], 1
movzx eax, byte [rsp + 0x3b]
mov edx, eax
lea rcx, str.EnableThemeSupport
call sym.ProcessHacker.exe_PhSetIntegerSetting
mov r9d, 0xf000
mov r8d, 0x10
mov edx, 0x102c
mov rcx, qword [rsp + 0x20]
call qword [sym.imp.USER32.dll_SendMessageW]
shr eax, 0xc
dec eax
cmp eax, 1
jne 0x1400c9cd6
mov dword [rsp + 0xac], 1
jmp 0x1400c9ce1
mov dword [rsp + 0xac], 0
mov edx, dword [rsp + 0xac]
lea rcx, str.EnableStartAsAdmin
call sym.ProcessHacker.exe_PhSetIntegerSetting
mov r9d, 0xf000
mov r8d, 0x11
mov edx, 0x102c
mov rcx, qword [rsp + 0x20]
call qword [sym.imp.USER32.dll_SendMessageW]
shr eax, 0xc
dec eax
cmp eax, 1
jne 0x1400c9d27
mov dword [rsp + 0xb0], 1
jmp 0x1400c9d32
mov dword [rsp + 0xb0], 0
mov edx, dword [rsp + 0xb0]
lea rcx, str.EnableSilentCrashNotify
call sym.ProcessHacker.exe_PhSetIntegerSetting
lea rcx, str.EnableNetworkResolve
call sym.ProcessHacker.exe_PhGetIntegerSetting
test eax, eax
je 0x1400c9d62
mov dword [rsp + 0xb4], 1
jmp 0x1400c9d6d
mov dword [rsp + 0xb4], 0
movzx eax, byte [rsp + 0xb4]
mov byte [rsp + 0x3c], al
mov r9d, 0xf000
mov r8d, 0x12
mov edx, 0x102c
mov rcx, qword [rsp + 0x20]
call qword [sym.imp.USER32.dll_SendMessageW]
shr eax, 0xc
dec eax
cmp eax, 1
jne 0x1400c9dac
mov dword [rsp + 0xb8], 1
jmp 0x1400c9db7
mov dword [rsp + 0xb8], 0
movzx eax, byte [rsp + 0xb8]
mov byte [rsp + 0x3d], al
movzx eax, byte [rsp + 0x3d]
movzx ecx, byte [rsp + 0x3c]
cmp eax, ecx
je 0x1400c9dd8
mov byte [0x1405e0878], 1
movzx eax, byte [rsp + 0x3d]
mov edx, eax
lea rcx, str.EnableNetworkResolve
call sym.ProcessHacker.exe_PhSetIntegerSetting
lea rcx, str.EnableNetworkResolveDoH
call sym.ProcessHacker.exe_PhGetIntegerSetting
test eax, eax
je 0x1400c9e08
mov dword [rsp + 0xbc], 1
jmp 0x1400c9e13
mov dword [rsp + 0xbc], 0
movzx eax, byte [rsp + 0xbc]
mov byte [rsp + 0x3e], al
mov r9d, 0xf000
mov r8d, 0x13
mov edx, 0x102c
mov rcx, qword [rsp + 0x20]
call qword [sym.imp.USER32.dll_SendMessageW]
shr eax, 0xc
dec eax
cmp eax, 1
jne 0x1400c9e52
mov dword [rsp + 0xc0], 1
jmp 0x1400c9e5d
mov dword [rsp + 0xc0], 0
movzx eax, byte [rsp + 0xc0]
mov byte [rsp + 0x3f], al
movzx eax, byte [rsp + 0x3f]
movzx ecx, byte [rsp + 0x3e]
cmp eax, ecx
je 0x1400c9e7e
mov byte [0x1405e0878], 1
movzx eax, byte [rsp + 0x3f]
mov edx, eax
lea rcx, str.EnableNetworkResolveDoH
call sym.ProcessHacker.exe_PhSetIntegerSetting
mov r9d, 0xf000
mov r8d, 0x14
mov edx, 0x102c
mov rcx, qword [rsp + 0x20]
call qword [sym.imp.USER32.dll_SendMessageW]
shr eax, 0xc
dec eax
cmp eax, 1
jne 0x1400c9ec4
mov dword [rsp + 0xc4], 1
jmp 0x1400c9ecf
mov dword [rsp + 0xc4], 0
mov edx, dword [rsp + 0xc4]
lea rcx, str.EnableInstantTooltips
call sym.ProcessHacker.exe_PhSetIntegerSetting
lea rcx, str.EnableImageCoherencySupport
call sym.ProcessHacker.exe_PhGetIntegerSetting
test eax, eax
je 0x1400c9eff
mov dword [rsp + 0xc8], 1
jmp 0x1400c9f0a
mov dword [rsp + 0xc8], 0
movzx eax, byte [rsp + 0xc8]
mov byte [rsp + 0x40], al
mov r9d, 0xf000
mov r8d, 0x15
mov edx, 0x102c
mov rcx, qword [rsp + 0x20]
call qword [sym.imp.USER32.dll_SendMessageW]
shr eax, 0xc
dec eax
cmp eax, 1
jne 0x1400c9f49
mov dword [rsp + 0xcc], 1
jmp 0x1400c9f54
mov dword [rsp + 0xcc], 0
movzx eax, byte [rsp + 0xcc]
mov byte [rsp + 0x41], al
movzx eax, byte [rsp + 0x41]
movzx ecx, byte [rsp + 0x40]
cmp eax, ecx
je 0x1400c9f75
mov byte [0x1405e0878], 1
movzx eax, byte [rsp + 0x41]
mov edx, eax
lea rcx, str.EnableImageCoherencySupport
call sym.ProcessHacker.exe_PhSetIntegerSetting
lea rcx, str.EnableStage2
call sym.ProcessHacker.exe_PhGetIntegerSetting
test eax, eax
je 0x1400c9fa5
mov dword [rsp + 0xd0], 1
jmp 0x1400c9fb0
mov dword [rsp + 0xd0], 0
movzx eax, byte [rsp + 0xd0]
mov byte [rsp + 0x42], al
mov r9d, 0xf000
mov r8d, 0x16
mov edx, 0x102c
mov rcx, qword [rsp + 0x20]
call qword [sym.imp.USER32.dll_SendMessageW]
shr eax, 0xc
dec eax
cmp eax, 1
jne 0x1400c9fef
mov dword [rsp + 0xd4], 1
jmp 0x1400c9ffa
mov dword [rsp + 0xd4], 0
movzx eax, byte [rsp + 0xd4]
mov byte [rsp + 0x43], al
movzx eax, byte [rsp + 0x43]
movzx ecx, byte [rsp + 0x42]
cmp eax, ecx
je 0x1400ca01b
mov byte [0x1405e0878], 1
movzx eax, byte [rsp + 0x43]
mov edx, eax
lea rcx, str.EnableStage2
call sym.ProcessHacker.exe_PhSetIntegerSetting
lea rcx, str.EnableServiceStage2
call sym.ProcessHacker.exe_PhGetIntegerSetting
test eax, eax
je 0x1400ca04b
mov dword [rsp + 0xd8], 1
jmp 0x1400ca056
mov dword [rsp + 0xd8], 0
movzx eax, byte [rsp + 0xd8]
mov byte [rsp + 0x44], al
mov r9d, 0xf000
mov r8d, 0x17
mov edx, 0x102c
mov rcx, qword [rsp + 0x20]
call qword [sym.imp.USER32.dll_SendMessageW]
shr eax, 0xc
dec eax
cmp eax, 1
jne 0x1400ca095
mov dword [rsp + 0xdc], 1
jmp 0x1400ca0a0
mov dword [rsp + 0xdc], 0
movzx eax, byte [rsp + 0xdc]
mov byte [rsp + 0x45], al
movzx eax, byte [rsp + 0x45]
movzx ecx, byte [rsp + 0x44]
cmp eax, ecx
je 0x1400ca0c1
mov byte [0x1405e0878], 1
movzx eax, byte [rsp + 0x45]
mov edx, eax
lea rcx, str.EnableServiceStage2
call sym.ProcessHacker.exe_PhSetIntegerSetting
mov r9d, 0xf000
mov r8d, 0x18
mov edx, 0x102c
mov rcx, qword [rsp + 0x20]
call qword [sym.imp.USER32.dll_SendMessageW]
shr eax, 0xc
dec eax
cmp eax, 1
jne 0x1400ca107
mov dword [rsp + 0xe0], 1
jmp 0x1400ca112
mov dword [rsp + 0xe0], 0
mov edx, dword [rsp + 0xe0]
lea rcx, str.IconSingleClick
call sym.ProcessHacker.exe_PhSetIntegerSetting
mov r9d, 0xf000
mov r8d, 0x19
mov edx, 0x102c
mov rcx, qword [rsp + 0x20]
call qword [sym.imp.USER32.dll_SendMessageW]
shr eax, 0xc
dec eax
cmp eax, 1
jne 0x1400ca158
mov dword [rsp + 0xe4], 1
jmp 0x1400ca163
mov dword [rsp + 0xe4], 0
mov edx, dword [rsp + 0xe4]
lea rcx, str.IconTogglesVisibility
call sym.ProcessHacker.exe_PhSetIntegerSetting
mov r9d, 0xf000
mov r8d, 0x1a
mov edx, 0x102c
mov rcx, qword [rsp + 0x20]
call qword [sym.imp.USER32.dll_SendMessageW]
shr eax, 0xc
dec eax
cmp eax, 1
jne 0x1400ca1a9
mov dword [rsp + 0xe8], 1
jmp 0x1400ca1b4
mov dword [rsp + 0xe8], 0
mov edx, dword [rsp + 0xe8]
lea rcx, str.PropagateCpuUsage
call sym.ProcessHacker.exe_PhSetIntegerSetting
mov r9d, 0xf000
mov r8d, 0x1b
mov edx, 0x102c
mov rcx, qword [rsp + 0x20]
call qword [sym.imp.USER32.dll_SendMessageW]
shr eax, 0xc
dec eax
cmp eax, 1
jne 0x1400ca1fa
mov dword [rsp + 0xec], 1
jmp 0x1400ca205
mov dword [rsp + 0xec], 0
mov edx, dword [rsp + 0xec]
lea rcx, str.EnableAdvancedOptions
call sym.ProcessHacker.exe_PhSetIntegerSetting
lea rcx, str.EnableThemeSupport
call sym.ProcessHacker.exe_PhGetIntegerSetting
test eax, eax
je 0x1400ca239
mov edx, 1
lea rcx, str.GraphColorMode
call sym.ProcessHacker.exe_PhSetIntegerSetting
mov r9d, 0xf000
mov r8d, 4
mov edx, 0x102c
mov rcx, qword [rsp + 0x20]
call qword [sym.imp.USER32.dll_SendMessageW]
shr eax, 0xc
dec eax
cmp eax, 1
jne 0x1400ca26c
mov dword [rsp + 0xf0], 1
jmp 0x1400ca277
mov dword [rsp + 0xf0], 0
mov r9d, 0xf000
mov r8d, 3
mov edx, 0x102c
mov rcx, qword [rsp + 0x20]
call qword [sym.imp.USER32.dll_SendMessageW]
shr eax, 0xc
dec eax
cmp eax, 1
jne 0x1400ca2aa
mov dword [rsp + 0xf4], 1
jmp 0x1400ca2b5
mov dword [rsp + 0xf4], 0
movzx edx, byte [rsp + 0xf0]
movzx ecx, byte [rsp + 0xf4]
call fcn.1400c73e0
lea r8, [0x1400c9300]
xor edx, edx
mov ecx, 0x10
call sym.ProcessHacker.exe_PhPluginInvokeWindowCallback
add rsp, 0x100
pop rdi
ret