Function at 0x456860
Capabilities:
Get graphical window text

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x60
mov eax, dword [0x5c7004]
xor eax, ebp
mov dword [ebp - 4], eax
push esi
push edi
mov edi, ecx
push 0x577
push edi
call dword [sym.imp.USER32.dll_GetDlgItem]
push str.SampleCount
mov esi, eax
call sym.ProcessHacker.exe_PhGetIntegerSetting
push 0xa
lea ecx, [ebp - 0x20]
push ecx
push eax
call fcn.005388ed
add esp, 0xc
push 0x500
push edi
call dword [sym.imp.USER32.dll_GetDlgItem]
test eax, eax
je 0x4568c6
lea ecx, ds:[ebp - 0x20]
push ecx
push 0
push 0xc
push eax
call dword [sym.imp.USER32.dll_SendMessageW]
push 0
push str.SampleCountAutomatic
call sym.ProcessHacker.exe_PhGetIntegerSetting
neg eax
sbb eax, eax
neg eax
push eax
push 0xf1
push 0x551
push edi
call dword [sym.imp.USER32.dll_GetDlgItem]
push eax
call dword [sym.imp.USER32.dll_SendMessageW]
push str.SampleCountAutomatic
call sym.ProcessHacker.exe_PhGetIntegerSetting
test eax, eax
je 0x456914
push 0
push 0x500
push edi
call dword [sym.imp.USER32.dll_GetDlgItem]
push eax
call dword [sym.imp.USER32.dll_EnableWindow]
lea eax, [ebp - 0x5c]
mov dword [ebp - 0x5c], 5
push eax
push 0
push 0x104d
push esi
mov dword [ebp - 0x58], 0
mov dword [ebp - 0x54], 0
mov dword [ebp - 0x48], str.Allow_only_one_instance
mov dword [ebp - 0x3c], 0
call dword [sym.imp.USER32.dll_SendMessageW]
lea eax, [ebp - 0x5c]
mov dword [ebp - 0x5c], 5
push eax
push 0
push 0x104d
push esi
mov dword [ebp - 0x58], 1
mov dword [ebp - 0x54], 0
mov dword [ebp - 0x48], str.Hide_when_closed
mov dword [ebp - 0x3c], 0
call dword [sym.imp.USER32.dll_SendMessageW]
lea eax, [ebp - 0x5c]
mov dword [ebp - 0x5c], 5
push eax
push 0
push 0x104d
push esi
mov dword [ebp - 0x58], 2
mov dword [ebp - 0x54], 0
mov dword [ebp - 0x48], str.Hide_when_minimized
mov dword [ebp - 0x3c], 0
call dword [sym.imp.USER32.dll_SendMessageW]
lea eax, [ebp - 0x5c]
mov dword [ebp - 0x5c], 5
push eax
push 0
push 0x104d
push esi
mov dword [ebp - 0x58], 3
mov dword [ebp - 0x54], 0
mov dword [ebp - 0x48], str.Start_when_I_log_on
mov dword [ebp - 0x3c], 0
call dword [sym.imp.USER32.dll_SendMessageW]
lea eax, [ebp - 0x5c]
mov dword [ebp - 0x5c], 5
push eax
push 0
push 0x104d
push esi
mov dword [ebp - 0x58], 4
mov dword [ebp - 0x54], 0
mov dword [ebp - 0x48], str.Start_hidden
mov dword [ebp - 0x3c], 0
call dword [sym.imp.USER32.dll_SendMessageW]
lea eax, [ebp - 0x5c]
mov dword [ebp - 0x5c], 5
push eax
push 0
push 0x104d
push esi
mov dword [ebp - 0x58], 5
mov dword [ebp - 0x54], 0
mov dword [ebp - 0x48], str.Enable_warnings
mov dword [ebp - 0x3c], 0
call dword [sym.imp.USER32.dll_SendMessageW]
lea eax, [ebp - 0x5c]
mov dword [ebp - 0x5c], 5
push eax
push 0
push 0x104d
push esi
mov dword [ebp - 0x58], 6
mov dword [ebp - 0x54], 0
mov dword [ebp - 0x48], str.Enable_kernel_mode_driver
mov dword [ebp - 0x3c], 0
call dword [sym.imp.USER32.dll_SendMessageW]
mov dword [ebp - 0x5c], 5
mov dword [ebp - 0x58], 7
mov dword [ebp - 0x54], 0
mov dword [ebp - 0x48], str.Enable_mitigation_policy
lea eax, [ebp - 0x5c]
mov dword [ebp - 0x3c], 0
push eax
push 0
push 0x104d
push esi
call dword [sym.imp.USER32.dll_SendMessageW]
lea eax, [ebp - 0x5c]
mov dword [ebp - 0x5c], 5
push eax
push 0
push 0x104d
push esi
mov dword [ebp - 0x58], 8
mov dword [ebp - 0x54], 0
mov dword [ebp - 0x48], str.Enable_plugins
mov dword [ebp - 0x3c], 0
call dword [sym.imp.USER32.dll_SendMessageW]
lea eax, [ebp - 0x5c]
mov dword [ebp - 0x5c], 5
push eax
push 0
push 0x104d
push esi
mov dword [ebp - 0x58], 9
mov dword [ebp - 0x54], 0
mov dword [ebp - 0x48], str.Enable_undecorated_symbols
mov dword [ebp - 0x3c], 0
call dword [sym.imp.USER32.dll_SendMessageW]
lea eax, [ebp - 0x5c]
mov dword [ebp - 0x5c], 5
push eax
push 0
push 0x104d
push esi
mov dword [ebp - 0x58], 0xa
mov dword [ebp - 0x54], 0
mov dword [ebp - 0x48], str.Enable_cycle_based_CPU_usage
mov dword [ebp - 0x3c], 0
call dword [sym.imp.USER32.dll_SendMessageW]
lea eax, [ebp - 0x5c]
mov dword [ebp - 0x5c], 5
push eax
push 0
push 0x104d
push esi
mov dword [ebp - 0x58], 0xb
mov dword [ebp - 0x54], 0
mov dword [ebp - 0x48], str.Enable_tray_information_window
mov dword [ebp - 0x3c], 0
call dword [sym.imp.USER32.dll_SendMessageW]
lea eax, ds:[ebp - 0x5c]
mov dword [ebp - 0x5c], 5
push eax
push 0
push 0x104d
push esi
mov dword [ebp - 0x58], 0xc
mov dword [ebp - 0x54], 0
mov dword [ebp - 0x48], str.Remember_last_selected_window
mov dword [ebp - 0x3c], 0
call dword [sym.imp.USER32.dll_SendMessageW]
lea eax, [ebp - 0x5c]
mov dword [ebp - 0x5c], 5
push eax
push 0
push 0x104d
push esi
mov dword [ebp - 0x58], 0xd
mov dword [ebp - 0x54], 0
mov dword [ebp - 0x48], str.Enable_theme_support__experimental_
mov dword [ebp - 0x3c], 0
call dword [sym.imp.USER32.dll_SendMessageW]
lea eax, [ebp - 0x5c]
mov dword [ebp - 0x5c], 5
push eax
mov dword [ebp - 0x58], 0xe
mov dword [ebp - 0x54], 0
mov dword [ebp - 0x48], str.Enable_start_as_admin__experimental_
mov dword [ebp - 0x3c], 0
push 0
push 0x104d
push esi
call dword [sym.imp.USER32.dll_SendMessageW]
lea eax, ds:[ebp - 0x5c]
mov dword [ebp - 0x5c], 5
push eax
push 0
push 0x104d
push esi
mov dword [ebp - 0x58], 0xf
mov dword [ebp - 0x54], 0
mov dword [ebp - 0x48], str.Resolve_network_addresses
mov dword [ebp - 0x3c], 0
call dword [sym.imp.USER32.dll_SendMessageW]
lea eax, [ebp - 0x5c]
mov dword [ebp - 0x5c], 5
push eax
push 0
push 0x104d
push esi
mov dword [ebp - 0x58], 0x10
mov dword [ebp - 0x54], 0
mov dword [ebp - 0x48], str.Resolve_DNS_over_HTTPS__DoH_
mov dword [ebp - 0x3c], 0
call dword [sym.imp.USER32.dll_SendMessageW]
lea eax, [ebp - 0x5c]
mov dword [ebp - 0x5c], 5
push eax
push 0
push 0x104d
push esi
mov dword [ebp - 0x58], 0x11
mov dword [ebp - 0x54], 0
mov dword [ebp - 0x48], str.Show_tooltips_instantly
mov dword [ebp - 0x3c], 0
call dword [sym.imp.USER32.dll_SendMessageW]
lea eax, ds:[ebp - 0x5c]
mov dword [ebp - 0x5c], 5
push eax
push 0
push 0x104d
push esi
mov dword [ebp - 0x58], 0x12
mov dword [ebp - 0x54], 0
mov dword [ebp - 0x48], str.Check_images_for_digital_signatures
mov dword [ebp - 0x3c], 0
call dword [sym.imp.USER32.dll_SendMessageW]
lea eax, [ebp - 0x5c]
mov dword [ebp - 0x5c], 5
push eax
push 0
push 0x104d
push esi
mov dword [ebp - 0x58], 0x13
mov dword [ebp - 0x54], 0
mov dword [ebp - 0x48], str.Check_services_for_digital_signatures
mov dword [ebp - 0x3c], 0
call dword [sym.imp.USER32.dll_SendMessageW]
lea eax, [ebp - 0x5c]
mov dword [ebp - 0x5c], 5
push eax
push 0
push 0x104d
push esi
mov dword [ebp - 0x58], 0x14
mov dword [ebp - 0x54], 0
mov dword [ebp - 0x48], str.Single_click_tray_icons
mov dword [ebp - 0x3c], 0
call dword [sym.imp.USER32.dll_SendMessageW]
lea eax, ds:[ebp - 0x5c]
mov dword [ebp - 0x5c], 5
push eax
push 0
push 0x104d
push esi
mov dword [ebp - 0x58], 0x15
mov dword [ebp - 0x54], 0
mov dword [ebp - 0x48], str.Icon_click_toggles_visibility
mov dword [ebp - 0x3c], 0
call dword [sym.imp.USER32.dll_SendMessageW]
mov dword [ebp - 0x5c], 5
lea eax, [ebp - 0x5c]
mov dword [ebp - 0x58], 0x16
push eax
push 0
push 0x104d
push esi
mov dword [ebp - 0x54], 0
mov dword [ebp - 0x48], str.Include_usage_of_collapsed_processes
mov dword [ebp - 0x3c], 0
call dword [sym.imp.USER32.dll_SendMessageW]
lea eax, [ebp - 0x5c]
mov dword [ebp - 0x5c], 5
push eax
push 0
push 0x104d
push esi
mov dword [ebp - 0x58], 0x17
mov dword [ebp - 0x54], 0
mov dword [ebp - 0x48], str.Show_advanced_options
mov dword [ebp - 0x3c], 0
call dword [sym.imp.USER32.dll_SendMessageW]
push str.AllowOnlyOneInstance
mov dword ds:[ebp - 0x4c], 0xf000
call sym.ProcessHacker.exe_PhGetIntegerSetting
neg eax
sbb eax, eax
and eax, 0x1000
add eax, 0x1000
mov dword [ebp - 0x50], eax
lea eax, [ebp - 0x5c]
push eax
push 0
push 0x102b
push esi
call dword [sym.imp.USER32.dll_SendMessageW]
push str.HideOnClose
mov dword [ebp - 0x4c], 0xf000
call sym.ProcessHacker.exe_PhGetIntegerSetting
neg eax
sbb eax, eax
and eax, 0x1000
add eax, 0x1000
mov dword [ebp - 0x50], eax
lea eax, [ebp - 0x5c]
push eax
push 1
push 0x102b
push esi
call dword [sym.imp.USER32.dll_SendMessageW]
push str.HideOnMinimize
mov dword [ebp - 0x4c], 0xf000
call sym.ProcessHacker.exe_PhGetIntegerSetting
neg eax
sbb eax, eax
and eax, 0x1000
add eax, 0x1000
mov dword [ebp - 0x50], eax
lea eax, [ebp - 0x5c]
push eax
push 2
push 0x102b
push esi
call dword [sym.imp.USER32.dll_SendMessageW]
push str.StartHidden
mov dword ds:[ebp - 0x4c], 0xf000
call sym.ProcessHacker.exe_PhGetIntegerSetting
neg eax
sbb eax, eax
and eax, 0x1000
add eax, 0x1000
mov dword [ebp - 0x50], eax
lea eax, [ebp - 0x5c]
push eax
push 4
push 0x102b
push esi
call dword [sym.imp.USER32.dll_SendMessageW]
push str.MiniInfoWindowEnabled
mov dword [ebp - 0x4c], 0xf000
call sym.ProcessHacker.exe_PhGetIntegerSetting
neg eax
sbb eax, eax
and eax, 0x1000
add eax, 0x1000
mov dword [ebp - 0x50], eax
lea eax, [ebp - 0x5c]
push eax
push 0xb
push 0x102b
push esi
call dword [sym.imp.USER32.dll_SendMessageW]
push str.MainWindowTabRestoreEnabled
mov dword [ebp - 0x4c], 0xf000
call sym.ProcessHacker.exe_PhGetIntegerSetting
neg eax
sbb eax, eax
and eax, 0x1000
add eax, 0x1000
mov dword [ebp - 0x50], eax
lea eax, [ebp - 0x5c]
push eax
push 0xc
push 0x102b
push esi
call dword [sym.imp.USER32.dll_SendMessageW]
push str.EnableKph
mov dword ds:[ebp - 0x4c], 0xf000
call sym.ProcessHacker.exe_PhGetIntegerSetting
neg eax
sbb eax, eax
and eax, 0x1000
add eax, 0x1000
mov dword [ebp - 0x50], eax
lea eax, [ebp - 0x5c]
push eax
push 6
push 0x102b
push esi
call dword [sym.imp.USER32.dll_SendMessageW]
push str.EnableWarnings
mov dword [ebp - 0x4c], 0xf000
call sym.ProcessHacker.exe_PhGetIntegerSetting
neg eax
sbb eax, eax
and eax, 0x1000
add eax, 0x1000
mov dword [ebp - 0x50], eax
lea eax, [ebp - 0x5c]
push eax
push 5
push 0x102b
push esi
call dword [sym.imp.USER32.dll_SendMessageW]
push str.EnablePlugins
mov dword [ebp - 0x4c], 0xf000
call sym.ProcessHacker.exe_PhGetIntegerSetting
neg eax
sbb eax, eax
and eax, 0x1000
add eax, 0x1000
mov dword [ebp - 0x50], eax
lea eax, [ebp - 0x5c]
push eax
push 8
push 0x102b
push esi
call dword [sym.imp.USER32.dll_SendMessageW]
push str.DbgHelpUndecorate
mov dword ds:[ebp - 0x4c], 0xf000
call sym.ProcessHacker.exe_PhGetIntegerSetting
neg eax
sbb eax, eax
and eax, 0x1000
add eax, 0x1000
mov dword [ebp - 0x50], eax
lea eax, [ebp - 0x5c]
push eax
push 9
push 0x102b
push esi
call dword [sym.imp.USER32.dll_SendMessageW]
mov dword [ebp - 0x4c], 0xf000
push str.EnableCycleCpuUsage
call sym.ProcessHacker.exe_PhGetIntegerSetting
neg eax
sbb eax, eax
and eax, 0x1000
add eax, 0x1000
mov dword [ebp - 0x50], eax
lea eax, [ebp - 0x5c]
push eax
push 0xa
push 0x102b
push esi
call dword [sym.imp.USER32.dll_SendMessageW]
push str.EnableThemeSupport
mov dword [ebp - 0x4c], 0xf000
call sym.ProcessHacker.exe_PhGetIntegerSetting
neg eax
sbb eax, eax
and eax, 0x1000
add eax, 0x1000
mov dword [ebp - 0x50], eax
lea eax, [ebp - 0x5c]
push eax
push 0xd
push 0x102b
push esi
call dword [sym.imp.USER32.dll_SendMessageW]
push str.EnableStartAsAdmin
mov dword ds:[ebp - 0x4c], 0xf000
call sym.ProcessHacker.exe_PhGetIntegerSetting
neg eax
sbb eax, eax
and eax, 0x1000
add eax, 0x1000
mov dword [ebp - 0x50], eax
lea eax, [ebp - 0x5c]
push eax
push 0xe
push 0x102b
push esi
call dword [sym.imp.USER32.dll_SendMessageW]
push str.EnableNetworkResolve
mov dword [ebp - 0x4c], 0xf000
call sym.ProcessHacker.exe_PhGetIntegerSetting
neg eax
sbb eax, eax
and eax, 0x1000
add eax, 0x1000
mov dword [ebp - 0x50], eax
lea eax, [ebp - 0x5c]
push eax
push 0xf
push 0x102b
push esi
call dword [sym.imp.USER32.dll_SendMessageW]
push str.EnableNetworkResolveDoH
mov dword [ebp - 0x4c], 0xf000
call sym.ProcessHacker.exe_PhGetIntegerSetting
neg eax
sbb eax, eax
and eax, 0x1000
add eax, 0x1000
mov dword [ebp - 0x50], eax
lea eax, [ebp - 0x5c]
push eax
push 0x10
push 0x102b
push esi
call dword [sym.imp.USER32.dll_SendMessageW]
push str.EnableInstantTooltips
mov dword ds:[ebp - 0x4c], 0xf000
call sym.ProcessHacker.exe_PhGetIntegerSetting
neg eax
sbb eax, eax
and eax, 0x1000
add eax, 0x1000
mov dword [ebp - 0x50], eax
lea eax, [ebp - 0x5c]
push eax
push 0x11
push 0x102b
push esi
call dword [sym.imp.USER32.dll_SendMessageW]
push str.EnableStage2
mov dword [ebp - 0x4c], 0xf000
call sym.ProcessHacker.exe_PhGetIntegerSetting
neg eax
sbb eax, eax
and eax, 0x1000
add eax, 0x1000
mov dword [ebp - 0x50], eax
lea eax, [ebp - 0x5c]
push eax
push 0x12
push 0x102b
push esi
call dword [sym.imp.USER32.dll_SendMessageW]
push str.EnableServiceStage2
mov dword [ebp - 0x4c], 0xf000
call sym.ProcessHacker.exe_PhGetIntegerSetting
neg eax
sbb eax, eax
and eax, 0x1000
add eax, 0x1000
mov dword [ebp - 0x50], eax
lea eax, [ebp - 0x5c]
push eax
push 0x13
push 0x102b
push esi
call dword [sym.imp.USER32.dll_SendMessageW]
push str.IconSingleClick
mov dword ds:[ebp - 0x4c], 0xf000
call sym.ProcessHacker.exe_PhGetIntegerSetting
neg eax
sbb eax, eax
and eax, 0x1000
add eax, 0x1000
mov dword [ebp - 0x50], eax
lea eax, [ebp - 0x5c]
push eax
push 0x14
push 0x102b
push esi
call dword [sym.imp.USER32.dll_SendMessageW]
push str.IconTogglesVisibility
mov dword [ebp - 0x4c], 0xf000
call sym.ProcessHacker.exe_PhGetIntegerSetting
neg eax
sbb eax, eax
and eax, 0x1000
add eax, 0x1000
mov dword [ebp - 0x50], eax
lea eax, [ebp - 0x5c]
push eax
push 0x15
push 0x102b
push esi
call dword [sym.imp.USER32.dll_SendMessageW]
push str.PropagateCpuUsage
mov dword [ebp - 0x4c], 0xf000
call sym.ProcessHacker.exe_PhGetIntegerSetting
neg eax
sbb eax, eax
and eax, 0x1000
add eax, 0x1000
mov dword [ebp - 0x50], eax
lea eax, [ebp - 0x5c]
push eax
push 0x16
push 0x102b
push esi
call dword [sym.imp.USER32.dll_SendMessageW]
push str.EnableAdvancedOptions
mov dword ds:[ebp - 0x4c], 0xf000
call sym.ProcessHacker.exe_PhGetIntegerSetting
neg eax
sbb eax, eax
and eax, 0x1000
add eax, 0x1000
mov dword [ebp - 0x50], eax
lea eax, [ebp - 0x5c]
push eax
push 0x17
push 0x102b
push esi
call dword [sym.imp.USER32.dll_SendMessageW]
cmp byte [0x5cde50], 0
je 0x4572d1
lea eax, [ebp - 0x5c]
mov dword [ebp - 0x4c], 0xf000
push eax
push 3
push 0x102b
push esi
mov dword [ebp - 0x50], 0x2000
call dword [sym.imp.USER32.dll_SendMessageW]
call fcn.00456220
test al, al
je 0x4572fa
lea eax, [ebp - 0x5c]
mov dword [ebp - 0x4c], 0xf000
push eax
push 7
push 0x102b
push esi
mov dword [ebp - 0x50], 0x2000
call dword [sym.imp.USER32.dll_SendMessageW]
push str.EnableAdvancedOptions
nop
call sym.ProcessHacker.exe_PhGetIntegerSetting
test eax, eax
je 0x45733b
push 0x5c9f38
call fcn.00455a60
push 0x5c9f30
mov edi, eax
call fcn.00455a60
mov esi, eax
test edi, edi
je 0x45733b
test esi, esi
je 0x45733b
mov edx, dword [0x5c9f34]
mov ecx, dword [edi + 0x1c]
push esi
call fcn.00455040
mov dword [esi + 0x1c], eax
mov ecx, dword [ebp - 4]
pop edi
xor ecx, ebp
pop esi
call fcn.00534c91
mov esp, ebp
pop ebp
ret