Function at 0x140075aa4
Capabilities:
Link many functions at runtime

Disassembly:
mov dword [rsp + 0x20], r9d
mov dword [rsp + 0x18], r8d
mov dword [rsp + 0x10], edx
push rbx
push rsi
push rdi
push r12
push r14
sub rsp, 0x60
mov rsi, rcx
mov rcx, qword [0x1401962a0]
call fcn.14008cc64
mov r14, rax
call fcn.140081070
call fcn.14007ac58
cmp dword [0x140194560], 0
jne 0x140075ce1
mov ebx, 0x140
lea rcx, [0x140194580]
xor edx, edx
mov r8d, ebx
call sub.msvcrt.dll_memset
lea rax, [0x14007565c]
mov dword [0x140194584], ebx
mov qword [0x140194588], rax
lea rax, [0x1400754ec]
mov ebx, 0x800
mov qword [0x1401945b8], rax
lea rax, [0x140075a38]
lea rcx, str.MSFTEDIT.DLL
mov qword [0x1401945a8], rax
lea rax, [0x140076224]
mov r8d, ebx
mov qword [0x1401945b0], rax
lea rax, [fcn.1400756b4]
xor edx, edx
mov qword [0x1401945e0], rax
lea rax, [fcn.140075690]
mov dword [0x140194580], 0x16
mov qword [0x1401945d0], rax
lea rax, [0x140075f1c]
mov qword [0x1401945c8], rax
lea rax, [0x140075984]
mov qword [0x1401945f8], rax
lea rax, [0x140076154]
mov qword [0x140194600], rax
lea rax, [0x14007590c]
mov qword [0x140194648], rax
lea rax, [fcn.140075ffc]
mov qword [0x140194650], rax
lea rax, [0x140075960]
mov qword [0x140194670], rax
lea rax, [fcn.140076078]
mov qword [0x140194668], rax
lea rax, [0x14007597c]
mov qword [0x1401946a8], rax
lea rax, [0x140076124]
mov qword [0x1401946b0], rax
call qword [sym.imp.KERNEL32.dll_LoadLibraryExW]
lea rcx, str.RICHED20.DLL
mov r8d, ebx
xor edx, edx
mov qword [0x140194568], rax
call qword [sym.imp.KERNEL32.dll_LoadLibraryExW]
mov qword [0x140194570], rax
test rax, rax
jne 0x140075c2c
lea rcx, str.RICHED32.DLL
mov r8d, ebx
xor edx, edx
call qword [sym.imp.KERNEL32.dll_LoadLibraryExW]
mov rcx, qword [0x140194c58]
test rcx, rcx
je 0x140075cd7
lea rdx, str.OpenThemeData
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov rcx, qword [0x140194c58]
lea rdx, str.CloseThemeData
mov qword [0x1401946c0], rax
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov rcx, qword [0x140194c58]
lea rdx, str.GetThemeBackgroundContentRect
mov qword [0x1401946c8], rax
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov rcx, qword [0x140194c58]
lea rdx, str.IsThemeBackgroundPartiallyTransparent
mov qword [0x1401946d0], rax
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov rcx, qword [0x140194c58]
lea rdx, str.DrawThemeParentBackground
mov qword [0x1401946d8], rax
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov rcx, qword [0x140194c58]
lea rdx, str.DrawThemeBackground
mov qword [0x1401946e0], rax
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov qword [0x1401946e8], rax
mov dword [0x140194560], 1
mov eax, dword [0x140194c54]
neg eax
sbb ebx, ebx
not ebx
and ebx, 0x200
cmp qword [0x140194568], 0
je 0x140075d06
lea rdi, str.RICHEDIT50W
jmp 0x140075d20
cmp qword [0x140194570], 0
lea rdi, str.RichEdit20W
lea rax, str.RichEdit
cmove rdi, rax
lea r9, [rsp + 0xb0]
lea r8, [rsp + 0xa8]
lea rdx, [rsp + 0xa0]
lea rcx, [rsp + 0x98]
call fcn.140082204
and qword [rsp + 0x58], 0
mov rax, qword [0x140192da0]
mov r9d, dword [rsp + 0xb8]
mov qword [rsp + 0x50], rax
mov rax, qword [r14]
or r12, 0xffffffffffffffff
or r9d, 0x503111c4
xor r8d, r8d
mov qword [rsp + 0x48], r12
mov qword [rsp + 0x40], rax
mov eax, dword [rsp + 0xb0]
mov dword [rsp + 0x38], eax
mov eax, dword [rsp + 0xa8]
mov rdx, rdi
mov dword [rsp + 0x30], eax
mov eax, dword [rsp + 0xa0]
mov ecx, ebx
mov dword [rsp + 0x28], eax
mov eax, dword [rsp + 0x98]
mov dword [rsp + 0x20], eax
call qword [sym.imp.USER32.dll_CreateWindowExW]
mov rbx, rax
test rax, rax
je 0x140075f06
mov rcx, qword [0x140196260]
mov rdx, rsi
call fcn.14008d4d4
lea edx, [r12 + 9]
lea r8d, [r12 + 0x11]
mov qword [rax + 0x30], r12
mov qword [rax + 0x28], r12
mov rcx, qword [r14 + 0x10]
mov qword [rax + 0x38], rcx
mov rcx, qword [0x140192da8]
mov rdi, rax
call qword [sym.imp.KERNEL32.dll_HeapAlloc]
lea rdx, str.PB_ClientRect
mov rcx, rbx
mov r8, rax
call qword [sym.imp.USER32.dll_SetPropW]
xor r9d, r9d
mov r8, r12
mov edx, 0xc5
mov rcx, rbx
call qword [sym.imp.USER32.dll_SendMessageW]
lea r8d, [r12 + 2]
xor r9d, r9d
mov edx, 0x459
mov rcx, rbx
call qword [sym.imp.USER32.dll_SendMessageW]
lea r8, [0x1400756f4]
lea edx, [r12 - 3]
mov rcx, rbx
call qword [sym.imp.USER32.dll_SetWindowLongPtrW]
mov dword [rsp + 0x30], gethostname
and dword [rsp + 0x28], 0
and dword [rsp + 0x20], 0
xor r9d, r9d
xor r8d, r8d
xor edx, edx
mov rcx, rbx
mov qword [0x140194578], rax
call qword [sym.imp.USER32.dll_SetWindowPos]
mov r9d, 0x541
xor r8d, r8d
xor edx, edx
mov rcx, rbx
call qword [sym.imp.USER32.dll_RedrawWindow]
xor r9d, r9d
xor r8d, r8d
mov edx, 0x43b
mov rcx, rbx
call qword [sym.imp.USER32.dll_SendMessageW]
xor r8d, r8d
mov edx, 0x445
or rax, 1
mov rcx, rbx
mov r9, rax
call qword [sym.imp.USER32.dll_SendMessageW]
cmp qword [0x140194568], 0
je 0x140075ed2
lea r8d, [r12 + 5]
mov edx, 0x513
mov rcx, rbx
mov r9d, r8d
call qword [sym.imp.USER32.dll_SendMessageW]
lea r9, [0x140194580]
mov r8, rbx
mov rdx, rdi
mov rcx, rsi
call fcn.14007a640
mov edx, 0x10000000
mov rbx, rax
test dword [rsp + 0xb8], edx
je 0x140075f06
mov r8d, 1
mov rcx, rdi
call fcn.140075ffc
call fcn.140081088
mov rax, rbx
add rsp, 0x60
pop r14
pop r12
pop rdi
pop rsi
pop rbx
ret