Function at 0x100051f0
Capabilities:
Create process on windows
Enumerate gui resources
Get disk information
Get file size
Get system information on windows
Manipulate console buffer

Disassembly:
push ebp
mov ebp, esp
push ecx
push 0
call dword [sym.imp.KERNEL32.dll_FindVolumeClose]
push 0
push 0
call dword [sym.imp.KERNEL32.dll_GetLogicalDriveStringsW]
push 0
call dword [sym.imp.KERNEL32.dll_DebugSetProcessKillOnExit]
push 0
call dword [sym.imp.KERNEL32.dll_GetSystemTime]
push 0
push 0
push 0
push 0
push 0
call dword [sym.imp.USER32.dll_DialogBoxIndirectParamW]
push 0
push 0
push 0
push 0x100c86ec
push 0
push 0x100c8724
call dword [sym.imp.KERNEL32.dll_GetCurrencyFormatEx]
push 0
push 0
push 0
push 0
call dword [sym.imp.USER32.dll_AppendMenuW]
push 0
call dword [sym.imp.KERNEL32.dll_GlobalFlags]
push 0
call dword [sym.imp.KERNEL32.dll_WakeConditionVariable]
push 0
call dword [sym.imp.KERNEL32.dll_InterlockedPopEntrySList]
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_GetModuleFileNameW]
push 0
push 0
call dword [sym.imp.KERNEL32.dll_SetCriticalSectionSpinCount]
push 0
push 0
call dword [sym.imp.KERNEL32.dll_AssignProcessToJobObject]
push 0
call dword [sym.imp.KERNEL32.dll_GetNativeSystemInfo]
push 0
push 0
push 0
push 0
push 0
push 0
push 0
call dword [sym.imp.USER32.dll_SendMessageTimeoutW]
push 0
call dword [sym.imp.USER32.dll_DdeDisconnectList]
push 0
push 0
push 0
call dword [sym.imp.USER32.dll_InternalGetWindowText]
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_OfferVirtualMemory]
push 0x100c875c
push 0
push 0
push 0x100c8798
push 0
push 0
push 0x100c87cc
call dword [sym.imp.KERNEL32.dll_GetDateFormatEx]
push 0
call dword [sym.imp.KERNEL32.dll_GetLocalTime]
call dword [sym.imp.KERNEL32.dll_DebugBreak]
push 0
push 0
call dword [sym.imp.KERNEL32.dll_FlsSetValue]
push 0
push 0
push 0
push 0x100c87ec
push 0
push 0x100c8810
call dword [sym.imp.KERNEL32.dll_GetCurrencyFormatEx]
push 0
push 0
push 0
call dword [sym.imp.USER32.dll_SetDlgItemTextW]
push 0
push 0
push 0
push 0
push 0
call dword [sym.imp.USER32.dll_CreateDialogParamW]
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_SetProcessWorkingSetSize]
push 0
call dword [sym.imp.USER32.dll_GetWindowDC]
push 0
call dword [sym.imp.KERNEL32.dll_FindVolumeMountPointClose]
push 0
push 0
call dword [sym.imp.KERNEL32.dll_SetThreadpoolThreadMaximum]
push 0
push dword [ebp - 4]
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_FillConsoleOutputCharacterW]
push 0
push 0
push 0
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_EnumResourceNamesExW]
push 0
push 0
push 0
call dword [sym.imp.USER32.dll_EnumDesktopsW]
push 0
push 0
push 0
push 0
call dword [sym.imp.USER32.dll_SetTimer]
push 0
push 0
push 0
push 0
call dword [sym.imp.USER32.dll_SetScrollInfo]
push 0
push 0x100c8838
call dword [sym.imp.KERNEL32.dll_WinExec]
push 0
call dword [sym.imp.KERNEL32.dll_InitializeConditionVariable]
push 0
call dword [sym.imp.KERNEL32.dll_PulseEvent]
push 0
push 0
call dword [sym.imp.KERNEL32.dll_VirtualUnlock]
push 0
call dword [sym.imp.USER32.dll_IsWindowUnicode]
push 0
push 0x100c8848
push 0
push 0
push 0
push 0x100c8868
push 0
push 0
call dword [sym.imp.KERNEL32.dll_WideCharToMultiByte]
push 0
push 0
push 0
push 0
push 0
call dword [sym.imp.USER32.dll_mouse_event]
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
call dword [sym.imp.USER32.dll_DrawIconEx]
push 0
push 0
call dword [sym.imp.KERNEL32.dll_GetFileSizeEx]
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_GetProcessorSystemCycleTime]
push 0
push dword [ebp - 4]
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_ReadConsoleOutputCharacterW]
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_MapUserPhysicalPages]
call dword [sym.imp.KERNEL32.dll_GetCurrentProcessorNumber]
push 0
push 0
push 0
call dword [sym.imp.USER32.dll_SetSysColors]
push 0
push 0
call dword [sym.imp.USER32.dll_GetWindowInfo]
push 0
push dword [ebp - 4]
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_WriteConsoleOutputCharacterW]
push 0
call dword [sym.imp.USER32.dll_GetMenu]
push 0x100c889c
push 0
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
push 0
push 0
push 0
push 0
push 0
call dword [sym.imp.USER32.dll_CheckMenuRadioItem]
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_TzSpecificLocalTimeToSystemTimeEx]
push 0
call dword [sym.imp.KERNEL32.dll_GlobalLock]
push 0
push 0
push 0
call dword [sym.imp.USER32.dll_DdeAbandonTransaction]
mov esp, ebp
pop ebp
ret