Function at 0x100a1e50
Capabilities:
Contain obfuscated stackstrings

Disassembly:
sub esp, 0x24
mov eax, dword [0x101ce2f4]
xor eax, esp
mov dword [esp + 0x20], eax
push esi
mov esi, dword [esp + 0x30]
push edi
mov edi, dword [sym.imp.USER32.dll_IsWindow]
push esi
call edi
test eax, eax
jne 0x100a1e82
pop edi
pop esi
mov ecx, dword [esp + 0x20]
xor ecx, esp
call fcn.1011717a
add esp, 0x24
ret
mov eax, dword [esp + 0x38]
push ebx
xor ebx, ebx
cmp eax, ebx
jne 0x100a1ea8
push esi
call edi
neg eax
pop ebx
sbb eax, eax
pop edi
neg eax
pop esi
mov ecx, dword [esp + 0x20]
xor ecx, esp
call fcn.1011717a
add esp, 0x24
ret
cmp eax, 1
jne 0x100a1ed7
mov eax, dword [esp + 0x34]
push eax
call fcn.100a1950
add esp, 4
test bh, bh
xor ecx, ecx
cmp eax, esi
sete cl
pop ebx
pop edi
pop esi
mov eax, ecx
mov ecx, dword [esp + 0x20]
xor ecx, esp
call fcn.1011717a
add esp, 0x24
ret
cmp eax, 2
jne 0x100a1efb
push esi
call dword [sym.imp.USER32.dll_IsWindowVisible]
neg eax
pop ebx
sbb eax, eax
pop edi
neg eax
pop esi
mov ecx, dword [esp + 0x20]
xor ecx, esp
call fcn.1011717a
add esp, 0x24
ret
cmp eax, 3
jne 0x100a1f1f
push esi
call dword [sym.imp.USER32.dll_IsIconic]
neg eax
pop ebx
sbb eax, eax
pop edi
neg eax
pop esi
mov ecx, dword [esp + 0x20]
xor ecx, esp
call fcn.1011717a
add esp, 0x24
ret
cmp eax, 4
jne 0x100a1f43
push esi
call dword [sym.imp.USER32.dll_IsZoomed]
neg eax
pop ebx
sbb eax, eax
pop edi
neg eax
pop esi
mov ecx, dword [esp + 0x20]
xor ecx, esp
call fcn.1011717a
add esp, 0x24
ret
cmp eax, 5
jne 0x100a1f6e
push 0xffffffffffffffec
push esi
call dword [sym.imp.USER32.dll_GetWindowLongA]
test cl, cl
movzx eax, al
pop ebx
shr eax, 3
pop edi
and eax, 1
pop esi
mov ecx, dword [esp + 0x20]
xor ecx, esp
call fcn.1011717a
add esp, 0x24
ret
cmp eax, 6
jne 0x100a1fb3
test eax, 0x1483
mov dword [esp + 0xc], ebx
test bh, bh
lea edx, [esp + 0xc]
push edx
push 0x3e8
push 3
push ebx
push ebx
push ebx
push esi
call fcn.10069bd0
add esp, 0x1c
mov bl, bl
xor ecx, ecx
cmp eax, ebx
sete cl
pop ebx
pop edi
pop esi
mov eax, ecx
mov ecx, dword [esp + 0x20]
xor ecx, esp
call fcn.1011717a
add esp, 0x24
ret
cmp eax, 7
jne 0x100a1fd7
push esi
call dword [sym.imp.USER32.dll_IsWindowEnabled]
neg eax
pop ebx
sbb eax, eax
pop edi
neg eax
pop esi
mov ecx, dword [esp + 0x20]
xor ecx, esp
call fcn.1011717a
add esp, 0x24
ret
cmp eax, 8
jne 0x100a209e
mov al, 0x70
mov cl, 0x6e
mov byte [esp + 0x23], al
mov byte [esp + 0x24], al
mov dl, 0x73
mov al, 0x64
mov byte [esp + 0x1c], 0x49
mov byte [esp + 0x1d], dl
mov byte [esp + 0x1e], 0x48
mov byte [esp + 0x1f], 0x75
mov byte [esp + 0x20], cl
mov byte [esp + 0x21], 0x67
mov byte [esp + 0x22], 0x41
mov byte [esp + 0x25], 0x57
mov byte [esp + 0x26], 0x69
mov byte [esp + 0x27], cl
mov byte [esp + 0x28], al
mov byte [esp + 0x29], 0x6f
mov byte [esp + 0x2a], 0x77
mov byte [esp + 0x2b], bl
mov ebp, ebp
mov byte [esp + 0x17], al
mov al, 0x6c
mov byte [esp + 0x10], 0x55
mov byte [esp + 0x11], dl
mov byte [esp + 0x12], 0x65
mov byte [esp + 0x13], 0x72
mov byte [esp + 0x14], 0x33
mov byte [esp + 0x15], 0x32
mov byte [esp + 0x16], 0x2e
mov byte [esp + 0x18], al
mov byte [esp + 0x19], al
mov byte [esp + 0x1a], bl
push ebx
pop ebx
lea edx, [esp + 0x1c]
push edx
lea eax, [esp + 0x14]
push eax
call dword [sym.imp.KERNEL32.DLL_GetModuleHandleA]
push eax
call dword [sym.imp.KERNEL32.DLL_GetProcAddress]
test eax, 0x2056
cmp eax, ebx
je 0x100a20db
push esi
call eax
pop ebx
pop edi
pop esi
mov ecx, dword [esp + 0x20]
xor ecx, esp
call fcn.1011717a
add esp, 0x24
ret
cmp eax, 9
jne 0x100a20db
mov dword [esp + 0xc], ebx
test eax, 0x42f
lea ecx, [esp + 0xc]
push ecx
push esi
call fcn.10069c20
add esp, 8
mov cl, cl
mov edx, dword [esp + 0xc]
push edx
call fcn.1006e0b0
add esp, 4
pop ebx
pop edi
pop esi
mov ecx, dword [esp + 0x20]
xor ecx, esp
call fcn.1011717a
add esp, 0x24
ret
mov ecx, dword [esp + 0x2c]
pop ebx
pop edi
pop esi
xor ecx, esp
xor eax, eax
call fcn.1011717a
add esp, 0x24
ret