Function at 0x18003bfe0
Capabilities:
Log keystrokes via input method manager

Disassembly:
mov qword [rsp + 8], rbx
push rbp
push rsi
push rdi
push r12
push r13
push r14
push r15
sub rsp, 0x390
mov rax, qword [0x1800737f8]
xor rax, rsp
mov qword [rsp + 0x380], rax
mov ebx, dword [rsp + 0x38]
mov r14, rdx
mov qword [rsp + 0x80], rdx
mov rax, r9
imul edx, ecx, 0xa32
mov edi, ecx
mov qword [rsp + 0x90], rax
mov ebp, ecx
mov qword [rsp + 0x60], r8
mov dword [rsp + 0x58], ecx
mov dword [rsp + 0x40], ecx
mov dword [rsp + 0x34], edx
cmp ecx, edx
ja 0x18003c347
mov r15, qword [rsp + 0x60]
xor esi, esi
mov r12, qword [rsp + 0x60]
mov r13d, dword [rsp + 0x38]
mov dword [rsp + 0x48], ebx
nop dword [rax + rax]
cmp ebp, 0xbe0a
ja 0x18003c1b3
je 0x18003c1a8
cmp ebp, 0x116
ja 0x18003c14a
je 0x18003c0ff
mov eax, ebp
sub eax, 0x51
je 0x18003c0d7
sub eax, 0x79
je 0x18003c0cd
cmp eax, 0xc
jne 0x18003c3ce
mov rdx, qword [0x180073ee8]
mov r9d, 0x29
mov qword [rsp + 0x20], rdx
xor r8d, r8d
mov rcx, r14
mov eax, dword [rdx + 0xc]
lea rdx, [rsp + 0x38]
mov dword [rsp + 0x38], eax
call fcn.18003c740
cmp eax, 0xffffffff
setne sil
lea eax, [rsi - 1]
jmp 0x18003c349
mov byte [rsp + 0x30], 1
jmp 0x18003c3ce
lea r8, [rsp + 0x40]
mov dword [rsp + 0x40], 1
mov rdx, r14
mov ecx, 0x29
call fcn.18005c700
mov edx, dword [rsp + 0x34]
mov qword [rsp + 0x68], rax
jmp 0x18003c3ce
test r14, r14
je 0x18003c3f4
mov ecx, dword [r14 + 8]
mov edx, dword [rax]
add ecx, edx
cmp ecx, dword [0x180073ef0]
jg 0x18003c3f4
test edx, edx
js 0x18003c3f4
mov ecx, dword [r14 + 0xc]
mov edx, dword [r8]
add ecx, edx
cmp ecx, dword [0x180073ef4]
jg 0x18003c3f4
test edx, edx
js 0x18003c3f4
mov edx, dword [rsp + 0x34]
jmp 0x18003c3ce
cmp ebp, 0x11c
je 0x18003c3fe
cmp ebp, 0x375f
je 0x18003c182
cmp ebp, 0x8a16
jne 0x18003c3ce
mov qword [rsp + 0x88], 0xffffffffffffffff
mov r15, 0xffffffffffffffff
jmp 0x18003c3ce
mov rcx, qword [rsp + 0x68]
test rcx, rcx
je 0x18003c3ce
mov r8, rcx
xor edx, edx
mov ecx, 0x94
call fcn.180009290
mov edx, dword [rsp + 0x34]
jmp 0x18003c3ce
mov eax, dword [rax]
mov dword [r14 + 0x10], eax
jmp 0x18003c3ce
cmp ebp, 0x225fa
ja 0x18003c327
je 0x18003c233
cmp ebp, 0x11362
je 0x18003c218
cmp ebp, 0x17afe
je 0x18003c1fb
cmp ebp, 0x19cae
jne 0x18003c3ce
xor edx, edx
lea rcx, [rsp + 0xa0]
mov r8d, 0x2d8
call sub.VCRUNTIME140.dll_memset
mov edx, dword [rsp + 0x34]
jmp 0x18003c3ce
mov eax, dword [r8]
mov rdx, r14
mov ecx, 2
mov dword [r14 + 0x14], eax
call fcn.180055ad0
mov edx, dword [rsp + 0x34]
jmp 0x18003c3ce
xor r8d, r8d
xor edx, edx
mov rcx, r15
call qword [sym.imp.dbghelp.dll_SymInitialize]
mov edx, dword [rsp + 0x34]
mov dword [rsp + 0x4c], eax
jmp 0x18003c3ce
movzx eax, byte [rsp + 0x30]
mov ecx, esi
cmp dword [rsp + 0x4c], ecx
mov dword [rsp + 0x38], 0x2d8
cmovne ecx, eax
mov byte [rsp + 0x30], cl
cmp cl, 0
je 0x18003c3ce
mov r14, qword [rsp + 0x78]
mov edi, 0x1a
mov ebx, dword [rsp + 0x54]
mov ebp, dword [rsp + 0x50]
cmp edi, 0x1df
ja 0x18003c2a4
je 0x18003c2a0
cmp edi, 0x1a
je 0x18003c296
cmp edi, 0xb1
je 0x18003c291
cmp edi, 0x148
jne 0x18003c2eb
mov ebp, 0x80
mov r12, rsi
jmp 0x18003c2eb
mov r13d, esi
jmp 0x18003c2eb
mov r14, rsi
mov qword [rsp + 0x70], rsi
jmp 0x18003c2eb
mov ebx, esi
jmp 0x18003c2eb
cmp edi, 0x276
je 0x18003c2bf
cmp edi, 0x30d
jne 0x18003c2eb
mov rcx, r15
call qword [sym.imp.dbghelp.dll_SymCleanup]
jmp 0x18003c2eb
mov r9d, 3
mov qword [rsp + 0x20], r12
mov r8d, r13d
mov rdx, r14
mov rcx, r15
call qword [sym.imp.dbghelp.dll_SymGetTypeInfo]
mov rcx, qword [rsp + 0x70]
mov r9d, ebx
xor r8d, r8d
mov edx, ebp
call sub.IMM32.dll_ImmGetCompositionStringA
add edi, 0x97
cmp edi, 0x3a4
jb 0x18003c268
mov edi, dword [rsp + 0x58]
mov edx, dword [rsp + 0x34]
mov dword [rsp + 0x50], ebp
mov ebp, dword [rsp + 0x40]
mov dword [rsp + 0x54], ebx
mov ebx, dword [rsp + 0x48]
mov qword [rsp + 0x78], r14
mov r14, qword [rsp + 0x80]
jmp 0x18003c3ce
cmp ebp, 0x237f2
je 0x18003c3c8
cmp ebp, 0x2af46
je 0x18003c374
cmp ebp, 0x2f4e6
jne 0x18003c3ce
mov eax, ebx
mov rcx, qword [rsp + 0x380]
xor rcx, rsp
call fcn.1800604b0
mov rbx, qword [rsp + 0x3d0]
add rsp, 0x390
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbp
ret
mov r8d, dword [rsp + 0x38]
lea rdx, [rsp + 0xa0]
mov rcx, qword [rsp + 0x88]
call qword [sym.imp.WINMM.dll_joyGetDevCapsW]
mov rdx, qword [0x1800749d0]
cmp rdx, qword [0x1800749d8]
je 0x18003c3b3
mov rax, qword [r14]
mov qword [rdx], rax
add qword [0x1800749d0], 8
mov edx, dword [rsp + 0x34]
jmp 0x18003c3ce
mov r8, r14
lea rcx, [0x1800749c8]
call fcn.1800013c0
mov edx, dword [rsp + 0x34]
jmp 0x18003c3ce
mov ebx, esi
mov dword [rsp + 0x48], ebx
imul eax, edi, 0xae
add ebp, eax
mov dword [rsp + 0x40], ebp
cmp ebp, edx
ja 0x18003c347
mov rax, qword [rsp + 0x90]
mov r8, qword [rsp + 0x60]
jmp 0x18003c060
mov eax, 0xffffffff
jmp 0x18003c349
mov eax, dword [rax]
lea r8, [rsp + 0x38]
mov qword [rsp + 0x28], rsi
xor r9d, r9d
mov rdx, r14
mov dword [rsp + 0x38], eax
mov ecx, 0xb8
mov qword [rsp + 0x20], rsi
call fcn.18003d5d0
jmp 0x18003c349