Function at 0x140007b20
Capabilities:
Create thread
Log keystrokes via polling

Disassembly:
push rbp
lea rbp, [rsp - 0x57]
sub rsp, 0xb0
mov rax, qword [0x140217c00]
xor rax, rsp
mov qword [rbp + 0x1f], rax
cmp byte [reloc.WS2_32.dll_accept], 0
je 0x140008799
cmp byte [0x140218ecc], 0
movss xmm1, dword [0x1400f0110]
movss xmm0, dword [0x140217014]
movss xmm2, dword [0x1400f0118]
jne 0x1400082c2
comiss xmm0, xmm2
jae 0x1400082c2
addss xmm0, dword [0x140217018]
movss dword [0x140217014], xmm0
mov byte [0x140218ecc], 0
cmp byte [0x140218ecd], 0
movss xmm1, dword [0x14021701c]
jne 0x1400082e7
comiss xmm1, xmm2
jae 0x1400082e7
addss xmm1, dword [0x140217020]
movss dword [0x14021701c], xmm1
mov byte [0x140218ecd], 0
mov ecx, dword [0x140218f30]
mov qword [rsp + 0xc0], rbx
movaps xmmword [rsp + 0xa0], xmm6
movaps xmmword [rsp + 0x90], xmm7
movaps xmmword [rsp + 0x80], xmm8
test ecx, ecx
je 0x140008314
cmp ecx, 1
jne 0x140008778
cmp byte [reloc.WS2_32.dll_accept], 0
mov qword [rsp + 0xc8], rsi
mov qword [rsp + 0xd8], r14
je 0x140007c2e
mov ecx, reloc.WS2_32.dll_WSACleanup
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
test ax, ax
je 0x140007c2e
mov dword [0x140218ec8], 0
call fcn.140020490
movss xmm7, dword [0x1400f00c8]
movss xmm1, dword [0x1400f00d0]
movaps xmm0, xmm7
movss xmm2, dword [0x140218ec8]
comiss xmm1, xmm2
subss xmm0, dword [rax + 0x10]
mulss xmm0, dword [0x1400f00c4]
ja 0x140007c63
xorps xmm1, xmm1
subss xmm1, xmm2
xor edx, edx
lea rcx, [rbp - 9]
mulss xmm1, xmm0
movss xmm0, dword [0x140217038]
movss dword [rbp - 9], xmm0
addss xmm1, xmm2
movss dword [0x140218ec8], xmm1
movss xmm1, dword [0x14021703c]
movss dword [rbp - 5], xmm1
call fcn.14002cd20
lea r8, [rbp - 9]
mov qword [rbp - 9], 0
mov edx, 2
mov qword [rbp - 0x29], 0
lea rcx, [rbp - 0x29]
call fcn.14002cc80
movss xmm8, dword [0x1400f00e8]
mov ecx, 2
movaps xmm1, xmm8
call fcn.140028a20
lea rdx, [rbp - 0x29]
mov qword [rbp - 0x29], 0
mov ecx, 1
call fcn.140028940
mov r8d, 0x3b
lea rdx, reloc.WS2_32.dll_accept
lea rcx, [0x1400efd80]
call fcn.14000cbc0
call fcn.1400075c0
call fcn.140020f70
lea rcx, [rbp + 7]
call fcn.140020fa0
lea rcx, [rbp + 0x17]
call fcn.140020fc0
lea rcx, [rbp - 0x29]
mov dword [rbp - 0x29], 0
mov dword [rbp - 0x25], 0x40a00000
call fcn.14002c800
movss xmm1, dword [0x140218ec8]
xor ecx, ecx
call fcn.140028a20
xor r9d, r9d
mov dword [rbp - 0x29], 0x43c80000
xor r8d, r8d
mov dword [rbp - 0x25], 0x43938000
lea rdx, [rbp - 0x29]
lea rcx, str.Mainframe
call fcn.14000f910
lea rcx, [rbp - 0x29]
mov qword [rbp - 0x29], 0x40a00000
call fcn.14002c800
xor r9d, r9d
mov dword [rbp - 0x29], 0x43c30000
xor r8d, r8d
mov dword [rbp - 0x25], 0x43938000
lea rdx, [rbp - 0x29]
lea rcx, str.Frame
call fcn.14000f910
movaps xmm0, xmmword [0x1400f0180]
lea rsi, str.Unlock_All
lea r14, [0x1400efde4]
mov qword [rbp - 9], rsi
lea rdx, [rbp - 0x19]
mov qword [rbp - 1], r14
mov ecx, 3
movups xmmword [rbp - 0x19], xmm0
call fcn.1400288e0
movaps xmm0, xmmword [0x1400f0150]
lea rdx, [rbp - 0x19]
mov ecx, reloc.WS2_32.dll_setsockopt
movups xmmword [rbp - 0x19], xmm0
call fcn.1400288e0
movaps xmm0, xmmword [0x1400f0150]
lea rdx, [rbp - 0x19]
mov ecx, socket
movups xmmword [rbp - 0x19], xmm0
call fcn.1400288e0
movaps xmm0, xmmword [0x1400f0150]
lea rdx, [rbp - 0x19]
movups xmmword [rbp - 0x19], xmm0
mov ecx, reloc.WS2_32.dll_socket
call fcn.1400288e0
movaps xmm0, xmmword [0x1400f0180]
lea rdx, [rbp - 0x19]
mov ecx, 7
movups xmmword [rbp - 0x19], xmm0
call fcn.1400288e0
cvttss2si eax, dword [0x14021701c]
mov dword [rbp - 0x19], 0x3ec0c0c2
lea rdx, [rbp - 0x19]
mov dword [rbp - 0x15], 0x3f33b3b4
mov ecx, 0x18
mov dword [rbp - 0x11], 0x3f800000
movups xmm1, xmmword [rbp - 0x19]
shufps xmm1, xmm1, 0x93
movd xmm0, eax
cvtdq2ps xmm0, xmm0
mulss xmm0, dword [0x1400f00c0]
movss xmm1, xmm0
shufps xmm1, xmm1, 0x39
movups xmmword [rbp - 0x19], xmm1
movups xmmword [rbp - 0x19], xmm1
call fcn.1400288e0
movaps xmm0, xmmword [0x1400f0140]
lea rdx, [rbp - 0x19]
mov ecx, 0x19
movups xmmword [rbp - 0x19], xmm0
call fcn.1400288e0
cvttss2si eax, dword [0x14021701c]
mov dword [rbp - 0x19], 0x3ec0c0c2
lea rdx, [rbp - 0x19]
mov dword [rbp - 0x15], 0x3f33b3b4
mov ecx, 0x1a
mov dword [rbp - 0x11], 0x3f800000
movups xmm1, xmmword [rbp - 0x19]
shufps xmm1, xmm1, 0x93
movd xmm0, eax
cvtdq2ps xmm0, xmm0
mulss xmm0, dword [0x1400f00c0]
movss xmm1, xmm0
shufps xmm1, xmm1, 0x39
movups xmmword [rbp - 0x19], xmm1
movups xmmword [rbp - 0x19], xmm1
call fcn.1400288e0
movaps xmm1, xmm8
mov ecx, ntohs
call fcn.140028a20
lea rcx, [rbp - 0x29]
mov dword [rbp - 0x29], 0x420c0000
mov dword [rbp - 0x25], 0x42a00000
call fcn.14002c800
movss xmm0, dword [0x1400f011c]
call fcn.1400287c0
mov rcx, qword [0x140217250]
call fcn.1400284b0
movsxd rdx, dword [0x140218f4c]
lea rcx, str.combo_label
xor r8d, r8d
mov rdx, qword [rbp + rdx*8 - 9]
call fcn.14004b680
xor ebx, ebx
test al, al
je 0x140007fd6
cmp dword [0x140218f4c], ebx
lea r9, [rbp - 9]
mov qword [rsp + 0xd0], rdi
mov rcx, rsi
sete dil
mov qword [rbp - 9], rbx
movzx edx, dil
xor r8d, r8d
call fcn.14004de10
test al, al
je 0x140007f85
mov dword [0x140218f4c], ebx
test dil, dil
je 0x140007f8f
call fcn.14002ca10
cmp dword [0x140218f4c], 1
lea r9, [rbp - 9]
mov rcx, r14
mov qword [rbp - 9], rbx
sete dil
xor r8d, r8d
movzx edx, dil
call fcn.14004de10
test al, al
je 0x140007fbf
mov dword [0x140218f4c], 1
test dil, dil
mov rdi, qword [rsp + 0xd0]
je 0x140007fd1
call fcn.14002ca10
call fcn.14004d020
mov ecx, 7
call fcn.140028230
call fcn.140027fb0
mov ecx, 1
call fcn.1400282e0
mov ecx, 1
call fcn.140028230
movaps xmm0, xmmword [0x1400f0180]
lea rdx, [rbp - 0x19]
mov ecx, 7
movups xmmword [rbp - 0x19], xmm0
call fcn.1400288e0
movaps xmm0, xmmword [0x1400f0150]
lea rdx, [rbp - 0x19]
mov ecx, reloc.WS2_32.dll_setsockopt
movups xmmword [rbp - 0x19], xmm0
call fcn.1400288e0
movaps xmm0, xmmword [0x1400f0150]
lea rdx, [rbp - 0x19]
mov ecx, socket
movups xmmword [rbp - 0x19], xmm0
call fcn.1400288e0
movaps xmm0, xmmword [0x1400f0150]
lea rdx, [rbp - 0x19]
mov ecx, reloc.WS2_32.dll_socket
movups xmmword [rbp - 0x19], xmm0
call fcn.1400288e0
movaps xmm1, xmm8
mov ecx, ntohs
call fcn.140028a20
cmp dword [0x140218f4c], ebx
movss xmm8, dword [0x1400f00f8]
movss xmm6, dword [0x1400f00f4]
mov r14, qword [rsp + 0xd8]
mov rsi, qword [rsp + 0xc8]
jne 0x140008190
cmp byte [0x140218eb0], bl
je 0x140008125
lea rcx, [rbp - 0x29]
call fcn.14001fe80
call fcn.14001fef0
movss xmm1, dword [rbp - 0x29]
mulss xmm1, xmm7
addss xmm0, xmm1
subss xmm0, xmm8
movss dword [rbp - 9], xmm0
call fcn.14001ff20
movss xmm1, dword [rbp - 0x25]
lea rcx, [rbp - 9]
mulss xmm1, xmm7
addss xmm0, xmm1
subss xmm0, xmm6
movss dword [rbp - 5], xmm0
call fcn.14002c800
movaps xmm0, xmmword [0x1400f0150]
lea rcx, [rbp - 0x19]
movups xmmword [rbp - 0x19], xmm0
call fcn.140012c20
lea r9, [rbp - 9]
mov dword [rbp - 9], eax
mov r8d, 3
lea rcx, str.spinner
movaps xmm1, xmm6
call fcn.140003f90
cmp byte [0x140218eb0], bl
jne 0x140008190
lea rcx, [rbp - 0x29]
mov dword [rbp - 0x29], 0x42480000
mov dword [rbp - 0x25], 0x43160000
call fcn.14002c800
mov rcx, qword [0x140217250]
call fcn.1400284b0
lea rdx, [rbp - 0x29]
mov dword [rbp - 0x29], 0x43910000
lea rcx, str.Load
mov dword [rbp - 0x25], 0x42480000
call fcn.14004c130
test al, al
je 0x14000818b
mov qword [rsp + 0x28], rbx
lea r9, str.https:__cdn.discordapp.com_attachments_1221665574330044416_1228222145675657287_CASTRO_UA.exe_ex6637c842is663676c2hm3f405b980287d6fc22b7b723f571efcd07badc800227226416cd5a7c0e3a34c9
lea r8, [0x1400011d0]
mov dword [rsp + 0x20], ebx
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateThread]
call fcn.140027fb0
cmp dword [0x140218f4c], 1
jne 0x140008295
cmp byte [0x140218eb0], bl
je 0x14000822a
lea rcx, [rbp - 0x29]
call fcn.14001fe80
call fcn.14001fef0
movss xmm1, dword [rbp - 0x29]
mulss xmm1, xmm7
addss xmm0, xmm1
subss xmm0, xmm8
movss dword [rbp - 9], xmm0
call fcn.14001ff20
movss xmm2, dword [rbp - 0x25]
lea rcx, [rbp - 9]
mulss xmm2, xmm7
addss xmm0, xmm2
subss xmm0, xmm6
movss dword [rbp - 5], xmm0
call fcn.14002c800
movaps xmm0, xmmword [0x1400f0150]
lea rcx, [rbp - 0x19]
movups xmmword [rbp - 0x19], xmm0
call fcn.140012c20
lea r9, [rbp - 9]
mov dword [rbp - 9], eax
mov r8d, 3
lea rcx, str.spinner
movaps xmm1, xmm6
call fcn.140003f90
cmp byte [0x140218eb0], bl
jne 0x140008295
lea rcx, [rbp - 0x29]
mov dword [rbp - 0x29], 0x42480000
mov dword [rbp - 0x25], 0x43160000
call fcn.14002c800
mov rcx, qword [0x140217250]
call fcn.1400284b0
lea rdx, [rbp - 0x29]
mov dword [rbp - 0x29], 0x43910000
lea rcx, str.Load
mov dword [rbp - 0x25], 0x42480000
call fcn.14004c130
test al, al
je 0x140008290
mov qword [rsp + 0x28], rbx
lea r9, str.https:__cdn.discordapp.com_attachments_1005575938706247690_1235964778585788466_AioUpdate.exe_ex66379ae6is66364966hmae0d13a0a2df7bf3244172dc6c7600d6e971406a0e2308899d822432ec4db3ee
lea r8, [0x1400011d0]
mov dword [rsp + 0x20], ebx
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateThread]
call fcn.140027fb0
mov ecx, 4
call fcn.140028230
mov ecx, 1
call fcn.1400282e0
call fcn.14001d270
mov ecx, 1
call fcn.1400282e0
call fcn.14001d270
jmp 0x140008769
comiss xmm1, xmm0
mov byte [0x140218ecc], 1
jae 0x140007b87
subss xmm0, dword [0x140217018]
movss dword [0x140217014], xmm0
jmp 0x140007b8e
movss xmm0, dword [0x1400f0114]
comiss xmm0, xmm1
mov byte [0x140218ecd], 1
jae 0x140007bbc
subss xmm1, dword [0x140217020]
movss dword [0x14021701c], xmm1
jmp 0x140007bc3
movss xmm0, dword [0x140217038]
lea rcx, [rbp - 0x29]
movss xmm1, dword [0x14021703c]
xor edx, edx
movss dword [rbp - 0x29], xmm0
movss dword [rbp - 0x25], xmm1
call fcn.14002cd20
lea r8, [rbp - 0x29]
mov qword [rbp - 0x29], 0
mov edx, 2
mov qword [rbp - 9], 0
lea rcx, [rbp - 9]
xorps xmm6, xmm6
call fcn.14002cc80
movss xmm1, dword [0x1400f00e8]
mov ecx, 2
call fcn.140028a20
lea rdx, [rbp - 0x29]
mov qword [rbp - 0x29], 0
mov ecx, 1
call fcn.140028940
mov r8d, 0x3b
lea rdx, reloc.WS2_32.dll_accept
lea rcx, [0x1400efd80]
call fcn.14000cbc0
call fcn.1400075c0
call fcn.140020f70
lea rcx, [rbp - 0x19]
call fcn.140020fa0
lea rcx, [rbp + 0x17]
call fcn.140020fc0
cmp byte [reloc.WS2_32.dll_accept], 0
je 0x1400083de
mov ecx, reloc.WS2_32.dll_WSACleanup
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
test ax, ax
je 0x1400083de
mov dword [0x140218ec8], 0
call fcn.140020490
movss xmm8, dword [0x1400f00c8]
movss xmm7, dword [0x1400f00d0]
movaps xmm0, xmm8
movss xmm1, dword [0x140218ec8]
comiss xmm7, xmm1
subss xmm0, dword [rax + 0x10]
mulss xmm0, dword [0x1400f00c4]
jbe 0x140008415
movaps xmm6, xmm7
subss xmm6, xmm1
mov qword [rbp - 0x29], 0
lea rcx, [rbp - 0x29]
mulss xmm6, xmm0
addss xmm6, xmm1
movss dword [0x140218ec8], xmm6
call fcn.14002c800
movss xmm1, dword [0x140218ec8]
xor ecx, ecx
call fcn.140028a20
xor r9d, r9d
mov dword [rbp - 0x29], 0x43c80000
xor r8d, r8d
mov dword [rbp - 0x25], 0x43960000
lea rdx, [rbp - 0x29]
lea rcx, str.settings_content
call fcn.14000f910
lea rcx, [rbp - 0x29]
mov qword [rbp - 0x29], 0x40a00000
call fcn.14002c800
xor r9d, r9d
mov dword [rbp - 0x29], 0x43c30000
xor r8d, r8d
mov dword [rbp - 0x25], 0x43858000
lea rdx, [rbp - 0x29]
lea rcx, str.Frame
call fcn.14000f910
movaps xmm1, xmm7
mov ecx, ntohs
call fcn.140028a20
movaps xmm1, xmm7
mov ecx, ntohs
call fcn.140028a20
mov rcx, qword [0x140217248]
call fcn.1400284b0
movss xmm1, dword [0x140218ec8]
xor ecx, ecx
call fcn.140028a20
movss xmm0, dword [0x1400f0120]
lea rdx, str.Castro_Unlocks
xor r9d, r9d
movss dword [rsp + 0x20], xmm0
xor r8d, r8d
lea rcx, [rbp + 7]
call fcn.140011800
lea rcx, [rbp - 9]
call fcn.14001fe80
movss xmm0, dword [rbp - 9]
lea rcx, [rbp - 0x29]
subss xmm0, dword [rbp + 7]
mov dword [rbp - 0x25], 0x42960000
mulss xmm0, xmm8
movss dword [rbp - 0x29], xmm0
call fcn.14002c800
cvttss2si eax, dword [0x14021701c]
lea rdx, str.Castro_Unlocks
mov dword [rbp + 7], 0x3dc0c0c2
lea rcx, [rbp + 7]
mov dword [rbp + 0xb], 0x3f2babac
mov dword [rbp + 0xf], 0x3d70f0f2
movss xmm6, dword [0x1400f00c0]
movups xmm0, xmmword [rbp + 7]
shufps xmm0, xmm0, 0x93
movd xmm1, eax
cvtdq2ps xmm1, xmm1
mulss xmm1, xmm6
movss xmm0, xmm1
shufps xmm0, xmm0, 0x39
movups xmmword [rbp + 7], xmm0
movups xmmword [rbp + 7], xmm0
call fcn.140051720
mov ecx, 1
call fcn.1400282e0
call fcn.140027fb0
lea rcx, [rbp - 0x29]
mov dword [rbp - 0x29], 0x435c0000
mov dword [rbp - 0x25], 0x43250000
call fcn.14002c800
movaps xmm0, xmmword [0x1400f0180]
lea rdx, [rbp + 7]
movups xmmword [rbp + 7], xmm0
mov ecx, reloc.WS2_32.dll_setsockopt
call fcn.1400288e0
cvttss2si eax, dword [0x14021701c]
mov dword [rbp + 7], 0x3dc0c0c2
lea rdx, [rbp + 7]
mov dword [rbp + 0xb], 0x3f2babac
mov ecx, socket
mov dword [rbp + 0xf], 0x3d70f0f2
movups xmm1, xmmword [rbp + 7]
shufps xmm1, xmm1, 0x93
movd xmm0, eax
cvtdq2ps xmm0, xmm0
mulss xmm0, xmm6
movss xmm1, xmm0
shufps xmm1, xmm1, 0x39
movups xmmword [rbp + 7], xmm1
movups xmmword [rbp + 7], xmm1
call fcn.1400288e0
cvttss2si eax, dword [0x14021701c]
mov dword [rbp + 7], 0x3dc0c0c2
lea rdx, [rbp + 7]
mov dword [rbp + 0xb], 0x3f2babac
mov ecx, reloc.WS2_32.dll_socket
mov dword [rbp + 0xf], 0x3d70f0f2
movups xmm1, xmmword [rbp + 7]
shufps xmm1, xmm1, 0x93
movd xmm0, eax
cvtdq2ps xmm0, xmm0
mulss xmm0, xmm6
movss xmm1, xmm0
shufps xmm1, xmm1, 0x39
movups xmmword [rbp + 7], xmm1
movups xmmword [rbp + 7], xmm1
call fcn.1400288e0
cmp byte [0x140218eb0], 0
je 0x1400086c3
lea rcx, [rbp + 7]
call fcn.14001fe80
call fcn.14001fef0
call fcn.14001ff20
lea rcx, [rbp - 0x29]
mov dword [rbp - 0x29], 0x43390000
mov dword [rbp - 0x25], 0x43480000
call fcn.14002c800
movaps xmm0, xmmword [0x1400f0150]
lea rcx, [rbp - 0x29]
movups xmmword [rbp - 0x29], xmm0
call fcn.140012c20
movss xmm1, dword [0x1400f00f4]
lea r9, [rbp - 9]
mov r8d, 3
mov dword [rbp - 9], eax
lea rcx, str.spinner
call fcn.140003f90
cmp dword [0x140218f48], 0
jne 0x1400086f5
xor ebx, ebx
lea r8, [0x140003f50]
mov qword [rsp + 0x28], rbx
xor r9d, r9d
xor edx, edx
mov dword [rsp + 0x20], ebx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateThread]
mov dword [0x140218f48], 1
mov ecx, 3
call fcn.140028230
mov ecx, 2
call fcn.1400282e0
lea rcx, [rbp - 0x29]
mov dword [rbp - 0x29], 0x40a00000
mov dword [rbp - 0x25], 0x43750000
call fcn.14002c800
call fcn.14001d270
call fcn.14001d270
movss xmm2, dword [section..data]
lea rcx, [rbp - 0x29]
mulss xmm2, dword [0x1400f0104]
movss xmm0, dword [rbp + 0x17]
movss xmm1, dword [rbp + 0x1b]
subss xmm0, xmm2
subss xmm1, xmm2
movss dword [rbp - 0x29], xmm0
movss dword [rbp - 0x25], xmm1
call fcn.14002c800
mov ecx, 1
call fcn.1400282e0
call fcn.14001cd70
mov ecx, 2
call fcn.1400282e0
movaps xmm7, xmmword [rsp + 0x90]
movaps xmm6, xmmword [rsp + 0xa0]
mov rbx, qword [rsp + 0xc0]
movaps xmm8, xmmword [rsp + 0x80]
mov rcx, qword [rbp + 0x1f]
xor rcx, rsp
call fcn.1400b5940
add rsp, 0xb0
pop rbp
ret