Function at 0x10003e49c
Capabilities:
Access firewall policy via inetfwpolicy2

Disassembly:
mov rax, rsp
push rbp
push rsi
push rdi
push r12
push r13
push r14
push r15
sub rsp, 0x40
mov qword [rsp + 0x30], 0xfffffffffffffffe
mov qword [rax + 0x20], rbx
lea r13, [0x100152eb8]
mov r12d, 1
lea r14, [0x10001e5a0]
mov rcx, qword [0x100152eb8]
cmp rcx, r13
je 0x10003e4f2
test byte [rcx + 0x1c], r12b
je 0x10003e4f2
lea edx, [r12 + 0x53]
mov r8, r14
mov rcx, qword [rcx + 0x10]
call fcn.100034764
xor esi, esi
mov edi, esi
mov qword [rsp + 0x90], rsi
lea rax, [rsp + 0x90]
mov qword [rsp + 0x20], rax
lea r9, [0x100020300]
mov r8d, r12d
xor edx, edx
lea rcx, [0x1000202f0]
call qword [sym.imp.ole32.dll_CoCreateInstance]
mov ebx, eax
lea ebp, [rsi + 2]
lea r15d, [rsi + 5]
mov r10, qword [0x100152eb8]
cmp r10, r13
je 0x10003e576
test byte [r10 + 0x1c], bpl
je 0x10003e576
movzx edx, byte [r10 + 0x19]
mov eax, ebp
cmp ebx, esi
cmovge eax, r15d
cmp edx, eax
jl 0x10003e576
lea edx, [rsi + 0x55]
mov rax, qword [rsp + 0x90]
mov qword [rsp + 0x20], rax
mov r9d, ebx
mov r8, r14
mov rcx, qword [r10 + 0x10]
call fcn.10003bdc0
mov r10, qword [0x100152eb8]
cmp ebx, esi
jl 0x10003e712
mov word [rsp + 0x80], si
mov rcx, qword [rsp + 0x90]
mov rax, qword [rcx]
lea rdx, [rsp + 0x80]
call qword [rax + 0x60]
mov ebx, eax
mov r10, qword [0x100152eb8]
cmp r10, r13
je 0x10003e5e8
test byte [r10 + 0x1c], bpl
je 0x10003e5e8
movzx ecx, byte [r10 + 0x19]
mov eax, ebp
cmp ebx, esi
cmovge eax, r15d
cmp ecx, eax
jl 0x10003e5e8
movsx eax, word [rsp + 0x80]
mov edx, 0x56
mov dword [rsp + 0x20], eax
mov r9d, ebx
mov r8, r14
mov rcx, qword [r10 + 0x10]
call fcn.10003b338
mov r10, qword [0x100152eb8]
cmp ebx, esi
jl 0x10003e712
or eax, 0xffffffff
cmp ax, word [rsp + 0x80]
jne 0x10003e712
mov qword [rsp + 0x88], rsi
lea rax, [rsp + 0x88]
mov qword [rsp + 0x20], rax
lea r9, [0x1000202e0]
mov r8d, r12d
xor edx, edx
lea rcx, [0x1000202d0]
call qword [sym.imp.ole32.dll_CoCreateInstance]
mov ebx, eax
mov r10, qword [0x100152eb8]
cmp r10, r13
je 0x10003e67c
test byte [r10 + 0x1c], bpl
je 0x10003e67c
movzx ecx, byte [r10 + 0x19]
mov eax, ebp
cmp ebx, esi
cmovge eax, r15d
cmp ecx, eax
jl 0x10003e67c
mov edx, 0x57
mov rax, qword [rsp + 0x88]
mov qword [rsp + 0x20], rax
mov r9d, ebx
mov r8, r14
mov rcx, qword [r10 + 0x10]
call fcn.10003bdc0
mov r10, qword [0x100152eb8]
cmp ebx, esi
jl 0x10003e6f8
mov dword [rsp + 0x80], esi
mov rcx, qword [rsp + 0x88]
mov rax, qword [rcx]
lea rdx, [rsp + 0x80]
call qword [rax + 0x38]
mov ebx, eax
mov r10, qword [0x100152eb8]
cmp r10, r13
je 0x10003e6e8
test byte [r10 + 0x1c], bpl
je 0x10003e6e8
movzx ecx, byte [r10 + 0x19]
mov eax, ebp
cmp ebx, esi
cmovge eax, r15d
cmp ecx, eax
jl 0x10003e6e8
mov edx, 0x58
mov eax, dword [rsp + 0x80]
mov dword [rsp + 0x20], eax
mov r9d, ebx
mov r8, r14
mov rcx, qword [r10 + 0x10]
call fcn.10003b338
mov r10, qword [0x100152eb8]
cmp ebx, esi
jl 0x10003e6f8
test byte [rsp + 0x80], bpl
cmovne edi, r12d
mov rcx, qword [rsp + 0x88]
cmp rcx, rsi
je 0x10003e712
mov rax, qword [rcx]
call qword [rax + 0x10]
mov r10, qword [0x100152eb8]
cmp r10, r13
je 0x10003e738
test byte [r10 + 0x1c], r12b
je 0x10003e738
cmp byte [r10 + 0x19], r15b
jb 0x10003e738
mov edx, 0x59
mov r9d, edi
mov r8, r14
mov rcx, qword [r10 + 0x10]
call fcn.100036328
nop
mov rcx, qword [rsp + 0x90]
cmp rcx, rsi
je 0x10003e74b
mov rdx, qword [rcx]
call qword [rdx + 0x10]
mov eax, edi
mov rbx, qword [rsp + 0x98]
add rsp, 0x40
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbp
ret