Function at 0x1400029c0
Capabilities:
Send icmp echo request

Disassembly:
push r15
push r14
push r13
push r12
push rbp
push rdi
push rsi
push rbx
sub rsp, 0xc8
mov qword [rsp + 0x110], rcx
call fcn.140072b60
mov rdx, qword [rsp + 0x110]
lea rcx, [rsp + 0x110]
call fcn.140072bf0
mov qword [rsp + 0x60], 0
cmp qword [0x140210598], 0
je 0x140002fa9
mov ebx, 3
mov r13, 0xfffffffffffffffe
lea r12, [rsp + 0x60]
lea rbp, str.Echo_This_Information_Back_To_Me
lea rdi, [rsp + 0x68]
jmp 0x140002dff
mov rcx, qword [rsp + 0x70]
call fcn.14006f980
mov rsi, rax
mov rax, qword [rsp + 0x68]
mov qword [rsp + 0x78], rax
call fcn.140072b60
lea rcx, [rsp + 0x78]
mov rdx, qword [rsp + 0x78]
call fcn.140072bf0
mov qword [rsp + 0x80], 0
mov qword [rsp + 0x88], 0
call fcn.140072d90
mov rcx, qword [rsp + 0x78]
call fcn.140072ec0
call fcn.140072ca0
lea r13, [rsp + 0x88]
mov edx, eax
mov rcx, r13
call fcn.140072df0
mov r8d, 1
lea r14, [0x14020b62e]
mov rdx, r14
mov rcx, qword [rsp + 0x88]
call fcn.1400706d0
mov r15, rax
test rax, rax
jle 0x140002c1a
call fcn.140072d90
call fcn.140072d90
call fcn.140072d90
call fcn.140072ca0
lea rdx, [r15 - 1]
mov r8d, eax
mov rcx, qword [rsp + 0x88]
call fcn.14006fb10
call fcn.140072d60
mov rcx, rax
call fcn.140070820
mov qword [rsp + 0x50], rax
call fcn.140072cf0
call fcn.140072d90
call fcn.140072d90
mov rcx, qword [rsp + 0x88]
call fcn.14006f980
mov rdx, rax
sub rdx, r15
mov qword [rsp + 0x48], rdx
call fcn.140072ca0
mov r8d, eax
mov rdx, qword [rsp + 0x48]
mov rcx, qword [rsp + 0x88]
call fcn.140070950
call fcn.140072ca0
mov edx, eax
mov rcx, r13
call fcn.140072df0
mov r8d, 1
mov rdx, r14
mov rcx, qword [rsp + 0x88]
call fcn.1400706d0
mov r15, rax
test rax, rax
jle 0x140002c1a
call fcn.140072d90
call fcn.140072d90
call fcn.140072d90
call fcn.140072ca0
lea rdx, [r15 - 1]
mov r8d, eax
mov rcx, qword [rsp + 0x88]
call fcn.14006fb10
call fcn.140072d60
mov rcx, rax
call fcn.140070820
mov qword [rsp + 0x58], rax
call fcn.140072cf0
call fcn.140072d90
call fcn.140072d90
mov rcx, qword [rsp + 0x88]
call fcn.14006f980
mov rdx, rax
sub rdx, r15
mov qword [rsp + 0x48], rdx
call fcn.140072ca0
mov r8d, eax
mov rdx, qword [rsp + 0x48]
mov rcx, qword [rsp + 0x88]
call fcn.140070950
call fcn.140072ca0
mov edx, eax
mov rcx, r13
call fcn.140072df0
mov r8d, 1
mov rdx, r14
mov rcx, qword [rsp + 0x88]
call fcn.1400706d0
mov r14, rax
test rax, rax
jg 0x140002cb0
xor r15d, r15d
mov rcx, qword [rsp + 0x88]
call fcn.140072e80
mov rcx, qword [rsp + 0x78]
call fcn.140072e80
lea r14, [rsi + 0x28]
mov rcx, r14
call fcn.1400716f0
mov r13, rax
mov qword [rsp + 0x38], 0x3e8
mov qword [rsp + 0x30], r14
mov qword [rsp + 0x28], rax
mov qword [rsp + 0x20], 0
mov r9, rsi
mov r8, qword [rsp + 0x70]
mov rdx, r15
mov rcx, qword [0x1402104c8]
call sub.ICMP.DLL_IcmpSendEcho
test rax, rax
jne 0x140002da8
mov rcx, r13
call fcn.1400718e0
mov rcx, qword [rsp + 0x68]
call fcn.140072e80
mov rcx, qword [rsp + 0x70]
call fcn.140072e80
mov r13, 0xffffffffffffffff
jmp 0x140002deb
call fcn.140072d90
call fcn.140072d90
call fcn.140072d90
call fcn.140072ca0
lea rdx, [r14 - 1]
mov r8d, eax
mov rcx, qword [rsp + 0x88]
call fcn.14006fb10
call fcn.140072d60
mov rcx, rax
call fcn.140070820
mov r15, rax
call fcn.140072cf0
call fcn.140072d90
call fcn.140072d90
mov rcx, qword [rsp + 0x88]
call fcn.14006f980
mov rcx, rax
sub rcx, r14
mov qword [rsp + 0x48], rcx
call fcn.140072ca0
mov r8d, eax
mov rdx, qword [rsp + 0x48]
mov rcx, qword [rsp + 0x88]
call fcn.140070950
call fcn.140072ca0
mov edx, eax
mov rcx, r13
call fcn.140072df0
mov rcx, qword [rsp + 0x88]
call fcn.140070820
mov r13, rax
mov qword [rsp + 0x80], 0
lea rcx, [rsp + 0x80]
mov rdx, qword [rsp + 0x50]
call fcn.1400717c0
lea rcx, [rsp + 0x81]
mov rdx, qword [rsp + 0x58]
call fcn.1400717c0
lea rcx, [rsp + 0x82]
mov rdx, r15
call fcn.1400717c0
lea rcx, [rsp + 0x83]
mov rdx, r13
call fcn.1400717c0
mov r15, qword [rsp + 0x80]
jmp 0x140002c1d
lea rdx, [rsp + 0x90]
mov r8d, 0x28
mov rcx, r13
call fcn.140071740
mov rcx, r13
call fcn.1400718e0
movsxd r13, dword [rsp + 0x98]
mov rcx, qword [rsp + 0x68]
call fcn.140072e80
mov rcx, qword [rsp + 0x70]
call fcn.140072e80
test r13, r13
jns 0x140002ed8
mov ecx, 0xfa
call fcn.140063e38
sub rbx, 1
je 0x140002ed8
mov rcx, qword [rsp + 0x110]
call fcn.140001370
movsxd rsi, eax
test rsi, rsi
je 0x140002df5
call fcn.140072d90
call fcn.140072d90
call fcn.140072ca0
mov edx, eax
mov rcx, rsi
call fcn.140062dd0
call fcn.140072ca0
mov edx, eax
mov rcx, r12
call fcn.140072df0
mov rax, qword [rsp + 0x60]
mov qword [rsp + 0x68], rax
mov qword [rsp + 0x70], rbp
call fcn.140072b60
mov rdx, qword [rsp + 0x68]
mov rcx, rdi
call fcn.140072bf0
lea rcx, [rsp + 0x70]
mov rdx, qword [rsp + 0x70]
call fcn.140072bf0
mov qword [rsp + 0x90], 0
mov qword [rsp + 0x98], 0
mov qword [rsp + 0xa0], 0
mov qword [rsp + 0xa8], 0
mov qword [rsp + 0xb0], 0
mov r13, qword [0x1402104c8]
test r13, r13
jne 0x140002a30
mov rcx, qword [rsp + 0x68]
call fcn.140072e80
mov rcx, qword [rsp + 0x70]
call fcn.140072e80
mov rcx, qword [rsp + 0x60]
jmp 0x140002edd
mov rcx, qword [rsp + 0x60]
mov rdx, qword [rsp + 0x110]
call fcn.140072c60
test eax, eax
jne 0x140002fc0
call fcn.140072d90
call fcn.140072d90
mov rcx, qword [rsp + 0x110]
call fcn.140072ec0
lea rcx, [0x14020b6e4]
call fcn.140072ec0
mov rcx, qword [rsp + 0x60]
call fcn.140072ec0
lea rcx, [0x14020a420]
call fcn.140072ec0
call fcn.140072d90
call fcn.140072d90
call fcn.140072ca0
mov edx, eax
mov rcx, r13
call fcn.14006f9a0
call fcn.140072ca0
call fcn.140072d60
mov rcx, rax
lea rax, str.ping
mov qword [rsp + 0x20], rax
lea r9, [0x140210650]
mov r8d, 0x1a
lea rdx, str.rooping.pbi
call fcn.140001fc0
call fcn.140072cf0
mov rcx, qword [rsp + 0x60]
call fcn.140072e80
mov rcx, qword [rsp + 0x110]
call fcn.140072e80
mov rax, r13
add rsp, 0xc8
pop rbx
pop rsi
pop rdi
pop rbp
pop r12
pop r13
pop r14
pop r15
ret
xor ecx, ecx
mov r13, 0xfffffffffffffffe
jmp 0x140002edd
call fcn.140072d90
call fcn.140072d90
mov rcx, qword [rsp + 0x110]
call fcn.140072ec0
lea rcx, [0x140209810]
call fcn.140072ec0
call fcn.140072d90
call fcn.140072d90
call fcn.140072ca0
mov edx, eax
mov rcx, r13
call fcn.14006f9a0
call fcn.140072ca0
call fcn.140072d60
mov rcx, rax
lea rax, str.ping
mov qword [rsp + 0x20], rax
lea r9, [0x140210650]
mov r8d, SafeArrayPutElement
lea rdx, str.rooping.pbi
call fcn.140001fc0
call fcn.140072cf0
jmp 0x140002f7b