Function at 0x461c40
Capabilities:
Create thread

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x6baa56
mov eax, dword fs:[0]
push eax
sub esp, 0x8c
mov eax, dword [0x76a02c]
xor eax, ebp
mov dword [ebp - 0x10], eax
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov edi, ecx
mov eax, dword [ebp + 8]
lea edx, [ebp - 0x94]
push edx
mov ecx, dword [eax + 0x108]
mov eax, dword [ecx]
call dword [eax + 4]
mov ecx, eax
mov dword [ebp - 4], 0
call fcn.00470010
push eax
lea ecx, [ebp - 0x98]
call fcn.00429350
lea ecx, [ebp - 0x94]
mov byte [ebp - 4], 2
call fcn.0046fdc0
mov eax, dword [ebp - 0x98]
mov edx, str.sysclosebutton
mov ecx, eax
nop word [eax + eax]
mov si, word [ecx]
cmp si, word [edx]
jne 0x461ce6
test si, si
je 0x461ce2
mov si, word [ecx + 2]
cmp si, word [edx + 2]
jne 0x461ce6
add ecx, 4
add edx, 4
test si, si
jne 0x461cc0
xor ecx, ecx
jmp 0x461ceb
sbb ecx, ecx
or ecx, 1
test ecx, ecx
je 0x461eb2
mov edx, str.sysminbutton
mov ecx, eax
nop word [eax + eax]
mov si, word [ecx]
cmp si, word [edx]
jne 0x461d26
test si, si
je 0x461d22
mov si, word [ecx + 2]
cmp si, word [edx + 2]
jne 0x461d26
add ecx, 4
add edx, 4
test si, si
jne 0x461d00
xor ecx, ecx
jmp 0x461d2b
sbb ecx, ecx
or ecx, 1
test ecx, ecx
jne 0x461d46
push ecx
push 0xf020
push 0x112
mov ecx, edi
call fcn.004cbbd0
jmp 0x461ebc
mov edx, str.unist_btn
mov ecx, eax
nop dword [eax]
mov si, word [ecx]
cmp si, word [edx]
jne 0x461d76
test si, si
je 0x461d72
mov si, word [ecx + 2]
cmp si, word [edx + 2]
jne 0x461d76
add ecx, 4
add edx, 4
test si, si
jne 0x461d50
xor ecx, ecx
jmp 0x461d7b
sbb ecx, ecx
or ecx, 1
test ecx, ecx
jne 0x461e37
mov ecx, dword [edi + 0x798]
push 1
mov eax, dword [ecx]
call dword [eax + 0x21c]
mov ecx, dword [edi + 0x79c]
push 0
mov eax, dword [ecx]
call dword [eax + 0x118]
push 0
push 0x775b64
push 0x7759cc
push 0
push str.unist_vlayout_bk
lea ecx, [edi + 0x34]
call fcn.00479ce0
push eax
call fcn.005325ba
add esp, 0x14
test eax, eax
je 0x461dd7
push str.uninstuninst_bk2.png
mov ecx, eax
call fcn.00475f50
push 0
mov ecx, edi
call fcn.00461b60
push 0x201
lea ecx, [edi + 0x34]
call fcn.0047acc0
push eax
lea ecx, [edi + 0x34]
call fcn.0047b280
push 0x14
push 0x201
lea ecx, [edi + 0x34]
call fcn.0047acc0
push eax
lea ecx, [edi + 0x34]
call fcn.004838c0
push 0
push 0
push edi
push 0x461ab0
push 0
push 0
mov dword [edi + 0x7b8], 0
call dword [sym.imp.KERNEL32.dll_CreateThread]
mov dword [edi + 0x7bc], eax
jmp 0x461ebc
mov edx, str.unist_done_btn
mov ecx, eax
nop
mov si, word [ecx]
cmp si, word [edx]
jne 0x461e66
test si, si
je 0x461e62
mov si, word [ecx + 2]
cmp si, word [edx + 2]
jne 0x461e66
add ecx, 4
add edx, 4
test si, si
jne 0x461e40
xor ecx, ecx
jmp 0x461e6b
sbb ecx, ecx
or ecx, 1
test ecx, ecx
je 0x461eb2
mov edx, str.uninst_last_btn
mov ecx, eax
mov si, word [ecx]
cmp si, word [edx]
jne 0x461e9c
test si, si
je 0x461e98
mov si, word [ecx + 2]
cmp si, word [edx + 2]
jne 0x461e9c
add ecx, 4
add edx, 4
test si, si
jne 0x461e76
xor ecx, ecx
jmp 0x461ea1
sbb ecx, ecx
or ecx, 1
test ecx, ecx
jne 0x461ec2
push str.http:__win.55kantu.com_
call fcn.0051598c
add esp, 4
mov eax, dword [edi]
mov ecx, edi
call dword [eax + 0x8c]
mov eax, dword [ebp - 0x98]
lea edx, [eax - 0x10]
mov dword [ebp - 4], 0xffffffff
or eax, 0xffffffff
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x461ee1
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
call fcn.00468d3e
mov esp, ebp
pop ebp
ret 4