Function at 0x44bcf0
Capabilities:
Set file attributes

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x224
mov eax, dword [0x6fb448]
xor eax, ebp
mov dword [ebp - 0xc], eax
mov byte [ebp - 0x118], 0
push 0x103
push 0
lea eax, [ebp - 0x117]
push eax
call fcn.005b02a0
add esp, 0xc
mov dword [ebp - 8], 0
mov dword [ebp - 4], 0
mov ecx, dword [ebp + 8]
push ecx
call fcn.00401389
add esp, 4
test eax, eax
je 0x44bd45
xor eax, eax
jmp 0x44bff4
mov edx, dword [ebp + 8]
push edx
push str._s.manifest
push 0x104
lea eax, [ebp - 0x118]
push eax
call fcn.00402dc9
add esp, 0x10
cmp dword [ebp + 0xc], 0
jne 0x44bd90
push 0x80
lea ecx, [ebp - 0x118]
push ecx
call dword [sym.imp.KERNEL32.dll_SetFileAttributesA]
lea edx, [ebp - 0x118]
push edx
call fcn.0040255e
add esp, 4
jmp 0x44bff4
mov eax, dword [ebp + 0x10]
push eax
push 0
mov ecx, dword [ebp + 8]
push ecx
call fcn.00402be9
add esp, 0xc
mov dword [ebp - 4], eax
push 0x18e2
push 0x65b044
push 0x65b050
lea edx, [ebp - 0x118]
push edx
call fcn.00402095
add esp, 0x10
mov dword [ebp - 8], eax
cmp dword [ebp - 8], 0
jne 0x44bed7
mov byte [ebp - 0x220], 0
push 0x103
push 0
lea eax, [ebp - 0x21f]
push eax
call fcn.005b02a0
add esp, 0xc
push 0x104
lea ecx, [ebp - 0x118]
push ecx
lea edx, [ebp - 0x220]
push edx
call fcn.00402725
add esp, 0xc
lea eax, [ebp - 0x220]
push eax
call fcn.00402338
add esp, 4
lea ecx, [ebp - 0x220]
push ecx
call fcn.00401b77
add esp, 4
test eax, eax
jne 0x44bea4
cmp dword [0x707a1c], 0
jne 0x44bea4
push 0
lea edx, [ebp - 0x220]
push edx
call fcn.004023ec
add esp, 8
mov dword [ebp - 0x224], eax
mov eax, dword [ebp - 0x224]
push eax
lea ecx, [ebp - 0x220]
push ecx
mov edx, dword [ebp + 8]
push edx
push str.:4:CreateExeManifest___s___EAP:_The_dest_dir_had_to_be_created:___s_:_bResult___d:_trying_again...
call fcn.004018ca
add esp, 0x10
mov dword [0x707a1c], 1
mov eax, dword [ebp + 0x10]
push eax
mov ecx, dword [ebp + 0xc]
push ecx
mov edx, dword [ebp + 8]
push edx
call fcn.00402be9
add esp, 0xc
mov dword [ebp - 0x224], eax
mov dword [0x707a1c], 0
mov eax, dword [ebp - 0x224]
jmp 0x44bff4
lea eax, [ebp - 0x220]
push eax
call fcn.00401b77
add esp, 4
push eax
mov ecx, dword [ebp - 4]
push ecx
lea edx, [ebp - 0x118]
push edx
mov eax, dword [ebp + 8]
push eax
push str.:5:CreateAdminManifest___s___FAILED:_fopen___s____wt___FAILED:_bRemoveResult_d:_bDirExists_d
call fcn.00401014
add esp, 0x14
xor eax, eax
jmp 0x44bff4
push str.__xml_version_1.0__encoding_UTF_8__standalone_yes___
mov ecx, dword [ebp - 8]
push ecx
call fcn.005b69d0
add esp, 8
push str._n_assembly_xmlns_urn:schemas_microsoft_com:asm.v1__manifestVersion_1.0__
mov edx, dword [ebp - 8]
push edx
call fcn.005b69d0
add esp, 8
push str._n___trustInfo_xmlns_urn:schemas_microsoft_com:asm.v2__
mov eax, dword [ebp - 8]
push eax
call fcn.005b69d0
add esp, 8
push str._n_____security_
mov ecx, dword [ebp - 8]
push ecx
call fcn.005b69d0
add esp, 8
push str._n_______requestedPrivileges_
mov edx, dword [ebp - 8]
push edx
call fcn.005b69d0
add esp, 8
push str._n_________requestedExecutionLevel
mov eax, dword [ebp - 8]
push eax
call fcn.005b69d0
add esp, 8
cmp dword [ebp + 0x10], 0
je 0x44bf56
push str._n__________level_requireAdministrator_
mov ecx, dword [ebp - 8]
push ecx
call fcn.005b69d0
add esp, 8
jmp 0x44bf67
push str._n__________level_asInvoker_
mov edx, dword [ebp - 8]
push edx
call fcn.005b69d0
add esp, 8
push str._n__________uiAccess_false___
mov eax, dword [ebp - 8]
push eax
call fcn.005b69d0
add esp, 8
push str._n________requestedPrivileges_
mov ecx, dword [ebp - 8]
push ecx
call fcn.005b69d0
add esp, 8
push str._n______security_
mov edx, dword [ebp - 8]
push edx
call fcn.005b69d0
add esp, 8
push str._n____trustInfo_
mov eax, dword [ebp - 8]
push eax
call fcn.005b69d0
add esp, 8
push str._n__assembly_
mov ecx, dword [ebp - 8]
push ecx
call fcn.005b69d0
add esp, 8
push 0x65b2e8
mov edx, dword [ebp - 8]
push edx
call fcn.005b69d0
add esp, 8
mov eax, dword [ebp - 8]
push eax
call fcn.00402f18
add esp, 4
mov dword [ebp - 8], 0
push 7
lea ecx, [ebp - 0x118]
push ecx
call dword [sym.imp.KERNEL32.dll_SetFileAttributesA]
mov eax, 1
mov ecx, dword [ebp - 0xc]
xor ecx, ebp
call fcn.005b0290
mov esp, ebp
pop ebp
ret