Function at 0x401559
Capabilities:
Create process on windows
Enumerate files on windows

Disassembly:
push ebp
mov ebp, esp
and esp, 0xfffffff8
sub esp, 0x2ec
mov eax, dword [section..data]
xor eax, esp
mov dword [esp + 0x2e8], eax
push ebx
push esi
push edi
lea ecx, [esp + 0x10]
call fcn.004018b0
lea ecx, [esp + 0x70]
call fcn.004018b0
lea edx, [esp + 0x70]
call fcn.00401376
test eax, eax
jne 0x4017f2
lea eax, [esp + 0x10]
mov edx, str.SOFTWAREJavaSoftJava_Development_Kit
push eax
call fcn.0040118e
mov edi, 0x413c10
pop ecx
test al, al
jne 0x4015fb
lea eax, [esp + 0x10]
mov edx, str.SOFTWAREJavaSoftJava_Runtime_Environment
push eax
call fcn.0040118e
pop ecx
test al, al
jne 0x4015fb
lea eax, [esp + 0x10]
mov edx, str.SOFTWAREJavaSoftJDK
push eax
call fcn.0040118e
pop ecx
test al, al
jne 0x4015fb
lea eax, [esp + 0x10]
mov edx, str.SOFTWAREJavaSoftJRE
push eax
call fcn.0040118e
pop ecx
test al, al
jne 0x4015fb
lea edx, [esp + 0x10]
call fcn.0040140a
test eax, eax
jne 0x401676
push edi
lea eax, [esp + 0x74]
mov edx, edi
push eax
lea eax, [esp + 0x18]
push str._binjavaw.exe___XX:MinHeapFreeRatio5__XX:MaxHeapFreeRatio15__jar__
push eax
lea ecx, [esp + 0x50]
call fcn.004019cf
pop ecx
mov edx, eax
lea ecx, [esp + 0x34]
call fcn.00401a31
pop ecx
mov edx, eax
lea ecx, [esp + 0x90]
call fcn.00401b32
pop ecx
mov edx, eax
lea ecx, [esp + 0x5c]
call fcn.00401a31
pop ecx
mov ecx, eax
call fcn.004014a1
lea ecx, [esp + 0x58]
mov bl, al
call fcn.004026c3
lea ecx, [esp + 0x88]
call fcn.004026c3
lea ecx, [esp + 0x28]
call fcn.004026c3
lea ecx, [esp + 0x40]
call fcn.004026c3
test bl, bl
jne 0x401829
lea eax, [esp + 0x70]
mov edx, str.javaw__XX:MinHeapFreeRatio5__XX:MaxHeapFreeRatio15__jar__
push edi
push eax
lea ecx, [esp + 0x30]
call fcn.004019cf
pop ecx
mov edx, eax
lea ecx, [esp + 0x44]
call fcn.00401a31
pop ecx
mov ecx, eax
call fcn.004014a1
lea ecx, [esp + 0x40]
mov bl, al
call fcn.004026c3
lea ecx, [esp + 0x28]
call fcn.004026c3
test bl, bl
jne 0x401829
lea eax, [esp + 0xa0]
push eax
push str.C:Program_FilesJava
call dword [sym.imp.KERNEL32.dll_FindFirstFileW]
mov esi, eax
cmp esi, 0xffffffff
je 0x4017cc
push str._binjavaw.exe
lea ecx, [esp + 0x8c]
call fcn.0040188f
push eax
lea eax, [esp + 0xd0]
push eax
push str.C:Program_FilesJava_
lea ecx, [esp + 0x34]
call fcn.0040188f
mov edx, eax
lea ecx, [esp + 0x48]
call fcn.00401a31
pop ecx
mov edx, eax
lea ecx, [esp + 0x5c]
call fcn.00401abf
pop ecx
lea ecx, [esp + 0x40]
call fcn.004026c3
lea ecx, [esp + 0x28]
call fcn.004026c3
lea ecx, [esp + 0x88]
call fcn.004026c3
lea ecx, [esp + 0x58]
call fcn.00401842
mov ecx, eax
call fcn.0040151b
test al, al
je 0x4017a5
push edi
lea eax, [esp + 0x74]
push eax
push ecx
lea edx, [esp + 0x64]
lea ecx, [esp + 0x94]
call fcn.00401a59
pop ecx
mov edx, eax
lea ecx, [esp + 0x30]
call fcn.00401b32
pop ecx
mov edx, eax
lea ecx, [esp + 0x44]
call fcn.00401a31
pop ecx
mov ecx, eax
call fcn.004014a1
lea ecx, [esp + 0x40]
mov bl, al
call fcn.004026c3
lea ecx, [esp + 0x28]
call fcn.004026c3
lea ecx, [esp + 0x88]
call fcn.004026c3
test bl, bl
jne 0x401820
lea ecx, [esp + 0x58]
call fcn.004026c3
lea eax, [esp + 0xa0]
push eax
push esi
call dword [sym.imp.KERNEL32.dll_FindNextFileW]
test eax, eax
jne 0x4016d8
push esi
call dword [sym.imp.KERNEL32.dll_FindClose]
push 0x10
push str.Error
push str.Java_installation_cannot_be_found_in_this_computer__please_download_it_from_https:__java.com__n
xor esi, esi
push esi
call dword [sym.imp.USER32.dll_MessageBoxW]
push 5
push esi
push esi
push str.https:__java.com_
push esi
push esi
call dword [sym.imp.SHELL32.dll_ShellExecuteW]
xor esi, esi
inc esi
lea ecx, [esp + 0x70]
call fcn.004026c3
lea ecx, [esp + 0x10]
call fcn.004026c3
mov ecx, dword [esp + 0x2f4]
mov eax, esi
pop edi
pop esi
pop ebx
xor ecx, esp
call fcn.00402820
mov esp, ebp
pop ebp
ret 0x10
lea ecx, [esp + 0x58]
call fcn.004026c3
xor esi, esi
jmp 0x4017f5