Function at 0x434dd0
Capabilities:
Read file on windows
Read pipe
Receive data
Receive data on socket

Disassembly:
push ebp
mov ebp, esp
sub esp, 8
push ebx
push esi
push edi
push 0x601860
call fcn.004291c0
mov ecx, dword [ebp + 8]
mov eax, dword [0x60188c]
push 0x601860
mov ebx, dword [eax + ecx*4]
call fcn.004291d0
mov eax, dword [ebx + 0x58]
add esp, 8
xor edi, edi
test al, 0x28
je 0x435057
test al, 8
je 0x434e9b
push edi
lea eax, [ebp - 4]
push eax
push dword [ebp + 0x10]
push dword [ebp + 0xc]
push dword [ebx + 0x60]
call fcn.005494b7
add esp, 4
push eax
call dword [sym.imp.KERNEL32.dll_ReadFile]
push eax
call fcn.0053b370
add esp, 4
test eax, eax
mov eax, dword [ebp - 4]
jne 0x434e94
test eax, eax
jne 0x434e94
mov eax, dword fs:[0x2c]
mov esi, dword [eax]
mov eax, dword [esi + 0x28f0]
test eax, eax
jne 0x434e58
call fcn.005414b2
push 0xe8
push 0x6d
push 2
push dword [eax]
call fcn.00433b30
add esp, 0x10
test eax, eax
jne 0x43504e
mov eax, dword [esi + 0x28f0]
test eax, eax
jne 0x434e82
call fcn.005414b2
or edi, 0xffffffff
mov dword [eax], 0x2733
mov eax, edi
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
mov edi, eax
jmp 0x435041
test al, 1
je 0x434efc
mov esi, dword [ebp + 0x10]
push 0
push esi
push dword [ebp + 0xc]
push dword [ebx + 0x60]
call dword [sym.imp.WS2_32.dll_recv]
push eax
call fcn.0053b370
add esp, 4
mov edi, eax
test esi, esi
jne 0x435041
cmp edi, 0xffffffff
jne 0x435041
mov ecx, dword fs:[0x2c]
mov ecx, dword [ecx]
mov eax, dword [ecx + 0x28f0]
test eax, eax
jne 0x434ee5
call fcn.005414b2
cmp dword [eax], 0x2733
jne 0x43504e
xor edi, edi
mov eax, edi
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
test al, 4
je 0x435075
test eax, 0x200
je 0x434f33
mov esi, dword [ebp + 0xc]
mov edi, 1
mov al, byte [ebx + 0x100]
mov byte [esi], al
inc esi
mov eax, dword [ebp + 0x10]
and dword [ebx + 0x58], 0xffffbdff
sub eax, edi
mov dword [ebp + 8], eax
je 0x435045
jmp 0x434f56
test eax, 0x400
je 0x434f4d
mov eax, dword fs:[0x2c]
mov eax, dword [eax]
mov eax, dword [eax + 0x28f0]
jmp 0x434e79
mov eax, dword [ebp + 0x10]
mov esi, dword [ebp + 0xc]
mov dword [ebp + 8], eax
push 0
lea eax, [ebp - 8]
push eax
push 0
push 0
push 0
push dword [ebx + 0x60]
call dword [sym.imp.KERNEL32.dll_PeekNamedPipe]
push eax
call fcn.0053b370
add esp, 4
test eax, eax
jne 0x434fb8
mov eax, dword fs:[0x2c]
mov eax, dword [eax]
mov eax, dword [eax + 0x28f0]
test eax, eax
jne 0x434f8f
call fcn.005414b2
push 0xe8
push 0x6d
push 2
push dword [eax]
call fcn.00433b30
add esp, 0x10
test eax, eax
je 0x435066
mov dword [ebp - 8], 0
mov eax, 1
jmp 0x434fc0
cmp dword [ebp - 8], 0
jne 0x434fe5
xor eax, eax
test byte [ebx + 0x58], 0x80
jne 0x434fca
test eax, eax
je 0x434fe5
test edi, edi
jne 0x435043
test eax, eax
jne 0x43504e
mov eax, dword fs:[0x2c]
mov eax, dword [eax]
mov eax, dword [eax + 0x28f0]
jmp 0x434e79
push 0
lea eax, [ebp - 4]
push eax
push dword [ebp + 8]
push esi
push dword [ebx + 0x60]
call dword [sym.imp.KERNEL32.dll_ReadFile]
push eax
call fcn.0053b370
add esp, 4
test eax, eax
mov eax, dword [ebp - 4]
jne 0x43503f
test eax, eax
jne 0x43503f
mov eax, dword fs:[0x2c]
mov esi, dword [eax]
mov eax, dword [esi + 0x28f0]
test eax, eax
jne 0x435023
call fcn.005414b2
push 0xe8
push 0x6d
push 2
push dword [eax]
call fcn.00433b30
add esp, 0x10
test eax, eax
jne 0x435041
jmp 0x434e73
add edi, eax
test edi, edi
jle 0x43504e
mov eax, edi
cdq
add dword [ebx + 0x20], eax
adc dword [ebx + 0x24], edx
mov eax, edi
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
push str.read_from_non_streamfile_socket
push 0x360000
call fcn.00424760
push str.PeekNamedPipe_failed:__m
push 0x360000
call fcn.00424760
push eax
push str.invalid_vsock_type__d
push 0x360000
call fcn.00424760
int3