Function at 0x404cc5
Capabilities:
Create process on windows

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x70
push ebx
push esi
push edi
xor esi, esi
lea eax, [ebp - 0x70]
push 0x44
push esi
push eax
mov dword [ebp - 0xc], esi
mov dword [ebp - 0x1c], esi
mov dword [ebp - 8], esi
mov dword [ebp - 0x18], esi
call fcn.0042f8b0
xor eax, eax
mov dword [ebp - 0x14], esi
lea edi, [ebp - 0x2c]
mov dword [ebp - 0x10], esi
stosd dword es:[edi], eax
add esp, 0xc
mov ebx, esi
mov dword [ebp - 4], ebx
stosd dword es:[edi], eax
push esi
stosd dword es:[edi], eax
stosd dword es:[edi], eax
lea eax, [ebp - 0xc]
push eax
call fcn.0040345a
mov esi, eax
test esi, esi
jns 0x404d21
push str.Failed_to_get_path_for_current_process.
push esi
call fcn.0044041e
pop ecx
pop ecx
jmp 0x404ebd
call fcn.004197e8
mov ebx, dword [ebp + 0xc]
test eax, eax
je 0x404d34
mov eax, dword [ebp - 0xc]
mov edi, eax
jmp 0x404d69
lea eax, [ebp - 0x1c]
push eax
lea eax, [ebx + 0x48]
push eax
lea eax, [ebx + 0xbc]
push eax
call fcn.004197ee
mov esi, eax
test esi, esi
jns 0x404d63
push str.Failed_to_cache_to_clean_room.
push esi
call fcn.0044041e
mov ebx, dword [ebp - 4]
pop ecx
pop ecx
jmp 0x404ebd
mov edi, dword [ebp - 0x1c]
mov eax, dword [ebp - 0xc]
push eax
push str.burn.clean.room
lea eax, [ebp - 8]
push str.__ls__ls_
push eax
call fcn.00401f9d
mov esi, eax
add esp, 0x10
test esi, esi
jns 0x404d8d
push str.Failed_to_allocate_parameters_for_unelevated_process.
jmp 0x404d53
lea eax, [ebp - 8]
push eax
lea eax, [ebp - 0x14]
push eax
push dword [ebx + 0x48]
call fcn.004169f7
mov esi, eax
test esi, esi
jns 0x404dbb
push str.burn.filehandle.attached
push str.Failed_to_append__ls
push esi
call fcn.0044041e
mov ebx, dword [ebp - 4]
jmp 0x404eba
push 0
lea eax, [ebp - 8]
push eax
lea eax, [ebp - 0x10]
push eax
push edi
call fcn.00416ab3
mov esi, eax
test esi, esi
jns 0x404dd8
push str.burn.filehandle.self
jmp 0x404da8
push dword [ebp + 8]
lea eax, [ebp - 8]
push dword [ebp - 8]
push 0x44bc08
push eax
call fcn.00401fdf
mov esi, eax
add esp, 0x10
test esi, esi
jns 0x404dff
push str.Failed_to_append_original_command_line.
jmp 0x404d53
push dword [ebp - 8]
lea eax, [ebp - 0x18]
push edi
push str.__ls___ls
push eax
call fcn.00401fdf
mov esi, eax
add esp, 0x10
test esi, esi
jns 0x404e24
push str.Failed_to_allocate_full_command_line.
jmp 0x404d53
mov ax, word [ebx + 0x2c]
xor esi, esi
mov word [ebp - 0x40], ax
lea eax, [ebp - 0x2c]
push eax
lea eax, [ebp - 0x70]
mov dword [ebp - 0x70], 0x44
push eax
push esi
push esi
push esi
push 1
push esi
push esi
push dword [ebp - 0x18]
push edi
call dword [sym.imp.KERNEL32.dll_CreateProcessW]
test eax, eax
jne 0x404e8d
call dword [sym.imp.KERNEL32.dll_GetLastError]
mov esi, eax
test esi, esi
jle 0x404e69
movzx esi, si
or esi, 0x80070000
test esi, esi
js 0x404e70
mov esi, 0x80004005
push esi
push 0x1ce
push str.engine.cpp
call fcn.00403858
push dword [ebp - 0x18]
push str.Failed_to_launch_clean_room_process:__ls
jmp 0x404dad
mov eax, dword [ebp - 0x2c]
mov dword [ebp - 4], eax
lea eax, [ebx + 0xf8]
mov ebx, dword [ebp - 4]
push eax
push 0xffffffffffffffff
push ebx
mov dword [ebp - 0x2c], esi
call fcn.00440c0f
mov esi, eax
test esi, esi
jns 0x404ebd
push edi
push str.Failed_to_wait_for_clean_room_process:__ls
push esi
call fcn.0044041e
add esp, 0xc
cmp dword [ebp - 0x28], 0
mov edi, dword [sym.imp.KERNEL32.dll_CloseHandle]
je 0x404ed2
push dword [ebp - 0x28]
call edi
and dword [ebp - 0x28], 0
cmp dword [ebp - 0x10], 0xffffffff
je 0x404ee1
push dword [ebp - 0x10]
call edi
or dword [ebp - 0x10], 0xffffffff
cmp dword [ebp - 0x14], 0xffffffff
je 0x404ef0
push dword [ebp - 0x14]
call edi
or dword [ebp - 0x14], 0xffffffff
test ebx, ebx
je 0x404ef7
push ebx
call edi
push dword [ebp - 0x18]
call fcn.00402815
push dword [ebp - 8]
call fcn.00402815
cmp dword [ebp - 0x1c], 0
je 0x404f15
push dword [ebp - 0x1c]
call fcn.004026e8
cmp dword [ebp - 0xc], 0
je 0x404f23
push dword [ebp - 0xc]
call fcn.004026e8
pop edi
mov eax, esi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 8