Function at 0x1024f90c
Capabilities:
Read file on windows
Terminate process

Disassembly:
ror edx, 2
inc edx
or ax, ax
xchg al, cl
xor ebx, edx
xor al, cl
sub eax, 0xec843918
add esi, edx
lea edx, [ecx - 0x356678cd]
or dx, cx
xchg ecx, eax
mov edx, dword [edi]
dec eax
mov eax, dword [edi + 4]
adc edi, 4
not edx
and cl, cl
btr ecx, 0x8b
not eax
sbb ecx, 0x1f90d391
adc ecx, ecx
sar cl, 0xe4
or edx, eax
movzx eax, cl
add cx, ax
mov dword [ecx + edi - 0x27d6050e], edx
jmp esi
movzx ax, byte [edi + edx*2 - 2]
js 0x1021427e
ror dword [esp + edx - 0x180], 0xa8
dec word [esp + edx - 0x17e]
mov dword [esi + edx*2 - 0x304], ecx
lea eax, [edx + edx*8 - 0x1cd29b79]
mov eax, dword [ebp + edx*2 - 0x30a]
movsx ecx, byte [esp + edx - 0x182]
lea ebp, [ebp + edx - 0x188]
xor eax, ebx
neg eax
imul ecx, dword [esp + edx - 0x17e]
lea ecx, [edx + ecx*4 - 0x50d3f574]
push edx
not eax
btc ecx, 0xa7
ror eax, 1
not eax
ror cx, cl
or byte [esp + edx - 0x181], 7
dec eax
xchg edx, ecx
rol dx, cl
bswap eax
setb byte [esp + ecx*2 - 0x2fb]
jb 0x101e16ae
sub esi, 4
mov edx, 0xbb2137a0
mov edx, dword [esi]
mov eax, 0x4aae1610
shl al, 0xc4
movzx ecx, al
xor edx, ebx
call fcn.1020f67c
mov ecx, 0x8293459a
mov dx, word [ebp]
mov cl, byte [ebp + 2]
add ebp, 2
shr dx, cl
mov ecx, 0xe83058f
mov word [ebp + ecx - 0xe83058f], dx
movzx edx, cx
mov ecx, dword [edi + ecx*4 - 0x3a0c163c]
lea eax, [edx + edx*2 + 0x26a98519]
push edx
lea edi, [edi + edx*4 - 0x1638]
shl edx, 0xcf
bts eax, edx
sub dl, 0xa
xor ecx, ebx
lea eax, [edx - 0x7ccf104e]
inc ecx
btc eax, 0x2f
xor ecx, 0x8f91d4b9
sub ecx, 0xbdacef0a
dec edx
or dword [esp + edx - 0x2c780f4], eax
js 0x1022c81e
neg ecx
dec edx
rol dword [esp + eax*2 - 0x62040060], 0x2e
rol dword [esp + eax*2 - 0x62040060], cl
xor ebx, edx
xor eax, 0x43ae6d8c
shr al, 0x44
jae 0x101a0963
add esi, edx
lea edx, [ecx + ecx*8 - 0x42dfd7d5]
lea ecx, [eax + 0x469de908]
cwde
mov eax, dword [edi + eax - 0x6d0f]
shl edx, 0xab
seta cl
jne 0x101b8e49
add ebp, 2
not al
mov edx, 0xc4036c23
not cl
and al, cl
mov word [ebp], ax
movzx ecx, dx
shr cl, cl
push edx
mov dword [esp + ecx*4 - 0x1b010], edi
ret 4
mov ecx, dword [edi]
add eax, ecx
xadd dword [esp + 4], edx
shl dword [esp + edx*2 - 0x1afb8], 0x68
shr dx, 0x49
mov dword [edi + edx*2 - 0xd6], eax
setnp byte [esp + edx - 0x67]
lea eax, [edx*4 - 0x1a470fd6]
mov dword [esp + edx*2 - 0xd6], esi
ret 4
adc cl, byte [esp + ecx - 0x177]
dec eax
not eax
pop ecx
sal edx, 0x77
sub edx, 0x550d1295
xor eax, 0xba1828b8
xadd word [esp + edx - 0x2272ed68], cx
sar word [esp + edx*2 - 0x44e5dad0], cl
not eax
adc dword [esp + edx*2 - 0x44e5dad2], 0x670f5029
lea eax, [ecx + eax - 0x68389811]
cmove ecx, edx
rol dword [esp + edx*2 - 0x44e5dad2], cl
xor ebx, eax
dec dl
lea edx, [edx*2 + 0x4387ca3b]
add edi, eax
ror ecx, cl
pop eax
pop eax
jmp edi
imul edx, edx
setb dl
xor dl, byte [edi + edx*8 + 2]
and ecx, ecx
adc edi, 2
btr ecx, 0x1a
call fcn.101bacfd
lea eax, [ecx + 0x2392e82b]
ror al, 0x44
xor edx, ebx
shl al, 0x41
sub ecx, eax
rol edx, 2
xor al, cl
idiv cl
shl eax, 0xdc
sbb edx, 0x85335f8c
xchg cx, ax
jmp 0x1018f49d
ror ecx, 3
sub edx, 0xde94889d
ror edx, 0x23
imul eax
inc ecx
call fcn.1023e951
mov dword [esp + eax - 0x3102d732], ecx
lea edx, [edx + ecx*8 - 0x533d4102]
rol word [esp + eax*2 - 0x6205ae63], 0x69
sbb ecx, eax
neg edx
rol word [esp + eax - 0x3102d72c], 0xd
rol edx, 2
xor dword [esp + eax*2 - 0x6205ae64], eax
not word [esp + eax - 0x3102d72f]
cbw
neg edx
or dword [esp + eax*2 - 0x62040063], ecx
js 0x101ae490
shld dx, ax, cl
sar byte [esp + 1], 0xe2
mov word [esi], dx
sbb edi, 3
mov eax, dword [edi]
mov edx, 0xcf1e8a15
imul edx, dword [esp]
xor eax, ebx
jmp 0x101cf1e8