Function at 0x101eb63
Capabilities:
Access firewall policy via inetfwpolicy2

Disassembly:
push 0x40
mov eax, 0x1030809
call fcn.0102b20f
push 0x1005ad8
push 5
push 2
mov edi, 0x1035128
push edi
call fcn.0102ca9a
xor esi, esi
add esp, 0x10
mov dword [ebp - 0x28], esi
mov dword [ebp - 4], esi
mov dword [ebp - 0x2c], esi
mov ebx, dword [ebp + 8]
mov eax, dword [ebx + 8]
push esi
push eax
lea ecx, [ebp - 0x18]
mov byte [ebp - 4], 1
call fcn.0101e3a8
mov eax, dword [ebx]
mov dword [ebp - 0x24], eax
lea eax, [ebp - 0x24]
push eax
mov ecx, ebx
mov byte [ebp - 4], 2
mov dword [ebp - 0x1c], esi
call fcn.01030284
mov ebx, dword [sym.imp.OLEAUT32.dll_SysStringLen]
jmp 0x101ec19
push eax
lea ecx, [ebp - 0x20]
call fcn.0101ccb7
lea eax, [ebp - 0x20]
push eax
lea ecx, [ebp - 0x4c]
mov byte [ebp - 4], 3
call fcn.0101dcad
push dword [ebp - 0x1c]
lea ecx, [ebp - 0x18]
mov byte [ebp - 4], 4
call fcn.0101cbaa
inc dword [ebp - 0x1c]
lea ecx, [ebp - 0x4c]
push ecx
mov ecx, eax
call fcn.0101cd7f
lea eax, [ebp - 0x4c]
push eax
call dword [sym.imp.OLEAUT32.dll_VariantCopy]
push dword [ebp - 0x20]
mov byte [ebp - 4], 2
call ebx
mov ecx, dword [ebp + 8]
lea eax, [ebp - 0x24]
push eax
call fcn.01030284
cmp eax, esi
jne 0x101ebc4
push dword [ebp - 0x18]
lea ecx, [ebp - 0x3c]
call fcn.0101c6a6
mov dword [ebp - 0x14], esi
lea eax, [ebp - 0x14]
push eax
push 0x1001e30
push 0x17
push esi
push 0x1005ac8
mov byte [ebp - 4], 6
call dword [sym.imp.ole32.dll_CoCreateInstance]
cmp eax, esi
mov dword [ebp + 8], eax
jge 0x101ec93
push eax
push 0x1005a58
push esi
push 0x10
push edi
call fcn.0102ca9a
add esp, 0x14
mov eax, dword [ebp - 0x14]
mov byte [ebp - 4], 5
cmp eax, esi
je 0x101ec70
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
lea eax, [ebp - 0x3c]
push eax
call dword [sym.imp.OLEAUT32.dll_VariantCopy]
lea ecx, [ebp - 0x18]
call fcn.0101dc7f
push esi
call ebx
push esi
call ebx
mov eax, dword [ebp + 8]
call fcn.0102b2fb
ret 4
mov dword [ebp - 0x10], esi
mov eax, dword [ebp - 0x14]
mov ecx, dword [eax]
lea edx, [ebp - 0x10]
push edx
push eax
mov byte [ebp - 4], 7
call dword [ecx + 0x48]
cmp eax, esi
mov dword [ebp + 8], eax
jge 0x101ecd3
push eax
push 0x10059f8
push esi
push 0x10
push edi
call fcn.0102ca9a
mov eax, dword [ebp - 0x10]
add esp, 0x14
mov byte [ebp - 4], 6
cmp eax, esi
je 0x101ec5f
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
jmp 0x101ec5f
push esi
push esi
push esi
push 0x1005958
lea eax, [ebp - 0x3c]
push eax
push 1
push 0x11
push 0x1005908
push 0x10058b8
push dword [ebp - 0x10]
call fcn.0101ded6
cmp eax, esi
mov dword [ebp + 8], eax
jge 0x101ed19
mov ecx, 0x800706d9
cmp eax, ecx
jne 0x101ed11
push ecx
push 0x10057f8
push 5
push 2
jmp 0x101ecb7
push eax
push 0x1005748
jmp 0x101ecb4
push 0x1005700
push 0x10056f0
push esi
push 0x10056e4
lea eax, [ebp - 0x3c]
push eax
push 1
push 0x11
push 0x1005698
push 0x1005648
push dword [ebp - 0x10]
call fcn.0101ded6
cmp eax, esi
mov dword [ebp + 8], eax
jge 0x101ed55
push eax
push 0x10055a8
jmp 0x101ecb4
push 0x1005598
push esi
push esi
push 0x100558c
lea eax, [ebp - 0x3c]
push eax
push 1
push 6
push 0x1005540
push 0x10054f0
push dword [ebp - 0x10]
call fcn.0101ded6
cmp eax, esi
mov dword [ebp + 8], eax
jge 0x101ed8d
push eax
push 0x1005448
jmp 0x101ecb4
push 0x1005700
push 0x10056f0
push 0x10056e4
push esi
lea eax, [ebp - 0x3c]
push eax
push 2
push 0x11
push 0x10053f8
push 0x10053a8
push dword [ebp - 0x10]
call fcn.0101ded6
cmp eax, esi
mov dword [ebp + 8], eax
jge 0x101edc9
push eax
push 0x1005300
jmp 0x101ecb4
push 0x1005598
push esi
push 0x100558c
push esi
lea eax, [ebp - 0x3c]
push eax
push 2
push 6
push 0x10052b0
push 0x1005260
push dword [ebp - 0x10]
call fcn.0101ded6
cmp eax, esi
mov dword [ebp + 8], eax
jge 0x101ee01
push eax
push 0x10051b0
jmp 0x101ecb4
push esi
push esi
push 0x10051a4
push esi
lea eax, [ebp - 0x3c]
push eax
push 2
push 6
push 0x1005158
push 0x1005108
push dword [ebp - 0x10]
call fcn.0101ded6
cmp eax, esi
mov dword [ebp + 8], eax
jge 0x101ee35
push eax
push 0x1005060
jmp 0x101ecb4
push esi
push esi
push 0x1004fc0
push esi
lea eax, [ebp - 0x3c]
push eax
push 2
push 0x11
push 0x1004f70
push 0x1004f20
push dword [ebp - 0x10]
call fcn.0101ded6
cmp eax, esi
mov dword [ebp + 8], eax
jge 0x101eeb4
push eax
push 0x1005060
push esi
push 0x10
push edi
call fcn.0102ca9a
mov eax, dword [ebp - 0x10]
add esp, 0x14
mov byte [ebp - 4], 6
cmp eax, esi
je 0x101ee81
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov eax, dword [ebp - 0x14]
mov byte [ebp - 4], 5
cmp eax, esi
je 0x101ee92
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov edi, dword [ebp + 8]
lea eax, [ebp - 0x3c]
push eax
call dword [sym.imp.OLEAUT32.dll_VariantCopy]
lea ecx, [ebp - 0x18]
call fcn.0101dc7f
push esi
call ebx
push esi
call ebx
mov eax, edi
jmp 0x101ec8b
mov eax, dword [ebp - 0x10]
mov byte [ebp - 4], 6
cmp eax, esi
je 0x101eec5
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov eax, dword [ebp - 0x14]
mov byte [ebp - 4], 5
cmp eax, esi
je 0x101eed6
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
xor edi, edi
jmp 0x101ee95