Function at 0x101cb1d2
Capabilities:
Read file on windows
Terminate process

Disassembly:
xor ecx, ecx
xor edx, 0x67a026a6
lea ecx, [ecx*2 - 0x696deacb]
inc edx
xor edx, 0xd5038e9b
sar cl, 5
xor ebx, edx
add esi, edx
lea edx, [ecx + eax + 0x7a114727]
cdq
call fcn.1024c584
call fcn.1026cd32
neg edx
mov dword [esp + eax - 0x189f4a69], eax
shl eax, cl
or ecx, 0xec89d826
xor ebx, edx
imul eax, ecx
sbb byte [esp + 1], ch
add esi, edx
rol dword [esp], cl
movsx edx, al
mov ecx, dword [edi + edx*2]
jb 0x1022a2a9
mov edx, 0xa82f5106
mov eax, dword [edi]
bts dx, dx
mov edx, dword ss:[eax]
mov dword [edi], edx
mov eax, 0x893e8f19
mov edx, dword [ebp]
adc ebp, 4
mov ecx, eax
xor edx, ebx
ror edx, 1
jmp 0x101a4894
xor ebx, ecx
cdq
push edx
inc ax
add esi, ecx
mov al, byte [edi + eax - 0x40000001]
lea ecx, [edx + edx*2 - 0x31d1f0c5]
btr edx, ecx
pop edx
mov cl, byte [edx + edi + 2]
xor edx, edx
jbe 0x102531f1
push 0x8a3fb5af
call fcn.101b5067
mov ecx, 0x5282920f
dec cx
ror cl, 7
mov edx, dword [edi + ecx - 0x5282921c]
imul cx, cx
lea edi, [ecx + edi - 0x5282f30c]
xor ecx, 0xa3ae9007
mov eax, 0x5d11ba86
dec ax
xor edx, ebx
xor cx, 0x481f
xor ecx, 0xfb37cc34
adc ecx, eax
neg edx
not ecx
imul eax, ecx
inc edx
ror ax, 0xc5
xor edx, 0xfe08d413
not edx
shr eax, 0x8e
sbb al, 0x90
call fcn.101dfe4d
push 0x6e322426
sar byte [esp], 0x41
mov edx, dword [esp]
mov ecx, dword [edi + edx - 0x6e322413]
and dl, byte [esp + edx - 0x6e322410]
lea edi, [edi + edx - 0x6e3223fe]
pop edx
lea eax, [edx + edx + 0x401f6736]
xor ecx, ebx
sub ecx, 0xa285c01a
sar al, 0x61
xchg al, dl
ror ecx, 1
bswap ecx
btr ax, ax
shl ax, 0x43
dec ecx
bt eax, edx
cbw
bswap ecx
imul edx, eax
mul eax
neg dx
not ecx
xadd edx, eax
btc dx, ax
xor edx, eax
xor ebx, ecx
add esi, ecx
movzx ecx, dx
imul ecx, eax
jae 0x101bbd07
mov dx, word [ebp + eax*2 - 0x65bb810]
lea eax, [eax + eax*4 + 0x17b7d606]
btr eax, eax
mov ax, word [ebp + eax*2 - 0x4f3a445a]
shr ecx, 0x55
dec ecx
inc ecx
mov cl, byte [ecx + ebp - 0x31]
jp 0x101ca794
not dl
lea edi, [edx + edi - 0xd216344]
xor ecx, ebx
idiv eax
sub ax, ax
lea eax, [eax + edx*2 + 0x633e7089]
dec ecx
sub eax, edx
not byte [esp + edx - 0x12cd3fe7]
setbe byte [esp + edx - 0x12cd3fe8]
neg ecx
jmp 0x10259eea
pop eax
or dx, word [ecx + edx*4]
movzx ecx, ax
call fcn.101cb8a9
xor ecx, ebx
or al, 0xbf
movzx edx, al
sal dx, 0x85
neg ecx
dec ecx
rol ax, 0x2c
ror ecx, 1
inc dl
shl eax, 0xfe
add eax, edx
xor ecx, 0xe9029637
sal ax, 0xac
ror ecx, 2
dec dx
inc ecx
bt ax, 0x34
ror ax, 0xad
mul eax
not ecx
add dx, 0xa9b3
push eax
jb 0x10221c23
lea ecx, [edx + 0x15b20b2d]
neg edx
jb fcn.10190646
xor edx, ebx
mov eax, 0x4d1aa6be
neg edx
movsx ecx, ax
ror edx, 3
sal ecx, 0xfa
lea edx, [edx + eax + 0x31b1ce4]
neg edx
push eax
bts ax, cx
rol edx, 2
bt ecx, eax
and dword [esp + eax - 0x4d1aa6bf], 0xf69e0c98
mov dword [esp + eax - 0x4d1aa6bf], eax
xor ebx, edx
and cx, ax
adc esi, edx
mov eax, dword [ebp + eax - 0x4d1aa6bf]
sub cl, 0xa5
mov edx, dword [ebp + 4]
pop ecx
mov cl, byte [ebp + ecx - 0x4d1aa6b7]
call fcn.10227a4d
lea ecx, [ecx + eax*2 - 0x74e0ba89]
neg dx
imul dx, dx
sub ax, dx
xor ebx, ecx
ror edx, 0xd9
mul edx
call fcn.101aeb64
mov eax, 0x63f102e
dec eax
mov word [edx + eax*2 - 0xc7e205a], cx
add ax, ax
movzx edx, al
bt edx, edx
lea esi, [esi + eax*8 - 0x31f902d4]
mov edx, dword [esi + eax*2 - 0xc7e40b4]
bts eax, 0x2f
mov ecx, eax
xor edx, ebx
jmp fcn.1020d010
inc ax
jns 0x1024e105
rol ecx, 1
sar word [esp + edx - 0x12cd3fe6], 0xf
push edx
neg ecx
or dword [esp + edx - 0x12cd3fe4], edx
setns byte [esp + edx*2 - 0x259a7fcc]
shl byte [esp + eax - 0x58e3b06b], 0xa1
ror ecx, 1
push eax
add dl, dh
cdq
bswap ecx
xor ebx, ecx
add word [esp + edx*4 + 0xa], dx
cwde
adc esi, ecx
mov dword [esp + edx*8], esi
ret 8