Function at 0x451260
Capabilities:
Get graphical window text

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x60
mov eax, dword [0x5ac004]
xor eax, ebp
mov dword [ebp - 4], eax
push esi
push edi
mov esi, ecx
push 0x577
push esi
call dword [sym.imp.USER32.dll_GetDlgItem]
push str.SampleCount
mov edi, eax
call sym.ProcessHacker.exe_PhGetIntegerSetting
push 0xa
lea ecx, [ebp - 0x20]
push ecx
push eax
call fcn.00522341
add esp, 0xc
push 0x500
push esi
call dword [sym.imp.USER32.dll_GetDlgItem]
test eax, eax
je 0x4512c6
lea ecx, ds:[ebp - 0x20]
push ecx
push 0
push 0xc
push eax
call dword [sym.imp.USER32.dll_SendMessageW]
push 0
push str.SampleCountAutomatic
call sym.ProcessHacker.exe_PhGetIntegerSetting
neg eax
sbb eax, eax
neg eax
push eax
push 0xf1
push 0x551
push esi
call dword [sym.imp.USER32.dll_GetDlgItem]
push eax
call dword [sym.imp.USER32.dll_SendMessageW]
push str.SampleCountAutomatic
call sym.ProcessHacker.exe_PhGetIntegerSetting
test eax, eax
je 0x451314
push 0
push 0x500
push esi
call dword [sym.imp.USER32.dll_GetDlgItem]
push eax
call dword [sym.imp.USER32.dll_EnableWindow]
lea eax, [ebp - 0x5c]
mov dword [ebp - 0x5c], 5
push eax
push 0
push 0x104d
push edi
mov dword [ebp - 0x58], 0
mov dword [ebp - 0x54], 0
mov dword [ebp - 0x48], str.Allow_only_one_instance
mov dword [ebp - 0x3c], 0
call dword [sym.imp.USER32.dll_SendMessageW]
lea eax, [ebp - 0x5c]
mov dword [ebp - 0x5c], 5
push eax
push 0
push 0x104d
push edi
mov dword [ebp - 0x58], 1
mov dword [ebp - 0x54], 0
mov dword [ebp - 0x48], str.Hide_when_closed
mov dword [ebp - 0x3c], 0
call dword [sym.imp.USER32.dll_SendMessageW]
lea eax, [ebp - 0x5c]
mov dword [ebp - 0x5c], 5
push eax
push 0
push 0x104d
push edi
mov dword [ebp - 0x58], 2
mov dword [ebp - 0x54], 0
mov dword [ebp - 0x48], str.Hide_when_minimized
mov dword [ebp - 0x3c], 0
call dword [sym.imp.USER32.dll_SendMessageW]
lea eax, [ebp - 0x5c]
mov dword [ebp - 0x5c], 5
push eax
push 0
push 0x104d
push edi
mov dword [ebp - 0x58], 3
mov dword [ebp - 0x54], 0
mov dword [ebp - 0x48], str.Start_when_I_log_on
mov dword [ebp - 0x3c], 0
call dword [sym.imp.USER32.dll_SendMessageW]
lea eax, [ebp - 0x5c]
mov dword [ebp - 0x5c], 5
push eax
push 0
push 0x104d
push edi
mov dword [ebp - 0x58], 4
mov dword [ebp - 0x54], 0
mov dword [ebp - 0x48], str.Start_hidden
mov dword [ebp - 0x3c], 0
call dword [sym.imp.USER32.dll_SendMessageW]
lea eax, [ebp - 0x5c]
mov dword [ebp - 0x5c], 5
push eax
push 0
push 0x104d
push edi
mov dword [ebp - 0x58], 5
mov dword [ebp - 0x54], 0
mov dword [ebp - 0x48], str.Enable_tray_information_window
mov dword [ebp - 0x3c], 0
call dword [sym.imp.USER32.dll_SendMessageW]
lea eax, [ebp - 0x5c]
mov dword [ebp - 0x5c], 5
push eax
push 0
push 0x104d
push edi
mov dword [ebp - 0x58], 6
mov dword [ebp - 0x54], 0
mov dword [ebp - 0x48], str.Enable_kernel_mode_driver
mov dword [ebp - 0x3c], 0
call dword [sym.imp.USER32.dll_SendMessageW]
mov dword [ebp - 0x5c], 5
mov dword [ebp - 0x58], 7
mov dword [ebp - 0x54], 0
mov dword [ebp - 0x48], str.Enable_warnings
lea eax, [ebp - 0x5c]
mov dword [ebp - 0x3c], 0
push eax
push 0
push 0x104d
push edi
call dword [sym.imp.USER32.dll_SendMessageW]
lea eax, [ebp - 0x5c]
mov dword [ebp - 0x5c], 5
push eax
push 0
push 0x104d
push edi
mov dword [ebp - 0x58], 8
mov dword [ebp - 0x54], 0
mov dword [ebp - 0x48], str.Enable_plugins
mov dword [ebp - 0x3c], 0
call dword [sym.imp.USER32.dll_SendMessageW]
lea eax, [ebp - 0x5c]
mov dword [ebp - 0x5c], 5
push eax
push 0
push 0x104d
push edi
mov dword [ebp - 0x58], 9
mov dword [ebp - 0x54], 0
mov dword [ebp - 0x48], str.Enable_undecorated_symbols
mov dword [ebp - 0x3c], 0
call dword [sym.imp.USER32.dll_SendMessageW]
lea eax, [ebp - 0x5c]
mov dword [ebp - 0x5c], 5
push eax
push 0
push 0x104d
push edi
mov dword [ebp - 0x58], 0xa
mov dword [ebp - 0x54], 0
mov dword [ebp - 0x48], str.Enable_cycle_based_CPU_usage
mov dword [ebp - 0x3c], 0
call dword [sym.imp.USER32.dll_SendMessageW]
lea eax, [ebp - 0x5c]
mov dword [ebp - 0x5c], 5
push eax
push 0
push 0x104d
push edi
mov dword [ebp - 0x58], 0xb
mov dword [ebp - 0x54], 0
mov dword [ebp - 0x48], str.Enable_theme_support__experimental_
mov dword [ebp - 0x3c], 0
call dword [sym.imp.USER32.dll_SendMessageW]
lea eax, ds:[ebp - 0x5c]
mov dword [ebp - 0x5c], 5
push eax
push 0
push 0x104d
push edi
mov dword [ebp - 0x58], 0xc
mov dword [ebp - 0x54], 0
mov dword [ebp - 0x48], str.Enable_start_as_admin__experimental_
mov dword [ebp - 0x3c], 0
call dword [sym.imp.USER32.dll_SendMessageW]
lea eax, [ebp - 0x5c]
mov dword [ebp - 0x5c], 5
push eax
push 0
push 0x104d
push edi
mov dword [ebp - 0x58], 0xd
mov dword [ebp - 0x54], 0
mov dword [ebp - 0x48], str.Resolve_network_addresses
mov dword [ebp - 0x3c], 0
call dword [sym.imp.USER32.dll_SendMessageW]
lea eax, [ebp - 0x5c]
mov dword [ebp - 0x5c], 5
push eax
mov dword [ebp - 0x58], 0xe
mov dword [ebp - 0x54], 0
mov dword [ebp - 0x48], str.Resolve_DNS_over_HTTPS__DoH_
mov dword [ebp - 0x3c], 0
push 0
push 0x104d
push edi
call dword [sym.imp.USER32.dll_SendMessageW]
lea eax, ds:[ebp - 0x5c]
mov dword [ebp - 0x5c], 5
push eax
push 0
push 0x104d
push edi
mov dword [ebp - 0x58], 0xf
mov dword [ebp - 0x54], 0
mov dword [ebp - 0x48], str.Show_tooltips_instantly
mov dword [ebp - 0x3c], 0
call dword [sym.imp.USER32.dll_SendMessageW]
lea eax, [ebp - 0x5c]
mov dword [ebp - 0x5c], 5
push eax
push 0
push 0x104d
push edi
mov dword [ebp - 0x58], 0x10
mov dword [ebp - 0x54], 0
mov dword [ebp - 0x48], str.Check_images_for_digital_signatures
mov dword [ebp - 0x3c], 0
call dword [sym.imp.USER32.dll_SendMessageW]
lea eax, [ebp - 0x5c]
mov dword [ebp - 0x5c], 5
push eax
push 0
push 0x104d
push edi
mov dword [ebp - 0x58], 0x11
mov dword [ebp - 0x54], 0
mov dword [ebp - 0x48], str.Check_services_for_digital_signatures
mov dword [ebp - 0x3c], 0
call dword [sym.imp.USER32.dll_SendMessageW]
lea eax, ds:[ebp - 0x5c]
mov dword [ebp - 0x5c], 5
push eax
push 0
push 0x104d
push edi
mov dword [ebp - 0x58], 0x12
mov dword [ebp - 0x54], 0
mov dword [ebp - 0x48], str.Single_click_tray_icons
mov dword [ebp - 0x3c], 0
call dword [sym.imp.USER32.dll_SendMessageW]
lea eax, [ebp - 0x5c]
mov dword [ebp - 0x5c], 5
push eax
push 0
push 0x104d
push edi
mov dword [ebp - 0x58], 0x13
mov dword [ebp - 0x54], 0
mov dword [ebp - 0x48], str.Icon_click_toggles_visibility
mov dword [ebp - 0x3c], 0
call dword [sym.imp.USER32.dll_SendMessageW]
lea eax, [ebp - 0x5c]
mov dword [ebp - 0x5c], 5
push eax
push 0
push 0x104d
push edi
mov dword [ebp - 0x58], 0x14
mov dword [ebp - 0x54], 0
mov dword [ebp - 0x48], str.Include_usage_of_collapsed_processes
mov dword [ebp - 0x3c], 0
call dword [sym.imp.USER32.dll_SendMessageW]
lea eax, ds:[ebp - 0x5c]
mov dword [ebp - 0x5c], 5
push eax
push 0
push 0x104d
push edi
mov dword [ebp - 0x58], 0x15
mov dword [ebp - 0x54], 0
mov dword [ebp - 0x48], str.Show_advanced_options__experimental_
mov dword [ebp - 0x3c], 0
call dword [sym.imp.USER32.dll_SendMessageW]
mov dword [ebp - 0x4c], 0xf000
push str.AllowOnlyOneInstance
call sym.ProcessHacker.exe_PhGetIntegerSetting
neg eax
sbb eax, eax
and eax, 0x1000
add eax, 0x1000
mov dword [ebp - 0x50], eax
lea eax, [ebp - 0x5c]
push eax
push 0
push 0x102b
push edi
call dword [sym.imp.USER32.dll_SendMessageW]
push str.HideOnClose
mov dword [ebp - 0x4c], 0xf000
call sym.ProcessHacker.exe_PhGetIntegerSetting
neg eax
sbb eax, eax
and eax, 0x1000
add eax, 0x1000
mov dword [ebp - 0x50], eax
lea eax, [ebp - 0x5c]
push eax
push 1
push 0x102b
push edi
call dword [sym.imp.USER32.dll_SendMessageW]
push str.HideOnMinimize
mov dword [ebp - 0x4c], 0xf000
call sym.ProcessHacker.exe_PhGetIntegerSetting
neg eax
sbb eax, eax
and eax, 0x1000
add eax, 0x1000
mov dword [ebp - 0x50], eax
lea eax, [ebp - 0x5c]
push eax
push 2
push 0x102b
push edi
call dword [sym.imp.USER32.dll_SendMessageW]
push str.StartHidden
mov dword [ebp - 0x4c], 0xf000
call sym.ProcessHacker.exe_PhGetIntegerSetting
neg eax
sbb eax, eax
and eax, 0x1000
add eax, 0x1000
mov dword [ebp - 0x50], eax
lea eax, [ebp - 0x5c]
push eax
push 4
push 0x102b
push edi
call dword [sym.imp.USER32.dll_SendMessageW]
push str.MiniInfoWindowEnabled
mov dword [ebp - 0x4c], 0xf000
call sym.ProcessHacker.exe_PhGetIntegerSetting
neg eax
sbb eax, eax
and eax, 0x1000
add eax, 0x1000
mov dword [ebp - 0x50], eax
lea eax, [ebp - 0x5c]
push eax
push 5
push 0x102b
push edi
call dword [sym.imp.USER32.dll_SendMessageW]
push str.EnableKph
mov dword [ebp - 0x4c], 0xf000
call sym.ProcessHacker.exe_PhGetIntegerSetting
neg eax
sbb eax, eax
and eax, 0x1000
add eax, 0x1000
mov dword [ebp - 0x50], eax
lea eax, [ebp - 0x5c]
push eax
push 6
push 0x102b
push edi
call dword [sym.imp.USER32.dll_SendMessageW]
push str.EnableWarnings
mov dword [ebp - 0x4c], 0xf000
call sym.ProcessHacker.exe_PhGetIntegerSetting
neg eax
sbb eax, eax
and eax, 0x1000
add eax, 0x1000
mov dword [ebp - 0x50], eax
lea eax, [ebp - 0x5c]
push eax
push 7
push 0x102b
push edi
call dword [sym.imp.USER32.dll_SendMessageW]
push str.EnablePlugins
mov dword [ebp - 0x4c], 0xf000
call sym.ProcessHacker.exe_PhGetIntegerSetting
neg eax
sbb eax, eax
and eax, 0x1000
add eax, 0x1000
mov dword [ebp - 0x50], eax
lea eax, [ebp - 0x5c]
push eax
push 8
push 0x102b
push edi
call dword [sym.imp.USER32.dll_SendMessageW]
push str.DbgHelpUndecorate
mov dword [ebp - 0x4c], 0xf000
call sym.ProcessHacker.exe_PhGetIntegerSetting
neg eax
sbb eax, eax
and eax, 0x1000
add eax, 0x1000
mov dword [ebp - 0x50], eax
lea eax, [ebp - 0x5c]
push eax
push 9
push 0x102b
push edi
call dword [sym.imp.USER32.dll_SendMessageW]
push str.EnableCycleCpuUsage
mov dword [ebp - 0x4c], 0xf000
call sym.ProcessHacker.exe_PhGetIntegerSetting
neg eax
sbb eax, eax
and eax, 0x1000
add eax, 0x1000
mov dword [ebp - 0x50], eax
lea eax, [ebp - 0x5c]
push eax
push 0xa
push 0x102b
push edi
call dword [sym.imp.USER32.dll_SendMessageW]
push str.EnableThemeSupport
mov dword [ebp - 0x4c], 0xf000
call sym.ProcessHacker.exe_PhGetIntegerSetting
neg eax
sbb eax, eax
and eax, 0x1000
add eax, 0x1000
mov dword [ebp - 0x50], eax
lea eax, [ebp - 0x5c]
push eax
push 0xb
push 0x102b
push edi
call dword [sym.imp.USER32.dll_SendMessageW]
push str.EnableStartAsAdmin
mov dword [ebp - 0x4c], 0xf000
call sym.ProcessHacker.exe_PhGetIntegerSetting
neg eax
sbb eax, eax
and eax, 0x1000
add eax, 0x1000
mov dword [ebp - 0x50], eax
lea eax, [ebp - 0x5c]
push eax
push 0xc
push 0x102b
push edi
call dword [sym.imp.USER32.dll_SendMessageW]
push str.EnableNetworkResolve
mov dword [ebp - 0x4c], 0xf000
call sym.ProcessHacker.exe_PhGetIntegerSetting
neg eax
sbb eax, eax
and eax, 0x1000
add eax, 0x1000
mov dword [ebp - 0x50], eax
lea eax, [ebp - 0x5c]
push eax
push 0xd
push 0x102b
push edi
call dword [sym.imp.USER32.dll_SendMessageW]
push str.EnableNetworkResolveDoH
mov dword [ebp - 0x4c], 0xf000
call sym.ProcessHacker.exe_PhGetIntegerSetting
neg eax
sbb eax, eax
and eax, 0x1000
add eax, 0x1000
mov dword [ebp - 0x50], eax
lea eax, [ebp - 0x5c]
push eax
push 0xe
push 0x102b
push edi
call dword [sym.imp.USER32.dll_SendMessageW]
push str.EnableInstantTooltips
mov dword [ebp - 0x4c], 0xf000
call sym.ProcessHacker.exe_PhGetIntegerSetting
neg eax
sbb eax, eax
and eax, 0x1000
add eax, 0x1000
mov dword [ebp - 0x50], eax
lea eax, [ebp - 0x5c]
push eax
push 0xf
push 0x102b
push edi
call dword [sym.imp.USER32.dll_SendMessageW]
push str.EnableStage2
mov dword [ebp - 0x4c], 0xf000
call sym.ProcessHacker.exe_PhGetIntegerSetting
neg eax
sbb eax, eax
and eax, 0x1000
add eax, 0x1000
mov dword [ebp - 0x50], eax
lea eax, [ebp - 0x5c]
push eax
push 0x10
push 0x102b
push edi
call dword [sym.imp.USER32.dll_SendMessageW]
push str.EnableServiceStage2
mov dword [ebp - 0x4c], 0xf000
call sym.ProcessHacker.exe_PhGetIntegerSetting
neg eax
sbb eax, eax
and eax, 0x1000
add eax, 0x1000
mov dword [ebp - 0x50], eax
lea eax, [ebp - 0x5c]
push eax
push 0x11
push 0x102b
push edi
call dword [sym.imp.USER32.dll_SendMessageW]
push str.IconSingleClick
mov dword [ebp - 0x4c], 0xf000
call sym.ProcessHacker.exe_PhGetIntegerSetting
neg eax
sbb eax, eax
and eax, 0x1000
add eax, 0x1000
mov dword [ebp - 0x50], eax
lea eax, [ebp - 0x5c]
push eax
push 0x12
push 0x102b
push edi
call dword [sym.imp.USER32.dll_SendMessageW]
push str.IconTogglesVisibility
mov dword [ebp - 0x4c], 0xf000
call sym.ProcessHacker.exe_PhGetIntegerSetting
neg eax
sbb eax, eax
and eax, 0x1000
add eax, 0x1000
mov dword [ebp - 0x50], eax
lea eax, [ebp - 0x5c]
push eax
push 0x13
push 0x102b
push edi
call dword [sym.imp.USER32.dll_SendMessageW]
push str.PropagateCpuUsage
mov dword [ebp - 0x4c], 0xf000
call sym.ProcessHacker.exe_PhGetIntegerSetting
neg eax
sbb eax, eax
and eax, 0x1000
add eax, 0x1000
mov dword [ebp - 0x50], eax
lea eax, [ebp - 0x5c]
push eax
push 0x14
push 0x102b
push edi
call dword [sym.imp.USER32.dll_SendMessageW]
push str.EnableAdvancedOptions
mov dword [ebp - 0x4c], 0xf000
call sym.ProcessHacker.exe_PhGetIntegerSetting
neg eax
sbb eax, eax
and eax, 0x1000
add eax, 0x1000
mov dword [ebp - 0x50], eax
lea eax, [ebp - 0x5c]
push eax
push 0x15
push 0x102b
push edi
call dword [sym.imp.USER32.dll_SendMessageW]
cmp byte [0x5b2694], 0
je 0x451c2f
lea eax, [ebp - 0x5c]
mov dword [ebp - 0x4c], 0xf000
push eax
push 3
push 0x102b
push edi
mov dword [ebp - 0x50], 0x2000
call dword [sym.imp.USER32.dll_SendMessageW]
push str.EnableAdvancedOptions
call sym.ProcessHacker.exe_PhGetIntegerSetting
test eax, eax
je 0x451c6f
push 0x5aeab8
call fcn.00450a00
push 0x5aeab0
mov edi, eax
call fcn.00450a00
mov esi, eax
test edi, edi
je 0x451c6f
test esi, esi
je 0x451c6f
mov edx, dword [0x5aeab4]
mov ecx, dword [edi + 0x1c]
push esi
call fcn.0044ff00
mov dword [esi + 0x1c], eax
mov ecx, dword [ebp - 4]
pop edi
xor ecx, ebp
pop esi
call fcn.0051e068
mov esp, ebp
pop ebp
ret