Function at 0x47b6bf
Capabilities:
Create process on windows
Create thread
Hide graphical window

Disassembly:
push 0x680
mov eax, 0x5e3cce
call fcn.00593b07
mov bh, dl
and dword [ebp - 0x68c], 0
push 7
sub esp, 0x18
mov ecx, esp
push 0x62a4ac
call fcn.0040b0d5
lea ecx, [ebp - 0x688]
call fcn.0049e712
and dword [ebp - 4], 0
lea ecx, [ebp - 0x28]
push str.main
call fcn.0040b0d5
lea eax, [ebp - 0x28]
mov byte [ebp - 4], 1
push eax
call fcn.00489ca3
lea ecx, [ebp - 0x28]
mov byte [ebp - 4], 0
call fcn.0040b67e
push str.operate
lea ecx, [ebp - 0x28]
call fcn.004045aa
lea eax, [ebp - 0x28]
mov byte [ebp - 4], 2
push eax
mov dword [ebp - 0x68c], 1
call fcn.005314e0
mov ecx, eax
call fcn.00531990
test al, al
je 0x47b759
call fcn.004da6a0
test al, al
je 0x47b759
mov bl, 1
jmp 0x47b75b
xor bl, bl
and dword [ebp - 4], 0
lea ecx, [ebp - 0x28]
call fcn.00404812
test bl, bl
je 0x47b779
push 0
push dword [ebp - 0x680]
call dword [sym.imp.USER32.dll_ShowWindow]
test bh, bh
je 0x47b788
lea ecx, [ebp - 0x688]
call fcn.0049ea8b
lea eax, [ebp + 8]
push eax
lea ecx, [ebp - 0x688]
call fcn.0049ea93
call fcn.004c4c77
test eax, eax
jne 0x47b7c4
test bl, bl
jne 0x47b7c4
xor ecx, ecx
lea eax, [ebp - 0x68c]
push eax
push ecx
push ecx
push 0x47a0c1
push ecx
push ecx
mov dword [ebp - 0x68c], ecx
call fcn.005bb02f
add esp, 0x18
sub esp, 0x18
lea eax, [ebp - 0x688]
mov ecx, esp
mov dword [0x6d963c], eax
mov esi, str.chrome.dll
push esi
call fcn.0040b0d5
lea ecx, [ebp - 0x58]
call fcn.004c297a
add esp, 0x18
mov byte [ebp - 4], 3
call fcn.004ceb61
mov edi, str.ShowWallPaperMainWnd
test al, al
je 0x47b880
xor cl, cl
call fcn.004cdda4
test al, al
je 0x47b814
call fcn.004ceb61
test al, al
je 0x47b880
call fcn.00426bbc
cmp eax, 5
je 0x47b843
push 0x2f3
push edi
push str.__s__d___start_DownLoad360seImplComm
call fcn.0040a649
add esp, 0xc
call fcn.004ce173
test al, al
je 0x47b843
call fcn.004ceb61
test al, al
je 0x47b880
call fcn.00490239
push 1
push 0x636978
push 0x64966c
xor ebx, ebx
push ebx
call dword [sym.imp.USER32.dll_MessageBoxW]
cmp eax, 1
jne 0x47b9d0
push 5
push ebx
push ebx
push str.https:__bbs.360.cn_forum.php_modforumdisplayfid7627
push 0x6311f8
push ebx
call dword [sym.imp.SHELL32.dll_ShellExecuteW]
jmp 0x47b9d0
sub esp, 0x18
mov ecx, esp
push esi
call fcn.0040b0d5
lea ecx, [ebp - 0x40]
call fcn.004c297a
add esp, 0x18
cmp dword [eax + 0x14], 8
jb 0x47b89e
mov eax, dword [eax]
push eax
call fcn.004302c7
pop ecx
lea ecx, [ebp - 0x40]
mov esi, eax
call fcn.0040b67e
test esi, esi
je 0x47b9d0
push 8
push 0
sub esp, 0x18
mov ecx, esp
push str.chrome.dll
call fcn.0040b0d5
lea ecx, [ebp - 0x40]
call fcn.004c297a
add esp, 0x18
cmp dword [eax + 0x14], 8
jb 0x47b8dd
mov eax, dword [eax]
push eax
call dword [sym.imp.KERNEL32.dll_LoadLibraryExW]
lea ecx, [ebp - 0x40]
mov esi, eax
call fcn.0040b67e
sub esp, 0x18
mov ecx, esp
push str.chrome.dll
call fcn.0040b0d5
lea ecx, [ebp - 0x28]
call fcn.004c297a
add esp, 0x18
mov byte [ebp - 4], 4
cmp dword [eax + 0x14], 8
jb 0x47b914
mov eax, dword [eax]
push eax
push 0x305
push edi
push str.__s__d___chrome.dll__s
call fcn.0040a649
add esp, 0x10
mov byte [ebp - 4], 3
lea ecx, [ebp - 0x28]
call fcn.0040b67e
test esi, esi
je 0x47b9bd
push str.ChromeShell
push esi
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
mov esi, eax
test esi, esi
jne 0x47b973
push 0x30a
push edi
push str.__s__d___chrome_main__null
call fcn.0040a649
add esp, 0xc
push esi
push esi
push 0x10
push dword [ebp - 0x680]
call dword [sym.imp.USER32.dll_PostMessageW]
jmp 0x47b9d0
test bl, bl
je 0x47b991
push 0x649710
lea ecx, [ebp - 0x28]
call fcn.0040b0d5
lea ecx, [ebp - 0x28]
call fcn.004c6c97
lea ecx, [ebp - 0x28]
jmp 0x47b9a9
push str._hb:1
lea ecx, [ebp - 0x40]
call fcn.0040b0d5
lea ecx, [ebp - 0x40]
call fcn.004c6c97
lea ecx, [ebp - 0x40]
call fcn.0040b67e
push 0x6d8e18
push dword [0x6d2a44]
call esi
pop ecx
pop ecx
push 0x314
push edi
push str.__s__d___exit
call fcn.0040a649
add esp, 0xc
lea ecx, [ebp - 0x58]
call fcn.0040b67e
lea ecx, [ebp - 0x688]
call fcn.0049e918
call fcn.00593ab1
ret