Function at 0x4678e0
Capabilities:
Check if file exists
Resolve function by parsing pe exports

Disassembly:
push 0xffffffffffffffff
push 0x4a921f
mov eax, dword fs:[0]
push eax
sub esp, 0xe0
mov eax, dword [0x4c7894]
xor eax, esp
mov dword [esp + 0xdc], eax
push ebx
push ebp
push esi
mov eax, dword [0x4c7894]
xor eax, esp
push eax
lea eax, [esp + 0xf0]
mov dword fs:[0], eax
push 1
xor ebx, ebx
push 0x4adaf4
mov ecx, 0x4c93e8
mov dword [0x4c93e0], ebx
call fcn.0040ecf0
push 0x2c
push str.http:__www.xunyou.com_flash_xunyou2009ad.swf
mov ecx, 0x4c9420
call fcn.0040ecf0
push 0x2f
push str.http:__xyd.xunyou.com_index.php_Plat_soft_index
mov ecx, 0x4c944c
call fcn.0040ecf0
push 0x26
push str.http:__xyd.xunyou.com_html_xunyou.html
mov ecx, 0x4c9468
call fcn.0040ecf0
lea ecx, [esp + 0x6c]
call fcn.004735d0
lea eax, [esp + 0x34]
push eax
mov dword [esp + 0xfc], ebx
call fcn.0046afa0
push str.configxunyou.txt
push eax
lea ecx, [esp + 0x88]
push ecx
mov byte [esp + 0x108], 1
call fcn.00418fe0
add esp, 0x10
push eax
lea ecx, [esp + 0x70]
mov byte [esp + 0xfc], 2
call fcn.00474320
mov esi, 0x10
cmp dword [esp + 0x94], esi
jb 0x4679ce
mov edx, dword [esp + 0x80]
push edx
call fcn.0047964d
add esp, 4
cmp dword [esp + 0x4c], esi
mov ebp, 0xf
mov dword [esp + 0x94], ebp
mov dword [esp + 0x90], ebx
mov byte [esp + 0x80], bl
mov byte [esp + 0xf8], bl
jb 0x467a02
mov eax, dword [esp + 0x38]
push eax
call fcn.0047964d
add esp, 4
lea ecx, [esp + 0x50]
call fcn.0044d230
sub esp, 0x1c
mov ecx, esp
mov dword [esp + 0x2c], esp
push ecx
lea ecx, [esp + 0x8c]
mov byte [esp + 0x118], 3
call fcn.00472dc0
lea ecx, [esp + 0x6c]
call fcn.0046e190
sub esp, 0x1c
mov ecx, esp
mov dword [esp + 0x2c], esp
push ebx
mov dword [ecx + 0x18], ebp
mov dword [ecx + 0x14], ebx
push 0x4ac460
mov byte [ecx + 4], bl
call fcn.0040ecf0
sub esp, 0x1c
mov ecx, esp
mov dword [esp + 0x5c], esp
push 9
mov dword [ecx + 0x18], ebp
mov dword [ecx + 0x14], ebx
push str.urlXunyou
mov byte [esp + 0x138], 4
mov byte [ecx + 4], bl
call fcn.0040ecf0
sub esp, 0x1c
mov ecx, esp
mov dword [esp + 0x7c], esp
push ebp
mov dword [ecx + 0x18], ebp
mov dword [ecx + 0x14], ebx
push str.XunYouModuleURL
mov byte [esp + 0x154], 5
mov byte [ecx + 4], bl
call fcn.0040ecf0
lea edx, [esp + 0xec]
push edx
lea ecx, [esp + 0xa8]
mov byte [esp + 0x150], 3
call fcn.0046e3d0
cmp dword [esp + 0xac], ebx
mov byte [esp + 0xf8], 6
je 0x467adc
push 0xffffffffffffffff
push ebx
lea eax, [esp + 0xa0]
push eax
mov ecx, 0x4c9468
call fcn.00408230
sub esp, 0x1c
mov ecx, esp
mov dword [esp + 0x44], esp
push ebx
mov dword [ecx + 0x18], ebp
mov dword [ecx + 0x14], ebx
push 0x4ac460
mov byte [ecx + 4], bl
call fcn.0040ecf0
sub esp, 0x1c
mov ecx, esp
mov dword [esp + 0x48], esp
push 0xd
mov dword [ecx + 0x18], ebp
mov dword [ecx + 0x14], ebx
push str.urlLoginFlash
mov byte [esp + 0x138], 7
mov byte [ecx + 4], bl
call fcn.0040ecf0
sub esp, 0x1c
mov ecx, esp
mov dword [esp + 0x78], esp
push ebp
mov dword [ecx + 0x18], ebp
mov dword [ecx + 0x14], ebx
push str.XunYouModuleURL
mov byte [esp + 0x154], 8
mov byte [ecx + 4], bl
call fcn.0040ecf0
lea ecx, [esp + 0x108]
push ecx
lea ecx, [esp + 0xa8]
mov byte [esp + 0x150], 6
call fcn.0046e3d0
cmp dword [esp + 0xc8], ebx
mov byte [esp + 0xf8], 9
je 0x467b86
push 0xffffffffffffffff
push ebx
lea edx, [esp + 0xbc]
push edx
mov ecx, 0x4c9420
call fcn.00408230
cmp dword [esp + 0xcc], esi
jb 0x467b9f
mov eax, dword [esp + 0xb8]
push eax
call fcn.0047964d
add esp, 4
cmp dword [esp + 0xb0], esi
mov dword [esp + 0xcc], ebp
mov dword [esp + 0xc8], ebx
mov byte [esp + 0xb8], bl
jb 0x467bcd
mov ecx, dword [esp + 0x9c]
push ecx
call fcn.0047964d
add esp, 4
lea ecx, [esp + 0x50]
mov dword [esp + 0xb0], ebp
mov dword [esp + 0xac], ebx
mov byte [esp + 0x9c], bl
mov byte [esp + 0xf8], bl
call fcn.0044d2b0
lea ecx, [esp + 0x6c]
mov dword [esp + 0xf8], 0xffffffff
call fcn.004735e0
push 0x2e
push str.http:__xyd.xunyou.com_index.php_xyd_soft_index
mov ecx, 0x4c9484
call fcn.0040ecf0
mov dword [0x4c94b0], 1
mov dword [esp + 0xe8], ebp
mov dword [esp + 0xe4], ebx
mov byte [esp + 0xd4], bl
lea edx, [esp + 0x50]
push edx
mov dword [esp + 0xfc], 0xa
call fcn.0046afa0
push str._ver
push eax
lea eax, [esp + 0x88]
push eax
mov byte [esp + 0x108], 0xb
call fcn.00418fe0
add esp, 0x10
push 0xffffffffffffffff
push ebx
push eax
lea ecx, [esp + 0xdc]
mov byte [esp + 0x104], 0xc
call fcn.00408230
cmp dword [esp + 0x94], esi
jb 0x467c9a
mov ecx, dword [esp + 0x80]
push ecx
call fcn.0047964d
add esp, 4
cmp dword [esp + 0x68], esi
mov dword [esp + 0x94], ebp
mov dword [esp + 0x90], ebx
mov byte [esp + 0x80], bl
mov byte [esp + 0xf8], 0xa
jb 0x467cca
mov edx, dword [esp + 0x54]
push edx
call fcn.0047964d
add esp, 4
lea eax, [esp + 0x50]
push eax
call fcn.0046afa0
push str._ver
push eax
lea ecx, [esp + 0x88]
push ecx
mov byte [esp + 0x108], 0xd
call fcn.00418fe0
add esp, 0x10
cmp dword [eax + 0x18], esi
jb 0x467cfc
mov eax, dword [eax + 4]
jmp 0x467cff
add eax, 4
push eax
call dword [sym.imp.SHLWAPI.dll_PathFileExistsA]
cmp dword [esp + 0x94], esi
mov dword [0x4c93e0], eax
jb 0x467d24
mov edx, dword [esp + 0x80]
push edx
call fcn.0047964d
add esp, 4
cmp dword [esp + 0x68], esi
mov dword [esp + 0x94], ebp
mov dword [esp + 0x90], ebx
mov byte [esp + 0x80], bl
mov byte [esp + 0xf8], 0xa
jb 0x467d54
mov eax, dword [esp + 0x54]
push eax
call fcn.0047964d
add esp, 4
cmp dword [0x4c93e0], ebx
je 0x46817d
lea ecx, [esp + 0x2c]
call fcn.0046a5d0
push closesocket
push 3
sub esp, 0x1c
mov ecx, esp
mov dword [esp + 0x4c], esp
push 0xffffffffffffffff
push ebx
lea edx, [esp + 0xfc]
mov dword [ecx + 0x18], ebp
mov dword [ecx + 0x14], ebx
push edx
mov byte [esp + 0x128], 0xe
mov byte [ecx + 4], bl
call fcn.00408230
lea ecx, [esp + 0x50]
call fcn.0046acc0
lea ecx, [esp + 0x2c]
call fcn.0046a7d0
add eax, 1
push eax
call fcn.0047734e
mov esi, eax
add esp, 4
lea eax, [esp + 0x24]
push eax
lea ecx, [esp + 0x30]
call fcn.0046a7d0
push eax
push esi
lea ecx, [esp + 0x38]
call fcn.0046a660
mov ecx, dword [esp + 0x24]
lea edx, [esp + 0x7c]
push esi
push edx
mov byte [ecx + esi], bl
call fcn.004769d0
add esp, 8
lea ecx, [esp + 0x14]
mov byte [esp + 0xf8], 0xf
call fcn.004735d0
lea eax, [esp + 0x7c]
push eax
lea ecx, [esp + 0x18]
mov byte [esp + 0xfc], 0x10
call fcn.00473e50
push esi
call fcn.00479e6d
add esp, 4
lea ecx, [esp + 0x14]
call fcn.004727d0
cmp eax, 1
jb 0x468121
lea ecx, [esp + 0x14]
call fcn.004727d0
cmp eax, 8
ja 0x468121
push 0xffffffffffffffff
push ebx
push 0x4c93a0
mov ecx, 0x4c93e8
call fcn.00408230
lea ecx, [esp + 0x14]
call fcn.004727d0
cmp eax, 1
jbe 0x467e86
push 1
lea ecx, [esp + 0x18]
call fcn.00472780
cmp dword [eax + 0x14], 3
jbe 0x467e86
push 1
lea ecx, [esp + 0x18]
call fcn.00472780
push 0xffffffffffffffff
push ebx
push eax
mov ecx, 0x4c9404
call fcn.00408230
lea ecx, [esp + 0x14]
call fcn.004727d0
cmp eax, 2
jbe 0x467ebe
push 2
lea ecx, [esp + 0x18]
call fcn.00472780
cmp dword [eax + 0x14], 0xa
jbe 0x467ebe
push 2
lea ecx, [esp + 0x18]
call fcn.00472780
push 0xffffffffffffffff
push ebx
push eax
mov ecx, 0x4c9420
call fcn.00408230
lea ecx, [esp + 0x14]
call fcn.004727d0
cmp eax, 3
jbe 0x467f75
push 3
lea ecx, [esp + 0x18]
call fcn.00472780
cmp dword [eax + 0x14], 1
jbe 0x467f75
lea ecx, [esp + 0x34]
call fcn.004735d0
push 0x2c
push 3
lea ecx, [esp + 0x1c]
mov byte [esp + 0x100], 0x11
call fcn.00472780
push eax
lea ecx, [esp + 0x3c]
call fcn.00473fe0
lea ecx, [esp + 0x34]
xor esi, esi
call fcn.004727d0
test eax, eax
jbe 0x467f64
lea esp, [esp]
push esi
lea ecx, [esp + 0x38]
call fcn.00472780
cmp dword [eax + 0x18], 0x10
jb 0x467f35
mov eax, dword [eax + 4]
jmp 0x467f38
add eax, 4
push eax
call fcn.0047b5ea
add esp, 4
lea ecx, [esp + 0x10]
push ecx
mov ecx, 0x4c943c
mov dword [esp + 0x14], eax
call fcn.00465a00
lea ecx, [esp + 0x34]
add esi, 1
call fcn.004727d0
cmp esi, eax
jb 0x467f20
lea ecx, [esp + 0x34]
mov byte [esp + 0xf8], 0x10
call fcn.004735e0
lea ecx, [esp + 0x14]
call fcn.004727d0
cmp eax, 4
jbe 0x467fb3
push 4
lea ecx, [esp + 0x18]
call fcn.00472780
mov esi, 5
cmp dword [eax + 0x14], esi
jbe 0x467fb8
push 4
lea ecx, [esp + 0x18]
call fcn.00472780
push 0xffffffffffffffff
push ebx
push eax
mov ecx, 0x4c944c
call fcn.00408230
jmp 0x467fb8
mov esi, 5
lea ecx, [esp + 0x14]
call fcn.004727d0
cmp eax, esi
jbe 0x467fec
push esi
lea ecx, [esp + 0x18]
call fcn.00472780
cmp dword [eax + 0x14], esi
jbe 0x467fec
push esi
lea ecx, [esp + 0x18]
call fcn.00472780
push 0xffffffffffffffff
push ebx
push eax
mov ecx, 0x4c9468
call fcn.00408230
lea ecx, [esp + 0x14]
call fcn.004727d0
cmp eax, 6
jbe 0x468023
push 6
lea ecx, [esp + 0x18]
call fcn.00472780
cmp dword [eax + 0x14], esi
jbe 0x468023
push 6
lea ecx, [esp + 0x18]
call fcn.00472780
push 0xffffffffffffffff
push ebx
push eax
mov ecx, 0x4c9484
call fcn.00408230
lea ecx, [esp + 0x14]
call fcn.004727d0
cmp eax, 7
jbe 0x468115
push 7
lea ecx, [esp + 0x18]
call fcn.00472780
cmp dword [eax + 0x14], 2
jbe 0x468115
lea ecx, [esp + 0x34]
call fcn.004735d0
push 0x2c
push 7
lea ecx, [esp + 0x1c]
mov byte [esp + 0x100], 0x12
call fcn.00472780
push eax
lea ecx, [esp + 0x3c]
call fcn.00473fe0
lea ecx, [esp + 0x34]
call fcn.004727d0
test eax, eax
jbe 0x4680a5
push ebx
lea ecx, [esp + 0x38]
call fcn.00472780
cmp dword [eax + 0x18], 0x10
jb 0x468094
mov eax, dword [eax + 4]
jmp 0x468097
add eax, 4
push eax
call fcn.0047b5ea
add esp, 4
mov dword [0x4c94b0], eax
lea ecx, [esp + 0x34]
mov esi, 1
call fcn.004727d0
cmp eax, esi
jbe 0x468104
jmp 0x4680c0
push esi
lea ecx, [esp + 0x38]
call fcn.00472780
cmp dword [eax + 0x18], 0x10
jb 0x4680d5
mov eax, dword [eax + 4]
jmp 0x4680d8
add eax, 4
push eax
call fcn.0047b5ea
add esp, 4
lea edx, [esp + 0x10]
push edx
mov ecx, 0x4c94a0
mov dword [esp + 0x14], eax
call fcn.00465a00
lea ecx, [esp + 0x34]
add esi, 1
call fcn.004727d0
cmp esi, eax
jb 0x4680c0
lea ecx, [esp + 0x34]
mov byte [esp + 0xf8], 0x10
call fcn.004735e0
mov dword [0x4c93e0], 1
jmp 0x468127
mov dword [0x4c93e0], ebx
lea ecx, [esp + 0x14]
mov byte [esp + 0xf8], 0xf
call fcn.004735e0
cmp dword [esp + 0x94], 0x10
jb 0x468152
mov eax, dword [esp + 0x80]
push eax
call fcn.0047964d
add esp, 4
lea ecx, [esp + 0x2c]
mov dword [esp + 0x94], ebp
mov dword [esp + 0x90], ebx
mov byte [esp + 0x80], bl
mov byte [esp + 0xf8], 0xa
call fcn.0046ab20
mov esi, 0x10
cmp dword [0x4c8ed4], ebx
je 0x468197
push 0xffffffffffffffff
push ebx
push 0x4c8ec0
mov ecx, 0x4c9404
call fcn.00408230
cmp dword [0x4c8eb8], ebx
je 0x4681b1
push 0xffffffffffffffff
push ebx
push 0x4c8ea4
mov ecx, 0x4c9420
call fcn.00408230
cmp dword [0x4c8f60], ebx
je 0x4681cb
push 0xffffffffffffffff
push ebx
push 0x4c8f4c
mov ecx, 0x4c9468
call fcn.00408230
cmp dword [esp + 0xe8], esi
jb 0x4681e4
mov ecx, dword [esp + 0xd4]
push ecx
call fcn.0047964d
add esp, 4
mov ecx, dword [esp + 0xf0]
mov dword fs:[0], ecx
pop ecx
pop esi
pop ebp
pop ebx
mov ecx, dword [esp + 0xdc]
xor ecx, esp
call fcn.0047a194
add esp, 0xec
ret