Function at 0x47a2bf
Capabilities:
Create process on windows

Disassembly:
push 0x14
mov eax, 0x4a2e2a
call fcn.004878f8
cmp dword [0x4e0da8], 0
mov edi, 0x4b3f80
je 0x47a323
push str.OpenUrlByUserToken
push 0x4b3fb8
push str.KDubaPushPop::_OpenUrlByCmpp
push 0x4b3f84
lea eax, [ebp - 0x10]
push eax
push edi
mov dword [ebp - 0x10], 0x134
call fcn.00422cfe
call fcn.00422d46
call fcn.00422d6f
call fcn.00422d46
call fcn.00422d46
call fcn.00422d46
call fcn.00422d46
mov esi, eax
call fcn.00422d9a
mov esi, dword [ebp + 0xc]
mov eax, dword [esi]
cmp dword [eax - 0xc], 0
jne 0x47a338
xor eax, eax
call fcn.004879d0
ret 8
xor ebx, ebx
lea ecx, [ebp - 0x14]
call fcn.00466e8b
and dword [ebp - 4], ebx
mov eax, dword [0x4e0530]
mov ecx, 0x4e0530
call dword [eax + 0xc]
add eax, 0x10
mov dword [ebp - 0x10], eax
mov byte [ebp - 4], 1
push dword [esi]
lea eax, [ebp - 0x10]
push str._url:__s_
call fcn.00401a22
cmp dword [0x4e0da8], 0
pop ecx
pop ecx
mov ebx, str.KDubaPushPop::_OpenUrlByCmpp
je 0x47a42f
push dword [ebp - 0x10]
lea eax, [ebp - 0x18]
push str.OpenUrlByUserToken::
push 0x4b3fb8
push ebx
push 0x4b3f84
push eax
push edi
push ecx
mov dword [ebp - 0x18], 0x13e
call fcn.00422cfe
add esp, 4
call fcn.00422d46
call fcn.00422d6f
call fcn.00422d46
call fcn.00422d46
call fcn.00422d46
call fcn.00422d46
call fcn.00422d46
mov esi, eax
call fcn.00422d9a
cmp dword [0x4e0da8], 0
je 0x47a42c
push dword [ebp - 0x14]
lea eax, [ebp - 0x18]
push str.OpenUrlByUserToken::
push 0x4b3fb8
push ebx
push 0x4b3f84
push eax
push edi
push ecx
mov dword [ebp - 0x18], 0x13f
call fcn.00422cfe
add esp, 4
call fcn.00422d46
call fcn.00422d6f
call fcn.00422d46
call fcn.00422d46
call fcn.00422d46
call fcn.00422d46
call fcn.00422d46
mov esi, eax
call fcn.00422d9a
mov esi, dword [ebp + 0xc]
mov edx, dword [ebp - 0x10]
mov ecx, dword [ebp - 0x14]
call fcn.00468052
xor ecx, ecx
cmp eax, ecx
je 0x47a59d
mov eax, dword [esi]
push 1
push ecx
push ecx
push eax
push str.open
push ecx
call dword [sym.imp.SHELL32.dll_ShellExecuteW]
cmp dword [0x4e0da8], 0
cdq
mov dword [ebp - 0x20], eax
mov dword [ebp - 0x1c], edx
je 0x47a4e1
test edx, edx
jl 0x47a478
jg 0x47a472
cmp eax, 0x20
jbe 0x47a478
mov byte [ebp + 0xf], 1
jmp 0x47a47c
mov byte [ebp + 0xf], 0
mov esi, dword [esi]
lea eax, [ebp + 0xf]
push eax
push str.___result:
push esi
push str.ShellExecute_
push 0x4b3fb8
push ebx
push 0x4b3f84
lea eax, [ebp - 0x18]
push eax
push edi
push ecx
mov dword [ebp - 0x18], 0x145
call fcn.00422cfe
add esp, 4
call fcn.00422d46
call fcn.00422d6f
call fcn.00422d46
call fcn.00422d46
call fcn.00422d46
call fcn.00422d46
call fcn.00422d46
call fcn.00422d46
call fcn.00431707
mov esi, eax
call fcn.00422d9a
cmp dword [ebp - 0x1c], 0
jl 0x47a515
jg 0x47a4ef
cmp dword [ebp - 0x20], 0x20
jbe 0x47a515
push 0x4ae5c8
lea eax, [ebp - 0x18]
push eax
call fcn.00405f0e
push str.shell
lea eax, [ebp + 0xc]
push eax
mov byte [ebp - 4], 2
call fcn.00405f0e
mov byte [ebp - 4], 3
jmp 0x47a539
push str.fail
lea eax, [ebp - 0x18]
push eax
call fcn.00405f0e
push str.shell
lea eax, [ebp + 0xc]
push eax
mov byte [ebp - 4], 4
call fcn.00405f0e
mov byte [ebp - 4], 5
lea eax, [ebp - 0x18]
push eax
push 0
lea eax, [ebp + 0xc]
push eax
mov eax, dword [ebp + 8]
lea ecx, [eax + 0x418]
push ecx
add eax, 0x6ec
push eax
call fcn.0047bf7e
mov eax, dword [ebp + 0xc]
add eax, 0xfffffff0
call fcn.004012f9
mov eax, dword [ebp - 0x18]
add eax, 0xfffffff0
call fcn.004012f9
xor esi, esi
cmp dword [ebp - 0x1c], esi
jl 0x47a580
jg 0x47a57d
cmp dword [ebp - 0x20], 0x20
jbe 0x47a580
xor esi, esi
inc esi
mov eax, dword [ebp - 0x10]
add eax, 0xfffffff0
call fcn.004012f9
mov eax, dword [ebp - 0x14]
add eax, 0xfffffff0
call fcn.004012f9
mov eax, esi
jmp 0x47a330
push 0x4ae5c8
lea eax, [ebp - 0x18]
push eax
call fcn.00405f0e
push str.cmpp
lea eax, [ebp + 0xc]
push eax
mov byte [ebp - 4], 6
call fcn.00405f0e
lea eax, [ebp - 0x18]
push eax
push 0
lea eax, [ebp + 0xc]
push eax
mov eax, dword [ebp + 8]
lea ecx, [eax + 0x418]
push ecx
add eax, 0x6ec
push eax
mov byte [ebp - 4], 7
call fcn.0047bf7e
mov eax, dword [ebp + 0xc]
add eax, 0xfffffff0
call fcn.004012f9
mov eax, dword [ebp - 0x18]
add eax, 0xfffffff0
call fcn.004012f9
jmp 0x47a57d