Function at 0x48f240
Capabilities:
Create thread

Disassembly:
push ebp
mov ebp, esp
add esp, 0xffffff94
push ebx
push esi
mov ebx, eax
mov eax, 0x4ca8cc
call fcn.004aad94
mov edx, dword [ebx + 0x3c4]
cmp edx, 5
ja case.0x48f263.2
jmp dword [edx*4 + 0x48f26a]
mov eax, ebx
call fcn.0048e92c
dec eax
jge 0x48f2f5
mov word [ebp - 0x3c], 8
mov edx, 0x4c5fef
lea eax, [ebp - 4]
call fcn.004b4dd8
inc dword [ebp - 0x30]
mov edx, dword [eax]
push edx
push 0x20
push 0
lea ecx, [ebp - 0x6c]
push ecx
call fcn.004aa980
add esp, 0xc
or byte [ebp - 0x67], 0x20
lea edx, [ebp - 0x6c]
mov cl, 1
pop eax
call fcn.00477af0
push eax
dec dword [ebp - 0x30]
lea eax, [ebp - 4]
mov edx, 2
call fcn.004b4f38
pop ecx
test cl, cl
je 0x48f2e6
mov eax, dword [0x4d72e4]
mov eax, dword [eax]
call fcn.0043fa00
mov edx, dword [ebp - 0x4c]
mov dword fs:[0], edx
jmp 0x48f54b
mov eax, ebx
call fcn.0048f554
mov esi, eax
jmp 0x48f36e
test esi, esi
jle 0x48f4cf
mov word [ebp - 0x3c], 0x20
xor eax, eax
lea edx, [ebp - 0x10]
mov dword [ebp - 0x10], eax
mov eax, esi
inc dword [ebp - 0x30]
call fcn.004739c4
lea edx, [ebp - 0x10]
push edx
push 0x4c5ff9
call fcn.004036e0
pop ecx
xor ecx, ecx
mov dword [ebp - 0x14], ecx
lea ecx, [ebp - 0x14]
inc dword [ebp - 0x30]
pop edx
call fcn.004b5578
lea eax, [ebp - 0x14]
push eax
mov edx, str.____n
lea eax, [ebp - 0x18]
call fcn.004b4dd8
inc dword [ebp - 0x30]
xor eax, eax
mov dword [ebp - 0x1c], eax
lea edx, [ebp - 0x18]
inc dword [ebp - 0x30]
lea ecx, [ebp - 0x1c]
pop eax
call fcn.004b4f90
lea edx, [ebp - 0x1c]
push edx
push str.Install_now_
call fcn.004036e0
pop ecx
mov edx, eax
lea eax, [ebp - 0x20]
call fcn.004b4dd8
inc dword [ebp - 0x30]
xor eax, eax
mov dword [ebp - 0x24], eax
lea edx, [ebp - 0x20]
inc dword [ebp - 0x30]
lea ecx, [ebp - 0x24]
pop eax
call fcn.004b4f90
cmp dword [ebp - 0x24], 0
je 0x48f411
mov edx, dword [ebp - 0x24]
jmp 0x48f416
mov edx, 0x4c6035
lea eax, [ebp - 0x28]
call fcn.004b4dd8
inc dword [ebp - 0x30]
mov edx, dword [eax]
mov ecx, 4
mov eax, dword [ebx + 0x3f8]
call fcn.0049ff1c
dec eax
mov edx, 2
setne al
and eax, 1
push eax
lea eax, [ebp - 0x28]
dec dword [ebp - 0x30]
call fcn.004b4f38
dec dword [ebp - 0x30]
lea eax, [ebp - 0x24]
mov edx, 2
call fcn.004b4f38
dec dword [ebp - 0x30]
lea eax, [ebp - 0x20]
mov edx, 2
call fcn.004b4f38
dec dword [ebp - 0x30]
lea eax, [ebp - 0x1c]
mov edx, 2
call fcn.004b4f38
dec dword [ebp - 0x30]
lea eax, [ebp - 0x18]
mov edx, 2
call fcn.004b4f38
dec dword [ebp - 0x30]
lea eax, [ebp - 0x14]
mov edx, 2
call fcn.004b4f38
dec dword [ebp - 0x30]
lea eax, [ebp - 0x10]
mov edx, 2
call fcn.004b4f38
pop ecx
test cl, cl
je 0x48f4be
mov eax, dword [ebp - 0x4c]
mov dword fs:[0], eax
jmp 0x48f54b
mov eax, ebx
call fcn.0043c868
mov eax, ebx
mov edx, dword [eax]
call dword [edx + 0x80]
mov dword [ebx + 0x3c4], 1
xor ecx, ecx
mov eax, ebx
mov dword [ebx + 0x414], ecx
call fcn.0048adc4
mov eax, ebx
call fcn.0048ea28
mov eax, ebx
call fcn.0048e540
mov eax, ebx
call fcn.0048f80c
lea edx, [ebx + 0x3cc]
push edx
push 0
push ebx
push 0x4903a4
push 0
push 0
call sub.KERNEL32.DLL_CreateThread
mov dword [ebx + 0x3d0], eax
jmp case.0x48f263.2
mov dword [ebx + 0x3c4], 3
mov eax, ebx
call fcn.0048e540
jmp case.0x48f263.2
mov dword [ebx + 0x3c4], 1
mov eax, ebx
call fcn.0048e540
mov edx, dword [ebp - 0x4c]
mov dword fs:[0], edx
pop esi
pop ebx
mov esp, ebp
pop ebp
ret