Function at 0x140004860
Capabilities:
Accept command line arguments
Create process on windows

Disassembly:
mov rax, rsp
mov qword [rax + 0x10], rbx
mov qword [rax + 0x18], rsi
mov qword [rax + 0x20], rdi
push rbp
push r12
push r13
push r14
push r15
lea rbp, [rax - 0x138]
sub rsp, 0x210
mov rax, qword [0x1400230c0]
xor rax, rsp
mov qword [rbp + 0x100], rax
mov rbx, rcx
call fcn.140001ef4
mov esi, 0x105
lea rdx, [rbp - 0x10]
xor ecx, ecx
mov r8d, esi
mov rdi, rax
call qword [sym.imp.KERNEL32.dll_GetModuleFileNameA]
test eax, eax
je 0x140004cd7
cmp eax, 0x104
jg 0x140004cd7
lea rdx, [rbp - 0x10]
lea rcx, str.ExecJRE:_old:__s_n
call fcn.14000407c
lea rcx, str.ExecJRE:_new:__s_n
mov rdx, rbx
call fcn.14000407c
mov rcx, rbx
call fcn.14000a130
lea rdx, [rbp - 0x10]
mov rcx, rbx
mov r8, rax
call fcn.14001966c
test eax, eax
je 0x140004cf1
lea r8, str._s_bin_s.exe
lea rcx, [rbp - 0x10]
mov r9, rbx
mov edx, esi
mov qword [rsp + 0x20], rdi
call fcn.140004308
call qword [sym.imp.KERNEL32.dll_GetCommandLineA]
mov rcx, rax
call fcn.140004048
lea rcx, [rsp + 0x50]
mov r15, rax
mov qword [rsp + 0x50], rax
call fcn.1400047d0
mov rsi, qword [rsp + 0x50]
mov rcx, rsi
call fcn.14000a130
lea rcx, [rbp - 0x10]
mov rbx, rax
call fcn.14000a130
lea rcx, [rbx + rax + 4]
call fcn.140003ff0
lea rcx, [rbp - 0x10]
mov edx, 0x20
mov rbx, rax
call fcn.14000c1dc
test rax, rax
jne 0x140004999
lea edx, [rax + 9]
lea rcx, [rbp - 0x10]
call fcn.14000c1dc
test rax, rax
jne 0x140004999
lea rdx, [rbp - 0x10]
mov rcx, rbx
call fcn.14000a8e0
jmp 0x1400049c3
lea rdx, [0x14001b59c]
mov rcx, rbx
call fcn.14000a8e0
lea rdx, [rbp - 0x10]
mov rcx, rax
call fcn.14000a840
lea rdx, [0x14001b59c]
mov rcx, rax
call fcn.14000a840
cmp byte [rsi], 0
mov r13, rax
mov edi, 1
je 0x140004b8d
lea rcx, [rsp + 0x50]
call fcn.1400047d0
mov r14, rax
cmp byte [rax], 0
je 0x140004b3f
mov rcx, rax
mov rbx, rax
call fcn.14000a130
lea rcx, [rdi + rax]
call fcn.140003ff0
cmp byte [rbx], 0
mov r12, rax
mov rsi, rax
je 0x140004a60
mov al, byte [rbx]
cmp al, 0x22
je 0x140004a58
cmp al, 0x5c
jne 0x140004a53
lea rdx, [0x14001b4f4]
mov rcx, rbx
call fcn.14000b020
lea r11, [rbx + rax]
cmp byte [r11], 0x22
jne 0x140004a4c
mov byte [rsi], 0x5c
add rbx, 2
add rsi, rdi
cmp byte [rbx], 0x5c
jne 0x140004a5b
cmp rbx, r11
jb 0x140004a2c
jmp 0x140004a5b
mov al, byte [rbx]
mov byte [rsi], al
add rsi, rdi
add rbx, rdi
cmp rbx, r11
jb 0x140004a42
jmp 0x140004a5b
mov byte [rsi], al
add rsi, rdi
add rbx, rdi
cmp byte [rbx], 0
jne 0x140004a09
mov byte [rsi], 0
cmp byte [r12], 0x2d
jne 0x140004b4c
lea rdx, str._classpath
mov rcx, r12
call fcn.14000a9e0
test eax, eax
je 0x140004aeb
lea rdx, [0x14001ac8c]
mov rcx, r12
call fcn.14000a9e0
test eax, eax
je 0x140004aeb
lea rdx, str._version:
mov r8d, 9
mov rcx, r12
call fcn.14000b700
test eax, eax
je 0x140004b37
lea rdx, str._jre_restrict_search
mov rcx, r12
call fcn.14000a9e0
test eax, eax
je 0x140004b37
lea rdx, str._no_jre_restrict_search
mov rcx, r12
call fcn.14000a9e0
test eax, eax
je 0x140004b37
lea rdx, [0x14001a724]
mov rcx, r13
call fcn.14000a840
mov rdx, r14
jmp 0x140004b2c
lea rdx, [0x14001a724]
mov rcx, r13
call fcn.14000a840
mov rdx, r14
mov rcx, rax
call fcn.14000a840
lea rcx, [rsp + 0x50]
mov r13, rax
call fcn.1400047d0
cmp byte [rax], 0
mov rbx, rax
je 0x140004b37
lea rdx, [0x14001a724]
mov rcx, r13
call fcn.14000a840
mov rdx, rbx
mov rcx, rax
call fcn.14000a840
mov r13, rax
mov rcx, r12
call fcn.140004074
mov rax, qword [rsp + 0x50]
cmp byte [rax], 0
jmp 0x1400049ce
lea rdx, [0x14001a724]
mov rcx, r13
call fcn.14000a840
mov rdx, r14
mov rcx, rax
call fcn.14000a840
lea rdx, [0x14001a724]
mov rcx, rax
call fcn.14000a840
mov rdx, qword [rsp + 0x50]
mov rcx, rax
call fcn.14000a840
mov rcx, r12
mov r13, rax
call fcn.140004074
mov rcx, r15
call fcn.140004074
call fcn.1400040e0
test al, al
je 0x140004be4
mov rcx, r13
call fcn.140004048
lea rcx, [rsp + 0x50]
mov rbx, rax
mov qword [rsp + 0x50], rax
call fcn.1400047d0
lea rdx, [rbp - 0x10]
lea rcx, str.ReExec_Command:__s___s__n
mov r8, rax
call fcn.140009db4
mov rdx, qword [rsp + 0x50]
lea rcx, str.ReExec_Args:__s_n
call fcn.140009db4
mov rcx, rbx
call fcn.140004074
call fcn.14000ad28
lea rcx, [rax + 0x30]
call fcn.14000c18c
call fcn.14000ad28
lea rcx, [rax + 0x60]
call fcn.14000c18c
mov ebx, 0x68
lea rcx, [rbp - 0x80]
mov r8d, ebx
xor edx, edx
call fcn.14000a6c0
lea r8d, [rbx - 0x50]
lea rcx, [rsp + 0x60]
xor edx, edx
mov dword [rbp - 0x80], ebx
call fcn.14000a6c0
lea r11, [rsp + 0x60]
lea rax, [rbp - 0x80]
mov qword [rsp + 0x48], r11
mov qword [rsp + 0x40], rax
and qword [rsp + 0x38], 0
and qword [rsp + 0x30], 0
and dword [rsp + 0x28], 0
lea rcx, [rbp - 0x10]
xor r9d, r9d
xor r8d, r8d
mov rdx, r13
mov dword [rsp + 0x20], edi
call qword [sym.imp.KERNEL32.dll_CreateProcessA]
test eax, eax
jne 0x140004c7d
lea rdx, [rbp - 0x10]
lea rcx, str.Error:_CreateProcess__s__...__failed:
call fcn.14000440c
mov ecx, edi
call fcn.140009d54
int3
mov rcx, qword [rsp + 0x60]
or ebx, 0xffffffff
mov edx, ebx
call qword [sym.imp.KERNEL32.dll_WaitForSingleObject]
cmp eax, ebx
je 0x140004ca7
mov rcx, qword [rsp + 0x60]
lea rdx, [rsp + 0x58]
call qword [sym.imp.KERNEL32.dll_GetExitCodeProcess]
test eax, eax
jne 0x140004cb7
jmp 0x140004cb3
lea rcx, str.Error:_WaitForSingleObject___failed.
call fcn.140004360
mov dword [rsp + 0x58], edi
mov rcx, qword [rsp + 0x68]
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov rcx, qword [rsp + 0x60]
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov ecx, dword [rsp + 0x58]
call fcn.140009d54
int3
lea rcx, str.Error:_Unable_to_resolve__s
mov rdx, rdi
call fcn.14000440c
mov ecx, 1
call fcn.140009d54
int3
mov rcx, qword [rbp + 0x100]
xor rcx, rsp
call fcn.14000a9b0
lea r11, [rsp + 0x210]
mov rbx, qword [r11 + 0x38]
mov rsi, qword [r11 + 0x40]
mov rdi, qword [r11 + 0x48]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rbp
ret