Function at 0x140008930
Capabilities:
Contain obfuscated stackstrings

Disassembly:
mov qword [rsp + 0x10], rbx
mov qword [rsp + 0x18], rdi
mov qword [rsp + 8], rcx
push rbp
lea rbp, [rsp - 0x57]
sub rsp, 0xb0
mov rbx, rcx
xorps xmm0, xmm0
movups xmmword [rcx], xmm0
xor edi, edi
mov qword [rcx + 0x10], 9
mov qword [rcx + 0x18], reloc.WS2_32.dll_ntohs
movsd xmm0, qword [str.illusion.]
movsd qword [rcx], xmm0
movzx eax, byte [0x1401f7460]
mov byte [rcx + 8], al
mov byte [rcx + 9], dil
xorps xmm0, xmm0
movups xmmword [rcx + 0x20], xmm0
mov qword [rcx + 0x30], rdi
mov qword [rcx + 0x38], rdi
mov ecx, 0x20
call fcn.14015d5ac
mov qword [rbx + 0x20], rax
mov qword [rbx + 0x30], 0x19
mov qword [rbx + 0x38], 0x1f
movups xmm0, xmmword [str.Dreamin_in_the_illusion.]
movups xmmword [rax], xmm0
movsd xmm0, qword [0x1401f7478]
movsd qword [rax + 0x10], xmm0
movzx ecx, byte [0x1401f7480]
mov byte [rax + 0x18], cl
mov byte [rax + 0x19], dil
xorps xmm0, xmm0
movups xmmword [rbx + 0x40], xmm0
mov qword [rbx + 0x50], 0xa
mov qword [rbx + 0x58], reloc.WS2_32.dll_ntohs
movsd xmm0, qword [str.1337_users]
movsd qword [rbx + 0x40], xmm0
movzx eax, word [0x1401f7490]
mov word [rbx + 0x48], ax
mov byte [rbx + 0x4a], dil
xorps xmm0, xmm0
movups xmmword [rbx + 0x60], xmm0
mov qword [rbx + 0x70], 6
mov qword [rbx + 0x78], reloc.WS2_32.dll_ntohs
mov eax, dword [str.frost.]
mov dword [rbx + 0x60], eax
movzx eax, word [0x1401f7498]
mov word [rbx + 0x64], ax
mov byte [rbx + 0x66], dil
mov qword [rbx + 0x80], rdi
mov qword [rbx + 0x88], rdi
mov qword [rbx + 0x90], 0x3f800000
lea rcx, [rbx + 0x98]
movups xmmword [rbp - 0x29], xmm0
movdqa xmm2, xmmword [reloc.WS2_32.dll_connect]
movdqa xmmword [rbp - 0x19], xmm2
mov dword [rbp - 0x29], 0x4e4f4f53
mov byte [rbp - 0x25], dil
movups xmmword [rbp - 9], xmm0
movdqa xmmword [rbp + 7], xmm2
mov dword [rbp - 9], 0x4e4f4f53
mov byte [rbp - 5], dil
movups xmmword [rbp + 0x17], xmm0
movdqa xmm1, xmmword [reloc.WS2_32.dll_htonl]
movdqa xmmword [rbp + 0x27], xmm1
movabs rax, 0x746e61726f6c6156
mov qword [rbp + 0x17], rax
mov byte [rbp + 0x1f], dil
movups xmmword [rbp + 0x37], xmm0
movdqa xmmword [rbp + 0x47], xmm2
mov dword [rbp + 0x37], 0x4e4f4f53
mov byte [rbp + 0x3b], dil
lea rax, [rbp - 0x29]
mov qword [rbp - 0x39], rax
lea rax, [rbp + 0x57]
mov qword [rbp - 0x31], rax
movaps xmm0, xmmword [rbp - 0x39]
movdqa xmmword [rbp - 0x39], xmm0
lea rdx, [rbp - 0x39]
call fcn.14000a200
nop
lea r9, [fcn.1400073c0]
mov edx, 0x20
mov r8d, 4
lea rcx, [rbp - 0x29]
call fcn.14015d61c
lea rcx, [rbx + 0xb0]
xorps xmm0, xmm0
movups xmmword [rbp - 0x29], xmm0
movdqa xmm1, xmmword [reloc.WS2_32.dll_accept]
movdqa xmmword [rbp - 0x19], xmm1
mov word [rbp - 0x29], 0x49
movups xmmword [rbp - 9], xmm0
movdqa xmmword [rbp + 7], xmm1
mov word [rbp - 9], 0x48
movups xmmword [rbp + 0x17], xmm0
movdqa xmmword [rbp + 0x27], xmm1
mov word [rbp + 0x17], 0x4b
lea rax, [rbp - 0x29]
mov qword [rbp - 0x39], rax
lea rax, [rbp + 0x37]
mov qword [rbp - 0x31], rax
movaps xmm0, xmmword [rbp - 0x39]
movdqa xmmword [rbp - 0x39], xmm0
lea rdx, [rbp - 0x39]
call fcn.14000a200
nop
lea r9, [fcn.1400073c0]
mov edx, 0x20
mov r8d, 3
lea rcx, [rbp - 0x29]
call fcn.14015d61c
lea rcx, [rbx + 0xc8]
xorps xmm0, xmm0
movups xmmword [rbp - 0x29], xmm0
movdqa xmm1, xmmword [0x1401ff4e0]
movdqa xmmword [rbp - 0x19], xmm1
movsd xmm0, qword [0x1401f74a8]
movsd qword [rbp - 0x29], xmm0
mov eax, dword [0x1401f74b0]
mov dword [rbp - 0x21], eax
mov byte [rbp - 0x1d], dil
xorps xmm0, xmm0
movups xmmword [rbp - 9], xmm0
movdqa xmm1, xmmword [0x1401ff4d0]
movdqa xmmword [rbp + 7], xmm1
movsd xmm0, qword [str.LAST_UPDATE]
movsd qword [rbp - 9], xmm0
movzx eax, word [0x1401f74c0]
mov word [rbp - 1], ax
movzx eax, byte [0x1401f74c2]
mov byte [rbp + 1], al
mov byte [rbp + 2], dil
xorps xmm0, xmm0
movups xmmword [rbp + 0x17], xmm0
movdqa xmm1, xmmword [reloc.OLEAUT32.dll_SysStringLen]
movdqa xmmword [rbp + 0x27], xmm1
mov eax, dword [str.STATUS]
mov dword [rbp + 0x17], eax
movzx eax, word [0x1401f74c8]
mov word [rbp + 0x1b], ax
mov byte [rbp + 0x1d], dil
lea rax, [rbp - 0x29]
mov qword [rbp - 0x39], rax
lea rax, [rbp + 0x37]
mov qword [rbp - 0x31], rax
movaps xmm0, xmmword [rbp - 0x39]
movdqa xmmword [rbp - 0x39], xmm0
lea rdx, [rbp - 0x39]
call fcn.14000a200
nop
lea r9, [fcn.1400073c0]
mov edx, 0x20
mov r8d, 3
lea rcx, [rbp - 0x29]
call fcn.14015d61c
lea rcx, [rbx + 0xe0]
xorps xmm0, xmm0
movups xmmword [rbp - 0x29], xmm0
movdqa xmm1, xmmword [0x1401ff4e0]
movdqa xmmword [rbp - 0x19], xmm1
movsd xmm0, qword [str.3_month_left]
movsd qword [rbp - 0x29], xmm0
mov eax, dword [0x1401f74d8]
mov dword [rbp - 0x21], eax
mov byte [rbp - 0x1d], dil
xorps xmm0, xmm0
movups xmmword [rbp - 9], xmm0
movdqa xmm1, xmmword [reloc.OLEAUT32.dll_VariantCopy]
movdqa xmmword [rbp + 7], xmm1
movsd xmm0, qword [str.1_day_ago]
movsd qword [rbp - 9], xmm0
movzx eax, byte [reloc.WS2_32.dll_WSAGetLastError]
mov byte [rbp - 1], al
mov byte [rbp], dil
xorps xmm0, xmm0
movups xmmword [rbp + 0x17], xmm0
movdqa xmm1, xmmword [reloc.WS2_32.dll_ioctlsocket]
movdqa xmmword [rbp + 0x27], xmm1
movsd xmm0, qword [str.undetected]
movsd qword [rbp + 0x17], xmm0
movzx eax, word [0x1401f74f8]
mov word [rbp + 0x1f], ax
mov byte [rbp + 0x21], dil
lea rax, [rbp - 0x29]
mov qword [rbp - 0x39], rax
lea rax, [rbp + 0x37]
mov qword [rbp - 0x31], rax
movaps xmm0, xmmword [rbp - 0x39]
movdqa xmmword [rbp - 0x39], xmm0
lea rdx, [rbp - 0x39]
call fcn.14000a200
nop
lea r9, [fcn.1400073c0]
mov edx, 0x20
mov r8d, 3
lea rcx, [rbp - 0x29]
call fcn.14015d61c
lea rcx, [rbx + 0xf8]
xorps xmm0, xmm0
movups xmmword [rbp - 0x29], xmm0
movdqa xmm1, xmmword [0x1401ff430]
movdqa xmmword [rbp - 0x19], xmm1
mov byte [rbp - 0x29], dil
movups xmmword [rbp - 9], xmm0
movdqa xmmword [rbp + 7], xmm1
mov byte [rbp - 9], dil
movups xmmword [rbp + 0x17], xmm0
movdqa xmmword [rbp + 0x27], xmm1
mov byte [rbp + 0x17], dil
lea rax, [rbp - 0x29]
mov qword [rbp - 0x39], rax
lea rax, [rbp + 0x37]
mov qword [rbp - 0x31], rax
movaps xmm0, xmmword [rbp - 0x39]
movdqa xmmword [rbp - 0x39], xmm0
lea rdx, [rbp - 0x39]
call fcn.14000a200
nop
lea r9, [fcn.1400073c0]
mov edx, 0x20
mov r8d, 3
lea rcx, [rbp - 0x29]
call fcn.14015d61c
lea rcx, [rbx + 0x110]
xorps xmm0, xmm0
movups xmmword [rbp - 0x29], xmm0
movdqa xmm1, xmmword [reloc.OLEAUT32.dll_SysStringLen]
movdqa xmmword [rbp - 0x19], xmm1
mov eax, dword [str.active]
mov dword [rbp - 0x29], eax
movzx eax, word [0x1401f7500]
mov word [rbp - 0x25], ax
mov byte [rbp - 0x23], dil
movups xmmword [rbp - 9], xmm0
movdqa xmmword [rbp + 7], xmm1
mov eax, dword [str.v08.11]
mov dword [rbp - 9], eax
movzx eax, word [0x1401f7508]
mov word [rbp - 5], ax
mov byte [rbp - 3], dil
movups xmmword [rbp + 0x17], xmm0
movdqa xmm1, xmmword [reloc.WS2_32.dll_closesocket]
movdqa xmmword [rbp + 0x27], xmm1
mov eax, dword [0x1401f750c]
mov word [rbp + 0x17], ax
movzx eax, byte [0x1401f750e]
mov byte [rbp + 0x19], al
mov byte [rbp + 0x1a], dil
lea rax, [rbp - 0x29]
mov qword [rbp - 0x39], rax
lea rax, [rbp + 0x37]
mov qword [rbp - 0x31], rax
movaps xmm0, xmmword [rbp - 0x39]
movdqa xmmword [rbp - 0x39], xmm0
lea rdx, [rbp - 0x39]
call fcn.14000a200
nop
lea r9, [fcn.1400073c0]
mov edx, 0x20
mov r8d, 3
lea rcx, [rbp - 0x29]
call fcn.14015d61c
mov byte [rbx + 0x128], dil
mov dword [rbx + 0x12c], edi
mov word [rbx + 0x130], 0x100
mov dword [rbx + 0x134], edi
mov rax, rbx
lea r11, [rsp + 0xb0]
mov rbx, qword [r11 + 0x18]
mov rdi, qword [r11 + 0x20]
mov rsp, r11
pop rbp
ret