Function at 0x100040e0
Capabilities:
Create directory
Create process on windows
Enumerate gui resources
Get graphical window text
Terminate thread

Disassembly:
push ebp
mov ebp, esp
push ecx
push 0
push 0
push 0
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_UpdateResourceW]
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_ClearCommError]
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_CommConfigDialogW]
push 0
call dword [sym.imp.KERNEL32.dll_InterlockedPopEntrySList]
push 0
push 0
push 0
push 0
push str.7rSNQt6p1GQGjdWL
push 0
push str.OLBw8zWG38lv2He7LOeTZhq8sA6
push 0
push str.KG5eYv25dHEFAz4e8NmvuMyL1ib6
call dword [sym.imp.KERNEL32.dll_CompareStringEx]
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_OpenWaitableTimerW]
call dword [sym.imp.USER32.dll_GetMessageTime]
push 0
push 0
call dword [sym.imp.USER32.dll_RegisterSuspendResumeNotification]
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_CreateDirectoryExW]
push 0
push 0
call dword [sym.imp.USER32.dll_DdeCmpStringHandles]
call dword [sym.imp.USER32.dll_GetFocus]
push 0
push 0
push 0
push 0
push 0
push 0
push 0
call dword [sym.imp.USER32.dll_CreateIconFromResourceEx]
push 0
push 0
call dword [sym.imp.KERNEL32.dll_SetThreadPriorityBoost]
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_FindNextVolumeW]
push 0
call dword [sym.imp.KERNEL32.dll_SetErrorMode]
push 0
push 0
call dword [sym.imp.KERNEL32.dll_GetConsoleScreenBufferInfo]
push 0
push 0
push str.9c14ni2AmErfH4CE7
push 0
push 0
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_GetDurationFormat]
push 0
push 0
push 0
push 0
call dword [sym.imp.USER32.dll_SendMessageW]
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_EnumResourceTypesW]
push 0
push 0
push 0
push 0
call dword [sym.imp.USER32.dll_MessageBoxW]
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_FindFirstVolumeMountPointW]
push 0
call dword [sym.imp.USER32.dll_PaintDesktop]
call dword [sym.imp.KERNEL32.dll_GetACP]
push 0
push 0
call dword [sym.imp.KERNEL32.dll_GetProcessPriorityBoost]
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_FindFirstChangeNotificationW]
push 0
push 0
call dword [sym.imp.USER32.dll_GetIconInfoExW]
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_CreateFiber]
push 0
call dword [sym.imp.USER32.dll_MessageBoxIndirectW]
push 0
push dword [ebp - 4]
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_ScrollConsoleScreenBufferW]
push 0
push 0
call dword [sym.imp.USER32.dll_DdeKeepStringHandle]
push 0
push 0
push 0
push 0
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_GetNamedPipeHandleStateW]
push 0
push 0
push 0
call dword [sym.imp.USER32.dll_GetWindowTextW]
push 0
call dword [sym.imp.KERNEL32.dll_SetUserGeoID]
push 0
call dword [sym.imp.KERNEL32.dll_RemoveVectoredExceptionHandler]
push 0
push 0
call dword [sym.imp.KERNEL32.dll_DeleteTimerQueueEx]
push 0
call dword [sym.imp.USER32.dll_GetSystemMetrics]
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_CreateProcessW]
push 0
call dword [sym.imp.KERNEL32.dll_IsThreadpoolTimerSet]
push 0
push 0
push 0
push 0
call dword [sym.imp.USER32.dll_SetScrollInfo]
push 0
push 0
call dword [sym.imp.KERNEL32.dll_CancelIoEx]
push 0
push 0
push 0
push 0
push 0
call dword [sym.imp.USER32.dll_LookupIconIdFromDirectoryEx]
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_EraseTape]
push 0
push 0
call dword [sym.imp.KERNEL32.dll_TerminateThread]
push 0
call dword [sym.imp.KERNEL32.dll_GetMaximumProcessorCount]
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_GlobalGetAtomNameW]
push 0
push 0
push 0
push 0
push 0
call dword [sym.imp.USER32.dll_DialogBoxIndirectParamW]
push 0
push 0
push 0
push 0
push 0
call dword [sym.imp.USER32.dll_GetRawInputData]
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_OpenWaitableTimerW]
xor eax, eax
lock dec dword [eax]
push eax
call dword [sym.imp.USER32.dll_ArrangeIconicWindows]
mov esp, ebp
pop ebp
ret