Function at 0x4c8990
Capabilities:
Access firewall policy via inetfwpolicy2
Access firewall rule properties via inetfwrule

Disassembly:
sub esp, 0xc
push ebx
push ebp
push esi
push edi
mov ebp, ecx
mov dword [esp + 0x10], 0
push ebp
mov dword [esp + 0x18], 0
xor ebx, ebx
mov dword [esp + 0x1c], 0
call dword [sym.imp.OLEAUT32.dll_SysReAllocString]
mov esi, eax
push esi
call dword [sym.imp.OLEAUT32.dll_VariantInit]
test eax, eax
je 0x4c8d28
mov edi, dword [sym.imp.ole32.dll_CoCreateInstance]
lea eax, [esp + 0x18]
push eax
push 0x5f1df4
push 0x17
push ebx
push 0x5f1e64
call edi
test eax, eax
js 0x4c8d28
mov eax, dword [esp + 0x18]
lea edx, [esp + 0x14]
push edx
push eax
mov ecx, dword [eax]
call dword [ecx + 0x48]
test eax, eax
js 0x4c8d28
lea eax, [esp + 0x10]
push eax
push 0x5f1e34
push 0x17
push ebx
push 0x5f1e54
call edi
test eax, eax
js 0x4c8d28
mov eax, dword [esp + 0x10]
push 0x5f19ac
push eax
mov ecx, dword [eax]
call dword [ecx + 0x20]
test eax, eax
js 0x4c8d28
mov eax, dword [esp + 0x10]
push esi
push eax
mov ecx, dword [eax]
call dword [ecx + 0x30]
test eax, eax
js 0x4c8d28
mov eax, dword [esp + 0x10]
push 0x11
push eax
mov ecx, dword [eax]
call dword [ecx + 0x40]
test eax, eax
js 0x4c8d28
mov eax, dword [esp + 0x10]
push 0x5f19e8
push eax
mov ecx, dword [eax]
call dword [ecx + 0x48]
test eax, eax
js 0x4c8d28
mov eax, dword [esp + 0x10]
push str.Meshcentral_agent_UDP_port_for_local_peer_to_peer_traffic.
push eax
mov ecx, dword [eax]
call dword [ecx + 0x28]
test eax, eax
js 0x4c8d28
mov eax, dword [esp + 0x10]
push ebx
push eax
mov ecx, dword [eax]
call dword [ecx + 0xa0]
test eax, eax
js 0x4c8d28
mov eax, dword [esp + 0x10]
push 0xffffffffffffffff
push eax
mov ecx, dword [eax]
call dword [ecx + 0x88]
test eax, eax
js 0x4c8d28
mov eax, dword [esp + 0x14]
push dword [esp + 0x10]
push eax
mov ecx, dword [eax]
call dword [ecx + 0x20]
test eax, eax
js 0x4c8d28
mov eax, dword [esp + 0x10]
push eax
mov ecx, dword [eax]
call dword [ecx + 8]
lea eax, [esp + 0x10]
mov dword [esp + 0x10], ebx
push eax
push 0x5f1e34
push 0x17
push ebx
push 0x5f1e54
call edi
test eax, eax
js 0x4c8d28
mov eax, dword [esp + 0x10]
push 0x5f1a78
push eax
mov ecx, dword [eax]
call dword [ecx + 0x20]
test eax, eax
js 0x4c8d28
mov eax, dword [esp + 0x10]
push esi
push eax
mov ecx, dword [eax]
call dword [ecx + 0x30]
test eax, eax
js 0x4c8d28
mov eax, dword [esp + 0x10]
push 0x11
push eax
mov ecx, dword [eax]
call dword [ecx + 0x40]
test eax, eax
js 0x4c8d28
mov eax, dword [esp + 0x10]
push 0x5f19f4
push eax
mov ecx, dword [eax]
call dword [ecx + 0x48]
test eax, eax
js 0x4c8d28
mov eax, dword [esp + 0x10]
push str.Meshcentral_agent_UDP_port_for_internet_WebRTC_management_traffic.
push eax
mov ecx, dword [eax]
call dword [ecx + 0x28]
test eax, eax
js 0x4c8d28
mov eax, dword [esp + 0x10]
push 0xffffffffffffffff
push eax
mov ecx, dword [eax]
call dword [ecx + 0xa0]
test eax, eax
js 0x4c8d28
mov eax, dword [esp + 0x10]
push 0xffffffffffffffff
push eax
mov ecx, dword [eax]
call dword [ecx + 0x88]
test eax, eax
js 0x4c8d28
mov eax, dword [esp + 0x14]
push dword [esp + 0x10]
push eax
mov ecx, dword [eax]
call dword [ecx + 0x20]
test eax, eax
js 0x4c8d28
mov eax, dword [esp + 0x10]
push eax
mov ecx, dword [eax]
call dword [ecx + 8]
lea eax, [esp + 0x10]
mov dword [esp + 0x10], ebx
push eax
push 0x5f1e34
push 0x17
push ebx
push 0x5f1e54
call edi
test eax, eax
js 0x4c8d28
mov eax, dword [esp + 0x10]
push 0x5f1b38
push eax
mov ecx, dword [eax]
call dword [ecx + 0x20]
test eax, eax
js 0x4c8d28
mov eax, dword [esp + 0x10]
push esi
push eax
mov ecx, dword [eax]
call dword [ecx + 0x30]
test eax, eax
js 0x4c8d28
mov eax, dword [esp + 0x10]
push 6
push eax
mov ecx, dword [eax]
call dword [ecx + 0x40]
test eax, eax
js 0x4c8d28
mov eax, dword [esp + 0x10]
push str.16990
push eax
mov ecx, dword [eax]
call dword [ecx + 0x48]
test eax, eax
js 0x4c8d28
mov eax, dword [esp + 0x10]
push str.Meshcentral_agent_TCP_port_for_local_peer_to_peer_traffic.
push eax
mov ecx, dword [eax]
call dword [ecx + 0x28]
test eax, eax
js 0x4c8d28
mov eax, dword [esp + 0x10]
push 0xffffffffffffffff
push eax
mov ecx, dword [eax]
call dword [ecx + 0x88]
test eax, eax
js 0x4c8d28
mov eax, dword [esp + 0x14]
push dword [esp + 0x10]
push eax
mov ecx, dword [eax]
call dword [ecx + 0x20]
test eax, eax
js 0x4c8d28
mov eax, dword [esp + 0x10]
push eax
mov ecx, dword [eax]
call dword [ecx + 8]
lea eax, [esp + 0x10]
mov dword [esp + 0x10], ebx
push eax
push 0x5f1e34
push 0x17
push ebx
push 0x5f1e54
call edi
test eax, eax
js 0x4c8d28
mov eax, dword [esp + 0x10]
push 0x5f1bf8
push eax
mov ecx, dword [eax]
call dword [ecx + 0x20]
test eax, eax
js 0x4c8d28
mov eax, dword [esp + 0x10]
push esi
push eax
mov ecx, dword [eax]
call dword [ecx + 0x30]
test eax, eax
js 0x4c8d28
mov eax, dword [esp + 0x10]
push 6
push eax
mov ecx, dword [eax]
call dword [ecx + 0x40]
test eax, eax
js 0x4c8d28
mov eax, dword [esp + 0x10]
push str.16991
push eax
mov ecx, dword [eax]
call dword [ecx + 0x48]
test eax, eax
js 0x4c8d28
mov eax, dword [esp + 0x10]
push str.Meshcentral_agent_TCP_port_for_management_traffic.
push eax
mov ecx, dword [eax]
call dword [ecx + 0x28]
test eax, eax
js 0x4c8d28
mov eax, dword [esp + 0x10]
push 0xffffffffffffffff
push eax
mov ecx, dword [eax]
call dword [ecx + 0x88]
test eax, eax
js 0x4c8d28
mov eax, dword [esp + 0x14]
push dword [esp + 0x10]
push eax
mov ecx, dword [eax]
call dword [ecx + 0x20]
test eax, eax
js 0x4c8d28
mov eax, dword [esp + 0x10]
push eax
mov ecx, dword [eax]
call dword [ecx + 8]
xor ecx, ecx
mov dword [esp + 0x10], ecx
lea ebx, [ecx + 1]
jmp 0x4c8d2c
mov ecx, dword [esp + 0x10]
test esi, esi
je 0x4c8d3b
push esi
call dword [sym.imp.OLEAUT32.dll_SysStringLen]
mov ecx, dword [esp + 0x10]
test ecx, ecx
je 0x4c8d45
mov eax, dword [ecx]
push ecx
call dword [eax + 8]
mov ecx, dword [esp + 0x14]
test ecx, ecx
je 0x4c8d53
mov eax, dword [ecx]
push ecx
call dword [eax + 8]
mov eax, dword [esp + 0x18]
test eax, eax
je 0x4c8d61
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
test ebx, ebx
jne 0x4c8d6c
mov edx, ebp
call fcn.004c8830
pop edi
pop esi
pop ebp
mov eax, ebx
pop ebx
add esp, 0xc
ret