Function at 0x100b6430
Capabilities:
Read file on windows

Disassembly:
push 0xffffffffffffffff
push 0x1014bdd0
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
sub esp, 0x14
push ebx
push ebp
push esi
xor ebx, ebx
mov esi, ecx
mov dword [esp + 0x1c], ebx
mov ecx, dword [esp + 0x30]
push edi
mov dword [esp + 0x2c], ebx
call fcn.1009dbc0
push esi
mov dword [esp + 0x30], ebx
mov dword [esp + 0x24], 1
call sub.MSVCR80.dll_ftell
add esp, 4
mov dword [esp + 0x1c], eax
call fcn.100b5c20
mov edi, eax
call fcn.100b5c20
mov ebp, eax
call fcn.100b5c20
mov dword [esp + 0x14], eax
call fcn.100b5c20
cmp edi, 0xfe
mov dword [esp + 0x18], eax
jg 0x100b64fd
je 0x100b64ee
test edi, edi
je 0x100b64d2
cmp edi, 0xef
jne 0x100b6537
cmp ebp, 0xbb
jne 0x100b6537
cmp dword [esp + 0x14], 0xbf
jne 0x100b6537
mov ebx, 3
push str.UTF8
jmp 0x100b652e
test ebp, ebp
jne 0x100b6537
cmp dword [esp + 0x14], 0xfe
jne 0x100b6537
cmp eax, 0xff
jne 0x100b6537
push str.UCS_4BE
jmp 0x100b652e
cmp ebp, 0xff
jne 0x100b6537
push str.UCS_2BE
jmp 0x100b6529
cmp edi, 0xff
jne 0x100b6537
cmp ebp, 0xfe
jne 0x100b6537
cmp dword [esp + 0x14], 0
jne 0x100b6524
test eax, eax
jne 0x100b6524
mov ebx, 4
push str.UCS_4LE
jmp 0x100b652e
push str.UCS_2LE
mov ebx, 2
mov ecx, dword [esp + 0x38]
call fcn.1009f2a0
mov ecx, dword [esp + 0x34]
mov eax, dword [ecx]
cmp dword [eax], 0
jne 0x100b6582
test edi, edi
jne 0x100b6551
test ebp, ebp
jle 0x100b6564
push str.UCS_2BE
jmp 0x100b6579
jle 0x100b6582
test ebp, ebp
jne 0x100b6582
cmp dword [esp + 0x18], ebp
jle 0x100b6582
push str.UCS_2LE
jmp 0x100b6579
jne 0x100b6582
cmp dword [esp + 0x14], 0
jl 0x100b6582
cmp dword [esp + 0x18], 0
jl 0x100b6582
push str.UCS_4BE
call fcn.1009f2a0
mov ecx, dword [esp + 0x34]
mov ecx, dword [ecx]
cmp dword [ecx], 0
jne 0x100b66ca
push 2
push 0
push esi
mov edi, 0x800
mov dword [esp + 0x24], 0x7f9
call sub.MSVCR80.dll_fseek
push esi
call sub.MSVCR80.dll_ftell
mov edx, dword [esp + 0x2c]
push 0
push edx
push esi
mov ebp, eax
call sub.MSVCR80.dll_fseek
add esp, 0x1c
cmp ebp, 0x7f9
ja 0x100b65ca
mov dword [esp + 0x18], ebp
mov edi, ebp
push edi
call fcn.1009d7e0
push esi
push edi
mov ebp, eax
push 1
push ebp
mov dword [esp + 0x28], ebp
call sub.MSVCR80.dll_fread
add esp, 0x14
cmp eax, edi
jne 0x100b66c1
mov edi, dword [esp + 0x14]
mov bl, 1
xor ebp, ebp
mov byte [esp + 0x13], bl
xor edx, edx
lea esp, [esp]
cmp edx, dword [esp + 0x18]
jae 0x100b66a4
mov al, byte [edi]
add edi, 1
cmp al, 0x80
jae 0x100b661a
mov eax, 1
jmp 0x100b6669
mov cl, al
and cl, 0xe0
cmp cl, 0xc0
jne 0x100b662b
mov eax, 2
jmp 0x100b6669
mov cl, al
and cl, 0xf0
cmp cl, 0xe0
jne 0x100b663c
mov eax, 3
jmp 0x100b6669
mov cl, al
and cl, 0xf8
cmp cl, 0xf0
jne 0x100b664d
mov eax, 4
jmp 0x100b6669
mov cl, al
and cl, 0xfc
cmp cl, 0xf8
jne 0x100b665e
mov eax, 5
jmp 0x100b6669
and al, 0xfe
cmp al, 0xfc
jne 0x100b66bb
mov eax, 6
mov ecx, 1
cmp eax, ecx
jle 0x100b6692
mov bl, byte [edi]
and bl, 0xc0
add edi, 1
cmp bl, 0x80
jne 0x100b668c
add ecx, 1
cmp ecx, eax
jl 0x100b6672
mov bl, byte [esp + 0x13]
jmp 0x100b6692
xor bl, bl
mov byte [esp + 0x13], bl
add edx, eax
cmp eax, ebp
jle 0x100b669a
mov ebp, eax
test bl, bl
jne 0x100b6600
jmp 0x100b66bb
test bl, bl
je 0x100b66bb
cmp ebp, 1
jle 0x100b66bb
mov ecx, dword [esp + 0x34]
push 0x1015e8d8
call fcn.1009f2a0
mov ebp, dword [esp + 0x14]
xor ebx, ebx
push ebp
call fcn.1009d9f0
add esp, 4
mov edx, dword [esp + 0x1c]
push 0
add ebx, edx
push ebx
push esi
call sub.MSVCR80.dll_fseek
mov ecx, dword [esp + 0x30]
mov eax, dword [esp + 0x40]
add esp, 0xc
pop edi
pop esi
pop ebp
pop ebx
mov dword fs:[0], ecx
add esp, 0x20
ret