Function at 0x434d70
Capabilities:
Read file on windows
Read pipe
Receive data
Receive data on socket

Disassembly:
push ebp
mov ebp, esp
sub esp, 8
push ebx
push esi
push edi
push 0x601860
call fcn.00429170
mov ecx, dword [ebp + 8]
mov eax, dword [0x60188c]
push 0x601860
mov ebx, dword [eax + ecx*4]
call fcn.00429180
mov eax, dword [ebx + 0x58]
add esp, 8
xor edi, edi
test al, 0x28
je 0x434ff7
test al, 8
je 0x434e3b
push edi
lea eax, [ebp - 4]
push eax
push dword [ebp + 0x10]
push dword [ebp + 0xc]
push dword [ebx + 0x60]
call fcn.005494b7
add esp, 4
push eax
call dword [sym.imp.KERNEL32.dll_ReadFile]
push eax
call fcn.0053b370
add esp, 4
test eax, eax
mov eax, dword [ebp - 4]
jne 0x434e34
test eax, eax
jne 0x434e34
mov eax, dword fs:[0x2c]
mov esi, dword [eax]
mov eax, dword [esi + 0x28f0]
test eax, eax
jne 0x434df8
call fcn.005414b2
push 0xe8
push 0x6d
push 2
push dword [eax]
call fcn.00433ae0
add esp, 0x10
test eax, eax
jne 0x434fee
mov eax, dword [esi + 0x28f0]
test eax, eax
jne 0x434e22
call fcn.005414b2
or edi, 0xffffffff
mov dword [eax], 0x2733
mov eax, edi
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
mov edi, eax
jmp 0x434fe1
test al, 1
je 0x434e9c
mov esi, dword [ebp + 0x10]
push 0
push esi
push dword [ebp + 0xc]
push dword [ebx + 0x60]
call dword [sym.imp.WS2_32.dll_recv]
push eax
call fcn.0053b370
add esp, 4
mov edi, eax
test esi, esi
jne 0x434fe1
cmp edi, 0xffffffff
jne 0x434fe1
mov ecx, dword fs:[0x2c]
mov ecx, dword [ecx]
mov eax, dword [ecx + 0x28f0]
test eax, eax
jne 0x434e85
call fcn.005414b2
cmp dword [eax], 0x2733
jne 0x434fee
xor edi, edi
mov eax, edi
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
test al, 4
je 0x435015
test eax, 0x200
je 0x434ed3
mov esi, dword [ebp + 0xc]
mov edi, 1
mov al, byte [ebx + 0x100]
mov byte [esi], al
inc esi
mov eax, dword [ebp + 0x10]
and dword [ebx + 0x58], 0xffffbdff
sub eax, edi
mov dword [ebp + 8], eax
je 0x434fe5
jmp 0x434ef6
test eax, 0x400
je 0x434eed
mov eax, dword fs:[0x2c]
mov eax, dword [eax]
mov eax, dword [eax + 0x28f0]
jmp 0x434e19
mov eax, dword [ebp + 0x10]
mov esi, dword [ebp + 0xc]
mov dword [ebp + 8], eax
push 0
lea eax, [ebp - 8]
push eax
push 0
push 0
push 0
push dword [ebx + 0x60]
call dword [sym.imp.KERNEL32.dll_PeekNamedPipe]
push eax
call fcn.0053b370
add esp, 4
test eax, eax
jne 0x434f58
mov eax, dword fs:[0x2c]
mov eax, dword [eax]
mov eax, dword [eax + 0x28f0]
test eax, eax
jne 0x434f2f
call fcn.005414b2
push 0xe8
push 0x6d
push 2
push dword [eax]
call fcn.00433ae0
add esp, 0x10
test eax, eax
je 0x435006
mov dword [ebp - 8], 0
mov eax, 1
jmp 0x434f60
cmp dword [ebp - 8], 0
jne 0x434f85
xor eax, eax
test byte [ebx + 0x58], 0x80
jne 0x434f6a
test eax, eax
je 0x434f85
test edi, edi
jne 0x434fe3
test eax, eax
jne 0x434fee
mov eax, dword fs:[0x2c]
mov eax, dword [eax]
mov eax, dword [eax + 0x28f0]
jmp 0x434e19
push 0
lea eax, [ebp - 4]
push eax
push dword [ebp + 8]
push esi
push dword [ebx + 0x60]
call dword [sym.imp.KERNEL32.dll_ReadFile]
push eax
call fcn.0053b370
add esp, 4
test eax, eax
mov eax, dword [ebp - 4]
jne 0x434fdf
test eax, eax
jne 0x434fdf
mov eax, dword fs:[0x2c]
mov esi, dword [eax]
mov eax, dword [esi + 0x28f0]
test eax, eax
jne 0x434fc3
call fcn.005414b2
push 0xe8
push 0x6d
push 2
push dword [eax]
call fcn.00433ae0
add esp, 0x10
test eax, eax
jne 0x434fe1
jmp 0x434e13
add edi, eax
test edi, edi
jle 0x434fee
mov eax, edi
cdq
add dword [ebx + 0x20], eax
adc dword [ebx + 0x24], edx
mov eax, edi
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
push str.read_from_non_streamfile_socket
push 0x360000
call fcn.00424700
push str.PeekNamedPipe_failed:__m
push 0x360000
call fcn.00424700
push eax
push str.invalid_vsock_type__d
push 0x360000
call fcn.00424700
int3