Function at 0x402640
Capabilities:
Access peb ldr_data

Disassembly:
push 0xffffffffffffffff
push 0x428520
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
sub esp, 0x3c
push ebx
push esi
push 0x436048
lea ecx, [esp + 0x10]
call fcn.0041e084
mov eax, dword [esp + 0x58]
lea ecx, [esp + 0xc]
push eax
lea edx, [esp + 0x1c]
push ecx
push edx
mov dword [esp + 0x58], 0
call fcn.0041e25f
push 0x436078
push eax
lea eax, [esp + 0x1c]
mov byte [esp + 0x54], 1
push eax
call fcn.0041e25f
mov ecx, dword [esp + 0x5c]
lea edx, [esp + 0x10]
push ecx
push eax
push edx
mov byte [esp + 0x58], 2
call fcn.0041e25f
push 0x436044
push eax
lea eax, [esp + 0x60]
mov bl, 3
push eax
mov byte [esp + 0x58], bl
call fcn.0041e25f
push eax
lea ecx, [esp + 0x10]
mov byte [esp + 0x50], 4
call fcn.0041e103
lea ecx, [esp + 0x58]
mov byte [esp + 0x4c], bl
call fcn.0041e016
lea ecx, [esp + 0x10]
mov byte [esp + 0x4c], 2
call fcn.0041e016
lea ecx, [esp + 0x14]
mov byte [esp + 0x4c], 1
call fcn.0041e016
lea ecx, [esp + 0x18]
mov byte [esp + 0x4c], 0
call fcn.0041e016
mov ecx, dword [0x4368ec]
mov dword [esp + 8], ecx
lea ecx, [esp + 0x30]
mov byte [esp + 0x4c], 5
call fcn.0041e4d2
mov bl, 6
lea ecx, [esp + 0x1c]
mov byte [esp + 0x4c], bl
call fcn.0041930b
mov esi, dword [esp + 0x54]
push 0
push 0x4002
push esi
lea ecx, [esp + 0x3c]
mov byte [esp + 0x58], 7
call fcn.0041e547
test eax, eax
jne 0x402768
push eax
push 0x5001
push esi
lea ecx, [esp + 0x3c]
call fcn.0041e547
test eax, eax
jne 0x40279f
jmp 0x40294d
lea edx, [esp + 8]
lea ecx, [esp + 0x30]
push edx
call fcn.0041e72a
test eax, eax
je 0x40279f
mov ecx, dword [esp + 0x24]
lea eax, [esp + 8]
push eax
push ecx
lea ecx, [esp + 0x24]
call fcn.00419513
lea edx, [esp + 8]
lea ecx, [esp + 0x30]
push edx
call fcn.0041e72a
test eax, eax
jne 0x40277a
mov eax, dword [esp + 0x24]
xor esi, esi
push edi
mov edi, eax
test eax, eax
jle 0x40288c
mov eax, dword [esp + 0x24]
push 0x438180
mov eax, dword [eax + esi*4]
push eax
call fcn.0040b6ba
add esp, 8
test eax, eax
je 0x4027e2
mov ecx, dword [esp + 0x24]
mov edx, dword [esp + 0x10]
push edx
mov eax, dword [ecx + esi*4]
push eax
call fcn.0040ba0e
add esp, 8
test eax, eax
je 0x4027e9
inc esi
cmp esi, edi
jl 0x4027b0
jmp 0x402853
push 1
push esi
lea ecx, [esp + 0x28]
call fcn.0041961c
dec edi
cmp esi, edi
jge 0x402853
mov eax, dword [esp + 0x24]
push 0x438180
mov eax, dword [eax + esi*4]
push eax
call fcn.0040b6ba
add esp, 8
test eax, eax
mov eax, dword [esp + 0x24]
je 0x402832
mov ecx, dword [eax + esi*4]
cmp byte [ecx], 0x5b
je 0x402832
push 1
push esi
lea ecx, [esp + 0x28]
call fcn.0041961c
dec edi
cmp esi, edi
jl 0x4027fa
jmp 0x402853
mov eax, dword [eax + esi*4]
push 0x438180
push eax
call fcn.0040b6ba
add esp, 8
test eax, eax
jne 0x402853
push 1
push esi
lea ecx, [esp + 0x28]
call fcn.0041961c
mov eax, dword [esp + 0x28]
test eax, eax
jle 0x40288c
mov edx, dword [esp + 0x24]
push 0x438180
mov eax, dword [edx + eax*4 - 4]
push eax
call fcn.0040b6ba
add esp, 8
test eax, eax
je 0x402888
mov eax, dword [esp + 0x28]
push 0x438180
push eax
lea ecx, [esp + 0x28]
call fcn.004194e7
mov eax, dword [esp + 0x28]
lea ecx, [esp + 0x10]
push ecx
push eax
lea ecx, [esp + 0x28]
call fcn.00419513
mov eax, dword [esp + 0x64]
pop edi
cmp eax, 1
jle 0x4028cb
push eax
lea edx, [esp + 0xc]
push str.UserNum_i
push edx
call fcn.00418dba
mov ecx, dword [esp + 0x30]
add esp, 0xc
lea eax, [esp + 8]
push eax
push ecx
lea ecx, [esp + 0x24]
call fcn.00419513
push str.License
lea ecx, [esp + 0xc]
call fcn.0041e153
mov edx, dword [esp + 0x64]
lea ecx, [esp + 8]
push edx
call fcn.0041e332
mov ecx, dword [esp + 0x24]
lea eax, [esp + 8]
push eax
push ecx
lea ecx, [esp + 0x24]
call fcn.00419513
push 0
push 0
lea ecx, [esp + 0x38]
call fcn.0041e7ed
push 0
lea ecx, [esp + 0x34]
call fcn.0041ecc2
mov eax, dword [esp + 0x24]
xor esi, esi
test eax, eax
jle 0x402944
mov edx, dword [esp + 0x20]
lea ecx, [esp + 0x30]
mov eax, dword [edx + esi*4]
push eax
call fcn.0041e6ba
push 0x435310
lea ecx, [esp + 0x34]
call fcn.0041e6ba
mov eax, dword [esp + 0x24]
inc esi
cmp esi, eax
jl 0x40291c
lea ecx, [esp + 0x30]
call fcn.0041e877
lea ecx, [esp + 0x1c]
mov byte [esp + 0x4c], bl
call fcn.0041933e
lea ecx, [esp + 0x30]
mov byte [esp + 0x4c], 5
call fcn.0041e504
lea ecx, [esp + 8]
mov byte [esp + 0x4c], 0
call fcn.0041e016
lea ecx, [esp + 0xc]
mov dword [esp + 0x4c], 0xffffffff
call fcn.0041e016
mov ecx, dword [esp + 0x44]
pop esi
pop ebx
mov dword fs:[0], ecx
add esp, 0x48
ret