Function at 0x493ca4
Capabilities:
Create thread

Disassembly:
push ebp
mov ebp, esp
add esp, 0xffffff88
mov dword [ebp - 0x54], edx
mov dword [ebp - 0x50], eax
mov eax, 0x4cf838
call fcn.004afb5c
mov edx, dword [ebp - 0x50]
mov ecx, dword [edx + 0x3c4]
cmp ecx, 5
ja case.0x493ccc.2
jmp dword [ecx*4 + 0x493cd3]
mov eax, dword [ebp - 0x50]
call fcn.00493260
dec eax
jge 0x493d57
lea eax, [ebp - 0x78]
call fcn.0040184c
mov dl, 0x2d
call fcn.00401880
push eax
mov word [ebp - 0x3c], 8
mov edx, 0x4caffd
lea eax, [ebp - 4]
call fcn.004b9ba0
inc dword [ebp - 0x30]
mov eax, dword [eax]
mov cl, 1
pop edx
call fcn.0047a818
push eax
dec dword [ebp - 0x30]
lea eax, [ebp - 4]
mov edx, 2
call fcn.004b9d00
pop ecx
test cl, cl
je 0x493d48
mov eax, dword [0x4db5ac]
mov eax, dword [eax]
call fcn.00442728
mov edx, dword [ebp - 0x4c]
mov dword fs:[0], edx
jmp 0x493fd6
mov eax, dword [ebp - 0x50]
call fcn.00493fdc
mov dword [ebp - 0x58], eax
jmp 0x493dd5
cmp dword [ebp - 0x58], 0
jle 0x493f40
mov word [ebp - 0x3c], 0x20
lea eax, [ebp - 0x10]
call fcn.00401790
mov edx, eax
inc dword [ebp - 0x30]
mov eax, dword [ebp - 0x58]
call fcn.004766ec
lea edx, [ebp - 0x10]
push edx
lea eax, [ebp - 0x14]
call fcn.00401790
push eax
inc dword [ebp - 0x30]
push 0x4cb007
call fcn.00403b48
pop ecx
pop ecx
pop edx
call fcn.004ba340
lea eax, [ebp - 0x14]
push eax
lea eax, [ebp - 0x1c]
call fcn.00401790
push eax
inc dword [ebp - 0x30]
mov edx, str.____n
lea eax, [ebp - 0x18]
call fcn.004b9ba0
inc dword [ebp - 0x30]
lea edx, [ebp - 0x18]
pop ecx
pop eax
call fcn.004b9d58
lea edx, [ebp - 0x1c]
push edx
lea eax, [ebp - 0x24]
call fcn.00401790
push eax
inc dword [ebp - 0x30]
push str.Install_now_
call fcn.00403b48
pop ecx
mov edx, eax
lea eax, [ebp - 0x20]
call fcn.004b9ba0
inc dword [ebp - 0x30]
lea edx, [ebp - 0x20]
pop ecx
pop eax
call fcn.004b9d58
lea eax, [ebp - 0x24]
call fcn.00408c78
mov edx, eax
lea eax, [ebp - 0x28]
call fcn.004b9ba0
inc dword [ebp - 0x30]
mov edx, dword [eax]
mov ecx, 4
mov eax, dword [ebp - 0x50]
mov eax, dword [eax + 0x3f8]
call fcn.004a5090
dec eax
setne dl
and edx, 1
push edx
dec dword [ebp - 0x30]
lea eax, [ebp - 0x28]
mov edx, 2
call fcn.004b9d00
dec dword [ebp - 0x30]
lea eax, [ebp - 0x24]
mov edx, 2
call fcn.004b9d00
dec dword [ebp - 0x30]
lea eax, [ebp - 0x20]
mov edx, 2
call fcn.004b9d00
dec dword [ebp - 0x30]
lea eax, [ebp - 0x1c]
mov edx, 2
call fcn.004b9d00
dec dword [ebp - 0x30]
lea eax, [ebp - 0x18]
mov edx, 2
call fcn.004b9d00
dec dword [ebp - 0x30]
lea eax, [ebp - 0x14]
mov edx, 2
call fcn.004b9d00
dec dword [ebp - 0x30]
lea eax, [ebp - 0x10]
mov edx, 2
call fcn.004b9d00
pop ecx
test cl, cl
je 0x493f2d
mov eax, dword [ebp - 0x4c]
mov dword fs:[0], eax
jmp 0x493fd6
mov eax, dword [ebp - 0x50]
call fcn.0043f590
mov eax, dword [ebp - 0x50]
mov edx, dword [eax]
call dword [edx + 0x80]
mov ecx, dword [ebp - 0x50]
mov dword [ecx + 0x3c4], 1
mov eax, dword [ebp - 0x50]
xor edx, edx
mov dword [eax + 0x414], edx
mov eax, dword [ebp - 0x50]
call fcn.0048fcf8
mov eax, dword [ebp - 0x50]
call fcn.00493374
mov eax, dword [ebp - 0x50]
call fcn.00492ddc
mov eax, dword [ebp - 0x50]
call fcn.00494284
mov edx, dword [ebp - 0x50]
add edx, 0x3cc
push edx
push 0
push dword [ebp - 0x50]
push 0x494f38
push 0
push 0
call sub.KERNEL32.DLL_CreateThread
mov ecx, dword [ebp - 0x50]
mov dword [ecx + 0x3d0], eax
jmp case.0x493ccc.2
mov eax, dword [ebp - 0x50]
mov dword [eax + 0x3c4], 3
mov eax, dword [ebp - 0x50]
call fcn.00492ddc
jmp case.0x493ccc.2
mov edx, dword [ebp - 0x50]
mov dword [edx + 0x3c4], 1
mov eax, dword [ebp - 0x50]
call fcn.00492ddc
mov edx, dword [ebp - 0x4c]
mov dword fs:[0], edx
mov esp, ebp
pop ebp
ret