Function at 0x1800369b0
Capabilities:
Log keystrokes via application hook

Disassembly:
push rbp
push r14
lea rbp, [rsp - 0x4f]
sub rsp, 0xb8
mov rax, qword [0x180080238]
xor rax, rsp
mov qword [rbp + 0x27], rax
mov rax, qword [rcx]
lea r8, [0x18005dc60]
mov qword [rsp + 0x58], rcx
lea rdx, str.ComparePlusProgressClass
mov qword [rsp + 0x50], rax
mov r14, rcx
xor eax, eax
mov r9d, 0x80c00000
mov qword [rsp + 0x48], rax
mov ecx, 0x40380
mov qword [rsp + 0x40], rax
mov dword [rsp + 0x38], 0x80000000
mov dword [rsp + 0x30], 0x80000000
mov dword [rsp + 0x28], 0x80000000
mov dword [rsp + 0x20], 0x80000000
call qword [sym.imp.USER32.dll_CreateWindowExW]
mov qword [r14 + 8], rax
mov rax, qword [r14 + 8]
test rax, rax
je 0x180036de5
mov qword [rsp + 0xd8], rbx
mov ecx, 0x4c
mov qword [rsp + 0xe0], rsi
mov qword [rsp + 0xe8], rdi
mov qword [rsp + 0xb0], r12
mov qword [rsp + 0xa8], r13
mov qword [rsp + 0xa0], r15
call qword [sym.imp.USER32.dll_GetSystemMetrics]
mov ecx, 0x4d
mov dword [rbp - 9], eax
mov ebx, eax
call qword [sym.imp.USER32.dll_GetSystemMetrics]
mov ecx, 0x4e
mov dword [rbp - 5], eax
mov r13d, eax
call qword [sym.imp.USER32.dll_GetSystemMetrics]
mov ecx, 0x4f
lea r12d, [rax + rbx]
mov dword [rbp - 1], r12d
call qword [sym.imp.USER32.dll_GetSystemMetrics]
mov rcx, qword [0x1800818d0]
lea rdx, [rbp + 0x17]
lea r15d, [rax + r13]
mov dword [rbp + 3], r15d
call qword [sym.imp.USER32.dll_GetWindowRect]
mov eax, dword [rbp + 0x1f]
add eax, dword [rbp + 0x17]
movaps xmm0, xmmword [rbp - 9]
cdq
mov rcx, qword [r14 + 8]
sub eax, edx
sar eax, 1
mov esi, eax
movdqa xmmword [rbp + 7], xmm0
mov eax, dword [rbp + 0x23]
add eax, dword [rbp + 0x1b]
cdq
sub eax, edx
mov edx, 0xffffffec
sar eax, 1
mov edi, eax
lea eax, [rbx + 0x262]
mov dword [rbp + 0xf], eax
mov rax, qword [rbp + 7]
shr rax, 0x20
add eax, 0x46
mov dword [rbp + 0x13], eax
call qword [sym.imp.USER32.dll_GetWindowLongPtrW]
mov rcx, qword [r14 + 8]
mov edx, 0xfffffff0
mov rbx, rax
call qword [sym.imp.USER32.dll_GetWindowLongPtrW]
mov r9d, ebx
lea rcx, [rbp + 7]
mov rdx, rax
xor r8d, r8d
call qword [sym.imp.USER32.dll_AdjustWindowRectEx]
mov r10d, dword [rbp + 0xf]
mov eax, r12d
mov ecx, dword [rbp + 0x13]
mov r8d, dword [rbp - 9]
sub eax, r8d
sub r10d, dword [rbp + 7]
sub ecx, dword [rbp + 0xb]
cmp r10d, eax
jge 0x180036b79
mov eax, r10d
cdq
sub eax, edx
sar eax, 1
sub esi, eax
cmp esi, r8d
cmovl esi, r8d
mov dword [rbp + 7], esi
lea r9d, [r10 + rsi]
mov dword [rbp + 0xf], r9d
cmp r9d, r12d
jle 0x180036b87
mov esi, r12d
sub esi, r10d
mov dword [rbp + 7], esi
jmp 0x180036b80
mov esi, r8d
mov dword [rbp + 7], r8d
mov dword [rbp + 0xf], r12d
mov r9d, r12d
mov r12, qword [rsp + 0xb0]
mov eax, r15d
sub eax, r13d
cmp ecx, eax
jge 0x180036bc1
mov eax, ecx
cdq
sub eax, edx
sar eax, 1
sub edi, eax
cmp edi, r13d
cmovl edi, r13d
mov dword [rbp + 0xb], edi
lea eax, [rcx + rdi]
mov dword [rbp + 0x13], eax
cmp eax, r15d
jle 0x180036bce
mov edi, r15d
sub edi, ecx
mov dword [rbp + 0xb], edi
jmp 0x180036bc8
mov edi, r13d
mov dword [rbp + 0xb], r13d
mov eax, r15d
mov dword [rbp + 0x13], eax
mov rcx, qword [r14 + 8]
sub eax, edi
sub r9d, esi
mov dword [rsp + 0x28], 1
mov r8d, edi
mov dword [rsp + 0x20], eax
mov edx, esi
call qword [sym.imp.USER32.dll_MoveWindow]
mov rcx, qword [r14 + 8]
lea rdx, [rbp + 7]
call qword [sym.imp.USER32.dll_GetClientRect]
mov rax, qword [r14]
lea r8, [0x18005cc28]
mov esi, dword [rbp + 0xf]
lea rdx, str.STATIC
sub esi, dword [rbp + 7]
xor r15d, r15d
mov edi, dword [rbp + 0x13]
mov r9d, 0x50008000
sub edi, dword [rbp + 0xb]
xor ecx, ecx
mov qword [rsp + 0x58], r15
mov qword [rsp + 0x50], rax
lea ebx, [rsi - 0xa]
mov rax, qword [r14 + 8]
mov qword [rsp + 0x48], r15
mov qword [rsp + 0x40], rax
mov dword [rsp + 0x38], 0x14
mov dword [rsp + 0x30], ebx
mov dword [rsp + 0x28], 5
mov dword [rsp + 0x20], 5
call qword [sym.imp.USER32.dll_CreateWindowExW]
mov qword [rsp + 0x58], r15
lea r8, str.Progress_Bar
mov qword [r14 + 0x20], rax
lea rdx, str.msctls_progress32
mov rax, qword [r14]
mov r9d, 0x50000001
mov qword [rsp + 0x50], rax
xor ecx, ecx
mov rax, qword [r14 + 8]
mov qword [rsp + 0x48], r15
mov qword [rsp + 0x40], rax
mov dword [rsp + 0x38], 0xa
mov dword [rsp + 0x30], ebx
mov dword [rsp + 0x28], 0x19
mov dword [rsp + 0x20], 5
call qword [sym.imp.USER32.dll_CreateWindowExW]
mov r9d, 0x640000
xor r8d, r8d
mov rcx, rax
mov qword [r14 + 0x28], rax
mov edx, 0x401
call qword [sym.imp.USER32.dll_SendMessageW]
mov rcx, qword [r14]
lea eax, [rsi - 0x50]
mov qword [rsp + 0x58], r15
lea r8d, [rdi - 0x1e]
mov qword [rsp + 0x50], rcx
cdq
mov rcx, qword [r14 + 8]
sub eax, edx
mov qword [rsp + 0x48], r15
lea rdx, str.BUTTON
mov qword [rsp + 0x40], rcx
mov r9d, 0x50000001
mov dword [rsp + 0x38], 0x19
xor ecx, ecx
mov dword [rsp + 0x30], 0x50
mov dword [rsp + 0x28], r8d
lea r8, [0x1800626e0]
sar eax, 1
mov dword [rsp + 0x20], eax
call qword [sym.imp.USER32.dll_CreateWindowExW]
lea ecx, [r15 + 0x11]
mov qword [r14 + 0x30], rax
call qword [sym.imp.GDI32.dll_GetStockObject]
mov r15, qword [rsp + 0xa0]
mov rbx, rax
mov r13, qword [rsp + 0xa8]
mov rdi, qword [rsp + 0xe8]
mov rsi, qword [rsp + 0xe0]
test rax, rax
je 0x180036d93
mov rcx, qword [r14 + 0x20]
mov r9d, 1
mov r8, rax
lea edx, [r9 + 0x2f]
call qword [sym.imp.USER32.dll_SendMessageW]
mov rcx, qword [r14 + 0x30]
mov r9d, 1
mov r8, rbx
lea edx, [r9 + 0x2f]
call qword [sym.imp.USER32.dll_SendMessageW]
call qword [sym.imp.KERNEL32.dll_GetCurrentThreadId]
mov r8, qword [r14]
lea rdx, [0x180036e00]
mov r9d, eax
mov ecx, 2
call qword [sym.imp.USER32.dll_SetWindowsHookExW]
mov rcx, qword [r14 + 8]
xor edx, edx
mov qword [r14 + 0x38], rax
call qword [sym.imp.USER32.dll_ShowWindow]
mov rcx, qword [r14 + 8]
xor r9d, r9d
mov r8d, 0x1f4
lea edx, [r9 + 1]
call qword [sym.imp.USER32.dll_SetTimer]
mov rbx, qword [rsp + 0xd8]
mov eax, 1
mov rcx, qword [rbp + 0x27]
xor rcx, rsp
call fcn.180037cc0
add rsp, 0xb8
pop r14
pop rbp
ret