Function at 0x401300
Capabilities:
Create process on windows
Enumerate files on windows

Disassembly:
push ebp
mov ebp, esp
mov eax, 0x3aa8
call fcn.00403200
mov dword [esp + 8], 0xa28
lea eax, [ebp - 0xb48]
mov dword [esp + 4], eax
mov dword [esp], 0
call sub.KERNEL32.dll_GetModuleFileNameA
sub esp, 0xc
mov dword [esp + 4], str.visualvm
mov dword [esp], 0x406280
call sub.msvcrt.dll_strcpy
lea eax, [ebp - 0xb48]
mov dword [esp + 4], 0x5c
mov dword [esp], eax
call sub.msvcrt.dll_strrchr
mov dword [ebp - 0xb4c], eax
cmp dword [ebp - 0xb4c], 0
je 0x401370
mov eax, dword [ebp - 0xb4c]
mov byte [eax], 0
lea eax, [ebp - 0xb48]
mov dword [esp + 4], 0x5c
mov dword [esp], eax
call sub.msvcrt.dll_strrchr
mov dword [ebp - 0xb4c], eax
cmp dword [ebp - 0xb4c], 0
je 0x4013d2
mov eax, dword [ebp - 0xb4c]
mov dword [esp + 4], eax
mov dword [esp], str._bin
call sub.msvcrt.dll__stricmp
test eax, eax
je 0x4013c9
mov eax, dword [ebp - 0xb4c]
mov dword [esp + 4], eax
mov dword [esp], str.launchers
call sub.msvcrt.dll__stricmp
test eax, eax
jne 0x4013d2
mov eax, dword [ebp - 0xb4c]
mov byte [eax], 0
mov dword [esp + 4], 0x406280
lea eax, [ebp - 0xb48]
mov dword [esp], eax
call fcn.00402738
test al, al
jne 0x40144e
lea eax, [ebp - 0xb48]
mov dword [esp + 8], eax
mov dword [esp + 4], str.__jdkhome___s_
mov dword [esp], 0x406160
call sub.msvcrt.dll_sprintf
mov dword [esp + 4], str.lib_visualvm
lea eax, [ebp - 0xb48]
mov dword [esp], eax
call sub.msvcrt.dll_strcat
mov dword [esp + 4], 0x406280
lea eax, [ebp - 0xb48]
mov dword [esp], eax
call fcn.00402738
test al, al
jne 0x40144e
mov dword [esp + 4], str.checkConfigFile
mov dword [esp], str.Cannot_read_config_file_
call fcn.004025dc
mov dword [esp + 4], 0x406280
mov dword [esp], 0x4063a0
call sub.msvcrt.dll_strcpy
lea eax, [ebp - 0xb48]
mov dword [esp + 4], eax
lea eax, [ebp - 0x118]
mov dword [esp], eax
call sub.msvcrt.dll_strcpy
mov dword [esp + 0xc], 0x406280
lea eax, [ebp - 0x118]
mov dword [esp + 8], eax
mov dword [esp + 4], str._setc_s.conf
lea eax, [ebp - 0xc68]
mov dword [esp], eax
call sub.msvcrt.dll_sprintf
lea eax, [ebp - 0xc68]
mov dword [esp], eax
call fcn.00401b4c
mov eax, dword [ebp + 0x10]
mov dword [esp], eax
call fcn.0040205e
mov dword [esp + 4], str.c:_nbuser
lea eax, [ebp - 0xd78]
mov dword [esp], eax
call sub.msvcrt.dll_strcpy
mov dword [esp + 0xc], 0x406280
mov dword [esp + 8], str.c:_nbuser
mov dword [esp + 4], str._setc_s.conf
lea eax, [ebp - 0xb48]
mov dword [esp], eax
call sub.msvcrt.dll_sprintf
lea eax, [ebp - 0xb48]
mov dword [esp], eax
call fcn.00401b4c
lea eax, [ebp - 0xd78]
mov dword [esp + 4], eax
mov dword [esp], str.c:_nbuser
call sub.msvcrt.dll_strcpy
mov dword [esp + 0xc], 0x406280
lea eax, [ebp - 0x118]
mov dword [esp + 8], eax
mov dword [esp + 4], str._setc_s.clusters
lea eax, [ebp - 0xe88]
mov dword [esp], eax
call sub.msvcrt.dll_sprintf
lea eax, [ebp - 0xe88]
mov dword [esp], eax
call fcn.00402404
test eax, eax
jne 0x401569
mov dword [esp + 4], 0
mov dword [esp], str.Cannot_read_cluster_file_
call fcn.004025dc
mov dword [ebp - 0x379c], 0x408018
mov eax, dword [ebp - 0x379c]
cmp dword [eax], 0
je 0x401621
mov eax, dword [ebp - 0x379c]
mov eax, dword [eax]
mov dword [esp + 0xc], eax
lea eax, [ebp - 0x118]
mov dword [esp + 8], eax
mov dword [esp + 4], str._s_s
lea eax, [ebp - 0xb48]
mov dword [esp], eax
call sub.msvcrt.dll_sprintf
lea eax, [ebp - 0xb48]
mov dword [esp], eax
call fcn.00402554
test eax, eax
je 0x401613
cmp byte [0x405140], 0
je 0x4015fd
mov eax, dword [ebp - 0x379c]
mov eax, dword [eax]
mov dword [esp + 0x10], eax
lea eax, [ebp - 0x118]
mov dword [esp + 0xc], eax
mov dword [esp + 8], 0x405140
mov dword [esp + 4], str._s__s_s
lea eax, [ebp - 0xb48]
mov dword [esp], eax
call sub.msvcrt.dll_sprintf
lea eax, [ebp - 0xb48]
mov dword [esp + 4], eax
mov dword [esp], 0x405140
call sub.msvcrt.dll_strcpy
lea eax, [ebp - 0x379c]
add dword [eax], 4
jmp 0x401573
mov dword [ebp - 0x379c], 0
mov dword [ebp - 0x37a0], 0
mov dword [ebp - 0x379c], 0x407008
mov eax, dword [ebp - 0x379c]
cmp byte [eax], 0
je 0x401717
mov dword [esp + 4], 0x3b
mov eax, dword [ebp - 0x379c]
mov dword [esp], eax
call sub.msvcrt.dll_strchr
mov dword [ebp - 0x37a0], eax
cmp dword [ebp - 0x37a0], 0
je 0x40167c
mov eax, dword [ebp - 0x37a0]
mov byte [eax], 0
mov eax, dword [ebp - 0x379c]
inc eax
cmp byte [eax], 0x3a
jne 0x4016b2
mov eax, dword [ebp - 0x379c]
mov dword [esp + 0xc], eax
mov dword [esp + 8], 0x405140
mov dword [esp + 4], str._s__s
lea eax, [ebp - 0xb48]
mov dword [esp], eax
call sub.msvcrt.dll_sprintf
jmp 0x4016e4
mov eax, dword [ebp - 0x379c]
mov dword [esp + 0x10], eax
lea eax, [ebp - 0x118]
mov dword [esp + 0xc], eax
mov dword [esp + 8], 0x405140
mov dword [esp + 4], str._s__s_s
lea eax, [ebp - 0xb48]
mov dword [esp], eax
call sub.msvcrt.dll_sprintf
lea eax, [ebp - 0xb48]
mov dword [esp + 4], eax
mov dword [esp], 0x405140
call sub.msvcrt.dll_strcpy
cmp dword [ebp - 0x37a0], 0
jne 0x401705
jmp 0x401717
mov eax, dword [ebp - 0x37a0]
inc eax
mov dword [ebp - 0x379c], eax
jmp 0x40163f
mov dword [ebp - 0x3a00], 1
lea eax, [ebp - 0x118]
mov dword [esp + 8], eax
mov dword [esp + 4], str._splatform
lea eax, [ebp - 0x38b8]
mov dword [esp], eax
call sub.msvcrt.dll_sprintf
lea eax, [ebp - 0x39f8]
mov dword [esp + 4], eax
lea eax, [ebp - 0x38b8]
mov dword [esp], eax
call sub.KERNEL32.dll_FindFirstFileA
sub esp, 8
mov dword [ebp - 0x39fc], eax
cmp dword [ebp - 0x39fc], 0xffffffff
je 0x401774
cmp dword [ebp - 0x3a00], 0
jne 0x401788
mov dword [esp + 4], 0
mov dword [esp], str.Cannot_find_platform_folder_
call fcn.004025dc
mov eax, dword [ebp - 0x39f8]
shr eax, 4
and eax, 1
test al, al
je 0x4017c7
lea eax, [ebp - 0x39f8]
add eax, 0x2c
mov dword [esp + 0xc], eax
lea eax, [ebp - 0x118]
mov dword [esp + 8], eax
mov dword [esp + 4], str._s_slib_nbexec.exe
lea eax, [ebp - 0xf98]
mov dword [esp], eax
call sub.msvcrt.dll_sprintf
jmp 0x4017ed
lea eax, [ebp - 0x39f8]
mov dword [esp + 4], eax
mov eax, dword [ebp - 0x39fc]
mov dword [esp], eax
call sub.KERNEL32.dll_FindNextFileA
sub esp, 8
mov dword [ebp - 0x3a00], eax
jmp 0x401762
mov eax, dword [ebp + 0x10]
mov dword [esp + 0x20], eax
mov dword [esp + 0x1c], 0x404120
mov dword [esp + 0x18], str.c:_nbuser
mov dword [esp + 0x14], 0x405140
mov dword [esp + 0x10], 0x4063a0
mov dword [esp + 0xc], 0x406160
lea eax, [ebp - 0xf98]
mov dword [esp + 8], eax
mov dword [esp + 4], str.__s___s___branding__s___clusters___s____userdir___s___s__s
lea eax, [ebp - 0x3798]
mov dword [esp], eax
call sub.msvcrt.dll_sprintf
mov dword [esp + 8], 0x44
mov dword [esp + 4], 0
lea eax, [ebp - 0x3a58]
mov dword [esp], eax
call sub.msvcrt.dll_memset
mov dword [ebp - 0x3a58], 0x44
mov dword [ebp - 0x3a2c], 1
mov word [ebp - 0x3a28], 0
lea eax, [ebp - 0x3a68]
mov dword [esp + 0x24], eax
lea eax, [ebp - 0x3a58]
mov dword [esp + 0x20], eax
mov dword [esp + 0x1c], 0
mov dword [esp + 0x18], 0
mov dword [esp + 0x14], 0x20
mov dword [esp + 0x10], 1
mov dword [esp + 0xc], 0
mov dword [esp + 8], 0
lea eax, [ebp - 0x3798]
mov dword [esp + 4], eax
mov dword [esp], 0
call sub.KERNEL32.dll_CreateProcessA
sub esp, 0x28
test eax, eax
jne 0x401918
mov dword [esp + 8], 0x406280
mov dword [esp + 4], str.Cannot_start__s
lea eax, [ebp - 0xb48]
mov dword [esp], eax
call sub.msvcrt.dll_sprintf
mov dword [esp + 4], str.CreateProcess
lea eax, [ebp - 0xb48]
mov dword [esp], eax
call fcn.004025dc
mov dword [esp + 4], 0xffffffff
mov eax, dword [ebp - 0x3a68]
mov dword [esp], eax
call sub.KERNEL32.dll_WaitForSingleObject
sub esp, 8
mov dword [ebp - 0x3a6c], 0
lea eax, [ebp - 0x3a6c]
mov dword [esp + 4], eax
mov eax, dword [ebp - 0x3a68]
mov dword [esp], eax
call sub.KERNEL32.dll_GetExitCodeProcess
sub esp, 8
mov eax, dword [ebp - 0x3a68]
mov dword [esp], eax
call sub.KERNEL32.dll_CloseHandle
sub esp, 4
mov eax, dword [ebp - 0x3a64]
mov dword [esp], eax
call sub.KERNEL32.dll_CloseHandle
sub esp, 4
mov eax, dword [ebp - 0x3a6c]
mov dword [ebp - 0x3a70], eax
mov eax, dword [ebp - 0x3a70]
leave
ret 0x10