Function at 0x476c43
Capabilities:
Check if file exists

Disassembly:
push 0x84
mov eax, 0x5e1a49
call fcn.00592017
lea ecx, [ebp - 0x44]
call fcn.004251b0
and dword [ebp - 4], 0
mov esi, str.YooWallpaperWallpaper.exe
push esi
call fcn.005b93d0
pop ecx
push eax
push esi
lea ecx, [ebp - 0x44]
call fcn.0040b220
cmp dword [ebp - 0x30], 8
lea eax, [ebp - 0x44]
cmovae eax, dword [ebp - 0x44]
push eax
call dword [sym.imp.SHLWAPI.dll_PathFileExistsW]
xor ebx, ebx
inc ebx
test eax, eax
je 0x476d22
cmp dword [ebp - 0x30], 8
lea eax, [ebp - 0x44]
cmovae eax, dword [ebp - 0x44]
push eax
call fcn.004302c4
pop ecx
test eax, eax
je 0x476d22
push str.https:__dd.browser.360.cn_static_a_1286.3708.gif
lea ecx, [ebp - 0x2c]
call fcn.0040b0d5
push ebx
push ebx
xor dl, dl
mov byte [ebp - 4], bl
lea ecx, [ebp - 0x2c]
call fcn.004c4bab
pop ecx
pop ecx
push str.Wallpaper.exe
lea ecx, [ebp - 0x5c]
call fcn.0040b0d5
lea ecx, [ebp - 0x5c]
mov byte [ebp - 4], 2
call fcn.004c66ca
lea ecx, [ebp - 0x5c]
mov byte [ebp - 4], bl
mov esi, eax
call fcn.0040b67b
test esi, esi
je 0x476d16
push str.https:__dd.browser.360.cn_static_a_1286.3523.gif
lea ecx, [ebp - 0x5c]
call fcn.0040b0d5
push ebx
push ebx
xor dl, dl
mov byte [ebp - 4], 3
lea ecx, [ebp - 0x5c]
call fcn.004c4bab
pop ecx
pop ecx
lea ecx, [ebp - 0x5c]
call fcn.0040b67b
lea ecx, [ebp - 0x2c]
mov byte [ebp - 4], 0
call fcn.0040b67b
call fcn.00415137
test eax, eax
jne 0x476d91
and dword [ebp - 0x90], eax
mov edx, str.Software360360huabaohuabao
lea eax, [ebp - 0x90]
mov ecx, reloc.WS2_32.dll_accept
push eax
push str.hb_login
call fcn.00425cda
pop ecx
pop ecx
lea ecx, [ebp - 0x2c]
cmp dword [ebp - 0x90], ebx
jne 0x476d69
push str.https:__dd.browser.360.cn_static_a_1286.554.gif__referer1
call fcn.0040b0d5
mov byte [ebp - 4], 4
jmp 0x476d77
push str.https:__dd.browser.360.cn_static_a_1286.554.gif__referer0
call fcn.0040b0d5
mov byte [ebp - 4], 5
push ebx
push ebx
mov dl, bl
lea ecx, [ebp - 0x2c]
call fcn.004c4bab
pop ecx
pop ecx
lea ecx, [ebp - 0x2c]
mov byte [ebp - 4], 0
call fcn.0040b67b
push 0x628bf8
lea ecx, [ebp - 0x2c]
call fcn.0040b0d5
lea edx, [ebp - 0x2c]
mov byte [ebp - 4], 6
lea ecx, [ebp - 0x8c]
call fcn.004c0cd4
lea ecx, [ebp - 0x2c]
mov byte [ebp - 4], 8
call fcn.0040b67b
call fcn.004ca500
test eax, eax
lea eax, [ebp - 0x8c]
setne bl
cmp dword [ebp - 0x78], 8
cmovae eax, dword [ebp - 0x8c]
push eax
call dword [sym.imp.SHLWAPI.dll_PathFileExistsW]
test eax, eax
setne bh
test bl, bl
jne 0x476e14
test bh, bh
jne 0x476e14
push str.https:__dd.browser.360.cn_static_a_1286.3344.gif
lea ecx, [ebp - 0x5c]
call fcn.0040b0d5
push 1
push 1
xor dl, dl
mov byte [ebp - 4], 9
lea ecx, [ebp - 0x5c]
call fcn.004c4bab
pop ecx
pop ecx
lea ecx, [ebp - 0x5c]
call fcn.0040b67b
and dword [ebp - 0x64], 0
xor eax, eax
mov dword [ebp - 0x60], 7
mov word [ebp - 0x74], ax
mov byte [ebp - 4], 0xa
test bh, bh
je 0x476e43
mov esi, 0x628d30
push esi
call fcn.005b93d0
pop ecx
push eax
push esi
lea ecx, [ebp - 0x74]
call fcn.0040b566
test bl, bl
je 0x476e5d
mov esi, 0x628d2c
push esi
call fcn.005b93d0
pop ecx
push eax
push esi
lea ecx, [ebp - 0x74]
call fcn.0040b566
test bh, bh
je 0x476e7d
test bl, bl
je 0x476e81
mov esi, 0x63a8c4
push esi
call fcn.005b93d0
pop ecx
push eax
push esi
lea ecx, [ebp - 0x74]
call fcn.0040b566
jmp 0x476e81
test bl, bl
je 0x476eb2
lea eax, [ebp - 0x74]
push eax
lea eax, [ebp - 0x2c]
push str.https:__dd.browser.360.cn_static_a_1286.1221.gif__referer
push eax
call fcn.00440e2c
add esp, 0xc
push 1
push 1
mov dl, 1
mov byte [ebp - 4], 0xb
lea ecx, [ebp - 0x2c]
call fcn.004c4bab
pop ecx
pop ecx
lea ecx, [ebp - 0x2c]
call fcn.0040b67b
lea ecx, [ebp - 0x74]
call fcn.0040b67b
lea ecx, [ebp - 0x8c]
call fcn.0040b67b
lea ecx, [ebp - 0x44]
call fcn.0040b67b
call fcn.00591fc1
ret