Function at 0x1004ab23
Capabilities:
Set file attributes
Timestomp file

Disassembly:
mov eax, 0x100da743
call fcn.100ac440
mov eax, 0x2864
call fcn.100ab6e0
mov eax, dword [0x1011c710]
push ebx
xor eax, ebp
push esi
mov esi, dword [ebp + 0xc]
push edi
mov edi, dword [ebp + 8]
mov dword [ebp - 0x10], eax
mov eax, dword [edi]
mov eax, dword [eax - 0xc]
xor ebx, ebx
cmp eax, ebx
mov dword [ebp - 0x281c], ecx
je 0x1004b06d
mov eax, dword [esi]
cmp dword [eax - 0xc], ebx
je 0x1004b06d
push ebx
push 0x100e4a5c
mov ecx, edi
call fcn.10003f61
test eax, eax
je 0x1004ab96
push ebx
push str.HTTP
mov ecx, edi
call fcn.10003f61
test eax, eax
je 0x1004ab96
push 0x100e936c
jmp 0x1004b072
lea ecx, [ebp - 0x280c]
call fcn.100494d5
lea ecx, [ebp - 0x2870]
mov dword [ebp - 4], ebx
call fcn.10045bd2
push ebx
lea ecx, [ebp - 0x460]
mov dword [ebp - 0x285c], 0x3a98
mov dword [ebp - 0x448], 0xf
call fcn.10001594
push str.Expires:_0_r_n
lea ecx, [ebp - 0x460]
mov byte [ebp - 4], 1
call fcn.10002026
push str.Pragma:_no_cache_r_n
lea ecx, [ebp - 0x460]
call fcn.1000314b
push str.Cache_Control:_no_cache_no_store_max_age0_s_maxage0_must_revalidate_r_n
lea ecx, [ebp - 0x460]
call fcn.1000314b
cmp dword [ebp - 0x448], 0x10
mov eax, dword [ebp - 0x45c]
jae 0x1004ac18
lea eax, [ebp - 0x45c]
mov edi, dword [edi]
mov dword [ebp - 0x2870], eax
lea eax, [ebp - 0x2870]
push eax
push edi
lea ecx, [ebp - 0x280c]
call fcn.1004aa81
test al, al
push 0xc
lea edi, [ebp - 0x43]
mov byte [ebp - 0x44], bl
pop ecx
je 0x1004afd1
push dword [ebp - 0x4ec]
xor eax, eax
rep stosd dword es:[edi], eax
stosb byte es:[edi], al
lea eax, [ebp - 0x44]
push 0x100e2dcc
push eax
call dword [sym.imp.USER32.dll_wsprintfA]
add esp, 0xc
push 0x100e3ab4
lea eax, [ebp - 0x44]
push eax
push str.HttpRtnCode
push str.PPSADV
call fcn.10002987
cmp dword [ebp - 0x4ec], 0xc8
jne 0x1004af8f
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [ebp - 0x2814], eax
xor eax, eax
mov byte [ebp - 0x444], bl
mov ecx, 0xff
lea edi, [ebp - 0x443]
rep stosd dword es:[edi], eax
stosw word es:[edi], ax
stosb byte es:[edi], al
lea eax, [ebp - 0x2818]
push eax
lea eax, [ebp - 0x444]
push eax
push str.last_modified
lea ecx, [ebp - 0x280c]
mov dword [ebp - 0x2818], 0x400
call fcn.100489f5
test al, al
je 0x1004ad3d
lea eax, [ebp - 0x444]
push eax
call fcn.100ab7d0
test eax, eax
pop ecx
jle 0x1004ad3d
lea eax, [ebp - 0x444]
push eax
lea ecx, [ebp - 0x4c8]
call fcn.10002218
lea eax, [ebp - 0x2810]
push eax
lea eax, [ebp - 0x4c8]
push eax
mov byte [ebp - 4], 2
mov dword [ebp - 0x2810], ebx
call fcn.10086d3e
test eax, eax
pop ecx
pop ecx
je 0x1004ad2b
mov eax, dword [ebp - 0x2810]
mov dword [ebp - 0x2814], eax
push ebx
push 1
lea ecx, [ebp - 0x4c8]
mov byte [ebp - 4], 1
call fcn.100017d0
mov edi, dword [ebp - 0x4e4]
mov dword [ebp - 0x2818], edi
inc edi
push edi
call fcn.100c6c30
push edi
push ebx
push eax
mov dword [ebp - 0x2810], eax
call fcn.100ab720
mov eax, dword [ebp - 0x4dc]
mov ecx, dword [ebp - 0x4e0]
push dword [ebp - 0x2818]
add eax, ecx
add eax, dword [ebp - 0x1748]
push eax
push dword [ebp - 0x2810]
call fcn.100ab860
add esp, 0x1c
call fcn.100c6d12
mov edx, dword [eax]
mov ecx, eax
call dword [edx + 0xc]
add eax, 0x10
mov dword [ebp - 0x2820], eax
push str..http
push dword [esi]
lea eax, [ebp - 0x2820]
push 0x100e3bf4
push eax
mov byte [ebp - 4], 3
call fcn.10001d75
add esp, 0x10
push ebx
lea ecx, [ebp - 0x4ac]
call fcn.10012bed
mov edi, dword [ebp - 0x2820]
push edi
lea ecx, [ebp - 0x4ac]
mov byte [ebp - 4], 4
call fcn.10012cc6
test eax, eax
je 0x1004aded
push edi
lea ecx, [ebp - 0x4ac]
call fcn.1001314b
push 1
push edi
lea ecx, [ebp - 0x4ac]
call fcn.10012ff8
test eax, eax
je 0x1004af6e
push ebx
lea ecx, [ebp - 0x4ac]
call fcn.1001283f
push dword [ebp - 0x2818]
lea ecx, [ebp - 0x4ac]
push dword [ebp - 0x2810]
call fcn.100129da
lea eax, [ebp - 0x2830]
push eax
push dword [ebp - 0x2814]
call fcn.10086acd
pop ecx
pop ecx
lea eax, [ebp - 0x2828]
push eax
lea eax, [ebp - 0x2830]
push eax
call dword [sym.imp.KERNEL32.dll_FileTimeToLocalFileTime]
lea eax, [ebp - 0x2828]
push eax
push eax
push eax
push dword [ebp - 0x470]
call dword [sym.imp.KERNEL32.dll_SetFileTime]
lea ecx, [ebp - 0x4ac]
call fcn.10012dbb
push dword [ebp - 0x2810]
call fcn.100c6c35
pop ecx
push dword [esi]
lea ecx, [ebp - 0x4ac]
call fcn.10012cc6
test eax, eax
je 0x1004af1f
mov eax, dword [ebp - 0x281c]
mov eax, dword [eax + 0x70]
mov eax, dword [eax + 0x1f0]
push 0x10000000
push str.everyone
push ebx
mov ecx, esi
mov dword [ebp - 0x281c], eax
call fcn.1000192d
mov ecx, dword [ebp - 0x281c]
push eax
call fcn.1006df5a
push 0x80
push ebx
mov ecx, esi
call fcn.1000192d
push eax
call dword [sym.imp.KERNEL32.dll_SetFileAttributesA]
push dword [esi]
lea ecx, [ebp - 0x4ac]
call fcn.1001314b
test eax, eax
jne 0x1004af1f
lea ecx, [ebp - 0x2808]
call fcn.10046a9a
push 0x100e92cc
push str.c:_adsxml.txt
call fcn.1008eb92
pop ecx
pop ecx
lea ecx, [ebp - 0x4ac]
mov byte [ebp - 4], 3
call fcn.10012faa
lea ecx, [edi - 0x10]
call fcn.10001199
jmp 0x1004afb3
mov esi, dword [esi]
push edi
push esi
lea ecx, [ebp - 0x4ac]
call fcn.10012de0
test eax, eax
jne 0x1004af44
lea ecx, [ebp - 0x2808]
call fcn.10046a9a
push 0x100e92ac
jmp 0x1004aef7
lea ecx, [ebp - 0x4ac]
mov byte [ebp - 4], 3
call fcn.10012faa
lea ecx, [edi - 0x10]
call fcn.10001199
lea ecx, [ebp - 0x2808]
call fcn.10046a9a
xor esi, esi
inc esi
jmp 0x1004b050
push dword [ebp - 0x2810]
call fcn.100c6c35
pop ecx
lea ecx, [ebp - 0x2808]
call fcn.10046a9a
push 0x100e9298
jmp 0x1004aef7
cmp dword [ebp - 0x4ec], 0x130
jne 0x1004afa2
push 0x100e9280
jmp 0x1004afa7
push 0x100e926c
push str.c:_adsxml.txt
call fcn.1008eb92
pop ecx
pop ecx
push ebx
push 1
lea ecx, [ebp - 0x460]
call fcn.100017d0
lea ecx, [ebp - 0x280c]
call fcn.10049135
jmp 0x1004b07e
xor eax, eax
rep stosd dword es:[edi], eax
push 0xffffffffffffffff
stosb byte es:[edi], al
lea eax, [ebp - 0x44]
push 0x100e2dcc
push eax
call dword [sym.imp.USER32.dll_wsprintfA]
add esp, 0xc
push 0x100e3ab4
lea eax, [ebp - 0x44]
push eax
push str.HttpRtnCode
push str.PPSADV
call fcn.10002987
call fcn.100c6d12
mov edx, dword [eax]
mov ecx, eax
call dword [edx + 0xc]
add eax, 0x10
mov dword [ebp - 0x2814], eax
push dword [ebp - 0x4ec]
lea eax, [ebp - 0x2814]
push 0x100e9248
push eax
mov byte [ebp - 4], 5
call fcn.10001d75
mov esi, dword [ebp - 0x2814]
push esi
push str.c:_adsxml.txt
call fcn.1008eb92
add esp, 0x14
lea ecx, [esi - 0x10]
call fcn.10001199
xor esi, esi
push ebx
push 1
lea ecx, [ebp - 0x460]
call fcn.100017d0
lea ecx, [ebp - 0x280c]
call fcn.10049135
mov eax, esi
jmp 0x1004b080
push 0x100e9234
push str.c:_adsxml.txt
call fcn.1008eb92
pop ecx
pop ecx
xor eax, eax
mov ecx, dword [ebp - 0xc]
pop edi
mov dword fs:[0], ecx
mov ecx, dword [ebp - 0x10]
pop esi
xor ecx, ebp
pop ebx
call fcn.100ac33f
leave
ret 8