Function at 0x140003240
Capabilities:
Create thread

Disassembly:
mov rax, rsp
mov qword [rax + 8], rbx
mov qword [rax + 0x10], rsi
mov qword [rax + 0x18], rdi
push rbp
lea rbp, [rax - 0x5f]
sub rsp, 0x90
movaps xmmword [rax - 0x18], xmm6
mov rax, qword [0x1400e50c0]
xor rax, rsp
mov qword [rbp + 0x37], rax
xor esi, esi
cmp byte [reloc.WS2_32.dll_accept], sil
je 0x14000376a
xorps xmm6, xmm6
movss xmm0, dword [0x1400e5140]
movss xmm1, dword [0x1400e5144]
mov rcx, qword [0x1400e63a0]
mov eax, dword [rcx + 0x1dc0]
or eax, 1
mov dword [rcx + 0x1dc0], eax
unpcklps xmm0, xmm1
movsd qword [rcx + 0x1dd4], xmm0
xorps xmm1, xmm1
unpcklps xmm1, xmm6
movsd qword [rcx + 0x1ddc], xmm1
mov dword [rcx + 0x1dc4], 2
mov byte [rcx + 0x1dfc], 1
movss xmm0, dword [0x1400e5148]
movss xmm1, dword [0x1400e514c]
movss dword [rcx + 0x1de4], xmm0
movss dword [rcx + 0x1de8], xmm1
mov dword [rcx + 0x1dc8], 1
or eax, 0x42
mov dword [rcx + 0x1dc0], eax
mov dword [rcx + 0x1e20], 0x3f800000
cmp byte [reloc.WS2_32.dll_accept], sil
jne 0x140003366
lea rdx, str.TaskKill__f__im_AndroidEmulatorEn.exe
lea rcx, [rbp + 7]
call fcn.1400019b0
mov rcx, rax
call fcn.140001bd0
lea rdx, str.TaskKill__f__im_ProjectTitan.exe
lea rcx, [rbp + 7]
call fcn.1400019b0
mov rcx, rax
call fcn.140001bd0
lea rdx, str.del_C:hookdrv.sys
lea rcx, [rbp + 7]
call fcn.1400019b0
mov rcx, rax
call fcn.140001bd0
xor ecx, ecx
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_quick_exit]
int3
mov r8d, Ordinal_301
lea rdx, reloc.WS2_32.dll_accept
lea rcx, str._FREE_BYPASS_BLACKHOST_64BIT
call fcn.140011600
test al, al
je 0x140003765
mov dword [rbp - 9], 0x42dc0000
mov dword [rbp - 5], 0x41f00000
lea rdx, [rbp - 9]
lea rcx, str.Start_Gameloop
call fcn.140045530
lea rdi, [0x1400e5150]
test al, al
je 0x140003475
mov rax, qword [reloc.WS2_32.dll_ntohs]
cmp rax, 0x13
jb 0x1400033f6
mov rbx, rdi
cmp rax, 0xf
cmova rbx, qword [0x1400e5150]
mov qword [reloc.WS2_32.dll_getsockname], 0x13
mov r8d, reloc.WS2_32.dll_send
lea rdx, str.Gameloop_Processing
mov rcx, rbx
call sub.VCRUNTIME140.dll_memmove
mov byte [rbx + 0x13], sil
jmp 0x14000340a
lea r9, str.Gameloop_Processing
mov edx, reloc.WS2_32.dll_send
mov rcx, rdi
call fcn.140004400
mov ecx, 8
call fcn.1400b3c90
lea rcx, [0x140002180]
mov qword [rax], rcx
mov qword [rbp + 0x27], rax
lea rcx, [rbp + 0xf]
mov qword [rsp + 0x28], rcx
mov dword [rsp + 0x20], esi
mov r9, rax
lea r8, [0x1400046e0]
xor edx, edx
xor ecx, ecx
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__beginthreadex]
mov qword [rbp + 7], rax
test rax, rax
je 0x1400034db
cmp dword [rbp + 0xf], 0
je 0x1400034cf
movaps xmm0, xmmword [rbp + 7]
movdqa xmmword [rbp + 0x27], xmm0
lea rcx, [rbp + 0x27]
call qword [sym.imp.MSVCP140.dll__Thrd_detach]
test eax, eax
jne 0x1400034cf
xorps xmm0, xmm0
movdqa xmmword [rbp + 7], xmm0
lea rdx, [rbp - 9]
lea rcx, str.Start_BYPASS
call fcn.140045530
test al, al
je 0x140003565
mov rax, qword [reloc.WS2_32.dll_ntohs]
cmp rax, 0xc
jb 0x1400034ea
mov rbx, rdi
cmp rax, 0xf
cmova rbx, qword [0x1400e5150]
mov qword [reloc.WS2_32.dll_getsockname], 0xc
mov r8d, ntohl
lea rdx, str.Start_Bypass
mov rcx, rbx
call sub.VCRUNTIME140.dll_memmove
mov byte [rbx + 0xc], 0
jmp 0x1400034fe
mov ecx, 1
call qword [sym.imp.MSVCP140.dll_void___cdecl_std::_Throw_Cpp_error_int_]
nop
mov dword [rbp + 0xf], esi
mov ecx, 6
call qword [sym.imp.MSVCP140.dll_void___cdecl_std::_Throw_Cpp_error_int_]
nop
lea r9, str.Start_Bypass
mov edx, ntohl
mov rcx, rdi
call fcn.140004400
mov ecx, 8
call fcn.1400b3c90
lea rcx, [0x140002950]
mov qword [rax], rcx
mov qword [rbp + 0x27], rax
lea rcx, [rbp + 0xf]
mov qword [rsp + 0x28], rcx
mov dword [rsp + 0x20], esi
mov r9, rax
lea r8, [0x1400046e0]
xor edx, edx
xor ecx, ecx
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__beginthreadex]
mov qword [rbp + 7], rax
test rax, rax
je 0x1400035be
cmp dword [rbp + 0xf], 0
je 0x1400035b2
movaps xmm0, xmmword [rbp + 7]
movdqa xmmword [rbp + 0x27], xmm0
lea rcx, [rbp + 0x27]
call qword [sym.imp.MSVCP140.dll__Thrd_detach]
test eax, eax
jne 0x1400035b2
xorps xmm0, xmm0
movdqa xmmword [rbp + 7], xmm0
lea rdx, [rbp - 9]
lea rcx, str.Island
call fcn.140045530
test al, al
je 0x140003645
mov rax, qword [reloc.WS2_32.dll_ntohs]
mov rcx, rdi
cmp rax, 4
jb 0x1400035cd
cmp rax, 0xf
cmova rcx, qword [0x1400e5150]
mov qword [reloc.WS2_32.dll_getsockname], 4
mov eax, dword [str.wait]
mov dword [rcx], eax
mov byte [rcx + 4], 0
jmp 0x1400035de
mov ecx, 1
call qword [sym.imp.MSVCP140.dll_void___cdecl_std::_Throw_Cpp_error_int_]
nop
mov dword [rbp + 0xf], esi
mov ecx, 6
call qword [sym.imp.MSVCP140.dll_void___cdecl_std::_Throw_Cpp_error_int_]
nop
lea r9, str.wait
mov edx, 4
call fcn.140004400
mov ecx, 8
call fcn.1400b3c90
lea rcx, [0x140001ef0]
mov qword [rax], rcx
mov qword [rbp + 0x27], rax
lea rcx, [rbp + 0xf]
mov qword [rsp + 0x28], rcx
mov dword [rsp + 0x20], esi
mov r9, rax
lea r8, [0x1400046e0]
xor edx, edx
xor ecx, ecx
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__beginthreadex]
mov qword [rbp + 7], rax
test rax, rax
je 0x14000369e
cmp dword [rbp + 0xf], 0
je 0x140003692
movaps xmm0, xmmword [rbp + 7]
movdqa xmmword [rbp + 0x27], xmm0
lea rcx, [rbp + 0x27]
call qword [sym.imp.MSVCP140.dll__Thrd_detach]
test eax, eax
jne 0x140003692
xorps xmm0, xmm0
movdqa xmmword [rbp + 7], xmm0
lea rdx, [rbp - 9]
lea rcx, str.Win_die
call fcn.140045530
test al, al
je 0x140003725
mov rax, qword [reloc.WS2_32.dll_ntohs]
mov rcx, rdi
cmp rax, 4
jb 0x1400036ad
cmp rax, 0xf
cmova rcx, qword [0x1400e5150]
mov qword [reloc.WS2_32.dll_getsockname], 4
mov eax, dword [str.wait]
mov dword [rcx], eax
mov byte [rcx + 4], 0
jmp 0x1400036be
mov ecx, 1
call qword [sym.imp.MSVCP140.dll_void___cdecl_std::_Throw_Cpp_error_int_]
nop
mov dword [rbp + 0xf], esi
mov ecx, 6
call qword [sym.imp.MSVCP140.dll_void___cdecl_std::_Throw_Cpp_error_int_]
nop
lea r9, str.wait
mov edx, 4
call fcn.140004400
mov ecx, 8
call fcn.1400b3c90
lea rcx, [0x140002040]
mov qword [rax], rcx
mov qword [rbp + 0x27], rax
lea rcx, [rbp + 0xf]
mov qword [rsp + 0x28], rcx
mov dword [rsp + 0x20], esi
mov r9, rax
lea r8, [0x1400046e0]
xor edx, edx
xor ecx, ecx
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__beginthreadex]
mov qword [rbp + 7], rax
test rax, rax
je 0x1400037a0
cmp dword [rbp + 0xf], 0
je 0x140003794
movaps xmm0, xmmword [rbp + 7]
movdqa xmmword [rbp + 0x27], xmm0
lea rcx, [rbp + 0x27]
call qword [sym.imp.MSVCP140.dll__Thrd_detach]
test eax, eax
jne 0x140003794
lea rcx, str.Status_:
call fcn.140044c10
movss xmm1, dword [0x1400d433c]
xorps xmm0, xmm0
call fcn.1400163b0
cmp qword [reloc.WS2_32.dll_ntohs], 0xf
cmova rdi, qword [0x1400e5150]
mov rcx, rdi
call fcn.140044c10
lea rcx, str.join_Telegram_:___blackhostbaba
call fcn.140044c10
call fcn.140014850
mov rcx, qword [rbp + 0x37]
xor rcx, rsp
call fcn.1400b3c70
lea r11, [rsp + 0x90]
mov rbx, qword [r11 + 0x10]
mov rsi, qword [r11 + 0x18]
mov rdi, qword [r11 + 0x20]
movaps xmm6, xmmword [r11 - 0x10]
mov rsp, r11
pop rbp
ret
mov ecx, 1
call qword [sym.imp.MSVCP140.dll_void___cdecl_std::_Throw_Cpp_error_int_]
nop
mov dword [rbp + 0xf], esi
mov ecx, 6
call qword [sym.imp.MSVCP140.dll_void___cdecl_std::_Throw_Cpp_error_int_]
int3