Function at 0x14002e480
Capabilities:
Link many functions at runtime

Disassembly:
mov dword [rsp + 0x20], r9d
mov dword [rsp + 0x18], r8d
mov dword [rsp + 0x10], edx
push rbx
push rsi
push rdi
push r12
push r14
sub rsp, 0x60
mov rsi, rcx
mov rcx, qword [0x140505f40]
call fcn.140044250
mov r14, rax
call fcn.140036054
call fcn.140030d50
cmp dword [0x140504750], 0
jne 0x14002e6bd
mov ebx, 0x140
lea rcx, [0x140504770]
xor edx, edx
mov r8d, ebx
call sub.msvcrt.dll_memset
lea rax, [0x14002e038]
mov dword [0x140504774], ebx
mov qword [0x140504778], rax
lea rax, [0x14002dec8]
mov ebx, 0x800
mov qword [0x1405047a8], rax
lea rax, [0x14002e414]
lea rcx, str.MSFTEDIT.DLL
mov qword [0x140504798], rax
lea rax, [0x14002ec00]
mov r8d, ebx
mov qword [0x1405047a0], rax
lea rax, [fcn.14002e090]
xor edx, edx
mov qword [0x1405047d0], rax
lea rax, [fcn.14002e06c]
mov dword [0x140504770], 0x16
mov qword [0x1405047c0], rax
lea rax, [0x14002e8f8]
mov qword [0x1405047b8], rax
lea rax, [0x14002e360]
mov qword [0x1405047e8], rax
lea rax, [0x14002eb30]
mov qword [0x1405047f0], rax
lea rax, [0x14002e2e8]
mov qword [0x140504838], rax
lea rax, [fcn.14002e9d8]
mov qword [0x140504840], rax
lea rax, [0x14002e33c]
mov qword [0x140504860], rax
lea rax, [fcn.14002ea54]
mov qword [0x140504858], rax
lea rax, [0x14002e358]
mov qword [0x140504898], rax
lea rax, [0x14002eb00]
mov qword [0x1405048a0], rax
call qword [sym.imp.KERNEL32.dll_LoadLibraryExW]
lea rcx, str.RICHED20.DLL
mov r8d, ebx
xor edx, edx
mov qword [0x140504758], rax
call qword [sym.imp.KERNEL32.dll_LoadLibraryExW]
mov qword [0x140504760], rax
test rax, rax
jne 0x14002e608
lea rcx, str.RICHED32.DLL
mov r8d, ebx
xor edx, edx
call qword [sym.imp.KERNEL32.dll_LoadLibraryExW]
mov rcx, qword [0x1405041f8]
test rcx, rcx
je 0x14002e6b3
lea rdx, str.OpenThemeData
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov rcx, qword [0x1405041f8]
lea rdx, str.CloseThemeData
mov qword [0x1405048b0], rax
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov rcx, qword [0x1405041f8]
lea rdx, str.GetThemeBackgroundContentRect
mov qword [0x1405048b8], rax
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov rcx, qword [0x1405041f8]
lea rdx, str.IsThemeBackgroundPartiallyTransparent
mov qword [0x1405048c0], rax
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov rcx, qword [0x1405041f8]
lea rdx, str.DrawThemeParentBackground
mov qword [0x1405048c8], rax
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov rcx, qword [0x1405041f8]
lea rdx, str.DrawThemeBackground
mov qword [0x1405048d0], rax
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov qword [0x1405048d8], rax
mov dword [0x140504750], 1
mov eax, dword [0x1405041f4]
neg eax
sbb ebx, ebx
not ebx
and ebx, 0x200
cmp qword [0x140504758], 0
je 0x14002e6e2
lea rdi, str.RICHEDIT50W
jmp 0x14002e6fc
cmp qword [0x140504760], 0
lea rdi, str.RichEdit20W
lea rax, str.RichEdit
cmove rdi, rax
lea r9, [rsp + 0xb0]
lea r8, [rsp + 0xa8]
lea rdx, [rsp + 0xa0]
lea rcx, [rsp + 0x98]
call fcn.1400372ec
and qword [rsp + 0x58], 0
mov rax, qword [0x14050375c]
mov r9d, dword [rsp + 0xb8]
mov qword [rsp + 0x50], rax
mov rax, qword [r14]
or r12, 0xffffffffffffffff
or r9d, 0x503111c4
xor r8d, r8d
mov qword [rsp + 0x48], r12
mov qword [rsp + 0x40], rax
mov eax, dword [rsp + 0xb0]
mov dword [rsp + 0x38], eax
mov eax, dword [rsp + 0xa8]
mov rdx, rdi
mov dword [rsp + 0x30], eax
mov eax, dword [rsp + 0xa0]
mov ecx, ebx
mov dword [rsp + 0x28], eax
mov eax, dword [rsp + 0x98]
mov dword [rsp + 0x20], eax
call qword [sym.imp.USER32.dll_CreateWindowExW]
mov rbx, rax
test rax, rax
je 0x14002e8e2
mov rcx, qword [0x1405057c0]
mov rdx, rsi
call fcn.14004466c
lea edx, [r12 + 9]
lea r8d, [r12 + 0x11]
mov qword [rax + 0x30], r12
mov qword [rax + 0x28], r12
mov rcx, qword [r14 + 0x10]
mov qword [rax + 0x38], rcx
mov rcx, qword [0x140503754]
mov rdi, rax
call qword [sym.imp.KERNEL32.dll_HeapAlloc]
lea rdx, str.PB_ClientRect
mov rcx, rbx
mov r8, rax
call qword [sym.imp.USER32.dll_SetPropW]
xor r9d, r9d
mov r8, r12
mov edx, 0xc5
mov rcx, rbx
call qword [sym.imp.USER32.dll_SendMessageW]
lea r8d, [r12 + 2]
xor r9d, r9d
mov edx, 0x459
mov rcx, rbx
call qword [sym.imp.USER32.dll_SendMessageW]
lea r8, [0x14002e0d0]
lea edx, [r12 - 3]
mov rcx, rbx
call qword [sym.imp.USER32.dll_SetWindowLongPtrW]
mov dword [rsp + 0x30], gethostname
and dword [rsp + 0x28], 0
and dword [rsp + 0x20], 0
xor r9d, r9d
xor r8d, r8d
xor edx, edx
mov rcx, rbx
mov qword [0x140504768], rax
call qword [sym.imp.USER32.dll_SetWindowPos]
mov r9d, 0x541
xor r8d, r8d
xor edx, edx
mov rcx, rbx
call qword [sym.imp.USER32.dll_RedrawWindow]
xor r9d, r9d
xor r8d, r8d
mov edx, 0x43b
mov rcx, rbx
call qword [sym.imp.USER32.dll_SendMessageW]
xor r8d, r8d
mov edx, 0x445
or rax, 1
mov rcx, rbx
mov r9, rax
call qword [sym.imp.USER32.dll_SendMessageW]
cmp qword [0x140504758], 0
je 0x14002e8ae
lea r8d, [r12 + 5]
mov edx, 0x513
mov rcx, rbx
mov r9d, r8d
call qword [sym.imp.USER32.dll_SendMessageW]
lea r9, [0x140504770]
mov r8, rbx
mov rdx, rdi
mov rcx, rsi
call fcn.140030bf4
mov edx, 0x10000000
mov rbx, rax
test dword [rsp + 0xb8], edx
je 0x14002e8e2
mov r8d, 1
mov rcx, rdi
call fcn.14002e9d8
call fcn.14003606c
mov rax, rbx
add rsp, 0x60
pop r14
pop r12
pop rdi
pop rsi
pop rbx
ret