Function at 0x100b06c0
Capabilities:
Contain obfuscated stackstrings

Disassembly:
sub esp, 0x24
mov eax, dword [0x101e5aec]
xor eax, esp
mov dword [esp + 0x20], eax
push esi
mov esi, dword [esp + 0x30]
push edi
mov edi, dword [sym.imp.USER32.dll_IsWindow]
push esi
call edi
test eax, eax
jne 0x100b06f2
pop edi
pop esi
mov ecx, dword [esp + 0x20]
xor ecx, esp
call fcn.1012e3ba
add esp, 0x24
ret
mov eax, dword [esp + 0x38]
push ebx
xor ebx, ebx
cmp eax, ebx
jne 0x100b0718
push esi
call edi
neg eax
pop ebx
sbb eax, eax
pop edi
neg eax
pop esi
mov ecx, dword [esp + 0x20]
xor ecx, esp
call fcn.1012e3ba
add esp, 0x24
ret
cmp eax, 1
jne 0x100b074f
mov eax, dword [esp + 0x34]
push eax
call fcn.100b0170
add esp, 4
cmp dword [0x101d08e0], 0x6e83
xor ecx, ecx
cmp eax, esi
sete cl
pop ebx
pop edi
pop esi
mov eax, ecx
mov ecx, dword [esp + 0x20]
xor ecx, esp
call fcn.1012e3ba
add esp, 0x24
ret
cmp eax, 2
jne 0x100b0773
push esi
call dword [sym.imp.USER32.dll_IsWindowVisible]
neg eax
pop ebx
sbb eax, eax
pop edi
neg eax
pop esi
mov ecx, dword [esp + 0x20]
xor ecx, esp
call fcn.1012e3ba
add esp, 0x24
ret
cmp eax, 3
jne 0x100b0797
push esi
call dword [sym.imp.USER32.dll_IsIconic]
neg eax
pop ebx
sbb eax, eax
pop edi
neg eax
pop esi
mov ecx, dword [esp + 0x20]
xor ecx, esp
call fcn.1012e3ba
add esp, 0x24
ret
cmp eax, 4
jne 0x100b07bb
push esi
call dword [sym.imp.USER32.dll_IsZoomed]
neg eax
pop ebx
sbb eax, eax
pop edi
neg eax
pop esi
mov ecx, dword [esp + 0x20]
xor ecx, esp
call fcn.1012e3ba
add esp, 0x24
ret
cmp eax, 5
jne 0x100b07e6
push 0xffffffffffffffec
push esi
call dword [sym.imp.USER32.dll_GetWindowLongA]
mov edx, edx
movzx eax, al
pop ebx
shr eax, 3
pop edi
and eax, 1
pop esi
mov ecx, dword [esp + 0x20]
xor ecx, esp
call fcn.1012e3ba
add esp, 0x24
ret
cmp eax, 6
jne 0x100b0828
push ecx
pop ecx
mov dword [esp + 0xc], ebx
mov ch, ch
lea edx, [esp + 0xc]
push edx
push 0x3e8
push 3
push ebx
push ebx
push ebx
push esi
call fcn.10072430
add esp, 0x1c
mov bl, bl
xor ecx, ecx
cmp eax, ebx
sete cl
pop ebx
pop edi
pop esi
mov eax, ecx
mov ecx, dword [esp + 0x20]
xor ecx, esp
call fcn.1012e3ba
add esp, 0x24
ret
cmp eax, 7
jne 0x100b084c
push esi
call dword [sym.imp.USER32.dll_IsWindowEnabled]
neg eax
pop ebx
sbb eax, eax
pop edi
neg eax
pop esi
mov ecx, dword [esp + 0x20]
xor ecx, esp
call fcn.1012e3ba
add esp, 0x24
ret
cmp eax, 8
jne 0x100b0920
mov al, 0x70
mov cl, 0x6e
mov byte [esp + 0x23], al
mov byte [esp + 0x24], al
mov dl, 0x73
mov al, 0x64
mov byte [esp + 0x1c], 0x49
mov byte [esp + 0x1d], dl
mov byte [esp + 0x1e], 0x48
mov byte [esp + 0x1f], 0x75
mov byte [esp + 0x20], cl
mov byte [esp + 0x21], 0x67
mov byte [esp + 0x22], 0x41
mov byte [esp + 0x25], 0x57
mov byte [esp + 0x26], 0x69
mov byte [esp + 0x27], cl
mov byte [esp + 0x28], al
mov byte [esp + 0x29], 0x6f
mov byte [esp + 0x2a], 0x77
mov byte [esp + 0x2b], bl
cmp dword [0x101d08e8], 0xffff895d
mov byte [esp + 0x17], al
mov al, 0x6c
mov byte [esp + 0x10], 0x55
mov byte [esp + 0x11], dl
mov byte [esp + 0x12], 0x65
mov byte [esp + 0x13], 0x72
mov byte [esp + 0x14], 0x33
mov byte [esp + 0x15], 0x32
mov byte [esp + 0x16], 0x2e
mov byte [esp + 0x18], al
mov byte [esp + 0x19], al
mov byte [esp + 0x1a], bl
mov bh, bh
lea edx, [esp + 0x1c]
push edx
lea eax, [esp + 0x14]
push eax
call dword [sym.imp.KERNEL32.dll_GetModuleHandleA]
push eax
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
cmp dword [0x101d08f8], 0xffff8d29
cmp eax, ebx
je 0x100b0962
push esi
call eax
pop ebx
pop edi
pop esi
mov ecx, dword [esp + 0x20]
xor ecx, esp
call fcn.1012e3ba
add esp, 0x24
ret
cmp eax, 9
jne 0x100b0962
mov dword [esp + 0xc], ebx
mov edi, edi
lea ecx, [esp + 0xc]
push ecx
push esi
call fcn.10072480
add esp, 8
cmp dword [0x101d08e4], 0x7a3c
mov edx, dword [esp + 0xc]
push edx
call fcn.10077490
add esp, 4
pop ebx
pop edi
pop esi
mov ecx, dword [esp + 0x20]
xor ecx, esp
call fcn.1012e3ba
add esp, 0x24
ret
mov ecx, dword [esp + 0x2c]
pop ebx
pop edi
pop esi
xor ecx, esp
xor eax, eax
call fcn.1012e3ba
add esp, 0x24
ret