Function at 0x10006030
Capabilities:
Resume thread
Terminate process

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x8b0
mov dword [ebp - 0x2a8], str.Outer
mov dword [ebp - 0x5ac], str.Left
mov dword [ebp - 0xf8], 0
mov dword [ebp - 0xf4], 0
mov dword [ebp - 0x1c0], 0
mov dword [ebp - 0x1bc], 0
mov dword [ebp - 4], 0
mov dword [ebp - 0xe0], 0xffffffff
mov eax, dword [ebp - 0x2a8]
push eax
lea ecx, [ebp - 0x1b8]
push ecx
call dword [sym.imp.KERNEL32.dll_lstrcpyA]
mov edx, dword [ebp - 0x5ac]
push edx
lea eax, [ebp - 0x2a0]
push eax
call dword [sym.imp.KERNEL32.dll_lstrcpyA]
mov ecx, dword [ebp - 0x5ac]
push ecx
lea edx, [ebp - 0xd8]
push edx
call dword [sym.imp.KERNEL32.dll_lstrcpyA]
mov eax, dword [ebp - 0x5ac]
push eax
lea ecx, [ebp - 0xd8]
push ecx
call dword [sym.imp.KERNEL32.dll_lstrcatA]
lea edx, [ebp - 0xf8]
push edx
push 0
call dword [sym.imp.USER32.dll_ClientToScreen]
mov dword [ebp - 0xf4], eax
mov eax, dword [ebp - 0xf8]
mov dword [ebp - 0x1c0], eax
push 0
call dword [sym.imp.USER32.dll_IsWindowVisible]
mov dword [ebp - 0x1c0], eax
push 0x1001a190
lea ecx, [ebp - 0x5a8]
call fcn.10001980
push eax
call dword [sym.imp.KERNEL32.dll_GetModuleHandleA]
mov dword [ebp - 0x884], eax
push 0x1001a1c4
lea ecx, [ebp - 0x5a8]
call fcn.10001980
push eax
mov ecx, dword [ebp - 0x884]
push ecx
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
mov dword [ebp - 0xec], eax
push 0x1001a480
lea ecx, [ebp - 0x5a8]
call fcn.10001980
push eax
mov edx, dword [ebp - 0x884]
push edx
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
mov dword [ebp - 0xe8], eax
mov eax, dword [ebp + 0x18]
push eax
mov ecx, dword [ebp + 0xc]
mov edx, dword [ecx + 0x34]
push edx
mov eax, dword [ebp + 8]
push eax
call fcn.10005a60
add esp, 0xc
mov dword [ebp - 0xf0], eax
mov ecx, dword [ebp - 0x5ac]
push ecx
lea edx, [ebp - 0xd8]
push edx
call dword [sym.imp.KERNEL32.dll_lstrcpyA]
mov eax, dword [ebp - 0x5ac]
push eax
lea ecx, [ebp - 0xd8]
push ecx
call dword [sym.imp.KERNEL32.dll_lstrcatA]
cmp dword [ebp - 0xf0], 0
jne 0x100061c3
mov eax, dword [ebp - 0xe0]
jmp 0x100064fe
mov edx, dword [ebp + 0x20]
push edx
lea eax, [ebp - 0xe4]
push eax
lea ecx, [ebp - 0x2a4]
push ecx
mov edx, dword [ebp + 0x1c]
push edx
lea eax, [ebp - 0xdc]
push eax
lea ecx, [ebp - 0xe0]
push ecx
lea edx, [ebp - 0x880]
push edx
mov eax, dword [ebp - 0xf0]
push eax
call fcn.10005d80
add esp, 0x20
test eax, eax
je 0x100064eb
mov dword [ebp - 0x88c], 0
mov ecx, dword [ebp - 0x1bc]
push ecx
call dword [sym.imp.GDI32.dll_GetBkMode]
mov edx, dword [ebp + 0xc]
mov eax, dword [edx + 0x34]
cmp eax, dword [ebp - 0x2a4]
jne 0x1000628e
mov ecx, dword [ebp - 0xe4]
cmp ecx, dword [ebp + 0x18]
jb 0x1000628e
mov edx, dword [ebp - 0x2a4]
mov dword [ebp - 0x88c], edx
push 0x1001a1b0
lea ecx, [ebp - 0x5a8]
call fcn.10001980
push eax
mov eax, dword [ebp - 0x884]
push eax
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
mov dword [ebp - 0x890], eax
lea ecx, [ebp - 0x888]
push ecx
push 0x40
mov edx, dword [ebp - 0xe4]
push edx
mov eax, dword [ebp - 0x88c]
push eax
mov ecx, dword [ebp - 0xe0]
push ecx
call dword [ebp - 0x890]
jmp 0x10006347
call fcn.10005a40
test eax, eax
je 0x10006347
mov edx, dword [ebp - 0x2a4]
push edx
mov eax, dword [ebp - 0xe0]
push eax
call fcn.10005cd0
add esp, 8
test eax, eax
je 0x100062ee
push 0x40
push 0x3000
mov ecx, dword [ebp + 0x18]
push ecx
mov edx, dword [ebp + 0xc]
mov eax, dword [edx + 0x34]
push eax
mov ecx, dword [ebp - 0xe0]
push ecx
call dword [0x1001b1cc]
mov dword [ebp - 0x88c], eax
mov edx, dword [ebp - 0x2a8]
push edx
lea eax, [ebp - 0x1b8]
push eax
call dword [sym.imp.KERNEL32.dll_lstrcpyA]
cmp dword [ebp - 0x88c], 0
jne 0x10006347
mov ecx, dword [ebp + 0xc]
push ecx
call fcn.10005b00
add esp, 4
test eax, eax
je 0x10006347
push 0x40
push 0x3000
mov edx, dword [ebp + 0x18]
push edx
push 0
mov eax, dword [ebp - 0xe0]
push eax
call dword [0x1001b1cc]
mov dword [ebp - 0x88c], eax
cmp dword [ebp - 0x88c], 0
je 0x10006347
mov ecx, dword [ebp - 0x88c]
push ecx
mov edx, dword [ebp + 0x14]
push edx
mov eax, dword [ebp + 0xc]
push eax
call fcn.10005b50
add esp, 0xc
cmp dword [ebp - 0x88c], 0
je 0x100064a4
lea ecx, [ebp - 0x888]
push ecx
push 4
lea edx, [ebp - 0x88c]
push edx
mov eax, dword [ebp - 0x7dc]
add eax, 8
push eax
mov ecx, dword [ebp - 0xe0]
push ecx
call dword [ebp - 0xec]
mov edx, dword [ebp + 0xc]
mov eax, dword [ebp - 0x88c]
mov dword [edx + 0x34], eax
lea ecx, [ebp - 0xd8]
push ecx
call dword [sym.imp.KERNEL32.dll_lstrlenA]
sub eax, 2
mov dword [ebp - 4], eax
lea edx, [ebp - 0x888]
push edx
mov eax, dword [ebp + 0x18]
push eax
mov ecx, dword [ebp + 0x14]
push ecx
mov edx, dword [ebp - 0x88c]
push edx
mov eax, dword [ebp - 0xe0]
push eax
call dword [ebp - 0xec]
movzx ecx, al
test ecx, ecx
je 0x10006450
mov dword [ebp - 0x880], 0x10007
call dword [sym.imp.KERNEL32.dll_GetLastError]
mov edx, dword [ebp - 0x88c]
cmp edx, dword [ebp - 0x2a4]
jne 0x100063fa
mov eax, dword [ebp + 0xc]
mov ecx, dword [eax + 0x34]
mov edx, dword [ebp + 0xc]
add ecx, dword [edx + 0x28]
mov dword [ebp - 0x7d0], ecx
jmp 0x10006420
mov eax, dword [ebp - 0x5ac]
push eax
lea ecx, [ebp - 0x2a0]
push ecx
call dword [sym.imp.KERNEL32.dll_lstrcpyA]
mov edx, dword [ebp + 0xc]
mov eax, dword [ebp - 0x88c]
add eax, dword [edx + 0x28]
mov dword [ebp - 0x7d0], eax
lea ecx, [ebp - 0x880]
push ecx
mov edx, dword [ebp - 0xdc]
push edx
call dword [ebp - 0xe8]
mov eax, dword [ebp - 0xdc]
push eax
call dword [sym.imp.KERNEL32.dll_ResumeThread]
mov ecx, dword [ebp - 0xdc]
push ecx
call dword [sym.imp.KERNEL32.dll_CloseHandle]
jmp 0x100064a2
push 0
mov edx, dword [ebp - 0xe0]
push edx
call dword [sym.imp.KERNEL32.dll_TerminateProcess]
mov eax, dword [ebp - 0xdc]
push eax
call dword [sym.imp.KERNEL32.dll_CloseHandle]
mov ecx, dword [ebp - 0xe0]
push ecx
call dword [sym.imp.KERNEL32.dll_CloseHandle]
mov edx, dword [ebp - 0x1c0]
mov dword [ebp - 0xf8], edx
lea eax, [ebp - 0xf8]
push eax
call dword [sym.imp.USER32.dll_GetCursorPos]
mov byte [ebp - 0x1b8], al
mov dword [ebp - 0xe0], 0xffffffff
jmp 0x100064eb
push 0
mov ecx, dword [ebp - 0xe0]
push ecx
call dword [sym.imp.KERNEL32.dll_TerminateProcess]
mov edx, dword [ebp - 0x5ac]
push edx
lea eax, [ebp - 0x2a0]
push eax
call dword [sym.imp.KERNEL32.dll_lstrcpyA]
mov ecx, dword [ebp - 0xdc]
push ecx
call dword [sym.imp.KERNEL32.dll_CloseHandle]
mov edx, dword [ebp - 0xe0]
push edx
call dword [sym.imp.KERNEL32.dll_CloseHandle]
mov dword [ebp - 0xe0], 0xffffffff
mov eax, dword [ebp - 0xf0]
push eax
call dword [sym.imp.KERNEL32.dll_GlobalFree]
mov eax, dword [ebp - 0xe0]
mov esp, ebp
pop ebp
ret