Function at 0x140039600
Capabilities:
Query or enumerate registry value
Set registry value

Disassembly:
mov dword [rsp + 0x10], edx
push rbp
push rbx
push rsi
push rdi
push r12
push r13
push r14
push r15
lea rbp, [rsp - 0x1f]
sub rsp, 0x88
movaps xmmword [rsp + 0x70], xmm6
mov r15d, edx
mov rdi, rcx
cmp byte [0x14017ab05], 0
jne 0x14003963d
lea rcx, [0x14017ac80]
call qword [sym.imp.KERNEL32.dll_InitializeCriticalSection]
lea rcx, [0x14017ac80]
call qword [sym.imp.KERNEL32.dll_EnterCriticalSection]
xor r12d, r12d
mov r14d, r12d
lea rbx, [0x140173e30]
mov rsi, qword [rbx]
test rsi, rsi
je 0x14003968c
mov rsi, qword [rsi]
test rsi, rsi
je 0x140039679
mov rcx, qword [rsi]
call qword [sym.imp.gdiplus.dll_GdipDeletePen]
mov rcx, rsi
call qword [sym.imp.gdiplus.dll_GdipFree]
mov rax, qword [rbx]
mov qword [rax], r12
inc r14d
add rbx, 8
cmp r14d, 6
jb 0x140039657
cmp qword [rdi + 0x378], r12
jne 0x1400396e1
mov edx, 0x1424
mov rcx, qword [rdi + 0xd68]
call qword [sym.imp.USER32.dll_LoadBitmapW]
mov qword [rdi + 0x378], rax
xorps xmm0, xmm0
movups xmmword [rbp - 0x19], xmm0
movups xmmword [rbp - 9], xmm0
lea r8, [rbp - 0x19]
mov edx, 0x20
mov rcx, rax
call qword [sym.imp.GDI32.dll_GetObjectW]
test eax, eax
je 0x1400396e1
mov eax, dword [rbp - 0x15]
mov dword [rdi + 0x388], eax
mov eax, dword [rbp - 0x11]
mov dword [rdi + 0x38c], eax
cmp qword [rdi + 0x380], r12
jne 0x140039703
mov edx, 0x1423
mov rcx, qword [rdi + 0xd68]
call qword [sym.imp.USER32.dll_LoadBitmapW]
mov qword [rdi + 0x380], rax
mov ecx, InitCommonControls
call qword [sym.imp.gdiplus.dll_GdipAlloc]
mov rbx, rax
mov qword [rbp + 0x67], rax
test rax, rax
je 0x14003973c
mov qword [rax], r12
mov r9, rax
xor r8d, r8d
movss xmm1, dword [0x140153368]
mov ecx, dword [0x14017466c]
call qword [sym.imp.gdiplus.dll_GdipCreatePen1]
mov dword [rbx + 8], eax
jmp 0x14003973f
mov rbx, r12
mov qword [0x14017ab08], rbx
mov rcx, qword [rdi + 0x468]
test rcx, rcx
je 0x14003975f
call qword [sym.imp.GDI32.dll_DeleteObject]
mov qword [rdi + 0x468], r12
mov rcx, qword [0x14017ac50]
test rcx, rcx
je 0x14003977b
mov rcx, qword [rcx]
call qword [sym.imp.GDI32.dll_DeleteObject]
mov qword [0x14017ac50], r12
mov rcx, qword [0x14017ac28]
test rcx, rcx
je 0x140039797
mov rcx, qword [rcx]
call qword [sym.imp.GDI32.dll_DeleteObject]
mov qword [0x14017ac28], r12
mov rcx, qword [rdi + 0x410]
test rcx, rcx
je 0x1400397b0
call qword [sym.imp.GDI32.dll_DeleteObject]
mov qword [rdi + 0x410], r12
lea rax, [0x14017abe0]
mov qword [0x14017ac50], rax
lea rax, [0x14017ac20]
mov qword [0x14017ac28], rax
xor r8d, r8d
lea rdx, str.Explorer
mov rcx, qword [rdi + 0x800]
call qword [sym.imp.UxTheme.dll_SetWindowTheme]
xor r8d, r8d
lea rdx, str.Explorer
mov rcx, qword [rdi + 0x7b0]
call qword [sym.imp.UxTheme.dll_SetWindowTheme]
xor r8d, r8d
lea rdx, str.Explorer
mov rcx, qword [rdi + 0x810]
call qword [sym.imp.UxTheme.dll_SetWindowTheme]
xor r8d, r8d
lea rdx, str.Explorer
mov rcx, qword [rdi + 0x780]
call qword [sym.imp.UxTheme.dll_SetWindowTheme]
xor r8d, r8d
lea rdx, str.Explorer
mov rcx, qword [rdi + 0x840]
call qword [sym.imp.UxTheme.dll_SetWindowTheme]
xor r8d, r8d
lea rdx, str.Explorer
mov rcx, qword [rdi + 0x788]
call qword [sym.imp.UxTheme.dll_SetWindowTheme]
xor r8d, r8d
lea rdx, str.Explorer
mov rcx, qword [rdi + 0x760]
call qword [sym.imp.UxTheme.dll_SetWindowTheme]
xor r9d, r9d
xor r8d, r8d
mov edx, 0x101f
mov rcx, qword [rdi + 0x740]
call qword [sym.imp.USER32.dll_SendMessageW]
mov rcx, rax
xor r8d, r8d
lea rdx, str.ItemsView
call qword [sym.imp.UxTheme.dll_SetWindowTheme]
xor r8d, r8d
lea rdx, str.ItemsView
mov rcx, qword [rdi + 0x740]
call qword [sym.imp.UxTheme.dll_SetWindowTheme]
xor r9d, r9d
xor r8d, r8d
mov edx, 0x101f
mov rcx, qword [rdi + 0x7a0]
call qword [sym.imp.USER32.dll_SendMessageW]
mov rcx, rax
xor r8d, r8d
lea rdx, str.ItemsView
call qword [sym.imp.UxTheme.dll_SetWindowTheme]
xor r8d, r8d
lea rdx, str.ItemsView
mov rcx, qword [rdi + 0x7a0]
call qword [sym.imp.UxTheme.dll_SetWindowTheme]
xor r9d, r9d
xor r8d, r8d
mov edx, 0x101f
mov rcx, qword [rdi + 0x838]
call qword [sym.imp.USER32.dll_SendMessageW]
mov rcx, rax
xor r8d, r8d
lea rdx, str.ItemsView
call qword [sym.imp.UxTheme.dll_SetWindowTheme]
xor r8d, r8d
lea rdx, str.ItemsView
mov rcx, qword [rdi + 0x838]
call qword [sym.imp.UxTheme.dll_SetWindowTheme]
xor r9d, r9d
xor r8d, r8d
mov edx, 0x101f
mov rcx, qword [rdi + 0x830]
call qword [sym.imp.USER32.dll_SendMessageW]
mov rcx, rax
xor r8d, r8d
lea rdx, str.ItemsView
call qword [sym.imp.UxTheme.dll_SetWindowTheme]
xor r8d, r8d
lea rdx, str.ItemsView
mov rcx, qword [rdi + 0x830]
call qword [sym.imp.UxTheme.dll_SetWindowTheme]
xor r9d, r9d
xor r8d, r8d
mov edx, 0x101f
mov rcx, qword [rdi + 0x748]
call qword [sym.imp.USER32.dll_SendMessageW]
mov rcx, rax
xor r8d, r8d
lea rdx, str.ItemsView
call qword [sym.imp.UxTheme.dll_SetWindowTheme]
xor r8d, r8d
lea rdx, str.ItemsView
mov rcx, qword [rdi + 0x748]
call qword [sym.imp.UxTheme.dll_SetWindowTheme]
xor r9d, r9d
xor r8d, r8d
mov edx, 0x101f
mov rcx, qword [rdi + 0x7f0]
call qword [sym.imp.USER32.dll_SendMessageW]
mov rcx, rax
xor r8d, r8d
lea rdx, str.ItemsView
call qword [sym.imp.UxTheme.dll_SetWindowTheme]
xor r8d, r8d
lea rdx, str.ItemsView
mov rcx, qword [rdi + 0x7f0]
call qword [sym.imp.UxTheme.dll_SetWindowTheme]
mov ecx, r15d
test r15d, r15d
je 0x14003a604
sub ecx, 1
je 0x14003a39e
cmp ecx, 1
jne 0x14003a604
mov rcx, qword [rdi + 0x400]
test rcx, rcx
je 0x140039a30
call qword [sym.imp.GDI32.dll_DeleteObject]
mov qword [rdi + 0x400], r12
mov rcx, rdi
call fcn.14003b430
lea rbx, [rdi + 0x470]
lea rax, [rbp + 0x7f]
mov qword [rsp + 0x20], rax
mov r9d, 1
xor r8d, r8d
lea rdx, str.SoftwareProcessLasso
mov rcx, 0xffffffff80000001
call qword [sym.imp.ADVAPI32.dll_RegOpenKeyExW]
test eax, eax
jne 0x140039aa9
mov dword [rbp + 0x67], 4
mov dword [rbp + 0x77], 4
lea rax, [rbp + 0x67]
mov qword [rsp + 0x28], rax
mov qword [rsp + 0x20], rbx
lea r9, [rbp + 0x77]
xor r8d, r8d
lea rdx, str.color1
mov rcx, qword [rbp + 0x7f]
call qword [sym.imp.ADVAPI32.dll_RegQueryValueExW]
mov rcx, qword [rbp + 0x7f]
call qword [sym.imp.ADVAPI32.dll_RegCloseKey]
jmp 0x140039acf
lea rcx, [rdi + 0xd50]
mov qword [rsp + 0x20], rbx
lea r9, str.color1
lea r8, str.SoftwareProcessLasso
mov rdx, 0xffffffff80000002
call fcn.140088a00
lea r13, [rdi + 0x474]
lea rax, [rbp + 0x7f]
mov qword [rsp + 0x20], rax
mov r9d, 1
xor r8d, r8d
lea rdx, str.SoftwareProcessLasso
mov rcx, 0xffffffff80000001
call qword [sym.imp.ADVAPI32.dll_RegOpenKeyExW]
test eax, eax
jne 0x140039b40
mov dword [rbp + 0x67], 4
mov dword [rbp + 0x77], 4
lea rax, [rbp + 0x67]
mov qword [rsp + 0x28], rax
mov qword [rsp + 0x20], r13
lea r9, [rbp + 0x77]
xor r8d, r8d
lea rdx, str.color2
mov rcx, qword [rbp + 0x7f]
call qword [sym.imp.ADVAPI32.dll_RegQueryValueExW]
mov rcx, qword [rbp + 0x7f]
call qword [sym.imp.ADVAPI32.dll_RegCloseKey]
jmp 0x140039b66
lea rcx, [rdi + 0xd50]
mov qword [rsp + 0x20], r13
lea r9, str.color2
lea r8, str.SoftwareProcessLasso
mov rdx, 0xffffffff80000002
call fcn.140088a00
lea rbx, [rdi + 0x478]
lea rax, [rbp + 0x7f]
mov qword [rsp + 0x20], rax
mov r9d, 1
xor r8d, r8d
lea rdx, str.SoftwareProcessLasso
mov rcx, 0xffffffff80000001
call qword [sym.imp.ADVAPI32.dll_RegOpenKeyExW]
test eax, eax
jne 0x140039bd7
mov dword [rbp + 0x67], 4
mov dword [rbp + 0x77], 4
lea rax, [rbp + 0x67]
mov qword [rsp + 0x28], rax
mov qword [rsp + 0x20], rbx
lea r9, [rbp + 0x77]
xor r8d, r8d
lea rdx, str.color3
mov rcx, qword [rbp + 0x7f]
call qword [sym.imp.ADVAPI32.dll_RegQueryValueExW]
mov rcx, qword [rbp + 0x7f]
call qword [sym.imp.ADVAPI32.dll_RegCloseKey]
jmp 0x140039bfd
lea rcx, [rdi + 0xd50]
mov qword [rsp + 0x20], rbx
lea r9, str.color3
lea r8, str.SoftwareProcessLasso
mov rdx, 0xffffffff80000002
call fcn.140088a00
lea rbx, [rdi + 0x47c]
lea rax, [rbp + 0x7f]
mov qword [rsp + 0x20], rax
mov r9d, 1
xor r8d, r8d
lea rdx, str.SoftwareProcessLasso
mov rcx, 0xffffffff80000001
call qword [sym.imp.ADVAPI32.dll_RegOpenKeyExW]
test eax, eax
jne 0x140039c6e
mov dword [rbp + 0x67], 4
mov dword [rbp + 0x77], 4
lea rax, [rbp + 0x67]
mov qword [rsp + 0x28], rax
mov qword [rsp + 0x20], rbx
lea r9, [rbp + 0x77]
xor r8d, r8d
lea rdx, str.color4
mov rcx, qword [rbp + 0x7f]
call qword [sym.imp.ADVAPI32.dll_RegQueryValueExW]
mov rcx, qword [rbp + 0x7f]
call qword [sym.imp.ADVAPI32.dll_RegCloseKey]
jmp 0x140039c94
lea rcx, [rdi + 0xd50]
mov qword [rsp + 0x20], rbx
lea r9, str.color4
lea r8, str.SoftwareProcessLasso
mov rdx, 0xffffffff80000002
call fcn.140088a00
lea rbx, [rdi + 0x480]
lea rax, [rbp + 0x7f]
mov qword [rsp + 0x20], rax
mov r9d, 1
xor r8d, r8d
lea rdx, str.SoftwareProcessLasso
mov rcx, 0xffffffff80000001
call qword [sym.imp.ADVAPI32.dll_RegOpenKeyExW]
test eax, eax
jne 0x140039d05
mov dword [rbp + 0x67], 4
mov dword [rbp + 0x77], 4
lea rax, [rbp + 0x67]
mov qword [rsp + 0x28], rax
mov qword [rsp + 0x20], rbx
lea r9, [rbp + 0x77]
xor r8d, r8d
lea rdx, str.color5
mov rcx, qword [rbp + 0x7f]
call qword [sym.imp.ADVAPI32.dll_RegQueryValueExW]
mov rcx, qword [rbp + 0x7f]
call qword [sym.imp.ADVAPI32.dll_RegCloseKey]
jmp 0x140039d2b
lea rcx, [rdi + 0xd50]
mov qword [rsp + 0x20], rbx
lea r9, str.color5
lea r8, str.SoftwareProcessLasso
mov rdx, 0xffffffff80000002
call fcn.140088a00
lea r15, [rdi + 0x484]
lea rax, [rbp + 0x7f]
mov qword [rsp + 0x20], rax
mov r9d, 1
xor r8d, r8d
lea rdx, str.SoftwareProcessLasso
mov rcx, 0xffffffff80000001
call qword [sym.imp.ADVAPI32.dll_RegOpenKeyExW]
test eax, eax
jne 0x140039d9c
mov dword [rbp + 0x67], 4
mov dword [rbp + 0x77], 4
lea rax, [rbp + 0x67]
mov qword [rsp + 0x28], rax
mov qword [rsp + 0x20], r15
lea r9, [rbp + 0x77]
xor r8d, r8d
lea rdx, str.color6
mov rcx, qword [rbp + 0x7f]
call qword [sym.imp.ADVAPI32.dll_RegQueryValueExW]
mov rcx, qword [rbp + 0x7f]
call qword [sym.imp.ADVAPI32.dll_RegCloseKey]
jmp 0x140039dc2
lea rcx, [rdi + 0xd50]
mov qword [rsp + 0x20], r15
lea r9, str.color6
lea r8, str.SoftwareProcessLasso
mov rdx, 0xffffffff80000002
call fcn.140088a00
lea rbx, [rdi + 0x488]
lea rax, [rbp + 0x7f]
mov qword [rsp + 0x20], rax
mov r9d, 1
xor r8d, r8d
lea rdx, str.SoftwareProcessLasso
mov rcx, 0xffffffff80000001
call qword [sym.imp.ADVAPI32.dll_RegOpenKeyExW]
test eax, eax
jne 0x140039e33
mov dword [rbp + 0x67], 4
mov dword [rbp + 0x77], 4
lea rax, [rbp + 0x67]
mov qword [rsp + 0x28], rax
mov qword [rsp + 0x20], rbx
lea r9, [rbp + 0x77]
xor r8d, r8d
lea rdx, str.color7
mov rcx, qword [rbp + 0x7f]
call qword [sym.imp.ADVAPI32.dll_RegQueryValueExW]
mov rcx, qword [rbp + 0x7f]
call qword [sym.imp.ADVAPI32.dll_RegCloseKey]
jmp 0x140039e59
lea rcx, [rdi + 0xd50]
mov qword [rsp + 0x20], rbx
lea r9, str.color7
lea r8, str.SoftwareProcessLasso
mov rdx, 0xffffffff80000002
call fcn.140088a00
lea rsi, [rdi + 0x4a0]
lea rax, [rbp + 0x7f]
mov qword [rsp + 0x20], rax
mov r9d, 1
xor r8d, r8d
lea rdx, str.SoftwareProcessLasso
mov rcx, 0xffffffff80000001
call qword [sym.imp.ADVAPI32.dll_RegOpenKeyExW]
test eax, eax
jne 0x140039eca
mov dword [rbp + 0x67], 4
mov dword [rbp + 0x77], 4
lea rax, [rbp + 0x67]
mov qword [rsp + 0x28], rax
mov qword [rsp + 0x20], rsi
lea r9, [rbp + 0x77]
xor r8d, r8d
lea rdx, str.color8
mov rcx, qword [rbp + 0x7f]
call qword [sym.imp.ADVAPI32.dll_RegQueryValueExW]
mov rcx, qword [rbp + 0x7f]
call qword [sym.imp.ADVAPI32.dll_RegCloseKey]
jmp 0x140039ef0
lea rcx, [rdi + 0xd50]
mov qword [rsp + 0x20], rsi
lea r9, str.color8
lea r8, str.SoftwareProcessLasso
mov rdx, 0xffffffff80000002
call fcn.140088a00
lea rbx, [rdi + 0x48c]
lea rax, [rbp + 0x7f]
mov qword [rsp + 0x20], rax
mov r9d, 1
xor r8d, r8d
lea rdx, str.SoftwareProcessLasso
mov rcx, 0xffffffff80000001
call qword [sym.imp.ADVAPI32.dll_RegOpenKeyExW]
test eax, eax
jne 0x140039f61
mov dword [rbp + 0x67], 4
mov dword [rbp + 0x77], 4
lea rax, [rbp + 0x67]
mov qword [rsp + 0x28], rax
mov qword [rsp + 0x20], rbx
lea r9, [rbp + 0x77]
xor r8d, r8d
lea rdx, str.color9
mov rcx, qword [rbp + 0x7f]
call qword [sym.imp.ADVAPI32.dll_RegQueryValueExW]
mov rcx, qword [rbp + 0x7f]
call qword [sym.imp.ADVAPI32.dll_RegCloseKey]
jmp 0x140039f87
lea rcx, [rdi + 0xd50]
mov qword [rsp + 0x20], rbx
lea r9, str.color9
lea r8, str.SoftwareProcessLasso
mov rdx, 0xffffffff80000002
call fcn.140088a00
lea rbx, [rdi + 0x490]
lea rax, [rbp + 0x7f]
mov qword [rsp + 0x20], rax
mov r9d, 1
xor r8d, r8d
lea rdx, str.SoftwareProcessLasso
mov rcx, 0xffffffff80000001
call qword [sym.imp.ADVAPI32.dll_RegOpenKeyExW]
test eax, eax
jne 0x140039ff8
mov dword [rbp + 0x67], 4
mov dword [rbp + 0x77], 4
lea rax, [rbp + 0x67]
mov qword [rsp + 0x28], rax
mov qword [rsp + 0x20], rbx
lea r9, [rbp + 0x77]
xor r8d, r8d
lea rdx, str.color10
mov rcx, qword [rbp + 0x7f]
call qword [sym.imp.ADVAPI32.dll_RegQueryValueExW]
mov rcx, qword [rbp + 0x7f]
call qword [sym.imp.ADVAPI32.dll_RegCloseKey]
jmp 0x14003a01e
lea rcx, [rdi + 0xd50]
mov qword [rsp + 0x20], rbx
lea r9, str.color10
lea r8, str.SoftwareProcessLasso
mov rdx, 0xffffffff80000002
call fcn.140088a00
lea r14, [rdi + 0x494]
lea rax, [rbp + 0x7f]
mov qword [rsp + 0x20], rax
mov r9d, 1
xor r8d, r8d
lea rdx, str.SoftwareProcessLasso
mov rcx, 0xffffffff80000001
call qword [sym.imp.ADVAPI32.dll_RegOpenKeyExW]
test eax, eax
jne 0x14003a08f
mov dword [rbp + 0x67], 4
mov dword [rbp + 0x77], 4
lea rax, [rbp + 0x67]
mov qword [rsp + 0x28], rax
mov qword [rsp + 0x20], r14
lea r9, [rbp + 0x77]
xor r8d, r8d
lea rdx, str.color11
mov rcx, qword [rbp + 0x7f]
call qword [sym.imp.ADVAPI32.dll_RegQueryValueExW]
mov rcx, qword [rbp + 0x7f]
call qword [sym.imp.ADVAPI32.dll_RegCloseKey]
jmp 0x14003a0b5
lea rcx, [rdi + 0xd50]
mov qword [rsp + 0x20], r14
lea r9, str.color11
lea r8, str.SoftwareProcessLasso
mov rdx, 0xffffffff80000002
call fcn.140088a00
lea r12, [rdi + 0x498]
lea rax, [rbp + 0x7f]
mov qword [rsp + 0x20], rax
mov r9d, 1
xor r8d, r8d
lea rdx, str.SoftwareProcessLasso
mov rcx, 0xffffffff80000001
call qword [sym.imp.ADVAPI32.dll_RegOpenKeyExW]
test eax, eax
jne 0x14003a126
mov dword [rbp + 0x67], 4
mov dword [rbp + 0x77], 4
lea rax, [rbp + 0x67]
mov qword [rsp + 0x28], rax
mov qword [rsp + 0x20], r12
lea r9, [rbp + 0x77]
xor r8d, r8d
lea rdx, str.color12
mov rcx, qword [rbp + 0x7f]
call qword [sym.imp.ADVAPI32.dll_RegQueryValueExW]
mov rcx, qword [rbp + 0x7f]
call qword [sym.imp.ADVAPI32.dll_RegCloseKey]
jmp 0x14003a14c
lea rcx, [rdi + 0xd50]
mov qword [rsp + 0x20], r12
lea r9, str.color12
lea r8, str.SoftwareProcessLasso
mov rdx, 0xffffffff80000002
call fcn.140088a00
lea rbx, [rdi + 0x49c]
lea rax, [rbp + 0x7f]
mov qword [rsp + 0x20], rax
mov r9d, 1
xor r8d, r8d
lea rdx, str.SoftwareProcessLasso
mov rcx, 0xffffffff80000001
call qword [sym.imp.ADVAPI32.dll_RegOpenKeyExW]
test eax, eax
jne 0x14003a1bd
mov dword [rbp + 0x67], 4
mov dword [rbp + 0x77], 4
lea rax, [rbp + 0x67]
mov qword [rsp + 0x28], rax
mov qword [rsp + 0x20], rbx
lea r9, [rbp + 0x77]
xor r8d, r8d
lea rdx, str.color13
mov rcx, qword [rbp + 0x7f]
call qword [sym.imp.ADVAPI32.dll_RegQueryValueExW]
mov rcx, qword [rbp + 0x7f]
call qword [sym.imp.ADVAPI32.dll_RegCloseKey]
jmp 0x14003a1e3
lea rcx, [rdi + 0xd50]
mov qword [rsp + 0x20], rbx
lea r9, str.color13
lea r8, str.SoftwareProcessLasso
mov rdx, 0xffffffff80000002
call fcn.140088a00
mov ecx, dword [rdi + 0x470]
call qword [sym.imp.GDI32.dll_CreateSolidBrush]
lea rbx, [rdi + 0x400]
mov qword [rbx], rax
mov ecx, dword [rsi]
call qword [sym.imp.GDI32.dll_CreateSolidBrush]
mov qword [rdi + 0x410], rax
mov rax, qword [rdi + 0x380]
mov qword [rdi + 0x370], rax
mov ecx, dword [rdi + 0x478]
call qword [sym.imp.GDI32.dll_CreateSolidBrush]
mov qword [0x14017abe0], rax
mov eax, dword [rdi + 0x478]
mov dword [0x140174678], eax
lea rax, [0x14017abe0]
mov qword [0x14017ac50], rax
mov qword [0x14017ac40], rbx
mov ecx, dword [rdi + 0x480]
movzx edx, cl
or edx, 0xffffff00
shl edx, 8
movzx eax, cx
shr eax, 8
or edx, eax
shl edx, 8
shr ecx, 0x10
movzx eax, cl
or edx, eax
mov dword [0x140174674], edx
mov ecx, dword [r15]
movzx edx, cl
or edx, 0xffffff00
shl edx, 8
movzx eax, cx
shr eax, 8
or edx, eax
shl edx, 8
shr ecx, 0x10
movzx eax, cl
or edx, eax
mov dword [0x140174664], edx
mov ecx, dword [rdi + 0x47c]
movzx edx, cl
or edx, 0xffffff00
shl edx, 8
movzx eax, cx
shr eax, 8
or edx, eax
shl edx, 8
shr ecx, 0x10
movzx eax, cl
or edx, eax
mov dword [0x14017467c], edx
mov ecx, InitCommonControls
call qword [sym.imp.gdiplus.dll_GdipAlloc]
mov rbx, rax
mov qword [rbp + 0x67], rax
movss xmm6, dword [0x140153348]
test rax, rax
je 0x14003a308
mov qword [rax], 0
mov r9, rax
xor r8d, r8d
movaps xmm1, xmm6
mov ecx, dword [0x14017467c]
call qword [sym.imp.gdiplus.dll_GdipCreatePen1]
mov dword [rbx + 8], eax
jmp 0x14003a30a
xor ebx, ebx
mov qword [0x14017ab50], rbx
mov ecx, InitCommonControls
call qword [sym.imp.gdiplus.dll_GdipAlloc]
mov rbx, rax
mov qword [rbp + 0x67], rax
test rax, rax
je 0x14003a349
mov qword [rax], 0
mov r9, rax
xor r8d, r8d
movaps xmm1, xmm6
mov ecx, dword [0x140174674]
call qword [sym.imp.gdiplus.dll_GdipCreatePen1]
mov dword [rbx + 8], eax
jmp 0x14003a34b
xor ebx, ebx
mov qword [0x14017ac48], rbx
mov ecx, InitCommonControls
call qword [sym.imp.gdiplus.dll_GdipAlloc]
mov rbx, rax
mov qword [rbp + 0x67], rax
test rax, rax
je 0x14003a38a
mov qword [rax], 0
mov r9, rax
xor r8d, r8d
movaps xmm1, xmm6
mov ecx, dword [0x140174664]
call qword [sym.imp.gdiplus.dll_GdipCreatePen1]
mov dword [rbx + 8], eax
jmp 0x14003a38c
xor ebx, ebx
mov qword [0x14017ab78], rbx
mov r15d, 0x1421
jmp 0x14003a850
mov ecx, 0xffffff
call qword [sym.imp.GDI32.dll_CreateSolidBrush]
mov qword [0x14017abe0], rax
mov dword [0x140174678], 0xffffff
lea rax, [0x14017ac00]
mov qword [0x14017ac40], rax
mov dword [0x140174674], 0xffce1717
mov dword [0x140174664], 0xff5e5eff
mov dword [0x14017467c], 0xff30cc30
mov ecx, InitCommonControls
call qword [sym.imp.gdiplus.dll_GdipAlloc]
mov rbx, rax
mov qword [rbp + 0x67], rax
movss xmm6, dword [0x140153348]
test rax, rax
je 0x14003a422
mov qword [rax], r12
mov r9, rax
xor r8d, r8d
movaps xmm1, xmm6
mov ecx, dword [0x14017467c]
call qword [sym.imp.gdiplus.dll_GdipCreatePen1]
mov dword [rbx + 8], eax
jmp 0x14003a425
mov rbx, r12
mov qword [0x14017ab50], rbx
mov ecx, InitCommonControls
call qword [sym.imp.gdiplus.dll_GdipAlloc]
mov rbx, rax
mov qword [rbp + 0x67], rax
test rax, rax
je 0x14003a460
mov qword [rax], r12
mov r9, rax
xor r8d, r8d
movaps xmm1, xmm6
mov ecx, dword [0x140174674]
call qword [sym.imp.gdiplus.dll_GdipCreatePen1]
mov dword [rbx + 8], eax
jmp 0x14003a463
mov rbx, r12
mov qword [0x14017ac48], rbx
mov ecx, InitCommonControls
call qword [sym.imp.gdiplus.dll_GdipAlloc]
mov rbx, rax
mov qword [rbp + 0x67], rax
test rax, rax
je 0x14003a49e
mov qword [rax], r12
mov r9, rax
xor r8d, r8d
movaps xmm1, xmm6
mov ecx, dword [0x140174664]
call qword [sym.imp.gdiplus.dll_GdipCreatePen1]
mov dword [rbx + 8], eax
jmp 0x14003a4a1
mov rbx, r12
mov qword [0x14017ab78], rbx
mov dword [rdi + 0x4a4], 0x303030
mov dword [rdi + 0x4a0], 0x303030
mov ecx, 0x303030
call qword [sym.imp.GDI32.dll_CreateSolidBrush]
mov qword [rdi + 0x410], rax
mov rax, qword [rdi + 0x378]
mov qword [rdi + 0x370], rax
lea r13, [rdi + 0x474]
mov eax, dword [0x140174668]
mov ecx, eax
shr ecx, 8
movzx edx, cl
shl edx, 8
movzx ecx, al
shl ecx, 0x10
or edx, ecx
movzx eax, byte [0x14017466a]
or edx, eax
mov dword [r13], edx
lea rbx, [rdi + 0x48c]
mov dword [rbx], 0xc8c8c8
lea rsi, [rdi + 0x490]
mov dword [rsi], 0x1e1e1e
lea r14, [rdi + 0x494]
mov dword [r14], 0x383838
lea r12, [rdi + 0x498]
mov dword [r12], 0xffffff
mov dword [rdi + 0x49c], 0xffffff
cmp byte [0x14017ac3d], 0
je 0x14003a5e6
call qword [0x14017ada8]
test al, al
je 0x14003a5e6
call fcn.140072090
test al, al
jne 0x14003a5e6
lea rdx, str.ItemsView
xor ecx, ecx
call qword [sym.imp.UxTheme.dll_OpenThemeData]
mov r15, rax
test rax, rax
je 0x14003a5e6
mov qword [rsp + 0x20], rbx
mov r9d, 0xedb
xor r8d, r8d
xor edx, edx
mov rcx, rax
call qword [sym.imp.UxTheme.dll_GetThemeColor]
test eax, eax
jns 0x14003a5a8
mov dword [rbx], 0xc8c8c8
mov qword [rsp + 0x20], rsi
mov r9d, 0xeda
xor r8d, r8d
xor edx, edx
mov rcx, r15
call qword [sym.imp.UxTheme.dll_GetThemeColor]
test eax, eax
jns 0x14003a5cb
mov dword [rsi], 0x1e1e1e
mov rcx, r15
call qword [sym.imp.UxTheme.dll_CloseThemeData]
mov r15d, 0x1422
mov byte [0x14017ac3c], 1
jmp 0x14003a857
mov dword [rsi], 0x1e1e1e
mov dword [rbx], 0xc8c8c8
mov r15d, 0x1422
mov byte [0x14017ac3c], 1
jmp 0x14003a857
mov ecx, 0xffffff
call qword [sym.imp.GDI32.dll_CreateSolidBrush]
mov qword [0x14017abe0], rax
mov dword [0x140174678], 0xffffff
lea rax, [0x14017ac00]
mov qword [0x14017ac40], rax
mov dword [0x140174674], 0xffce1717
mov dword [0x140174664], 0xff5e5eff
mov dword [0x14017467c], 0xff30cc30
mov ecx, InitCommonControls
call qword [sym.imp.gdiplus.dll_GdipAlloc]
mov rbx, rax
mov qword [rbp + 0x67], rax
movss xmm6, dword [0x140153348]
test rax, rax
je 0x14003a688
mov qword [rax], r12
mov r9, rax
xor r8d, r8d
movaps xmm1, xmm6
mov ecx, dword [0x14017467c]
call qword [sym.imp.gdiplus.dll_GdipCreatePen1]
mov dword [rbx + 8], eax
jmp 0x14003a68b
mov rbx, r12
mov qword [0x14017ab50], rbx
mov ecx, InitCommonControls
call qword [sym.imp.gdiplus.dll_GdipAlloc]
mov rbx, rax
mov qword [rbp + 0x67], rax
test rax, rax
je 0x14003a6c6
mov qword [rax], r12
mov r9, rax
xor r8d, r8d
movaps xmm1, xmm6
mov ecx, dword [0x140174674]
call qword [sym.imp.gdiplus.dll_GdipCreatePen1]
mov dword [rbx + 8], eax
jmp 0x14003a6c9
mov rbx, r12
mov qword [0x14017ac48], rbx
mov ecx, InitCommonControls
call qword [sym.imp.gdiplus.dll_GdipAlloc]
mov rbx, rax
mov qword [rbp + 0x67], rax
test rax, rax
je 0x14003a704
mov qword [rax], r12
mov r9, rax
xor r8d, r8d
movaps xmm1, xmm6
mov ecx, dword [0x140174664]
call qword [sym.imp.gdiplus.dll_GdipCreatePen1]
mov dword [rbx + 8], eax
jmp 0x14003a707
mov rbx, r12
mov qword [0x14017ab78], rbx
mov dword [rdi + 0x4a4], 0x303030
mov dword [rdi + 0x4a0], 0x303030
mov ecx, 0x303030
call qword [sym.imp.GDI32.dll_CreateSolidBrush]
mov qword [rdi + 0x410], rax
mov rax, qword [rdi + 0x378]
mov qword [rdi + 0x370], rax
lea r13, [rdi + 0x474]
mov eax, dword [0x140174668]
mov ecx, eax
shr ecx, 8
movzx r8d, cl
shl r8d, 8
movzx ecx, al
shl ecx, 0x10
or r8d, ecx
movzx eax, byte [0x14017466a]
or r8d, eax
mov dword [r13], r8d
lea rdx, str.Explorer
xor ecx, ecx
call qword [sym.imp.UxTheme.dll_OpenThemeData]
mov rbx, rax
lea rsi, [rdi + 0x48c]
test rax, rax
je 0x14003a7f7
mov qword [rsp + 0x20], rsi
mov r9d, 0xedb
xor r8d, r8d
xor edx, edx
mov rcx, rax
call qword [sym.imp.UxTheme.dll_GetThemeColor]
test eax, eax
jns 0x14003a7bb
mov ecx, 8
call qword [sym.imp.USER32.dll_GetSysColor]
mov dword [rsi], eax
lea rsi, [rdi + 0x490]
mov qword [rsp + 0x20], rsi
mov r9d, 0xeda
xor r8d, r8d
xor edx, edx
mov rcx, rbx
call qword [sym.imp.UxTheme.dll_GetThemeColor]
test eax, eax
jns 0x14003a7ec
mov ecx, 5
call qword [sym.imp.USER32.dll_GetSysColor]
mov dword [rsi], eax
mov rcx, rbx
call qword [sym.imp.UxTheme.dll_CloseThemeData]
jmp 0x14003a815
mov ecx, 8
call qword [sym.imp.USER32.dll_GetSysColor]
mov dword [rsi], eax
mov ecx, 5
call qword [sym.imp.USER32.dll_GetSysColor]
mov dword [rdi + 0x490], eax
lea r14, [rdi + 0x494]
mov ecx, 5
call qword [sym.imp.USER32.dll_GetSysColor]
mov dword [r14], eax
lea r12, [rdi + 0x498]
mov ecx, 8
call qword [sym.imp.USER32.dll_GetSysColor]
mov dword [r12], eax
mov dword [rdi + 0x49c], 0xffffff
mov r15d, 0x1422
mov byte [0x14017ac3c], 0
mov edx, 0xfffffff0
mov rcx, qword [rdi + 0x788]
call qword [sym.imp.USER32.dll_GetWindowLongPtrW]
mov rbx, rax
bts rbx, 0xd
cmp byte [0x14017ac3c], 0
jne 0x14003a881
sub rbx, 0x2000
mov r8, rbx
mov edx, 0xfffffff0
mov rcx, qword [rdi + 0x788]
call qword [sym.imp.USER32.dll_SetWindowLongPtrW]
mov r8, rbx
mov edx, 0xfffffff0
mov rcx, qword [rdi + 0x760]
call qword [sym.imp.USER32.dll_SetWindowLongPtrW]
cmp byte [0x14017ac3c], 0
je 0x14003a9a9
lea rdx, str.DarkStatusbarDisabled
lea rcx, [0x14017c4f0]
call fcn.140073310
cmp byte [rax], 0
jne 0x14003a9a9
mov ecx, dword [r14]
call qword [sym.imp.GDI32.dll_CreateSolidBrush]
mov rsi, rax
mov ecx, dword [r13]
call qword [sym.imp.GDI32.dll_CreateSolidBrush]
mov qword [rbp + 0x77], rax
mov eax, dword [r12]
mov dword [rbp + 0x67], eax
mov rax, qword [rdi + 0x438]
mov qword [rbp + 0x7f], rax
mov rbx, qword [rdi + 0x770]
cmp qword [0x14017cd18], 0
je 0x14003a964
mov r8d, 0x42
lea rdx, [0x140072890]
mov rcx, rbx
call qword [sym.imp.COMCTL32.dll_RemoveWindowSubclass]
mov rcx, qword [0x14017cd18]
mov rcx, qword [rcx]
call qword [sym.imp.GDI32.dll_DeleteObject]
mov rcx, qword [0x14017cd18]
mov rcx, qword [rcx + 8]
call qword [sym.imp.GDI32.dll_DeleteObject]
mov edx, 0x20
mov rcx, qword [0x14017cd18]
call fcn.1400ff054
mov qword [0x14017cd18], 0
mov ecx, 0x20
call fcn.1400ff088
mov qword [rax], rsi
mov rcx, qword [rbp + 0x77]
mov qword [rax + 8], rcx
mov rcx, qword [rbp + 0x7f]
mov qword [rax + 0x10], rcx
mov ecx, dword [rbp + 0x67]
mov dword [rax + 0x18], ecx
mov qword [0x14017cd18], rax
mov r9, rax
mov r8d, 0x42
lea rdx, [0x140072890]
mov rcx, rbx
call qword [sym.imp.COMCTL32.dll_SetWindowSubclass]
jmp 0x14003aa0a
cmp qword [0x14017cd18], 0
je 0x14003aa0a
mov r8d, 0x42
lea rdx, [0x140072890]
mov rcx, qword [rdi + 0x770]
call qword [sym.imp.COMCTL32.dll_RemoveWindowSubclass]
mov rcx, qword [0x14017cd18]
mov rcx, qword [rcx]
call qword [sym.imp.GDI32.dll_DeleteObject]
mov rcx, qword [0x14017cd18]
mov rcx, qword [rcx + 8]
call qword [sym.imp.GDI32.dll_DeleteObject]
mov edx, 0x20
mov rcx, qword [0x14017cd18]
call fcn.1400ff054
mov qword [0x14017cd18], 0
movzx eax, byte [0x14017ac3d]
test al, al
je 0x14003abe4
movzx edx, byte [0x14017ac3c]
mov rcx, qword [rdi + 0x800]
call qword [0x14017adf0]
movzx eax, byte [0x14017ac3d]
test al, al
je 0x14003abe4
movzx edx, byte [0x14017ac3c]
mov rcx, qword [rdi + 0x7b0]
call qword [0x14017adf0]
movzx eax, byte [0x14017ac3d]
test al, al
je 0x14003abe4
movzx edx, byte [0x14017ac3c]
mov rcx, qword [rdi + 0x810]
call qword [0x14017adf0]
movzx eax, byte [0x14017ac3d]
test al, al
je 0x14003abe4
movzx edx, byte [0x14017ac3c]
mov rcx, qword [rdi + 0x780]
call qword [0x14017adf0]
movzx eax, byte [0x14017ac3d]
test al, al
je 0x14003abe4
movzx edx, byte [0x14017ac3c]
mov rcx, qword [rdi + 0x788]
call qword [0x14017adf0]
movzx eax, byte [0x14017ac3d]
test al, al
je 0x14003abe4
movzx edx, byte [0x14017ac3c]
mov rcx, qword [rdi + 0x760]
call qword [0x14017adf0]
movzx eax, byte [0x14017ac3d]
test al, al
je 0x14003abe4
movzx edx, byte [0x14017ac3c]
mov rcx, qword [rdi + 0x770]
call qword [0x14017adf0]
movzx eax, byte [0x14017ac3d]
test al, al
je 0x14003abe4
movzx edx, byte [0x14017ac3c]
mov rcx, qword [rdi + 0x840]
call qword [0x14017adf0]
movzx eax, byte [0x14017ac3d]
test al, al
je 0x14003abe4
movzx edx, byte [0x14017ac3c]
mov rcx, qword [rdi + 0x740]
call qword [0x14017adf0]
movzx eax, byte [0x14017ac3d]
test al, al
je 0x14003abe4
movzx edx, byte [0x14017ac3c]
mov rcx, qword [rdi + 0x7a0]
call qword [0x14017adf0]
movzx eax, byte [0x14017ac3d]
test al, al
je 0x14003abe4
movzx edx, byte [0x14017ac3c]
mov rcx, qword [rdi + 0x748]
call qword [0x14017adf0]
movzx eax, byte [0x14017ac3d]
test al, al
je 0x14003abe4
movzx edx, byte [0x14017ac3c]
mov rcx, qword [rdi + 0x830]
call qword [0x14017adf0]
movzx eax, byte [0x14017ac3d]
test al, al
je 0x14003abe4
movzx edx, byte [0x14017ac3c]
mov rcx, qword [rdi + 0x838]
call qword [0x14017adf0]
movzx eax, byte [0x14017ac3d]
test al, al
je 0x14003abe4
movzx edx, byte [0x14017ac3c]
mov rcx, qword [rdi + 0x7f0]
call qword [0x14017adf0]
mov r9d, dword [rdi + 0x490]
xor r8d, r8d
mov edx, 0x1001
mov rcx, qword [rdi + 0x740]
call qword [sym.imp.USER32.dll_SendMessageW]
mov r9d, dword [rdi + 0x48c]
xor r8d, r8d
mov edx, 0x1024
mov rcx, qword [rdi + 0x740]
call qword [sym.imp.USER32.dll_SendMessageW]
mov r9d, dword [rdi + 0x490]
xor r8d, r8d
mov edx, 0x1026
mov rcx, qword [rdi + 0x740]
call qword [sym.imp.USER32.dll_SendMessageW]
mov r9d, dword [rdi + 0x490]
xor r8d, r8d
mov edx, 0x1001
mov rcx, qword [rdi + 0x7a0]
call qword [sym.imp.USER32.dll_SendMessageW]
mov r9d, dword [rdi + 0x48c]
xor r8d, r8d
mov edx, 0x1024
mov rcx, qword [rdi + 0x7a0]
call qword [sym.imp.USER32.dll_SendMessageW]
mov r9d, dword [rdi + 0x490]
xor r8d, r8d
mov edx, 0x1026
mov rcx, qword [rdi + 0x7a0]
call qword [sym.imp.USER32.dll_SendMessageW]
mov r9d, dword [rdi + 0x490]
xor r8d, r8d
mov edx, 0x1001
mov rcx, qword [rdi + 0x748]
call qword [sym.imp.USER32.dll_SendMessageW]
mov r9d, dword [rdi + 0x48c]
xor r8d, r8d
mov edx, 0x1024
mov rcx, qword [rdi + 0x748]
call qword [sym.imp.USER32.dll_SendMessageW]
mov r9d, dword [rdi + 0x490]
xor r8d, r8d
mov edx, 0x1026
mov rcx, qword [rdi + 0x748]
call qword [sym.imp.USER32.dll_SendMessageW]
mov r9d, dword [rdi + 0x490]
xor r8d, r8d
mov edx, 0x1001
mov rcx, qword [rdi + 0x830]
call qword [sym.imp.USER32.dll_SendMessageW]
mov r9d, dword [rdi + 0x48c]
xor r8d, r8d
mov edx, 0x1024
mov rcx, qword [rdi + 0x830]
call qword [sym.imp.USER32.dll_SendMessageW]
mov r9d, dword [rdi + 0x490]
xor r8d, r8d
mov edx, 0x1026
mov rcx, qword [rdi + 0x830]
call qword [sym.imp.USER32.dll_SendMessageW]
mov r9d, dword [rdi + 0x490]
xor r8d, r8d
mov edx, 0x1001
mov rcx, qword [rdi + 0x838]
call qword [sym.imp.USER32.dll_SendMessageW]
mov r9d, dword [rdi + 0x48c]
xor r8d, r8d
mov edx, 0x1024
mov rcx, qword [rdi + 0x838]
call qword [sym.imp.USER32.dll_SendMessageW]
mov r9d, dword [rdi + 0x490]
xor r8d, r8d
mov edx, 0x1026
mov rcx, qword [rdi + 0x838]
call qword [sym.imp.USER32.dll_SendMessageW]
mov r9d, dword [rdi + 0x490]
xor r8d, r8d
mov edx, 0x1001
mov rcx, qword [rdi + 0x7f0]
call qword [sym.imp.USER32.dll_SendMessageW]
mov r9d, dword [rdi + 0x48c]
xor r8d, r8d
mov edx, 0x1024
mov rcx, qword [rdi + 0x7f0]
call qword [sym.imp.USER32.dll_SendMessageW]
mov r9d, dword [rdi + 0x490]
xor r8d, r8d
mov edx, 0x1026
mov rcx, qword [rdi + 0x7f0]
call qword [sym.imp.USER32.dll_SendMessageW]
mov edx, dword [rdi + 0x49c]
movzx ebx, dl
or ebx, 0xffffff00
shl ebx, 8
movzx eax, dx
shr eax, 8
or ebx, eax
shl ebx, 8
shr edx, 0x10
movzx eax, dl
or ebx, eax
mov ecx, InitCommonControls
call qword [sym.imp.gdiplus.dll_GdipAlloc]
mov rsi, rax
mov qword [rbp + 0x67], rax
test rax, rax
je 0x14003ae3a
mov qword [rax], 0
mov r9, rax
xor r8d, r8d
movss xmm1, dword [0x140153320]
mov ecx, ebx
call qword [sym.imp.gdiplus.dll_GdipCreatePen1]
mov dword [rsi + 8], eax
jmp 0x14003ae3c
xor esi, esi
mov qword [0x14017ac08], rsi
mov rcx, qword [0x14017aca8]
test rcx, rcx
je 0x14003ae60
call qword [sym.imp.GDI32.dll_DeleteObject]
mov qword [0x14017aca8], 0
mov ecx, dword [r14]
call qword [sym.imp.GDI32.dll_CreateSolidBrush]
mov qword [0x14017aca8], rax
mov eax, dword [0x140174664]
mov ecx, eax
shr ecx, 8
movzx ecx, cl
shl ecx, 8
movzx edx, al
shl edx, 0x10
or ecx, edx
movzx eax, byte [0x140174666]
or ecx, eax
call qword [sym.imp.GDI32.dll_CreateSolidBrush]
mov qword [0x14017ac20], rax
mov rbx, qword [0x14017ab78]
mov edx, 2
mov rcx, qword [rbx]
call qword [sym.imp.gdiplus.dll_GdipSetPenDashStyle]
test eax, eax
je 0x14003aebb
mov dword [rbx + 8], eax
lea rax, [0x14017ab50]
mov qword [0x140173e30], rax
lea rax, [0x14017ac48]
mov qword [0x140173e38], rax
lea rax, [0x14017ab78]
mov qword [0x140173e40], rax
lea rax, [0x14017ab08]
mov qword [0x140173e48], rax
lea rax, [0x14017ac08]
mov qword [0x140173e50], rax
mov eax, dword [rdi + 0x470]
mov dword [rdi + 0x4a8], eax
mov eax, dword [r13]
mov dword [rdi + 0x4ac], eax
mov eax, dword [rdi + 0x478]
mov dword [rdi + 0x4b0], eax
mov eax, dword [rdi + 0x47c]
mov dword [rdi + 0x4b4], eax
mov eax, dword [rdi + 0x480]
mov dword [rdi + 0x4b8], eax
mov eax, dword [rdi + 0x484]
mov dword [rdi + 0x4bc], eax
mov eax, dword [rdi + 0x488]
mov dword [rdi + 0x4c4], eax
mov eax, dword [rdi + 0x4a0]
mov dword [rdi + 0x4c8], eax
mov ecx, dword [rdi + 0x48c]
mov dword [rdi + 0x4cc], ecx
mov eax, dword [rdi + 0x490]
mov dword [rdi + 0x4d0], eax
mov eax, dword [r14]
mov dword [rdi + 0x4d4], eax
mov eax, dword [r12]
mov dword [rdi + 0x4d8], eax
mov eax, dword [rdi + 0x49c]
mov dword [rdi + 0x4dc], eax
lea rsi, [rdi + 0x6c8]
mov dword [rsi + 0x38], ecx
mov rcx, rsi
call fcn.14000c360
mov eax, dword [0x140174664]
mov ecx, eax
shr ecx, 8
movzx edx, cl
shl edx, 8
movzx ecx, al
shl ecx, 0x10
or edx, ecx
movzx eax, byte [0x140174666]
or edx, eax
mov dword [rsi + 0x3c], edx
mov rcx, rsi
call fcn.14000c360
mov eax, dword [rdi + 0x4a4]
mov dword [rsi + 0x44], eax
mov rcx, rsi
call fcn.14000c360
mov eax, dword [r14]
mov dword [rsi + 0x40], eax
mov rcx, rsi
call fcn.14000c360
mov eax, dword [r13]
mov dword [rsi + 0x48], eax
mov rcx, rsi
call fcn.14000c360
mov eax, dword [rdi + 0x48c]
mov dword [rdi + 0x5d8], eax
lea rbx, [rdi + 0x4e8]
mov eax, dword [0x14017467c]
mov ecx, eax
shr ecx, 8
movzx edx, cl
shl edx, 8
movzx ecx, al
shl ecx, 0x10
or edx, ecx
movzx eax, byte [0x14017467e]
or edx, eax
mov dword [rbx + 0xf4], edx
mov rcx, rbx
call fcn.140077f50
mov eax, dword [r13]
mov dword [rbx + 0xfc], eax
mov rcx, rbx
call fcn.140077f50
mov eax, dword [rdi + 0x4a4]
mov dword [rbx + 0xf8], eax
mov rcx, rbx
call fcn.140077f50
mov eax, dword [r14]
mov dword [rbx + 0x100], eax
mov rcx, rbx
call fcn.140077f50
mov eax, dword [0x140174660]
mov ecx, eax
shr ecx, 8
movzx edx, cl
shl edx, 8
movzx ecx, al
shl ecx, 0x10
or edx, ecx
movzx eax, byte [0x140174662]
or edx, eax
mov dword [rbx + 0x104], edx
mov rcx, rbx
call fcn.140077f50
mov edx, r15d
xor r14d, r14d
mov dword [rsp + 0x28], r14d
mov dword [rsp + 0x20], r14d
xor r9d, r9d
xor r8d, r8d
mov rcx, qword [0x14017ae30]
call qword [sym.imp.USER32.dll_LoadImageW]
mov qword [rdi + 0x468], rax
mov qword [rbx + 0x110], rax
cmp r15d, 0x1421
sete cl
mov byte [rbx + 0x138], cl
lea r8, [rbx + 0x118]
lea edx, [r14 + 0x20]
mov rcx, rax
call qword [sym.imp.GDI32.dll_GetObjectW]
mov rcx, rbx
call fcn.140077f50
cmp byte [0x14017ac3d], r14b
je 0x14003b11b
mov rcx, rbx
call fcn.1400792a0
lea rdx, str.NoThemedProgressBars
lea rcx, [0x14017c4f0]
call fcn.140073310
cmp byte [rax], r14b
je 0x14003b13b
mov rcx, rbx
call fcn.140079420
mov rcx, qword [rsi]
test rcx, rcx
je 0x14003b154
mov r9d, 0x181
xor r8d, r8d
xor edx, edx
call qword [sym.imp.USER32.dll_RedrawWindow]
mov r9d, 0x181
xor r8d, r8d
xor edx, edx
mov rcx, qword [rbx + 0x140]
call qword [sym.imp.USER32.dll_RedrawWindow]
mov rsi, qword [rbx + 0x150]
mov rbx, qword [rbx + 0x148]
cmp rbx, rsi
je 0x14003b1a9
nop
mov rax, qword [rbx]
mov rcx, qword [rax + 0x188]
test rcx, rcx
je 0x14003b1a0
mov r9d, 0x81
xor r8d, r8d
xor edx, edx
call qword [sym.imp.USER32.dll_RedrawWindow]
add rbx, 8
cmp rbx, rsi
jne 0x14003b180
cmp byte [0x14017ac3d], r14b
je 0x14003b1d2
movzx edx, byte [0x14017ac3c]
mov rcx, qword [rdi + 0x728]
call qword [0x14017adf0]
mov rcx, qword [rdi + 0x728]
call fcn.140072100
xor r9d, r9d
xor r8d, r8d
mov edx, 0x31a
mov rcx, qword [rdi + 0x728]
call qword [sym.imp.USER32.dll_SendMessageW]
mov r9d, 0x85
xor r8d, r8d
xor edx, edx
mov rcx, qword [rdi + 0x728]
call qword [sym.imp.USER32.dll_RedrawWindow]
lea rcx, [0x14017ac80]
call qword [sym.imp.KERNEL32.dll_LeaveCriticalSection]
mov eax, dword [rbp + 0x6f]
mov dword [rbp + 0x6f], eax
lea rax, [rbp + 0x67]
mov qword [rsp + 0x40], rax
lea rax, [rbp + 0x77]
mov qword [rsp + 0x38], rax
mov qword [rsp + 0x30], r14
mov dword [rsp + 0x28], 2
mov dword [rsp + 0x20], r14d
xor r9d, r9d
xor r8d, r8d
lea rdx, str.SoftwareProcessLasso
mov rcx, 0xffffffff80000001
call qword [sym.imp.ADVAPI32.dll_RegCreateKeyExW]
test eax, eax
jne 0x14003b290
mov dword [rsp + 0x28], 4
lea rax, [rbp + 0x6f]
mov qword [rsp + 0x20], rax
mov r9d, 4
xor r8d, r8d
lea rdx, str.GUIColorScheme
mov rcx, qword [rbp + 0x77]
call qword [sym.imp.ADVAPI32.dll_RegSetValueExW]
mov rcx, qword [rbp + 0x77]
test eax, eax
je 0x14003b2ab
call qword [sym.imp.ADVAPI32.dll_RegCloseKey]
xor al, al
movaps xmm6, xmmword [rsp + 0x70]
add rsp, 0x88
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbx
pop rbp
ret
call qword [sym.imp.ADVAPI32.dll_RegCloseKey]
mov al, 1
jmp 0x14003b292