Function at 0x1201cf4e
Capabilities:
Contain obfuscated stackstrings

Disassembly:
push 0xd5c
mov eax, 0x1204cc3b
call fcn.1201e447
mov edi, dword [ebp + 0x10]
lea eax, [ebp - 0xc7c]
push 0xc2a
xor ebx, ebx
push ebx
push eax
call fcn.12020cd0
add esp, 0xc
mov dword [ebp - 0xc80], ebx
call fcn.1201312e
push eax
lea ecx, [ebp - 0xc80]
call fcn.1200fec9
mov dword [ebp - 4], ebx
mov byte [ebp - 4], 1
test edi, edi
je 0x1201d321
cmp dword [edi + 8], 0x4a
jne 0x1201d321
mov esi, dword [edi]
test esi, esi
je 0x1201d321
mov eax, dword [esi]
cmp eax, 0x4cc7c
jne 0x1201d313
mov esi, dword [esi + 8]
lea edi, [ebp - 0xc7c]
push 0x64
pop eax
mov byte [ebp - 0xd04], al
mov ecx, 0x30a
rep movsd dword es:[edi], dword [esi]
lea eax, [ebp - 0xb53]
mov byte [ebp - 0xc84], bl
push eax
lea eax, [ebp - 0xc7c]
mov dword [ebp - 0xd58], 0x2f597a4c
push eax
lea eax, [ebp - 0xc57]
movsw word es:[edi], word [esi]
push eax
push ebx
sub esp, 0xc
mov dword [ebp - 0xd54], 0x38415748
mov ecx, esp
mov dword [ebp - 0xd50], 0x2f516e48
lea eax, [ebp - 0xc86]
mov dword [ebp - 0xd4c], 0x38634846
mov dword [ebp - 0xd48], 0x7a6b5346
push dword [ebp - 0xc84]
mov dword [ebp - 0xd44], 0x386c4449
push eax
mov dword [ebp - 0xd40], 0x59636a50
lea eax, [ebp - 0xd58]
mov dword [ebp - 0xd3c], 0x36634146
mov dword [ebp - 0xd38], 0x41455848
mov dword [ebp - 0xd34], 0x46456e50
mov dword [ebp - 0xd30], 0x346b5442
mov dword [ebp - 0xd2c], 0x69316e4c
mov dword [ebp - 0xd28], 0x49306a4d
mov dword [ebp - 0xd24], 0x2f6f7a4f
mov dword [ebp - 0xd20], 0x6d4d6e42
mov dword [ebp - 0xd1c], 0x4d6b7a45
mov dword [ebp - 0xd18], 0x73306e4d
mov dword [ebp - 0xd14], 0x73384341
mov dword [ebp - 0xd10], 0x3278774e
mov dword [ebp - 0xd0c], 0x384d784f
mov dword [ebp - 0xd08], 0x6e517942
mov dword [ebp - 0xd03], 0x454c6f67
mov dword [ebp - 0xcff], 0x63344a69
mov dword [ebp - 0xcfb], 0x50393978
mov dword [ebp - 0xcf7], 0x41654169
mov dword [ebp - 0xcf3], 0x50625544
mov dword [ebp - 0xcef], 0x4f353444
mov dword [ebp - 0xceb], 0x41374e68
mov dword [ebp - 0xce7], 0x44705267
mov dword [ebp - 0xce3], 0x4e656378
mov dword [ebp - 0xcdf], 0x4a656b77
mov dword [ebp - 0xcdb], 0x45356867
mov dword [ebp - 0xcd7], 0x4a636b6a
mov dword [ebp - 0xcd3], 0x44484541
mov dword [ebp - 0xccf], 0x496b4668
mov dword [ebp - 0xccb], 0x4538746a
mov dword [ebp - 0xcc7], 0x46527754
mov dword [ebp - 0xcc3], 0x4f693454
mov dword [ebp - 0xcbf], 0x4939396a
mov dword [ebp - 0xcbb], 0x507a496a
mov dword [ebp - 0xcb7], 0x4c4d6343
mov dword [ebp - 0xcb3], 0x65475167
mov dword [ebp - 0xcaf], 0x45374957
mov dword [ebp - 0xcab], 0x48335567
mov dword [ebp - 0xca7], 0x49754933
mov dword [ebp - 0xca3], 0x4f623068
mov dword [ebp - 0xc9f], 0x4e686f51
mov dword [ebp - 0xc9b], 0x41775569
mov dword [ebp - 0xc97], 0x4a545578
mov dword [ebp - 0xc93], 0x42766c53
mov dword [ebp - 0xc8f], 0x41635168
mov dword [ebp - 0xc8b], 0x6a414141
mov byte [ebp - 0xc87], 0x51
push eax
mov dword [ecx], ebx
mov dword [ecx + 4], ebx
mov dword [ecx + 8], ebx
call fcn.1200f663
lea eax, [ebp - 0xd68]
push eax
call fcn.12012774
add esp, 0x10
mov ecx, eax
mov byte [ebp - 4], 2
call fcn.1201bba3
push eax
lea eax, [ebp - 0xc80]
push eax
call fcn.12012c1d
add esp, 0x14
mov byte [ebp - 4], 1
lea ecx, [ebp - 0xd68]
call fcn.1201b9e9
push 0x3c
lea eax, [ebp - 0x50]
push ebx
push eax
call fcn.12020cd0
pop ecx
pop ecx
lea eax, [ebp - 0xc7c]
mov ecx, esp
push eax
call fcn.12010042
lea ecx, [ebp - 0x50]
call fcn.12010111
lea eax, [ebp - 0xb53]
mov byte [ebp - 4], 3
push eax
lea ecx, [ebp - 0x20]
call fcn.12010fd0
lea eax, [ebp - 0x17b]
push eax
lea ecx, [ebp - 0x1c]
call fcn.12010fd0
lea eax, [ebp - 0x77]
push eax
lea ecx, [ebp - 0x18]
call fcn.12010fd0
mov esi, dword [ebp - 0xc80]
lea eax, [ebp - 0x50]
push eax
push ecx
mov ecx, esp
mov dword [ebp - 0xc84], esp
push esi
call fcn.12010042
push ecx
lea eax, [ebp - 0x94b]
mov byte [ebp - 4], 4
mov ecx, esp
push eax
call fcn.1200ffb4
mov byte [ebp - 4], 3
call fcn.12017d59
add esp, 0xc
call fcn.12028a6a
push 0x64
pop ecx
cdq
idiv ecx
cmp edx, ecx
jg 0x1201d306
lea eax, [ebp - 0x50]
push eax
call fcn.12016c7f
pop ecx
lea ecx, [ebp - 0x50]
call fcn.12010c5a
lea ecx, [esi - 0x10]
jmp 0x1201d338
cmp eax, 0x4d835
jne 0x1201d321
push ebx
call fcn.1201a705
pop ecx
push edi
push dword [ebp + 0xc]
push dword [ebp + 8]
push ebx
call dword [sym.imp.USER32.dll_CallNextHookEx]
mov ecx, dword [ebp - 0xc80]
lea ecx, [ecx - 0x10]
call fcn.1201695d
call fcn.1201e394
ret 0xc