Function at 0x1400013a4
Capabilities:
Get routing table
Initialize winsock library
Terminate process

Disassembly:
mov qword [rsp + 8], rbx
mov qword [rsp + 0x18], rbp
mov qword [rsp + 0x20], rsi
push rdi
push r12
push r13
push r14
push r15
sub rsp, 0x1f0
mov rax, qword [0x140005008]
xor rax, rsp
mov qword [rsp + 0x1e8], rax
mov r14, rdx
mov r12d, ecx
xor ebx, ebx
lea edx, [rbx + 1]
xor r15d, r15d
xor r9d, r9d
xor r8d, r8d
xor ecx, ecx
xor r13b, r13b
mov byte [rsp + 0x20], 1
xor edi, edi
xor esi, esi
mov qword [rsp + 0x28], r15
call qword [sym.imp.api_ms_win_core_heap_l1_2_0.dll_HeapSetInformation]
call qword [sym.imp.api_ms_win_core_console_l1_1_0.dll_GetConsoleOutputCP]
lea r8, [0x1400011c0]
lea edx, [rbx + 0xc]
lea rcx, [rsp + 0x1d0]
mov r9d, eax
call fcn.1400012a8
test eax, eax
jne 0x140001436
lea rdx, [rsp + 0x1d0]
xor ecx, ecx
call qword [sym.imp.msvcrt.dll__wsetlocale]
xor r8d, r8d
xor edx, edx
mov ecx, 0x100
call qword [sym.imp.api_ms_win_core_localization_l1_2_1.dll_SetThreadPreferredUILanguages]
mov rax, qword [r14]
lea rdx, [rsp + 0x30]
mov ecx, 0x101
mov qword [0x140005ed8], rax
call qword [sym.imp.WS2_32.dll_WSAStartup]
test eax, eax
je 0x140001489
mov r8, qword [0x140005ed8]
mov r9d, eax
mov edx, 0x2719
mov ecx, 2
call fcn.140003a90
mov ecx, 1
call qword [sym.imp.msvcrt.dll_exit]
int3
cmp r12d, 2
jl 0x1400016ad
mov ebp, 1
cmp r12d, ebp
jle 0x140001556
lea r15, [r14 + 8]
mov rcx, qword [r15]
mov al, byte [rcx]
sub al, 0x2d
test al, 0xfd
je 0x1400014da
test rdi, rdi
jne 0x1400014bd
mov rdi, rcx
jmp 0x140001542
test rsi, rsi
jne 0x1400014c7
mov rsi, rcx
jmp 0x140001542
cmp qword [rsp + 0x28], 0
jne 0x1400016bf
mov qword [rsp + 0x28], rcx
jmp 0x140001542
lea r14, [rcx + 1]
jmp 0x14000153b
movsx ecx, al
call qword [sym.imp.msvcrt.dll_toupper]
cmp eax, 0x41
je 0x140001533
cmp eax, 0x44
je 0x14000152c
cmp eax, 0x47
je 0x140001533
cmp eax, 0x4e
je 0x140001520
cmp eax, 0x53
je 0x140001519
cmp eax, 0x56
jne 0x1400016c5
mov byte [rsp + 0x20], 0
test ebx, ebx
jne 0x140001538
jmp 0x1400016b3
mov ebx, 2
jmp 0x140001538
mov r13b, 1
test ebx, ebx
jne 0x140001538
jmp 0x1400016b9
mov ebx, 3
jmp 0x140001538
mov ebx, 1
inc r14
mov al, byte [r14]
test al, al
jne 0x1400014e0
inc ebp
add r15, 8
cmp ebp, r12d
jl 0x1400014a5
mov r15, qword [rsp + 0x28]
and dword [rsp + 0x28], 0
lea rdx, [rsp + 0x28]
xor r8d, r8d
xor ecx, ecx
call qword [sym.imp.IPHLPAPI.DLL_GetIpForwardTable]
cmp eax, 0x7a
je 0x14000158b
mov edx, 0x2724
mov ecx, 2
call fcn.140003a90
mov ecx, 1
call qword [sym.imp.msvcrt.dll_exit]
int3
call fcn.140002820
test eax, eax
je 0x1400015ad
mov r8d, eax
mov edx, 0x271e
call fcn.140003bc0
mov ecx, 1
call qword [sym.imp.msvcrt.dll_exit]
int3
dec ebx
je 0x14000164c
dec ebx
je 0x1400015fe
dec ebx
jne 0x14000167a
mov ecx, 0x220
call fcn.14000276c
test al, al
jne 0x1400015e4
mov ecx, 0x22c
call fcn.14000276c
test al, al
jne 0x1400015e4
mov eax, 0x2e4
jmp 0x1400015f7
mov rdx, rsi
mov rcx, rdi
call fcn.140001a2c
test eax, eax
je 0x14000167a
mov edx, 0x2721
jmp 0x140001672
test rdi, rdi
je 0x1400016cb
test rsi, rsi
je 0x1400016cb
mov ecx, 0x220
call fcn.14000276c
test al, al
jne 0x140001633
mov ecx, 0x22c
call fcn.14000276c
test al, al
jne 0x140001633
mov eax, 0x2e4
jmp 0x140001645
mov r8, r15
mov rdx, rsi
mov rcx, rdi
call fcn.140001ce4
test eax, eax
je 0x14000167a
mov edx, 0x2720
jmp 0x140001672
test r13b, r13b
je 0x140001656
test rdi, rdi
je 0x1400016d1
mov r9b, byte [rsp + 0x20]
mov r8b, r13b
mov rdx, rsi
mov rcx, rdi
call fcn.140001788
test eax, eax
je 0x14000167a
mov edx, 0x271f
mov r8d, eax
call fcn.140003bc0
xor eax, eax
mov rcx, qword [rsp + 0x1e8]
xor rcx, rsp
call fcn.140003fb0
lea r11, [rsp + 0x1f0]
mov rbx, qword [r11 + 0x30]
mov rbp, qword [r11 + 0x40]
mov rsi, qword [r11 + 0x48]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rdi
ret
call fcn.140002740
int3
call fcn.140002740
int3
call fcn.140002740
int3
call fcn.140002740
int3
call fcn.140002740
int3
call fcn.140002740
int3
call fcn.140002740
int3