Function at 0x43bcd0
Capabilities:
Get routing table

Disassembly:
mov eax, 0x104c
call fcn.00467540
mov dx, word [0x4e5f10]
mov eax, dword [str.AddRoute__]
mov ecx, dword [0x4e5f0c]
push ebx
push ebp
push esi
mov word [esp + 0x18], dx
mov edx, dword [esp + 0x105c]
mov dword [esp + 0x10], eax
mov al, byte [0x4e5f12]
xor esi, esi
push edi
cmp edx, esi
mov dword [esp + 0x18], ecx
mov byte [esp + 0x1e], al
je 0x43bf3e
mov edi, edx
or ecx, 0xffffffff
xor eax, eax
repne scasb al, byte es:[edi]
not ecx
dec ecx
je 0x43bf3e
push edx
call dword [sym.imp.WS2_32.dll_inet_addr]
lea ecx, [esp + 0x10]
push 1
push ecx
push esi
mov dword [esp + 0x2c], eax
mov dword [esp + 0x1c], esi
call sub.iphlpapi.dll_GetIpForwardTable
cmp eax, 0x7a
je 0x43bd8d
push eax
push 0x4e5ee4
lea edx, [esp + 0x64]
push 0xfff
push edx
call fcn.00466ca7
mov ecx, dword [0x4d25a4]
lea eax, [esp + 0x24]
push 0x91a
push eax
lea edx, [esp + 0x74]
push ecx
push edx
call fcn.0043c750
add esp, 0x20
mov eax, 0x10
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x104c
ret
mov eax, dword [esp + 0x10]
push eax
call fcn.00468f41
mov ebp, eax
add esp, 4
cmp ebp, esi
jne 0x43bdce
push 0x4e5ecc
lea ecx, [esp + 0x60]
push 0xfff
push ecx
call fcn.00466ca7
mov eax, dword [0x4d25a4]
lea edx, [esp + 0x20]
push 0x923
push edx
lea ecx, [esp + 0x70]
push eax
push ecx
jmp 0x43bf68
lea edx, [esp + 0x10]
push 1
push edx
push ebp
call sub.iphlpapi.dll_GetIpForwardTable
cmp eax, esi
je 0x43be28
push eax
push 0x4e5eac
lea eax, [esp + 0x64]
push 0xfff
push eax
call fcn.00466ca7
mov edx, dword [0x4d25a4]
lea ecx, [esp + 0x24]
push 0x92c
push ecx
lea eax, [esp + 0x74]
push edx
push eax
call fcn.0043c750
push ebp
call fcn.00468e58
add esp, 0x24
mov eax, 0x10
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x104c
ret
mov edi, dword [ebp]
cmp esi, edi
jae 0x43be56
lea edx, [ebp + 8]
mov ecx, dword [edx - 4]
test ecx, ecx
jne 0x43be3e
cmp dword [edx], 0
je 0x43be4c
mov eax, dword [edx]
mov ebx, dword [esp + 0x20]
and ecx, eax
and eax, ebx
cmp ecx, eax
je 0x43be54
inc esi
add edx, 0x38
cmp esi, edi
jb 0x43be32
cmp esi, edi
je 0x43be6e
push ebp
call fcn.00468e58
add esp, 4
xor eax, eax
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x104c
ret
xor ebx, ebx
test edi, edi
jbe 0x43be58
lea esi, [ebp + 0x10]
mov eax, dword [esi - 0xc]
test eax, eax
jne 0x43be58
mov eax, dword [esi - 8]
test eax, eax
jne 0x43be58
mov edx, dword [str.255.255.255.255]
mov ecx, dword [esp + 0x20]
push edx
mov dword [esp + 0x28], ecx
call dword [sym.imp.WS2_32.dll_inet_addr]
mov dword [esp + 0x28], eax
mov eax, dword [esi]
mov dword [esp + 0x30], eax
mov ecx, dword [esi + 4]
lea edx, [esp + 0x24]
mov dword [esp + 0x34], ecx
push edx
mov dword [esp + 0x4c], 1
call sub.iphlpapi.dll_CreateIpForwardEntry
test eax, eax
jne 0x43bee5
mov eax, dword [esp + 0x1060]
push 0x50
push eax
call fcn.00436c60
add esp, 8
test eax, eax
je 0x43be58
lea ecx, [esp + 0x24]
push ecx
call sub.iphlpapi.dll_DeleteIpForwardEntry
test eax, eax
jne 0x43bef5
mov eax, dword [ebp]
inc ebx
add esi, 0x38
cmp ebx, eax
jb 0x43be77
jmp 0x43be58
push eax
push 0x4e5e8c
lea edx, [esp + 0x64]
push 0xfff
push edx
call fcn.00466ca7
mov ecx, dword [0x4d25a4]
lea eax, [esp + 0x24]
push 0x960
push eax
lea edx, [esp + 0x74]
push ecx
push edx
call fcn.0043c750
push ebp
call fcn.00468e58
add esp, 0x24
mov eax, 0x10
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x104c
ret
push 0x4e5e80
lea eax, [esp + 0x60]
push 0xfff
push eax
call fcn.00466ca7
mov edx, dword [0x4d25a4]
lea ecx, [esp + 0x20]
push 0x90f
push ecx
lea eax, [esp + 0x70]
push edx
push eax
call fcn.0043c750
add esp, 0x1c
mov eax, 0x10
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x104c
ret