Function at 0x4018a2
Capabilities:
Create thread

Disassembly:
jmp 0x41fde0
push 0xffffffffffffffff
push 0x49e640
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
sub esp, 0x54
push ebx
push ebp
push esi
push edi
mov ebx, ecx
mov dword [esp + 0x20], 0x4a656c
xor edi, edi
lea ecx, [esp + 0x1c]
mov dword [esp + 0x6c], edi
call fcn.0040178f
mov byte [esp + 0x6c], 1
call fcn.0047b29b
cmp eax, edi
je 0x41fe32
mov edx, dword [eax]
mov ecx, eax
call dword [edx + 0x74]
mov esi, eax
mov dword [esp + 0x14], esi
jmp 0x41fe38
mov dword [esp + 0x14], edi
mov esi, edi
mov al, byte [0x4c9374]
mov dword [esp + 0x10], edi
test al, al
jne 0x41fe78
mov ecx, 0x4c90a8
call fcn.00401e88
mov al, byte [0x4c9374]
test al, al
je 0x41fe78
mov ecx, 0x4c90a8
call fcn.00401ae1
push edi
push edi
push ebx
push 0x4014ce
push edi
push edi
mov dword [0x4c9378], edi
call dword [sym.imp.KERNEL32.dll_CreateThread]
lea ecx, [ebx + 0x3bc]
push edi
mov dword [esp + 0x1c], ecx
call fcn.0047a14d
call fcn.00496c5f
mov ecx, dword [eax + 4]
call fcn.0047a553
push 0x4c9094
lea ecx, [ebx + 0x94]
mov dword [ebx + 0x98], 0xffffffff
call fcn.0047ac45
mov ecx, esi
call fcn.00401e7e
mov ecx, esi
call fcn.00401ffa
test eax, eax
je 0x41fec8
mov ecx, esi
call fcn.004015d2
mov eax, dword [esi + 0x14c]
cmp eax, 3
ja case.default.0x41fed7
jmp dword [eax*4 + 0x4200ac]
push str._Searching....
lea ecx, [ebx + 0x46c]
call fcn.00479fc6
lea ebp, [esp + 0x24]
push edi
call fcn.004015be
mov esi, eax
add esp, 4
cmp esi, 0xffffffff
mov dword [ebp], esi
je 0x41ff14
push esi
call fcn.00402167
push esi
call fcn.00401b90
add esp, 8
inc edi
add ebp, 4
cmp edi, 8
jl 0x41fef2
lea eax, [esp + 0x44]
mov ecx, ebx
push eax
call fcn.00401d39
xor esi, esi
push esi
call fcn.004015be
mov edi, eax
add esp, 4
cmp edi, 0xffffffff
mov dword [esp + esi*4 + 0x24], edi
je 0x41ff58
cmp dword [esp + esi*4 + 0x44], 1
jne 0x41ff4f
push edi
call fcn.004021d0
add esp, 4
push edi
call fcn.00401b90
add esp, 4
inc esi
cmp esi, 8
jl 0x41ff2b
mov ecx, ebx
call fcn.00401163
mov esi, dword [esp + 0x14]
jmp case.default.0x41fed7
push str._Searching....
lea ecx, [ebx + 0x46c]
call fcn.00479fc6
lea ebp, [esp + 0x24]
push edi
call fcn.004015be
mov esi, eax
add esp, 4
cmp esi, 0xffffffff
mov dword [ebp], esi
je 0x41ffa4
push esi
call fcn.00402167
push esi
call fcn.00401b90
add esp, 8
inc edi
add ebp, 4
cmp edi, 8
jl 0x41ff82
lea ecx, [esp + 0x44]
push ecx
mov ecx, ebx
call fcn.00401d39
xor edi, edi
push edi
call fcn.004015be
mov esi, eax
add esp, 4
cmp esi, 0xffffffff
mov dword [esp + edi*4 + 0x24], esi
je 0x41fff2
mov eax, dword [esp + edi*4 + 0x44]
mov ebp, 1
cmp eax, ebp
jne 0x41ffe9
push esi
call fcn.004021d0
add esp, 4
mov dword [esp + 0x10], ebp
push esi
call fcn.00401b90
add esp, 4
inc edi
cmp edi, 8
jl 0x41ffbb
cmp dword [esp + 0x10], 1
jne case.0x41fed7.1
mov ecx, ebx
call fcn.00401163
call fcn.0040119a
mov edi, dword [esp + 0x10]
mov esi, eax
test esi, esi
jne 0x42001d
test edi, edi
jne 0x42001d
xor eax, eax
jmp 0x420022
mov eax, 1
push eax
mov ecx, ebx
call fcn.00401177
test esi, esi
je 0x42003b
test edi, edi
jne 0x420046
mov ecx, ebx
call fcn.00402004
jmp 0x42003f
test edi, edi
jne 0x420046
mov ecx, ebx
call fcn.00401163
mov ecx, ebx
call fcn.00401799
mov esi, dword [esp + 0x14]
jmp case.default.0x41fed7
call fcn.004014c9
push eax
mov ecx, ebx
call fcn.00401177
mov ecx, dword [esp + 0x18]
push 1
call fcn.0047a14d
call fcn.00496c5f
mov ecx, dword [eax + 4]
call fcn.0047a568
mov ecx, esi
call fcn.00401ffa
test eax, eax
je 0x42008a
mov ecx, esi
call fcn.00401e1f
lea ecx, [esp + 0x1c]
mov byte [esp + 0x6c], 0
call fcn.0040228e
mov ecx, dword [esp + 0x64]
pop edi
pop esi
pop ebp
pop ebx
mov dword fs:[0], ecx
add esp, 0x60
ret