Function at 0x5bbb60
Capabilities:
Create process on windows

Disassembly:
push ebp
mov ebp, esp
push ebx
push edi
push esi
sub esp, 0xa0
mov dword [ebp - 0x1c], esp
mov dword [ebp - 0x10], 0xffffffff
mov dword [ebp - 0x14], 0x5bbf60
mov dword [ebp - 0x20], ecx
mov esi, edx
lea ebx, [ebp - 0x80]
lea eax, [ebp - 0x18]
mov ecx, dword fs:[0]
mov dword [ebp - 0x18], ecx
mov dword fs:[0], eax
mov ecx, edx
push ebx
call fcn.00412800
mov edi, dword [ebp - 0x70]
cmp dword [ebp - 0x6c], 7
mov dword [ebp - 0x34], 0
mov dword [ebp - 0x30], 0
jbe 0x5bbbba
mov ebx, dword [ebp - 0x80]
cmp edi, 7
ja 0x5bbbdc
movsd xmm0, qword [ebx]
movsd xmm1, qword [ebx + 8]
mov eax, 7
movsd qword [ebp - 0x3c], xmm1
movsd qword [ebp - 0x44], xmm0
jmp 0x5bbc68
mov eax, edi
mov ecx, 0x7ffffffe
mov dword [ebp - 0x2c], esi
mov dword [ebp - 0x28], edi
mov dword [ebp - 0x24], ebx
or eax, 7
cmp eax, 0x7ffffffe
mov dword [ebp - 0x84], eax
cmovb ecx, eax
lea eax, [ecx + ecx]
cmp ecx, 0x7ff
jb 0x5bbc34
cmp ecx, 0x7fffffee
jae 0x5bbe2c
add eax, 0x25
mov dword [ebp - 0x10], 0
push eax
call fcn.005d0220
add esp, 4
mov ecx, eax
add eax, 0x23
and eax, 0xffffffe0
mov dword [eax - 4], ecx
jmp 0x5bbc47
add eax, 2
mov dword [ebp - 0x10], 0
push eax
call fcn.005d0220
add esp, 4
mov edi, dword [ebp - 0x28]
mov esi, dword [ebp - 0x2c]
mov edx, dword [ebp - 0x24]
mov dword [ebp - 0x44], eax
lea ecx, [edi + edi + 2]
push ecx
push edx
push eax
call fcn.0061e340
add esp, 0xc
mov eax, dword [ebp - 0x84]
lea ecx, [ebp - 0x80]
mov dword [ebp - 0x34], edi
mov dword [ebp - 0x30], eax
call fcn.00405be0
lea eax, [ebp - 0x9c]
mov dword [ebp - 0x10], 3
mov ecx, esi
push eax
call fcn.0049ec80
mov dword [ebp - 0x74], 0
mov dword [ebp - 0x78], 0
mov dword [ebp - 0x6c], 0
mov dword [ebp - 0x70], 0
mov dword [ebp - 0x64], 0
mov dword [ebp - 0x68], 0
mov dword [ebp - 0x5c], 0
mov dword [ebp - 0x60], 0
mov dword [ebp - 0x54], 0
mov dword [ebp - 0x58], 0
mov dword [ebp - 0x4c], 0
mov dword [ebp - 0x50], 0
mov dword [ebp - 0x48], 0
mov dword [ebp - 0x80], 0x3c
mov dword [ebp - 0x7c], 0x40
mov dword [ebp - 0x10], 4
call dword [sym.imp.USER32.dll_GetActiveWindow]
cmp dword [ebp - 0x30], 7
mov dword [ebp - 0x78], eax
mov dword [ebp - 0x74], 0x68074c
jbe 0x5bbd16
mov ecx, dword [ebp - 0x44]
jmp 0x5bbd19
lea ecx, [ebp - 0x44]
mov al, byte [ebp + 8]
cmp dword [ebp - 0x88], 7
mov dword [ebp - 0x70], ecx
lea ecx, [ebp - 0x9c]
jbe 0x5bbd34
mov ecx, dword [ebp - 0x9c]
xor al, 1
mov dword [ebp - 0x6c], ecx
mov dword [ebp - 0x68], 0
movzx eax, al
mov dword [ebp - 0x64], eax
lea eax, [ebp - 0x80]
mov dword [ebp - 0x60], 0
push eax
call dword [sym.imp.SHELL32.dll_ShellExecuteExW]
test eax, eax
je 0x5bbd97
cmp byte [ebp + 0xc], 0
je 0x5bbd8a
lea eax, [ebp - 0xac]
push 0xb1
push str.processlaunch_win.cc
push str.LaunchElevatedProcess
push eax
call fcn.004716a0
add esp, 0x10
push 0xffffffffffffffff
push dword [ebp - 0x48]
call dword [sym.imp.KERNEL32.dll_WaitForSingleObject]
mov ecx, dword [ebp - 0x20]
push dword [ebp - 0x48]
call fcn.004117c0
jmp 0x5bbda1
mov ecx, dword [ebp - 0x20]
push 0
call fcn.004117c0
mov ecx, dword [ebp - 0x88]
cmp ecx, 8
jb 0x5bbdde
mov eax, dword [ebp - 0x9c]
lea edx, [ecx + ecx + 2]
cmp edx, 0x1000
jb 0x5bbdd4
mov edx, eax
mov eax, dword [eax - 4]
add edx, 0xfffffffc
sub edx, eax
cmp edx, 0x20
jae 0x5bbe38
add ecx, ecx
add ecx, 0x25
mov edx, ecx
push edx
push eax
call fcn.005d319e
add esp, 8
mov ecx, dword [ebp - 0x30]
cmp ecx, 8
jb 0x5bbe15
mov eax, dword [ebp - 0x44]
lea edx, [ecx + ecx + 2]
cmp edx, 0x1000
jb 0x5bbe0b
mov edx, eax
mov eax, dword [eax - 4]
add edx, 0xfffffffc
sub edx, eax
cmp edx, 0x20
jae 0x5bbe44
add ecx, ecx
add ecx, 0x25
mov edx, ecx
push edx
push eax
call fcn.005d319e
add esp, 8
mov eax, dword [ebp - 0x18]
mov dword fs:[0], eax
mov eax, dword [ebp - 0x20]
add esp, 0xa0
pop esi
pop edi
pop ebx
pop ebp
ret
mov dword [ebp - 0x10], 0
call fcn.005e8c60
mov dword [ebp - 0x10], 1
call fcn.006207e0
mov dword [ebp - 0x10], 2
call fcn.006207e0
push ebp
sub esp, 0x10
add ebp, 0xc
lea ecx, [ebp - 0x80]
call fcn.00405be0
add esp, 0x10
pop ebp
ret