Function at 0x41ff70
Capabilities:
Access firewall policy via inetfwpolicy2

Disassembly:
sub esp, 0xa8
mov eax, dword [0x45e068]
xor eax, esp
mov dword [esp + 0xa4], eax
push ebx
push ebp
mov ebp, dword [esp + 0xb8]
lea eax, [esp + 0x1c]
push esi
push edi
mov edi, dword [esp + 0xbc]
push eax
push 0x44d5b4
push 1
push 0
push 0x44d2fc
mov dword [esp + 0x4c], edi
mov dword [esp + 0x34], vtable.SmartCOMPointer_struct_INetFwPolicy2_.0
mov dword [esp + 0x38], 0
mov dword [esp + 0x2c], vtable.SmartCOMPointer_struct_INetFwRules_.0
mov dword [esp + 0x30], 0
mov dword [esp + 0x50], vtable.SmartCOMPointer_struct_INetFwRule_.0
mov dword [esp + 0x54], 0
call dword [sym.imp.ole32.dll_CoCreateInstance]
mov esi, eax
test esi, esi
jns 0x420042
push str.New_Authorized_Application
push str.Failed_to_instantiate_COM_object
lea eax, [esp + 0x18]
mov dword [esp + 0x18], 0x441510
push str._s__Message:___s_
push eax
mov dword [esp + 0x24], 0
call fcn.004145f0
add esp, 0x10
test al, al
je 0x42002f
push 0
push dword [esp + 0x14]
mov ecx, ebp
push esi
call fcn.00414ca0
test al, al
je 0x42002f
mov bl, 1
jmp 0x420031
xor bl, bl
lea ecx, [esp + 0x10]
call fcn.00405f20
test bl, bl
je 0x4200c2
mov ecx, dword [esp + 0x1c]
mov esi, dword [esp + 0x24]
test ecx, ecx
je 0x420054
mov eax, dword [ecx]
push ecx
call dword [eax + 8]
mov dword [esp + 0x1c], 0
lea ecx, [esp + 0x1c]
mov eax, dword [esi]
push ecx
push esi
call dword [eax + 0x48]
mov esi, eax
test esi, esi
jns 0x4200d0
push str.Get_Firewall_Rules
push str.COM_error_occurred
lea eax, [esp + 0x18]
mov dword [esp + 0x18], 0x441510
push str._s__Message:___s_
push eax
mov dword [esp + 0x24], 0
call fcn.004145f0
add esp, 0x10
test al, al
je 0x4200b3
push 0
push dword [esp + 0x14]
mov ecx, ebp
push esi
call fcn.00414ca0
test al, al
je 0x4200b3
mov bl, 1
jmp 0x4200b5
xor bl, bl
lea ecx, [esp + 0x10]
call fcn.00405f20
test bl, bl
jne 0x4200d0
xor bl, bl
jmp 0x420238
push ebp
lea eax, [esp + 0x40]
push eax
push 0
push 0
lea eax, [esp + 0x28]
push edi
push eax
call fcn.0041f570
mov esi, dword [esp + 0x58]
mov bl, al
add esp, 0x18
test bl, bl
je 0x42022e
test esi, esi
je 0x420238
push 1
lea ecx, [esp + 0x48]
mov dword [esp + 0x14], 0
call fcn.00403e10
push 0
lea eax, [esp + 0x58]
push eax
lea eax, [esp + 0x4c]
push 0x10
push eax
call fcn.0040eaf0
add esp, 0x10
test eax, eax
je 0x420217
lea eax, [esp + 0x54]
push eax
lea ecx, [esp + 0x14]
call fcn.004130c0
test al, al
je 0x420217
push dword [esp + 0x10]
mov eax, dword [esi]
push esi
call dword [eax + 0x20]
mov edi, eax
test edi, edi
jns 0x4201aa
push str.Rename_existing_rule
push str.COM_error_occurred
lea eax, [esp + 0x30]
mov dword [esp + 0x30], 0x441510
push str._s__Message:___s_
push eax
mov dword [esp + 0x3c], 0
call fcn.004145f0
add esp, 0x10
test al, al
je 0x42019b
push 0
push dword [esp + 0x2c]
mov ecx, ebp
push edi
call fcn.00414ca0
test al, al
je 0x42019b
mov bl, 1
jmp 0x42019d
xor bl, bl
lea ecx, [esp + 0x28]
call fcn.00405f20
test bl, bl
je 0x420217
mov eax, dword [esp + 0x1c]
push dword [esp + 0x10]
push eax
mov ecx, dword [eax]
call dword [ecx + 0x24]
mov edi, eax
test edi, edi
jns 0x420213
push str.Remove_existing_rule
push str.COM_error_occurred
lea eax, [esp + 0x38]
mov dword [esp + 0x38], 0x441510
push str._s__Message:___s_
push eax
mov dword [esp + 0x44], 0
call fcn.004145f0
add esp, 0x10
test al, al
je 0x420204
push 0
push dword [esp + 0x34]
mov ecx, ebp
push edi
call fcn.00414ca0
test al, al
je 0x420204
mov bl, 1
jmp 0x420206
xor bl, bl
lea ecx, [esp + 0x30]
call fcn.00405f20
test bl, bl
je 0x420217
mov bl, 1
jmp 0x420219
xor bl, bl
lea ecx, [esp + 0x10]
call fcn.00408270
mov edi, dword [esp + 0x38]
test bl, bl
jne 0x4200d0
test esi, esi
je 0x420238
mov eax, dword [esi]
push esi
call dword [eax + 8]
mov ecx, dword [esp + 0x1c]
mov dword [esp + 0x18], vtable.SmartCOMPointer_struct_INetFwRules_.0
test ecx, ecx
je 0x42024e
mov eax, dword [ecx]
push ecx
call dword [eax + 8]
mov ecx, dword [esp + 0x24]
mov dword [esp + 0x20], vtable.SmartCOMPointer_struct_INetFwPolicy2_.0
test ecx, ecx
je 0x420264
mov eax, dword [ecx]
push ecx
call dword [eax + 8]
mov ecx, dword [esp + 0xb4]
mov al, bl
pop edi
pop esi
pop ebp
pop ebx
xor ecx, esp
call fcn.00420bdf
add esp, 0xa8
ret