Function at 0x401cf0
Capabilities:
Create process on windows

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x5c
mov dword [ebp - 0x5c], ecx
mov eax, dword [ebp - 0x5c]
cmp dword [eax + 0xc], 0xffffffff
je 0x401d07
jmp 0x401fab
push 0x44
push 0
lea ecx, [ebp - 0x58]
push ecx
call fcn.00416550
add esp, 0xc
push 0x432834
mov edx, dword [ebp - 0x5c]
add edx, 0x470
push edx
call fcn.00416800
add esp, 8
test eax, eax
jne 0x401d4d
push 0x43283c
mov eax, dword [ebp - 0x5c]
add eax, 0x36c
push eax
call fcn.004165c0
add esp, 8
jmp 0x401f7a
push 0x432858
mov ecx, dword [ebp - 0x5c]
add ecx, 0x470
push ecx
call fcn.00416800
add esp, 8
test eax, eax
jne 0x401d84
push 0x432860
mov edx, dword [ebp - 0x5c]
add edx, 0x36c
push edx
call fcn.004165c0
add esp, 8
jmp 0x401f7a
push 0x43287c
mov eax, dword [ebp - 0x5c]
add eax, 0x470
push eax
call fcn.00416800
add esp, 8
test eax, eax
jne 0x401dba
push 0x432884
mov ecx, dword [ebp - 0x5c]
add ecx, 0x36c
push ecx
call fcn.004165c0
add esp, 8
jmp 0x401f7a
push 0x43289c
mov edx, dword [ebp - 0x5c]
add edx, 0x470
push edx
call fcn.00416800
add esp, 8
test eax, eax
jne 0x401df0
push 0x4328a4
mov eax, dword [ebp - 0x5c]
add eax, 0x36c
push eax
call fcn.004165c0
add esp, 8
jmp 0x401f7a
push 0x4328bc
mov ecx, dword [ebp - 0x5c]
add ecx, 0x470
push ecx
call fcn.00416800
add esp, 8
test eax, eax
jne 0x401e27
push 0x4328c4
mov edx, dword [ebp - 0x5c]
add edx, 0x36c
push edx
call fcn.004165c0
add esp, 8
jmp 0x401f7a
push 0x4328dc
mov eax, dword [ebp - 0x5c]
add eax, 0x470
push eax
call fcn.00416800
add esp, 8
test eax, eax
jne 0x401e5d
push 0x4328e4
mov ecx, dword [ebp - 0x5c]
add ecx, 0x36c
push ecx
call fcn.004165c0
add esp, 8
jmp 0x401f7a
push 0x4328fc
mov edx, dword [ebp - 0x5c]
add edx, 0x470
push edx
call fcn.00416800
add esp, 8
test eax, eax
jne 0x401e93
push 0x432904
mov eax, dword [ebp - 0x5c]
add eax, 0x36c
push eax
call fcn.004165c0
add esp, 8
jmp 0x401f7a
push 0x43291c
mov ecx, dword [ebp - 0x5c]
add ecx, 0x470
push ecx
call fcn.00416800
add esp, 8
test eax, eax
jne 0x401eca
push 0x432924
mov edx, dword [ebp - 0x5c]
add edx, 0x36c
push edx
call fcn.004165c0
add esp, 8
jmp 0x401f7a
push 0x43293c
mov eax, dword [ebp - 0x5c]
add eax, 0x470
push eax
call fcn.00416800
add esp, 8
test eax, eax
jne 0x401efd
push 0x432944
mov ecx, dword [ebp - 0x5c]
add ecx, 0x36c
push ecx
call fcn.004165c0
add esp, 8
jmp 0x401f7a
push 0x432960
mov edx, dword [ebp - 0x5c]
add edx, 0x470
push edx
call fcn.00416800
add esp, 8
test eax, eax
jne 0x401f30
push 0x432968
mov eax, dword [ebp - 0x5c]
add eax, 0x36c
push eax
call fcn.004165c0
add esp, 8
jmp 0x401f7a
push 0x432980
mov ecx, dword [ebp - 0x5c]
add ecx, 0x470
push ecx
call fcn.00416800
add esp, 8
test eax, eax
jne 0x401f64
push 0x432988
mov edx, dword [ebp - 0x5c]
add edx, 0x36c
push edx
call fcn.004165c0
add esp, 8
jmp 0x401f7a
push 0x4329a0
mov eax, dword [ebp - 0x5c]
add eax, 0x36c
push eax
call fcn.004165c0
add esp, 8
mov ecx, dword [ebp - 0x5c]
movzx edx, byte [ecx + 4]
test edx, edx
jne 0x401fab
lea eax, [ebp - 0x10]
push eax
lea ecx, [ebp - 0x58]
push ecx
push 0
push 0
push 0
push 0
push 0
push 0
push 0
mov edx, dword [ebp - 0x5c]
add edx, 0x36c
push edx
call dword [sym.imp.KERNEL32.dll_CreateProcessA]
mov esp, ebp
pop ebp
ret