Function at 0x140005710
Capabilities:
Access firewall policy via inetfwpolicy2
Access firewall rule properties via inetfwrule

Disassembly:
mov qword [rsp + 0x10], rbx
push rbp
push rsi
push rdi
push r12
push r13
push r14
push r15
mov rbp, rsp
sub rsp, 0x70
mov rax, qword [0x1400de7c0]
xor rax, rsp
mov qword [rbp - 0x10], rax
mov r15, r8
mov rsi, rcx
xor r13d, r13d
mov qword [rbp - 0x30], r13
mov qword [rbp - 0x38], r13
mov qword [rbp - 0x40], r13
mov edx, 2
xor ecx, ecx
call qword [sym.imp.ole32.dll_CoInitializeEx]
mov ebx, eax
test eax, eax
js 0x140005795
lea rax, [rbp - 0x30]
mov qword [rsp + 0x20], rax
lea r9, [0x1400d04f8]
xor edx, edx
mov r8d, 1
lea rcx, [0x1400d0610]
call qword [sym.imp.ole32.dll_CoCreateInstance]
mov ebx, eax
test eax, eax
jns 0x140005795
call qword [sym.imp.ole32.dll_CoUninitialize]
mov eax, ebx
jmp 0x140005bad
test ebx, ebx
js 0x1400057ba
mov rcx, qword [rbp - 0x30]
mov rax, qword [rcx]
lea rdx, [rbp - 0x38]
call qword [rax + 0x90]
mov ebx, eax
test eax, eax
jns 0x1400057c1
mov rcx, qword [rbp - 0x30]
mov rdx, qword [rcx]
call qword [rdx + reloc.WS2_32.dll_recv]
mov eax, ebx
jmp 0x140005bad
mov ecx, 0x18
call fcn.140079378
mov rdi, rax
mov qword [rbp - 0x20], rax
test rax, rax
je 0x14000580a
xorps xmm0, xmm0
xor eax, eax
movups xmmword [rdi], xmm0
mov qword [rdi + 0x10], rax
mov qword [rdi + 8], r13
mov dword [rdi + 0x10], 1
mov rcx, rsi
call qword [sym.imp.OLEAUT32.dll_SysReAllocString]
mov qword [rdi], rax
test rax, rax
jne 0x14000580d
test rsi, rsi
jne 0x140005bdc
jmp 0x14000580d
mov rdi, r13
mov qword [rbp - 0x18], rdi
test rdi, rdi
je 0x140005c08
mov rcx, qword [rbp - 0x38]
mov rax, qword [rcx]
lea r8, [rbp - 0x40]
mov rdx, qword [rdi]
call qword [rax + 0x50]
mov r14d, 0xffffffff
test eax, eax
js 0x140005960
mov rcx, qword [rbp - 0x40]
mov rax, qword [rcx]
lea rdx, [rbp - 0x20]
call qword [rax + 0x58]
mov rcx, qword [rbp - 0x20]
mov rax, rcx
mov r9, r15
sub r9, rcx
nop dword [rax]
nop dword [rax + rax]
movzx r8d, word [rax]
movzx edx, word [rax + r9]
sub r8d, edx
jne 0x140005876
add rax, 2
test edx, edx
jne 0x140005860
test r8d, r8d
je 0x14000592e
mov rax, qword [rbp - 0x40]
mov rcx, qword [rax]
mov rsi, qword [rcx + 0x60]
mov ecx, 0x18
call fcn.140079378
mov rbx, rax
mov qword [rbp - 0x28], rax
test rax, rax
je 0x1400058d3
xorps xmm0, xmm0
xor eax, eax
movups xmmword [rbx], xmm0
mov qword [rbx + 0x10], rax
mov qword [rbx + 8], r13
mov dword [rbx + 0x10], 1
mov rcx, r15
call qword [sym.imp.OLEAUT32.dll_SysReAllocString]
mov qword [rbx], rax
test rax, rax
jne 0x1400058d6
test r15, r15
jne 0x140005be7
jmp 0x1400058d6
mov rbx, r13
mov qword [rbp - 0x28], rbx
test rbx, rbx
je 0x140005c13
mov rdx, qword [rbx]
mov rcx, qword [rbp - 0x40]
call rsi
nop
mov eax, r14d
lock xadd dword [rbx + 0x10], eax
cmp eax, 1
jne 0x14000592a
mov rcx, qword [rbx]
test rcx, rcx
je 0x14000590b
call qword [sym.imp.OLEAUT32.dll_SysStringLen]
mov qword [rbx], r13
mov rcx, qword [rbx + 8]
test rcx, rcx
je 0x14000591d
call fcn.140079370
mov qword [rbx + 8], r13
mov edx, 0x18
mov rcx, rbx
call fcn.140079370
mov rcx, qword [rbp - 0x20]
call qword [sym.imp.OLEAUT32.dll_SysStringLen]
mov rcx, qword [rbp - 0x40]
mov rax, qword [rcx]
call qword [rax + reloc.WS2_32.dll_recv]
mov rcx, qword [rbp - 0x38]
mov rax, qword [rcx]
call qword [rax + reloc.WS2_32.dll_recv]
mov rcx, qword [rbp - 0x30]
mov rax, qword [rcx]
call qword [rax + reloc.WS2_32.dll_recv]
call qword [sym.imp.ole32.dll_CoUninitialize]
mov r12d, r13d
jmp 0x140005b6e
lea rax, [rbp - 0x40]
mov qword [rsp + 0x20], rax
lea r9, [0x1400d0570]
xor edx, edx
mov r8d, 1
lea rcx, [0x1400d0600]
call qword [sym.imp.ole32.dll_CoCreateInstance]
mov r12d, eax
test eax, eax
jns 0x1400059a5
mov rcx, qword [rbp - 0x38]
mov rax, qword [rcx]
call qword [rax + reloc.WS2_32.dll_recv]
mov rcx, qword [rbp - 0x30]
mov rax, qword [rcx]
call qword [rax + reloc.WS2_32.dll_recv]
jmp 0x140005b6e
mov ecx, 0x18
call fcn.140079378
mov rbx, rax
mov qword [rbp - 0x20], rax
test rax, rax
je 0x1400059ed
xorps xmm0, xmm0
xor eax, eax
movups xmmword [rbx], xmm0
mov qword [rbx + 0x10], rax
mov qword [rbx + 8], r13
mov dword [rbx + 0x10], 1
lea rcx, str.No_description_provided.
call qword [sym.imp.OLEAUT32.dll_SysReAllocString]
mov qword [rbx], rax
test rax, rax
je 0x140005bf2
jmp 0x1400059f0
mov rbx, r13
mov qword [rbp - 0x20], rbx
test rbx, rbx
je 0x140005c1e
mov ecx, 0x18
call fcn.140079378
mov rsi, rax
mov qword [rbp - 0x28], rax
test rax, rax
je 0x140005a46
xorps xmm0, xmm0
xor eax, eax
movups xmmword [rsi], xmm0
mov qword [rsi + 0x10], rax
mov qword [rsi + 8], r13
mov dword [rsi + 0x10], 1
mov rcx, r15
call qword [sym.imp.OLEAUT32.dll_SysReAllocString]
mov qword [rsi], rax
test rax, rax
jne 0x140005a49
test r15, r15
jne 0x140005bfd
jmp 0x140005a49
mov rsi, r13
mov qword [rbp - 0x28], rsi
test rsi, rsi
je 0x140005bd1
mov rcx, qword [rbp - 0x40]
mov rax, qword [rcx]
mov rdx, qword [rdi]
call qword [rax + 0x40]
mov rcx, qword [rbp - 0x40]
mov rax, qword [rcx]
mov rdx, qword [rbx]
call qword [rax + 0x50]
mov rcx, qword [rbp - 0x40]
mov rax, qword [rcx]
mov rdx, qword [rsi]
call qword [rax + 0x60]
mov rcx, qword [rbp - 0x40]
mov rax, qword [rcx]
mov edx, 1
call qword [rax + 0x150]
mov rcx, qword [rbp - 0x40]
mov rax, qword [rcx]
mov edx, 1
call qword [rax + 0xe0]
mov rcx, qword [rbp - 0x40]
mov rax, qword [rcx]
mov edx, r14d
call qword [rax + pe_nt_image_headers64]
mov rcx, qword [rbp - 0x38]
mov rax, qword [rcx]
mov rdx, qword [rbp - 0x40]
call qword [rax + 0x40]
mov r12d, eax
shr eax, 0x1f
xor al, 1
mov byte [0x1400e19a0], al
mov rcx, qword [rbp - 0x40]
mov rax, qword [rcx]
call qword [rax + reloc.WS2_32.dll_recv]
mov rcx, qword [rbp - 0x38]
mov rax, qword [rcx]
call qword [rax + reloc.WS2_32.dll_recv]
mov rcx, qword [rbp - 0x30]
mov rax, qword [rcx]
call qword [rax + reloc.WS2_32.dll_recv]
call qword [sym.imp.ole32.dll_CoUninitialize]
nop
mov eax, r14d
lock xadd dword [rsi + 0x10], eax
cmp eax, 1
jne 0x140005b30
mov rcx, qword [rsi]
test rcx, rcx
je 0x140005b10
call qword [sym.imp.OLEAUT32.dll_SysStringLen]
mov qword [rsi], r13
mov rcx, qword [rsi + 8]
test rcx, rcx
je 0x140005b22
call fcn.140079370
mov qword [rsi + 8], r13
mov edx, 0x18
mov rcx, rsi
call fcn.140079370
nop
mov eax, r14d
lock xadd dword [rbx + 0x10], eax
cmp eax, 1
jne 0x140005b6e
mov rcx, qword [rbx]
test rcx, rcx
je 0x140005b4e
call qword [sym.imp.OLEAUT32.dll_SysStringLen]
mov qword [rbx], r13
mov rcx, qword [rbx + 8]
test rcx, rcx
je 0x140005b60
call fcn.140079370
mov qword [rbx + 8], r13
mov edx, 0x18
mov rcx, rbx
call fcn.140079370
nop
lock xadd dword [rdi + 0x10], r14d
cmp r14d, 1
jne 0x140005baa
mov rcx, qword [rdi]
test rcx, rcx
je 0x140005b8b
call qword [sym.imp.OLEAUT32.dll_SysStringLen]
mov qword [rdi], r13
mov rcx, qword [rdi + 8]
test rcx, rcx
je 0x140005b9d
call fcn.140079370
mov qword [rdi + 8], r13
mov edx, 0x18
mov rcx, rdi
call fcn.140079370
mov eax, r12d
mov rcx, qword [rbp - 0x10]
xor rcx, rsp
call fcn.140079350
mov rbx, qword [rsp + 0xb8]
add rsp, 0x70
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbp
ret
mov ecx, 0x8007000e
call fcn.1400791b0
nop
mov ecx, 0x8007000e
call fcn.1400791b0
nop
mov ecx, 0x8007000e
call fcn.1400791b0
nop
mov ecx, 0x8007000e
call fcn.1400791b0
nop
mov ecx, 0x8007000e
call fcn.1400791b0
nop
mov ecx, 0x8007000e
call fcn.1400791b0
nop
mov ecx, 0x8007000e
call fcn.1400791b0
int3
mov ecx, 0x8007000e
call fcn.1400791b0
int3