Function at 0x140004bf4
Capabilities:
Accept command line arguments
Create process on windows

Disassembly:
mov rax, rsp
mov qword [rax + 0x10], rbx
mov qword [rax + 0x18], rsi
mov qword [rax + 0x20], rdi
push rbp
push r12
push r13
push r14
push r15
lea rbp, [rax - 0x138]
sub rsp, 0x210
mov rax, qword [0x1400270d0]
xor rax, rsp
mov qword [rbp + 0x100], rax
mov rbx, rcx
call fcn.1400021fc
mov esi, 0x105
lea rdx, [rbp - 0x10]
xor ecx, ecx
mov r8d, esi
mov rdi, rax
call qword [sym.imp.KERNEL32.dll_GetModuleFileNameA]
test eax, eax
je 0x14000506b
cmp eax, 0x104
jg 0x14000506b
lea rdx, [rbp - 0x10]
lea rcx, str.ExecJRE:_old:__s_n
call fcn.140004410
lea rcx, str.ExecJRE:_new:__s_n
mov rdx, rbx
call fcn.140004410
mov rcx, rbx
call fcn.14000ad80
lea rdx, [rbp - 0x10]
mov rcx, rbx
mov r8, rax
call fcn.14001b230
test eax, eax
je 0x140005085
lea r8, str._s_bin_s.exe
lea rcx, [rbp - 0x10]
mov r9, rbx
mov edx, esi
mov qword [rsp + 0x20], rdi
call fcn.14000469c
call qword [sym.imp.KERNEL32.dll_GetCommandLineA]
mov rcx, rax
call fcn.1400043dc
lea rcx, [rsp + 0x50]
mov r15, rax
mov qword [rsp + 0x50], rax
call fcn.140004b64
mov rsi, qword [rsp + 0x50]
mov rcx, rsi
call fcn.14000ad80
lea rcx, [rbp - 0x10]
mov rbx, rax
call fcn.14000ad80
lea rcx, [rbx + rax + 4]
call fcn.140004384
lea rcx, [rbp - 0x10]
mov edx, 0x20
mov rbx, rax
call fcn.14000ce7c
test rax, rax
jne 0x140004d2d
lea edx, [rax + 9]
lea rcx, [rbp - 0x10]
call fcn.14000ce7c
test rax, rax
jne 0x140004d2d
lea rdx, [rbp - 0x10]
mov rcx, rbx
call fcn.14000b5f0
jmp 0x140004d57
lea rdx, [0x14001f6b4]
mov rcx, rbx
call fcn.14000b5f0
lea rdx, [rbp - 0x10]
mov rcx, rax
call fcn.14000b550
lea rdx, [0x14001f6b4]
mov rcx, rax
call fcn.14000b550
cmp byte [rsi], 0
mov r13, rax
mov edi, 1
je 0x140004f21
lea rcx, [rsp + 0x50]
call fcn.140004b64
mov r14, rax
cmp byte [rax], 0
je 0x140004ed3
mov rcx, rax
mov rbx, rax
call fcn.14000ad80
lea rcx, [rdi + rax]
call fcn.140004384
cmp byte [rbx], 0
mov r12, rax
mov rsi, rax
je 0x140004df4
mov al, byte [rbx]
cmp al, 0x22
je 0x140004dec
cmp al, 0x5c
jne 0x140004de7
lea rdx, [0x14001f60c]
mov rcx, rbx
call fcn.14000bd00
lea r11, [rbx + rax]
cmp byte [r11], 0x22
jne 0x140004de0
mov byte [rsi], 0x5c
add rbx, 2
add rsi, rdi
cmp byte [rbx], 0x5c
jne 0x140004def
cmp rbx, r11
jb 0x140004dc0
jmp 0x140004def
mov al, byte [rbx]
mov byte [rsi], al
add rsi, rdi
add rbx, rdi
cmp rbx, r11
jb 0x140004dd6
jmp 0x140004def
mov byte [rsi], al
add rsi, rdi
add rbx, rdi
cmp byte [rbx], 0
jne 0x140004d9d
mov byte [rsi], 0
cmp byte [r12], 0x2d
jne 0x140004ee0
lea rdx, str._classpath
mov rcx, r12
call fcn.14000ae40
test eax, eax
je 0x140004e7f
lea rdx, [0x14001e5dc]
mov rcx, r12
call fcn.14000ae40
test eax, eax
je 0x140004e7f
lea rdx, str._version:
mov r8d, 9
mov rcx, r12
call fcn.14000c3a0
test eax, eax
je 0x140004ecb
lea rdx, str._jre_restrict_search
mov rcx, r12
call fcn.14000ae40
test eax, eax
je 0x140004ecb
lea rdx, str._no_jre_restrict_search
mov rcx, r12
call fcn.14000ae40
test eax, eax
je 0x140004ecb
lea rdx, [0x14001e884]
mov rcx, r13
call fcn.14000b550
mov rdx, r14
jmp 0x140004ec0
lea rdx, [0x14001e884]
mov rcx, r13
call fcn.14000b550
mov rdx, r14
mov rcx, rax
call fcn.14000b550
lea rcx, [rsp + 0x50]
mov r13, rax
call fcn.140004b64
cmp byte [rax], 0
mov rbx, rax
je 0x140004ecb
lea rdx, [0x14001e884]
mov rcx, r13
call fcn.14000b550
mov rdx, rbx
mov rcx, rax
call fcn.14000b550
mov r13, rax
mov rcx, r12
call fcn.140004408
mov rax, qword [rsp + 0x50]
cmp byte [rax], 0
jmp 0x140004d62
lea rdx, [0x14001e884]
mov rcx, r13
call fcn.14000b550
mov rdx, r14
mov rcx, rax
call fcn.14000b550
lea rdx, [0x14001e884]
mov rcx, rax
call fcn.14000b550
mov rdx, qword [rsp + 0x50]
mov rcx, rax
call fcn.14000b550
mov rcx, r12
mov r13, rax
call fcn.140004408
mov rcx, r15
call fcn.140004408
call fcn.140004474
test al, al
je 0x140004f78
mov rcx, r13
call fcn.1400043dc
lea rcx, [rsp + 0x50]
mov rbx, rax
mov qword [rsp + 0x50], rax
call fcn.140004b64
lea rdx, [rbp - 0x10]
lea rcx, str.ReExec_Command:__s___s__n
mov r8, rax
call fcn.14000a710
mov rdx, qword [rsp + 0x50]
lea rcx, str.ReExec_Args:__s_n
call fcn.14000a710
mov rcx, rbx
call fcn.140004408
call fcn.14000ba08
lea rcx, [rax + 0x30]
call fcn.14000ce2c
call fcn.14000ba08
lea rcx, [rax + 0x60]
call fcn.14000ce2c
mov ebx, 0x68
lea rcx, [rbp - 0x80]
mov r8d, ebx
xor edx, edx
call fcn.14000b3d0
lea r8d, [rbx - 0x50]
lea rcx, [rsp + 0x60]
xor edx, edx
mov dword [rbp - 0x80], ebx
call fcn.14000b3d0
lea r11, [rsp + 0x60]
lea rax, [rbp - 0x80]
mov qword [rsp + 0x48], r11
mov qword [rsp + 0x40], rax
and qword [rsp + 0x38], 0
and qword [rsp + 0x30], 0
and dword [rsp + 0x28], 0
lea rcx, [rbp - 0x10]
xor r9d, r9d
xor r8d, r8d
mov rdx, r13
mov dword [rsp + 0x20], edi
call qword [sym.imp.KERNEL32.dll_CreateProcessA]
test eax, eax
jne 0x140005011
lea rdx, [rbp - 0x10]
lea rcx, str.Error:_CreateProcess__s__...__failed:
call fcn.1400047a0
mov ecx, edi
call fcn.14000a6b0
int3
mov rcx, qword [rsp + 0x60]
or ebx, 0xffffffff
mov edx, ebx
call qword [sym.imp.KERNEL32.dll_WaitForSingleObject]
cmp eax, ebx
je 0x14000503b
mov rcx, qword [rsp + 0x60]
lea rdx, [rsp + 0x58]
call qword [sym.imp.KERNEL32.dll_GetExitCodeProcess]
test eax, eax
jne 0x14000504b
jmp 0x140005047
lea rcx, str.Error:_WaitForSingleObject___failed.
call fcn.1400046f4
mov dword [rsp + 0x58], edi
mov rcx, qword [rsp + 0x68]
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov rcx, qword [rsp + 0x60]
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov ecx, dword [rsp + 0x58]
call fcn.14000a6b0
int3
lea rcx, str.Error:_Unable_to_resolve__s
mov rdx, rdi
call fcn.1400047a0
mov ecx, 1
call fcn.14000a6b0
int3
mov rcx, qword [rbp + 0x100]
xor rcx, rsp
call fcn.14000b6c0
lea r11, [rsp + 0x210]
mov rbx, qword [r11 + 0x38]
mov rsi, qword [r11 + 0x40]
mov rdi, qword [r11 + 0x48]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rbp
ret