Function at 0x10005020
Capabilities:
Copy file
Create process on windows
Open clipboard

Disassembly:
call dword [sym.imp.USER32.dll_GetCapture]
push 0
push 0
push 0
push 0
call dword [sym.imp.USER32.dll_DrawEdge]
push 0
push 0
push 0
push 0
push 0
call dword [sym.imp.USER32.dll_SendDlgItemMessageW]
push 0
call dword [sym.imp.KERNEL32.dll_LocalLock]
push 0
push 0
call dword [sym.imp.KERNEL32.dll_WaitForThreadpoolWaitCallbacks]
call dword [sym.imp.USER32.dll_EndMenu]
push 0
call dword [sym.imp.USER32.dll_OpenClipboard]
push 0
push 0
call dword [sym.imp.KERNEL32.dll_AddSIDToBoundaryDescriptor]
push 0
call dword [sym.imp.KERNEL32.dll_SetUnhandledExceptionFilter]
push 0
push str.R12Zg2GjIP8489EH1aKY
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_IsNLSDefinedString]
push 0
push 0
push 0
push 0
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_MapViewOfFileExNuma]
push 0
call dword [sym.imp.USER32.dll_EnumClipboardFormats]
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_GetProfileSectionW]
push 0
call dword [sym.imp.KERNEL32.dll_InitializeSListHead]
push 0
push 0
push 0
push 0
call dword [sym.imp.USER32.dll_OpenDesktopW]
push 0
push 0
push 0
call dword [sym.imp.USER32.dll_SetSysColors]
push 0
push str.yLf93u7D3hu7NKj3ZRz3zRtLlku
call dword [sym.imp.KERNEL32.dll_RegisterApplicationRestart]
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_InitializeSynchronizationBarrier]
push 0
push str.H24XRACQUwLfeBCH7TE7Vb
push str.5viuI1jJgv27u5dQa5aQWZlrjkr9
call dword [sym.imp.KERNEL32.dll_CopyFile2]
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_SetSystemFileCacheSize]
push 0
push 0
push 0
call dword [sym.imp.USER32.dll_ShowScrollBar]
push 0
call dword [sym.imp.USER32.dll_DestroyMenu]
push 0
call dword [sym.imp.KERNEL32.dll_NeedCurrentDirectoryForExePathW]
push 0
push 0
call dword [sym.imp.KERNEL32.dll_SetVolumeLabelW]
push 0
push 0
call dword [sym.imp.USER32.dll_LoadCursorW]
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_SetThreadpoolWait]
push 0
push 0
push 0
push 0
call dword [sym.imp.USER32.dll_SetMenuItemInfoW]
push 0
push 0
push 0
push 0
call dword [sym.imp.USER32.dll_GetMenuItemRect]
push 0
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_PeekConsoleInputW]
push 0
push str.sPl47Ek1L8jJBo1EoT3W6nT4mUWD
push 0
call dword [sym.imp.KERNEL32.dll_IsValidNLSVersion]
push 0
call dword [sym.imp.USER32.dll_GetDC]
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_CreateProcessW]
push 0
push 0
call dword [sym.imp.USER32.dll_GetComboBoxInfo]
push 0
push 0
call dword [sym.imp.USER32.dll_LookupIconIdFromDirectory]
push 0
call dword [sym.imp.KERNEL32.dll_InitOnceInitialize]
push 0
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_GetProcessMitigationPolicy]
push 0
call dword [sym.imp.KERNEL32.dll_UnmapViewOfFile]
push 0
push 0
push 0
push 0
push str.tyFtnGInlXD7G3lN64axp3EUD9Ff6
call dword [sym.imp.KERNEL32.dll_FindFirstStreamTransactedW]
call dword [sym.imp.USER32.dll_GetClipboardViewer]
push 0
call dword [sym.imp.USER32.dll_IsCharAlphaW]
push 0
push 0
push 0
push 0
call dword [sym.imp.USER32.dll_SetMenuItemInfoW]
push 0
call dword [sym.imp.KERNEL32.dll_CloseHandle]
push 0
push 0
push 0
push 0
push 0
push 0
push 0
call dword [sym.imp.USER32.dll_ScrollDC]
push 0
push 0
push 0
call dword [sym.imp.USER32.dll_GetClassNameW]
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_SetProcessPreferredUILanguages]
push 0
push 0
call dword [sym.imp.USER32.dll_GetScrollPos]
ret