Function at 0x41cb8e
Capabilities:
Set file attributes

Disassembly:
push ebp
mov ebp, esp
and esp, 0xfffffff8
sub esp, 0x21c
mov eax, dword [0x5345d0]
xor eax, esp
mov dword [esp + 0x218], eax
push ebx
push esi
push edi
mov edi, dword [ebp + 8]
xor ebx, ebx
push 0x103
lea eax, [esp + 0x15]
push ebx
push eax
mov byte [esp + 0x1c], bl
call fcn.004b53e0
add esp, 0xc
mov edx, edi
call fcn.0047c3ca
test eax, eax
je 0x41cbd9
xor eax, eax
jmp 0x41cdc0
push edi
push str._s.manifest
lea eax, [esp + 0x18]
push 0x104
push eax
call fcn.0047da40
add esp, 0x10
cmp dword [ebp + 0xc], ebx
jne 0x41cc14
push 0x80
lea eax, [esp + 0x14]
push eax
call dword [sym.imp.KERNEL32.dll_SetFileAttributesA]
lea eax, [esp + 0x10]
call fcn.0041aa09
jmp 0x41cdc0
push dword [ebp + 0x10]
push ebx
push edi
call fcn.0041cb8e
add esp, 0xc
push 0x18e2
push str..File.c
mov edx, 0x4d93ac
lea ecx, [esp + 0x18]
mov dword [esp + 0x14], eax
call fcn.0041cea8
mov esi, eax
cmp esi, ebx
pop ecx
pop ecx
jne 0x41cd06
push 0x103
lea eax, [esp + 0x11d]
push ebx
push eax
mov byte [esp + 0x124], bl
call fcn.004b53e0
lea eax, [esp + 0x1c]
add esp, 0xc
push eax
mov ecx, 0x104
lea eax, [esp + 0x11c]
call fcn.0047c3fc
pop ecx
call fcn.0047c73c
push eax
call fcn.0041b0f5
test eax, eax
pop ecx
jne 0x41ccdb
cmp dword [0x54ce9c], ebx
jne 0x41ccdb
push ebx
lea ecx, [esp + 0x11c]
call fcn.0041b401
pop ecx
push eax
lea eax, [esp + 0x11c]
push eax
push edi
push str.:4:CreateExeManifest___s___EAP:_The_dest_dir_had_to_be_created:___s_:_bResult___d:_trying_again...
call fcn.00417db7
push dword [ebp + 0x10]
mov dword [0x54ce9c], 1
push dword [ebp + 0xc]
push edi
call fcn.0041cb8e
add esp, 0x1c
mov dword [0x54ce9c], ebx
jmp 0x41cdc0
lea eax, [esp + 0x118]
push eax
call fcn.0041b0f5
pop ecx
push eax
push dword [esp + 0x10]
lea eax, [esp + 0x18]
push eax
push edi
push str.:5:CreateAdminManifest___s___FAILED:_fopen___s____wt___FAILED:_bRemoveResult_d:_bDirExists_d
call fcn.004178df
add esp, 0x14
jmp 0x41cbd2
push str.__xml_version_1.0__encoding_UTF_8__standalone_yes___
push esi
call fcn.004b5711
push str._n_assembly_xmlns_urn:schemas_microsoft_com:asm.v1__manifestVersion_1.0__
push esi
call fcn.004b5711
push str._n___trustInfo_xmlns_urn:schemas_microsoft_com:asm.v2__
push esi
call fcn.004b5711
push str._n_____security_
push esi
call fcn.004b5711
push str._n_______requestedPrivileges_
push esi
call fcn.004b5711
push str._n_________requestedExecutionLevel
push esi
call fcn.004b5711
add esp, 0x30
cmp dword [ebp + 0x10], ebx
je 0x41cd57
push str._n__________level_requireAdministrator_
jmp 0x41cd5c
push str._n__________level_asInvoker_
push esi
call fcn.004b5711
pop ecx
pop ecx
push str._n__________uiAccess_false___
push esi
call fcn.004b5711
push str._n________requestedPrivileges_
push esi
call fcn.004b5711
push str._n______security_
push esi
call fcn.004b5711
push str._n____trustInfo_
push esi
call fcn.004b5711
push str._n__assembly_
push esi
call fcn.004b5711
push 0x4d75ac
push esi
call fcn.004b5711
add esp, 0x30
mov ecx, esi
call fcn.0041d2f0
push 7
lea eax, [esp + 0x14]
push eax
call dword [sym.imp.KERNEL32.dll_SetFileAttributesA]
xor eax, eax
inc eax
mov ecx, dword [esp + 0x224]
pop edi
pop esi
pop ebx
xor ecx, esp
call fcn.004b4c95
mov esp, ebp
pop ebp
ret