Function at 0x47c840
Capabilities:
Check if file exists
Create process on windows
Get file attributes
Resume thread

Disassembly:
push ebp
mov ebp, esp
and esp, 0xfffffff8
sub esp, 0x26c
mov eax, dword [0x7b2214]
xor eax, esp
mov dword [esp + 0x268], eax
push ebx
mov ebx, dword [ebp + 8]
mov eax, dword [ebx + 8]
push esi
push edi
mov edi, ecx
lea ecx, [ebx + 8]
mov dword [esp + 0x10], edi
call dword [eax + 0x20]
cmp eax, 0x2710
jne 0x47cfc0
mov eax, dword [ebx + 0x18]
test eax, eax
je 0x47d02c
mov edx, str.btn_main_close
mov ecx, eax
nop dword [eax]
mov si, word [ecx]
cmp si, word [edx]
jne 0x47c8b6
test si, si
je 0x47c8b2
mov si, word [ecx + 2]
cmp si, word [edx + 2]
jne 0x47c8b6
add ecx, 4
add edx, 4
test si, si
jne 0x47c890
xor ecx, ecx
jmp 0x47c8bb
sbb ecx, ecx
or ecx, 1
test ecx, ecx
jne 0x47c8e9
mov ecx, edi
mov byte [ebx + 0xc], 0
call fcn.0047d630
xor eax, eax
cmp byte [ebx + 0xc], al
sete al
pop edi
pop esi
pop ebx
mov ecx, dword [esp + 0x268]
xor ecx, esp
call fcn.00629f1d
mov esp, ebp
pop ebp
ret 4
test eax, eax
je 0x47d02c
mov edx, str.link_page_install_protocol_link
mov ecx, eax
mov si, word [ecx]
cmp si, word [edx]
jne 0x47c91e
test si, si
je 0x47c91a
mov si, word [ecx + 2]
cmp si, word [edx + 2]
jne 0x47c91e
add ecx, 4
add edx, 4
test si, si
jne 0x47c8f8
xor ecx, ecx
jmp 0x47c923
sbb ecx, ecx
or ecx, 1
test ecx, ecx
jne 0x47c9ab
push 0xffffffffffffffff
mov byte [ebx + 0xc], cl
lea ecx, [edi + 4]
push str.tab_main
call fcn.00480a00
mov esi, eax
test esi, esi
je 0x47c98c
sub esp, 8
lea ecx, [edi + 4]
call fcn.00480cc0
mov edi, eax
test edi, edi
je 0x47c98c
push ecx
push 1
push str.page_install_procotol
mov ecx, esi
call fcn.004a8a29
push eax
push 1
push str.page_install
mov ecx, esi
call fcn.004a8a29
push eax
mov ecx, edi
call fcn.00424320
test eax, eax
je 0x47c98c
mov edi, dword [esp + 0x10]
mov dword [edi + 0x46c], 1
xor eax, eax
cmp byte [ebx + 0xc], al
sete al
pop edi
pop esi
pop ebx
mov ecx, dword [esp + 0x268]
xor ecx, esp
call fcn.00629f1d
mov esp, ebp
pop ebp
ret 4
test eax, eax
je 0x47d02c
mov edx, str.btn_page_continue_setup
mov ecx, eax
nop word [eax + eax]
mov si, word [ecx]
cmp si, word [edx]
jne 0x47c9e6
test si, si
je 0x47c9e2
mov si, word [ecx + 2]
cmp si, word [edx + 2]
jne 0x47c9e6
add ecx, 4
add edx, 4
test si, si
jne 0x47c9c0
xor ecx, ecx
jmp 0x47c9eb
sbb ecx, ecx
or ecx, 1
test ecx, ecx
jne 0x47ca38
push 0xffffffffffffffff
mov byte [ebx + 0xc], cl
lea ecx, [edi + 4]
push str.tab_main
call fcn.00480a00
mov esi, eax
test esi, esi
je 0x47c98c
sub esp, 8
lea ecx, [edi + 4]
call fcn.00480cc0
mov edi, eax
test edi, edi
je 0x47c98c
push ecx
push 1
push str.page_install
mov ecx, esi
call fcn.004a8a29
push eax
push 1
push str.page_install_procotol
jmp 0x47c96b
test eax, eax
je 0x47d02c
mov edx, str.link_page_install_custom
mov ecx, eax
mov si, word [ecx]
cmp si, word [edx]
jne 0x47ca6d
test si, si
je 0x47ca69
mov si, word [ecx + 2]
cmp si, word [edx + 2]
jne 0x47ca6d
add ecx, 4
add edx, 4
test si, si
jne 0x47ca47
xor ecx, ecx
jmp 0x47ca72
sbb ecx, ecx
or ecx, 1
test ecx, ecx
jne 0x47caa3
push 0xffffffffffffffff
mov byte [ebx + 0xc], cl
lea ecx, [edi + 4]
push str.tab_install_info
call fcn.00480a00
test eax, eax
je 0x47c98c
push 1
push str.page_install_custom
mov ecx, eax
call fcn.004aa38d
jmp 0x47c98c
test eax, eax
je 0x47d02c
mov edx, str.link_page_install_back
mov ecx, eax
mov si, word [ecx]
cmp si, word [edx]
jne 0x47cad8
test si, si
je 0x47cad4
mov si, word [ecx + 2]
cmp si, word [edx + 2]
jne 0x47cad8
add ecx, 4
add edx, 4
test si, si
jne 0x47cab2
xor ecx, ecx
jmp 0x47cadd
sbb ecx, ecx
or ecx, 1
test ecx, ecx
jne 0x47cb0e
push 0xffffffffffffffff
mov byte [ebx + 0xc], cl
lea ecx, [edi + 4]
push str.tab_install_info
call fcn.00480a00
test eax, eax
je 0x47c98c
push 1
push str.page_install_quick
mov ecx, eax
call fcn.004aa38d
jmp 0x47c98c
test eax, eax
je 0x47d02c
mov edx, str.btn_page_install_choose
mov ecx, eax
nop dword [eax]
mov si, word [ecx]
cmp si, word [edx]
jne 0x47cb46
test si, si
je 0x47cb42
mov si, word [ecx + 2]
cmp si, word [edx + 2]
jne 0x47cb46
add ecx, 4
add edx, 4
test si, si
jne 0x47cb20
xor ecx, ecx
jmp 0x47cb4b
sbb ecx, ecx
or ecx, 1
test ecx, ecx
jne 0x47cb5e
mov byte [ebx + 0xc], cl
mov ecx, edi
call fcn.0047d9b0
jmp 0x47c98c
test eax, eax
je 0x47d02c
mov edx, str.btn_page_install_quick
mov ecx, eax
nop dword [eax]
mov si, word [ecx]
cmp si, word [edx]
jne 0x47cb96
test si, si
je 0x47cb92
mov si, word [ecx + 2]
cmp si, word [edx + 2]
jne 0x47cb96
add ecx, 4
add edx, 4
test si, si
jne 0x47cb70
xor ecx, ecx
jmp 0x47cb9b
sbb ecx, ecx
or ecx, 1
test ecx, ecx
jne 0x47cc9c
lea eax, [esp + 0x50]
mov byte [ebx + 0xc], cl
push eax
call fcn.0047f530
mov esi, eax
add edi, 0x470
cmp edi, esi
je 0x47cbe6
mov ecx, edi
call fcn.00432e40
movups xmm0, xmmword [esi]
xor eax, eax
movups xmmword [edi], xmm0
movq xmm0, qword [esi + 0x10]
movq qword [edi + 0x10], xmm0
mov dword [esi + 0x10], 0
mov dword [esi + 0x14], 7
mov word [esi], ax
mov edx, dword [esp + 0x64]
cmp edx, 8
jb 0x47cc22
mov ecx, dword [esp + 0x50]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x47cc18
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x47d045
push edx
push ecx
call fcn.0062a23d
add esp, 8
mov edi, dword [esp + 0x10]
push 0xffffffffffffffff
push str.tab_main
lea ecx, [edi + 4]
call fcn.00480a00
mov esi, eax
test esi, esi
je 0x47c98c
sub esp, 8
lea ecx, [edi + 4]
call fcn.00480cc0
mov edi, eax
test edi, edi
je 0x47c98c
push ecx
push 1
push str.page_install_ing
mov ecx, esi
call fcn.004a8a29
push eax
push 1
push str.page_install
mov ecx, esi
call fcn.004a8a29
push eax
mov ecx, edi
call fcn.00424320
test eax, eax
je 0x47c98c
mov eax, dword [esp + 0x10]
mov ecx, eax
mov dword [eax + 0x46c], 2
call fcn.0047fa10
jmp 0x47c98c
test eax, eax
je 0x47d02c
mov edx, str.btn_page_install_custom
mov ecx, eax
nop dword [eax + eax]
mov si, word [ecx]
cmp si, word [edx]
jne 0x47ccd6
test si, si
je 0x47ccd2
mov si, word [ecx + 2]
cmp si, word [edx + 2]
jne 0x47ccd6
add ecx, 4
add edx, 4
test si, si
jne 0x47ccb0
xor ecx, ecx
jmp 0x47ccdb
sbb ecx, ecx
or ecx, 1
test ecx, ecx
jne 0x47cce7
mov byte [ebx + 0xc], cl
jmp 0x47cc26
test eax, eax
je 0x47d02c
mov edx, str.btn_main_message_close
mov ecx, eax
mov si, word [ecx]
cmp si, word [edx]
jne 0x47cd1c
test si, si
je 0x47cd18
mov si, word [ecx + 2]
cmp si, word [edx + 2]
jne 0x47cd1c
add ecx, 4
add edx, 4
test si, si
jne 0x47ccf6
xor ecx, ecx
jmp 0x47cd21
sbb ecx, ecx
or ecx, 1
test ecx, ecx
je 0x47c8bf
test eax, eax
je 0x47d02c
mov edx, str.btn_main_message_ok
mov ecx, eax
mov si, word [ecx]
cmp si, word [edx]
jne 0x47cd5e
test si, si
je 0x47cd5a
mov si, word [ecx + 2]
cmp si, word [edx + 2]
jne 0x47cd5e
add ecx, 4
add edx, 4
test si, si
jne 0x47cd38
xor ecx, ecx
jmp 0x47cd63
sbb ecx, ecx
or ecx, 1
test ecx, ecx
je 0x47c8bf
test eax, eax
je 0x47d02c
mov edx, str.btn_exit_ok
mov ecx, eax
nop word [eax + eax]
mov si, word [ecx]
cmp si, word [edx]
jne 0x47cda6
test si, si
je 0x47cda2
mov si, word [ecx + 2]
cmp si, word [edx + 2]
jne 0x47cda6
add ecx, 4
add edx, 4
test si, si
jne 0x47cd80
xor ecx, ecx
jmp 0x47cdab
sbb ecx, ecx
or ecx, 1
test ecx, ecx
jne 0x47cdee
mov byte [ebx + 0xc], cl
lea ecx, [edi + 0x3a0]
mov dword [edi + 0x4c0], 1
mov eax, dword [ecx]
push 0
push 0
push 0xa
mov dword [ecx + 8], 1
call dword [eax + 4]
mov eax, dword [edi + 0x448]
test eax, eax
je 0x47c98c
push eax
call dword [sym.imp.KERNEL32.dll_ResumeThread]
jmp 0x47c98c
test eax, eax
je 0x47d02c
mov edx, str.btn_exit_channel
mov ecx, eax
nop dword [eax]
mov si, word [ecx]
cmp si, word [edx]
jne 0x47ce26
test si, si
je 0x47ce22
mov si, word [ecx + 2]
cmp si, word [edx + 2]
jne 0x47ce26
add ecx, 4
add edx, 4
test si, si
jne 0x47ce00
xor ecx, ecx
jmp 0x47ce2b
sbb ecx, ecx
or ecx, 1
test ecx, ecx
jne 0x47ce3f
mov ecx, edi
mov byte [ebx + 0xc], 0
call fcn.0047e060
jmp 0x47c98c
test eax, eax
je 0x47d02c
mov edx, str.btn_exit_title_close
mov ecx, eax
nop
mov si, word [ecx]
cmp si, word [edx]
jne 0x47ce76
test si, si
je 0x47ce72
mov si, word [ecx + 2]
cmp si, word [edx + 2]
jne 0x47ce76
add ecx, 4
add edx, 4
test si, si
jne 0x47ce50
xor ecx, ecx
jmp 0x47ce7b
sbb ecx, ecx
or ecx, 1
test ecx, ecx
je 0x47ce2f
test eax, eax
je 0x47d02c
mov ecx, str.btn_page_install_complete_start_using
nop dword [eax]
mov dx, word [eax]
cmp dx, word [ecx]
jne 0x47ceb6
test dx, dx
je 0x47ceb2
mov dx, word [eax + 2]
cmp dx, word [ecx + 2]
jne 0x47ceb6
add eax, 4
add ecx, 4
test dx, dx
jne 0x47ce90
xor eax, eax
jmp 0x47cebb
sbb eax, eax
or eax, 1
test eax, eax
jne 0x47d02c
push 0x208
push eax
mov byte [ebx + 0xc], al
lea eax, [esp + 0x70]
push eax
call fcn.00668940
push 0x3c
lea eax, [esp + 0x24]
push 0
push eax
call fcn.00668940
lea eax, [edi + 0x470]
add esp, 0x18
cmp dword [eax + 0x14], 8
jb 0x47cef5
mov eax, dword [eax]
push 0x773368
push eax
push str._s_s
push 0x103
lea eax, [esp + 0x78]
push 0x103
push eax
call fcn.00462c90
add esp, 0x18
lea eax, [esp + 0x68]
push eax
call dword [sym.imp.KERNEL32.dll_GetFileAttributesW]
cmp eax, 0xffffffff
lea eax, [esp + 0x68]
jne 0x47cf4a
push eax
push 0x139
push str.d:workcodegit_saltbox_src_scinstallermaindlg.cpp
push str._s__d_:__CMainDlg::OnStartUseClick__file_not_exist_:__S
push 0
call fcn.0043f550
add esp, 0x14
jmp 0x47c98c
mov dword [esp + 0x24], eax
lea eax, [esp + 0x14]
push eax
mov dword [esp + 0x18], 0x3c
mov dword [esp + 0x1c], 0x500
mov dword [esp + 0x24], str.open
mov dword [esp + 0x34], 1
mov dword [esp + 0x2c], 0x76a24c
call dword [sym.imp.SHELL32.dll_ShellExecuteExW]
test eax, eax
jne 0x47cfaf
call dword [sym.imp.KERNEL32.dll_GetLastError]
push eax
lea eax, [esp + 0x6c]
push eax
push 0x147
push str.d:workcodegit_saltbox_src_scinstallermaindlg.cpp
push str._s__d_:__CMainDlg::OnStartUseClick__ShellExecuteExW_failed_:__S___d
push 0
call fcn.0043f550
add esp, 0x18
jmp 0x47c98c
push dword [edi + 0x248]
call dword [sym.imp.USER32.dll_DestroyWindow]
jmp 0x47c98c
cmp eax, 0x989680
jne 0x47d02c
mov eax, dword [ebx + 0x18]
test eax, eax
je 0x47d02c
mov ecx, str.turn3d
mov dx, word [eax]
cmp dx, word [ecx]
jne 0x47cff9
test dx, dx
je 0x47cff5
mov dx, word [eax + 2]
cmp dx, word [ecx + 2]
jne 0x47cff9
add eax, 4
add ecx, 4
test dx, dx
jne 0x47cfd3
xor eax, eax
jmp 0x47cffe
sbb eax, eax
or eax, 1
test eax, eax
jne 0x47d02c
push ecx
mov ecx, edi
mov byte [ebx + 0xc], al
call fcn.0047d680
xor eax, eax
cmp byte [ebx + 0xc], al
sete al
pop edi
pop esi
pop ebx
mov ecx, dword [esp + 0x268]
xor ecx, esp
call fcn.00629f1d
mov esp, ebp
pop ebp
ret 4
mov ecx, dword [esp + 0x274]
xor eax, eax
pop edi
pop esi
pop ebx
xor ecx, esp
call fcn.00629f1d
mov esp, ebp
pop ebp
ret 4
call fcn.0068843e
int3