Function at 0x14003de60
Capabilities:
Log keystrokes
Log keystrokes via polling

Disassembly:
push rbx
sub rsp, 0x40
mov eax, dword [0x14004d6f4]
test eax, eax
jne 0x14003ddf7
mov rax, qword [0x14004d6d8]
xor ebx, ebx
mov qword [rax + 0x4aa0], rbx
mov qword [rax + 0x4aa8], rbx
mov dword [rax + 0x4a94], 1
or dword [rax + 0x4a90], 3
mov dword [rax + 0x4ab0], 0x43c80000
mov dword [rax + 0x4ab4], 0x43af0000
mov dword [rax + 0x4a98], 1
mov r8d, 0x127
lea rdx, [0x14004d0b4]
lea rcx, str.Login
call fcn.14000f0a0
mov rax, qword [0x14004d6d8]
mov rcx, qword [rax + 0x38]
mov rcx, qword [rcx + 0x60]
mov rcx, qword [rcx]
call fcn.140011db0
lea rcx, str.Login
call fcn.140034100
lea rcx, str.Enter_your_Telegram_ID
call fcn.140034100
mov rax, qword [0x14004d6d8]
mov r8, qword [rax + 0x4078]
cmp byte [r8 + 0xcf], bl
jne 0x14003dd36
mov edx, dword [r8 + 0x1cc]
mov eax, edx
neg eax
sbb ecx, ecx
add ecx, 2
cmp qword [r8 + 0x1c0], rbx
je 0x14003dd29
neg edx
sbb ecx, ecx
add ecx, 6
movss xmm1, dword [0x14004682c]
call fcn.140035a00
lea rcx, str.Telegram_ID
call fcn.140034100
mov qword [rsp + 0x50], rbx
mov qword [rsp + 0x38], rbx
mov qword [rsp + 0x30], rbx
mov dword [rsp + 0x28], ebx
lea rax, [rsp + 0x50]
mov qword [rsp + 0x20], rax
mov r9d, 0x40
lea r8, [0x14004d7e0]
xor edx, edx
lea rcx, [0x1400405d7]
call fcn.140039410
lea rcx, str.Go_to__simplechecker_bot_to_get_your_id
call fcn.140034100
mov rax, qword [0x14004d6d8]
mov rcx, qword [rax + 0x4078]
cmp qword [rcx + 0x1c0], rbx
jne 0x14003ddab
cmp qword [rax + 0x4e90], rbx
mov eax, 0x268
je 0x14003ddb0
mov eax, 0x238
movss xmm0, dword [rax + rcx]
subss xmm0, dword [rcx + 0x118]
movss dword [rsp + 0x50], xmm0
mov dword [rsp + 0x54], ebx
lea rdx, [rsp + 0x50]
lea rcx, str.Login
call fcn.140034a70
test al, al
je 0x14003dde6
mov dword [0x14004d6f4], 1
call fcn.140011e50
call fcn.1400115d0
nop
add rsp, 0x40
pop rbx
ret
cmp eax, 1
jne 0x14003de4d
mov dword [rsp + 0x30], 6
mov dword [rsp + 0x28], 0x258
mov dword [rsp + 0x20], 0x320
xor r9d, r9d
xor r8d, r8d
xor edx, edx
mov rcx, qword [0x14004d740]
call qword [sym.imp.USER32.dll_SetWindowPos]
mov dword [0x14004d7a0], 0x320
mov dword [0x14004d7a4], 0x258
call fcn.14003d0f0
nop
add rsp, 0x40
pop rbx
jmp 0x14003de60
add rsp, 0x40
pop rbx
ret
mov qword [rsp + 8], rbx
mov qword [rsp + 0x10], rsi
mov qword [rsp + 0x18], rdi
push rbp
lea rbp, [rsp - 0x57]
sub rsp, 0xb0
mov rax, qword [0x14004d040]
xor rax, rsp
mov qword [rbp + 0x4f], rax
mov rax, qword [0x14004d6d8]
xor edi, edi
mov qword [rax + 0x4aa0], rdi
mov qword [rax + 0x4aa8], rdi
mov dword [rax + 0x4a94], 1
or dword [rax + 0x4a90], 3
mov dword [rax + 0x4ab0], 0x447a0000
mov dword [rax + 0x4ab4], 0x442f0000
mov dword [rax + 0x4a98], 1
mov r8d, 0x127
lea rdx, [0x14004d0b4]
lea rcx, str.Main_Window
call fcn.14000f0a0
mov rax, qword [0x14004d6d8]
mov rcx, qword [rax + 0x38]
mov rcx, qword [rcx + 0x60]
mov rcx, qword [rcx]
call fcn.140011db0
mov qword [rbp - 0x29], 0x43480000
mov rcx, qword [0x14004d6d8]
mov rax, qword [rcx + 0x4078]
mov byte [rax + 0xcc], 1
mov rbx, qword [rcx + 0x4078]
movsxd rax, dword [rbx + 0x108]
mov r8, qword [rbx + 0x110]
mov r8d, dword [r8 + rax*4 - 4]
xor edx, edx
lea rcx, str.Sidebar
call fcn.140003520
mov esi, eax
mov rdx, qword [rbx]
cmp dword [rdx + 0x40cc], eax
jne 0x14003df65
lea r8, str.Sidebar
mov edx, 0xc
mov ecx, eax
call fcn.14001cce0
mov dword [rsp + 0x20], edi
lea r8, [rbp - 0x29]
mov edx, esi
lea rcx, str.Sidebar
call fcn.14000bdb0
mov dword [rbp - 0x29], 0x41200000
mov dword [rbp - 0x25], 0x41a00000
lea rdx, [rbp - 0x29]
mov ecx, 0xe
call fcn.140004d90
mov qword [rbp - 0x29], rdi
lea rdx, [rbp - 0x29]
lea rcx, str.Home
call fcn.140034a70
mov qword [rbp - 0x29], rdi
lea rdx, [rbp - 0x29]
lea rcx, str.Settings
call fcn.140034a70
mov qword [rbp - 0x29], rdi
lea rdx, [rbp - 0x29]
lea rcx, str.About
call fcn.140034a70
mov ecx, 1
call fcn.140004e20
call fcn.14000c010
movss xmm1, dword [0x1400468d8]
xorps xmm0, xmm0
call fcn.140015900
mov qword [rbp - 0x29], rdi
mov rcx, qword [0x14004d6d8]
mov rax, qword [rcx + 0x4078]
mov byte [rax + 0xcc], 1
mov rbx, qword [rcx + 0x4078]
movsxd rax, dword [rbx + 0x108]
mov r8, qword [rbx + 0x110]
mov r8d, dword [r8 + rax*4 - 4]
xor edx, edx
lea rcx, str.MainArea
call fcn.140003520
mov esi, eax
mov r8, qword [rbx]
cmp dword [r8 + 0x40cc], eax
jne 0x14003e054
lea r8, str.MainArea
mov edx, 0xc
mov ecx, eax
call fcn.14001cce0
mov dword [rsp + 0x20], edi
lea r8, [rbp - 0x29]
mov edx, esi
lea rcx, str.MainArea
call fcn.14000bdb0
lea rcx, str.AutoBhop_Settings
call fcn.140034100
mov rax, qword [0x14004d6d8]
mov r8, qword [rax + 0x4078]
cmp byte [r8 + 0xcf], dil
jne 0x14003e0ba
mov edx, dword [r8 + 0x1cc]
mov eax, edx
neg eax
sbb ecx, ecx
add ecx, 2
cmp qword [r8 + 0x1c0], rdi
je 0x14003e0ad
neg edx
sbb ecx, ecx
add ecx, 6
movss xmm1, dword [0x14004682c]
call fcn.140035a00
lea rcx, str.Input_Method:
call fcn.140034100
lea rax, str.Space__VK_SPACE_
mov qword [rbp - 1], rax
lea rax, str.Mouse_Wheel_Down
mov qword [rbp + 7], rax
mov dword [rsp + 0x20], 2
lea r9, [rbp - 1]
lea rdx, [0x14004d6f0]
lea rcx, str.InputMethod
call fcn.140036e80
lea rcx, str.Hotkey:
call fcn.140034100
lea rax, str.Mouse_Button_4
mov qword [rbp + 0xf], rax
lea rax, str.Mouse_Button_5
mov qword [rbp + 0x17], rax
lea rax, str.Space
mov qword [rbp + 0x1f], rax
lea rax, str.Custom
mov qword [rbp + 0x27], rax
mov dword [rsp + 0x20], 4
lea r9, [rbp + 0xf]
lea rdx, [0x14004d820]
lea rcx, str.HotkeyOption
call fcn.140036e80
cmp dword [0x14004d820], 3
jne 0x14003e27a
movzx eax, byte [0x14004d6d1]
test al, al
je 0x14003e188
movdqa xmm0, xmmword [0x140046b30]
movups xmmword [rbp - 0x29], xmm0
lea rdx, str.Press_any_key...
lea rcx, [rbp - 0x29]
call fcn.140034170
jmp 0x14003e200
movabs rax, 0x6e776f6e6b6e55
mov qword [rbp + 0x2f], rax
xorps xmm0, xmm0
xor eax, eax
movups xmmword [rbp + 0x37], xmm0
mov qword [rbp + 0x47], rax
xor edx, edx
mov ecx, dword [0x14004d0bc]
call qword [sym.imp.USER32.dll_MapVirtualKeyA]
shl eax, 0x10
mov r8d, 0x20
lea rdx, [rbp + 0x2f]
mov ecx, eax
call qword [sym.imp.USER32.dll_GetKeyNameTextA]
test eax, eax
jne 0x14003e1e0
lea r8, str.Unknown
mov edx, 0x20
lea rcx, [rbp + 0x2f]
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_strcpy_s]
mov qword [rbp - 0x29], rdi
lea rdx, [rbp - 0x29]
lea rcx, [rbp + 0x2f]
call fcn.140034a70
test al, al
je 0x14003e200
mov eax, 1
xchg byte [0x14004d6d1], al
movzx eax, byte [0x14004d6d1]
test al, al
je 0x14003e27a
mov ebx, 0x200
xor r8d, r8d
mov edx, 1
mov ecx, ebx
call fcn.140013200
test al, al
jne 0x14003e22f
inc ebx
cmp ebx, 0x29a
jl 0x14003e210
jmp 0x14003e23d
mov dword [0x14004d0bc], ebx
mov eax, edi
xchg byte [0x14004d6d1], al
mov ecx, 5
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
test ax, ax
je 0x14003e259
mov dword [0x14004d0bc], 5
jmp 0x14003e273
mov ecx, 6
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
test ax, ax
je 0x14003e27a
mov dword [0x14004d0bc], 6
xchg byte [0x14004d6d1], dil
movzx eax, byte [0x14004d6d2]
lea rdi, [rbp - 0x29]
test al, al
je 0x14003e293
movdqa xmm0, xmmword [0x140046b90]
jmp 0x14003e29b
movdqa xmm0, xmmword [0x140046b80]
movups xmmword [rbp - 0x29], xmm0
mov rbx, qword [0x14004d6d8]
mov dword [rbp - 0x19], 0x15
movups xmm0, xmmword [rbx + 0x3b40]
movups xmmword [rbp - 0x15], xmm0
lea rcx, [rbx + 0x4b08]
lea rdx, [rbp - 0x19]
call fcn.14001db00
cmp dword [rbx + 0x4b04], 0x15
je 0x14003e2db
movups xmm0, xmmword [rdi]
movups xmmword [rbx + 0x3b40], xmm0
mov rcx, qword [0x14004d6d8]
mov rax, qword [rcx + 0x4078]
cmp qword [rax + 0x1c0], 0
jne 0x14003e302
cmp qword [rcx + 0x4e90], 0
mov ecx, 0x268
je 0x14003e307
mov ecx, 0x238
movss xmm0, dword [rcx + rax]
subss xmm0, dword [rax + 0x118]
movss dword [rbp - 0x29], xmm0
mov dword [rbp - 0x25], 0
movzx eax, byte [0x14004d6d2]
lea rdx, str.Stop
lea rcx, str.Start
test al, al
cmovne rcx, rdx
lea rdx, [rbp - 0x29]
call fcn.140034a70
test al, al
je 0x14003e35a
movzx eax, byte [0x14004d6d2]
test al, al
sete al
xchg byte [0x14004d6d2], al
mov r8, qword [0x14004d6d8]
movsxd rax, dword [r8 + 0x4b08]
cmp eax, 1
jl 0x14003e397
lea rdx, [rax + rax*4]
mov rcx, qword [r8 + 0x4b10]
movsxd rax, dword [rcx + rdx*4 - 0x14]
add rax, 0x39f
add rax, rax
movups xmm2, xmmword [rcx + rdx*4 - 0x10]
movups xmmword [r8 + rax*8], xmm2
dec dword [r8 + 0x4b08]
lea rcx, str.Status:
call fcn.140034100
movss xmm1, dword [0x1400468d8]
xorps xmm0, xmm0
call fcn.140015900
movzx edx, byte [0x14004d6d2]
lea rax, str.Active
lea rcx, str.Inactive
test dl, dl
cmovne rcx, rax
movzx eax, byte [0x14004d6d2]
test al, al
lea rax, [rbp - 0x29]
je 0x14003e3e7
movdqa xmm0, xmmword [0x140046b20]
jmp 0x14003e3ef
movdqa xmm0, xmmword [0x140046ae0]
movups xmmword [rbp - 0x29], xmm0
mov rdx, rcx
mov rcx, rax
call fcn.140034170
call fcn.14000c010
call fcn.1400115d0
call fcn.140011e50
nop
mov rcx, qword [rbp + 0x4f]
xor rcx, rsp
call fcn.14003e980
lea r11, [rsp + 0xb0]
mov rbx, qword [r11 + 0x10]
mov rsi, qword [r11 + 0x18]
mov rdi, qword [r11 + 0x20]
mov rsp, r11
pop rbp
ret