Function at 0x10016397
Capabilities:
Contain obfuscated stackstrings
Inspect section memory permissions

Disassembly:
push 0x474
mov eax, 0x100abade
call fcn.10080bb1
mov esi, ecx
mov dword [ebp - 0xb8], esi
mov eax, dword [ebp + 8]
xor edi, edi
mov dword [ebp - 0x120], eax
mov dword [ebp - 0xb4], eax
mov dword [ebp - 0xa4], edi
sub esp, 0x18
mov dword [ebp - 4], 2
mov ecx, esp
lea eax, [esi + 0x170]
push eax
mov dword [ecx], edi
mov dword [ecx + 0x10], edi
mov dword [ecx + 0x14], edi
call fcn.1000c826
lea eax, [ebp - 0x11c]
push eax
call fcn.10015eec
mov dword [ebp - 0xb0], eax
cmp byte [esi + 0x1a0], 0
mov ecx, str.false
mov eax, str.true
mov byte [ebp - 4], 3
cmove eax, ecx
add esp, 4
mov ecx, esp
mov dword [ebp - 0xd4], eax
lea eax, [esi + 0x128]
push eax
mov dword [ecx], edi
mov dword [ecx + 0x10], edi
mov dword [ecx + 0x14], edi
call fcn.1000c826
lea eax, [ebp - 0x1c8]
push eax
call fcn.10015eec
mov dword [ebp - 0xd0], eax
add esp, 4
mov byte [ebp - 4], 4
mov ecx, esp
lea eax, [esi + 0x140]
push eax
mov dword [ecx], edi
mov dword [ecx + 0x10], edi
mov dword [ecx + 0x14], edi
call fcn.1000c826
lea eax, [ebp - 0x210]
push eax
call fcn.10015eec
mov dword [ebp - 0xcc], eax
add esp, 4
mov byte [ebp - 4], 5
mov ecx, esp
lea eax, [esi + 0x110]
push eax
mov dword [ecx], edi
mov dword [ecx + 0x10], edi
mov dword [ecx + 0x14], edi
call fcn.1000c826
lea eax, [ebp - 0x1f8]
push eax
call fcn.10015eec
mov dword [ebp - 0xc8], eax
add esp, 4
mov byte [ebp - 4], 6
mov ecx, esp
lea eax, [esi + 0x60]
push eax
mov dword [ecx], edi
mov dword [ecx + 0x10], edi
mov dword [ecx + 0x14], edi
call fcn.1000c826
lea eax, [ebp - 0x1e0]
push eax
call fcn.10015eec
mov dword [ebp - 0xc4], eax
add esp, 4
mov byte [ebp - 4], 7
mov ecx, esp
lea eax, [esi + 0xe0]
push eax
mov dword [ecx], edi
mov dword [ecx + 0x10], edi
mov dword [ecx + 0x14], edi
call fcn.1000c826
lea eax, [ebp - 0x480]
push eax
call fcn.10015eec
mov dword [ebp - 0xc0], eax
add esp, 4
mov byte [ebp - 4], 8
mov ecx, esp
lea eax, [esi + 0x30]
push eax
mov dword [ecx], edi
mov dword [ecx + 0x10], edi
mov dword [ecx + 0x14], edi
call fcn.1000c826
lea eax, [ebp - 0x468]
push eax
call fcn.10015eec
mov dword [ebp - 0xbc], eax
add esp, 4
mov byte [ebp - 4], 9
mov ecx, esp
push esi
mov dword [ecx], edi
mov dword [ecx + 0x10], edi
mov dword [ecx + 0x14], edi
call fcn.1000c826
lea eax, [ebp - 0x450]
push eax
call fcn.10015eec
mov dword [ebp - 0xac], eax
add esp, 4
mov byte [ebp - 4], 0xa
mov ecx, esp
lea eax, [esi + 0x18]
push eax
mov dword [ecx], edi
mov dword [ecx + 0x10], edi
mov dword [ecx + 0x14], edi
call fcn.1000c826
lea eax, [ebp - 0x438]
push eax
call fcn.10015eec
mov ebx, eax
add esp, 4
mov byte [ebp - 4], 0xb
mov ecx, esp
lea eax, [esi + 0x7c]
push eax
mov dword [ecx], edi
mov dword [ecx + 0x10], edi
mov dword [ecx + 0x14], edi
call fcn.1000c826
lea eax, [ebp - 0x420]
push eax
call fcn.10015eec
mov edi, eax
add esp, 4
mov byte [ebp - 4], 0xc
mov ecx, esp
xor eax, eax
mov dword [ecx], eax
mov dword [ecx + 0x10], eax
mov dword [ecx + 0x14], eax
lea eax, [ebp + 0x14]
push eax
call fcn.1000c826
lea eax, [ebp - 0x408]
push eax
call fcn.10015eec
mov esi, eax
push dword [ebp + 0x10]
lea eax, [ebp - 0x104]
mov byte [ebp - 4], 0xd
push dword [ebp + 0xc]
push eax
call fcn.10013f8c
mov dword [ebp - 0xa4], 2
lea eax, [ebp + 0x2c]
mov byte [ebp - 4], 0xe
push eax
lea eax, [ebp - 0x3f0]
push str.__api_key_:_
push eax
call fcn.100021b5
add esp, 0x34
push 0x12
push str.___session_id_:
mov ecx, eax
mov byte [ebp - 4], 0xf
call fcn.1000eb05
push eax
lea ecx, [ebp - 0xec]
call fcn.1000749d
mov dword [ebp - 0xa4], 6
lea eax, [ebp - 0x104]
mov byte [ebp - 4], 0x10
push eax
lea eax, [ebp - 0xec]
push eax
push dword [ebp - 0xa8]
lea ecx, [ebp - 0x1b0]
call fcn.10007519
mov dword [ebp - 0xa4], 0xe
push 0xf
push str.__user_id_:_
lea ecx, [ebp - 0x1b0]
mov byte [ebp - 4], 0x11
call fcn.1000eb05
push eax
lea ecx, [ebp - 0x198]
call fcn.1000749d
mov dword [ebp - 0xa4], 0x1e
push esi
lea eax, [ebp - 0x198]
mov byte [ebp - 4], 0x12
push eax
push dword [ebp - 0xa8]
lea ecx, [ebp - 0x180]
call fcn.10007519
mov dword [ebp - 0xa4], 0x3e
push 0x14
push str.___country_id_:_
lea ecx, [ebp - 0x180]
mov byte [ebp - 4], 0x13
call fcn.1000eb05
push eax
lea ecx, [ebp - 0x168]
call fcn.1000749d
mov dword [ebp - 0xa4], 0x7e
push edi
lea eax, [ebp - 0x168]
mov byte [ebp - 4], 0x14
push eax
push dword [ebp - 0xa8]
lea ecx, [ebp - 0x150]
call fcn.10007519
mov dword [ebp - 0xa4], 0xfe
mov byte [ebp - 4], 0x15
push 0x1a
push str.___distributor_name_:_
lea ecx, [ebp - 0x150]
call fcn.1000eb05
push eax
lea ecx, [ebp - 0x138]
call fcn.1000749d
mov dword [ebp - 0xa4], 0x1fe
push ebx
lea eax, [ebp - 0x138]
mov byte [ebp - 4], 0x16
push eax
push dword [ebp - 0xa8]
lea ecx, [ebp - 0x288]
call fcn.10007519
mov dword [ebp - 0xa4], 0x3fe
push 0x22
push str.___distributor_product_name_:_
lea ecx, [ebp - 0x288]
mov byte [ebp - 4], 0x17
call fcn.1000eb05
push eax
lea ecx, [ebp - 0x270]
call fcn.1000749d
mov dword [ebp - 0xa4], 0x7fe
push dword [ebp - 0xac]
lea eax, [ebp - 0x270]
mov byte [ebp - 4], 0x18
push eax
push dword [ebp - 0xa8]
lea ecx, [ebp - 0x258]
call fcn.10007519
mov dword [ebp - 0xa4], 0xffe
push 0x1c
push str.___offer_product_name_:_
lea ecx, [ebp - 0x258]
mov byte [ebp - 4], 0x19
call fcn.1000eb05
push eax
lea ecx, [ebp - 0x240]
call fcn.1000749d
mov dword [ebp - 0xa4], 0x1ffe
push dword [ebp - 0xbc]
lea eax, [ebp - 0x240]
mov byte [ebp - 4], 0x1a
push eax
push dword [ebp - 0xa8]
lea ecx, [ebp - 0x228]
call fcn.10007519
mov dword [ebp - 0xa4], 0x3ffe
push 0x16
push str.___offer_set_id_:_
lea ecx, [ebp - 0x228]
mov byte [ebp - 4], 0x1b
call fcn.1000eb05
push eax
lea ecx, [ebp - 0x2a0]
call fcn.1000749d
mov dword [ebp - 0xa4], 0x7ffe
push dword [ebp - 0xc0]
lea eax, [ebp - 0x2a0]
mov byte [ebp - 4], 0x1c
push eax
push dword [ebp - 0xa8]
lea ecx, [ebp - 0x3c0]
call fcn.10007519
mov dword [ebp - 0xa4], 0xfffe
push 0x1a
push str.___offer_product_id_:_
lea ecx, [ebp - 0x3c0]
mov byte [ebp - 4], 0x1d
call fcn.1000eb05
push eax
lea ecx, [ebp - 0x3a8]
call fcn.1000749d
mov dword [ebp - 0xa4], 0x1fffe
push dword [ebp - 0xc4]
lea eax, [ebp - 0x3a8]
mov byte [ebp - 4], 0x1e
push eax
push dword [ebp - 0xa8]
lea ecx, [ebp - 0x390]
call fcn.10007519
mov dword [ebp - 0xa4], 0x3fffe
push 0x17
push str.___installer_url_:_
lea ecx, [ebp - 0x390]
mov byte [ebp - 4], 0x1f
call fcn.1000eb05
push eax
lea ecx, [ebp - 0x378]
call fcn.1000749d
mov dword [ebp - 0xa4], 0x7fffe
push dword [ebp - 0xc8]
lea eax, [ebp - 0x378]
mov byte [ebp - 4], 0x20
push eax
push dword [ebp - 0xa8]
lea ecx, [ebp - 0x360]
call fcn.10007519
mov dword [ebp - 0xa4], 0xffffe
push 0x1c
push str.___installer_exe_name_:_
lea ecx, [ebp - 0x360]
mov byte [ebp - 4], 0x21
call fcn.1000eb05
push eax
lea ecx, [ebp - 0x3d8]
call fcn.1000749d
mov dword [ebp - 0xa4], 0x1ffffe
push dword [ebp - 0xcc]
lea eax, [ebp - 0x3d8]
mov byte [ebp - 4], 0x22
push eax
push dword [ebp - 0xa8]
lea ecx, [ebp - 0x348]
call fcn.10007519
mov dword [ebp - 0xa4], 0x3ffffe
push 0x1a
push str.___installer_params_:_
lea ecx, [ebp - 0x348]
mov byte [ebp - 4], 0x23
call fcn.1000eb05
push eax
lea ecx, [ebp - 0x330]
call fcn.1000749d
mov dword [ebp - 0xa4], 0x7ffffe
push dword [ebp - 0xd0]
lea eax, [ebp - 0x330]
mov byte [ebp - 4], 0x24
push eax
push dword [ebp - 0xa8]
lea ecx, [ebp - 0x318]
call fcn.10007519
mov dword [ebp - 0xa4], 0xfffffe
push 0x1d
push str.___installer_auto_launch_:
lea ecx, [ebp - 0x318]
mov byte [ebp - 4], 0x25
call fcn.1000eb05
push eax
lea ecx, [ebp - 0x300]
call fcn.1000749d
mov dword [ebp - 0xa4], 0x1fffffe
push dword [ebp - 0xd4]
mov byte [ebp - 4], 0x26
lea ecx, [ebp - 0x300]
call fcn.1000eae4
push eax
lea ecx, [ebp - 0x2e8]
call fcn.1000749d
mov dword [ebp - 0xa4], 0x3fffffe
push 0x1c
push str.__application_exe_name_:_
lea ecx, [ebp - 0x2e8]
mov byte [ebp - 4], 0x27
call fcn.1000eb05
push eax
lea ecx, [ebp - 0x2d0]
call fcn.1000749d
mov dword [ebp - 0xa4], 0x7fffffe
push dword [ebp - 0xb0]
lea eax, [ebp - 0x2d0]
mov byte [ebp - 4], 0x28
push eax
push dword [ebp - 0xa8]
lea ecx, [ebp - 0x2b8]
call fcn.10007519
mov dword [ebp - 0xa4], 0xffffffe
push 0x19
push str.___install_reg_keys_:_
lea ecx, [ebp - 0x2b8]
mov byte [ebp - 4], 0x29
call fcn.1000eb05
mov ebx, dword [ebp - 0xb4]
mov ecx, ebx
push eax
call fcn.1000749d
lea ecx, [ebp - 0x2b8]
mov dword [ebp - 0xa4], 0x1fffffff
call fcn.1000e761
lea ecx, [ebp - 0x2d0]
call fcn.1000e761
lea ecx, [ebp - 0x2e8]
call fcn.1000e761
lea ecx, [ebp - 0x300]
call fcn.1000e761
lea ecx, [ebp - 0x318]
call fcn.1000e761
lea ecx, [ebp - 0x330]
call fcn.1000e761
lea ecx, [ebp - 0x348]
call fcn.1000e761
lea ecx, [ebp - 0x3d8]
call fcn.1000e761
lea ecx, [ebp - 0x360]
call fcn.1000e761
lea ecx, [ebp - 0x378]
call fcn.1000e761
lea ecx, [ebp - 0x390]
call fcn.1000e761
lea ecx, [ebp - 0x3a8]
call fcn.1000e761
lea ecx, [ebp - 0x3c0]
call fcn.1000e761
lea ecx, [ebp - 0x2a0]
call fcn.1000e761
lea ecx, [ebp - 0x228]
call fcn.1000e761
lea ecx, [ebp - 0x240]
call fcn.1000e761
lea ecx, [ebp - 0x258]
call fcn.1000e761
lea ecx, [ebp - 0x270]
call fcn.1000e761
lea ecx, [ebp - 0x288]
call fcn.1000e761
lea ecx, [ebp - 0x138]
call fcn.1000e761
lea ecx, [ebp - 0x150]
call fcn.1000e761
lea ecx, [ebp - 0x168]
call fcn.1000e761
lea ecx, [ebp - 0x180]
call fcn.1000e761
lea ecx, [ebp - 0x198]
call fcn.1000e761
lea ecx, [ebp - 0x1b0]
call fcn.1000e761
lea ecx, [ebp - 0xec]
call fcn.1000e761
lea ecx, [ebp - 0x3f0]
call fcn.1000e761
lea ecx, [ebp - 0x104]
call fcn.1000e761
lea ecx, [ebp - 0x408]
call fcn.1000e761
lea ecx, [ebp - 0x420]
call fcn.1000e761
lea ecx, [ebp - 0x438]
call fcn.1000e761
lea ecx, [ebp - 0x450]
call fcn.1000e761
lea ecx, [ebp - 0x468]
call fcn.1000e761
lea ecx, [ebp - 0x480]
call fcn.1000e761
lea ecx, [ebp - 0x1e0]
call fcn.1000e761
lea ecx, [ebp - 0x1f8]
call fcn.1000e761
lea ecx, [ebp - 0x210]
call fcn.1000e761
lea ecx, [ebp - 0x1c8]
call fcn.1000e761
lea ecx, [ebp - 0x11c]
mov byte [ebp - 4], 2
call fcn.1000e761
mov esi, dword [ebp - 0xb8]
mov ecx, 0x90
add esi, 0x104
xor edi, edi
mov dword [ebp - 0xac], edi
mov eax, dword [esi + 4]
sub eax, dword [esi]
cdq
idiv ecx
test eax, eax
je 0x10016f8f
push edi
mov ecx, esi
call fcn.10015ebf
push eax
lea ecx, [ebp - 0xa0]
call fcn.100146fe
sub esp, 0x18
mov byte [ebp - 4], 0x2a
mov ecx, esp
lea eax, [ebp - 0x28]
xor esi, esi
push eax
mov dword [ecx], esi
mov dword [ecx + 0x10], esi
mov dword [ecx + 0x14], esi
call fcn.1000c826
lea eax, [ebp - 0x1e0]
push eax
call fcn.10015eec
mov dword [ebp - 0xb0], eax
add esp, 4
mov byte [ebp - 4], 0x2b
mov ecx, esp
lea eax, [ebp - 0x88]
push eax
mov dword [ecx], esi
mov dword [ecx + 0x10], esi
mov dword [ecx + 0x14], esi
call fcn.1000c826
lea eax, [ebp - 0x1f8]
push eax
call fcn.10015eec
mov ebx, eax
add esp, 4
mov byte [ebp - 4], 0x2c
mov ecx, esp
lea eax, [ebp - 0x70]
push eax
mov dword [ecx], esi
mov dword [ecx + 0x10], esi
mov dword [ecx + 0x14], esi
call fcn.1000c826
lea eax, [ebp - 0x210]
push eax
call fcn.10015eec
mov edi, eax
add esp, 4
mov byte [ebp - 4], 0x2d
mov ecx, esp
lea eax, [ebp - 0x58]
push eax
mov dword [ecx], esi
mov dword [ecx + 0x10], esi
mov dword [ecx + 0x14], esi
call fcn.1000c826
lea eax, [ebp - 0x1c8]
push eax
call fcn.10015eec
mov esi, eax
mov eax, dword [ebp - 0xb4]
push str._regex_:_
push eax
lea eax, [ebp - 0x11c]
mov byte [ebp - 4], 0x2e
push eax
call fcn.1000213b
add esp, 0x28
push esi
push eax
push dword [ebp - 0xa8]
lea ecx, [ebp - 0x138]
mov byte [ebp - 4], 0x2f
call fcn.10007519
mov esi, dword [ebp - 0xa4]
or esi, 0x20000000
mov dword [ebp - 0xa4], esi
push 0x11
push str.___sub_key_:_
lea ecx, [ebp - 0x138]
mov byte [ebp - 4], 0x30
call fcn.1000eb05
push eax
lea ecx, [ebp - 0x150]
call fcn.1000749d
or esi, 0x40000000
mov dword [ebp - 0xa4], esi
push edi
lea eax, [ebp - 0x150]
mov byte [ebp - 4], 0x31
push eax
push dword [ebp - 0xa8]
lea ecx, [ebp - 0x168]
call fcn.10007519
or esi, 0x80000000
mov dword [ebp - 0xa4], esi
push 0x12
push str.___root_key_:_
lea ecx, [ebp - 0x168]
mov byte [ebp - 4], 0x32
call fcn.1000eb05
push eax
lea ecx, [ebp - 0x180]
call fcn.1000749d
push ebx
lea eax, [ebp - 0x180]
mov byte [ebp - 4], 0x33
push eax
push dword [ebp - 0xa8]
lea ecx, [ebp - 0x198]
call fcn.10007519
push 0x13
push str.___type_code_:_
lea ecx, [ebp - 0x198]
mov byte [ebp - 4], 0x34
call fcn.1000eb05
push eax
lea ecx, [ebp - 0x1b0]
call fcn.1000749d
push dword [ebp - 0xb0]
lea eax, [ebp - 0x1b0]
mov byte [ebp - 4], 0x35
push eax
push dword [ebp - 0xa8]
lea ecx, [ebp - 0xec]
call fcn.10007519
push 3
push 0x100b1294
lea ecx, [ebp - 0xec]
mov byte [ebp - 4], 0x36
call fcn.1000eb05
push eax
lea ecx, [ebp - 0x104]
call fcn.1000749d
mov ebx, dword [ebp - 0xb4]
lea eax, [ebp - 0x104]
push eax
mov ecx, ebx
call fcn.100090d3
lea ecx, [ebp - 0x104]
call fcn.1000e761
lea ecx, [ebp - 0xec]
call fcn.1000e761
lea ecx, [ebp - 0x1b0]
call fcn.1000e761
lea ecx, [ebp - 0x198]
call fcn.1000e761
lea ecx, [ebp - 0x180]
call fcn.1000e761
lea ecx, [ebp - 0x168]
call fcn.1000e761
lea ecx, [ebp - 0x150]
call fcn.1000e761
lea ecx, [ebp - 0x138]
call fcn.1000e761
lea ecx, [ebp - 0x11c]
call fcn.1000e761
lea ecx, [ebp - 0x1c8]
call fcn.1000e761
lea ecx, [ebp - 0x210]
call fcn.1000e761
lea ecx, [ebp - 0x1f8]
call fcn.1000e761
lea ecx, [ebp - 0x1e0]
mov byte [ebp - 4], 0x2a
call fcn.1000e761
mov esi, dword [ebp - 0xb8]
mov ecx, 0x90
add esi, 0x104
mov edi, dword [ebp - 0xac]
mov eax, dword [esi + 4]
sub eax, dword [esi]
cdq
idiv ecx
inc edi
mov dword [ebp - 0xac], edi
cmp edi, eax
jae 0x10016f6b
push 0x100b12e4
lea eax, [ebp - 0x11c]
push ebx
push eax
call fcn.1000213b
add esp, 0xc
mov ecx, ebx
push eax
call fcn.100090d3
lea ecx, [ebp - 0x11c]
call fcn.1000e761
lea ecx, [ebp - 0xa0]
mov byte [ebp - 4], 2
call fcn.1001575c
mov eax, dword [esi + 4]
mov ecx, 0x90
sub eax, dword [esi]
cdq
idiv ecx
cmp edi, eax
jb 0x10016c71
sub esp, 0x18
xor eax, eax
mov ecx, esp
mov dword [ecx], eax
mov dword [ecx + 0x10], eax
mov dword [ecx + 0x14], eax
mov eax, dword [ebp - 0xb8]
add eax, 0x158
push eax
call fcn.1000c826
lea eax, [ebp - 0x1c8]
push eax
call fcn.10015eec
mov esi, eax
push str.___reg_display_name_:_
lea eax, [ebp - 0x11c]
mov byte [ebp - 4], 0x37
push ebx
push eax
call fcn.1000213b
add esp, 0x28
push esi
push eax
push dword [ebp - 0xa8]
lea ecx, [ebp - 0xec]
mov byte [ebp - 4], 0x38
call fcn.10007519
push 4
push 0x100b12e8
lea ecx, [ebp - 0xec]
mov byte [ebp - 4], 0x39
call fcn.1000eb05
push eax
lea ecx, [ebp - 0x104]
call fcn.1000749d
lea eax, [ebp - 0x104]
mov ecx, ebx
push eax
call fcn.100090d3
lea ecx, [ebp - 0x104]
call fcn.1000e761
lea ecx, [ebp - 0xec]
call fcn.1000e761
lea ecx, [ebp - 0x11c]
call fcn.1000e761
lea ecx, [ebp - 0x1c8]
call fcn.1000e761
lea ecx, [ebp + 0x14]
call fcn.1000e761
lea ecx, [ebp + 0x2c]
call fcn.1000e761
mov eax, ebx
call fcn.10080b60
ret 0x3c