Function at 0x10005130
Capabilities:
Create process on windows
Get hostname
Set console window title
Set current directory

Disassembly:
push ebp
mov ebp, esp
push ecx
push 0
push 0x100ce600
call dword [sym.imp.KERNEL32.dll_WinExec]
push 0
call dword [sym.imp.KERNEL32.dll_IsValidCodePage]
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_SetThreadGroupAffinity]
push 0
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_PostQueuedCompletionStatus]
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_GetAtomNameW]
push 0
push 0
call dword [sym.imp.USER32.dll_ChangeWindowMessageFilter]
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_LocalReAlloc]
push 0
push 0
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_VirtualProtectEx]
call dword [sym.imp.USER32.dll_EndMenu]
push 0
push 0
push 0
call dword [sym.imp.USER32.dll_RegisterPointerInputTargetEx]
push 0
call dword [sym.imp.KERNEL32.dll_SetCurrentDirectoryW]
push 0
call dword [sym.imp.KERNEL32.dll_SetSearchPathMode]
push 0
push 0
call dword [sym.imp.KERNEL32.dll_Wow64GetThreadContext]
push 0
push 0
call dword [sym.imp.KERNEL32.dll_SetConsoleTextAttribute]
push 0
push dword [ebp - 4]
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_ReadConsoleOutputAttribute]
push 0
call dword [sym.imp.KERNEL32.dll_ConvertDefaultLocale]
push 0
push 0
call dword [sym.imp.USER32.dll_SetWindowDisplayAffinity]
push 0
call dword [sym.imp.KERNEL32.dll_LocalUnlock]
push 0
push 0
push 0
push 0
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_CreateTimerQueueTimer]
push 0
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_InitializeProcThreadAttributeList]
push 0
call dword [sym.imp.KERNEL32.dll_SetThreadLocale]
push 0
push 0
call dword [sym.imp.USER32.dll_SetParent]
push 0
push 0
call dword [sym.imp.KERNEL32.dll_GetProcessIoCounters]
call dword [sym.imp.KERNEL32.dll_AreFileApisANSI]
push 0
push 0
call dword [sym.imp.KERNEL32.dll_SetFileShortNameW]
push 0
push 0
call dword [sym.imp.KERNEL32.dll_LocalAlloc]
push 0
push 0
call dword [sym.imp.USER32.dll_GetWindow]
push 0
push 0
push 0
push 0
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_MapViewOfFileExNuma]
push 0
push 0
call dword [sym.imp.USER32.dll_GetWindowRect]
push 0
push 0
call dword [sym.imp.USER32.dll_RegisterPointerInputTarget]
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_InitializeCriticalSectionEx]
push 0
push 0
call dword [sym.imp.KERNEL32.dll_IsBadReadPtr]
push 0
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_SetNamedPipeHandleState]
push 0
push 0
push 0
push 0
push 0
call dword [sym.imp.USER32.dll_CascadeWindows]
push 0
call dword [sym.imp.KERNEL32.dll_Wow64RevertWow64FsRedirection]
push 0
push 0
push 0
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_SetTapePosition]
push 0
push 0
call dword [sym.imp.KERNEL32.dll_SetProcessAffinityUpdateMode]
push 0
push 0
call dword [sym.imp.USER32.dll_CharUpperBuffW]
push 0
call dword [sym.imp.KERNEL32.dll_DisableThreadLibraryCalls]
push 0
push 0
push 0
push 0
call dword [sym.imp.USER32.dll_ChangeWindowMessageFilterEx]
push 0
push 0
call dword [sym.imp.USER32.dll_UnregisterClassW]
push 0
push 0
call dword [sym.imp.USER32.dll_ClientToScreen]
push 0
call dword [sym.imp.KERNEL32.dll_GetMemoryErrorHandlingCapabilities]
push 0
call dword [sym.imp.KERNEL32.dll_FindCloseChangeNotification]
push 0
push 0
call dword [sym.imp.KERNEL32.dll_GetProcessPriorityBoost]
push 0
push 0
call dword [sym.imp.KERNEL32.dll_SetThreadErrorMode]
push 0
call dword [sym.imp.KERNEL32.dll_SetThreadStackGuarantee]
push 0
push 0
call dword [sym.imp.KERNEL32.dll_GetComputerNameW]
push 0
call dword [sym.imp.KERNEL32.dll_SetConsoleOutputCP]
push 0
push 0x100ce61c
push 0
push 0
push 0
push 0x100ce634
push 0
push 0
call dword [sym.imp.KERNEL32.dll_WideCharToMultiByte]
call dword [sym.imp.USER32.dll_GetMessageTime]
push 0
call dword [sym.imp.KERNEL32.dll_SetConsoleTitleW]
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_SetConsoleWindowInfo]
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_EnumSystemLanguageGroupsW]
mov esp, ebp
pop ebp
ret