rundll32
newslot int used; call kernel32.dll!GetSystemRegistryQuota /return int (nullptr, slotptr used); readslot used
call user32.dll!SetSysColors /return int (int 1, blockptr(int 8), blockptr(int 0xAA4400))