Function at 0x1008bc00
Capabilities:
Contain obfuscated stackstrings

Disassembly:
sub esp, 0x24
mov eax, dword [0x101b7324]
xor eax, esp
mov dword [esp + 0x20], eax
push esi
mov esi, dword [esp + 0x30]
push edi
mov edi, dword [sym.imp.USER32.dll_IsWindow]
push esi
call edi
test eax, eax
jne 0x1008bc32
pop edi
pop esi
mov ecx, dword [esp + 0x20]
xor ecx, esp
call fcn.100ffa66
add esp, 0x24
ret
mov eax, dword [esp + 0x38]
push ebx
xor ebx, ebx
cmp eax, ebx
jne 0x1008bc58
push esi
call edi
neg eax
pop ebx
sbb eax, eax
pop edi
neg eax
pop esi
mov ecx, dword [esp + 0x20]
xor ecx, esp
call fcn.100ffa66
add esp, 0x24
ret
cmp eax, 1
jne 0x1008bc85
mov eax, dword [esp + 0x34]
push eax
call fcn.1008b2c0
add esp, 4
xor ecx, ecx
cmp eax, esi
sete cl
pop ebx
pop edi
pop esi
mov eax, ecx
mov ecx, dword [esp + 0x20]
xor ecx, esp
call fcn.100ffa66
add esp, 0x24
ret
cmp eax, 2
jne 0x1008bca9
push esi
call dword [sym.imp.USER32.dll_IsWindowVisible]
neg eax
pop ebx
sbb eax, eax
pop edi
neg eax
pop esi
mov ecx, dword [esp + 0x20]
xor ecx, esp
call fcn.100ffa66
add esp, 0x24
ret
cmp eax, 3
jne 0x1008bccd
push esi
call dword [sym.imp.USER32.dll_IsIconic]
neg eax
pop ebx
sbb eax, eax
pop edi
neg eax
pop esi
mov ecx, dword [esp + 0x20]
xor ecx, esp
call fcn.100ffa66
add esp, 0x24
ret
cmp eax, 4
jne 0x1008bcf1
push esi
call dword [sym.imp.USER32.dll_IsZoomed]
neg eax
pop ebx
sbb eax, eax
pop edi
neg eax
pop esi
mov ecx, dword [esp + 0x20]
xor ecx, esp
call fcn.100ffa66
add esp, 0x24
ret
cmp eax, 5
jne 0x1008bd1a
push 0xffffffffffffffec
push esi
call dword [sym.imp.USER32.dll_GetWindowLongA]
movzx eax, al
pop ebx
shr eax, 3
pop edi
and eax, 1
pop esi
mov ecx, dword [esp + 0x20]
xor ecx, esp
call fcn.100ffa66
add esp, 0x24
ret
cmp eax, 6
jne 0x1008bd54
lea edx, [esp + 0xc]
push edx
push 0x3e8
push 3
push ebx
push ebx
push ebx
push esi
mov dword [esp + 0x28], ebx
call fcn.10054270
add esp, 0x1c
neg eax
pop ebx
sbb eax, eax
pop edi
add eax, 1
pop esi
mov ecx, dword [esp + 0x20]
xor ecx, esp
call fcn.100ffa66
add esp, 0x24
ret
cmp eax, 7
jne 0x1008bd78
push esi
call dword [sym.imp.USER32.dll_IsWindowEnabled]
neg eax
pop ebx
sbb eax, eax
pop edi
neg eax
pop esi
mov ecx, dword [esp + 0x20]
xor ecx, esp
call fcn.100ffa66
add esp, 0x24
ret
cmp eax, 8
jne 0x1008be36
mov al, 0x70
mov byte [esp + 0x23], al
mov byte [esp + 0x24], al
mov al, 0x64
mov byte [esp + 0x28], al
mov byte [esp + 0x17], al
mov al, 0x6c
mov cl, 0x6e
mov byte [esp + 0x18], al
mov byte [esp + 0x19], al
lea eax, [esp + 0x1c]
mov byte [esp + 0x20], cl
mov byte [esp + 0x27], cl
mov dl, 0x73
push eax
lea ecx, [esp + 0x14]
push ecx
mov byte [esp + 0x24], 0x49
mov byte [esp + 0x25], dl
mov byte [esp + 0x26], 0x48
mov byte [esp + 0x27], 0x75
mov byte [esp + 0x29], 0x67
mov byte [esp + 0x2a], 0x41
mov byte [esp + 0x2d], 0x57
mov byte [esp + 0x2e], 0x69
mov byte [esp + 0x31], 0x6f
mov byte [esp + 0x32], 0x77
mov byte [esp + 0x33], bl
mov byte [esp + 0x18], 0x55
mov byte [esp + 0x19], dl
mov byte [esp + 0x1a], 0x65
mov byte [esp + 0x1b], 0x72
mov byte [esp + 0x1c], 0x33
mov byte [esp + 0x1d], 0x32
mov byte [esp + 0x1e], 0x2e
mov byte [esp + 0x22], bl
call dword [sym.imp.KERNEL32.DLL_GetModuleHandleA]
push eax
call dword [sym.imp.KERNEL32.DLL_GetProcAddress]
cmp eax, ebx
je 0x1008be69
push esi
call eax
pop ebx
pop edi
pop esi
mov ecx, dword [esp + 0x20]
xor ecx, esp
call fcn.100ffa66
add esp, 0x24
ret
cmp eax, 9
jne 0x1008be69
lea edx, [esp + 0xc]
push edx
push esi
mov dword [esp + 0x14], ebx
call fcn.100542c0
mov eax, dword [esp + 0x14]
push eax
call fcn.100586b0
add esp, 0xc
pop ebx
pop edi
pop esi
mov ecx, dword [esp + 0x20]
xor ecx, esp
call fcn.100ffa66
add esp, 0x24
ret
mov ecx, dword [esp + 0x2c]
pop ebx
pop edi
pop esi
xor ecx, esp
xor eax, eax
call fcn.100ffa66
add esp, 0x24
ret