Function at 0x14001838c
Capabilities:
Link many functions at runtime

Disassembly:
mov dword [rsp + 0x20], r9d
mov dword [rsp + 0x18], r8d
mov dword [rsp + 0x10], edx
push rbx
push rsi
push rdi
push r12
push r14
sub rsp, 0x60
mov rsi, rcx
mov rcx, qword [0x14014a2c0]
call fcn.14002b890
mov r14, rax
call fcn.14001ee14
call fcn.14001a330
cmp dword [0x140149040], 0
jne 0x1400185c9
mov ebx, 0x140
lea rcx, [0x140149060]
xor edx, edx
mov r8d, ebx
call sub.msvcrt.dll_memset
lea rax, [0x140017f44]
mov dword [0x140149064], ebx
mov qword [0x140149068], rax
lea rax, [0x140017dd4]
mov ebx, 0x800
mov qword [0x140149098], rax
lea rax, [0x140018320]
lea rcx, str.MSFTEDIT.DLL
mov qword [0x140149088], rax
lea rax, [0x140018b0c]
mov r8d, ebx
mov qword [0x140149090], rax
lea rax, [fcn.140017f9c]
xor edx, edx
mov qword [0x1401490c0], rax
lea rax, [fcn.140017f78]
mov dword [0x140149060], 0x16
mov qword [0x1401490b0], rax
lea rax, [0x140018804]
mov qword [0x1401490a8], rax
lea rax, [0x14001826c]
mov qword [0x1401490d8], rax
lea rax, [0x140018a3c]
mov qword [0x1401490e0], rax
lea rax, [0x1400181f4]
mov qword [0x140149128], rax
lea rax, [fcn.1400188e4]
mov qword [0x140149130], rax
lea rax, [0x140018248]
mov qword [0x140149150], rax
lea rax, [fcn.140018960]
mov qword [0x140149148], rax
lea rax, [0x140018264]
mov qword [0x140149188], rax
lea rax, [0x140018a0c]
mov qword [0x140149190], rax
call qword [sym.imp.KERNEL32.dll_LoadLibraryExW]
lea rcx, str.RICHED20.DLL
mov r8d, ebx
xor edx, edx
mov qword [0x140149048], rax
call qword [sym.imp.KERNEL32.dll_LoadLibraryExW]
mov qword [0x140149050], rax
test rax, rax
jne 0x140018514
lea rcx, str.RICHED32.DLL
mov r8d, ebx
xor edx, edx
call qword [sym.imp.KERNEL32.dll_LoadLibraryExW]
mov rcx, qword [0x140148ee0]
test rcx, rcx
je 0x1400185bf
lea rdx, str.OpenThemeData
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov rcx, qword [0x140148ee0]
lea rdx, str.CloseThemeData
mov qword [0x1401491a0], rax
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov rcx, qword [0x140148ee0]
lea rdx, str.GetThemeBackgroundContentRect
mov qword [0x1401491a8], rax
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov rcx, qword [0x140148ee0]
lea rdx, str.IsThemeBackgroundPartiallyTransparent
mov qword [0x1401491b0], rax
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov rcx, qword [0x140148ee0]
lea rdx, str.DrawThemeParentBackground
mov qword [0x1401491b8], rax
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov rcx, qword [0x140148ee0]
lea rdx, str.DrawThemeBackground
mov qword [0x1401491c0], rax
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov qword [0x1401491c8], rax
mov dword [0x140149040], 1
mov eax, dword [0x140148edc]
neg eax
sbb ebx, ebx
not ebx
and ebx, 0x200
cmp qword [0x140149048], 0
je 0x1400185ee
lea rdi, str.RICHEDIT50W
jmp 0x140018608
cmp qword [0x140149050], 0
lea rdi, str.RichEdit20W
lea rax, str.RichEdit
cmove rdi, rax
lea r9, [rsp + 0xb0]
lea r8, [rsp + 0xa8]
lea rdx, [rsp + 0xa0]
lea rcx, [rsp + 0x98]
call fcn.14001c42c
and qword [rsp + 0x58], 0
mov rax, qword [0x1401482c4]
mov r9d, dword [rsp + 0xb8]
mov qword [rsp + 0x50], rax
mov rax, qword [r14]
or r12, 0xffffffffffffffff
or r9d, 0x503111c4
xor r8d, r8d
mov qword [rsp + 0x48], r12
mov qword [rsp + 0x40], rax
mov eax, dword [rsp + 0xb0]
mov dword [rsp + 0x38], eax
mov eax, dword [rsp + 0xa8]
mov rdx, rdi
mov dword [rsp + 0x30], eax
mov eax, dword [rsp + 0xa0]
mov ecx, ebx
mov dword [rsp + 0x28], eax
mov eax, dword [rsp + 0x98]
mov dword [rsp + 0x20], eax
call qword [sym.imp.USER32.dll_CreateWindowExW]
mov rbx, rax
test rax, rax
je 0x1400187ee
mov rcx, qword [0x14014a320]
mov rdx, rsi
call fcn.14002baf4
lea edx, [r12 + 9]
lea r8d, [r12 + 0x11]
mov qword [rax + 0x30], r12
mov qword [rax + 0x28], r12
mov rcx, qword [r14 + 0x10]
mov qword [rax + 0x38], rcx
mov rcx, qword [0x1401482bc]
mov rdi, rax
call qword [sym.imp.KERNEL32.dll_HeapAlloc]
lea rdx, str.PB_ClientRect
mov rcx, rbx
mov r8, rax
call qword [sym.imp.USER32.dll_SetPropW]
xor r9d, r9d
mov r8, r12
mov edx, 0xc5
mov rcx, rbx
call qword [sym.imp.USER32.dll_SendMessageW]
lea r8d, [r12 + 2]
xor r9d, r9d
mov edx, 0x459
mov rcx, rbx
call qword [sym.imp.USER32.dll_SendMessageW]
lea r8, [0x140017fdc]
lea edx, [r12 - 3]
mov rcx, rbx
call qword [sym.imp.USER32.dll_SetWindowLongPtrW]
mov dword [rsp + 0x30], gethostname
and dword [rsp + 0x28], 0
and dword [rsp + 0x20], 0
xor r9d, r9d
xor r8d, r8d
xor edx, edx
mov rcx, rbx
mov qword [0x140149058], rax
call qword [sym.imp.USER32.dll_SetWindowPos]
mov r9d, 0x541
xor r8d, r8d
xor edx, edx
mov rcx, rbx
call qword [sym.imp.USER32.dll_RedrawWindow]
xor r9d, r9d
xor r8d, r8d
mov edx, 0x43b
mov rcx, rbx
call qword [sym.imp.USER32.dll_SendMessageW]
xor r8d, r8d
mov edx, 0x445
or rax, 1
mov rcx, rbx
mov r9, rax
call qword [sym.imp.USER32.dll_SendMessageW]
cmp qword [0x140149048], 0
je 0x1400187ba
lea r8d, [r12 + 5]
mov edx, 0x513
mov rcx, rbx
mov r9d, r8d
call qword [sym.imp.USER32.dll_SendMessageW]
lea r9, [0x140149060]
mov r8, rbx
mov rdx, rdi
mov rcx, rsi
call fcn.140019f30
mov edx, 0x10000000
mov rbx, rax
test dword [rsp + 0xb8], edx
je 0x1400187ee
mov r8d, 1
mov rcx, rdi
call fcn.1400188e4
call fcn.14001ee2c
mov rax, rbx
add rsp, 0x60
pop r14
pop r12
pop rdi
pop rsi
pop rbx
ret