Function at 0x1400019e0
Capabilities:
Delete network filter via wfp api
Enumerate network filters via wfp api

Disassembly:
mov qword [rsp + 0x18], rdi
push rbp
mov rbp, rsp
sub rsp, 0x70
mov rax, qword [0x140008008]
xor rax, rsp
mov qword [rbp - 0x10], rax
xor edi, edi
lea rax, [rbp - 0x40]
xorps xmm0, xmm0
mov qword [rbp - 0x40], rdi
xor r9d, r9d
mov qword [rbp - 0x38], rdi
xor r8d, r8d
mov qword [rbp - 0x30], rdi
mov edx, 0xffffffff
mov dword [rbp - 0x28], edi
xor ecx, ecx
mov qword [rsp + 0x20], rax
movups xmmword [rbp - 0x20], xmm0
call qword [sym.imp.fwpuclnt.dll_FwpmEngineOpen0]
test eax, eax
je 0x140001a46
mov edx, eax
lea rcx, str.____FwpmEngineOpen0_failed_with_error_code:_0x_x._n
call fcn.140001010
jmp 0x140001b8e
mov rcx, qword [rbp - 0x40]
lea r8, [rbp - 0x38]
xor edx, edx
call qword [sym.imp.fwpuclnt.dll_FwpmFilterCreateEnumHandle0]
test eax, eax
je 0x140001a6d
mov edx, eax
lea rcx, str.____FwpmFilterCreateEnumHandle0_failed_with_error_code:_0x_x._n
call fcn.140001010
jmp 0x140001b8e
mov rdx, qword [rbp - 0x38]
lea rax, [rbp - 0x28]
mov rcx, qword [rbp - 0x40]
lea r9, [rbp - 0x30]
mov qword [rsp + 0x80], rbx
mov r8d, 1
mov qword [rsp + 0x20], rax
mov qword [rsp + 0x88], rsi
call qword [sym.imp.fwpuclnt.dll_FwpmFilterEnum0]
test eax, eax
jne 0x140001b58
lea rsi, str.Custom_Outbound_Filter
nop dword [rax]
cmp dword [rbp - 0x28], 0
je 0x140001ba8
mov rax, qword [rbp - 0x30]
mov rbx, qword [rax]
mov rax, 0xffffffffffffffff
mov rdx, qword [rbx + 0x10]
nop dword [rax]
movzx ecx, word [rdx + rax*2 + 2]
cmp cx, word [rsi + rax*2 + 2]
jne 0x140001b2f
add rax, 2
cmp rax, 0x17
je 0x140001af2
movzx ecx, word [rdx + rax*2]
cmp cx, word [rsi + rax*2]
je 0x140001ad0
jmp 0x140001b2f
mov rbx, qword [rbx + 0xb0]
mov edi, 1
mov rcx, qword [rbp - 0x40]
mov rdx, rbx
call qword [sym.imp.fwpuclnt.dll_FwpmFilterDeleteById0]
mov rdx, rbx
test eax, eax
jne 0x140001b20
lea rcx, str.Deleted_filter_id:__llu._n
call fcn.140001010
jmp 0x140001b2f
mov r8d, eax
lea rcx, str.____Failed_to_delete_filter_id:__llu_with_error_code:_0x_x._n
call fcn.140001010
mov rdx, qword [rbp - 0x38]
lea rax, [rbp - 0x28]
mov rcx, qword [rbp - 0x40]
lea r9, [rbp - 0x30]
mov r8d, 1
mov qword [rsp + 0x20], rax
call qword [sym.imp.fwpuclnt.dll_FwpmFilterEnum0]
test eax, eax
je 0x140001ab0
mov edx, eax
lea rcx, str.____FwpmFilterEnum0_failed_with_error_code:_0x_x._n
call fcn.140001010
mov rdx, qword [rbp - 0x38]
mov rcx, qword [rbp - 0x40]
call qword [sym.imp.fwpuclnt.dll_FwpmFilterDestroyEnumHandle0]
mov rcx, qword [rbp - 0x40]
call qword [sym.imp.fwpuclnt.dll_FwpmEngineClose0]
mov rbx, qword [rsp + 0x80]
mov rsi, qword [rsp + 0x88]
mov rcx, qword [rbp - 0x10]
xor rcx, rsp
call fcn.1400024e0
mov rdi, qword [rsp + 0x90]
add rsp, 0x70
pop rbp
ret
lea rdx, [rbp - 0x20]
call fcn.140002340
test eax, eax
je 0x140001bea
mov rcx, qword [rbp - 0x40]
lea rdx, [rbp - 0x20]
call qword [sym.imp.fwpuclnt.dll_FwpmProviderDeleteByKey0]
test eax, eax
je 0x140001bde
cmp eax, 0x8032000a
je 0x140001bea
mov edx, eax
lea rcx, str.____FwpmProviderDeleteByKey0_failed_with_error_code:_0x_x._n
call fcn.140001010
jmp 0x140001bea
lea rcx, str.Deleted_custom_WFP_provider._n
call fcn.140001010
test edi, edi
jne 0x140001b66
lea rcx, str.____Unable_to_find_any_WFP_filter_created_by_this_tool._n
call fcn.140001010
jmp 0x140001b66