Function at 0x140131f00
Capabilities:
Get routing table

Disassembly:
push rbp
push r15
push r14
push r12
push rsi
push rdi
push rbx
sub rsp, 0x120
lea rbp, [rsp + 0x80]
movaps xmmword [rbp + 0x90], xmm6
mov qword [rbp + 0x88], 0xfffffffffffffffe
mov edi, edx
mov rsi, rcx
mov dword [rbp + 0x40], 0x3c
mov r15d, 0x3c
mov ecx, 0x3c
mov edx, 4
call fcn.14023caa0
test al, al
je 0x140131fb7
lea rbx, [rbp + 0x40]
mov r14, qword [sym.imp.iphlpapi.dll_GetIpForwardTable]
nop dword [rax + rax]
movzx eax, byte [0x1403d2ea1]
mov edx, 4
mov rcx, r15
call fcn.1400fcbc0
test rax, rax
je 0x140131fb7
mov r12, rax
mov rcx, rax
mov rdx, rbx
xor r8d, r8d
call r14
cmp eax, 0x7a
jne 0x14013208f
mov r8d, 4
mov rcx, r12
mov rdx, r15
call fcn.1400fcbd0
mov r15d, dword [rbp + 0x40]
mov edx, 4
mov rcx, r15
call fcn.14023caa0
test al, al
jne 0x140131f60
mov r8d, 8
mov qword [rbp + 0x20], 0
lea rax, [rbp + 0x20]
mov qword [rsp + 0x20], rax
mov qword [rsp + 0x30], 0
mov dword [rsp + 0x28], 0
mov ecx, 0x1100
xor edx, edx
xor r9d, r9d
call qword [sym.imp.kernel32.dll_FormatMessageW]
mov rdi, qword [rbp + 0x20]
mov ebx, eax
mov qword [rbp + 0x60], 0
mov qword [rbp + 0x68], 1
mov qword [rbp + 0x70], 0
test eax, eax
je 0x140132035
mov eax, ebx
shr eax, 1
mov r8, rbx
sub r8, rax
mov qword [rsp + 0x20], 1
lea rcx, [rbp + 0x60]
mov r9d, 1
xor edx, edx
call fcn.1402921d0
lea rax, [rdi + rbx*2]
mov qword [rbp + 0x40], rdi
mov qword [rbp + 0x48], rax
mov word [rbp + 0x50], 0
lea rcx, [rbp + 0x40]
lea rdx, [rbp + 0x60]
call fcn.140132570
movaps xmm6, xmmword [rbp + 0x60]
mov rdi, qword [rbp + 0x70]
lea rcx, [rbp + 0x20]
call qword [sym.imp.kernel32.dll_LocalFree]
mov eax, 1
mov qword [rsi], rax
movups xmmword [rsi + 8], xmm6
mov qword [rsi + 0x18], rdi
movaps xmm6, xmmword [rbp + 0x90]
add rsp, 0x120
pop rbx
pop rdi
pop rsi
pop r12
pop r14
pop r15
pop rbp
ret
test eax, eax
je 0x1401320b8
cmp eax, 0x32
je 0x1401320a3
cmp eax, 0xe8
jne 0x14013218d
mov r8d, 4
mov rcx, r12
mov rdx, r15
call fcn.1400fcbd0
xor eax, eax
jmp 0x14013206b
mov qword [rbp + 0x78], r15
mov eax, dword [r12]
imul rax, rax, 0x38
lea r8, [r12 + rax]
add r8, 4
mov rdx, r12
add rdx, 4
lea rbx, [rbp + 8]
mov rcx, rbx
mov qword [rbp + 0x80], r12
call fcn.140132d80
mov r8d, 4
mov rcx, qword [rbp + 0x80]
mov rdx, qword [rbp + 0x78]
call fcn.1400fcbd0
lea rcx, [rbp + 0x20]
mov edx, edi
call fcn.1401323a0
mov rax, qword [rbp + 0x20]
test rax, rax
je 0x1401321a8
mov qword [rbp + 0x78], rax
mov rax, qword [rbp + 0x28]
mov qword [rbp + 0x80], rax
mov rax, qword [rbp + 0x30]
mov qword [rbp - 0x40], 0
mov qword [rbp - 0x30], 0
mov qword [rbp - 0x20], rbx
mov qword [rbp + 0x38], rax
mov qword [rbp - 0x18], rax
lea rcx, [rbp - 0x10]
lea rdx, [rbp - 0x40]
call fcn.140132a60
mov rax, qword [rbp]
mov qword [rsi + 0x18], rax
movups xmm0, xmmword [rbp - 0x10]
movups xmmword [rsi + 8], xmm0
mov qword [rsi], 3
mov rcx, qword [rbp + 0x38]
mov rdx, qword [rbp + 0x80]
mov r8, qword [rbp + 0x78]
call fcn.1400fcbd0
mov rdx, qword [rbp + 8]
test rdx, rdx
jne 0x140132246
jmp 0x140132076
mov r8d, 4
mov rcx, r12
mov rdx, r15
mov edi, eax
call fcn.1400fcbd0
mov r8d, edi
jmp 0x140131fbd
mov r8d, dword [rbp + 0x28]
xor eax, eax
cmp r8d, 0xe8
je 0x14013222e
cmp r8d, 0x4cc
je 0x14013222e
mov qword [rbp + 0x58], 0
lea rax, [rbp + 0x58]
mov qword [rsp + 0x20], rax
mov qword [rsp + 0x30], 0
mov dword [rsp + 0x28], 0
mov ecx, 0x1100
xor edx, edx
xor r9d, r9d
call qword [sym.imp.kernel32.dll_FormatMessageW]
mov rcx, qword [rbp + 0x58]
mov eax, eax
lea rax, [rcx + rax*2]
mov qword [rbp + 0x40], rcx
mov qword [rbp + 0x48], rax
mov word [rbp + 0x50], 0
lea rcx, [rbp + 0x60]
lea rdx, [rbp + 0x40]
call fcn.140131de0
lea rcx, [rbp + 0x58]
call qword [sym.imp.kernel32.dll_LocalFree]
movaps xmm0, xmmword [rbp + 0x60]
mov rcx, qword [rbp + 0x70]
mov eax, 1
mov qword [rsi], rax
movups xmmword [rsi + 8], xmm0
mov qword [rsi + 0x18], rcx
mov rdx, qword [rbp + 8]
test rdx, rdx
je 0x140132076
mov rcx, qword [rbp + 0x10]
shl rdx, 2
mov r8d, 4
call fcn.1400fcbd0
jmp 0x140132076