Function at 0x1800735f0
Capabilities:
Log keystrokes via input method manager

Disassembly:
mov qword [rsp + 0x18], rbx
mov dword [rsp + 0x20], r9d
mov qword [rsp + 0x10], rdx
mov qword [rsp + 8], rcx
push rbp
push rsi
push rdi
push r12
push r13
push r14
push r15
lea rbp, [rsp - 0x27]
sub rsp, 0xa0
mov rsi, rcx
xor ebx, ebx
lea ecx, [r9 + 0x21c]
mov eax, r9d
mov dword [rbp - 0x21], eax
mov r15, r8
mov dword [rbp - 0x11], ecx
mov edi, r9d
lea r8, [0x180000000]
cmp r9d, ecx
jae 0x180073bf9
mov rcx, qword [rbp - 0x39]
mov r14d, dword [rbp + 0x7f]
mov r12, qword [rbp - 0x39]
movzx r13d, byte [rbp + 0x7f]
mov qword [rbp + 0xf], rcx
nop dword [rax + rax]
lea eax, [rdi - 0x4b]
cmp eax, 0xdb
ja case.0x180073682.90
movzx eax, byte [r8 + rax + 0x73da0]
mov ecx, dword [r8 + rax*4 + 0x73d60]
add rcx, r8
jmp rcx
mov rax, qword [r15]
lea r8, [rbp - 0x29]
mov edx, 0xc9
mov qword [rbp - 0x29], rax
mov rcx, qword [rax + 0xd0]
mov qword [rbp + 0xf], rcx
lea rcx, [0x1800f7070]
call fcn.180076df0
test eax, eax
je 0x180073b46
mov edx, 0xcb
nop dword [rax + rax]
mov eax, edx
sub eax, 0xca
je case.0x180073ba3.11
cmp eax, 1
jne 0x1800736e1
mov rax, qword [r15]
mov rcx, qword [rax + 0x90]
mov eax, dword [rcx]
mov dword [rbp - 0x31], eax
dec edx
cmp edx, 0xc9
ja 0x1800736c0
jmp 0x180073b46
mov rcx, qword [r15]
mov rdx, rsi
call qword [0x180110418]
mov qword [rbp - 0x31], rax
jmp 0x180073b46
mov qword [r15 + 0x20], rbx
jmp case.0x180073682.90
mov rax, qword [r15]
lea r8, [rbp - 0x29]
xor r9d, r9d
mov qword [rbp - 0x29], rax
mov edx, 0xce
xor ecx, ecx
call fcn.18002d060
test eax, eax
je 0x180073b46
mov ecx, 0x65
cmp ecx, 0x65
je 0x180073748
cmp ecx, 0x12f0
je case.0x180073ba3.11
jmp 0x18007374b
mov dword [rbp - 0x31], eax
add ecx, 0x128b
cmp ecx, 0x2516
jbe 0x180073735
jmp 0x180073b46
mov qword [r15 + 0x10], rbx
mov qword [r15 + 0x18], rbx
jmp case.0x180073682.90
cmp qword [rbp + 7], rbx
jne case.0x180073682.90
mov rax, qword [r15]
mov rcx, qword [rax + 0x10]
mov qword [rbp - 0x39], rcx
lea rax, [rbp - 0x39]
xor r9d, r9d
xor edx, edx
mov qword [rsp + 0x20], rax
xor ecx, ecx
mov r8d, 0x90
call fcn.18002e6b0
mov dword [rbp - 0x31], eax
jmp case.0x180073ba3.11
mov rax, qword [r15]
cmp qword [rax + 0xa0], rbx
jne 0x180073816
mov edi, 0x13
mov eax, edi
sub eax, 0x13
je 0x1800737d6
cmp eax, 1
jne 0x180073808
mov rax, qword [r15]
cmp qword [rax + 0xa0], rbx
jne 0x180073808
add rax, 0x48
mov qword [rbp - 0x39], rax
jmp 0x180073780
mov rcx, qword [r15]
lea r9, [rbp + 0x17]
xor r8d, r8d
lea rdx, [rbp - 0x29]
mov rax, qword [rcx + 0x20]
mov qword [rbp + 0x17], rax
mov rax, qword [rcx + 8]
mov ecx, 0xc1
mov qword [rbp - 0x29], rax
call fcn.18005dec0
mov rcx, qword [r15]
mov qword [rcx + 0xa0], rax
inc edi
cmp edi, 0x15
jb 0x1800737b4
mov edi, dword [rbp - 0x21]
mov rdx, qword [rbp + 0x6f]
mov rax, qword [r15]
lea r9, [rbp - 0x29]
mov r8d, 0x55
mov rcx, qword [rax + 0xa0]
mov qword [rbp - 0x29], rcx
mov rcx, rsi
call fcn.1800249d0
test eax, eax
je 0x180073b46
mov edi, 0x68
cmp edi, 0x68
je 0x180073856
cmp edi, 0x1a00
je case.0x180073ba3.11
jmp 0x18007387f
mov rax, qword [r15]
xor r9d, r9d
add rax, 0x48
xor edx, edx
mov qword [rbp - 0x29], rax
xor ecx, ecx
lea rax, [rbp - 0x29]
mov r8d, 0x90
mov qword [rsp + 0x20], rax
call fcn.18002e6b0
mov dword [rbp - 0x31], eax
add edi, 0x1998
cmp edi, 0x3330
jbe 0x180073843
mov edi, dword [rbp - 0x21]
jmp 0x180073b46
mov edx, dword [rbp - 0x19]
test edx, edx
je 0x180073b4d
mov ecx, 0xe2
nop word [rax + rax]
mov eax, ecx
sub eax, 0xe1
je case.0x180073ba3.11
cmp eax, 1
jne 0x1800738c5
mov dword [rbp - 0x31], edx
dec ecx
cmp ecx, 0xe0
ja 0x1800738b0
jmp 0x180073b4d
mov rax, qword [r15]
lea r9, [rbp - 0x21]
mov r8d, 0x7f
mov qword [rbp - 0x39], rax
lea rdx, [rbp - 0x39]
mov dword [rbp - 0x21], 1
lea rcx, [rbp - 0x29]
mov dword [rbp - 0x29], 1
call fcn.180015c00
mov dword [rbp - 0x31], eax
jmp 0x180073b46
mov rax, qword [r15]
lea rdx, [rbp - 0x39]
mov dword [rsp + 0x30], 0x126
lea rcx, [rbp - 0x29]
mov qword [rsp + 0x28], rbx
xor r9d, r9d
xor r8d, r8d
mov qword [rbp - 0x39], rax
mov qword [rsp + 0x20], rbx
mov dword [rbp - 0x29], ebx
call fcn.180008020
test eax, eax
je 0x180073bb0
mov eax, dword [rsi]
lea r9, [rbp - 0x39]
mov dword [rbp - 0x29], eax
lea rdx, [rbp - 0x29]
mov rax, qword [r15]
mov r8d, 0xac
mov rcx, qword [rax + 8]
mov qword [rbp - 0x39], rcx
xor ecx, ecx
call fcn.18001e100
mov qword [rbp + 7], rax
jmp 0x180073b46
mov rax, qword [r15]
lea r8, [rbp - 0x39]
xor edx, edx
mov qword [rbp - 0x39], rax
lea ecx, [rdx + 0x37]
call fcn.1800287b0
mov dword [rbp - 0x19], eax
jmp 0x180073b46
mov rax, qword [r15]
lea rcx, [rbp - 0x39]
xor r9d, r9d
mov qword [rbp - 0x39], rax
xor r8d, r8d
lea edx, [r9 + 0x31]
call fcn.180022fa0
test eax, eax
jne 0x180073b46
mov dword [rbp - 0x31], 0x100c
jmp case.0x180073ba3.11
xor r9d, r9d
xor r8d, r8d
xor edx, edx
mov ecx, 0xbe
call fcn.180025670
test al, al
jne 0x180073b46
mov esi, ebx
nop dword [rax]
nop dword [rax + rax]
lea r8, [0x180000000]
cmp esi, 0xe1
ja case.0x180073a09.6
mov eax, esi
movzx eax, byte [r8 + rax + 0x73e98]
mov ecx, dword [r8 + rax*4 + 0x73e7c]
add rcx, r8
jmp rcx
xor r9d, r9d
xor r8d, r8d
mov edx, r14d
mov rcx, r12
call sub.IMM32.dll_ImmGetCompositionStringW
mov dword [rbp - 0x15], eax
jmp 0x180073a90
mov r14d, 0x80
jmp case.0x180073a09.6
mov r13b, 1
mov r12, rbx
jmp case.0x180073a09.6
cmp dword [rbp - 0x15], ebx
mov ecx, ebx
movzx eax, r13b
cmovne ecx, eax
movzx r13d, cl
jmp case.0x180073a09.6
test r13b, r13b
je case.0x180073a09.6
mov edi, 0xb3
nop dword [rax]
cmp edi, 0xb3
je 0x180073a7c
cmp edi, 0x173
jne 0x180073a82
mov dword [rsp + 0x28], ebx
xor r9d, r9d
xor r8d, r8d
mov qword [rsp + 0x20], rbx
mov edx, r14d
mov rcx, r12
call sub.IMM32.dll_ImmSetCompositionStringW
jmp 0x180073a82
mov r14d, 0x12
add edi, 0xc0
cmp edi, 0x233
jb 0x180073a50
lea r8, [0x180000000]
add esi, 0x2d
lea eax, [rsi + 0x6e]
cmp eax, 0x17c
jb 0x1800739e0
mov edi, dword [rbp - 0x21]
mov rsi, qword [rbp + 0x67]
jmp 0x180073b4d
mov rcx, qword [r15]
call fcn.180069da0
test eax, eax
je 0x180073ae1
mov edx, 0x1a
mov ecx, edx
sub ecx, 0x1a
je 0x180073ad7
cmp ecx, 1
je case.0x180073ba3.11
jmp 0x180073ada
mov dword [rbp - 0x31], eax
inc edx
cmp edx, 0x1c
jb 0x180073ac5
mov eax, dword [0x1800cdf78]
lea rdx, [rbp - 9]
mov dword [rbp - 9], eax
lea rcx, [rbp - 0x39]
movzx eax, word [0x1800cdf7c]
mov r9d, 0xf7
mov word [rbp - 5], ax
xor r8d, r8d
mov rax, qword [r15]
mov qword [rbp - 0x39], rax
call fcn.180079d90
test eax, eax
je 0x180073b46
mov edx, 6
nop dword [rax + rax]
mov eax, edx
sub eax, 5
je case.0x180073ba3.11
cmp eax, 1
jne 0x180073b3f
mov rax, qword [r15]
mov rcx, qword [rax + 0x90]
mov eax, dword [rcx]
mov dword [rbp - 0x31], eax
dec edx
cmp edx, 4
ja 0x180073b20
lea r8, [0x180000000]
mov rdx, qword [rbp + 0x6f]
add edi, 0x24
mov dword [rbp - 0x21], edi
cmp edi, dword [rbp - 0x11]
jb 0x180073660
mov r14, qword [rbp + 0xf]
mov eax, dword [rbp + 0x7f]
lea esi, [rax - 0xf]
cmp eax, esi
jbe case.0x180073ba3.11
lea edi, [rax - 0x4a]
lea r12, [0x18006ae00]
lea r13, [0x18006add0]
cmp edi, 0x82
ja case.0x180073ba3.13
movzx eax, byte [r8 + rdi + 0x73fb4]
mov ecx, dword [r8 + rax*4 + 0x73f7c]
add rcx, r8
jmp rcx
mov dword [rbp - 0x31], 0x101c
jmp case.0x180073ba3.11
mov rax, rbx
jmp 0x180073d44
mov rax, qword [r15]
lea rdx, str.Open
mov r8, qword [rbp + 7]
lea rcx, [rbp - 0x39]
mov r9d, 0x96
mov qword [rbp - 0x39], rax
call fcn.18003a680
mov dword [rbp - 0x31], eax
jmp case.0x180073ba3.11
mov r14, qword [rbp - 0x39]
jmp 0x180073b67
mov rax, qword [r15]
mov dword [rax + 0x98], 1
jmp case.0x180073ba3.13
mov dword [r14 + 0x40238], 0xa
mov dword [r14 + 0x4023c], 0x6341
jmp case.0x180073ba3.13
mov dword [r14 + 0x40230], 0x1ae
mov dword [r14 + 0x40234], 1
jmp case.0x180073ba3.13
mov qword [r15 + 0x38], rbx
jmp case.0x180073ba3.13
mov rax, qword [r15]
lea r8, [rbp - 0x39]
xor r9d, r9d
mov qword [rbp - 0x39], rax
lea rcx, [0x1800ddf10]
lea edx, [r9 + 0x72]
call fcn.18002a760
jmp case.0x180073ba3.13
mov qword [r14 + 0x40228], r12
jmp case.0x180073ba3.13
lea rdx, [r14 + 0x4011c]
mov r9d, 0x153
lea rcx, [r14 + 0x4019b]
lea r8, str.Adobe
call fcn.18004d390
lea rdx, [r14 + 0x4019c]
mov r9d, 0x153
lea rcx, [r14 + 0x4021b]
lea r8, str.Korea1
call fcn.18004d390
jmp case.0x180073ba3.13
mov rax, qword [r15]
xor r9d, r9d
mov qword [rbp - 0x39], rax
xor r8d, r8d
lea rax, [rbp - 0x39]
mov edx, 0x11a
mov qword [rsp + 0x28], rax
xor ecx, ecx
mov qword [rsp + 0x20], rbx
call fcn.180027cf0
mov dword [rbp - 0x31], eax
jmp case.0x180073ba3.13
mov qword [r14 + 0x40220], r13
jmp case.0x180073ba3.13
mov dword [r15 + 0x28], ebx
mov qword [r15 + 0x30], rbx
jmp case.0x180073ba3.13
mov dword [r14 + 0x4021c], 1
dec edi
lea eax, [rdi + 0x4a]
cmp eax, esi
jbe case.0x180073ba3.11
lea r8, [0x180000000]
jmp 0x180073b83
mov eax, 0xde
cmp eax, 0xde
je 0x180073d3d
add eax, 0xa91a
cmp eax, 0xa91a
jbe 0x180073d28
jmp case.0x180073ba3.11
mov dword [rbp - 0x31], ebx
mov rax, qword [rbp - 0x31]
mov rbx, qword [rsp + 0xf0]
add rsp, 0xa0
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbp
ret