Function at 0x411539
Capabilities:
Create process on windows

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x970
mov eax, dword [0x4d5630]
xor eax, ebp
mov dword [ebp - 8], eax
push ebx
push esi
push edi
xor ebx, ebx
mov edi, ecx
mov dword [ebp - 0x204], ebx
call fcn.00414d71
xor esi, esi
inc esi
cmp eax, esi
jl 0x4115a1
push 0xffffffffffffffff
push 0x79e
mov ebx, esi
lea ecx, [ebp - 0x3cc]
push str.c:_buildbot_slaveworkdir_reposlar6desktop_2013_3desktoplauncherinstallerinstaller.cc
mov dword [ebp - 0x204], ebx
call fcn.00438400
push str.install_folder_to_this_process
add eax, 8
push str.Run_an_elevated_process_in_order_to_give_permissions_on_the
push eax
call fcn.00404c5e
pop ecx
pop ecx
push eax
call fcn.00404c5e
pop ecx
pop ecx
test bl, 1
je 0x4115ba
and ebx, 0xfffffffe
lea ecx, [ebp - 0x3cc]
mov dword [ebp - 0x204], ebx
call fcn.00438510
call fcn.00410e39
test al, al
jne 0x41160e
call fcn.00438e90
cmp eax, 2
jg 0x4115f7
push 2
push 0x7a2
push str.c:_buildbot_slaveworkdir_reposlar6desktop_2013_3desktoplauncherinstallerinstaller.cc
lea ecx, [ebp - 0x47c]
or ebx, 2
call fcn.00438400
add eax, 8
push str.Cannot_elevate_with_UAC_disabled
push eax
call fcn.00404c5e
pop ecx
pop ecx
test bl, 2
je 0x411607
lea ecx, [ebp - 0x47c]
call fcn.00438510
xor bl, bl
jmp 0x411d92
and dword [ebp - 0x28], 0
lea edx, [ebp - 0x38]
xor eax, eax
mov dword [ebp - 0x24], 7
xor cl, cl
mov word [ebp - 0x38], ax
call fcn.0042ded1
test al, al
jne 0x411678
call fcn.00438e90
cmp eax, 2
jg 0x411661
push 2
push 0x7a8
push str.c:_buildbot_slaveworkdir_reposlar6desktop_2013_3desktoplauncherinstallerinstaller.cc
lea ecx, [ebp - 0x52c]
or ebx, 4
call fcn.00438400
add eax, 8
push str.Failed_to_obtain_user_name
push eax
call fcn.00404c5e
pop ecx
pop ecx
test bl, 4
je 0x411671
lea ecx, [ebp - 0x52c]
call fcn.00438510
xor bl, bl
jmp 0x411d87
call fcn.00414d71
cmp eax, esi
jl 0x4116c4
push 0xffffffffffffffff
push 0x7ab
or ebx, 8
lea ecx, [ebp - 0x5dc]
push str.c:_buildbot_slaveworkdir_reposlar6desktop_2013_3desktoplauncherinstallerinstaller.cc
mov dword [ebp - 0x204], ebx
call fcn.00438400
add eax, 8
push str.User_name_is
push eax
call fcn.00404c5e
cmp dword [ebp - 0x24], 8
lea ecx, [ebp - 0x38]
cmovae ecx, dword [ebp - 0x38]
push ecx
push eax
call fcn.00438950
add esp, 0x10
test bl, 8
je 0x4116dd
and ebx, 0xfffffff7
lea ecx, [ebp - 0x5dc]
mov dword [ebp - 0x204], ebx
call fcn.00438510
xor ebx, ebx
lea ecx, [ebp - 0x224]
push ebx
call fcn.00446910
push str.set_folder_permission
lea ecx, [ebp - 0xe0]
call fcn.00404000
lea eax, [ebp + 0xc]
push eax
lea eax, [ebp - 0xe0]
push eax
lea ecx, [ebp - 0x224]
call fcn.00446d70
push ebx
push esi
lea ecx, [ebp - 0xe0]
call fcn.00404346
push str.permissions_for_user
lea ecx, [ebp - 0x140]
call fcn.00404000
lea eax, [ebp - 0x38]
push eax
lea eax, [ebp - 0x140]
push eax
lea ecx, [ebp - 0x224]
call fcn.00446ba0
push ebx
push esi
lea ecx, [ebp - 0x140]
call fcn.00404346
cmp byte [ebp + 8], bl
je 0x411785
push str.permanent_permissions
lea ecx, [ebp - 0x110]
call fcn.00404000
lea eax, [ebp - 0x110]
push eax
lea ecx, [ebp - 0x224]
call fcn.00446ad0
push ebx
push esi
lea ecx, [ebp - 0x110]
call fcn.00404346
mov eax, dword [edi + 0x64]
cmp dword [eax], 3
jne 0x4117bc
push str.run_uninstall_bat
lea ecx, [ebp - 0xb0]
call fcn.00404000
lea eax, [ebp - 0xb0]
push eax
lea ecx, [ebp - 0x224]
call fcn.00446ad0
push ebx
push esi
lea ecx, [ebp - 0xb0]
call fcn.00404346
push str.crash_reporter_pid
lea ecx, [ebp - 0xc8]
call fcn.00404000
push dword [0x4d9738]
lea eax, [ebp - 0x1a0]
push 0x4ca344
push eax
call fcn.0043fc40
add esp, 0xc
lea ecx, [ebp - 0x224]
push eax
lea eax, [ebp - 0xc8]
push eax
call fcn.00446b30
push ebx
push esi
lea ecx, [ebp - 0x1a0]
call fcn.00404346
push ebx
push esi
lea ecx, [ebp - 0xc8]
call fcn.00404346
call fcn.004470f0
push str.wait_for_package
lea ecx, [ebp - 0xf8]
mov esi, eax
call fcn.00404000
lea eax, [ebp - 0xf8]
mov ecx, esi
push eax
call fcn.004478e0
push 0
push 1
lea ecx, [ebp - 0xf8]
mov bl, al
call fcn.00404346
test bl, bl
je 0x4118bb
mov ebx, str.wait_for_package
lea ecx, [ebp - 0x158]
push ebx
call fcn.00404000
push ebx
lea ecx, [ebp - 0x128]
call fcn.00404000
lea eax, [ebp - 0x158]
mov ecx, esi
push eax
lea eax, [ebp - 0x1e8]
push eax
call fcn.00447890
push eax
lea eax, [ebp - 0x128]
push eax
lea ecx, [ebp - 0x224]
call fcn.00446d70
lea ecx, [ebp - 0x1e8]
call fcn.0043c140
push 0
push 1
lea ecx, [ebp - 0x128]
call fcn.00404346
push 0
push 1
lea ecx, [ebp - 0x158]
call fcn.00404346
mov ebx, dword [ebp - 0x204]
test bl, 0x20
je 0x4118d4
lea ecx, [ebp - 0x96c]
and ebx, 0xffffffdf
call fcn.00438510
test bl, 0x10
je 0x4118eb
push 0
push 1
lea ecx, [ebp - 0x200]
and ebx, 0xffffffef
call fcn.00404346
push str.initial_pid
lea ecx, [ebp - 0x80]
call fcn.00404000
push str.initial_pid
lea ecx, [ebp - 0x188]
call fcn.00404000
lea eax, [ebp - 0x80]
mov ecx, esi
push eax
lea eax, [ebp - 0x1d0]
push eax
call fcn.00447890
push eax
lea eax, [ebp - 0x188]
push eax
lea ecx, [ebp - 0x224]
call fcn.00446d70
lea ecx, [ebp - 0x1d0]
call fcn.0043c140
xor esi, esi
lea ecx, [ebp - 0x188]
push 0
inc esi
push esi
call fcn.00404346
push 0
push esi
lea ecx, [ebp - 0x80]
call fcn.00404346
lea ecx, [ebp - 0x50]
call fcn.0043c120
lea eax, [ebp - 0x50]
push eax
push 6
call fcn.0044d980
pop ecx
pop ecx
test al, al
jne 0x4119b8
call fcn.00438e90
cmp eax, 2
jg 0x4119a1
push 2
push 0x7cc
push str.c:_buildbot_slaveworkdir_reposlar6desktop_2013_3desktoplauncherinstallerinstaller.cc
lea ecx, [ebp - 0x31c]
or ebx, 0x40
call fcn.00438400
add eax, 8
push str.Failed_to_obtain_installer_exe_file_path
push eax
call fcn.00404c5e
pop ecx
pop ecx
test bl, 0x40
je 0x4119b1
lea ecx, [ebp - 0x31c]
call fcn.00438510
xor bl, bl
jmp 0x411d74
push str.OperaInstaller_GiveInstallPermission
lea ecx, [ebp - 0x170]
call fcn.0040409d
lea eax, [ebp - 0x170]
push 0
push eax
lea edx, [ebp + 0xc]
lea ecx, [ebp - 0x20]
call fcn.0042dfc7
pop ecx
pop ecx
push 0
push esi
lea ecx, [ebp - 0x170]
call fcn.00404402
cmp dword [ebp - 0xc], 8
lea eax, [ebp - 0x20]
mov esi, dword [sym.imp.KERNEL32.DLL_CreateEventW]
cmovae eax, dword [ebp - 0x20]
push eax
xor eax, eax
push eax
push eax
push eax
call esi
and dword [ebp - 0x20c], 0
lea ecx, [ebp - 0x20c]
push eax
call fcn.0041297a
cmp dword [ebp - 0x20c], 0
jne 0x411a81
call fcn.00438e90
cmp eax, 2
jg 0x411a6b
or ebx, 0x80
call sub.KERNEL32.DLL_GetLastError
push eax
push 2
push 0x7d8
push str.c:_buildbot_slaveworkdir_reposlar6desktop_2013_3desktoplauncherinstallerinstaller.cc
lea ecx, [ebp - 0x694]
call fcn.004384e0
push str.the_elevated_process
add eax, 0x10
push str.Failed_to_create_event_for_communicating_with
push eax
call fcn.00404c5e
pop ecx
pop ecx
push eax
call fcn.00404c5e
pop ecx
pop ecx
test bl, bl
jns 0x411a7a
lea ecx, [ebp - 0x694]
call fcn.00438780
xor bl, bl
jmp 0x411d5b
push str.OperaInstaller_GiveInstallPermission_Undo
lea ecx, [ebp - 0x98]
call fcn.0040409d
lea eax, [ebp - 0x98]
push 0
push eax
lea edx, [ebp + 0xc]
lea ecx, [ebp - 0x1b8]
call fcn.0042dfc7
pop ecx
pop ecx
push eax
lea ecx, [ebp - 0x20]
call fcn.004067c0
push 0
push 1
lea ecx, [ebp - 0x1b8]
call fcn.00404402
push 0
push 1
lea ecx, [ebp - 0x98]
call fcn.00404402
cmp dword [ebp - 0xc], 8
lea eax, [ebp - 0x20]
cmovae eax, dword [ebp - 0x20]
push eax
xor eax, eax
push eax
push eax
push eax
call esi
and dword [ebp - 0x208], 0
lea ecx, [ebp - 0x208]
push eax
call fcn.0041297a
cmp dword [ebp - 0x208], 0
jne 0x411b5c
call fcn.00438e90
mov esi, 0x100
cmp eax, 2
jg 0x411b4b
or ebx, esi
call sub.KERNEL32.DLL_GetLastError
push eax
push 2
push 0x7e4
push str.c:_buildbot_slaveworkdir_reposlar6desktop_2013_3desktoplauncherinstallerinstaller.cc
lea ecx, [ebp - 0x74c]
call fcn.004384e0
push str.the_elevated_process
add eax, 0x10
push str.Failed_to_create_event_for_communicating_with
push eax
call fcn.00404c5e
pop ecx
pop ecx
push eax
call fcn.00404c5e
pop ecx
pop ecx
test esi, ebx
je 0x411b84
lea ecx, [ebp - 0x74c]
call fcn.00438780
jmp 0x411b84
call fcn.0044d690
cmp eax, 3
jge 0x411b8b
push dword [ebp - 0x20c]
call fcn.00411312
test al, al
je 0x411b84
push dword [ebp - 0x208]
call fcn.00411312
test al, al
jne 0x411b8b
xor bl, bl
jmp 0x411d50
push 0x3c
pop esi
push esi
lea eax, [ebp - 0x268]
push 0
push eax
call fcn.00488e30
add esp, 0xc
mov dword [ebp - 0x268], esi
cmp dword [ebp - 0x3c], 8
lea eax, [ebp - 0x50]
lea ecx, [ebp - 0x224]
mov dword [ebp - 0x264], 0x40
cmovae eax, dword [ebp - 0x50]
mov dword [ebp - 0x258], eax
lea eax, [ebp - 0x68]
push 0
push eax
mov dword [ebp - 0x25c], str.runas
call fcn.00447440
cmp dword [ebp - 0x54], 8
lea eax, [ebp - 0x68]
mov dword [ebp - 0x24c], 5
cmovae eax, dword [ebp - 0x68]
mov dword [ebp - 0x254], eax
lea eax, [ebp - 0x268]
push eax
call dword [sym.imp.SHELL32.dll_ShellExecuteExW]
test eax, eax
jne 0x411c5c
call fcn.00438e90
mov esi, 0x200
cmp eax, 2
jg 0x411c46
or ebx, esi
call sub.KERNEL32.DLL_GetLastError
push eax
push 2
push 0x7f8
push str.c:_buildbot_slaveworkdir_reposlar6desktop_2013_3desktoplauncherinstallerinstaller.cc
lea ecx, [ebp - 0x8bc]
call fcn.004384e0
add eax, 0x10
push str.Failed_to_run_the_elevated_process
push eax
call fcn.00404c5e
pop ecx
pop ecx
test esi, ebx
je 0x411c55
lea ecx, [ebp - 0x8bc]
call fcn.00438780
xor bl, bl
jmp 0x411d44
mov eax, dword [ebp - 0x230]
mov dword [ebp - 0x22c], eax
mov eax, dword [ebp - 0x20c]
push 0xffffffffffffffff
mov dword [ebp - 0x228], eax
lea eax, [ebp - 0x22c]
push 0
push eax
push 2
call dword [sym.imp.KERNEL32.DLL_WaitForMultipleObjects]
dec eax
neg eax
sbb al, al
inc al
mov dword [ebp - 0x204], eax
jne 0x411ce5
call fcn.00438e90
mov esi, 0x400
cmp eax, 2
jg 0x411cd4
or ebx, esi
call sub.KERNEL32.DLL_GetLastError
push eax
push 2
push 0x805
push str.c:_buildbot_slaveworkdir_reposlar6desktop_2013_3desktoplauncherinstallerinstaller.cc
lea ecx, [ebp - 0x804]
call fcn.004384e0
add eax, 0x10
push str.Failed_to_run_the_elevated_process
push eax
call fcn.00404c5e
pop ecx
pop ecx
test esi, ebx
je 0x411d32
lea ecx, [ebp - 0x804]
call fcn.00438780
jmp 0x411d32
mov esi, dword [ebp - 0x208]
and dword [ebp - 0x208], 0
test esi, esi
je 0x411d14
cmp esi, 0xffffffff
je 0x411d14
call fcn.00440520
push eax
push dword [ebp + 4]
lea eax, [ebp - 0x208]
push eax
push esi
call fcn.0044cb70
add esp, 0x10
push esi
lea ecx, [edi + 0x160]
call fcn.0041297a
push dword [ebp - 0x230]
call dword [sym.imp.KERNEL32.DLL_GetProcessId]
mov dword [edi + 0x164], eax
push dword [ebp - 0x230]
call dword [sym.imp.KERNEL32.DLL_CloseHandle]
mov ebx, dword [ebp - 0x204]
push 0
push 1
lea ecx, [ebp - 0x68]
call fcn.00404402
lea ecx, [ebp - 0x208]
call fcn.0041327e
lea ecx, [ebp - 0x20c]
call fcn.0041327e
xor esi, esi
lea ecx, [ebp - 0x20]
push 0
inc esi
push esi
call fcn.00404402
lea ecx, [ebp - 0x50]
call fcn.0043c140
lea ecx, [ebp - 0x224]
call fcn.004469b0
push 0
push esi
lea ecx, [ebp - 0x38]
call fcn.00404402
lea ecx, [ebp + 0xc]
call fcn.0043c140
mov ecx, dword [ebp - 8]
mov al, bl
pop edi
pop esi
xor ecx, ebp
pop ebx
call fcn.00486d53
mov esp, ebp
pop ebp
ret 0x1c