Function at 0x434e30
Capabilities:
Read file on windows
Read pipe
Receive data
Receive data on socket

Disassembly:
push ebp
mov ebp, esp
sub esp, 8
push ebx
push esi
push edi
push 0x601860
call fcn.00429200
mov ecx, dword [ebp + 8]
mov eax, dword [0x60188c]
push 0x601860
mov ebx, dword [eax + ecx*4]
call fcn.00429210
mov eax, dword [ebx + 0x58]
add esp, 8
xor edi, edi
test al, 0x28
je 0x4350b7
test al, 8
je 0x434efb
push edi
lea eax, [ebp - 4]
push eax
push dword [ebp + 0x10]
push dword [ebp + 0xc]
push dword [ebx + 0x60]
call fcn.00549547
add esp, 4
push eax
call dword [sym.imp.KERNEL32.dll_ReadFile]
push eax
call fcn.0053b400
add esp, 4
test eax, eax
mov eax, dword [ebp - 4]
jne 0x434ef4
test eax, eax
jne 0x434ef4
mov eax, dword fs:[0x2c]
mov esi, dword [eax]
mov eax, dword [esi + 0x28f0]
test eax, eax
jne 0x434eb8
call fcn.00541542
push 0xe8
push 0x6d
push 2
push dword [eax]
call fcn.00433ba0
add esp, 0x10
test eax, eax
jne 0x4350ae
mov eax, dword [esi + 0x28f0]
test eax, eax
jne 0x434ee2
call fcn.00541542
or edi, 0xffffffff
mov dword [eax], 0x2733
mov eax, edi
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
mov edi, eax
jmp 0x4350a1
test al, 1
je 0x434f5c
mov esi, dword [ebp + 0x10]
push 0
push esi
push dword [ebp + 0xc]
push dword [ebx + 0x60]
call dword [sym.imp.WS2_32.dll_recv]
push eax
call fcn.0053b400
add esp, 4
mov edi, eax
test esi, esi
jne 0x4350a1
cmp edi, 0xffffffff
jne 0x4350a1
mov ecx, dword fs:[0x2c]
mov ecx, dword [ecx]
mov eax, dword [ecx + 0x28f0]
test eax, eax
jne 0x434f45
call fcn.00541542
cmp dword [eax], 0x2733
jne 0x4350ae
xor edi, edi
mov eax, edi
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
test al, 4
je 0x4350d5
test eax, 0x200
je 0x434f93
mov esi, dword [ebp + 0xc]
mov edi, 1
mov al, byte [ebx + 0x100]
mov byte [esi], al
inc esi
mov eax, dword [ebp + 0x10]
and dword [ebx + 0x58], 0xffffbdff
sub eax, edi
mov dword [ebp + 8], eax
je 0x4350a5
jmp 0x434fb6
test eax, 0x400
je 0x434fad
mov eax, dword fs:[0x2c]
mov eax, dword [eax]
mov eax, dword [eax + 0x28f0]
jmp 0x434ed9
mov eax, dword [ebp + 0x10]
mov esi, dword [ebp + 0xc]
mov dword [ebp + 8], eax
push 0
lea eax, [ebp - 8]
push eax
push 0
push 0
push 0
push dword [ebx + 0x60]
call dword [sym.imp.KERNEL32.dll_PeekNamedPipe]
push eax
call fcn.0053b400
add esp, 4
test eax, eax
jne 0x435018
mov eax, dword fs:[0x2c]
mov eax, dword [eax]
mov eax, dword [eax + 0x28f0]
test eax, eax
jne 0x434fef
call fcn.00541542
push 0xe8
push 0x6d
push 2
push dword [eax]
call fcn.00433ba0
add esp, 0x10
test eax, eax
je 0x4350c6
mov dword [ebp - 8], 0
mov eax, 1
jmp 0x435020
cmp dword [ebp - 8], 0
jne 0x435045
xor eax, eax
test byte [ebx + 0x58], 0x80
jne 0x43502a
test eax, eax
je 0x435045
test edi, edi
jne 0x4350a3
test eax, eax
jne 0x4350ae
mov eax, dword fs:[0x2c]
mov eax, dword [eax]
mov eax, dword [eax + 0x28f0]
jmp 0x434ed9
push 0
lea eax, [ebp - 4]
push eax
push dword [ebp + 8]
push esi
push dword [ebx + 0x60]
call dword [sym.imp.KERNEL32.dll_ReadFile]
push eax
call fcn.0053b400
add esp, 4
test eax, eax
mov eax, dword [ebp - 4]
jne 0x43509f
test eax, eax
jne 0x43509f
mov eax, dword fs:[0x2c]
mov esi, dword [eax]
mov eax, dword [esi + 0x28f0]
test eax, eax
jne 0x435083
call fcn.00541542
push 0xe8
push 0x6d
push 2
push dword [eax]
call fcn.00433ba0
add esp, 0x10
test eax, eax
jne 0x4350a1
jmp 0x434ed3
add edi, eax
test edi, edi
jle 0x4350ae
mov eax, edi
cdq
add dword [ebx + 0x20], eax
adc dword [ebx + 0x24], edx
mov eax, edi
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
push str.read_from_non_streamfile_socket
push 0x360000
call fcn.00424790
push str.PeekNamedPipe_failed:__m
push 0x360000
call fcn.00424790
push eax
push str.invalid_vsock_type__d
push 0x360000
call fcn.00424790
int3