Function at 0x42c569
Capabilities:
Create a process with modified i/o handles and window
Create process on windows

Disassembly:
push 0xdc
mov eax, 0x4398d6
call fcn.0042fbee
mov bl, cl
mov byte [ebp - 0x4c], bl
call fcn.0042c8ee
test al, al
je 0x43e825
lea ecx, [ebp - 0x2c]
call fcn.0042c1e6
lea ecx, [ebp - 0x2c]
call fcn.0042c804
test al, al
je 0x43e871
lea ecx, [ebp - 0x48]
call fcn.0042c8b3
push 0x4018a0
push 0
push 1
push 0
call dword [sym.imp.KERNEL32.dll_CreateEventW]
mov esi, eax
mov dword [ebp - 0x50], esi
test esi, esi
je 0x43e897
lea ecx, [ebp - 0x50]
call fcn.0042c88c
test al, al
jne 0x43e8e1
call fcn.0042c83d
test al, al
jne 0x43e90c
test bl, bl
jne 0x43e941
lea ecx, [ebp - 0x44]
call fcn.0042c4d6
push 0x44
pop edi
push edi
push 0
lea eax, [ebp - 0xe8]
push eax
call sub.VCRUNTIME140.dll_memset
add esp, 0xc
mov dword [ebp - 0xe8], edi
lea ecx, [ebp - 0x44]
cmp dword [ebp - 0x30], 8
jb 0x42c61c
mov ecx, dword [ebp - 0x44]
lea eax, [ebp - 0x2c]
cmp dword [ebp - 0x18], 8
jb 0x42c628
mov eax, dword [ebp - 0x2c]
lea edx, [ebp - 0x70]
push edx
lea edx, [ebp - 0xe8]
push edx
push ecx
xor ecx, ecx
push ecx
push 8
push ecx
push ecx
push ecx
push ecx
push eax
call dword [sym.imp.KERNEL32.dll_CreateProcessW]
test eax, eax
je 0x43e951
mov edi, dword [ebp - 0x70]
test edi, edi
je 0x43e97a
mov dword [ebp - 0x54], edi
push dword [ebp - 0x6c]
call dword [sym.imp.KERNEL32.dll_CloseHandle]
mov dword [ebp - 0x5c], esi
mov dword [ebp - 0x58], edi
push 0x3e8
push 0
lea eax, [ebp - 0x5c]
push eax
push 2
call dword [sym.imp.KERNEL32.dll_WaitForMultipleObjects]
sub eax, 0
jne 0x43e99a
push edi
mov ebx, dword [sym.imp.KERNEL32.dll_CloseHandle]
call ebx
lea ecx, [ebp - 0x44]
call fcn.0042bf89
push esi
call ebx
push dword [ebp - 0x48]
call dword [sym.imp.KERNEL32.dll_ReleaseMutex]
push dword [ebp - 0x48]
call ebx
lea ecx, [ebp - 0x2c]
call fcn.0042bf89
xor ebx, ebx
inc ebx
mov al, bl
call fcn.0042fba9
ret
test bl, bl
je 0x43e86a
push 0x42116c
call fcn.00445212
pop ecx
jmp 0x43e86a
push edi
mov ebx, dword [sym.imp.KERNEL32.dll_CloseHandle]
call ebx
lea ecx, [ebp - 0x44]
call fcn.0042bf89
push esi
call ebx
push dword [ebp - 0x48]
call dword [sym.imp.KERNEL32.dll_ReleaseMutex]
push dword [ebp - 0x48]
call ebx
lea ecx, [ebp - 0x2c]
call fcn.0042bf89
xor al, al
jmp 0x42c6b4
test bl, bl
je 0x43e932
lea eax, [ebp - 0x2c]
cmp dword [ebp - 0x18], 8
jb 0x43e885
mov eax, dword [ebp - 0x2c]
push eax
push 0x421194
call fcn.00445212
pop ecx
pop ecx
jmp 0x43e932
call dword [sym.imp.KERNEL32.dll_GetLastError]
push eax
mov edx, 0x42106c
lea ecx, [ebp - 0x7c]
call fcn.0044736c
mov dword [esp], 0x447df0
lea eax, [ebp - 0x7c]
jmp 0x43e8db
call dword [sym.imp.KERNEL32.dll_GetLastError]
push eax
mov edx, 0x4212d0
lea ecx, [ebp - 0xa0]
call fcn.0044736c
mov dword [esp], 0x447df0
lea eax, [ebp - 0xa0]
push eax
call sub.VCRUNTIME140.dll__CxxThrowException
test bl, bl
je 0x43e8f0
push 0x4211c4
call fcn.00445212
pop ecx
push esi
mov esi, dword [sym.imp.KERNEL32.dll_CloseHandle]
call esi
push dword [ebp - 0x48]
call dword [sym.imp.KERNEL32.dll_ReleaseMutex]
push dword [ebp - 0x48]
call esi
xor ebx, ebx
inc ebx
jmp 0x43e934
test bl, bl
je 0x43e91b
push 0x4211f4
call fcn.00445212
pop ecx
push esi
mov esi, dword [sym.imp.KERNEL32.dll_CloseHandle]
call esi
push dword [ebp - 0x48]
call dword [sym.imp.KERNEL32.dll_ReleaseMutex]
push dword [ebp - 0x48]
call esi
xor bl, bl
lea ecx, [ebp - 0x2c]
call fcn.0042bf89
jmp 0x42c6b2
push 0x421224
call fcn.00445212
pop ecx
jmp 0x42c5ed
call dword [sym.imp.KERNEL32.dll_GetLastError]
push eax
mov edx, 0x421238
lea ecx, [ebp - 0x88]
call fcn.0044736c
mov dword [esp], 0x447df0
lea eax, [ebp - 0x88]
jmp 0x43e8db
push 0x421248
lea ecx, [ebp - 0x94]
call fcn.00446f56
push 0x447df0
lea eax, [ebp - 0x94]
jmp 0x43e8db
sub eax, 1
je 0x43e9b5
sub eax, 0x101
jne 0x43e8b7
test bl, bl
je 0x43e9c4
push 0x4212a4
jmp 0x43e9be
test bl, bl
je 0x43e9c4
push 0x421274
call fcn.00445212
pop ecx
and dword [ebp - 4], 0
test bl, bl
je 0x43e9d7
push 0x4212e8
call fcn.00445212
pop ecx
call fcn.004472dd
or dword [ebp - 4], 0xffffffff
jmp 0x43e840