Function at 0x42bfe0
Capabilities:
Create a process with modified i/o handles and window
Create process on windows

Disassembly:
push 0xdc
mov eax, 0x4394b6
call fcn.0042f7ce
mov bl, cl
mov byte [ebp - 0x4c], bl
call fcn.0042c3f6
test al, al
je 0x43e339
lea ecx, [ebp - 0x2c]
call fcn.0042b69c
lea ecx, [ebp - 0x2c]
call fcn.0042c2a5
test al, al
je 0x43e385
lea ecx, [ebp - 0x48]
call fcn.0042c3bb
push 0x401878
push 0
push 1
push 0
call dword [sym.imp.KERNEL32.dll_CreateEventW]
mov esi, eax
mov dword [ebp - 0x50], esi
test esi, esi
je 0x43e3ab
lea ecx, [ebp - 0x50]
call fcn.0042c394
test al, al
jne 0x43e3f5
call fcn.0042c2de
test al, al
je 0x42c089
test bl, bl
jne 0x43e423
push esi
mov esi, dword [sym.imp.KERNEL32.dll_CloseHandle]
call esi
push dword [ebp - 0x48]
call dword [sym.imp.KERNEL32.dll_ReleaseMutex]
push dword [ebp - 0x48]
call esi
xor bl, bl
lea ecx, [ebp - 0x2c]
call fcn.0042baf9
mov al, bl
call fcn.0042f789
ret
test bl, bl
jne 0x43e433
lea ecx, [ebp - 0x44]
call fcn.0042bf4d
push 0x44
pop edi
push edi
push 0
lea eax, [ebp - 0xe8]
push eax
call sub.VCRUNTIME140.dll_memset
add esp, 0xc
mov dword [ebp - 0xe8], edi
lea ecx, [ebp - 0x44]
cmp dword [ebp - 0x30], 8
jb 0x42c0c0
mov ecx, dword [ebp - 0x44]
lea eax, [ebp - 0x2c]
cmp dword [ebp - 0x18], 8
jb 0x42c0cc
mov eax, dword [ebp - 0x2c]
lea edx, [ebp - 0x70]
push edx
lea edx, [ebp - 0xe8]
push edx
push ecx
xor ecx, ecx
push ecx
push 8
push ecx
push ecx
push ecx
push ecx
push eax
call dword [sym.imp.KERNEL32.dll_CreateProcessW]
test eax, eax
je 0x43e443
mov edi, dword [ebp - 0x70]
test edi, edi
je 0x43e469
mov dword [ebp - 0x54], edi
push dword [ebp - 0x6c]
call dword [sym.imp.KERNEL32.dll_CloseHandle]
mov dword [ebp - 0x5c], esi
mov dword [ebp - 0x58], edi
push 0x3e8
push 0
lea eax, [ebp - 0x5c]
push eax
push 2
call dword [sym.imp.KERNEL32.dll_WaitForMultipleObjects]
sub eax, 0
jne 0x43e489
push edi
mov ebx, dword [sym.imp.KERNEL32.dll_CloseHandle]
call ebx
lea ecx, [ebp - 0x44]
call fcn.0042baf9
push esi
call ebx
push dword [ebp - 0x48]
call dword [sym.imp.KERNEL32.dll_ReleaseMutex]
push dword [ebp - 0x48]
call ebx
lea ecx, [ebp - 0x2c]
call fcn.0042baf9
xor ebx, ebx
inc ebx
jmp 0x42c081
test bl, bl
je 0x43e37e
push 0x420c74
call fcn.00444c78
pop ecx
jmp 0x43e37e
push edi
mov ebx, dword [sym.imp.KERNEL32.dll_CloseHandle]
call ebx
lea ecx, [ebp - 0x44]
call fcn.0042baf9
push esi
call ebx
push dword [ebp - 0x48]
call dword [sym.imp.KERNEL32.dll_ReleaseMutex]
push dword [ebp - 0x48]
call ebx
lea ecx, [ebp - 0x2c]
call fcn.0042baf9
xor al, al
jmp 0x42c083
test bl, bl
je 0x42c077
lea eax, [ebp - 0x2c]
cmp dword [ebp - 0x18], 8
jb 0x43e399
mov eax, dword [ebp - 0x2c]
push eax
push 0x420c9c
call fcn.00444c78
pop ecx
pop ecx
jmp 0x42c077
call dword [sym.imp.KERNEL32.dll_GetLastError]
push eax
mov edx, 0x420bac
lea ecx, [ebp - 0x7c]
call fcn.00446d9c
mov dword [esp], 0x447820
lea eax, [ebp - 0x7c]
jmp 0x43e3ef
call dword [sym.imp.KERNEL32.dll_GetLastError]
push eax
mov edx, 0x420dd0
lea ecx, [ebp - 0xa0]
call fcn.00446d9c
mov dword [esp], 0x447820
lea eax, [ebp - 0xa0]
push eax
call sub.VCRUNTIME140.dll__CxxThrowException
test bl, bl
je 0x43e404
push 0x420ccc
call fcn.00444c78
pop ecx
push esi
mov esi, dword [sym.imp.KERNEL32.dll_CloseHandle]
call esi
push dword [ebp - 0x48]
call dword [sym.imp.KERNEL32.dll_ReleaseMutex]
push dword [ebp - 0x48]
call esi
xor ebx, ebx
inc ebx
jmp 0x42c079
push 0x420cfc
call fcn.00444c78
pop ecx
jmp 0x42c060
push 0x420d2c
call fcn.00444c78
pop ecx
jmp 0x42c091
call dword [sym.imp.KERNEL32.dll_GetLastError]
push eax
mov edx, 0x420d40
lea ecx, [ebp - 0x88]
call fcn.00446d9c
mov dword [esp], 0x447820
lea eax, [ebp - 0x88]
jmp 0x43e3ef
push 0x420d50
lea ecx, [ebp - 0x94]
call fcn.0042c4a9
push 0x447820
lea eax, [ebp - 0x94]
jmp 0x43e3ef
sub eax, 1
je 0x43e4a4
sub eax, 0x101
jne 0x43e3cb
test bl, bl
je 0x43e4b3
push 0x420dac
jmp 0x43e4ad
test bl, bl
je 0x43e4b3
push 0x420d7c
call fcn.00444c78
pop ecx
and dword [ebp - 4], 0
test bl, bl
je 0x43e4c6
push 0x420de8
call fcn.00444c78
pop ecx
call fcn.00446d0d
or dword [ebp - 4], 0xffffffff
jmp 0x43e354