Function at 0x10021eb0
Capabilities:
Contain obfuscated stackstrings

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x100f6301
mov eax, dword fs:[0]
push eax
sub esp, 0x17c
push ebx
push esi
push edi
mov eax, dword [0x10126008]
xor eax, ebp
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov dword [ebp - 0x10], esp
mov ebx, ecx
mov dword [ebp - 0x18], ebx
mov byte [ebp - 0x11], 1
mov dword [ebp - 4], 0
mov esi, dword [ebp + 8]
mov dword [ebp - 0x70], 0
mov dword [ebp - 0x6c], 0
mov dword [ebp - 0x70], 0
mov dword [ebp - 0x6c], 7
xor eax, eax
mov word [ebp - 0x80], ax
push 7
push str.info_id
lea ecx, [ebp - 0x80]
call fcn.10006a10
mov byte [ebp - 4], 1
lea eax, [ebp - 0x80]
push eax
mov ecx, esi
call fcn.100066e0
lea ecx, [eax + 0x20]
call fcn.10006770
xor edx, edx
mov ecx, eax
call fcn.1003afa0
mov dword [ebx + 8], eax
mov byte [ebp - 4], 2
lea ecx, [ebp - 0x80]
call fcn.10006980
mov byte [ebp - 4], 3
mov byte [ebp - 4], 4
mov byte [ebp - 4], 5
mov byte [ebp - 4], 0
mov dword [ebp - 0x88], 0
mov dword [ebp - 0x84], 0
mov dword [ebp - 0x88], 0
mov dword [ebp - 0x84], 7
xor eax, eax
mov word [ebp - 0x98], ax
push 8
push str.log_type
lea ecx, [ebp - 0x98]
call fcn.10006a10
mov byte [ebp - 4], 6
lea eax, [ebp - 0x98]
push eax
mov ecx, esi
call fcn.100066e0
lea ecx, [eax + 0x20]
call fcn.10006770
xor edx, edx
mov ecx, eax
call fcn.1003afa0
mov dword [ebx + 0x18], eax
mov byte [ebp - 4], 7
lea ecx, [ebp - 0x98]
call fcn.10006980
mov byte [ebp - 4], 8
mov byte [ebp - 4], 9
mov byte [ebp - 4], 0xa
mov byte [ebp - 4], 0
mov dword [ebp - 0xa0], 0
mov dword [ebp - 0x9c], 0
mov dword [ebp - 0xa0], 0
mov dword [ebp - 0x9c], 7
xor eax, eax
mov word [ebp - 0xb0], ax
push 8
push str.log_time
lea ecx, [ebp - 0xb0]
call fcn.10006a10
mov byte [ebp - 4], 0xb
lea eax, [ebp - 0xb0]
push eax
mov ecx, esi
call fcn.100066e0
lea ecx, [eax + 0x20]
call fcn.10006770
xor edx, edx
mov ecx, eax
call fcn.1003afa0
mov dword [ebx + 0x10], eax
mov dword [ebx + 0x14], edx
mov byte [ebp - 4], 0xc
lea ecx, [ebp - 0xb0]
call fcn.10006980
mov byte [ebp - 4], 0xd
mov byte [ebp - 4], 0xe
mov byte [ebp - 4], 0xf
mov byte [ebp - 4], 0
mov dword [ebp - 0xb8], 0
mov dword [ebp - 0xb4], 0
mov dword [ebp - 0xb8], 0
mov dword [ebp - 0xb4], 7
xor eax, eax
mov word [ebp - 0xc8], ax
push 0xc
push str.program_path
lea ecx, [ebp - 0xc8]
call fcn.10006a10
mov byte [ebp - 4], 0x10
lea eax, [ebp - 0x140]
push eax
lea eax, [ebp - 0xc8]
push eax
mov ecx, esi
call fcn.100066e0
mov ecx, eax
call fcn.10032300
mov ecx, eax
mov byte [ebp - 4], 0x11
cmp dword [ecx + 0x14], 8
jb 0x100220e5
mov ecx, dword [ecx]
mov edx, 0x7ffffffe
mov dword [ebp - 0x44], edx
mov dword [ebp - 0x3c], ecx
mov esi, 0x800
mov dword [ebp - 0x40], esi
lea eax, [ebx + 0x201c]
mov dword [ebp - 0x1c], eax
xor edi, edi
mov dword [ebp - 0x20], edi
test esi, esi
je 0x10022130
test edx, edx
je 0x1002213a
movzx ebx, word [ecx]
test bx, bx
je 0x1002213a
mov word [eax], bx
add eax, 2
mov dword [ebp - 0x1c], eax
add ecx, 2
mov dword [ebp - 0x3c], ecx
dec esi
mov dword [ebp - 0x40], esi
dec edx
mov dword [ebp - 0x44], edx
inc edi
jmp 0x10022103
sub eax, 2
mov dword [ebp - 0x1c], eax
dec edi
mov dword [ebp - 0x20], edi
xor ecx, ecx
mov word [eax], cx
mov byte [ebp - 4], 0x12
lea ecx, [ebp - 0x140]
call fcn.10006980
mov byte [ebp - 4], 0x13
mov byte [ebp - 4], 0x14
mov byte [ebp - 4], 0x15
mov byte [ebp - 4], 0x16
lea ecx, [ebp - 0xc8]
call fcn.10006980
mov byte [ebp - 4], 0x17
mov byte [ebp - 4], 0x18
mov byte [ebp - 4], 0x19
mov byte [ebp - 4], 0
mov dword [ebp - 0xd0], 0
mov dword [ebp - 0xcc], 0
mov dword [ebp - 0xd0], 0
mov dword [ebp - 0xcc], 7
xor eax, eax
mov word [ebp - 0xe0], ax
push 9
push str.oper_type
lea ecx, [ebp - 0xe0]
call fcn.10006a10
mov byte [ebp - 4], 0x1a
lea eax, [ebp - 0xe0]
push eax
mov esi, dword [ebp + 8]
mov ecx, esi
call fcn.100066e0
lea ecx, [eax + 0x20]
call fcn.10006770
xor edx, edx
mov ecx, eax
call fcn.1003afa0
mov ebx, dword [ebp - 0x18]
mov dword [ebx + 0x401c], eax
mov byte [ebp - 4], 0x1b
lea ecx, [ebp - 0xe0]
call fcn.10006980
mov byte [ebp - 4], 0x1c
mov byte [ebp - 4], 0x1d
mov byte [ebp - 4], 0x1e
mov byte [ebp - 4], 0
mov dword [ebp - 0xe8], 0
mov dword [ebp - 0xe4], 0
mov dword [ebp - 0xe8], 0
mov dword [ebp - 0xe4], 7
xor eax, eax
mov word [ebp - 0xf8], ax
push 9
push str.risk_desc
lea ecx, [ebp - 0xf8]
call fcn.10006a10
mov byte [ebp - 4], 0x1f
lea eax, [ebp - 0x158]
push eax
lea eax, [ebp - 0xf8]
push eax
mov ecx, esi
call fcn.100066e0
mov ecx, eax
call fcn.10032300
mov ecx, eax
mov byte [ebp - 4], 0x20
cmp dword [ecx + 0x14], 8
jb 0x1002227b
mov ecx, dword [ecx]
mov edx, 0x7ffffffe
mov dword [ebp - 0x50], edx
mov dword [ebp - 0x48], ecx
mov esi, 0x800
mov dword [ebp - 0x4c], esi
lea eax, [ebx + 0x101c]
mov dword [ebp - 0x24], eax
xor edi, edi
mov dword [ebp - 0x28], edi
test esi, esi
je 0x100222c6
test edx, edx
je 0x100222d0
movzx ebx, word [ecx]
test bx, bx
je 0x100222d0
mov word [eax], bx
add eax, 2
mov dword [ebp - 0x24], eax
add ecx, 2
mov dword [ebp - 0x48], ecx
dec esi
mov dword [ebp - 0x4c], esi
dec edx
mov dword [ebp - 0x50], edx
inc edi
jmp 0x10022299
sub eax, 2
mov dword [ebp - 0x24], eax
dec edi
mov dword [ebp - 0x28], edi
xor ecx, ecx
mov word [eax], cx
mov byte [ebp - 4], 0x21
lea ecx, [ebp - 0x158]
call fcn.10006980
mov byte [ebp - 4], 0x22
mov byte [ebp - 4], 0x23
mov byte [ebp - 4], 0x24
mov byte [ebp - 4], 0x25
lea ecx, [ebp - 0xf8]
call fcn.10006980
mov byte [ebp - 4], 0x26
mov byte [ebp - 4], 0x27
mov byte [ebp - 4], 0x28
mov byte [ebp - 4], 0
mov dword [ebp - 0x100], 0
mov dword [ebp - 0xfc], 0
mov dword [ebp - 0x100], 0
mov dword [ebp - 0xfc], 7
xor eax, eax
mov word [ebp - 0x110], ax
push 0x10
push str.risk_detail_desc
lea ecx, [ebp - 0x110]
call fcn.10006a10
mov byte [ebp - 4], 0x29
lea eax, [ebp - 0x170]
push eax
lea eax, [ebp - 0x110]
push eax
mov ecx, dword [ebp + 8]
call fcn.100066e0
mov ecx, eax
call fcn.10032300
mov ecx, eax
mov byte [ebp - 4], 0x2a
cmp dword [ecx + 0x14], 8
jb 0x10022381
mov ecx, dword [ecx]
mov edx, 0x7ffffffe
mov dword [ebp - 0x5c], edx
mov dword [ebp - 0x54], ecx
mov esi, 0x800
mov dword [ebp - 0x58], esi
mov eax, dword [ebp - 0x18]
add eax, 0x1c
mov dword [ebp - 0x2c], eax
xor edi, edi
mov dword [ebp - 0x30], edi
test esi, esi
je 0x100223cc
test edx, edx
je 0x100223d6
movzx ebx, word [ecx]
test bx, bx
je 0x100223d6
mov word [eax], bx
add eax, 2
mov dword [ebp - 0x2c], eax
add ecx, 2
mov dword [ebp - 0x54], ecx
dec esi
mov dword [ebp - 0x58], esi
dec edx
mov dword [ebp - 0x5c], edx
inc edi
jmp 0x1002239f
sub eax, 2
mov dword [ebp - 0x2c], eax
dec edi
mov dword [ebp - 0x30], edi
xor ecx, ecx
mov word [eax], cx
mov byte [ebp - 4], 0x2b
lea ecx, [ebp - 0x170]
call fcn.10006980
mov byte [ebp - 4], 0x2c
mov byte [ebp - 4], 0x2d
mov byte [ebp - 4], 0x2e
mov byte [ebp - 4], 0x2f
lea ecx, [ebp - 0x110]
call fcn.10006980
mov byte [ebp - 4], 0x30
mov byte [ebp - 4], 0x31
mov byte [ebp - 4], 0x32
mov byte [ebp - 4], 0
mov dword [ebp - 0x118], 0
mov dword [ebp - 0x114], 0
mov dword [ebp - 0x118], 0
mov dword [ebp - 0x114], 7
xor eax, eax
mov word [ebp - 0x128], ax
push 9
push str.soft_name
lea ecx, [ebp - 0x128]
call fcn.10006a10
mov byte [ebp - 4], 0x33
lea eax, [ebp - 0x188]
push eax
lea eax, [ebp - 0x128]
push eax
mov ecx, dword [ebp + 8]
call fcn.100066e0
mov ecx, eax
call fcn.10032300
mov ecx, eax
mov byte [ebp - 4], 0x34
cmp dword [ecx + 0x14], 8
jb 0x10022487
mov ecx, dword [ecx]
mov edx, 0x7ffffffe
mov dword [ebp - 0x68], edx
mov dword [ebp - 0x60], ecx
mov esi, 0x800
mov dword [ebp - 0x64], esi
mov eax, dword [ebp - 0x18]
add eax, 0x301c
mov dword [ebp - 0x34], eax
xor edi, edi
mov dword [ebp - 0x38], edi
test esi, esi
je 0x100224d4
test edx, edx
je 0x100224de
movzx ebx, word [ecx]
test bx, bx
je 0x100224de
mov word [eax], bx
add eax, 2
mov dword [ebp - 0x34], eax
add ecx, 2
mov dword [ebp - 0x60], ecx
dec esi
mov dword [ebp - 0x64], esi
dec edx
mov dword [ebp - 0x68], edx
inc edi
jmp 0x100224a7
sub eax, 2
mov dword [ebp - 0x34], eax
dec edi
mov dword [ebp - 0x38], edi
xor ecx, ecx
mov word [eax], cx
mov byte [ebp - 4], 0x35
lea ecx, [ebp - 0x188]
call fcn.10006980
mov byte [ebp - 4], 0x36
mov byte [ebp - 4], 0x37
mov byte [ebp - 4], 0x38
mov byte [ebp - 4], 0x39
lea ecx, [ebp - 0x128]
call fcn.10006980
mov byte [ebp - 4], 0x3a
mov byte [ebp - 4], 0x3b
mov byte [ebp - 4], 0x3c
mov byte [ebp - 4], 0
mov al, byte [ebp - 0x11]
jmp 0x1002252f
mov dword [ebp - 4], 0xffffffff
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 4