Function at 0x47d9b3
Capabilities:
Check if file exists

Disassembly:
push 0x84
mov eax, 0x5ebfe6
call fcn.0059bbd7
lea ecx, [ebp - 0x44]
call fcn.00425665
and dword [ebp - 4], 0
mov esi, str.YooWallpaperWallpaper.exe
push esi
call fcn.005c2f90
pop ecx
push eax
push esi
lea ecx, [ebp - 0x44]
call fcn.0040b220
cmp dword [ebp - 0x30], 8
lea eax, [ebp - 0x44]
cmovae eax, dword [ebp - 0x44]
push eax
call dword [sym.imp.SHLWAPI.dll_PathFileExistsW]
xor ebx, ebx
inc ebx
test eax, eax
je 0x47da92
cmp dword [ebp - 0x30], 8
lea eax, [ebp - 0x44]
cmovae eax, dword [ebp - 0x44]
push eax
call fcn.004352fd
pop ecx
test eax, eax
je 0x47da92
push str.https:__dd.browser.360.cn_static_a_1286.3708.gif
lea ecx, [ebp - 0x2c]
call fcn.0040b0d5
push ebx
push ebx
xor dl, dl
mov byte [ebp - 4], bl
lea ecx, [ebp - 0x2c]
call fcn.004ce396
pop ecx
pop ecx
push str.Wallpaper.exe
lea ecx, [ebp - 0x5c]
call fcn.0040b0d5
lea ecx, [ebp - 0x5c]
mov byte [ebp - 4], 2
call fcn.004d00ca
lea ecx, [ebp - 0x5c]
mov byte [ebp - 4], bl
mov esi, eax
call fcn.0040b67e
test esi, esi
je 0x47da86
push str.https:__dd.browser.360.cn_static_a_1286.3523.gif
lea ecx, [ebp - 0x5c]
call fcn.0040b0d5
push ebx
push ebx
xor dl, dl
mov byte [ebp - 4], 3
lea ecx, [ebp - 0x5c]
call fcn.004ce396
pop ecx
pop ecx
lea ecx, [ebp - 0x5c]
call fcn.0040b67e
lea ecx, [ebp - 0x2c]
mov byte [ebp - 4], 0
call fcn.0040b67e
call fcn.00415363
test eax, eax
jne 0x47db01
and dword [ebp - 0x90], eax
mov edx, str.Software360360huabaohuabao
lea eax, [ebp - 0x90]
mov ecx, reloc.WS2_32.dll_accept
push eax
push str.hb_login
call fcn.004261bf
pop ecx
pop ecx
lea ecx, [ebp - 0x2c]
cmp dword [ebp - 0x90], ebx
jne 0x47dad9
push str.https:__dd.browser.360.cn_static_a_1286.554.gif__referer1
call fcn.0040b0d5
mov byte [ebp - 4], 4
jmp 0x47dae7
push str.https:__dd.browser.360.cn_static_a_1286.554.gif__referer0
call fcn.0040b0d5
mov byte [ebp - 4], 5
push ebx
push ebx
mov dl, bl
lea ecx, [ebp - 0x2c]
call fcn.004ce396
pop ecx
pop ecx
lea ecx, [ebp - 0x2c]
mov byte [ebp - 4], 0
call fcn.0040b67e
push 0x633d40
lea ecx, [ebp - 0x2c]
call fcn.0040b0d5
lea edx, [ebp - 0x2c]
mov byte [ebp - 4], 6
lea ecx, [ebp - 0x8c]
call fcn.004c9bd2
lea ecx, [ebp - 0x2c]
mov byte [ebp - 4], 8
call fcn.0040b67e
call fcn.004d3f00
test eax, eax
lea eax, [ebp - 0x8c]
setne bl
cmp dword [ebp - 0x78], 8
cmovae eax, dword [ebp - 0x8c]
push eax
call dword [sym.imp.SHLWAPI.dll_PathFileExistsW]
test eax, eax
setne bh
test bl, bl
jne 0x47db84
test bh, bh
jne 0x47db84
push str.https:__dd.browser.360.cn_static_a_1286.3344.gif
lea ecx, [ebp - 0x5c]
call fcn.0040b0d5
push 1
push 1
xor dl, dl
mov byte [ebp - 4], 9
lea ecx, [ebp - 0x5c]
call fcn.004ce396
pop ecx
pop ecx
lea ecx, [ebp - 0x5c]
call fcn.0040b67e
and dword [ebp - 0x64], 0
xor eax, eax
mov dword [ebp - 0x60], 7
mov word [ebp - 0x74], ax
mov byte [ebp - 4], 0xa
test bh, bh
je 0x47dbb3
mov esi, 0x633e78
push esi
call fcn.005c2f90
pop ecx
push eax
push esi
lea ecx, [ebp - 0x74]
call fcn.0040b566
test bl, bl
je 0x47dbcd
mov esi, 0x633e74
push esi
call fcn.005c2f90
pop ecx
push eax
push esi
lea ecx, [ebp - 0x74]
call fcn.0040b566
test bh, bh
je 0x47dbed
test bl, bl
je 0x47dbf1
mov esi, 0x64689c
push esi
call fcn.005c2f90
pop ecx
push eax
push esi
lea ecx, [ebp - 0x74]
call fcn.0040b566
jmp 0x47dbf1
test bl, bl
je 0x47dc22
lea eax, [ebp - 0x74]
push eax
lea eax, [ebp - 0x2c]
push str.https:__dd.browser.360.cn_static_a_1286.1221.gif__referer
push eax
call fcn.00445efc
add esp, 0xc
push 1
push 1
mov dl, 1
mov byte [ebp - 4], 0xb
lea ecx, [ebp - 0x2c]
call fcn.004ce396
pop ecx
pop ecx
lea ecx, [ebp - 0x2c]
call fcn.0040b67e
lea ecx, [ebp - 0x74]
call fcn.0040b67e
lea ecx, [ebp - 0x8c]
call fcn.0040b67e
lea ecx, [ebp - 0x44]
call fcn.0040b67e
call fcn.0059bb81
ret