Function at 0x14002e490
Capabilities:
Link many functions at runtime

Disassembly:
mov dword [rsp + 0x20], r9d
mov dword [rsp + 0x18], r8d
mov dword [rsp + 0x10], edx
push rbx
push rsi
push rdi
push r12
push r14
sub rsp, 0x60
mov rsi, rcx
mov rcx, qword [0x14013a560]
call fcn.140044508
mov r14, rax
call fcn.140036074
call fcn.140030d60
cmp dword [0x140138b50], 0
jne 0x14002e6cd
mov ebx, 0x140
lea rcx, [0x140138b70]
xor edx, edx
mov r8d, ebx
call sub.msvcrt.dll_memset
lea rax, [0x14002e048]
mov dword [0x140138b74], ebx
mov qword [0x140138b78], rax
lea rax, [0x14002ded8]
mov ebx, 0x800
mov qword [0x140138ba8], rax
lea rax, [0x14002e424]
lea rcx, str.MSFTEDIT.DLL
mov qword [0x140138b98], rax
lea rax, [0x14002ec10]
mov r8d, ebx
mov qword [0x140138ba0], rax
lea rax, [fcn.14002e0a0]
xor edx, edx
mov qword [0x140138bd0], rax
lea rax, [fcn.14002e07c]
mov dword [0x140138b70], 0x16
mov qword [0x140138bc0], rax
lea rax, [0x14002e908]
mov qword [0x140138bb8], rax
lea rax, [0x14002e370]
mov qword [0x140138be8], rax
lea rax, [0x14002eb40]
mov qword [0x140138bf0], rax
lea rax, [0x14002e2f8]
mov qword [0x140138c38], rax
lea rax, [fcn.14002e9e8]
mov qword [0x140138c40], rax
lea rax, [0x14002e34c]
mov qword [0x140138c60], rax
lea rax, [fcn.14002ea64]
mov qword [0x140138c58], rax
lea rax, [0x14002e368]
mov qword [0x140138c98], rax
lea rax, [0x14002eb10]
mov qword [0x140138ca0], rax
call qword [sym.imp.KERNEL32.dll_LoadLibraryExW]
lea rcx, str.RICHED20.DLL
mov r8d, ebx
xor edx, edx
mov qword [0x140138b58], rax
call qword [sym.imp.KERNEL32.dll_LoadLibraryExW]
mov qword [0x140138b60], rax
test rax, rax
jne 0x14002e618
lea rcx, str.RICHED32.DLL
mov r8d, ebx
xor edx, edx
call qword [sym.imp.KERNEL32.dll_LoadLibraryExW]
mov rcx, qword [0x1401385f8]
test rcx, rcx
je 0x14002e6c3
lea rdx, str.OpenThemeData
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov rcx, qword [0x1401385f8]
lea rdx, str.CloseThemeData
mov qword [0x140138cb0], rax
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov rcx, qword [0x1401385f8]
lea rdx, str.GetThemeBackgroundContentRect
mov qword [0x140138cb8], rax
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov rcx, qword [0x1401385f8]
lea rdx, str.IsThemeBackgroundPartiallyTransparent
mov qword [0x140138cc0], rax
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov rcx, qword [0x1401385f8]
lea rdx, str.DrawThemeParentBackground
mov qword [0x140138cc8], rax
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov rcx, qword [0x1401385f8]
lea rdx, str.DrawThemeBackground
mov qword [0x140138cd0], rax
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov qword [0x140138cd8], rax
mov dword [0x140138b50], 1
mov eax, dword [0x1401385f4]
neg eax
sbb ebx, ebx
not ebx
and ebx, 0x200
cmp qword [0x140138b58], 0
je 0x14002e6f2
lea rdi, str.RICHEDIT50W
jmp 0x14002e70c
cmp qword [0x140138b60], 0
lea rdi, str.RichEdit20W
lea rax, str.RichEdit
cmove rdi, rax
lea r9, [rsp + 0xb0]
lea r8, [rsp + 0xa8]
lea rdx, [rsp + 0xa0]
lea rcx, [rsp + 0x98]
call fcn.14003730c
and qword [rsp + 0x58], 0
mov rax, qword [0x140137b2c]
mov r9d, dword [rsp + 0xb8]
mov qword [rsp + 0x50], rax
mov rax, qword [r14]
or r12, 0xffffffffffffffff
or r9d, 0x503111c4
xor r8d, r8d
mov qword [rsp + 0x48], r12
mov qword [rsp + 0x40], rax
mov eax, dword [rsp + 0xb0]
mov dword [rsp + 0x38], eax
mov eax, dword [rsp + 0xa8]
mov rdx, rdi
mov dword [rsp + 0x30], eax
mov eax, dword [rsp + 0xa0]
mov ecx, ebx
mov dword [rsp + 0x28], eax
mov eax, dword [rsp + 0x98]
mov dword [rsp + 0x20], eax
call qword [sym.imp.USER32.dll_CreateWindowExW]
mov rbx, rax
test rax, rax
je 0x14002e8f2
mov rcx, qword [0x140139de0]
mov rdx, rsi
call fcn.140044924
lea edx, [r12 + 9]
lea r8d, [r12 + 0x11]
mov qword [rax + 0x30], r12
mov qword [rax + 0x28], r12
mov rcx, qword [r14 + 0x10]
mov qword [rax + 0x38], rcx
mov rcx, qword [0x140137b24]
mov rdi, rax
call qword [sym.imp.KERNEL32.dll_HeapAlloc]
lea rdx, str.PB_ClientRect
mov rcx, rbx
mov r8, rax
call qword [sym.imp.USER32.dll_SetPropW]
xor r9d, r9d
mov r8, r12
mov edx, 0xc5
mov rcx, rbx
call qword [sym.imp.USER32.dll_SendMessageW]
lea r8d, [r12 + 2]
xor r9d, r9d
mov edx, 0x459
mov rcx, rbx
call qword [sym.imp.USER32.dll_SendMessageW]
lea r8, [0x14002e0e0]
lea edx, [r12 - 3]
mov rcx, rbx
call qword [sym.imp.USER32.dll_SetWindowLongPtrW]
mov dword [rsp + 0x30], gethostname
and dword [rsp + 0x28], 0
and dword [rsp + 0x20], 0
xor r9d, r9d
xor r8d, r8d
xor edx, edx
mov rcx, rbx
mov qword [0x140138b68], rax
call qword [sym.imp.USER32.dll_SetWindowPos]
mov r9d, 0x541
xor r8d, r8d
xor edx, edx
mov rcx, rbx
call qword [sym.imp.USER32.dll_RedrawWindow]
xor r9d, r9d
xor r8d, r8d
mov edx, 0x43b
mov rcx, rbx
call qword [sym.imp.USER32.dll_SendMessageW]
xor r8d, r8d
mov edx, 0x445
or rax, 1
mov rcx, rbx
mov r9, rax
call qword [sym.imp.USER32.dll_SendMessageW]
cmp qword [0x140138b58], 0
je 0x14002e8be
lea r8d, [r12 + 5]
mov edx, 0x513
mov rcx, rbx
mov r9d, r8d
call qword [sym.imp.USER32.dll_SendMessageW]
lea r9, [0x140138b70]
mov r8, rbx
mov rdx, rdi
mov rcx, rsi
call fcn.140030c04
mov edx, 0x10000000
mov rbx, rax
test dword [rsp + 0xb8], edx
je 0x14002e8f2
mov r8d, 1
mov rcx, rdi
call fcn.14002e9e8
call fcn.14003608c
mov rax, rbx
add rsp, 0x60
pop r14
pop r12
pop rdi
pop rsi
pop rbx
ret