Function at 0x1000b250
Capabilities:
Create process on windows
Get graphical window text
Terminate process

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x1002681d
mov eax, dword fs:[0]
push eax
sub esp, 0x898
mov eax, dword [0x10031040]
xor eax, ebp
mov dword [ebp - 0x10], eax
push ebx
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov eax, dword [ebp + 8]
mov edi, ecx
cmp eax, 0xa
jne 0x1000b2c0
mov eax, dword [edi + 0x80]
push 1
push eax
call dword [sym.imp.USER32.dll_GetDlgItem]
mov ecx, dword [edi + 0x80]
push eax
push 1
push 0x111
push ecx
call dword [sym.imp.USER32.dll_PostMessageW]
push 0
call dword [sym.imp.KERNEL32.dll_GetCurrentProcess]
push eax
call dword [sym.imp.KERNEL32.dll_TerminateProcess]
jmp 0x1000b6c7
cmp eax, 0xb
jne 0x1000b2eb
mov edx, dword [edi + 4]
push eax
push edx
call dword [sym.imp.USER32.dll_KillTimer]
mov eax, dword [edi + 4]
push 3
push 0
push 0
push 0
push 0
push 0xfffffffffffffffe
push eax
call dword [sym.imp.USER32.dll_SetWindowPos]
jmp 0x1000b6c7
cmp eax, 0xd
jne 0x1000b3b8
mov ecx, dword [edi + 0x80]
push 2
push ecx
call dword [sym.imp.USER32.dll_GetDlgItem]
push 0x7fc
lea edx, [ebp - 0x80c]
push 0
push edx
mov esi, eax
mov dword [ebp - 0x810], 0
call fcn.10018f30
mov ecx, dword [edi + 0x80]
add esp, 0xc
push 0x7ff
lea eax, [ebp - 0x810]
push eax
push 2
push ecx
call dword [sym.imp.USER32.dll_GetDlgItemTextW]
lea edx, [ebp - 0x898]
push edx
lea ecx, [ebp - 0x810]
call fcn.100116c0
mov eax, dword [ebp - 0x898]
push str.Cancel
push eax
call fcn.10018b48
add esp, 8
test eax, eax
jne 0x1000b396
push esi
call dword [sym.imp.USER32.dll_IsWindowEnabled]
test eax, eax
je 0x1000b396
mov ecx, dword [edi + 4]
push 0xd
push ecx
call dword [sym.imp.USER32.dll_KillTimer]
mov edx, dword [edi + 0x80]
push esi
push 2
push 0x111
push edx
call dword [sym.imp.USER32.dll_SendMessageW]
mov dword [ebp - 4], 0xffffffff
mov eax, dword [ebp - 0x898]
add eax, 0xfffffff0
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jmp 0x1000b474
cmp eax, 0xe
jne 0x1000b489
mov ecx, dword [edi + 0x80]
push 2
push ecx
call dword [sym.imp.USER32.dll_GetDlgItem]
push 0x7fc
lea edx, [ebp - 0x80c]
push 0
push edx
mov esi, eax
mov dword [ebp - 0x810], 0
call fcn.10018f30
mov ecx, dword [edi + 0x80]
add esp, 0xc
push 0x7ff
lea eax, [ebp - 0x810]
push eax
push 2
push ecx
call dword [sym.imp.USER32.dll_GetDlgItemTextW]
lea edx, [ebp - 0x898]
push edx
lea ecx, [ebp - 0x810]
call fcn.100116c0
mov eax, dword [ebp - 0x898]
push str.Cancel
push eax
call fcn.10018b48
add esp, 8
test eax, eax
jne 0x1000b457
push esi
call dword [sym.imp.USER32.dll_IsWindowEnabled]
test eax, eax
je 0x1000b457
mov ecx, dword [edi + 0x80]
push esi
push 2
push 0x111
push ecx
call dword [sym.imp.USER32.dll_SendMessageW]
mov dword [ebp - 4], 0xffffffff
mov eax, dword [ebp - 0x898]
add eax, 0xfffffff0
lea edx, [eax + 0xc]
or ecx, 0xffffffff
lock xadd dword [edx], ecx
dec ecx
test ecx, ecx
jg 0x1000b6c7
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
jmp 0x1000b6c7
cmp eax, 0xf
jne 0x1000b58a
mov ecx, dword [edi + 4]
push eax
push ecx
call dword [sym.imp.USER32.dll_KillTimer]
push 0
push str.MobogenieManagerClass
call dword [sym.imp.USER32.dll_FindWindowW]
mov dword [ebp - 0x89c], eax
test eax, eax
je 0x1000b57b
push 1
push 1
push 0x10
push eax
call dword [sym.imp.USER32.dll_PostMessageW]
lea edx, [edi + 0x78]
push edx
lea eax, [ebp - 0x8a0]
push eax
mov ebx, str.MobogenieService.exe__remove
call fcn.100019a0
add esp, 8
mov dword [ebp - 4], 2
mov edx, dword [ebp - 0x8a0]
push 3
push edx
lea eax, [ebp - 0x894]
lea ecx, [ebp - 0x890]
push eax
mov dword [ebp - 0x894], ecx
call fcn.10012ce0
lea ecx, [ebp - 0x898]
mov byte [ebp - 4], 3
mov esi, dword [ebp - 0x894]
push ecx
call fcn.10011600
mov eax, dword [ebp - 0x894]
lea edx, [ebp - 0x890]
cmp eax, edx
je 0x1000b534
push eax
call fcn.10017c08
add esp, 4
mov eax, dword [ebp - 0x898]
push 0
push eax
call dword [sym.imp.KERNEL32.dll_WinExec]
mov ecx, dword [ebp - 0x89c]
push 1
push 1
push 0x10
push ecx
call dword [sym.imp.USER32.dll_PostMessageW]
push 0x64
call dword [sym.imp.KERNEL32.dll_Sleep]
lea eax, [ebp - 0x898]
call fcn.100116a0
lea eax, [ebp - 0x8a0]
mov dword [ebp - 4], 0xffffffff
call fcn.100116a0
call fcn.1000b6f0
call fcn.1000cea0
jmp 0x1000b6c7
cmp eax, 0x10
jne 0x1000b6c7
mov edx, dword [edi + 4]
push eax
push edx
call dword [sym.imp.USER32.dll_KillTimer]
push 0
push str.MobogenieManagerClass
call dword [sym.imp.USER32.dll_FindWindowW]
mov dword [ebp - 0x8a0], eax
test eax, eax
je 0x1000b670
lea eax, [edi + 0x78]
push eax
lea ecx, [ebp - 0x89c]
push ecx
mov ebx, str.MobogenieService.exe__remove
call fcn.100019a0
add esp, 8
mov dword [ebp - 4], 4
mov eax, dword [ebp - 0x89c]
push 3
push eax
lea ecx, [ebp - 0x894]
lea edx, [ebp - 0x890]
push ecx
mov dword [ebp - 0x894], edx
call fcn.10012ce0
lea edx, [ebp - 0x8a4]
mov byte [ebp - 4], 5
mov esi, dword [ebp - 0x894]
push edx
call fcn.10011600
mov byte [ebp - 4], 7
mov eax, dword [ebp - 0x894]
lea ecx, [ebp - 0x890]
cmp eax, ecx
je 0x1000b62c
push eax
call fcn.10017c08
add esp, 4
mov edx, dword [ebp - 0x8a4]
push 0
push edx
call dword [sym.imp.KERNEL32.dll_WinExec]
mov eax, dword [ebp - 0x8a0]
push 1
push 1
push 0x10
push eax
call dword [sym.imp.USER32.dll_PostMessageW]
call fcn.1000b6f0
lea eax, [ebp - 0x8a4]
call fcn.100116a0
lea eax, [ebp - 0x89c]
mov dword [ebp - 4], 0xffffffff
call fcn.100116a0
call fcn.1000b6f0
mov ecx, dword [edi + 0x80]
push 1
push ecx
call dword [sym.imp.USER32.dll_GetDlgItem]
mov esi, eax
test esi, esi
je 0x1000b6c7
mov edx, dword [edi + 0x80]
push esi
push 1
push 0x111
push edx
call dword [sym.imp.USER32.dll_SendMessageW]
mov eax, dword [edi + 0x80]
push esi
push 1
push 0x111
push eax
call dword [sym.imp.USER32.dll_PostMessageW]
mov ecx, dword [edi + 4]
push 0
push 0xea60
push 0xa
push ecx
call dword [sym.imp.USER32.dll_SetTimer]
xor eax, eax
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
call fcn.10017423
mov esp, ebp
pop ebp
ret 4