Function at 0x407db4
Capabilities:
Create a process with modified i/o handles and window
Create process on windows
Delete file
Terminate process

Disassembly:
push rbx
push rbp
push rsi
push rdi
push r12
push r13
mov eax, 0x4178
call fcn.0040d260
sub rsp, rax
mov rax, qword [0x00413830]
mov qword [rsp + 0x4160], rax
mov rbx, rdx
mov rbp, r8
lea rdx, [rsp + 0x2160]
mov r8d, 0x2000
mov r13, rcx
call qword [sym.imp.KERNEL32.dll_GetShortPathNameA]
lea rdx, str.__version
lea rcx, [rsp + 0x2160]
call sub.msvcrt.dll_strcat
lea rcx, [rsp + 0x160]
call fcn.004052c8
xor esi, esi
lea rcx, [rsp + 0x160]
mov qword [rsp + 0x30], rsi
lea r8d, [rsi + 3]
xor r9d, r9d
mov edx, 0xc0000000
mov dword [rsp + 0x28], 0x80
mov qword [rsp + 0x58], rsi
mov dword [rsp + 0x20], 2
call qword [sym.imp.KERNEL32.dll_CreateFileA]
cmp rax, 0xffffffffffffffff
mov r12, rax
je 0x407ea5
call qword [sym.imp.KERNEL32.dll_GetCurrentProcess]
mov rdi, rax
call qword [sym.imp.KERNEL32.dll_GetCurrentProcess]
mov dword [rsp + 0x30], 2
lea r9, [rsp + 0x58]
mov r8, rdi
mov rdx, r12
mov rcx, rax
mov dword [rsp + 0x28], 1
mov dword [rsp + 0x20], esi
call qword [sym.imp.KERNEL32.dll_DuplicateHandle]
neg eax
sbb rcx, rcx
and rcx, qword [rsp + 0x58]
mov qword [rsp + 0x58], rcx
mov rcx, r12
call qword [sym.imp.KERNEL32.dll_CloseHandle]
xor edx, edx
lea rcx, [rsp + 0x60]
lea r8d, [rdx + 0x18]
call sub.msvcrt.dll_memset
mov edi, 0x68
lea rcx, [rsp + 0x80]
mov r8, rdi
xor edx, edx
call sub.msvcrt.dll_memset
lea rax, [rsp + 0x60]
mov dword [rsp + 0x80], edi
mov rdi, qword [rsp + 0x58]
mov qword [rsp + 0x48], rax
lea rax, [rsp + 0x80]
mov qword [rsp + 0x40], rax
mov qword [rsp + 0x38], rsi
mov qword [rsp + 0x30], rsi
lea rdx, [rsp + 0x2160]
xor r9d, r9d
xor r8d, r8d
xor ecx, ecx
mov dword [rsp + 0x28], 0x20
mov dword [rsp + 0xbc], 0x101
mov dword [rsp + 0x20], 1
mov qword [rsp + 0xe0], rdi
mov word [rsp + 0xc0], si
call qword [sym.imp.KERNEL32.dll_CreateProcessA]
cmp eax, esi
jne 0x407f71
call qword [sym.imp.KERNEL32.dll_GetLastError]
lea r8, [rsp + 0x160]
lea rdx, [rsp + 0x2160]
lea rcx, str.Could_not_create_process__s____s__error__d_
mov r9d, eax
call fcn.0040a860
mov rcx, rdi
call qword [sym.imp.KERNEL32.dll_CloseHandle]
jmp 0x4080dc
mov rcx, qword [rsp + 0x60]
mov edx, 0xea60
call qword [sym.imp.KERNEL32.dll_WaitForSingleObject]
mov rcx, qword [rsp + 0x60]
lea rdx, [rsp + 0x50]
call qword [sym.imp.KERNEL32.dll_GetExitCodeProcess]
mov edx, dword [rsp + 0x50]
lea rcx, str.Exit_Code__d
call fcn.0040a860
cmp dword [rsp + 0x50], 0x103
jne 0x407fc9
lea rcx, str.Terminating_process
call fcn.0040a860
mov rcx, qword [rsp + 0x60]
mov edx, 1
call qword [sym.imp.KERNEL32.dll_TerminateProcess]
jmp 0x407fe1
cmp dword [rsp + 0x50], esi
je 0x407fe1
lea r8, str.1.0.0
mov rdx, rbx
mov rcx, r13
call fcn.00407b94
mov rcx, qword [rsp + 0x60]
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov rcx, qword [rsp + 0x68]
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov rcx, rdi
call qword [sym.imp.KERNEL32.dll_CloseHandle]
cmp dword [rsp + 0x50], esi
jne 0x4080dc
lea rdx, [0x0040f040]
lea rcx, [rsp + 0x160]
call qword [sym.imp.msvcrt.dll_fopen]
lea rcx, [rsp + 0xf0]
mov edx, 0x64
mov r8, rax
mov rdi, rax
call qword [sym.imp.msvcrt.dll_fgets]
cmp rax, rsi
je 0x4080d3
lea rdx, str.java_version__
lea rcx, [rsp + 0xf0]
mov r8d, InitCommonControls
call qword [sym.imp.msvcrt.dll_strncmp]
cmp eax, esi
jne 0x408077
lea rcx, [rsp + 0xfe]
call sub.msvcrt.dll_strlen
lea rdx, [rsp + 0xfe]
jmp 0x4080ab
lea rdx, str.openjdk_version__
lea rcx, [rsp + 0xf0]
mov r8d, reloc.COMCTL32.dll_InitCommonControls
call qword [sym.imp.msvcrt.dll_strncmp]
cmp eax, esi
jne 0x4080d3
lea rcx, [rsp + 0x101]
call sub.msvcrt.dll_strlen
lea rdx, [rsp + 0x101]
sub eax, 2
mov rcx, rbp
movsxd rbx, eax
mov r8, rbx
call qword [sym.imp.msvcrt.dll_strncpy]
mov byte [rbx + rbp], sil
lea rcx, str.Java_version:__s
mov rdx, rbp
mov sil, 1
call fcn.0040a860
mov rcx, rdi
call qword [sym.imp.msvcrt.dll_fclose]
lea rcx, [rsp + 0x160]
call qword [sym.imp.msvcrt.dll_remove]
mov al, sil
mov rcx, qword [rsp + 0x4160]
call fcn.0040d230
add rsp, 0x4178
pop r13
pop r12
pop rdi
pop rsi
pop rbp
pop rbx
ret