Function at 0x140001b43
Capabilities:
Create a process with modified i/o handles and window
Create pipe
Create process on windows
Execute shell command and capture output
Get comspec environment variable
Query environment variable
Read file on windows
Read pipe

Disassembly:
push rbp
push rdi
push rbx
sub rsp, 0x620
lea rbp, [rsp + 0x80]
mov qword [rbp + 0x5c0], rcx
mov qword [rbp + 0x5c8], rdx
lea rax, str.COMSPEC
mov rcx, rax
call sym.getenv
mov qword [rbp + 0x590], rax
lea rax, [rbp + 0x500]
mov rcx, rax
call dbg.std::__cxx11::wstring_convert<std::codecvt_utf8<wchar_t, 1114111ul, (std::codecvt_mode)0>, wchar_t, std::allocator<wchar_t>, std::allocator<char> >::wstring_convert()
lea rax, [rbp + 0x4e0]
mov rcx, qword [rbp + 0x5c8]
lea rdx, [rbp + 0x500]
mov r8, rcx
mov rcx, rax
call dbg.std::__cxx11::wstring_convert<std::codecvt_utf8<wchar_t, 1114111ul, (std::codecvt_mode)0>, wchar_t, std::allocator<wchar_t>, std::allocator<char> >::from_bytes(char const*)
lea rax, [rbp + 0x4c0]
mov rcx, qword [rbp + 0x590]
lea rdx, [rbp + 0x500]
mov r8, rcx
mov rcx, rax
call dbg.std::__cxx11::wstring_convert<std::codecvt_utf8<wchar_t, 1114111ul, (std::codecvt_mode)0>, wchar_t, std::allocator<wchar_t>, std::allocator<char> >::from_bytes(char const*)
lea rax, [rbp + 0x560]
lea rdx, [rbp + 0x4c0]
lea r8, str.__c
mov rcx, rax
call sym.std::__cxx11::basic_string_wchar_t__std::char_traits_wchar_t___std::allocator_wchar_t____std::operator_wchar_t__std::char_traits_wchar_t___std::allocator_wchar_t____std::__cxx11::basic_string_wchar_t__std::char_traits_wchar_t___std::allocator_wchar_t____const__wchar_t_const_
lea rax, [rbp + 0x4a0]
lea rcx, [rbp + 0x4e0]
lea rdx, [rbp + 0x560]
mov r8, rcx
mov rcx, rax
call method.std::__cxx11::basic_string_wchar_t__std::char_traits_wchar_t___std::allocator_wchar_t____std::operator_wchar_t__std::char_traits_wchar_t___std.allocator_wchar_t____std::__cxx11::basic_string_wchar_t__std::char_traits_wchar_t___std::allocator_wchar
lea rax, [rbp + 0x560]
mov rcx, rax
call fcn.140002f78
mov dword [rbp + 0x480], 0x18
mov dword [rbp + 0x490], 1
mov qword [rbp + 0x488], 0
mov qword [rbp + 0x478], 0
mov qword [rbp + 0x470], 0
lea rcx, [rbp + 0x480]
lea rdx, [rbp + 0x470]
lea rax, [rbp + 0x478]
mov r9d, 0
mov r8, rcx
mov rcx, rax
mov rax, qword [sym.imp.KERNEL32.dll_CreatePipe]
call rax
lea rax, [rbp + 0x587]
mov qword [rbp + 0x588], rax
nop
nop
lea rdx, [rbp + 0x587]
mov rax, qword [rbp + 0x5c0]
mov r8, rdx
lea rdx, [0x1400090e2]
mov rcx, rax
call dbg.std::__cxx11::basic_string<char, std::char_traits<char>, std::allocator<char> >::basic_string<std::allocator<char> >(char const*, std::allocator<char> const&)
lea rax, [rbp + 0x587]
mov rcx, rax
call dbg.std::__new_allocator<char>::~__new_allocator()
nop
lea rdx, [rbp + 0x400]
mov eax, 0
mov ecx, 0xd
mov rdi, rdx
rep stosq qword [rdi], rax
mov dword [rbp + 0x400], 0x68
mov dword [rbp + 0x43c], 0x101
mov word [rbp + 0x440], 0
mov qword [rbp + 0x450], 0xffffffffffffffff
mov rax, qword [rbp + 0x470]
mov qword [rbp + 0x458], rax
mov rax, qword [rbp + 0x470]
mov qword [rbp + 0x460], rax
pxor xmm0, xmm0
movups xmmword [rbp + 0x3e0], xmm0
movq qword [rbp + 0x3f0], xmm0
lea rax, [rbp + 0x4a0]
mov rcx, rax
call sym.std::__cxx11::basic_string_wchar_t__std::char_traits_wchar_t___std::allocator_wchar_t___::c_str___const
mov rdx, rax
lea rax, [rbp + 0x3e0]
mov qword [rsp + 0x48], rax
lea rax, [rbp + 0x400]
mov qword [rsp + 0x40], rax
mov qword [rsp + 0x38], 0
mov qword [rsp + 0x30], 0
mov dword [rsp + 0x28], 0x10
mov dword [rsp + 0x20], 1
mov r9d, 0
mov r8d, 0
mov ecx, 0
mov rax, qword [sym.imp.KERNEL32.dll_CreateProcessW]
call rax
mov byte [rbp + 0x59f], 0
mov dword [rbp + 0x598], 0
jmp 0x140001ea1
mov rax, qword [rbp + 0x3e0]
mov edx, 0x32
mov rcx, rax
mov rax, qword [sym.imp.KERNEL32.dll_WaitForSingleObject]
call rax
test eax, eax
sete al
mov byte [rbp + 0x59f], al
add dword [rbp + 0x598], 1
mov dword [rbp + 0x3dc], 0
mov dword [rbp + 0x3d8], 0
mov rax, qword [rbp + 0x478]
mov qword [rsp + 0x28], 0
lea rdx, [rbp + 0x3d8]
mov qword [rsp + 0x20], rdx
mov r9d, 0
mov r8d, 0
mov edx, 0
mov rcx, rax
mov rax, qword [sym.imp.KERNEL32.dll_PeekNamedPipe]
call rax
test eax, eax
sete al
test al, al
jne 0x140001e9a
mov eax, dword [rbp + 0x3d8]
test eax, eax
je 0x140001e9d
mov rax, qword [rbp + 0x478]
lea rcx, [rbp + 0x3dc]
lea rdx, [rbp - 0x30]
mov qword [rsp + 0x20], 0
mov r9, rcx
mov r8d, 0x3ff
mov rcx, rax
mov rax, qword [sym.imp.KERNEL32.dll_ReadFile]
call rax
test eax, eax
je 0x140001e65
mov eax, dword [rbp + 0x3dc]
test eax, eax
jne 0x140001e6c
mov eax, 1
jmp 0x140001e71
mov eax, 0
test al, al
jne 0x140001ea0
mov eax, dword [rbp + 0x3dc]
mov eax, eax
mov byte [rbp + rax - 0x30], 0
lea rdx, [rbp - 0x30]
mov rax, qword [rbp + 0x5c0]
mov rcx, rax
call sym.std::__cxx11::basic_string_char__std::char_traits_char___std::allocator_char___::operator_char_const_
jmp 0x140001dc7
nop
jmp 0x140001ea1
nop
jmp 0x140001ea1
nop
movzx eax, byte [rbp + 0x59f]
xor eax, 1
test al, al
je 0x140001ebc
cmp dword [rbp + 0x598], 0x63
jle 0x140001d9d
mov rax, qword [rbp + 0x478]
mov rcx, rax
mov rax, qword [sym.imp.KERNEL32.dll_CloseHandle]
call rax
mov rax, qword [rbp + 0x470]
mov rcx, rax
mov rax, qword [sym.imp.KERNEL32.dll_CloseHandle]
call rax
mov rax, qword [rbp + 0x3e0]
mov rcx, rax
mov rax, qword [sym.imp.KERNEL32.dll_CloseHandle]
call rax
mov rax, qword [rbp + 0x3e8]
mov rcx, rax
mov rax, qword [sym.imp.KERNEL32.dll_CloseHandle]
call rax
nop
lea rax, [rbp + 0x4a0]
mov rcx, rax
call fcn.140002f78
lea rax, [rbp + 0x4c0]
mov rcx, rax
call fcn.140002f78
lea rax, [rbp + 0x4e0]
mov rcx, rax
call fcn.140002f78
lea rax, [rbp + 0x500]
mov rcx, rax
call dbg.std::__cxx11::wstring_convert<std::codecvt_utf8<wchar_t, 1114111ul, (std::codecvt_mode)0>, wchar_t, std::allocator<wchar_t>, std::allocator<char> >::~wstring_convert()
jmp 0x140001fe0
mov rax, qword [rbp + 0x5c0]
add rsp, 0x620
pop rbx
pop rdi
pop rbp
ret