Function at 0x1009f820
Capabilities:
Contain obfuscated stackstrings

Disassembly:
sub esp, 0x24
mov eax, dword [0x101cf40c]
xor eax, esp
mov dword [esp + 0x20], eax
push esi
mov esi, dword [esp + 0x30]
push edi
mov edi, dword [sym.imp.USER32.dll_IsWindow]
push esi
call edi
test eax, eax
jne 0x1009f852
pop edi
pop esi
mov ecx, dword [esp + 0x20]
xor ecx, esp
call fcn.101179ba
add esp, 0x24
ret
mov eax, dword [esp + 0x38]
push ebx
xor ebx, ebx
cmp eax, ebx
jne 0x1009f878
push esi
call edi
neg eax
pop ebx
sbb eax, eax
pop edi
neg eax
pop esi
mov ecx, dword [esp + 0x20]
xor ecx, esp
call fcn.101179ba
add esp, 0x24
ret
cmp eax, 1
jne 0x1009f8a7
mov eax, dword [esp + 0x34]
push eax
call fcn.1009f320
add esp, 4
xchg ebx, eax
xchg ebx, eax
xor ecx, ecx
cmp eax, esi
sete cl
pop ebx
pop edi
pop esi
mov eax, ecx
mov ecx, dword [esp + 0x20]
xor ecx, esp
call fcn.101179ba
add esp, 0x24
ret
cmp eax, 2
jne 0x1009f8cb
push esi
call dword [sym.imp.USER32.dll_IsWindowVisible]
neg eax
pop ebx
sbb eax, eax
pop edi
neg eax
pop esi
mov ecx, dword [esp + 0x20]
xor ecx, esp
call fcn.101179ba
add esp, 0x24
ret
cmp eax, 3
jne 0x1009f8ef
push esi
call dword [sym.imp.USER32.dll_IsIconic]
neg eax
pop ebx
sbb eax, eax
pop edi
neg eax
pop esi
mov ecx, dword [esp + 0x20]
xor ecx, esp
call fcn.101179ba
add esp, 0x24
ret
cmp eax, 4
jne 0x1009f913
push esi
call dword [sym.imp.USER32.dll_IsZoomed]
neg eax
pop ebx
sbb eax, eax
pop edi
neg eax
pop esi
mov ecx, dword [esp + 0x20]
xor ecx, esp
call fcn.101179ba
add esp, 0x24
ret
cmp eax, 5
jne 0x1009f93e
push 0xffffffffffffffec
push esi
call dword [sym.imp.USER32.dll_GetWindowLongA]
mov edi, edi
movzx eax, al
pop ebx
shr eax, 3
pop edi
and eax, 1
pop esi
mov ecx, dword [esp + 0x20]
xor ecx, esp
call fcn.101179ba
add esp, 0x24
ret
cmp eax, 6
jne 0x1009f980
mov esi, esi
mov dword [esp + 0xc], ebx
xchg ebx, eax
xchg ebx, eax
lea edx, [esp + 0xc]
push edx
push 0x3e8
push 3
push ebx
push ebx
push ebx
push esi
call fcn.100674e0
add esp, 0x1c
mov ebp, ebp
xor ecx, ecx
cmp eax, ebx
sete cl
pop ebx
pop edi
pop esi
mov eax, ecx
mov ecx, dword [esp + 0x20]
xor ecx, esp
call fcn.101179ba
add esp, 0x24
ret
cmp eax, 7
jne 0x1009f9a4
push esi
call dword [sym.imp.USER32.dll_IsWindowEnabled]
neg eax
pop ebx
sbb eax, eax
pop edi
neg eax
pop esi
mov ecx, dword [esp + 0x20]
xor ecx, esp
call fcn.101179ba
add esp, 0x24
ret
cmp eax, 8
jne 0x1009fa68
mov al, 0x70
mov cl, 0x6e
mov byte [esp + 0x23], al
mov byte [esp + 0x24], al
mov dl, 0x73
mov al, 0x64
mov byte [esp + 0x1c], 0x49
mov byte [esp + 0x1d], dl
mov byte [esp + 0x1e], 0x48
mov byte [esp + 0x1f], 0x75
mov byte [esp + 0x20], cl
mov byte [esp + 0x21], 0x67
mov byte [esp + 0x22], 0x41
mov byte [esp + 0x25], 0x57
mov byte [esp + 0x26], 0x69
mov byte [esp + 0x27], cl
mov byte [esp + 0x28], al
mov byte [esp + 0x29], 0x6f
mov byte [esp + 0x2a], 0x77
mov byte [esp + 0x2b], bl
mov ebx, ebx
mov byte [esp + 0x17], al
mov al, 0x6c
mov byte [esp + 0x10], 0x55
mov byte [esp + 0x11], dl
mov byte [esp + 0x12], 0x65
mov byte [esp + 0x13], 0x72
mov byte [esp + 0x14], 0x33
mov byte [esp + 0x15], 0x32
mov byte [esp + 0x16], 0x2e
mov byte [esp + 0x18], al
mov byte [esp + 0x19], al
mov byte [esp + 0x1a], bl
mov ebp, ebp
lea edx, [esp + 0x1c]
push edx
lea eax, [esp + 0x14]
push eax
call dword [sym.imp.KERNEL32.DLL_GetModuleHandleA]
push eax
call dword [sym.imp.KERNEL32.DLL_GetProcAddress]
mov dl, dl
cmp eax, ebx
je 0x1009faa2
push esi
call eax
pop ebx
pop edi
pop esi
mov ecx, dword [esp + 0x20]
xor ecx, esp
call fcn.101179ba
add esp, 0x24
ret
cmp eax, 9
jne 0x1009faa2
mov dword [esp + 0xc], ebx
mov dh, dh
lea ecx, [esp + 0xc]
push ecx
push esi
call fcn.10067530
add esp, 8
mov al, al
mov edx, dword [esp + 0xc]
push edx
call fcn.1006bb90
add esp, 4
pop ebx
pop edi
pop esi
mov ecx, dword [esp + 0x20]
xor ecx, esp
call fcn.101179ba
add esp, 0x24
ret
mov ecx, dword [esp + 0x2c]
pop ebx
pop edi
pop esi
xor ecx, esp
xor eax, eax
call fcn.101179ba
add esp, 0x24
ret