Function at 0x14002d490
Capabilities:
Link many functions at runtime

Disassembly:
mov dword [rsp + 0x20], r9d
mov dword [rsp + 0x18], r8d
mov dword [rsp + 0x10], edx
push rbx
push rsi
push rdi
push r12
push r14
sub rsp, 0x60
mov rsi, rcx
mov rcx, qword [0x14018bd60]
call fcn.1400434f8
mov r14, rax
call fcn.140035064
call fcn.14002fd60
cmp dword [0x14018a360], 0
jne 0x14002d6cd
mov ebx, 0x140
lea rcx, [0x14018a380]
xor edx, edx
mov r8d, ebx
call sub.msvcrt.dll_memset
lea rax, [0x14002d048]
mov dword [0x14018a384], ebx
mov qword [0x14018a388], rax
lea rax, [0x14002ced8]
mov ebx, 0x800
mov qword [0x14018a3b8], rax
lea rax, [0x14002d424]
lea rcx, str.MSFTEDIT.DLL
mov qword [0x14018a3a8], rax
lea rax, [0x14002dc10]
mov r8d, ebx
mov qword [0x14018a3b0], rax
lea rax, [fcn.14002d0a0]
xor edx, edx
mov qword [0x14018a3e0], rax
lea rax, [fcn.14002d07c]
mov dword [0x14018a380], 0x16
mov qword [0x14018a3d0], rax
lea rax, [0x14002d908]
mov qword [0x14018a3c8], rax
lea rax, [0x14002d370]
mov qword [0x14018a3f8], rax
lea rax, [0x14002db40]
mov qword [0x14018a400], rax
lea rax, [0x14002d2f8]
mov qword [0x14018a448], rax
lea rax, [fcn.14002d9e8]
mov qword [0x14018a450], rax
lea rax, [0x14002d34c]
mov qword [0x14018a470], rax
lea rax, [fcn.14002da64]
mov qword [0x14018a468], rax
lea rax, [0x14002d368]
mov qword [0x14018a4a8], rax
lea rax, [0x14002db10]
mov qword [0x14018a4b0], rax
call qword [sym.imp.KERNEL32.dll_LoadLibraryExW]
lea rcx, str.RICHED20.DLL
mov r8d, ebx
xor edx, edx
mov qword [0x14018a368], rax
call qword [sym.imp.KERNEL32.dll_LoadLibraryExW]
mov qword [0x14018a370], rax
test rax, rax
jne 0x14002d618
lea rcx, str.RICHED32.DLL
mov r8d, ebx
xor edx, edx
call qword [sym.imp.KERNEL32.dll_LoadLibraryExW]
mov rcx, qword [0x140189e08]
test rcx, rcx
je 0x14002d6c3
lea rdx, str.OpenThemeData
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov rcx, qword [0x140189e08]
lea rdx, str.CloseThemeData
mov qword [0x14018a4c0], rax
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov rcx, qword [0x140189e08]
lea rdx, str.GetThemeBackgroundContentRect
mov qword [0x14018a4c8], rax
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov rcx, qword [0x140189e08]
lea rdx, str.IsThemeBackgroundPartiallyTransparent
mov qword [0x14018a4d0], rax
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov rcx, qword [0x140189e08]
lea rdx, str.DrawThemeParentBackground
mov qword [0x14018a4d8], rax
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov rcx, qword [0x140189e08]
lea rdx, str.DrawThemeBackground
mov qword [0x14018a4e0], rax
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov qword [0x14018a4e8], rax
mov dword [0x14018a360], 1
mov eax, dword [0x140189e04]
neg eax
sbb ebx, ebx
not ebx
and ebx, 0x200
cmp qword [0x14018a368], 0
je 0x14002d6f2
lea rdi, str.RICHEDIT50W
jmp 0x14002d70c
cmp qword [0x14018a370], 0
lea rdi, str.RichEdit20W
lea rax, str.RichEdit
cmove rdi, rax
lea r9, [rsp + 0xb0]
lea r8, [rsp + 0xa8]
lea rdx, [rsp + 0xa0]
lea rcx, [rsp + 0x98]
call fcn.1400362fc
and qword [rsp + 0x58], 0
mov rax, qword [0x14018935c]
mov r9d, dword [rsp + 0xb8]
mov qword [rsp + 0x50], rax
mov rax, qword [r14]
or r12, 0xffffffffffffffff
or r9d, 0x503111c4
xor r8d, r8d
mov qword [rsp + 0x48], r12
mov qword [rsp + 0x40], rax
mov eax, dword [rsp + 0xb0]
mov dword [rsp + 0x38], eax
mov eax, dword [rsp + 0xa8]
mov rdx, rdi
mov dword [rsp + 0x30], eax
mov eax, dword [rsp + 0xa0]
mov ecx, ebx
mov dword [rsp + 0x28], eax
mov eax, dword [rsp + 0x98]
mov dword [rsp + 0x20], eax
call qword [sym.imp.USER32.dll_CreateWindowExW]
mov rbx, rax
test rax, rax
je 0x14002d8f2
mov rcx, qword [0x14018b5e0]
mov rdx, rsi
call fcn.140043914
lea edx, [r12 + 9]
lea r8d, [r12 + 0x11]
mov qword [rax + 0x30], r12
mov qword [rax + 0x28], r12
mov rcx, qword [r14 + 0x10]
mov qword [rax + 0x38], rcx
mov rcx, qword [0x140189354]
mov rdi, rax
call qword [sym.imp.KERNEL32.dll_HeapAlloc]
lea rdx, str.PB_ClientRect
mov rcx, rbx
mov r8, rax
call qword [sym.imp.USER32.dll_SetPropW]
xor r9d, r9d
mov r8, r12
mov edx, 0xc5
mov rcx, rbx
call qword [sym.imp.USER32.dll_SendMessageW]
lea r8d, [r12 + 2]
xor r9d, r9d
mov edx, 0x459
mov rcx, rbx
call qword [sym.imp.USER32.dll_SendMessageW]
lea r8, [0x14002d0e0]
lea edx, [r12 - 3]
mov rcx, rbx
call qword [sym.imp.USER32.dll_SetWindowLongPtrW]
mov dword [rsp + 0x30], gethostname
and dword [rsp + 0x28], 0
and dword [rsp + 0x20], 0
xor r9d, r9d
xor r8d, r8d
xor edx, edx
mov rcx, rbx
mov qword [0x14018a378], rax
call qword [sym.imp.USER32.dll_SetWindowPos]
mov r9d, 0x541
xor r8d, r8d
xor edx, edx
mov rcx, rbx
call qword [sym.imp.USER32.dll_RedrawWindow]
xor r9d, r9d
xor r8d, r8d
mov edx, 0x43b
mov rcx, rbx
call qword [sym.imp.USER32.dll_SendMessageW]
xor r8d, r8d
mov edx, 0x445
or rax, 1
mov rcx, rbx
mov r9, rax
call qword [sym.imp.USER32.dll_SendMessageW]
cmp qword [0x14018a368], 0
je 0x14002d8be
lea r8d, [r12 + 5]
mov edx, 0x513
mov rcx, rbx
mov r9d, r8d
call qword [sym.imp.USER32.dll_SendMessageW]
lea r9, [0x14018a380]
mov r8, rbx
mov rdx, rdi
mov rcx, rsi
call fcn.14002fc04
mov edx, 0x10000000
mov rbx, rax
test dword [rsp + 0xb8], edx
je 0x14002d8f2
mov r8d, 1
mov rcx, rdi
call fcn.14002d9e8
call fcn.14003507c
mov rax, rbx
add rsp, 0x60
pop r14
pop r12
pop rdi
pop rsi
pop rbx
ret