Function at 0x1081d6ed
Capabilities:
Contain obfuscated stackstrings

Disassembly:
push 0xd04
mov eax, 0x1084d2fb
call fcn.1081eb1e
mov edi, dword [ebp + 0x10]
lea eax, [ebp - 0xc7c]
push 0xc2a
xor ebx, ebx
push ebx
push eax
call fcn.108213a0
add esp, 0xc
mov dword [ebp - 0xc80], ebx
call fcn.1081316c
push eax
lea ecx, [ebp - 0xc80]
call fcn.1081005b
mov dword [ebp - 4], ebx
mov byte [ebp - 4], 1
test edi, edi
je 0x1081d9f8
cmp dword [edi + 8], 0x4a
jne 0x1081d9f8
mov esi, dword [edi]
test esi, esi
je 0x1081d9f8
mov eax, dword [esi]
cmp eax, 0x4cc7c
jne 0x1081d9ea
mov esi, dword [esi + 8]
lea edi, [ebp - 0xc7c]
push 0x64
pop eax
mov byte [ebp - 0xcea], al
mov ecx, 0x30a
rep movsd dword es:[edi], dword [esi]
mov byte [ebp - 0xca5], al
mov byte [ebp - 0xc94], al
lea eax, [ebp - 0xb53]
push eax
lea eax, [ebp - 0xc7c]
mov byte [ebp - 0xc84], bl
push eax
lea eax, [ebp - 0xc57]
movsw word es:[edi], word [esi]
push eax
push ebx
sub esp, 0xc
mov dword [ebp - 0xd00], 0x6b41434e
mov ecx, esp
mov dword [ebp - 0xcfc], 0x67735747
lea eax, [ebp - 0xc84]
mov dword [ebp - 0xcf8], 0x30385845
mov dword [ebp - 0xcf4], 0x31734745
push dword [ebp - 0xc84]
mov dword [ebp - 0xcf0], 0x54494248
push eax
mov word [ebp - 0xcec], 0x545a
lea eax, [ebp - 0xd00]
mov dword [ebp - 0xce9], 0x4d6e426c
mov dword [ebp - 0xce5], 0x6b444757
mov dword [ebp - 0xce1], 0x63684976
mov dword [ebp - 0xcdd], 0x7367444a
mov dword [ebp - 0xcd9], 0x4941426e
mov dword [ebp - 0xcd5], 0x6b794537
mov dword [ebp - 0xcd1], 0x6b576553
mov dword [ebp - 0xccd], 0x34785047
mov dword [ebp - 0xcc9], 0x386a4a6e
mov dword [ebp - 0xcc5], 0x73684f34
mov dword [ebp - 0xcc1], 0x67675a38
mov dword [ebp - 0xcbd], 0x30444e74
mov dword [ebp - 0xcb9], 0x45434862
mov dword [ebp - 0xcb5], 0x59574d6a
mov dword [ebp - 0xcb1], 0x63696243
mov dword [ebp - 0xcad], 0x777a5035
mov dword [ebp - 0xca9], 0x387a6553
mov dword [ebp - 0xca4], 0x2b393366
mov dword [ebp - 0xca0], 0x73384446
mov dword [ebp - 0xc9c], 0x446b3241
mov dword [ebp - 0xc98], 0x6f737946
mov dword [ebp - 0xc93], 0x466d3541
mov dword [ebp - 0xc8f], 0x4c374179
mov dword [ebp - 0xc8b], 0x41414178
mov word [ebp - 0xc87], 0x4241
mov byte [ebp - 0xc85], 0x4e
push eax
mov dword [ecx], ebx
mov dword [ecx + 4], ebx
mov dword [ecx + 8], ebx
call fcn.1080f7f5
lea eax, [ebp - 0xd10]
push eax
call fcn.108127b2
add esp, 0x10
mov ecx, eax
mov byte [ebp - 4], 2
call fcn.1081c342
push eax
lea eax, [ebp - 0xc80]
push eax
call fcn.10812c5b
add esp, 0x14
mov byte [ebp - 4], 1
lea ecx, [ebp - 0xd10]
call fcn.1081c188
push 0x3c
push ebx
lea eax, [ebp - 0x50]
push eax
call fcn.108213a0
pop ecx
pop ecx
lea eax, [ebp - 0xc7c]
mov ecx, esp
push eax
call fcn.108101d4
lea ecx, [ebp - 0x50]
call fcn.108102a3
lea eax, [ebp - 0xb53]
mov byte [ebp - 4], 3
push eax
lea ecx, [ebp - 0x20]
call fcn.10811162
lea eax, [ebp - 0x17b]
push eax
lea ecx, [ebp - 0x1c]
call fcn.10811162
lea eax, [ebp - 0x77]
push eax
lea ecx, [ebp - 0x18]
call fcn.10811162
mov esi, dword [ebp - 0xc80]
lea eax, [ebp - 0x50]
push eax
push ecx
mov ecx, esp
mov dword [ebp - 0xc84], esp
push esi
call fcn.108101d4
push ecx
lea eax, [ebp - 0x94b]
mov byte [ebp - 4], 4
mov ecx, esp
push eax
call fcn.10810146
mov byte [ebp - 4], 3
call fcn.10817e72
add esp, 0xc
call fcn.1082913a
push 0x64
pop ecx
cdq
idiv ecx
cmp edx, ecx
jg 0x1081d9dd
lea eax, [ebp - 0x50]
push eax
call fcn.10816a4d
pop ecx
lea ecx, [ebp - 0x50]
call fcn.10810dec
lea ecx, [esi - 0x10]
jmp 0x1081da0f
cmp eax, 0x4d835
jne 0x1081d9f8
push ebx
call fcn.1081adc2
pop ecx
push edi
push dword [ebp + 0xc]
push dword [ebp + 8]
push ebx
call dword [sym.imp.USER32.dll_CallNextHookEx]
mov ecx, dword [ebp - 0xc80]
lea ecx, [ecx - 0x10]
call fcn.1081672b
call fcn.1081ea6b
ret 0xc