Function at 0x1400077d0
Capabilities:
Create thread
Log keystrokes via polling

Disassembly:
mov rax, rsp
mov qword [rax + 8], rbx
mov qword [rax + 0x10], rsi
mov qword [rax + 0x18], rdi
push rbp
push r12
push r13
push r14
push r15
sub rsp, 0xf0
movaps xmmword [rax - 0x38], xmm6
lea rbp, [rsp + 0x50]
and rbp, 0xffffffffffffffe0
mov rax, qword [0x14024a650]
xor rax, rsp
mov qword [rbp + 0x80], rax
call qword [sym.imp.KERNEL32.dll_AllocConsole]
mov ecx, 1
call fcn.140113818
mov r8, rax
lea rdx, [0x140167b58]
lea rcx, str.CONOUT_
call fcn.1401136c8
mov ecx, 0x80
call fcn.14010ccc0
xorps xmm0, xmm0
mov rcx, rax
mov rdi, rax
movups xmmword [rax], xmm0
movups xmmword [rax + 0x10], xmm0
movups xmmword [rax + 0x20], xmm0
movups xmmword [rax + 0x30], xmm0
movups xmmword [rax + 0x40], xmm0
movups xmmword [rax + 0x50], xmm0
movups xmmword [rax + 0x60], xmm0
movups xmmword [rax + 0x70], xmm0
call fcn.14001e490
xor r12d, r12d
mov qword [rdi + 0x10], r12
mov qword [rdi + 0x18], r12
lea ecx, [r12 + 0x48]
call fcn.14010ccc0
lea ecx, [r12 + 0x48]
mov qword [rax], rax
mov qword [rax + 8], rax
mov qword [rax + 0x10], rax
mov word [rax + 0x18], 0x101
mov qword [rdi + 0x10], rax
mov qword [rdi + 0x20], r12
mov qword [rdi + 0x28], r12
call fcn.14010ccc0
lea rcx, [rdi + 8]
mov qword [rax], rax
mov qword [rax + 8], rax
mov qword [rax + 0x10], rax
mov word [rax + 0x18], 0x101
mov qword [rdi + 0x20], rax
mov qword [rdi + 0x30], r12
mov qword [rdi + 0x38], r12
mov qword [rdi + 0x40], r12
mov qword [rdi + 0x48], r12
mov qword [rdi + 0x50], r12
mov qword [rdi + 0x58], r12
mov qword [rdi + 0x60], r12
mov qword [rdi + 0x68], r12
mov qword [rdi + 0x70], r12
call fcn.140022560
mov rsi, qword [0x14024b518]
mov qword [0x14024b518], rdi
test rsi, rsi
je 0x140007923
lea rcx, [rsi + 0x30]
call fcn.1400073b0
lea rcx, [rsi + 0x20]
call fcn.140008370
lea rcx, [rsi + 0x10]
call fcn.140008370
mov edx, 0x80
mov rcx, rsi
call fcn.14010d01c
mov ecx, 0x58
call fcn.14010ccc0
mov rbx, rax
xorps xmm0, xmm0
xor eax, eax
lea rcx, [rbx + 0x18]
movabs rdx, 0xc94ab6e3792d76c
movabs r14, 0xc8332e1919d01e8d
mov qword [rbp + 0x78], rdx
movabs r15, 0xad81c3947411b5ba
movups xmmword [rbx], xmm0
mov qword [rbp], r14
mov rdi, 0xffffffffffffffff
movups xmmword [rbx + 0x10], xmm0
mov qword [rbp + 8], r15
mov r8, rdi
movups xmmword [rbx + 0x20], xmm0
mov qword [rbp + 0x18], rdx
movups xmmword [rbx + 0x30], xmm0
movups xmmword [rbx + 0x40], xmm0
mov qword [rbx + 0x50], rax
movabs rax, 0xf91c012369a46ae5
mov qword [rbp + 0x60], rax
movabs rax, 0x9caff3ba443f8288
mov qword [rbp + 0x68], rax
movabs rax, 0x8974e51bf68ccd65
mov qword [rbp + 0x70], rax
movabs rax, 0x8974e52bc6bcf85f
mov qword [rbp + 0x10], rax
lea rax, [rbp + 0x60]
vmovdqu ymm0, ymmword [rbp]
vpxor ymm1, ymm0, ymmword [rbp + 0x60]
vmovdqa ymmword [rbp + 0x60], ymm1
mov qword [rcx + 0x10], r12
mov qword [rcx + 0x18], reloc.WS2_32.dll_ntohs
vzeroupper
inc r8
cmp byte [rax + r8], r12b
jne 0x1400079e2
lea rdx, [rbp + 0x60]
call fcn.140008ae0
lea rcx, [rbx + 0x38]
xor r8d, r8d
lea rdx, [0x140167a90]
mov qword [rcx], r12
mov qword [rcx + 0x10], r12
mov qword [rcx + 0x18], reloc.WS2_32.dll_ntohs
call fcn.140008ae0
mov rsi, qword [0x14024b510]
mov qword [0x14024b510], rbx
test rsi, rsi
je 0x140007a63
mov rcx, qword [rsi + 0x10]
call qword [sym.imp.KERNEL32.dll_UnmapViewOfFile]
mov rcx, qword [rsi + 8]
call qword [sym.imp.KERNEL32.dll_CloseHandle]
lea rcx, [rsi + 0x38]
call fcn.140008a80
lea rcx, [rsi + 0x18]
call fcn.140008a80
mov edx, 0x58
mov rcx, rsi
call fcn.14010d01c
mov rbx, qword [0x14024b510]
mov rcx, rbx
call fcn.14000c2b0
test al, al
je 0x140007e75
mov rcx, qword [0x14024b510]
call fcn.14000d9d0
test al, al
je 0x140007e75
mov qword [rsp + 0x28], r12
lea r8, [0x1400074b0]
xor r9d, r9d
mov dword [rsp + 0x20], r12d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateThread]
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov ecx, reloc.WLDAP32.dll_Ordinal_35
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
test ax, ax
jne 0x140007d45
movsd xmm6, qword [0x14022bbb8]
movabs rsi, 0x311cdad160000
movabs r13, 0x7fffffffff67697f
movabs r15, 0x7fffffffffffffff
movabs r14, 0x112e0be826d694b3
mov rbx, qword [0x14024b518]
lea rcx, [rbp]
xor r9d, r9d
mov dword [rsp + 0x20], 1
xor r8d, r8d
xor edx, edx
call qword [sym.imp.USER32.dll_PeekMessageA]
test eax, eax
je 0x140007b52
nop word [rax + rax]
lea rcx, [rbp]
call qword [sym.imp.USER32.dll_TranslateMessage]
lea rcx, [rbp]
call qword [sym.imp.USER32.dll_DispatchMessageA]
xor r9d, r9d
mov dword [rsp + 0x20], 1
xor r8d, r8d
lea rcx, [rbp]
xor edx, edx
call qword [sym.imp.USER32.dll_PeekMessageA]
test eax, eax
jne 0x140007b20
lea rcx, [rbx + 8]
call fcn.140021910
call fcn.14002d0a0
call fcn.14002d5a0
movss xmm2, dword [0x14024b2b4]
lea r8, [0x14024e698]
movss xmm1, dword [0x14024b2ac]
movaps xmm0, xmm2
mulss xmm0, dword [0x14024b2a8]
xor r9d, r9d
mov rcx, qword [0x14024e710]
mulss xmm1, xmm2
movss dword [rbp + 0x40], xmm0
lea edx, [r9 + 1]
movss xmm0, dword [0x14024b2b0]
mulss xmm0, xmm2
movss dword [rbp + 0x44], xmm1
movss dword [rbp + 0x4c], xmm2
movss dword [rbp + 0x48], xmm0
mov rax, qword [rcx]
call qword [rax + 0x108]
mov rcx, qword [0x14024e710]
lea r8, [rbp + 0x40]
mov rdx, qword [0x14024e698]
mov rax, qword [rcx]
call qword [rax + 0x190]
mov rbx, qword [0x14024e750]
cmp dword [rbx + 0x4cb8], r12d
jg 0x140007c06
mov r8d, 0x7df
lea rdx, str.E:CodecppTangoTango_tangoguiimguiimgui.h
lea rcx, str.i___0__i___Size
call fcn.140114334
mov rax, qword [rbx + 0x4cc0]
mov rcx, qword [rax]
mov rax, r12
add rcx, 0xa8
cmp byte [rcx], r12b
cmovne rax, rcx
mov rcx, rax
call fcn.140064290
mov rcx, qword [0x14024e6a0]
xor r8d, r8d
mov rax, qword [rcx]
lea edx, [r8 + 1]
call qword [rax + 0x40]
call fcn.140109a9c
mov rbx, rax
call fcn.140109a80
cmp rbx, 0x989680
jne 0x140007c59
imul rax, rax, 0x64
jmp 0x140007c77
cqo
idiv rbx
mov rcx, rax
imul rax, rdx, 0x3b9aca00
imul rcx, rcx, 0x3b9aca00
cqo
idiv rbx
add rax, rcx
lea rdi, [rax + 0x989680]
cmp rax, r13
jl 0x140007c86
mov rdi, r15
call fcn.140109a9c
mov rbx, rax
call fcn.140109a80
cmp rbx, 0x989680
jne 0x140007ca2
imul rax, rax, 0x64
jmp 0x140007cc0
cqo
idiv rbx
mov rcx, rax
imul rax, rdx, 0x3b9aca00
imul rcx, rcx, 0x3b9aca00
cqo
idiv rbx
add rax, rcx
cmp rax, rdi
jge 0x140007d31
mov rbx, rdi
sub rbx, rax
call fcn.140109b9c
imul rdx, rax, 0x64
xorps xmm0, xmm0
cvtsi2sd xmm0, rbx
comisd xmm0, xmm6
lea rcx, [rdx + rsi]
seta r8b
test r8b, r8b
jne 0x140007cf1
lea rcx, [rdx + rbx]
lea rax, [rdx + rbx]
add rdx, rsi
test r8b, r8b
cmove rdx, rax
mov rax, r14
imul rdx
sar rdx, 0x1a
mov rax, rdx
shr rax, 0x3f
add rdx, rax
imul rax, rdx, 0x3b9aca00
mov qword [rbp + 0x60], rdx
sub ecx, eax
mov dword [rbp + 0x68], ecx
lea rcx, [rbp + 0x60]
call fcn.140109f38
jmp 0x140007c86
mov ecx, reloc.WLDAP32.dll_Ordinal_35
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
test ax, ax
je 0x140007af2
mov rsi, qword [0x14024ea20]
mov r15, qword [0x14024ea28]
cmp rsi, r15
je 0x140007e47
xorps xmm0, xmm0
lea rcx, [rbp]
xor eax, eax
mov rdx, rsi
movups xmmword [rbp], xmm0
mov qword [rbp + 0x30], rax
movups xmmword [rbp + 0x10], xmm0
movups xmmword [rbp + 0x20], xmm0
call fcn.1400084e0
mov r14, qword [rsi + 0x20]
xorps xmm0, xmm0
mov rdi, qword [rsi + 0x28]
mov rdx, r12
mov qword [rbp + 0x30], rdx
movdqu xmmword [rbp + 0x20], xmm0
cmp r14, rdi
je 0x140007dcf
sub rdi, r14
lea rcx, [rbp + 0x20]
mov rbx, rdi
sar rbx, 3
mov rdx, rbx
call fcn.140008700
mov r8, rdi
mov rdx, r14
mov rdi, qword [rbp + 0x20]
mov rcx, rdi
call fcn.14010f0e0
mov rdx, qword [rbp + 0x30]
lea r8, [rdi + rbx*8]
mov qword [rbp + 0x28], r8
jmp 0x140007dd7
mov r8, qword [rbp + 0x28]
mov rdi, qword [rbp + 0x20]
mov rcx, rdi
cmp rdi, r8
je 0x140007df0
nop
mov rax, qword [rcx]
add rcx, 8
mov byte [rax + 0x28], r12b
cmp rcx, r8
jne 0x140007de0
test rdi, rdi
je 0x140007e35
sub rdx, rdi
mov rax, rdi
and rdx, 0xfffffffffffffff8
cmp rdx, 0x1000
jb 0x140007e21
mov rdi, qword [rdi - 8]
add rdx, 0x27
sub rax, rdi
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140007f39
mov rcx, rdi
call fcn.14010d01c
xorps xmm0, xmm0
mov qword [rbp + 0x30], r12
movdqu xmmword [rbp + 0x20], xmm0
lea rcx, [rbp]
call fcn.140008a80
add rsi, 0x38
jmp 0x140007d53
mov rcx, qword [0x14024b510]
call fcn.14000ce50
call fcn.14001e9d0
call qword [sym.imp.KERNEL32.dll_FreeConsole]
mov ecx, 1
call fcn.140113818
mov rcx, rax
call fcn.140113b0c
jmp 0x140007f02
movabs rax, 0xba414b3971a46bcc
mov qword [rbp + 0x60], r14
mov qword [rbp + 0x40], rax
movabs rax, 0xad81c3947411c7d5
mov qword [rbp + 0x48], rax
lea rax, [rbp + 0x40]
movdqa xmm0, xmmword [rbp + 0x40]
mov qword [rbp + 0x68], r15
pxor xmm0, xmmword [rbp + 0x60]
movdqa xmmword [rbp + 0x40], xmm0
mov qword [rbp], r12
mov qword [rbp + 0x10], r12
mov qword [rbp + 0x18], reloc.WS2_32.dll_ntohs
nop dword [rax]
inc rdi
cmp byte [rax + rdi], r12b
jne 0x140007ec0
mov r8, rdi
lea rdx, [rbp + 0x40]
lea rcx, [rbp]
call fcn.140008ae0
cmp qword [rbp + 0x18], 0x10
lea rdx, [rbp]
lea r8, str.Tango_Logger
cmovae rdx, qword [rbp]
xor r9d, r9d
xor ecx, ecx
call qword [sym.imp.USER32.dll_MessageBoxA]
lea rcx, [rbp]
call fcn.140008a80
xor eax, eax
mov rcx, qword [rbp + 0x80]
xor rcx, rsp
call fcn.14010cca0
lea r11, [rsp + 0xf0]
mov rbx, qword [r11 + 0x30]
mov rsi, qword [r11 + 0x38]
mov rdi, qword [r11 + 0x40]
movaps xmm6, xmmword [r11 - 0x10]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rbp
ret
call fcn.140114790
int3