Function at 0x10017280
Capabilities:
Contain obfuscated stackstrings

Disassembly:
mov eax, 0x2558
call fcn.10026f30
mov eax, dword [0x100695e8]
xor eax, esp
mov dword [esp + 0x2554], eax
mov eax, dword [esp + 0x2568]
mov dword [0x1006af8c], eax
mov eax, dword [esp + 0x2564]
push esi
mov dword [0x1006af90], eax
mov eax, dword [esp + 0x2564]
push edi
mov dword [0x1006af94], eax
xor eax, eax
push 0xffe
push eax
mov word [esp + 0x564], ax
lea eax, [esp + 0x566]
push eax
call fcn.100275b0
xor eax, eax
push 0xffe
push eax
mov word [esp + 0x1570], ax
lea eax, [esp + 0x1572]
push eax
call fcn.100275b0
mov eax, 0x61
mov word [esp + 0x168], ax
mov eax, 0x67
mov word [esp + 0x15c], ax
xor eax, eax
mov edi, 0x65
add esp, 0x18
mov word [esp + 0x15a], ax
lea eax, [esp + 0x128]
lea edx, [edi + 9]
push eax
lea ecx, [esp + 0xc]
mov dword [esp + 0x156], 0x6c006c
mov dword [esp + 0x15a], 0x720065
mov dword [esp + 0x14a], 0x490073
mov dword [esp + 0x12c], 0x62005f
mov dword [esp + 0x130], 0x6f0072
mov dword [esp + 0x140], 0x740074
mov dword [esp + 0x150], 0x740073
mov dword [esp + 0x144], 0x6e0069
mov dword [esp + 0x13a], 0x530072
mov word [esp + 0x13e], di
mov dword [esp + 0x134], 0x730077
mov word [esp + 0x14e], dx
mov word [esp + 0x138], di
call fcn.10015810
lea eax, [esp + 0x20]
push eax
call fcn.100163e0
lea eax, [esp + 0x1c]
push eax
call fcn.10016550
lea eax, [esp + 0x2c]
push eax
call fcn.10016400
lea eax, [esp + 0x1c]
push eax
call fcn.10017050
lea eax, [esp + 0x1c]
push eax
call fcn.10016a60
lea eax, [esp + 0x28]
push eax
call fcn.10016d70
push dword [esp + 0x38]
lea eax, [esp + 0x578]
push 0x800
push eax
call fcn.10025e12
push dword [esp + 0x3c]
lea eax, [esp + 0x584]
push 0x800
push eax
call fcn.10025da6
mov esi, dword [esp + 0x54]
push esi
push 0x800
lea eax, [esp + 0x594]
push eax
call fcn.10025da6
push dword [esp + 0x4c]
lea eax, [esp + 0x59c]
push 0x800
push eax
call fcn.10025da6
add esp, 0x48
lea eax, [esp + 0x55c]
push dword [esp + 8]
push 0x800
push eax
call fcn.10025da6
push dword [esp + 0x20]
lea eax, [esp + 0x156c]
push 0x800
push eax
call fcn.10025da6
push dword [esp + 0x24]
lea eax, [esp + 0x1578]
push 0x800
push eax
call fcn.10025da6
push dword [esp + 0x2c]
lea eax, [esp + 0x1584]
push 0x800
push eax
call fcn.10025da6
add esp, 0x30
lea ecx, [esp + 0xb8]
call fcn.1001fb50
lea eax, [esp + 0x55c]
push 0x800
push eax
call fcn.10025e6e
add esp, 8
add eax, eax
push eax
lea eax, [esp + 0x560]
push eax
lea eax, [esp + 0x30]
push eax
lea ecx, [esp + 0xc4]
call fcn.1001fba0
lea eax, [esp + 0x155c]
push 0x800
push eax
call fcn.10025e6e
add esp, 8
add eax, eax
push eax
lea eax, [esp + 0x1560]
push eax
lea eax, [esp + 0x48]
push eax
lea ecx, [esp + 0xc4]
call fcn.1001fba0
push 0xffffffffffffffff
push 0
push eax
lea ecx, [esp + 0x34]
call fcn.1000be10
cmp dword [esp + 0x54], 0x10
jb 0x10017540
push dword [esp + 0x40]
call fcn.1002501c
add esp, 4
push 0x3ff
lea eax, [esp + 0x161]
push 0
push eax
mov byte [esp + 0x168], 0
call fcn.100275b0
cmp dword [esp + 0x48], 0x10
lea eax, [esp + 0x34]
cmovae eax, dword [esp + 0x34]
push eax
push 0x10061d70
lea eax, [esp + 0x170]
push 0x400
push eax
call fcn.10026330
add esp, 0x1c
lea ecx, [esp + 0x58]
call fcn.1001ed30
push 0x400
lea eax, [esp + 0x160]
push eax
lea ecx, [esp + 0x60]
call fcn.1001ee40
lea eax, [esp + 0x40]
push eax
lea ecx, [esp + 0x5c]
call fcn.1001eee0
cmp dword [eax + 0x14], 0x10
jb 0x100175ba
mov eax, dword [eax]
push eax
lea ecx, [esp + 0x20]
call fcn.1000b510
cmp dword [esp + 0x54], 0x10
jb 0x100175d7
push dword [esp + 0x40]
call fcn.1002501c
add esp, 4
cmp dword [0x1006af8c], 0
push ebx
mov ebx, dword [esp + 0x20]
je 0x10017620
mov eax, dword [0x1006af94]
add eax, 0x404
push eax
push 0x40
call dword [sym.imp.KERNEL32.dll_GlobalAlloc]
push dword [0x1006af94]
mov edi, eax
push ebx
lea ecx, [edi + 4]
push ecx
call dword [sym.imp.KERNEL32.dll_lstrcpynA]
mov ecx, dword [0x1006af8c]
mov ecx, dword [ecx]
mov dword [edi], ecx
mov eax, dword [0x1006af8c]
mov dword [eax], edi
mov ebx, dword [esp + 0x20]
lea edx, [ebx - 0x10]
or edi, 0xffffffff
lea ecx, [edx + 0xc]
mov eax, edi
lock xadd dword [ecx], eax
dec eax
pop ebx
test eax, eax
jg 0x1001763d
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
cmp dword [esp + 0x3c], 0x10
jb 0x10017650
push dword [esp + 0x28]
call fcn.1002501c
add esp, 4
mov edx, dword [esp + 0x14]
add edx, 0xfffffff0
mov dword [esp + 0x3c], 0xf
mov dword [esp + 0x38], 0
mov byte [esp + 0x28], 0
lea eax, [edx + 0xc]
mov ecx, edi
lock xadd dword [eax], ecx
dec ecx
test ecx, ecx
jg 0x10017682
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov edx, dword [esp + 0xc]
add edx, 0xfffffff0
mov ecx, edi
lea eax, [edx + 0xc]
lock xadd dword [eax], ecx
dec ecx
test ecx, ecx
jg 0x1001769f
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov edx, dword [esp + 0x10]
add edx, 0xfffffff0
mov ecx, edi
lea eax, [edx + 0xc]
lock xadd dword [eax], ecx
dec ecx
test ecx, ecx
jg 0x100176bc
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
add esi, 0xfffffff0
mov ecx, edi
lea eax, [esi + 0xc]
lock xadd dword [eax], ecx
dec ecx
test ecx, ecx
jg 0x100176d5
mov ecx, dword [esi]
push esi
mov eax, dword [ecx]
call dword [eax + 4]
mov edx, dword [esp + 0x18]
add edx, 0xfffffff0
mov ecx, edi
lea eax, [edx + 0xc]
lock xadd dword [eax], ecx
dec ecx
test ecx, ecx
jg 0x100176f2
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov edx, dword [esp + 0x20]
add edx, 0xfffffff0
mov ecx, edi
lea eax, [edx + 0xc]
lock xadd dword [eax], ecx
dec ecx
test ecx, ecx
jg 0x1001770f
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov edx, dword [esp + 8]
add edx, 0xfffffff0
lea eax, [edx + 0xc]
lock xadd dword [eax], edi
dec edi
test edi, edi
pop edi
pop esi
jg 0x1001772c
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov ecx, dword [esp + 0x2554]
xor ecx, esp
call fcn.10026aaf
add esp, 0x2558
ret