Function at 0x1000835f
Capabilities:
Get file size
Read file on windows
Write file on windows

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x2c
nop
mov eax, dword [ebp + 0xc]
cmp eax, 0
je 0x1000837a
jmp 0x10008384
mov eax, 0xc0000000
jmp 0x10008389
mov eax, 0x80000000
mov dword [ebp - 8], eax
mov eax, dword [ebp + 0xc]
cmp eax, 0
je 0x1000839d
jmp 0x100083a7
mov eax, 4
jmp 0x100083ac
mov eax, 3
mov ecx, 0
push ecx
mov ecx, pe_nt_image_headers32
push ecx
push eax
mov eax, 0
push eax
mov eax, 1
push eax
mov eax, dword [ebp - 8]
push eax
mov eax, dword [ebp + 8]
push eax
call sub.kernel32.dll_CreateFileW
mov dword [ebp - 4], eax
mov eax, dword [ebp - 4]
cmp eax, 0xffffffff
jne 0x100083eb
mov eax, 0
jmp 0x10008afd
mov eax, 0xc
push eax
mov eax, dword [0x100290b0]
call eax
add esp, 4
mov dword [ebp - 0xc], eax
mov eax, dword [ebp - 0xc]
cmp eax, 0
jne 0x1000841e
mov eax, dword [ebp - 4]
push eax
call sub.kernel32.dll_CloseHandle
mov eax, 0
jmp 0x10008afd
mov eax, dword [ebp - 0xc]
mov ecx, dword [ebp - 4]
mov dword [eax], ecx
mov eax, dword [ebp - 0xc]
add eax, 4
mov ecx, dword [ebp + 0x10]
mov dword [eax], ecx
mov eax, dword [ebp - 0xc]
add eax, 8
mov ecx, 0
mov dword [eax], ecx
mov eax, 0
push eax
mov eax, dword [ebp - 4]
push eax
call sub.kernel32.dll_GetFileSize
mov dword [ebp - 0x14], eax
mov eax, dword [ebp + 0x10]
cmp eax, 0xfffffffe
jne 0x1000879c
mov eax, dword [ebp - 0x14]
cmp eax, 0
jne 0x1000847a
mov eax, dword [ebp - 0xc]
add eax, 4
mov ecx, 0xffffffff
mov dword [eax], ecx
jmp 0x10008797
mov eax, 0
push eax
mov eax, 0
push eax
mov eax, 0
push eax
mov eax, dword [ebp - 4]
push eax
call sub.kernel32.dll_SetFilePointer
mov eax, 0
push eax
mov eax, 0x10029090
push eax
mov eax, 4
push eax
lea eax, [ebp - 0x10]
push eax
mov eax, dword [ebp - 4]
push eax
call sub.kernel32.dll_ReadFile
movsx eax, byte [ebp - 0x10]
cmp eax, 0xff
jne 0x1000850d
movsx eax, byte [ebp - 0xf]
cmp eax, 0xfe
jne 0x1000850d
movsx eax, byte [ebp - 0xe]
cmp eax, 0
jne 0x1000850d
movsx eax, byte [ebp - 0xd]
cmp eax, 0
jne 0x1000850d
mov eax, dword [ebp - 0xc]
add eax, 4
mov ecx, 0xfded
mov dword [eax], ecx
mov eax, dword [ebp - 0xc]
add eax, 8
mov ecx, 4
mov dword [eax], ecx
jmp 0x10008797
movsx eax, byte [ebp - 0x10]
cmp eax, 0
jne 0x10008566
movsx eax, byte [ebp - 0xf]
cmp eax, 0
jne 0x10008566
movsx eax, byte [ebp - 0xe]
cmp eax, 0xfe
jne 0x10008566
movsx eax, byte [ebp - 0xd]
cmp eax, 0xff
jne 0x10008566
mov eax, dword [ebp - 0xc]
add eax, 4
mov ecx, 0xfdee
mov dword [eax], ecx
mov eax, dword [ebp - 0xc]
add eax, 8
mov ecx, 4
mov dword [eax], ecx
jmp 0x10008797
movsx eax, byte [ebp - 0x10]
cmp eax, 0x84
jne 0x100085bf
movsx eax, byte [ebp - 0xf]
cmp eax, 0x31
jne 0x100085bf
movsx eax, byte [ebp - 0xe]
cmp eax, 0x95
jne 0x100085bf
movsx eax, byte [ebp - 0xd]
cmp eax, 0x33
jne 0x100085bf
mov eax, dword [ebp - 0xc]
add eax, 4
mov ecx, 0xd698
mov dword [eax], ecx
mov eax, dword [ebp - 0xc]
add eax, 8
mov ecx, 4
mov dword [eax], ecx
jmp 0x10008797
movsx eax, byte [ebp - 0x10]
cmp eax, 0xef
jne 0x1000860e
movsx eax, byte [ebp - 0xf]
cmp eax, 0xbb
jne 0x1000860e
movsx eax, byte [ebp - 0xe]
cmp eax, 0xbf
jne 0x1000860e
mov eax, dword [ebp - 0xc]
add eax, 4
mov ecx, 0xfde9
mov dword [eax], ecx
mov eax, dword [ebp - 0xc]
add eax, 8
mov ecx, 3
mov dword [eax], ecx
jmp 0x10008797
movsx eax, byte [ebp - 0x10]
cmp eax, 0xff
jne 0x1000864d
movsx eax, byte [ebp - 0xf]
cmp eax, 0xfe
jne 0x1000864d
mov eax, dword [ebp - 0xc]
add eax, 4
mov ecx, 0x4b0
mov dword [eax], ecx
mov eax, dword [ebp - 0xc]
add eax, 8
mov ecx, 2
mov dword [eax], ecx
jmp 0x10008797
movsx eax, byte [ebp - 0x10]
cmp eax, 0xfe
jne 0x1000868c
movsx eax, byte [ebp - 0xf]
cmp eax, 0xff
jne 0x1000868c
mov eax, dword [ebp - 0xc]
add eax, 4
mov ecx, 0x4b1
mov dword [eax], ecx
mov eax, dword [ebp - 0xc]
add eax, 8
mov ecx, 2
mov dword [eax], ecx
jmp 0x10008797
mov eax, dword [ebp - 0x14]
cmp eax, 0x10000
jbe 0x100086a0
jmp 0x100086a8
mov eax, dword [ebp - 0x14]
jmp 0x100086ad
mov eax, 0x10000
mov dword [ebp - 0x18], eax
mov eax, dword [ebp - 0x18]
push eax
mov eax, dword [0x100290b0]
call eax
add esp, 4
mov dword [ebp - 0x1c], eax
mov eax, 0
push eax
mov eax, 0
push eax
mov eax, 0
push eax
mov eax, dword [ebp - 4]
push eax
call sub.kernel32.dll_SetFilePointer
mov eax, 0
push eax
mov eax, 0x10029090
push eax
mov eax, dword [ebp - 0x18]
push eax
mov eax, dword [ebp - 0x1c]
push eax
mov eax, dword [ebp - 4]
push eax
call sub.kernel32.dll_ReadFile
mov eax, dword [ebp - 0x18]
push eax
mov eax, dword [ebp - 0x1c]
push eax
call sym.xPack.dll_xBot_StringIsUtf7
add esp, 8
cmp eax, 0
je 0x10008725
mov eax, dword [ebp - 0xc]
add eax, 4
mov ecx, 0xfde8
mov dword [eax], ecx
jmp 0x10008788
mov eax, dword [ebp - 0x18]
push eax
mov eax, dword [ebp - 0x1c]
push eax
call sym.xPack.dll_xBot_StringIsAscii
add esp, 8
cmp eax, 0
je 0x10008750
mov eax, dword [ebp - 0xc]
add eax, 4
mov ecx, 0x4e9f
mov dword [eax], ecx
jmp 0x10008788
mov eax, dword [ebp - 0x18]
push eax
mov eax, dword [ebp - 0x1c]
push eax
call sym.xPack.dll_xBot_StringIsUtf8
add esp, 8
cmp eax, 0
je 0x1000877b
mov eax, dword [ebp - 0xc]
add eax, 4
mov ecx, 0xfde9
mov dword [eax], ecx
jmp 0x10008788
mov eax, dword [ebp - 0xc]
add eax, 4
mov ecx, 0xffffffff
mov dword [eax], ecx
mov eax, dword [ebp - 0x1c]
push eax
mov eax, dword [0x100290bc]
call eax
add esp, 4
jmp 0x10008adc
mov eax, dword [ebp - 0x14]
cmp eax, 0
jne 0x1000891e
mov eax, dword [ebp + 0xc]
cmp eax, 0
jne 0x10008919
mov eax, dword [ebp + 0x10]
cmp eax, 0x4b0
jne 0x100087fd
mov eax, 0xfffe
mov word [ebp - 0x1e], ax
mov eax, 0
push eax
mov eax, 0x10029090
push eax
mov eax, 2
push eax
lea eax, [ebp - 0x1e]
push eax
mov eax, dword [ebp - 4]
push eax
call sub.kernel32.dll_WriteFile
mov eax, dword [ebp - 0xc]
add eax, 8
mov ecx, 2
mov dword [eax], ecx
jmp 0x10008919
mov eax, dword [ebp + 0x10]
cmp eax, 0x4b1
jne 0x10008846
mov eax, 0xfeff
mov word [ebp - 0x20], ax
mov eax, 0
push eax
mov eax, 0x10029090
push eax
mov eax, 2
push eax
lea eax, [ebp - 0x20]
push eax
mov eax, dword [ebp - 4]
push eax
call sub.kernel32.dll_WriteFile
mov eax, dword [ebp - 0xc]
add eax, 8
mov ecx, 2
mov dword [eax], ecx
jmp 0x10008919
mov eax, dword [ebp + 0x10]
cmp eax, 0xfded
jne 0x1000888e
mov eax, 0xfffe0000
mov dword [ebp - 0x24], eax
mov eax, 0
push eax
mov eax, 0x10029090
push eax
mov eax, 4
push eax
lea eax, [ebp - 0x24]
push eax
mov eax, dword [ebp - 4]
push eax
call sub.kernel32.dll_WriteFile
mov eax, dword [ebp - 0xc]
add eax, 8
mov ecx, 4
mov dword [eax], ecx
jmp 0x10008919
mov eax, dword [ebp + 0x10]
cmp eax, 0xfdee
jne 0x100088d6
mov eax, 0xfeff
mov dword [ebp - 0x28], eax
mov eax, 0
push eax
mov eax, 0x10029090
push eax
mov eax, 4
push eax
lea eax, [ebp - 0x28]
push eax
mov eax, dword [ebp - 4]
push eax
call sub.kernel32.dll_WriteFile
mov eax, dword [ebp - 0xc]
add eax, 8
mov ecx, 4
mov dword [eax], ecx
jmp 0x10008919
mov eax, dword [ebp + 0x10]
cmp eax, 0xd698
jne 0x10008919
mov eax, 0x84319533
mov dword [ebp - 0x2c], eax
mov eax, 0
push eax
mov eax, 0x10029090
push eax
mov eax, 4
push eax
lea eax, [ebp - 0x2c]
push eax
mov eax, dword [ebp - 4]
push eax
call sub.kernel32.dll_WriteFile
mov eax, dword [ebp - 0xc]
add eax, 8
mov ecx, 4
mov dword [eax], ecx
jmp 0x10008adc
mov eax, 0
push eax
mov eax, 0
push eax
mov eax, 0
push eax
mov eax, dword [ebp - 4]
push eax
call sub.kernel32.dll_SetFilePointer
mov eax, 0
push eax
mov eax, 0x10029090
push eax
mov eax, 4
push eax
lea eax, [ebp - 0x10]
push eax
mov eax, dword [ebp - 4]
push eax
call sub.kernel32.dll_ReadFile
mov eax, dword [ebp + 0x10]
cmp eax, 0x4b0
jne 0x10008999
movsx eax, byte [ebp - 0x10]
cmp eax, 0xff
jne 0x10008994
movsx eax, byte [ebp - 0xf]
cmp eax, 0xfe
jne 0x10008994
mov eax, dword [ebp - 0xc]
add eax, 8
mov ecx, 2
mov dword [eax], ecx
jmp 0x10008adc
mov eax, dword [ebp + 0x10]
cmp eax, 0x4b1
jne 0x100089da
movsx eax, byte [ebp - 0x10]
cmp eax, 0xfe
jne 0x100089d5
movsx eax, byte [ebp - 0xf]
cmp eax, 0xff
jne 0x100089d5
mov eax, dword [ebp - 0xc]
add eax, 8
mov ecx, 2
mov dword [eax], ecx
jmp 0x10008adc
mov eax, dword [ebp + 0x10]
cmp eax, 0xfde9
jne 0x10008a2b
movsx eax, byte [ebp - 0x10]
cmp eax, 0xef
jne 0x10008a26
movsx eax, byte [ebp - 0xf]
cmp eax, 0xbb
jne 0x10008a26
movsx eax, byte [ebp - 0xe]
cmp eax, 0xbf
jne 0x10008a26
mov eax, dword [ebp - 0xc]
add eax, 8
mov ecx, 3
mov dword [eax], ecx
jmp 0x10008adc
mov eax, dword [ebp + 0x10]
cmp eax, 0xfded
jne 0x10008a86
movsx eax, byte [ebp - 0x10]
cmp eax, 0xff
jne 0x10008a81
movsx eax, byte [ebp - 0xf]
cmp eax, 0xfe
jne 0x10008a81
movsx eax, byte [ebp - 0xe]
cmp eax, 0
jne 0x10008a81
movsx eax, byte [ebp - 0xd]
cmp eax, 0
jne 0x10008a81
mov eax, dword [ebp - 0xc]
add eax, 8
mov ecx, 4
mov dword [eax], ecx
jmp 0x10008adc
mov eax, dword [ebp + 0x10]
cmp eax, 0xfdee
jne 0x10008adc
movsx eax, byte [ebp - 0x10]
cmp eax, 0
jne 0x10008adc
movsx eax, byte [ebp - 0xf]
cmp eax, 0
jne 0x10008adc
movsx eax, byte [ebp - 0xe]
cmp eax, 0xfe
jne 0x10008adc
movsx eax, byte [ebp - 0xd]
cmp eax, 0xff
jne 0x10008adc
mov eax, dword [ebp - 0xc]
add eax, 8
mov ecx, 4
mov dword [eax], ecx
mov eax, dword [ebp - 0xc]
add eax, 8
mov ecx, 0
push ecx
mov ecx, 0
push ecx
mov ecx, dword [eax]
push ecx
mov eax, dword [ebp - 4]
push eax
call sub.kernel32.dll_SetFilePointer
mov eax, dword [ebp - 0xc]
leave
ret