Function at 0x1400021c0
Capabilities:
Link many functions at runtime
Resolve dns

Disassembly:
mov qword [rsp + 8], rbx
mov qword [rsp + 0x18], rbp
mov qword [rsp + 0x20], rsi
push rdi
push r12
push r13
push r14
push r15
sub rsp, 0x1b0
cmp byte [rdx], 0x5c
mov r14, rdx
mov r15, rcx
mov r13d, 1
mov rsi, rdx
jne 0x1400021fd
cmp byte [rdx + 1], 0x5c
jne 0x1400021fd
lea rsi, [rdx + 2]
xor edx, edx
lea rcx, [rsp + 0x41]
mov byte [rsp + 0x40], 0
lea r8d, [rdx + 0x63]
call sub.msvcrt.dll_memset
xor eax, eax
mov ebp, eax
mov r12d, eax
mov rcx, rax
mov edi, eax
nop
movzx ebx, byte [rsi]
lea eax, [rbx - 0x30]
cmp al, 9
ja 0x140002237
mov byte [rsp + rcx + 0x40], bl
add rcx, r13
cmp rcx, 4
jmp 0x140002275
test rcx, rcx
je 0x140002286
cmp bl, 0x2e
je 0x140002245
test bl, bl
jne 0x140002286
mov byte [rsp + rcx + 0x40], 0
lea rcx, [rsp + 0x40]
call sub.msvcrt.dll_atoi
cmp eax, 0xff
ja 0x140002286
test ebp, ebp
jle 0x140002263
mov ecx, edi
shl eax, cl
or r12d, eax
xor ecx, ecx
add ebp, r13d
add edi, 8
test bl, bl
je 0x14000227c
cmp edi, 0x20
jge 0x140002286
add rsi, r13
jmp 0x140002220
cmp ebp, 4
jne 0x140002286
test r12d, r12d
jne 0x1400022aa
mov rcx, r14
call sub.WS2_32.dll_gethostbyname
test rax, rax
je 0x140002467
mov rax, qword [rax + 0x18]
mov rcx, qword [rax]
mov r12d, dword [rcx]
test r12d, r12d
je 0x140002467
lea rcx, [r15 + 0x2a8]
call fcn.14001d2f0
cmp rax, 0xffffffffffffffff
mov rdi, rax
je 0x140002467
xor eax, eax
lea rcx, [rsp + 0xb1]
xor edx, edx
mov r8d, 0xfe
mov byte [rsp + 0x1e8], 0
mov word [rsp + 0x1e9], ax
mov byte [rsp + 0x1eb], al
mov byte [rsp + 0xb0], al
call sub.msvcrt.dll_memset
cmp qword [r15 + 0x2a8], 0
mov esi, dword [r15 + 0xc68]
jne 0x140002404
lea rcx, str.Iphlpapi.dll
call qword [sym.imp.KERNEL32.dll_LoadLibraryA]
test rax, rax
mov qword [r15 + 0x2a8], rax
je 0x140002373
lea rdx, str.IcmpCreateFile
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov rcx, qword [r15 + 0x2a8]
lea rdx, str.IcmpCloseHandle
mov qword [r15 + 0x2b0], rax
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov rcx, qword [r15 + 0x2a8]
lea rdx, str.IcmpSendEcho
mov qword [r15 + 0x2b8], rax
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov qword [r15 + 0x2c0], rax
cmp qword [r15 + 0x2b0], 0
jne 0x140002404
mov rcx, qword [r15 + 0x2a8]
test rcx, rcx
je 0x14000239e
call qword [sym.imp.KERNEL32.dll_FreeLibrary]
mov qword [r15 + 0x2a8], 0
lea rcx, str.icmp.dll
call qword [sym.imp.KERNEL32.dll_LoadLibraryA]
test rax, rax
mov qword [r15 + 0x2a8], rax
je 0x140002404
lea rdx, str.IcmpCreateFile
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov rcx, qword [r15 + 0x2a8]
lea rdx, str.IcmpCloseHandle
mov qword [r15 + 0x2b0], rax
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov rcx, qword [r15 + 0x2a8]
lea rdx, str.IcmpSendEcho
mov qword [r15 + 0x2b8], rax
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov qword [r15 + 0x2c0], rax
mov rax, qword [r15 + 0x2c0]
test rax, rax
je 0x140002447
mov dword [rsp + 0x38], esi
lea rcx, [rsp + 0xb0]
mov dword [rsp + 0x30], 0xff
mov qword [rsp + 0x28], rcx
lea r8, [rsp + 0x1e8]
mov r9w, 4
mov rcx, rdi
mov edx, r12d
mov qword [rsp + 0x20], 0
call rax
cmp dword [rsp + 0xb4], 0
mov eax, 0
lea rcx, [r15 + 0x2a8]
mov rdx, rdi
cmovne r13d, eax
call fcn.14001d1e0
lea r11, [rsp + 0x1b0]
mov eax, r13d
mov rbx, qword [r11 + 0x30]
mov rbp, qword [r11 + 0x40]
mov rsi, qword [r11 + 0x48]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rdi
ret