Function at 0x41e15d
Capabilities:
Set file attributes

Disassembly:
push ebp
mov ebp, esp
and esp, 0xfffffff8
sub esp, 0x21c
mov eax, dword [0x5385d0]
xor eax, esp
mov dword [esp + 0x218], eax
push ebx
push esi
push edi
mov edi, dword [ebp + 8]
xor ebx, ebx
push 0x103
lea eax, [esp + 0x15]
push ebx
push eax
mov byte [esp + 0x1c], bl
call fcn.004b7880
add esp, 0xc
mov edx, edi
call fcn.0047ebaf
test eax, eax
je 0x41e1a8
xor eax, eax
jmp 0x41e38f
push edi
push str._s.manifest
lea eax, [esp + 0x18]
push 0x104
push eax
call fcn.00480225
add esp, 0x10
cmp dword [ebp + 0xc], ebx
jne 0x41e1e3
push 0x80
lea eax, [esp + 0x14]
push eax
call dword [sym.imp.KERNEL32.dll_SetFileAttributesA]
lea eax, [esp + 0x10]
call fcn.0041bfc0
jmp 0x41e38f
push dword [ebp + 0x10]
push ebx
push edi
call fcn.0041e15d
add esp, 0xc
push 0x18e2
push str..File.c
mov edx, 0x4dbf7c
lea ecx, [esp + 0x18]
mov dword [esp + 0x14], eax
call fcn.0041e477
mov esi, eax
cmp esi, ebx
pop ecx
pop ecx
jne 0x41e2d5
push 0x103
lea eax, [esp + 0x11d]
push ebx
push eax
mov byte [esp + 0x124], bl
call fcn.004b7880
lea eax, [esp + 0x1c]
add esp, 0xc
push eax
mov ecx, 0x104
lea eax, [esp + 0x11c]
call fcn.0047ebe1
pop ecx
call fcn.0047ef21
push eax
call fcn.0041c6ac
test eax, eax
pop ecx
jne 0x41e2aa
cmp dword [0x550d9c], ebx
jne 0x41e2aa
push ebx
lea ecx, [esp + 0x11c]
call fcn.0041c9b8
pop ecx
push eax
lea eax, [esp + 0x11c]
push eax
push edi
push str.:4:CreateExeManifest___s___EAP:_The_dest_dir_had_to_be_created:___s_:_bResult___d:_trying_again...
call fcn.0041936e
push dword [ebp + 0x10]
mov dword [0x550d9c], 1
push dword [ebp + 0xc]
push edi
call fcn.0041e15d
add esp, 0x1c
mov dword [0x550d9c], ebx
jmp 0x41e38f
lea eax, [esp + 0x118]
push eax
call fcn.0041c6ac
pop ecx
push eax
push dword [esp + 0x10]
lea eax, [esp + 0x18]
push eax
push edi
push str.:5:CreateAdminManifest___s___FAILED:_fopen___s____wt___FAILED:_bRemoveResult_d:_bDirExists_d
call fcn.00418e96
add esp, 0x14
jmp 0x41e1a1
push str.__xml_version_1.0__encoding_UTF_8__standalone_yes___
push esi
call fcn.004b7bb1
push str._n_assembly_xmlns_urn:schemas_microsoft_com:asm.v1__manifestVersion_1.0__
push esi
call fcn.004b7bb1
push str._n___trustInfo_xmlns_urn:schemas_microsoft_com:asm.v2__
push esi
call fcn.004b7bb1
push str._n_____security_
push esi
call fcn.004b7bb1
push str._n_______requestedPrivileges_
push esi
call fcn.004b7bb1
push str._n_________requestedExecutionLevel
push esi
call fcn.004b7bb1
add esp, 0x30
cmp dword [ebp + 0x10], ebx
je 0x41e326
push str._n__________level_requireAdministrator_
jmp 0x41e32b
push str._n__________level_asInvoker_
push esi
call fcn.004b7bb1
pop ecx
pop ecx
push str._n__________uiAccess_false___
push esi
call fcn.004b7bb1
push str._n________requestedPrivileges_
push esi
call fcn.004b7bb1
push str._n______security_
push esi
call fcn.004b7bb1
push str._n____trustInfo_
push esi
call fcn.004b7bb1
push str._n__assembly_
push esi
call fcn.004b7bb1
push 0x4da17c
push esi
call fcn.004b7bb1
add esp, 0x30
mov ecx, esi
call fcn.0041e8bf
push 7
lea eax, [esp + 0x14]
push eax
call dword [sym.imp.KERNEL32.dll_SetFileAttributesA]
xor eax, eax
inc eax
mov ecx, dword [esp + 0x224]
pop edi
pop esi
pop ebx
xor ecx, esp
call fcn.004b7140
mov esp, ebp
pop ebp
ret