Function at 0x4331d9
Capabilities:
Check if file exists

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x540
push esi
push edi
mov dword [ebp - 4], str.http:__www.example.com
push dword [ebp - 4]
call dword [sym.imp.SHLWAPI.dll_PathIsURLA]
test eax, eax
je 0x43321b
push str.PathIsURLA:_URL
push 0x4fa5c0
call fcn.004013e8
pop ecx
pop ecx
mov dword [ebp - 8], eax
push 0x40308b
mov ecx, dword [ebp - 8]
call fcn.00405380
jmp 0x43323c
push str.PathIsURLA:
push 0x4fa680
call fcn.004013e8
pop ecx
pop ecx
mov dword [ebp - 0xc], eax
push 0x40308b
mov ecx, dword [ebp - 0xc]
call fcn.00405380
mov esi, 0x45ea44
lea edi, [ebp - 0x130]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsb byte es:[edi], byte [esi]
push 0xf3
push 0
lea eax, [ebp - 0x11f]
push eax
call fcn.00440910
add esp, 0xc
lea eax, [ebp - 0x130]
push eax
call dword [sym.imp.SHLWAPI.dll_PathAddBackslashA]
push str.PathAddBackslashA:
push 0x4fa5c0
call fcn.004013e8
pop ecx
pop ecx
lea ecx, [ebp - 0x130]
push ecx
push eax
call fcn.004013e8
pop ecx
pop ecx
mov dword [ebp - 0x10], eax
push 0x40308b
mov ecx, dword [ebp - 0x10]
call fcn.00405380
mov esi, str.C:Program_Files
lea edi, [ebp - 0x234]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsb byte es:[edi], byte [esi]
push 0xf3
push 0
lea eax, [ebp - 0x223]
push eax
call fcn.00440910
add esp, 0xc
mov esi, str.Example.txt
lea edi, [ebp - 0x43c]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
push pe_nt_image_headers32
push 0
lea eax, [ebp - 0x430]
push eax
call fcn.00440910
add esp, 0xc
lea eax, [ebp - 0x43c]
push eax
lea eax, [ebp - 0x234]
push eax
call dword [sym.imp.SHLWAPI.dll_PathAppendA]
push str.PathAppendA:
push 0x4fa5c0
call fcn.004013e8
pop ecx
pop ecx
lea ecx, [ebp - 0x234]
push ecx
push eax
call fcn.004013e8
pop ecx
pop ecx
mov dword [ebp - 0x14], eax
push 0x40308b
mov ecx, dword [ebp - 0x14]
call fcn.00405380
push 7
pop ecx
mov esi, 0x45eacc
lea edi, [ebp - 0x540]
rep movsd dword es:[edi], dword [esi]
movsb byte es:[edi], byte [esi]
push 0xe7
push 0
lea eax, [ebp - 0x523]
push eax
call fcn.00440910
add esp, 0xc
lea eax, [ebp - 0x540]
push eax
call dword [sym.imp.SHLWAPI.dll_PathFileExistsA]
test eax, eax
je 0x433388
push 0x45eaec
push 0x4fa5c0
call fcn.004013e8
pop ecx
pop ecx
mov dword [ebp - 0x18], eax
push 0x40308b
mov ecx, dword [ebp - 0x18]
call fcn.00405380
jmp 0x4333a9
push str.PathFileExistsA:
push 0x4fa680
call fcn.004013e8
pop ecx
pop ecx
mov dword [ebp - 0x1c], eax
push 0x40308b
mov ecx, dword [ebp - 0x1c]
call fcn.00405380
push 7
pop ecx
mov esi, 0x45eb40
lea edi, [ebp - 0x338]
rep movsd dword es:[edi], dword [esi]
movsb byte es:[edi], byte [esi]
push 0xe7
push 0
lea eax, [ebp - 0x31b]
push eax
call fcn.00440910
add esp, 0xc
lea eax, [ebp - 0x338]
push eax
call dword [sym.imp.SHLWAPI.dll_PathRemoveFileSpecA]
push str.PathRemoveFileSpecA:
push 0x4fa5c0
call fcn.004013e8
pop ecx
pop ecx
lea ecx, [ebp - 0x338]
push ecx
push eax
call fcn.004013e8
pop ecx
pop ecx
mov dword [ebp - 0x20], eax
push 0x40308b
mov ecx, dword [ebp - 0x20]
call fcn.00405380
mov dword [ebp - 0x24], str.C:Program_FilesExample.txt
push dword [ebp - 0x24]
call dword [sym.imp.SHLWAPI.dll_PathFindFileNameA]
mov dword [ebp - 0x28], eax
push str.PathFindFileNameA:
push 0x4fa5c0
call fcn.004013e8
pop ecx
pop ecx
push dword [ebp - 0x28]
push eax
call fcn.004013e8
pop ecx
pop ecx
mov dword [ebp - 0x2c], eax
push 0x40308b
mov ecx, dword [ebp - 0x2c]
call fcn.00405380
pop edi
pop esi
leave
ret