Function at 0x489e90
Capabilities:
Read file on windows
Read pipe
Receive data
Receive data on socket

Disassembly:
push ebp
mov ebp, esp
sub esp, 8
push ebx
push esi
push edi
push 0x668d40
call fcn.0047e9d0
mov ecx, dword [ebp + 8]
mov eax, dword [0x668d6c]
push 0x668d40
mov ebx, dword [eax + ecx*4]
call fcn.0047e9e0
mov eax, dword [ebx + 0x58]
add esp, 8
xor edi, edi
test al, 0x28
je 0x48a117
test al, 8
je 0x489f5b
push edi
lea eax, [ebp - 4]
push eax
push dword [ebp + 0x10]
push dword [ebp + 0xc]
push dword [ebx + 0x60]
call fcn.005a68ac
add esp, 4
push eax
call dword [sym.imp.KERNEL32.dll_ReadFile]
push eax
call fcn.00590b90
add esp, 4
test eax, eax
mov eax, dword [ebp - 4]
jne 0x489f54
test eax, eax
jne 0x489f54
mov eax, dword fs:[0x2c]
mov esi, dword [eax]
mov eax, dword [esi + 0x28f0]
test eax, eax
jne 0x489f18
call fcn.00596e90
push 0xe8
push 0x6d
push 2
push dword [eax]
call fcn.00488c00
add esp, 0x10
test eax, eax
jne 0x48a10e
mov eax, dword [esi + 0x28f0]
test eax, eax
jne 0x489f42
call fcn.00596e90
or edi, 0xffffffff
mov dword [eax], 0x2733
mov eax, edi
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
mov edi, eax
jmp 0x48a101
test al, 1
je 0x489fbc
mov esi, dword [ebp + 0x10]
push 0
push esi
push dword [ebp + 0xc]
push dword [ebx + 0x60]
call dword [sym.imp.WS2_32.dll_recv]
push eax
call fcn.00590b90
add esp, 4
mov edi, eax
test esi, esi
jne 0x48a101
cmp edi, 0xffffffff
jne 0x48a101
mov ecx, dword fs:[0x2c]
mov ecx, dword [ecx]
mov eax, dword [ecx + 0x28f0]
test eax, eax
jne 0x489fa5
call fcn.00596e90
cmp dword [eax], 0x2733
jne 0x48a10e
xor edi, edi
mov eax, edi
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
test al, 4
je 0x48a135
test eax, 0x200
je 0x489ff3
mov esi, dword [ebp + 0xc]
mov edi, 1
mov al, byte [ebx + 0x100]
mov byte [esi], al
inc esi
mov eax, dword [ebp + 0x10]
and dword [ebx + 0x58], 0xffffbdff
sub eax, edi
mov dword [ebp + 8], eax
je 0x48a105
jmp 0x48a016
test eax, 0x400
je 0x48a00d
mov eax, dword fs:[0x2c]
mov eax, dword [eax]
mov eax, dword [eax + 0x28f0]
jmp 0x489f39
mov eax, dword [ebp + 0x10]
mov esi, dword [ebp + 0xc]
mov dword [ebp + 8], eax
push 0
lea eax, [ebp - 8]
push eax
push 0
push 0
push 0
push dword [ebx + 0x60]
call dword [sym.imp.KERNEL32.dll_PeekNamedPipe]
push eax
call fcn.00590b90
add esp, 4
test eax, eax
jne 0x48a078
mov eax, dword fs:[0x2c]
mov eax, dword [eax]
mov eax, dword [eax + 0x28f0]
test eax, eax
jne 0x48a04f
call fcn.00596e90
push 0xe8
push 0x6d
push 2
push dword [eax]
call fcn.00488c00
add esp, 0x10
test eax, eax
je 0x48a126
mov dword [ebp - 8], 0
mov eax, 1
jmp 0x48a080
cmp dword [ebp - 8], 0
jne 0x48a0a5
xor eax, eax
test byte [ebx + 0x58], 0x80
jne 0x48a08a
test eax, eax
je 0x48a0a5
test edi, edi
jne 0x48a103
test eax, eax
jne 0x48a10e
mov eax, dword fs:[0x2c]
mov eax, dword [eax]
mov eax, dword [eax + 0x28f0]
jmp 0x489f39
push 0
lea eax, [ebp - 4]
push eax
push dword [ebp + 8]
push esi
push dword [ebx + 0x60]
call dword [sym.imp.KERNEL32.dll_ReadFile]
push eax
call fcn.00590b90
add esp, 4
test eax, eax
mov eax, dword [ebp - 4]
jne 0x48a0ff
test eax, eax
jne 0x48a0ff
mov eax, dword fs:[0x2c]
mov esi, dword [eax]
mov eax, dword [esi + 0x28f0]
test eax, eax
jne 0x48a0e3
call fcn.00596e90
push 0xe8
push 0x6d
push 2
push dword [eax]
call fcn.00488c00
add esp, 0x10
test eax, eax
jne 0x48a101
jmp 0x489f33
add edi, eax
test edi, edi
jle 0x48a10e
mov eax, edi
cdq
add dword [ebx + 0x20], eax
adc dword [ebx + 0x24], edx
mov eax, edi
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
push str.read_from_non_streamfile_socket
push 0x360000
call fcn.00479f70
push str.PeekNamedPipe_failed:__m
push 0x360000
call fcn.00479f70
push eax
push str.invalid_vsock_type__d
push 0x360000
call fcn.00479f70
int3