Function at 0x406adc
Capabilities:
Create process on windows

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x70
push ebx
push esi
push edi
xor esi, esi
lea eax, [ebp - 0x70]
push 0x44
push esi
push eax
mov dword [ebp - 0xc], esi
mov dword [ebp - 0x1c], esi
mov dword [ebp - 8], esi
mov dword [ebp - 0x18], esi
call fcn.00438fc0
xor eax, eax
mov dword [ebp - 0x14], esi
lea edi, [ebp - 0x2c]
mov dword [ebp - 0x10], esi
stosd dword es:[edi], eax
add esp, 0xc
mov ebx, esi
mov dword [ebp - 4], ebx
stosd dword es:[edi], eax
push esi
stosd dword es:[edi], eax
stosd dword es:[edi], eax
lea eax, [ebp - 0xc]
push eax
call fcn.004034ad
mov esi, eax
test esi, esi
jns 0x406b2d
push str.Failed_to_get_path_for_current_process.
jmp 0x406b6f
call fcn.0041b3ef
mov edi, dword [ebp + 0xc]
test eax, eax
je 0x406b40
mov eax, dword [ebp - 0xc]
mov ebx, eax
jmp 0x406b82
lea eax, [edi + 0x4e0]
push eax
push 0x14
lea eax, [edi + 0x4e8]
push eax
lea eax, [ebp - 0x1c]
push eax
lea eax, [edi + 0x48]
push eax
lea eax, [edi + 0xbc]
push eax
call fcn.0041b3f5
mov esi, eax
test esi, esi
jns 0x406b7c
push str.Failed_to_cache_to_clean_room.
push esi
call fcn.00430fd9
pop ecx
pop ecx
jmp 0x406cd2
mov ebx, dword [ebp - 0x1c]
mov eax, dword [ebp - 0xc]
push eax
push 0x448aac
lea eax, [ebp - 8]
push str.__ls__ls_
push eax
call fcn.00402074
mov esi, eax
add esp, 0x10
test esi, esi
jns 0x406bb1
push str.Failed_to_allocate_parameters_for_unelevated_process.
push esi
call fcn.00430fd9
pop ecx
pop ecx
jmp 0x406ccf
lea eax, [ebp - 8]
push eax
lea eax, [ebp - 0x14]
push eax
push dword [edi + 0x48]
call fcn.004184dd
mov esi, eax
test esi, esi
jns 0x406bd6
push str.burn.filehandle.attached
push str.Failed_to_append__ls
jmp 0x406cc6
push 0
lea eax, [ebp - 8]
push eax
lea eax, [ebp - 0x10]
push eax
push ebx
call fcn.00418599
mov esi, eax
test esi, esi
jns 0x406bf3
push str.burn.filehandle.self
jmp 0x406bcc
push dword [ebp + 8]
lea eax, [ebp - 8]
push dword [ebp - 8]
push 0x448e88
push eax
call fcn.004020b6
mov esi, eax
add esp, 0x10
test esi, esi
jns 0x406c17
push str.Failed_to_append_original_command_line.
jmp 0x406ba4
push dword [ebp - 8]
lea eax, [ebp - 0x18]
push ebx
push str.__ls___ls
push eax
call fcn.004020b6
mov esi, eax
add esp, 0x10
test esi, esi
jns 0x406c3c
push str.Failed_to_allocate_full_command_line.
jmp 0x406ba4
mov ax, word [edi + 0x2c]
xor esi, esi
mov word [ebp - 0x40], ax
lea eax, [ebp - 0x2c]
push eax
lea eax, [ebp - 0x70]
mov dword [ebp - 0x70], 0x44
push eax
push esi
push esi
push esi
push 1
push esi
push esi
push dword [ebp - 0x18]
push ebx
call dword [sym.imp.KERNEL32.dll_CreateProcessW]
test eax, eax
jne 0x406ca2
call dword [sym.imp.KERNEL32.dll_GetLastError]
movzx esi, ax
or esi, 0x80070000
test eax, eax
cmovle esi, eax
mov eax, 0x80004005
test esi, esi
cmovns esi, eax
push esi
push 0x1cf
push str.engine.cpp
call fcn.00403a8b
push dword [ebp - 0x18]
push str.Failed_to_launch_clean_room_process:__ls
jmp 0x406cc6
mov ecx, dword [ebp - 0x2c]
lea eax, [edi + 0xf8]
push eax
push 0xffffffffffffffff
push ecx
mov dword [ebp - 4], ecx
mov dword [ebp - 0x2c], esi
call fcn.004317ae
mov esi, eax
test esi, esi
jns 0x406ccf
push ebx
push str.Failed_to_wait_for_clean_room_process:__ls
push esi
call fcn.00430fd9
add esp, 0xc
mov ebx, dword [ebp - 4]
cmp dword [ebp - 0x28], 0
mov edi, dword [sym.imp.KERNEL32.dll_CloseHandle]
je 0x406ce7
push dword [ebp - 0x28]
call edi
and dword [ebp - 0x28], 0
cmp dword [ebp - 0x10], 0xffffffff
je 0x406cf6
push dword [ebp - 0x10]
call edi
or dword [ebp - 0x10], 0xffffffff
cmp dword [ebp - 0x14], 0xffffffff
je 0x406d05
push dword [ebp - 0x14]
call edi
or dword [ebp - 0x14], 0xffffffff
test ebx, ebx
je 0x406d0c
push ebx
call edi
push dword [ebp - 0x18]
call fcn.004028d4
push dword [ebp - 8]
call fcn.004028d4
cmp dword [ebp - 0x1c], 0
je 0x406d2a
push dword [ebp - 0x1c]
call fcn.004027ab
cmp dword [ebp - 0xc], 0
je 0x406d38
push dword [ebp - 0xc]
call fcn.004027ab
pop edi
mov eax, esi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 8