Function at 0x4062f1
Capabilities:
Access firewall rule properties via inetfwrule

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x40c
mov eax, dword [0x42000c]
xor eax, ebp
mov dword [ebp - 4], eax
push ebx
push esi
xor eax, eax
mov ebx, edx
push edi
mov edi, dword [0x4226b8]
mov esi, eax
push 0x3e8
push eax
mov dword [ebp - 0x404], eax
mov dword [ebp - 0x3f4], eax
mov dword [ebp - 0x3f8], eax
mov dword [ebp - 0x3fc], eax
mov dword [ebp - 0x400], eax
lea eax, [ebp - 0x3ec]
push eax
mov dword [ebp - 0x3f0], ebx
mov dword [ebp - 0x40c], edi
call sub.VCRUNTIME140.dll_memset
add esp, 0xc
test edi, edi
je 0x406699
test ebx, ebx
je 0x406699
mov ebx, dword [ebp + 0xc]
cmp ebx, 1
je 0x406372
test ebx, ebx
jne 0x406699
push str.Mesh_service_for_Zoom_Video_Meetings
call dword [sym.imp.OLEAUT32.dll_SysReAllocString]
mov dword [ebp - 0x408], eax
test eax, eax
jne 0x406391
mov edi, 0x8007000e
jmp 0x406661
push 0x416d08
lea eax, [ebp - 0x3ec]
push 0x1f4
push eax
call fcn.004061ce
mov edi, eax
add esp, 0xc
test edi, edi
js 0x406617
lea eax, [ebp - 0x3ec]
push eax
call dword [sym.imp.OLEAUT32.dll_SysReAllocString]
mov dword [ebp - 0x3f8], eax
test eax, eax
jne 0x4063d5
mov edi, 0x8007000e
jmp 0x406617
push str.Allow_network_traffic_for_Zoom_Video_Conference
lea eax, [ebp - 0x3ec]
push 0x1f4
push eax
call fcn.004061ce
mov edi, eax
add esp, 0xc
test edi, edi
js 0x406617
lea eax, [ebp - 0x3ec]
push eax
call dword [sym.imp.OLEAUT32.dll_SysReAllocString]
mov dword [ebp - 0x3fc], eax
test eax, eax
je 0x4063cb
push dword [ebp - 0x3f0]
call dword [sym.imp.OLEAUT32.dll_SysReAllocString]
mov dword [ebp - 0x400], eax
test eax, eax
je 0x4063cb
push 0x416cec
call dword [sym.imp.OLEAUT32.dll_SysReAllocString]
mov esi, eax
mov dword [ebp - 0x3f0], esi
test esi, esi
je 0x4063cb
mov ecx, dword [ebp - 0x40c]
lea edx, [ebp - 0x404]
push edx
push ecx
mov eax, dword [ecx]
mov esi, dword [eax + 0x48]
mov ecx, esi
call dword [0x414664]
call esi
mov edi, eax
test edi, edi
js 0x406611
lea eax, [ebp - 0x3f4]
push eax
push 0x416e08
push 1
push 0
push 0x416e18
call dword [sym.imp.ole32.dll_CoCreateInstance]
mov edi, eax
test edi, edi
js 0x406611
mov eax, dword [ebp - 0x3f4]
push dword [ebp - 0x408]
push eax
mov ecx, dword [eax]
mov esi, dword [ecx + 0x20]
mov ecx, esi
call dword [0x414664]
call esi
mov edi, eax
test edi, edi
js 0x406611
mov eax, dword [ebp - 0x3f4]
mov edx, dword [ebp - 0x3f8]
push edx
push eax
mov ecx, dword [eax]
mov esi, dword [ecx + 0x90]
mov ecx, esi
call dword [0x414664]
call esi
mov edi, eax
test edi, edi
js 0x406611
mov eax, dword [ebp - 0x3f4]
mov esi, dword [ebp - 0x3fc]
push esi
push eax
mov ecx, dword [eax]
mov esi, dword [ecx + 0x28]
mov ecx, esi
call dword [0x414664]
call esi
mov edi, eax
test edi, edi
js 0x406611
mov eax, dword [ebp - 0x3f4]
push 1
push eax
mov ecx, dword [eax]
mov esi, dword [ecx + 0xa8]
mov ecx, esi
call dword [0x414664]
call esi
mov edi, eax
test edi, edi
js 0x406611
mov eax, dword [ebp - 0x3f4]
mov edx, dword [ebp - 0x400]
push edx
push eax
mov ecx, dword [eax]
mov esi, dword [ecx + 0x30]
mov ecx, esi
call dword [0x414664]
call esi
mov edi, eax
test edi, edi
js 0x406611
sub ebx, 0
je 0x406560
sub ebx, 1
je 0x40655c
mov ebx, 0x100
jmp 0x406563
push 6
jmp 0x406562
push 0x11
pop ebx
mov eax, dword [ebp - 0x3f4]
push ebx
push eax
mov ecx, dword [eax]
mov esi, dword [ecx + 0x40]
mov ecx, esi
call dword [0x414664]
call esi
mov edi, eax
test edi, edi
js 0x406611
cmp ebx, 0x100
je 0x4065ae
mov eax, dword [ebp - 0x3f4]
push dword [ebp - 0x3f0]
push eax
mov ecx, dword [eax]
mov esi, dword [ecx + 0x48]
mov ecx, esi
call dword [0x414664]
call esi
mov edi, eax
test edi, edi
js 0x406611
mov eax, dword [ebp - 0x3f4]
push SysReAllocString
push eax
mov ecx, dword [eax]
mov esi, dword [ecx + 0x98]
mov ecx, esi
call dword [0x414664]
call esi
mov edi, eax
test edi, edi
js 0x406611
mov eax, dword [ebp - 0x3f4]
push 0xffffffffffffffff
push eax
mov ecx, dword [eax]
mov esi, dword [ecx + 0x88]
mov ecx, esi
call dword [0x414664]
call esi
mov edi, eax
test edi, edi
js 0x406611
mov eax, dword [ebp - 0x404]
push dword [ebp - 0x3f4]
push eax
mov ecx, dword [eax]
mov esi, dword [ecx + 0x20]
mov ecx, esi
call dword [0x414664]
call esi
mov edi, eax
mov esi, dword [ebp - 0x3f0]
push dword [ebp - 0x408]
call dword [sym.imp.OLEAUT32.dll_SysStringLen]
mov eax, dword [ebp - 0x3f8]
test eax, eax
je 0x406634
push eax
call dword [sym.imp.OLEAUT32.dll_SysStringLen]
mov eax, dword [ebp - 0x3fc]
test eax, eax
je 0x406645
push eax
call dword [sym.imp.OLEAUT32.dll_SysStringLen]
mov eax, dword [ebp - 0x400]
test eax, eax
je 0x406656
push eax
call dword [sym.imp.OLEAUT32.dll_SysStringLen]
test esi, esi
je 0x406661
push esi
call dword [sym.imp.OLEAUT32.dll_SysStringLen]
mov ecx, dword [ebp - 0x3f4]
test ecx, ecx
je 0x40667b
mov eax, dword [ecx]
push ecx
mov esi, dword [eax + 8]
mov ecx, esi
call dword [0x414664]
call esi
mov ecx, dword [ebp - 0x404]
test ecx, ecx
je 0x406695
mov eax, dword [ecx]
push ecx
mov esi, dword [eax + 8]
mov ecx, esi
call dword [0x414664]
call esi
mov eax, edi
jmp 0x40669e
mov eax, 0x80004005
mov ecx, dword [ebp - 4]
pop edi
pop esi
xor ecx, ebp
pop ebx
call fcn.00410e60
leave
ret