Function at 0x140194120
Capabilities:
Create pipe
Create process on windows
Create thread
Create two anonymous pipes

Disassembly:
push rbp
push rsi
push rdi
mov eax, 0x2180
call sub.ntdll.dll___chkstk
sub rsp, rax
mov qword [rsp + 0xb8], 0xfffffffffffffffe
mov qword [rsp + 0x21b8], rbx
mov rax, qword [0x14042d950]
xor rax, rsp
mov qword [rsp + 0x2170], rax
mov rsi, r8
mov rbx, rdx
mov rdi, rcx
mov qword [rsp + reloc.MFC80U.DLL_Ordinal_320], rcx
mov qword [rsp + 0x130], rdx
mov qword [rsp + 0x138], r8
mov word [rsp + 0x170], 0
xor edx, edx
mov r8d, 0x1ffe
lea rcx, [rsp + 0x172]
call sub.ntdll.dll_memset
cmp qword [rsi + 0x20], 8
jb 0x1401941a4
mov rax, qword [rsi + 8]
jmp 0x1401941a8
lea rax, [rsi + 8]
cmp qword [rbx + 0x20], 8
jb 0x1401941b5
mov rcx, qword [rbx + 8]
jmp 0x1401941b9
lea rcx, [rbx + 8]
cmp qword [rdi + 0x20], 8
jb 0x1401941c6
mov r9, qword [rdi + 8]
jmp 0x1401941ca
lea r9, [rdi + 8]
mov qword [rsp + 0x28], rax
mov qword [rsp + 0x20], rcx
lea r8, str.__s__export___s__1___s____compressmaximum
mov edx, 0x2000
lea rcx, [rsp + 0x170]
call fcn.140013b00
xor r11d, r11d
mov qword [rsp + 0x88], r11
mov qword [rsp + 0x90], r11
mov dword [rsp + 0x90], 1
xor ebp, ebp
mov qword [rsp + 0x88], rbp
mov dword [rsp + 0x80], 0x18
mov qword [rsp + 0x58], rbp
mov qword [rsp + 0x98], rbp
mov qword [rsp + 0x50], rbp
mov qword [rsp + 0x60], rbp
mov r9d, 0x1000
lea r8, [rsp + 0x80]
lea rdx, [rsp + 0x98]
lea rcx, [rsp + 0x58]
call qword [sym.imp.KERNEL32.dll_CreatePipe]
mov r9d, 0x1000
lea r8, [rsp + 0x80]
lea rdx, [rsp + 0x60]
lea rcx, [rsp + 0x50]
call qword [sym.imp.KERNEL32.dll_CreatePipe]
lea rcx, [rsp + 0x148]
call qword [sym.imp.MSVCP80.dll_public:_void___cdecl_std::basic_string_char__struct_std::char_traits_char___class_std::allocator_char__::constructor_void____ptr64]
nop
mov dword [rsp + 0xc0], ebp
xor edx, edx
lea r8d, [rbp + 0x60]
lea rcx, [rsp + 0xc8]
call sub.ntdll.dll_memset
mov qword [rsp + 0xa0], rbp
xor eax, eax
mov qword [rsp + 0xa8], rax
mov qword [rsp + 0xb0], rax
mov dword [rsp + 0xfc], Ordinal_265
mov word [rsp + 0x100], ax
mov rax, qword [rsp + 0x58]
mov qword [rsp + 0x110], rax
mov rax, qword [rsp + 0x60]
mov qword [rsp + reloc.MFC80U.DLL_Ordinal_280], rax
mov qword [rsp + 0x120], rax
lea rax, [rsp + 0xa0]
mov qword [rsp + 0x48], rax
lea rax, [rsp + 0xc0]
mov qword [rsp + 0x40], rax
mov qword [rsp + 0x38], rbp
mov qword [rsp + 0x30], rbp
mov dword [rsp + 0x28], ebp
mov dword [rsp + 0x20], 1
xor r9d, r9d
xor r8d, r8d
lea rdx, [rsp + 0x170]
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateProcessW]
test eax, eax
jne 0x14019436b
lea rcx, [rsp + 0x148]
call qword [sym.imp.MSVCP80.dll_public:_void___cdecl_std::basic_string_char__struct_std::char_traits_char___class_std::allocator_char__::destructor_void____ptr64]
nop
mov rcx, rdi
call qword [sym.imp.MSVCP80.dll_public:_void___cdecl_std::basic_string_wchar_t__struct_std::char_traits_wchar_t___class_std::allocator_wchar_t__::destructor_void____ptr64]
nop
mov rcx, rbx
call qword [sym.imp.MSVCP80.dll_public:_void___cdecl_std::basic_string_wchar_t__struct_std::char_traits_wchar_t___class_std::allocator_wchar_t__::destructor_void____ptr64]
nop
mov rcx, rsi
call qword [sym.imp.MSVCP80.dll_public:_void___cdecl_std::basic_string_wchar_t__struct_std::char_traits_wchar_t___class_std::allocator_wchar_t__::destructor_void____ptr64]
xor al, al
jmp 0x140194449
mov rax, qword [rsp + 0xa0]
mov qword [0x140442ec0], rax
xor eax, eax
mov qword [rsp + 0x70], rax
mov qword [rsp + 0x78], rax
mov rax, qword [rsp + 0x50]
mov qword [rsp + 0x68], rax
mov byte [rsp + 0x70], 0
lea rax, [0x140442efc]
mov qword [rsp + 0x78], rax
mov qword [rsp + 0x28], rbp
mov dword [rsp + 0x20], ebp
lea r9, [rsp + 0x68]
lea r8, [0x140192be0]
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateThread]
mov rbp, rax
test rax, rax
jne 0x1401943f8
lea rcx, [rsp + 0x148]
call qword [sym.imp.MSVCP80.dll_public:_void___cdecl_std::basic_string_char__struct_std::char_traits_char___class_std::allocator_char__::destructor_void____ptr64]
nop
mov rcx, rdi
call qword [sym.imp.MSVCP80.dll_public:_void___cdecl_std::basic_string_wchar_t__struct_std::char_traits_wchar_t___class_std::allocator_wchar_t__::destructor_void____ptr64]
nop
mov rcx, rbx
call qword [sym.imp.MSVCP80.dll_public:_void___cdecl_std::basic_string_wchar_t__struct_std::char_traits_wchar_t___class_std::allocator_wchar_t__::destructor_void____ptr64]
nop
mov rcx, rsi
call qword [sym.imp.MSVCP80.dll_public:_void___cdecl_std::basic_string_wchar_t__struct_std::char_traits_wchar_t___class_std::allocator_wchar_t__::destructor_void____ptr64]
xor al, al
jmp 0x140194449
or edx, 0xffffffff
mov rcx, qword [rsp + 0xa0]
call qword [sym.imp.KERNEL32.dll_WaitForSingleObject]
mov byte [rsp + 0x70], 1
or edx, 0xffffffff
mov rcx, rbp
call qword [sym.imp.KERNEL32.dll_WaitForSingleObject]
nop
lea rcx, [rsp + 0x148]
call qword [sym.imp.MSVCP80.dll_public:_void___cdecl_std::basic_string_char__struct_std::char_traits_char___class_std::allocator_char__::destructor_void____ptr64]
nop
mov rcx, rdi
call qword [sym.imp.MSVCP80.dll_public:_void___cdecl_std::basic_string_wchar_t__struct_std::char_traits_wchar_t___class_std::allocator_wchar_t__::destructor_void____ptr64]
nop
mov rcx, rbx
call qword [sym.imp.MSVCP80.dll_public:_void___cdecl_std::basic_string_wchar_t__struct_std::char_traits_wchar_t___class_std::allocator_wchar_t__::destructor_void____ptr64]
nop
mov rcx, rsi
call qword [sym.imp.MSVCP80.dll_public:_void___cdecl_std::basic_string_wchar_t__struct_std::char_traits_wchar_t___class_std::allocator_wchar_t__::destructor_void____ptr64]
mov al, 1
mov rcx, qword [rsp + 0x2170]
xor rcx, rsp
call fcn.140161080
mov rbx, qword [rsp + 0x21b8]
add rsp, 0x2180
pop rdi
pop rsi
pop rbp
ret