Function at 0x101c9ab4
Capabilities:
Read file on windows
Terminate process

Disassembly:
inc eax
sar ecx, cl
jb 0x101cbec2
not edx
bts ax, ax
xadd al, cl
ror edx, 2
btr eax, 0x16
xor ebx, edx
bswap ecx
add esi, edx
shl ecx, 0xb8
not al
sbb al, cl
jge fcn.1024af8a
mov eax, 0xa53b7322
cdq
jmp 0x1024f80b
jb 0x101b357e
not ax
adc edi, edx
call fcn.102349e9
setl cl
adc edi, 7
call fcn.10221a72
call fcn.1018e344
mov eax, 0x7a152980
movsx ecx, al
mov eax, dword [esi + eax - 0x7a152980]
movsx edx, cx
xor eax, ebx
add dx, 0xe689
rol edx, 0x78
ror eax, 2
lea eax, [eax + edx + 0x66b2e19e]
ror ecx, 2
imul edx, edx
bt ecx, 0x2e
not eax
xor cl, 0x13
lea eax, [eax + ecx - 0xed669cd]
inc edx
seto cl
rol eax, 3
dec ecx
and edx, 0xea87f202
xor eax, 0x49b8570d
inc edx
imul dx, cx
xor ebx, eax
neg cx
btr cx, 0xa4
xor cx, cx
adc ebp, eax
inc dl
movsx eax, dl
idiv ecx
mov ax, word [ecx + edi - 0x3fff0000]
bt edx, 0xb7
call fcn.10257ff8
mov ecx, dword [edi]
add edi, 4
mov edx, 0xaca69fbb
not dl
xor ecx, ebx
xor ecx, 0x76127f83
and edx, edx
movsx eax, dx
inc edx
ror ecx, 1
cbw
neg al
bswap ecx
xadd al, dl
neg ecx
dec edx
inc dl
inc edx
not ecx
sub dx, ax
btc eax, 0xa0
sar eax, 0xd1
bswap ecx
xor ebx, ecx
idiv dl
sal edx, 0xe5
xchg dx, ax
add esi, ecx
sub eax, eax
mul eax
sar edx, 0x41
movzx ecx, byte [edx + edi]
rol dx, 0xcd
lea edi, [edi + edx*8 + 1]
sub dl, al
xor cl, bl
ror cl, 1
add dx, 0x798e
not cl
sbb cl, 0x39
rol dx, 0xe2
xadd eax, edx
neg cl
add dx, dx
add al, dh
xor bl, cl
push eax
lea ecx, [esp + ecx + 4]
bswap edx
not eax
btr dx, dx
add dx, word [ecx + edx]
sar eax, 0x58
movzx ecx, ax
sar ax, 0x21
lea ebp, [ebp + ecx*2 - 0x20000]
mov word [ecx + ebp - 0xffff], dx
dec ecx
sar eax, 0xe
jbe 0x101bffb0
dec ecx
not ax
not ecx
push edx
pop edx
dec ecx
not edx
ror dx, 0x2e
xor ebx, ecx
add esi, ecx
add edx, eax
mov ecx, 0x39ca295
setle al
jmp esi
pop ecx
jbe fcn.10190646
sal cx, 0x4e
pop eax
pop edx
js fcn.10242672
mov edx, 0xd1819099
sub dl, 0x3a
lea eax, [edx + edx + 0x19845d28]
sbb esi, 4
neg al
not eax
btr edx, 0x36
mov edx, dword [eax + esi - 0x437882e5]
cbw
ror ax, 0x22
push eax
xor edx, ebx
sal word [esp + eax - 0x43787ff7], 0xe5
and dword [esp + eax - 0x43787ff9], eax
ror edx, 3
lea ecx, [eax + eax*4 - 0xcd6d600]
pop eax
inc edx
cwde
sub al, ch
bswap ecx
ror edx, 2
rol cx, 0x21
neg ecx
not edx
rol edx, 2
btr ecx, ecx
lea ecx, [eax + ecx*2 + 0x3bbefa30]
neg ecx
xor edx, 0x2123b7b3
imul eax, eax
not eax
rol edx, 2
ror ax, 0x48
xchg ecx, eax
lea edx, [eax + edx - 0x66799a82]
or ax, 0x850f
bt eax, eax
sar ecx, cl
bswap edx
rol al, 0xc2
push eax
sar al, 0xc2
xor ebx, edx
or dword [esp + eax - 0x7f92971f], 0x37a22935
or eax, ecx
adc edi, edx
mov ecx, ebp
sub ebp, 2
btr eax, eax
cwde
mov word [ebp], cx
lea ecx, [eax*2 - 0x68ea5e4b]
movsx edx, word [esp]
sbb eax, dword [esp]
pop edx
jnp fcn.1018699d
mov eax, dword [ebp]
mov ecx, 0xb5bd081a
mov cl, byte [ebp + 4]
mov edx, 0x4fb7bfaf
or dl, dh
lea ebp, [ebp + edx - 0x4fb7bfb9]
sbb edx, 0xdeada435
mov byte ss:[eax + edx - 0x710a1b8a], cl
lea ecx, [edx*2 - 0x75d2a2d8]
movzx eax, cl
mov eax, dword [eax + edi - 0x3c]
rol edx, 0x4c
lea edx, [edx*2 - 0x4c4f7bed]
ror ecx, cl
adc edi, 3
and edx, ecx
ja 0x10264645
not ecx
cdq
rol al, 0x24
xor ebx, ecx
sar word [esp + edx*2 + 2], 0xd
adc esi, ecx
pop eax
or eax, 0x8aaa73e
lea ecx, [edx + eax*8 - 0x4ff71843]
add dl, byte [edx + edi]
not cl
xor ecx, ecx
sub eax, 0x96ae7b8a
add cl, byte [edi + ecx + 2]
shl eax, 0x59
btc ax, 0xb8
not al
lea edi, [edi + eax - 0x680001fd]
cbw
push eax
shr dl, cl
call fcn.10245aa4
mov ecx, 0x701a9ab4
lea eax, [ecx + 0x51ba5d1a]
movzx edx, cx
mov edx, dword [ebp + ecx - 0x701a9ab4]
dec ax
mov eax, dword [ebp + ecx - 0x701a9ab0]
shr ecx, cl
xor cl, cl
add cl, cl
lea ebp, [ecx + ebp - 0x6f8]
dec cx
or cl, cl
mov dword [ecx + edx - 0x6ff], eax
movsx eax, cl
cdq
sub cl, 0xa3
mov eax, dword [edi + ecx*4 - 0x1970]
neg edx
lea ecx, [ecx + 0x41106aa6]
jns 0x1024284d
not eax
bts ecx, edx
sar cx, cl
xor dl, dl
dec eax
xor ebx, eax
or dx, 0xd939
and edx, 0xf726f139
adc esi, eax
jmp esi
xor ebx, eax
sub cl, 0xa
sub dword [esp + ecx*2 - 0xca1e2f4], 0x3b114784
add esi, eax
mov dword [esp + ecx*2 - 0xca1e2f4], esi
ret
lea edi, [edi + edx + 3]
xor eax, ebx
lea edx, [ecx*2 - 0x7e40dfd]
shr ecx, 0xf3
rol eax, 3
jmp 0x101795e0
bt dx, 0x97
mov edx, dword [ebp + 4]
adc al, 0xb
sub eax, eax
sub eax, 0x820a21b6
lea ebp, [ebp + eax - 0x7df5de46]
add ecx, edx
mov dword [ebp + eax - 0x7df5de4a], ecx
btc eax, eax
and eax, eax
mov ecx, dword [edi + eax - 0x7df5da4a]
mov edx, eax
dec ax
sub al, al
lea edi, [edi + edx - 0x7df5da46]
xor ecx, ebx
not ecx
sal edx, 0x25
js 0x1019782c
mov ecx, dword [ebp]
inc dx
jno 0x1024cc74
sal byte [esp + ecx*4 - 0x1943c60d], 0x23
ror byte [esp + ecx*4 - 0x1943c610], cl
ror eax, 1
inc edx
sub dx, word [esp + ecx*8 - 0x32878c1f]
jne 0x1021f88f
call fcn.10179ee5
jmp 0x10197d1b
xor eax, ebx
shl dx, 0xc1
sal ecx, cl
rol eax, 3
btc cx, 0xa2
lea eax, [ecx + eax - 0xb55dc1e]
rol dx, 0x4f
setb dl
xor eax, 0xc209043a
lea eax, [eax + ecx - 0x6efcdd90]
btc edx, edx
push edx
rol byte [esp + ecx*8 - 0x32878c1f], cl
ror eax, 1
xchg dword [esp + ecx*2 - 0xca1e308], edx
dec eax
jmp 0x1025896d