Function at 0x407960
Capabilities:
Query or enumerate registry value
Terminate process

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x43f9d8
mov eax, dword fs:[0]
push eax
sub esp, 0x328
mov eax, dword [0x455014]
xor eax, ebp
mov dword [ebp - 0x10], eax
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
lea eax, [ebp - 0x31c]
push eax
push 0x20019
push 0
push str.SOFTWAREMySecretApplicationSettings
push 0x80000001
call dword [sym.imp.ADVAPI32.dll_RegOpenKeyExW]
test eax, eax
jne 0x407feb
lea eax, [ebp - 0x318]
mov dword [ebp - 0x318], 0x200
push eax
lea eax, [ebp - 0x210]
push eax
push 0
push 0
push str.Config
push dword [ebp - 0x31c]
call dword [sym.imp.ADVAPI32.dll_RegQueryValueExW]
test eax, eax
jne 0x407fab
mov eax, dword [ebp - 0x318]
lea ecx, [ebp - 0x210]
add eax, ecx
mov dword [ebp - 0x324], 0
mov dword [ebp - 0x320], 0xf
mov byte [ebp - 0x334], 0
cmp ecx, eax
je 0x407a26
sub eax, ecx
push eax
mov eax, ecx
lea ecx, [ebp - 0x334]
push eax
call fcn.0040d700
lea edx, [ebp - 0x334]
mov dword [ebp - 4], 0
lea ecx, [ebp - 0x228]
call fcn.00408190
mov byte [ebp - 4], 2
mov edx, dword [ebp - 0x320]
cmp edx, 0x10
jb 0x407a7c
mov ecx, dword [ebp - 0x334]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x407a72
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x40805a
push edx
push ecx
call fcn.0041e4c9
add esp, 8
push ecx
push str.ExpiryDate
lea ecx, [ebp - 0x228]
call fcn.0040b070
push ecx
push str.HWID
lea ecx, [ebp - 0x228]
mov edi, eax
call fcn.0040b070
mov esi, eax
cmp edi, 0xffffffff
je 0x407f56
cmp esi, 0xffffffff
je 0x407f56
mov eax, dword [ebp - 0x218]
lea edx, [edi + 0xb]
mov dword [ebp - 0x298], 0
mov dword [ebp - 0x294], 0xf
mov byte [ebp - 0x2a8], 0
cmp eax, edx
jb 0x40800b
sub eax, edx
mov ecx, 0xa
cmp eax, ecx
cmovb ecx, eax
cmp dword [ebp - 0x214], 0x10
lea eax, [ebp - 0x228]
cmovae eax, dword [ebp - 0x228]
push ecx
add eax, edx
lea ecx, [ebp - 0x2a8]
push eax
call fcn.0040d700
mov byte [ebp - 4], 3
lea edi, [ebp - 0x228]
cmp dword [ebp - 0x214], 0x10
mov eax, dword [ebp - 0x218]
cmovae edi, dword [ebp - 0x228]
cmp esi, eax
jae 0x407b4a
sub eax, esi
push eax
lea eax, [edi + esi]
push 0x2c
push eax
call fcn.00421420
add esp, 0xc
test eax, eax
je 0x407b4a
sub eax, edi
jmp 0x407b4d
or eax, 0xffffffff
mov edx, dword [ebp - 0x218]
lea edi, [esi + 5]
mov dword [ebp - 0x280], 0
mov dword [ebp - 0x27c], 0xf
mov byte [ebp - 0x290], 0
cmp edx, edi
jb 0x408010
sub eax, esi
sub edx, edi
lea ecx, [eax - 5]
cmp edx, ecx
lea eax, [ebp - 0x228]
cmovb ecx, edx
cmp dword [ebp - 0x214], 0x10
push ecx
cmovae eax, dword [ebp - 0x228]
lea ecx, [ebp - 0x290]
add eax, edi
push eax
call fcn.0040d700
push 0
mov byte [ebp - 4], 4
call fcn.00425f0e
mov dword [ebp - 0x260], eax
lea eax, [ebp - 0x260]
push eax
lea eax, [ebp - 0x314]
mov dword [ebp - 0x25c], edx
push eax
call fcn.00423384
lea eax, [ebp - 0x2cc]
push eax
lea ecx, [ebp - 0x2a8]
call fcn.00407630
add esp, 0x10
lea ecx, [ebp - 0x2c0]
movups xmm0, xmmword [eax]
movups xmmword [ebp - 0x2f0], xmm0
movups xmm0, xmmword [eax + 0x10]
movups xmmword [ebp - 0x2e0], xmm0
mov eax, dword [eax + 0x20]
mov dword [ebp - 0x2d0], eax
call fcn.00408250
lea edx, [ebp - 0x290]
mov byte [ebp - 4], 5
lea ecx, [ebp - 0x278]
call fcn.00408190
lea eax, [ebp - 0x278]
mov byte [ebp - 4], 6
push eax
lea ecx, [ebp - 0x240]
call fcn.0040b540
lea edx, [ebp - 0x240]
mov byte [ebp - 4], 7
lea ecx, [ebp - 0x2c0]
call fcn.00410040
test al, al
jne 0x407de6
mov eax, dword [ebp - 0x230]
test eax, eax
je 0x407cad
cmp eax, 3
jbe 0x407cad
lea ecx, [eax - 3]
mov dword [ebp - 0x248], 0
cmp eax, ecx
mov dword [ebp - 0x244], 0xf
mov byte [ebp - 0x258], 0
cmovb ecx, eax
cmp dword [ebp - 0x22c], 0x10
lea eax, [ebp - 0x240]
cmovae eax, dword [ebp - 0x240]
push ecx
push eax
lea ecx, [ebp - 0x258]
call fcn.0040d700
jmp 0x407cbf
lea eax, [ebp - 0x240]
push eax
lea ecx, [ebp - 0x258]
call fcn.0040b540
lea edx, [ebp - 0x258]
mov byte [ebp - 4], 8
lea ecx, [ebp - 0x2c0]
call fcn.00410040
test al, al
jne 0x407da8
mov eax, dword [ebp - 0x230]
test eax, eax
je 0x407d31
cmp eax, 1
jbe 0x407d31
lea ecx, [eax - 1]
mov dword [ebp - 0x324], 0
cmp eax, ecx
mov dword [ebp - 0x320], 0xf
mov byte [ebp - 0x334], 0
cmovb ecx, eax
cmp dword [ebp - 0x22c], 0x10
lea eax, [ebp - 0x240]
cmovae eax, dword [ebp - 0x240]
push ecx
push eax
lea ecx, [ebp - 0x334]
call fcn.0040d700
jmp 0x407d43
lea eax, [ebp - 0x240]
push eax
lea ecx, [ebp - 0x334]
call fcn.0040b540
lea eax, [ebp - 0x334]
push eax
lea ecx, [ebp - 0x258]
call fcn.0040b480
mov edx, dword [ebp - 0x320]
cmp edx, 0x10
jb 0x407d8f
mov ecx, dword [ebp - 0x334]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x407d85
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x408055
push edx
push ecx
call fcn.0041e4c9
add esp, 8
lea edx, [ebp - 0x258]
lea ecx, [ebp - 0x2c0]
call fcn.00410040
test al, al
je 0x408015
mov byte [ebp - 4], 7
mov edx, dword [ebp - 0x244]
cmp edx, 0x10
jb 0x407de6
mov ecx, dword [ebp - 0x258]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x407ddc
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x408055
push edx
push ecx
call fcn.0041e4c9
add esp, 8
lea eax, [ebp - 0x314]
push eax
call fcn.00423ecc
mov edi, eax
mov esi, edx
lea eax, [ebp - 0x2f0]
push eax
call fcn.00423ecc
add esp, 8
cmp esi, edx
jl 0x407e17
jg 0x408035
cmp edi, eax
ja 0x408035
mov edx, dword [ebp - 0x22c]
cmp edx, 0x10
jb 0x407e51
mov ecx, dword [ebp - 0x240]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x407e47
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x408055
push edx
push ecx
call fcn.0041e4c9
add esp, 8
mov edx, dword [ebp - 0x264]
cmp edx, 0x10
jb 0x407e8b
mov ecx, dword [ebp - 0x278]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x407e81
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x408055
push edx
push ecx
call fcn.0041e4c9
add esp, 8
mov edx, dword [ebp - 0x2ac]
mov dword [ebp - 0x268], 0
mov dword [ebp - 0x264], 0xf
mov byte [ebp - 0x278], 0
cmp edx, 0x10
jb 0x407ee0
mov ecx, dword [ebp - 0x2c0]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x407ed6
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x408055
push edx
push ecx
call fcn.0041e4c9
add esp, 8
mov edx, dword [ebp - 0x27c]
cmp edx, 0x10
jb 0x407f1a
mov ecx, dword [ebp - 0x290]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x407f10
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x408055
push edx
push ecx
call fcn.0041e4c9
add esp, 8
mov edx, dword [ebp - 0x294]
cmp edx, 0x10
jb 0x407f6f
mov ecx, dword [ebp - 0x2a8]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x407f4a
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x408055
push edx
push ecx
call fcn.0041e4c9
add esp, 8
jmp 0x407f6f
push 0x10
push str.Activation_Faild_:_
push str.Please_contact_us_nWhatsApp:_967770673089.
push 0
call dword [sym.imp.USER32.dll_MessageBoxW]
call fcn.004068c0
mov edx, dword [ebp - 0x214]
cmp edx, 0x10
jb 0x407fc4
mov ecx, dword [ebp - 0x228]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x407f9f
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x40805a
push edx
push ecx
call fcn.0041e4c9
add esp, 8
jmp 0x407fc4
push 0x10
push str.Error:_
push str.Please_contact_us_nWhatsApp:_967770673089.
push 0
call dword [sym.imp.USER32.dll_MessageBoxW]
call fcn.004068c0
push dword [ebp - 0x31c]
call dword [sym.imp.ADVAPI32.dll_RegCloseKey]
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
call fcn.0041df22
mov esp, ebp
pop ebp
ret
push 0x10
push str.Error_accessing_:_
push str.Please_contact_us_nWhatsApp:_967770673089.
push 0
call dword [sym.imp.USER32.dll_MessageBoxW]
call fcn.004068c0
push 1
call fcn.00422e59
call fcn.0040f5e0
call fcn.0040f5e0
push 0x10
push str.Activation_Failed_:_
push str.H_error_detected._Please_contact_support._nWhatsApp:_967770673089.
push 0
call dword [sym.imp.USER32.dll_MessageBoxW]
call fcn.004068c0
push 1
call fcn.00422e59
push 0x10
push str.Activation_has_expired_:_
push str.Please_renew_your_subscription_nWhatsApp:_967770673089.
push 0
call dword [sym.imp.USER32.dll_MessageBoxW]
call fcn.004068c0
push 1
call fcn.00422e59
call fcn.00426b63
call fcn.00426b63
int3