Function at 0x43587e
Capabilities:
Create pipe
Create process on windows
Create two anonymous pipes
Resume thread

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x284
push ebx
push esi
push edi
mov ebx, dword [ebp + 0x10]
lea edi, [ebp - 0x60]
nop
push dword [ebp + 0xc]
lea eax, [ebp - 0x178]
push eax
call fcn.0045f361
add esp, 8
push 0x5c
lea eax, [ebp - 0x178]
push eax
call fcn.00460545
add esp, 8
mov esi, eax
test esi, esi
je 0x4358c6
movsx eax, byte [esi - 1]
cmp eax, 0x3a
je 0x4358c6
mov byte [esi], 0
push 0xc
push 0
lea eax, [ebp - 0xc]
push eax
call fcn.0045e1bd
add esp, 0xc
mov dword [ebp - 0xc], 0xc
mov dword [ebp - 4], 1
push 0
lea eax, [ebp - 0xc]
push eax
lea eax, [ebp - 0x70]
push eax
lea eax, [ebp - 0x68]
push eax
call sub.KERNEL32.DLL_CreatePipe
push 0x44
push 0
push edi
call fcn.0045e1bd
add esp, 0xc
mov dword [edi], 0x44
mov dword [edi + 0x2c], pe_nt_image_headers32
push 0
lea eax, [ebp - 0xc]
push eax
lea eax, [ebp - 0x64]
push eax
lea eax, [ebp - 0x6c]
push eax
call sub.KERNEL32.DLL_CreatePipe
push 3
push 0
push 0
lea eax, [ebp - 0x64]
push eax
call sub.KERNEL32.DLL_GetCurrentProcess
push eax
push dword [ebp - 0x64]
call sub.KERNEL32.DLL_GetCurrentProcess
push eax
call sub.KERNEL32.DLL_DuplicateHandle
mov dword [edi + 0x38], 0xffffffff
mov eax, dword [ebp - 0x70]
mov dword [edi + 0x3c], eax
mov eax, dword [ebp - 0x70]
mov dword [edi + 0x40], eax
lea eax, [ebp - 0x1c]
push eax
push edi
lea eax, [ebp - 0x178]
push eax
push 0
push 0xc
push 1
push 0
push 0
push dword [ebp + 8]
push 0
call sub.KERNEL32.DLL_CreateProcessA
mov dword [ebp - 0x74], eax
push dword [ebp - 0x70]
call sub.KERNEL32.DLL_CloseHandle
push dword [ebp - 0x6c]
call sub.KERNEL32.DLL_CloseHandle
mov eax, dword [ebp - 0x74]
test eax, eax
je 0x435a10
call sub.KERNEL32.DLL_GetCurrentThread
push eax
call sub.KERNEL32.DLL_GetThreadPriority
mov dword [ebp - 0x284], eax
push 1
call sub.KERNEL32.DLL_GetCurrentThread
push eax
call sub.KERNEL32.DLL_SetThreadPriority
push 0x20
push dword [ebp - 0x1c]
call sub.KERNEL32.DLL_SetPriorityClass
push 2
push dword [ebp - 0x18]
call sub.KERNEL32.DLL_SetThreadPriority
push dword [ebp - 0x18]
call sub.KERNEL32.DLL_ResumeThread
push dword [ebp - 0x1c]
push ebx
push dword [ebp - 0x68]
call fcn.00435630
add esp, 0xc
test eax, eax
jne 0x4359cd
push 0xffffffffffffffff
push dword [ebp - 0x1c]
call sub.KERNEL32.DLL_WaitForSingleObject
push dword [ebp - 0x1c]
push ebx
push dword [ebp - 0x68]
call fcn.00435630
add esp, 0xc
test eax, eax
jne 0x4359ea
push dword [ebp - 0x284]
call sub.KERNEL32.DLL_GetCurrentThread
push eax
call sub.KERNEL32.DLL_SetThreadPriority
jmp 0x435a41
lea eax, [ebp - 0x27c]
push eax
call sub.KERNEL32.DLL_GetLastError
push eax
push str._r_n_d:_Cant_spawn__s_r_n
lea eax, [0x492f81]
push eax
call fcn.0045eeda
add esp, 0x10
lea eax, [0x492f81]
push eax
push ebx
call fcn.0042a328
add esp, 8
push dword [ebp - 0x68]
call sub.KERNEL32.DLL_CloseHandle
push dword [ebp - 0x64]
call sub.KERNEL32.DLL_CloseHandle
mov eax, dword [ebp - 0x74]
test eax, eax
jne 0x435a5f
mov eax, 0x55555555
jmp 0x435a7e
lea eax, [ebp - 0x74]
push eax
push dword [ebp - 0x1c]
call sub.KERNEL32.DLL_GetExitCodeProcess
push dword [ebp - 0x1c]
call sub.KERNEL32.DLL_CloseHandle
push dword [ebp - 0x18]
call sub.KERNEL32.DLL_CloseHandle
mov eax, dword [ebp - 0x74]
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret