Function at 0x6a8ec0
Capabilities:
Create a process with modified i/o handles and window
Create pipe
Create process on windows
Create two anonymous pipes

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x2a0
mov eax, dword [0x75aa5c]
xor eax, ebp
mov dword [ebp - 0x1c], eax
call dword [sym.imp.KERNEL32.dll_GetCurrentProcess]
mov dword [ebp - 0x29c], eax
mov dword [ebp - 0x10], 3
push 0
push 0
lea eax, [ebp - 0x14]
push eax
lea ecx, [ebp - 0x18]
push ecx
call dword [sym.imp.KERNEL32.dll_CreatePipe]
push 0
push 0
lea edx, [ebp - 0x24c]
push edx
lea eax, [ebp - 0x250]
push eax
call dword [sym.imp.KERNEL32.dll_CreatePipe]
mov ecx, dword [ebp - 0x10]
push ecx
push 1
push 0
lea edx, [ebp - 0xc]
push edx
mov eax, dword [ebp - 0x29c]
push eax
mov ecx, dword [ebp - 0x18]
push ecx
mov edx, dword [ebp - 0x29c]
push edx
call dword [sym.imp.KERNEL32.dll_DuplicateHandle]
mov eax, dword [ebp - 0x10]
push eax
push 1
push 0
lea ecx, [ebp - 8]
push ecx
mov edx, dword [ebp - 0x29c]
push edx
mov eax, dword [ebp - 0x24c]
push eax
mov ecx, dword [ebp - 0x29c]
push ecx
call dword [sym.imp.KERNEL32.dll_DuplicateHandle]
push 0x44
push 0
lea edx, [ebp - 0x298]
push edx
call fcn.005a7100
add esp, 0xc
push 0x10
push 0
lea eax, [ebp - 0x13c]
push eax
call fcn.005a7100
add esp, 0xc
mov dword [ebp - 0x298], 0x44
mov dword [ebp - 0x26c], 0x101
xor ecx, ecx
mov word [ebp - 0x268], cx
mov edx, dword [ebp - 8]
mov dword [ebp - 0x258], edx
mov eax, dword [ebp - 0x258]
mov dword [ebp - 0x25c], eax
mov ecx, dword [ebp - 0xc]
mov dword [ebp - 0x260], ecx
mov edx, dword [ebp + 8]
mov eax, dword [edx + 0x10]
cmp dword [eax + 0x70], 0
jne 0x6a90d5
push 0x75e0b0
mov ecx, dword [ebp + 0xc]
push ecx
call fcn.005ab68c
add esp, 8
mov dword [ebp - 0x12c], eax
cmp dword [ebp - 0x12c], 0
je 0x6a9087
mov edx, dword [ebp - 0x12c]
push edx
push 0x104
lea eax, [ebp - 0x128]
push eax
call fcn.006bf349
add esp, 0xc
push 2
push 0x75e0b4
lea ecx, [ebp - 0x128]
push ecx
call fcn.005af3a0
add esp, 0xc
test eax, eax
je 0x6a902c
mov byte [ebp - 0x126], 0
lea edx, [ebp - 0x128]
push edx
call fcn.005a7ce0
add esp, 4
lea eax, [ebp + eax - 0x129]
mov dword [ebp - 4], eax
jmp 0x6a9050
mov ecx, dword [ebp - 4]
sub ecx, 1
mov dword [ebp - 4], ecx
mov edx, dword [ebp - 4]
lea eax, [ebp - 0x128]
cmp edx, eax
jbe 0x6a9078
mov ecx, dword [ebp - 4]
movsx edx, byte [ecx]
push edx
call fcn.005b4be0
add esp, 4
test eax, eax
je 0x6a9078
mov eax, dword [ebp - 4]
mov byte [eax], 0
jmp 0x6a9047
mov ecx, dword [ebp - 0x12c]
push ecx
call fcn.005ab232
add esp, 4
movsx edx, byte [ebp - 0x126]
test edx, edx
jne 0x6a909e
mov dword [ebp - 0x2a0], 0x8f78c0
jmp 0x6a90a8
mov dword [ebp - 0x2a0], 0x75e0b8
mov eax, dword [ebp + 0xc]
push eax
mov ecx, dword [ebp - 0x2a0]
push ecx
lea edx, [ebp - 0x126]
push edx
push 0x75e0bc
push 0x104
lea eax, [ebp - 0x248]
push eax
call fcn.006a8140
add esp, 0x18
jmp 0x6a90fc
mov ecx, dword [ebp + 0xc]
push ecx
mov edx, dword [ebp + 8]
mov eax, dword [edx + 0x10]
mov ecx, dword [eax + 0x70]
push ecx
push str._s__s
push 0x104
lea edx, [ebp - 0x248]
push edx
call fcn.006a8140
add esp, 0x14
mov eax, dword [ebp + 0x1c]
push eax
push 0x75e0cc
push 0x104
lea ecx, [ebp - 0x128]
push ecx
call fcn.006a8140
add esp, 0x10
lea edx, [ebp - 0x128]
push edx
call fcn.006a87c0
add esp, 4
lea eax, [ebp - 0x248]
push eax
call fcn.006a87c0
add esp, 4
push 0
push 0x6a9390
mov ecx, dword [ebp - 0x250]
push ecx
mov edx, dword [ebp + 0x18]
push edx
call fcn.006a94b0
add esp, 0x10
mov eax, dword [ebp + 8]
mov ecx, dword [eax + 0x140]
push ecx
push 0x6a9210
mov edx, dword [ebp - 0x14]
push edx
mov eax, dword [ebp + 0x18]
push eax
call fcn.006a94b0
add esp, 0x10
lea ecx, [ebp - 0x13c]
push ecx
lea edx, [ebp - 0x298]
push edx
lea eax, [ebp - 0x128]
push eax
mov ecx, dword [ebp + 0x10]
push ecx
push 0x200
push 1
push 0
push 0
lea edx, [ebp - 0x248]
push edx
push 0
call dword [sym.imp.KERNEL32.dll_CreateProcessA]
test eax, eax
jne 0x6a91cf
call dword [sym.imp.KERNEL32.dll_GetLastError]
push eax
lea eax, [ebp - 0x248]
push eax
push str.redirect:_CreateProcess__s_:__d
mov ecx, dword [ebp + 8]
push ecx
push 2
call fcn.006a8220
add esp, 0x14
or eax, 0xffffffff
jmp 0x6a91ff
mov edx, dword [ebp - 0xc]
push edx
call dword [sym.imp.KERNEL32.dll_CloseHandle]
mov eax, dword [ebp - 8]
push eax
call dword [sym.imp.KERNEL32.dll_CloseHandle]
mov ecx, dword [ebp - 0x138]
push ecx
call dword [sym.imp.KERNEL32.dll_CloseHandle]
mov edx, dword [ebp - 0x13c]
push edx
call dword [sym.imp.KERNEL32.dll_CloseHandle]
xor eax, eax
mov ecx, dword [ebp - 0x1c]
xor ecx, ebp
call fcn.005a6f18
mov esp, ebp
pop ebp
ret