Function at 0x1400031e0
Capabilities:
Create thread

Disassembly:
mov rax, rsp
mov qword [rax + 8], rbx
mov qword [rax + 0x10], rsi
mov qword [rax + 0x18], rdi
push rbp
lea rbp, [rax - 0x5f]
sub rsp, 0x90
movaps xmmword [rax - 0x18], xmm6
mov rax, qword [0x1400e40c0]
xor rax, rsp
mov qword [rbp + 0x37], rax
xor esi, esi
cmp byte [reloc.WS2_32.dll_accept], sil
je 0x14000370a
xorps xmm6, xmm6
movss xmm0, dword [0x1400e4140]
movss xmm1, dword [0x1400e4144]
mov rcx, qword [0x1400e53a0]
mov eax, dword [rcx + 0x1dc0]
or eax, 1
mov dword [rcx + 0x1dc0], eax
unpcklps xmm0, xmm1
movsd qword [rcx + 0x1dd4], xmm0
xorps xmm1, xmm1
unpcklps xmm1, xmm6
movsd qword [rcx + 0x1ddc], xmm1
mov dword [rcx + 0x1dc4], 2
mov byte [rcx + 0x1dfc], 1
movss xmm0, dword [0x1400e4148]
movss xmm1, dword [0x1400e414c]
movss dword [rcx + 0x1de4], xmm0
movss dword [rcx + 0x1de8], xmm1
mov dword [rcx + 0x1dc8], 1
or eax, 0x42
mov dword [rcx + 0x1dc0], eax
mov dword [rcx + 0x1e20], 0x3f800000
cmp byte [reloc.WS2_32.dll_accept], sil
jne 0x140003306
lea rdx, str.TaskKill__f__im_AndroidEmulatorEn.exe
lea rcx, [rbp + 7]
call fcn.1400019e0
mov rcx, rax
call fcn.140001c00
lea rdx, str.TaskKill__f__im_ProjectTitan.exe
lea rcx, [rbp + 7]
call fcn.1400019e0
mov rcx, rax
call fcn.140001c00
lea rdx, str.del_C:hookdrv.sys
lea rcx, [rbp + 7]
call fcn.1400019e0
mov rcx, rax
call fcn.140001c00
xor ecx, ecx
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_quick_exit]
int3
mov r8d, Ordinal_301
lea rdx, reloc.WS2_32.dll_accept
lea rcx, str._FREE_BYPASS_BLACKHOST_64BIT
call fcn.140011400
test al, al
je 0x140003705
mov dword [rbp - 9], 0x42dc0000
mov dword [rbp - 5], 0x41f00000
lea rdx, [rbp - 9]
lea rcx, str.Start_Gameloop
call fcn.140045330
lea rdi, [0x1400e4150]
test al, al
je 0x140003415
mov rax, qword [reloc.WS2_32.dll_ntohs]
cmp rax, 0x13
jb 0x140003396
mov rbx, rdi
cmp rax, 0xf
cmova rbx, qword [0x1400e4150]
mov qword [reloc.WS2_32.dll_getsockname], 0x13
mov r8d, reloc.WS2_32.dll_send
lea rdx, str.Gameloop_Processing
mov rcx, rbx
call sub.VCRUNTIME140.dll_memmove
mov byte [rbx + 0x13], sil
jmp 0x1400033aa
lea r9, str.Gameloop_Processing
mov edx, reloc.WS2_32.dll_send
mov rcx, rdi
call fcn.140004200
mov ecx, 8
call fcn.1400b3100
lea rcx, [0x140002280]
mov qword [rax], rcx
mov qword [rbp + 0x27], rax
lea rcx, [rbp + 0xf]
mov qword [rsp + 0x28], rcx
mov dword [rsp + 0x20], esi
mov r9, rax
lea r8, [0x1400044e0]
xor edx, edx
xor ecx, ecx
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__beginthreadex]
mov qword [rbp + 7], rax
test rax, rax
je 0x14000347b
cmp dword [rbp + 0xf], 0
je 0x14000346f
movaps xmm0, xmmword [rbp + 7]
movdqa xmmword [rbp + 0x27], xmm0
lea rcx, [rbp + 0x27]
call qword [sym.imp.MSVCP140.dll__Thrd_detach]
test eax, eax
jne 0x14000346f
xorps xmm0, xmm0
movdqa xmmword [rbp + 7], xmm0
lea rdx, [rbp - 9]
lea rcx, str.Start_BYPASS
call fcn.140045330
test al, al
je 0x140003505
mov rax, qword [reloc.WS2_32.dll_ntohs]
cmp rax, 0xc
jb 0x14000348a
mov rbx, rdi
cmp rax, 0xf
cmova rbx, qword [0x1400e4150]
mov qword [reloc.WS2_32.dll_getsockname], 0xc
mov r8d, listen
lea rdx, str.Start_Bypass
mov rcx, rbx
call sub.VCRUNTIME140.dll_memmove
mov byte [rbx + 0xc], 0
jmp 0x14000349e
mov ecx, 1
call qword [sym.imp.MSVCP140.dll_void___cdecl_std::_Throw_Cpp_error_int_]
nop
mov dword [rbp + 0xf], esi
mov ecx, 6
call qword [sym.imp.MSVCP140.dll_void___cdecl_std::_Throw_Cpp_error_int_]
nop
lea r9, str.Start_Bypass
mov edx, listen
mov rcx, rdi
call fcn.140004200
mov ecx, 8
call fcn.1400b3100
lea rcx, [0x140002a00]
mov qword [rax], rcx
mov qword [rbp + 0x27], rax
lea rcx, [rbp + 0xf]
mov qword [rsp + 0x28], rcx
mov dword [rsp + 0x20], esi
mov r9, rax
lea r8, [0x1400044e0]
xor edx, edx
xor ecx, ecx
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__beginthreadex]
mov qword [rbp + 7], rax
test rax, rax
je 0x14000355e
cmp dword [rbp + 0xf], 0
je 0x140003552
movaps xmm0, xmmword [rbp + 7]
movdqa xmmword [rbp + 0x27], xmm0
lea rcx, [rbp + 0x27]
call qword [sym.imp.MSVCP140.dll__Thrd_detach]
test eax, eax
jne 0x140003552
xorps xmm0, xmm0
movdqa xmmword [rbp + 7], xmm0
lea rdx, [rbp - 9]
lea rcx, str.Island
call fcn.140045330
test al, al
je 0x1400035e5
mov rax, qword [reloc.WS2_32.dll_ntohs]
mov rcx, rdi
cmp rax, 4
jb 0x14000356d
cmp rax, 0xf
cmova rcx, qword [0x1400e4150]
mov qword [reloc.WS2_32.dll_getsockname], 4
mov eax, dword [str.wait]
mov dword [rcx], eax
mov byte [rcx + 4], 0
jmp 0x14000357e
mov ecx, 1
call qword [sym.imp.MSVCP140.dll_void___cdecl_std::_Throw_Cpp_error_int_]
nop
mov dword [rbp + 0xf], esi
mov ecx, 6
call qword [sym.imp.MSVCP140.dll_void___cdecl_std::_Throw_Cpp_error_int_]
nop
lea r9, str.wait
mov edx, 4
call fcn.140004200
mov ecx, 8
call fcn.1400b3100
lea rcx, [0x140001ff0]
mov qword [rax], rcx
mov qword [rbp + 0x27], rax
lea rcx, [rbp + 0xf]
mov qword [rsp + 0x28], rcx
mov dword [rsp + 0x20], esi
mov r9, rax
lea r8, [0x1400044e0]
xor edx, edx
xor ecx, ecx
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__beginthreadex]
mov qword [rbp + 7], rax
test rax, rax
je 0x14000363e
cmp dword [rbp + 0xf], 0
je 0x140003632
movaps xmm0, xmmword [rbp + 7]
movdqa xmmword [rbp + 0x27], xmm0
lea rcx, [rbp + 0x27]
call qword [sym.imp.MSVCP140.dll__Thrd_detach]
test eax, eax
jne 0x140003632
xorps xmm0, xmm0
movdqa xmmword [rbp + 7], xmm0
lea rdx, [rbp - 9]
lea rcx, str.Win_die
call fcn.140045330
test al, al
je 0x1400036c5
mov rax, qword [reloc.WS2_32.dll_ntohs]
mov rcx, rdi
cmp rax, 4
jb 0x14000364d
cmp rax, 0xf
cmova rcx, qword [0x1400e4150]
mov qword [reloc.WS2_32.dll_getsockname], 4
mov eax, dword [str.wait]
mov dword [rcx], eax
mov byte [rcx + 4], 0
jmp 0x14000365e
mov ecx, 1
call qword [sym.imp.MSVCP140.dll_void___cdecl_std::_Throw_Cpp_error_int_]
nop
mov dword [rbp + 0xf], esi
mov ecx, 6
call qword [sym.imp.MSVCP140.dll_void___cdecl_std::_Throw_Cpp_error_int_]
nop
lea r9, str.wait
mov edx, 4
call fcn.140004200
mov ecx, 8
call fcn.1400b3100
lea rcx, [0x140002140]
mov qword [rax], rcx
mov qword [rbp + 0x27], rax
lea rcx, [rbp + 0xf]
mov qword [rsp + 0x28], rcx
mov dword [rsp + 0x20], esi
mov r9, rax
lea r8, [0x1400044e0]
xor edx, edx
xor ecx, ecx
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__beginthreadex]
mov qword [rbp + 7], rax
test rax, rax
je 0x140003740
cmp dword [rbp + 0xf], 0
je 0x140003734
movaps xmm0, xmmword [rbp + 7]
movdqa xmmword [rbp + 0x27], xmm0
lea rcx, [rbp + 0x27]
call qword [sym.imp.MSVCP140.dll__Thrd_detach]
test eax, eax
jne 0x140003734
lea rcx, str.Status_:
call fcn.140044a10
movss xmm1, dword [0x1400d3274]
xorps xmm0, xmm0
call fcn.1400161b0
cmp qword [reloc.WS2_32.dll_ntohs], 0xf
cmova rdi, qword [0x1400e4150]
mov rcx, rdi
call fcn.140044a10
lea rcx, str.join_Telegram_:___blackhostbaba
call fcn.140044a10
call fcn.140014650
mov rcx, qword [rbp + 0x37]
xor rcx, rsp
call fcn.1400b30e0
lea r11, [rsp + 0x90]
mov rbx, qword [r11 + 0x10]
mov rsi, qword [r11 + 0x18]
mov rdi, qword [r11 + 0x20]
movaps xmm6, xmmword [r11 - 0x10]
mov rsp, r11
pop rbp
ret
mov ecx, 1
call qword [sym.imp.MSVCP140.dll_void___cdecl_std::_Throw_Cpp_error_int_]
nop
mov dword [rbp + 0xf], esi
mov ecx, 6
call qword [sym.imp.MSVCP140.dll_void___cdecl_std::_Throw_Cpp_error_int_]
int3