Function at 0x490648
Capabilities:
Create thread

Disassembly:
push ebp
mov ebp, esp
add esp, 0xffffff94
push ebx
push esi
mov ebx, eax
mov eax, 0x4cd1b8
call fcn.004ad4bc
mov edx, dword [ebx + 0x3c4]
cmp edx, 5
ja case.0x49066b.2
jmp dword [edx*4 + 0x490672]
mov eax, ebx
call fcn.0048fd34
dec eax
jge 0x4906fd
mov word [ebp - 0x3c], 8
mov edx, 0x4c9c86
lea eax, [ebp - 4]
call fcn.004b7500
inc dword [ebp - 0x30]
mov edx, dword [eax]
push edx
push 0x20
push 0
lea ecx, [ebp - 0x6c]
push ecx
call fcn.004ad0a8
add esp, 0xc
or byte [ebp - 0x67], 0x20
lea edx, [ebp - 0x6c]
mov cl, 1
pop eax
call fcn.0047e5f8
push eax
dec dword [ebp - 0x30]
lea eax, [ebp - 4]
mov edx, 2
call fcn.004b7660
pop ecx
test cl, cl
je 0x4906ee
mov eax, dword [0x4da0ec]
mov eax, dword [eax]
call fcn.00446508
mov edx, dword [ebp - 0x4c]
mov dword fs:[0], edx
jmp 0x490953
mov eax, ebx
call fcn.0049095c
mov esi, eax
jmp 0x490776
test esi, esi
jle 0x4908d7
mov word [ebp - 0x3c], 0x20
xor eax, eax
lea edx, [ebp - 0x10]
mov dword [ebp - 0x10], eax
mov eax, esi
inc dword [ebp - 0x30]
call fcn.0047a4cc
lea edx, [ebp - 0x10]
push edx
push 0x4c9c90
call fcn.004037cc
pop ecx
xor ecx, ecx
mov dword [ebp - 0x14], ecx
lea ecx, [ebp - 0x14]
inc dword [ebp - 0x30]
pop edx
call fcn.004b7ca0
lea eax, [ebp - 0x14]
push eax
mov edx, str.____n
lea eax, [ebp - 0x18]
call fcn.004b7500
inc dword [ebp - 0x30]
xor eax, eax
mov dword [ebp - 0x1c], eax
lea edx, [ebp - 0x18]
inc dword [ebp - 0x30]
lea ecx, [ebp - 0x1c]
pop eax
call fcn.004b76b8
lea edx, [ebp - 0x1c]
push edx
push str.Install_now_
call fcn.004037cc
pop ecx
mov edx, eax
lea eax, [ebp - 0x20]
call fcn.004b7500
inc dword [ebp - 0x30]
xor eax, eax
mov dword [ebp - 0x24], eax
lea edx, [ebp - 0x20]
inc dword [ebp - 0x30]
lea ecx, [ebp - 0x24]
pop eax
call fcn.004b76b8
cmp dword [ebp - 0x24], 0
je 0x490819
mov edx, dword [ebp - 0x24]
jmp 0x49081e
mov edx, 0x4c9ccc
lea eax, [ebp - 0x28]
call fcn.004b7500
inc dword [ebp - 0x30]
mov edx, dword [eax]
mov ecx, 4
mov eax, dword [ebx + 0x3f8]
call fcn.004a14b8
dec eax
mov edx, 2
setne al
and eax, 1
push eax
lea eax, [ebp - 0x28]
dec dword [ebp - 0x30]
call fcn.004b7660
dec dword [ebp - 0x30]
lea eax, [ebp - 0x24]
mov edx, 2
call fcn.004b7660
dec dword [ebp - 0x30]
lea eax, [ebp - 0x20]
mov edx, 2
call fcn.004b7660
dec dword [ebp - 0x30]
lea eax, [ebp - 0x1c]
mov edx, 2
call fcn.004b7660
dec dword [ebp - 0x30]
lea eax, [ebp - 0x18]
mov edx, 2
call fcn.004b7660
dec dword [ebp - 0x30]
lea eax, [ebp - 0x14]
mov edx, 2
call fcn.004b7660
dec dword [ebp - 0x30]
lea eax, [ebp - 0x10]
mov edx, 2
call fcn.004b7660
pop ecx
test cl, cl
je 0x4908c6
mov eax, dword [ebp - 0x4c]
mov dword fs:[0], eax
jmp 0x490953
mov eax, ebx
call fcn.00443370
mov eax, ebx
mov edx, dword [eax]
call dword [edx + 0x80]
mov dword [ebx + 0x3c4], 1
xor ecx, ecx
mov eax, ebx
mov dword [ebx + 0x414], ecx
call fcn.0048c160
mov eax, ebx
call fcn.0048fe30
mov eax, ebx
call fcn.0048f8fc
mov eax, ebx
call fcn.00490c10
lea edx, [ebx + 0x3cc]
push edx
push 0
push ebx
push 0x4917a8
push 0
push 0
call sub.KERNEL32.DLL_CreateThread
mov dword [ebx + 0x3d0], eax
jmp case.0x49066b.2
mov dword [ebx + 0x3c4], 3
mov eax, ebx
call fcn.0048f8fc
jmp case.0x49066b.2
mov dword [ebx + 0x3c4], 1
mov eax, ebx
call fcn.0048f8fc
mov edx, dword [ebp - 0x4c]
mov dword fs:[0], edx
pop esi
pop ebx
mov esp, ebp
pop ebp
ret