Function at 0x47ac4b
Capabilities:
Create process on windows
Create thread

Disassembly:
push 0x680
mov eax, 0x5e2095
call fcn.00592017
mov bl, dl
push 7
sub esp, 0x18
mov ecx, esp
push 0x6284b4
call fcn.0040b0d5
lea ecx, [ebp - 0x688]
call fcn.0049da59
and dword [ebp - 4], 0
lea ecx, [ebp - 0x28]
push str.main
call fcn.0040b0d5
lea eax, [ebp - 0x28]
mov byte [ebp - 4], 1
push eax
call fcn.00489117
lea ecx, [ebp - 0x28]
mov byte [ebp - 4], 0
call fcn.0040b67b
test bl, bl
je 0x47acb1
lea ecx, [ebp - 0x688]
call fcn.0049ddd2
lea eax, [ebp + 8]
push eax
lea ecx, [ebp - 0x688]
call fcn.0049ddda
call fcn.004c3540
xor ebx, ebx
test eax, eax
jne 0x47ace9
lea eax, [ebp - 0x68c]
mov dword [ebp - 0x68c], ebx
push eax
push ebx
push ebx
push 0x47964d
push ebx
push ebx
call fcn.005b953f
add esp, 0x18
sub esp, 0x18
lea eax, [ebp - 0x688]
mov ecx, esp
mov dword [0x6d65ec], eax
mov esi, str.chrome.dll
push esi
call fcn.0040b0d5
lea ecx, [ebp - 0x58]
call fcn.004c1243
add esp, 0x18
mov byte [ebp - 4], 2
call fcn.004cd099
mov edi, str.ShowWallPaperMainWnd
test al, al
je 0x47ad9f
xor cl, cl
call fcn.004cc2dc
test al, al
je 0x47ad35
call fcn.004cd099
test al, al
je 0x47ad9f
call fcn.00426bb9
cmp eax, 5
je 0x47ad64
push 0x2ef
push edi
push str.__s__d___start_DownLoad360seImplComm
call fcn.0040a649
add esp, 0xc
call fcn.004cc6ab
test al, al
je 0x47ad64
call fcn.004cd099
test al, al
je 0x47ad9f
call fcn.0048f6ad
push 1
push 0x634988
push 0x64705c
push ebx
call dword [sym.imp.USER32.dll_MessageBoxW]
cmp eax, 1
jne 0x47aecc
push 5
push ebx
push ebx
push str.https:__bbs.360.cn_forum.php_modforumdisplayfid7627
push 0x62f200
push ebx
call dword [sym.imp.SHELL32.dll_ShellExecuteW]
jmp 0x47aecc
sub esp, 0x18
mov ecx, esp
push esi
call fcn.0040b0d5
lea ecx, [ebp - 0x28]
call fcn.004c1243
add esp, 0x18
cmp dword [eax + 0x14], 8
jb 0x47adbd
mov eax, dword [eax]
push eax
call fcn.004302c4
pop ecx
lea ecx, [ebp - 0x28]
mov esi, eax
call fcn.0040b67b
test esi, esi
je 0x47aecc
push 8
push ebx
sub esp, 0x18
mov ecx, esp
push str.chrome.dll
call fcn.0040b0d5
lea ecx, [ebp - 0x28]
call fcn.004c1243
add esp, 0x18
cmp dword [eax + 0x14], 8
jb 0x47adfb
mov eax, dword [eax]
push eax
call dword [sym.imp.KERNEL32.dll_LoadLibraryExW]
lea ecx, [ebp - 0x28]
mov esi, eax
call fcn.0040b67b
sub esp, 0x18
mov ecx, esp
push str.chrome.dll
call fcn.0040b0d5
lea ecx, [ebp - 0x40]
call fcn.004c1243
add esp, 0x18
mov byte [ebp - 4], 3
cmp dword [eax + 0x14], 8
jb 0x47ae32
mov eax, dword [eax]
push eax
push 0x301
push edi
push str.__s__d___chrome.dll__s
call fcn.0040a649
add esp, 0x10
mov byte [ebp - 4], 2
lea ecx, [ebp - 0x40]
call fcn.0040b67b
test esi, esi
je 0x47aeb9
push str.ChromeShell
push esi
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
mov esi, eax
test esi, esi
jne 0x47ae8d
push 0x306
push edi
push str.__s__d___chrome_main__null
call fcn.0040a649
add esp, 0xc
push ebx
push ebx
push 0x10
push dword [ebp - 0x680]
call dword [sym.imp.USER32.dll_PostMessageW]
jmp 0x47aecc
push str._hb:1
lea ecx, [ebp - 0x28]
call fcn.0040b0d5
lea ecx, [ebp - 0x28]
call fcn.004c51cf
lea ecx, [ebp - 0x28]
call fcn.0040b67b
push 0x6d5dc8
push dword [0x6cf9f4]
call esi
pop ecx
pop ecx
push 0x30d
push edi
push str.__s__d___exit
call fcn.0040a649
add esp, 0xc
lea ecx, [ebp - 0x58]
call fcn.0040b67b
lea ecx, [ebp - 0x688]
call fcn.0049dc5f
call fcn.00591fc1
ret