Function at 0x43b2a0
Capabilities:
Read file on windows
Read pipe

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x2b0
mov eax, dword [0x7b088c]
xor eax, ebp
mov dword [ebp - 8], eax
push ebx
mov ebx, edx
mov dword [ebp - 0x29c], ecx
push esi
push edi
mov edi, dword [ebp + 8]
and dword [ebx + 0x2c], 0xfffdffff
mov esi, dword [ebx + 0xa0]
test esi, esi
je 0x43b2fc
test byte [esi + 0x2c], 0x40
je 0x43b2fc
mov ecx, dword [esi + 4]
mov edx, esi
add ecx, 0x30
call fcn.004262b0
mov eax, dword [esi + 0x2c]
test al, 0x40
je 0x43b2fc
and eax, 0xffffffbf
mov dword [esi + 0x2c], eax
test al, 0x20
je 0x43b2fc
mov eax, dword [esi + 4]
dec dword [eax + 4]
mov eax, dword [edi + 0x20]
test eax, eax
jns 0x43b366
test dword [ebx + 0x2c], 0x100
je 0x43b32a
push dword [0x7648f8]
push dword [0x7648f4]
push eax
call dword [0xac34d8]
push eax
mov edx, ebx
call fcn.0043b180
add esp, 0xc
mov esi, dword [ebp - 0x29c]
mov ecx, dword [ebx + 0x3c]
mov eax, dword [ebx + 0x2c]
dec ecx
mov dword [ebx + 0x3c], ecx
test al, 1
je 0x43b355
test ecx, ecx
jne 0x43b355
test al, 4
jne 0x43b355
or eax, 4
mov dword [ebx + 0x2c], eax
mov eax, dword [esi + 0x2c]
mov dword [ebx + 0x28], eax
mov dword [esi + 0x2c], ebx
mov ecx, dword [ebp - 8]
pop edi
pop esi
xor ecx, ebp
pop ebx
call fcn.00682c16
mov esp, ebp
pop ebp
ret
test dword [ebx + 0x2c], 0x100
je 0x43b5a8
mov esi, dword [sym.imp.KERNEL32.dll_ReadFile]
nop dword [eax]
push 0
lea eax, [ebp - 0x2a0]
push eax
push 0
push 0
push 0
push dword [ebx + 0x94]
call dword [sym.imp.KERNEL32.dll_PeekNamedPipe]
test eax, eax
je 0x43b58b
mov ecx, dword [ebp - 0x2a0]
test ecx, ecx
je 0x43b5a8
cmp dword [ebx + 0x90], 0
je 0x43b4e8
mov eax, dword [ebx + 0x108]
or eax, dword [ebx + 0x10c]
jne 0x43b4d7
push eax
lea eax, [ebp - 0x298]
push eax
push 0x10
lea eax, [ebp - 0x294]
push eax
push dword [ebx + 0x94]
call esi
test eax, eax
je 0x43b58b
mov eax, dword [ebp - 0x294]
test al, 2
je 0x43b4ae
push 0
lea eax, [ebp - 0x298]
push eax
push 0x278
lea eax, [ebp - 0x284]
push eax
push dword [ebx + 0x94]
call esi
test eax, eax
je 0x43b58b
mov eax, dword [ebp - 0x294]
and eax, 4
push 0x284
mov dword [ebp - 0x2b0], eax
call fcn.006a66fd
mov edx, eax
add esp, 4
mov dword [ebp - 0x2ac], edx
test edx, edx
jne 0x43b45f
mov edx, str.malloc
lea ecx, [eax + 0xe]
call fcn.0044c080
mov edx, dword [ebp - 0x2ac]
mov eax, dword [ebp - 0x2b0]
lea esi, [ebp - 0x284]
mov ecx, 0x9e
mov edi, edx
rep movsd dword es:[edi], dword [esi]
mov esi, dword [sym.imp.KERNEL32.dll_ReadFile]
lea ecx, [edx + 0x278]
mov dword [edx + 0x280], eax
lea eax, [ebx + 0x110]
mov dword [ecx], eax
mov eax, dword [ebx + 0x114]
mov dword [edx + 0x27c], eax
mov dword [eax], ecx
mov eax, dword [ebp - 0x294]
mov dword [ebx + 0x114], ecx
inc dword [ebx + 0x118]
test al, 1
je 0x43b4cf
mov eax, dword [ebp - 0x28c]
mov dword [ebx + 0x108], eax
mov eax, dword [ebp - 0x288]
mov dword [ebx + 0x10c], eax
jmp 0x43b55a
mov ecx, dword [ebp - 0x2a0]
jmp 0x43b4e8
mov eax, dword [ebx + 0x108]
cmp ecx, eax
cmovae ecx, eax
mov dword [ebp - 0x2a0], ecx
lea eax, [ebp - 0x2a8]
push eax
mov eax, dword [ebx + 0x34]
push ecx
push ebx
call eax
mov eax, dword [ebp - 0x2a8]
add esp, 0xc
test eax, eax
je 0x43b577
push 0
lea ecx, [ebp - 0x298]
push ecx
push eax
push dword [ebp - 0x2a4]
push dword [ebx + 0x94]
call esi
test eax, eax
je 0x43b569
cmp dword [ebx + 0x90], 0
mov eax, dword [ebp - 0x298]
je 0x43b53b
sub dword [ebx + 0x108], eax
sbb dword [ebx + 0x10c], 0
lea ecx, [ebp - 0x2a8]
push ecx
push eax
mov eax, dword [ebx + 0x38]
push ebx
call eax
mov eax, dword [ebp - 0x298]
add esp, 0xc
cmp eax, dword [ebp - 0x2a8]
jbe 0x43b5a8
test dword [ebx + 0x2c], 0x100
jne 0x43b380
jmp 0x43b5a8
push dword [ebp - 0x2a4]
push dword [ebp - 0x2a8]
jmp 0x43b597
lea eax, [ebp - 0x2a8]
push eax
mov eax, dword [ebx + 0x38]
push 0xfffff024
push ebx
call eax
jmp 0x43b5a5
push dword [0x7648f8]
push dword [0x7648f4]
call dword [sym.imp.KERNEL32.dll_GetLastError]
push eax
mov edx, ebx
call fcn.0043b180
add esp, 0xc
mov eax, dword [ebx + 0x2c]
and eax, 0x20100
cmp eax, 0x100
jne 0x43b32a
mov esi, dword [ebp - 0x29c]
mov edx, ebx
mov ecx, esi
call fcn.0043a800
jmp 0x43b330