Function at 0x4d2880
Capabilities:
Access firewall settings via inetfwmgr

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x56d1b9
mov eax, dword fs:[0]
push eax
sub esp, 0x8e0
mov eax, dword [0x5c5ebc]
xor eax, ebp
mov dword [ebp - 0x4c], eax
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov eax, dword [ebp + 8]
push eax
lea ecx, [ebp - 0x18]
call fcn.00415da0
mov dword [ebp - 4], 0
cmp dword [ebp + 8], 0
je 0x4d28d4
mov ecx, dword [ebp + 8]
push ecx
call fcn.00528324
add esp, 4
test eax, eax
jne 0x4d2916
xor edx, edx
mov word [ebp - 0x84c], dx
push 0x7fe
push 0
lea eax, [ebp - 0x84a]
push eax
call fcn.005281f0
add esp, 0xc
push 0x400
lea ecx, [ebp - 0x84c]
push ecx
push 0
call dword [sym.imp.KERNEL32.dll_GetModuleFileNameW]
lea edx, [ebp - 0x84c]
push edx
lea ecx, [ebp - 0x18]
call fcn.00415e60
mov dword [ebp - 0x40], 0
mov dword [ebp - 0x14], 0x80004005
mov dword [ebp - 0x28], 0
lea ecx, [ebp - 0x48]
call fcn.00415d60
mov byte [ebp - 4], 1
lea ecx, [ebp - 0x38]
call fcn.00415d60
mov byte [ebp - 4], 2
lea ecx, [ebp - 0x44]
call fcn.00415d60
mov byte [ebp - 4], 3
mov dword [ebp - 0x24], 0
mov dword [ebp - 0x10], 0
mov dword [ebp - 0x28], 0
lea ecx, [ebp - 0x18]
call fcn.00415f60
push eax
lea eax, [ebp - 0x850]
push eax
call fcn.004cb480
add esp, 8
mov dword [ebp - 0x888], eax
mov ecx, dword [ebp - 0x888]
mov dword [ebp - 0x88c], ecx
mov byte [ebp - 4], 4
mov edx, dword [ebp - 0x88c]
push edx
lea ecx, [ebp - 0x38]
call fcn.00415e40
mov byte [ebp - 4], 3
lea ecx, [ebp - 0x850]
call fcn.00415e20
push 0x5c
lea ecx, [ebp - 0x18]
call fcn.004586b0
add eax, 1
push eax
lea eax, [ebp - 0x854]
push eax
lea ecx, [ebp - 0x18]
call fcn.004118f0
mov dword [ebp - 0x890], eax
mov ecx, dword [ebp - 0x890]
mov dword [ebp - 0x894], ecx
mov byte [ebp - 4], 5
mov edx, dword [ebp - 0x894]
push edx
lea ecx, [ebp - 0x48]
call fcn.00415e40
mov byte [ebp - 4], 3
lea ecx, [ebp - 0x854]
call fcn.00415e20
push 0x2e
lea ecx, [ebp - 0x48]
call fcn.004586b0
push eax
push 0
lea eax, [ebp - 0x858]
push eax
lea ecx, [ebp - 0x48]
call fcn.00415e80
mov dword [ebp - 0x898], eax
mov ecx, dword [ebp - 0x898]
mov dword [ebp - 0x89c], ecx
mov byte [ebp - 4], 6
mov edx, dword [ebp - 0x89c]
push edx
lea ecx, [ebp - 0x48]
call fcn.00415e40
mov byte [ebp - 4], 3
lea ecx, [ebp - 0x858]
call fcn.00415e20
lea eax, [ebp - 0x48]
push eax
lea ecx, [ebp - 0x44]
call fcn.00415e40
mov dword [ebp - 0x30], 0
mov dword [ebp - 0x1c], 0
mov dword [ebp - 0x3c], 0
mov dword [ebp - 0x20], 0
mov dword [ebp - 0x34], 0
push 6
push 0
call dword [sym.imp.ole32.dll_CoInitializeEx]
mov dword [ebp - 0x14], eax
cmp dword [ebp - 0x14], 0x80010106
je 0x4d2aba
mov ecx, dword [ebp - 0x14]
mov dword [ebp - 0x40], ecx
cmp dword [ebp - 0x40], 0
jge 0x4d2aba
mov edx, dword [ebp - 0x40]
push edx
push 0x58d6a4
push 1
call fcn.004d0e00
add esp, 0xc
jmp 0x4d3190
lea eax, [ebp - 0x24]
push eax
push 0x58e5ec
push 1
push 0
push 0x58e5dc
call dword [sym.imp.ole32.dll_CoCreateInstance]
mov dword [ebp - 0x40], eax
cmp dword [ebp - 0x40], 0
jge 0x4d2af0
mov ecx, dword [ebp - 0x40]
push ecx
push 0x58d6e8
push 1
call fcn.004d0e00
add esp, 0xc
jmp 0x4d2b52
lea edx, [ebp - 0x10]
push edx
mov eax, dword [ebp - 0x24]
mov ecx, dword [eax]
mov edx, dword [ebp - 0x24]
push edx
mov eax, dword [ecx + 0x1c]
call eax
mov dword [ebp - 0x40], eax
cmp dword [ebp - 0x40], 0
jge 0x4d2b20
mov ecx, dword [ebp - 0x40]
push ecx
push 0x58d730
push 1
call fcn.004d0e00
add esp, 0xc
jmp 0x4d2b52
lea edx, [ebp - 0x28]
push edx
mov eax, dword [ebp + 0x10]
push eax
mov ecx, dword [ebp - 0x10]
mov edx, dword [ecx]
mov eax, dword [ebp - 0x10]
push eax
mov ecx, dword [edx + 0x20]
call ecx
mov dword [ebp - 0x40], eax
cmp dword [ebp - 0x40], 0
jge 0x4d2b52
mov edx, dword [ebp - 0x40]
push edx
push str.GetProfileByType_failed:_0x_08lx
push 1
call fcn.004d0e00
add esp, 0xc
cmp dword [ebp - 0x10], 0
je 0x4d2b6d
mov eax, dword [ebp - 0x10]
mov ecx, dword [eax]
mov edx, dword [ebp - 0x10]
push edx
mov eax, dword [ecx + 8]
call eax
mov dword [ebp - 0x10], 0
cmp dword [ebp - 0x24], 0
je 0x4d2b88
mov ecx, dword [ebp - 0x24]
mov edx, dword [ecx]
mov eax, dword [ebp - 0x24]
push eax
mov ecx, dword [edx + 8]
call ecx
mov dword [ebp - 0x24], 0
cmp dword [ebp - 0x40], 0
jge 0x4d2ba6
mov edx, dword [ebp - 0x40]
push edx
push 0x58d7b8
push 1
call fcn.004d0e00
add esp, 0xc
jmp 0x4d3190
lea eax, [ebp - 0x20]
push eax
mov ecx, dword [ebp - 0x28]
mov edx, dword [ecx]
mov eax, dword [ebp - 0x28]
push eax
mov ecx, dword [edx + 0x50]
call ecx
mov dword [ebp - 0x40], eax
cmp dword [ebp - 0x40], 0
jge 0x4d2bd9
mov edx, dword [ebp - 0x40]
push edx
push 0x58d840
push 1
call fcn.004d0e00
add esp, 0xc
jmp 0x4d2e49
lea ecx, [ebp - 0x38]
call fcn.00415f60
push eax
call dword [sym.imp.OLEAUT32.dll_SysReAllocString]
mov dword [ebp - 0x1c], eax
cmp dword [ebp - 0x1c], 0
jne 0x4d2c10
mov dword [ebp - 0x40], 0x8007000e
mov eax, dword [ebp - 0x40]
push eax
push 0x58d898
push 1
call fcn.004d0e00
add esp, 0xc
jmp 0x4d2e49
lea ecx, [ebp - 0x3c]
push ecx
mov edx, dword [ebp - 0x1c]
push edx
mov eax, dword [ebp - 0x20]
mov ecx, dword [eax]
mov edx, dword [ebp - 0x20]
push edx
mov eax, dword [ecx + 0x28]
call eax
mov dword [ebp - 0x40], eax
cmp dword [ebp - 0x40], 0
jl 0x4d2dad
lea ecx, [ebp - 0x2c]
push ecx
mov edx, dword [ebp - 0x3c]
mov eax, dword [edx]
mov ecx, dword [ebp - 0x3c]
push ecx
mov edx, dword [eax + 0x44]
call edx
mov dword [ebp - 0x40], eax
cmp dword [ebp - 0x40], 0
jge 0x4d2c66
mov eax, dword [ebp - 0x40]
push eax
push 0x58d8d8
push 1
call fcn.004d0e00
add esp, 0xc
jmp 0x4d2e49
movsx ecx, word [ebp - 0x2c]
test ecx, ecx
je 0x4d2d13
mov dword [ebp - 0x34], 1
lea ecx, [ebp - 0x44]
call fcn.00415f60
push eax
lea edx, [ebp - 0x85c]
push edx
call fcn.004cb4b0
add esp, 8
mov dword [ebp - 0x8a0], eax
mov eax, dword [ebp - 0x8a0]
mov dword [ebp - 0x8a4], eax
mov byte [ebp - 4], 7
mov ecx, dword [ebp - 0x8a4]
call fcn.00415f60
push eax
lea ecx, [ebp - 0x860]
push ecx
call fcn.00499930
add esp, 8
mov dword [ebp - 0x8a8], eax
mov edx, dword [ebp - 0x8a8]
mov dword [ebp - 0x8ac], edx
mov byte [ebp - 4], 8
mov eax, dword [ebp - 0x8ac]
mov ecx, dword [eax]
push ecx
push str.Authorized_application__s_is_enabled_in_the_firewall.
push 1
call fcn.004d0e00
add esp, 0xc
mov byte [ebp - 4], 7
lea ecx, [ebp - 0x860]
call fcn.00415e20
mov byte [ebp - 4], 3
lea ecx, [ebp - 0x85c]
call fcn.00415e20
jmp 0x4d2da8
lea ecx, [ebp - 0x44]
call fcn.00415f60
push eax
lea edx, [ebp - 0x864]
push edx
call fcn.004cb4b0
add esp, 8
mov dword [ebp - 0x8b0], eax
mov eax, dword [ebp - 0x8b0]
mov dword [ebp - 0x8b4], eax
mov byte [ebp - 4], 9
mov ecx, dword [ebp - 0x8b4]
call fcn.00415f60
push eax
lea ecx, [ebp - 0x868]
push ecx
call fcn.00499930
add esp, 8
mov dword [ebp - 0x8b8], eax
mov edx, dword [ebp - 0x8b8]
mov dword [ebp - 0x8bc], edx
mov byte [ebp - 4], 0xa
mov eax, dword [ebp - 0x8bc]
mov ecx, dword [eax]
push ecx
push 0x58d9b0
push 1
call fcn.004d0e00
add esp, 0xc
mov byte [ebp - 4], 9
lea ecx, [ebp - 0x868]
call fcn.00415e20
mov byte [ebp - 4], 3
lea ecx, [ebp - 0x864]
call fcn.00415e20
jmp 0x4d2e49
mov dword [ebp - 0x40], 0
lea ecx, [ebp - 0x44]
call fcn.00415f60
push eax
lea edx, [ebp - 0x86c]
push edx
call fcn.004cb4b0
add esp, 8
mov dword [ebp - 0x8c0], eax
mov eax, dword [ebp - 0x8c0]
mov dword [ebp - 0x8c4], eax
mov byte [ebp - 4], 0xb
mov ecx, dword [ebp - 0x8c4]
call fcn.00415f60
push eax
lea ecx, [ebp - 0x870]
push ecx
call fcn.00499930
add esp, 8
mov dword [ebp - 0x8c8], eax
mov edx, dword [ebp - 0x8c8]
mov dword [ebp - 0x8cc], edx
mov byte [ebp - 4], 0xc
mov eax, dword [ebp - 0x8cc]
mov ecx, dword [eax]
push ecx
push str.Authorized_application__s_is_disabled_in_the_firewall.
push 1
call fcn.004d0e00
add esp, 0xc
mov byte [ebp - 4], 0xb
lea ecx, [ebp - 0x870]
call fcn.00415e20
mov byte [ebp - 4], 3
lea ecx, [ebp - 0x86c]
call fcn.00415e20
mov edx, dword [ebp - 0x1c]
push edx
call dword [sym.imp.OLEAUT32.dll_SysStringLen]
cmp dword [ebp - 0x3c], 0
je 0x4d2e6e
mov eax, dword [ebp - 0x3c]
mov ecx, dword [eax]
mov edx, dword [ebp - 0x3c]
push edx
mov eax, dword [ecx + 8]
call eax
mov dword [ebp - 0x3c], 0
cmp dword [ebp - 0x20], 0
je 0x4d2e89
mov ecx, dword [ebp - 0x20]
mov edx, dword [ecx]
mov eax, dword [ebp - 0x20]
push eax
mov ecx, dword [edx + 8]
call ecx
mov dword [ebp - 0x20], 0
cmp dword [ebp - 0x34], 0
jne 0x4d2e95
cmp dword [ebp + 0xc], 0
jne 0x4d2ea9
cmp dword [ebp - 0x34], 0
je 0x4d3190
cmp dword [ebp + 0xc], 0
jne 0x4d3190
lea edx, [ebp - 0x20]
push edx
mov eax, dword [ebp - 0x28]
mov ecx, dword [eax]
mov edx, dword [ebp - 0x28]
push edx
mov eax, dword [ecx + 0x50]
call eax
mov dword [ebp - 0x40], eax
cmp dword [ebp - 0x40], 0
jge 0x4d2edc
mov ecx, dword [ebp - 0x40]
push ecx
push str.get_AuthorizedApplications_failed:_0x_08lx
push 1
call fcn.004d0e00
add esp, 0xc
jmp 0x4d3190
lea edx, [ebp - 0x3c]
push edx
push 0x58e5cc
push 1
push 0
push 0x58e5bc
call dword [sym.imp.ole32.dll_CoCreateInstance]
mov dword [ebp - 0x40], eax
cmp dword [ebp - 0x40], 0
jge 0x4d2f15
mov eax, dword [ebp - 0x40]
push eax
push 0x58dae8
push 1
call fcn.004d0e00
add esp, 0xc
jmp 0x4d3190
lea ecx, [ebp - 0x38]
call fcn.00415f60
push eax
call dword [sym.imp.OLEAUT32.dll_SysReAllocString]
mov dword [ebp - 0x1c], eax
cmp dword [ebp - 0x1c], 0
jne 0x4d2f4c
mov dword [ebp - 0x40], 0x8007000e
mov ecx, dword [ebp - 0x40]
push ecx
push 0x58db2c
push 1
call fcn.004d0e00
add esp, 0xc
jmp 0x4d3190
mov edx, dword [ebp - 0x1c]
push edx
mov eax, dword [ebp - 0x3c]
mov ecx, dword [eax]
mov edx, dword [ebp - 0x3c]
push edx
mov eax, dword [ecx + 0x28]
call eax
mov dword [ebp - 0x40], eax
cmp dword [ebp - 0x40], 0
jge 0x4d2f7f
mov ecx, dword [ebp - 0x40]
push ecx
push str.put_ProcessImageFileName_failed:_0x_08lx
push 1
call fcn.004d0e00
add esp, 0xc
jmp 0x4d3190
lea ecx, [ebp - 0x44]
call fcn.00415f60
push eax
call dword [sym.imp.OLEAUT32.dll_SysReAllocString]
mov dword [ebp - 0x30], eax
mov edx, dword [ebp - 0x30]
push edx
call dword [sym.imp.OLEAUT32.dll_VariantInit]
test eax, eax
jne 0x4d2fbe
mov dword [ebp - 0x40], 0x8007000e
mov eax, dword [ebp - 0x40]
push eax
push 0x58dbc4
push 1
call fcn.004d0e00
add esp, 0xc
jmp 0x4d3190
mov ecx, dword [ebp - 0x30]
push ecx
mov edx, dword [ebp - 0x3c]
mov eax, dword [edx]
mov ecx, dword [ebp - 0x3c]
push ecx
mov edx, dword [eax + 0x20]
call edx
mov dword [ebp - 0x40], eax
cmp dword [ebp - 0x40], 0
jge 0x4d2ff1
mov eax, dword [ebp - 0x40]
push eax
push 0x58d80c
push 1
call fcn.004d0e00
add esp, 0xc
jmp 0x4d3190
cmp dword [ebp + 0xc], 0
je 0x4d30c8
mov ecx, dword [ebp - 0x3c]
push ecx
mov edx, dword [ebp - 0x20]
mov eax, dword [edx]
mov ecx, dword [ebp - 0x20]
push ecx
mov edx, dword [eax + 0x20]
call edx
mov dword [ebp - 0x40], eax
cmp dword [ebp - 0x40], 0
jge 0x4d302e
mov eax, dword [ebp - 0x40]
push eax
push 0x58dc04
push 1
call fcn.004d0e00
add esp, 0xc
jmp 0x4d3190
lea ecx, [ebp - 0x44]
call fcn.00415f60
push eax
lea ecx, [ebp - 0x874]
push ecx
call fcn.004cb4b0
add esp, 8
mov dword [ebp - 0x8d0], eax
mov edx, dword [ebp - 0x8d0]
mov dword [ebp - 0x8d4], edx
mov byte [ebp - 4], 0xd
mov ecx, dword [ebp - 0x8d4]
call fcn.00415f60
push eax
lea eax, [ebp - 0x878]
push eax
call fcn.00499930
add esp, 8
mov dword [ebp - 0x8d8], eax
mov ecx, dword [ebp - 0x8d8]
mov dword [ebp - 0x8dc], ecx
mov byte [ebp - 4], 0xe
mov edx, dword [ebp - 0x8dc]
mov eax, dword [edx]
push eax
push str.Authorized_application__s_is_now_enabled_in_the_firewall.
push 1
call fcn.004d0e00
add esp, 0xc
mov byte [ebp - 4], 0xd
lea ecx, [ebp - 0x878]
call fcn.00415e20
mov byte [ebp - 4], 3
lea ecx, [ebp - 0x874]
call fcn.00415e20
jmp 0x4d3190
mov ecx, dword [ebp - 0x1c]
push ecx
mov edx, dword [ebp - 0x20]
mov eax, dword [edx]
mov ecx, dword [ebp - 0x20]
push ecx
mov edx, dword [eax + 0x24]
call edx
mov dword [ebp - 0x40], eax
cmp dword [ebp - 0x40], 0
jge 0x4d30fb
mov eax, dword [ebp - 0x40]
push eax
push 0x58dcdc
push 1
call fcn.004d0e00
add esp, 0xc
jmp 0x4d3190
lea ecx, [ebp - 0x44]
call fcn.00415f60
push eax
lea ecx, [ebp - 0x87c]
push ecx
call fcn.004cb4b0
add esp, 8
mov dword [ebp - 0x8e0], eax
mov edx, dword [ebp - 0x8e0]
mov dword [ebp - 0x8e4], edx
mov byte [ebp - 4], 0xf
mov ecx, dword [ebp - 0x8e4]
call fcn.00415f60
push eax
lea eax, [ebp - 0x880]
push eax
call fcn.00499930
add esp, 8
mov dword [ebp - 0x8e8], eax
mov ecx, dword [ebp - 0x8e8]
mov dword [ebp - 0x8ec], ecx
mov byte [ebp - 4], 0x10
mov edx, dword [ebp - 0x8ec]
mov eax, dword [edx]
push eax
push str.Authorized_application__s_is_now_disabled_in_the_firewall.
push 1
call fcn.004d0e00
add esp, 0xc
mov byte [ebp - 4], 0xf
lea ecx, [ebp - 0x880]
call fcn.00415e20
mov byte [ebp - 4], 3
lea ecx, [ebp - 0x87c]
call fcn.00415e20
mov ecx, dword [ebp - 0x30]
push ecx
call dword [sym.imp.OLEAUT32.dll_SysStringLen]
mov edx, dword [ebp - 0x1c]
push edx
call dword [sym.imp.OLEAUT32.dll_SysStringLen]
cmp dword [ebp - 0x3c], 0
je 0x4d31b8
mov eax, dword [ebp - 0x3c]
mov ecx, dword [eax]
mov edx, dword [ebp - 0x3c]
push edx
mov eax, dword [ecx + 8]
call eax
cmp dword [ebp - 0x20], 0
je 0x4d31cc
mov ecx, dword [ebp - 0x20]
mov edx, dword [ecx]
mov eax, dword [ebp - 0x20]
push eax
mov ecx, dword [edx + 8]
call ecx
cmp dword [ebp - 0x28], 0
je 0x4d31e0
mov edx, dword [ebp - 0x28]
mov eax, dword [edx]
mov ecx, dword [ebp - 0x28]
push ecx
mov edx, dword [eax + 8]
call edx
cmp dword [ebp - 0x14], 0
jl 0x4d31ec
call dword [sym.imp.ole32.dll_CoUninitialize]
xor eax, eax
cmp dword [ebp - 0x40], 0
sete al
mov dword [ebp - 0x884], eax
mov byte [ebp - 4], 2
lea ecx, [ebp - 0x44]
call fcn.00415e20
mov byte [ebp - 4], 1
lea ecx, [ebp - 0x38]
call fcn.00415e20
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x48]
call fcn.00415e20
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x18]
call fcn.00415e20
mov eax, dword [ebp - 0x884]
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
mov ecx, dword [ebp - 0x4c]
xor ecx, ebp
call fcn.00527aad
mov esp, ebp
pop ebp
ret