Function at 0x405279
Capabilities:
Accept command line arguments
Create process on windows
Create process suspended
Resolve function by parsing pe exports

Disassembly:
sub esp, 0x168
mov eax, dword [0x432034]
xor eax, esp
mov dword [esp + 0x164], eax
push ebx
push esi
mov esi, dword [esp + 0x174]
push edi
call fcn.00401c90
mov edi, eax
mov ebx, 0x105
push ebx
lea eax, [esp + 0x6c]
push eax
push 0
call dword [sym.imp.kernel32.dll_GetModuleFileNameA]
test eax, eax
je 0x4055c6
cmp eax, 0x104
jg 0x4055c6
lea eax, [esp + 0x68]
push eax
push str.ExecJRE:_old:__s_n
call fcn.004011e7
push esi
push str.ExecJRE:_new:__s_n
call fcn.004011e7
push esi
call fcn.0040ee60
push eax
lea eax, [esp + 0x80]
push eax
push esi
call fcn.00420d83
add esp, 0x20
test eax, eax
je 0x4055d7
push ebp
push edi
push esi
push str._s_bin_s.exe
lea eax, [esp + 0x78]
push ebx
push eax
call fcn.00405c99
add esp, 0x14
call dword [sym.imp.kernel32.dll_GetCommandLineA]
push eax
call fcn.004011c5
mov ebp, eax
lea eax, [esp + 0x14]
push eax
mov dword [esp + 0x18], ebp
call fcn.0040623f
mov ebx, dword [esp + 0x18]
push ebx
call fcn.0040ee60
mov esi, eax
lea eax, [esp + 0x78]
push eax
call fcn.0040ee60
add esi, 4
add eax, esi
push eax
call fcn.00401135
mov esi, eax
lea eax, [esp + 0x80]
push 0x20
push eax
call fcn.0040bd70
add esp, 0x1c
test eax, eax
jne 0x405388
lea eax, [esp + 0x6c]
push 9
push eax
call fcn.0040bd70
pop ecx
pop ecx
test eax, eax
jne 0x405388
lea eax, [esp + 0x6c]
push eax
push esi
call fcn.00414130
jmp 0x4053aa
mov ecx, 0x427884
lea eax, [esp + 0x6c]
push ecx
push eax
push ecx
push esi
call fcn.00414130
pop ecx
pop ecx
push eax
call fcn.00414140
pop ecx
pop ecx
push eax
call fcn.00414140
cmp byte [ebx], 0
mov edi, eax
pop ecx
pop ecx
je 0x4054c7
lea eax, [esp + 0x10]
push eax
call fcn.0040623f
mov ebx, eax
pop ecx
cmp byte [ebx], 0
je 0x405483
push ebx
call fcn.004062cb
mov esi, eax
pop ecx
cmp byte [esi], 0x2d
jne 0x405492
push str._classpath
push esi
call fcn.00414230
pop ecx
pop ecx
test eax, eax
je 0x40543f
push 0x426520
push esi
call fcn.00414230
pop ecx
pop ecx
test eax, eax
je 0x40543f
push 9
push str._version:
push esi
call fcn.0040eef0
add esp, 0xc
test eax, eax
je 0x40547c
push str._jre_restrict_search
push esi
call fcn.00414230
pop ecx
pop ecx
test eax, eax
je 0x40547c
push str._no_jre_restrict_search
push esi
call fcn.00414230
pop ecx
pop ecx
test eax, eax
je 0x40547c
push ebx
mov ebx, 0x426da8
jmp 0x405469
push ebx
mov ebx, 0x426da8
push ebx
push edi
call fcn.00414140
pop ecx
pop ecx
push eax
call fcn.00414140
mov edi, eax
lea eax, [esp + 0x18]
push eax
call fcn.0040623f
add esp, 0xc
cmp byte [eax], 0
je 0x40547c
push eax
push ebx
push edi
call fcn.00414140
pop ecx
pop ecx
push eax
call fcn.00414140
pop ecx
mov edi, eax
pop ecx
push esi
call fcn.00401157
pop ecx
mov eax, dword [esp + 0x10]
cmp byte [eax], 0
jne 0x4053b7
jmp 0x4054c7
push ebx
mov ebx, 0x426da8
push ebx
push edi
call fcn.00414140
pop ecx
pop ecx
push eax
call fcn.00414140
pop ecx
pop ecx
push dword [esp + 0x10]
push ebx
push eax
call fcn.00414140
pop ecx
pop ecx
push eax
call fcn.00414140
push esi
mov edi, eax
call fcn.00401157
add esp, 0xc
push ebp
call fcn.00401157
pop ecx
call fcn.0040112f
test al, al
je 0x405514
push edi
call fcn.004011c5
mov esi, eax
lea eax, [esp + 0x14]
push eax
mov dword [esp + 0x18], esi
call fcn.0040623f
push eax
lea eax, [esp + 0x78]
push eax
push str.ReExec_Command:__s___s__n
call fcn.00401112
push dword [esp + 0x24]
push str.ReExec_Args:__s_n
call fcn.00401112
push esi
call fcn.00401157
add esp, 0x20
xor ebx, ebx
inc ebx
push ebx
call fcn.00420d83
push eax
call fcn.00420d83
push 2
call fcn.00420d83
push eax
call fcn.00420d83
push 0x44
pop esi
push esi
xor ebp, ebp
lea eax, [esp + 0x3c]
push ebp
push eax
call fcn.0040a6f0
push 0x10
lea eax, [esp + 0x38]
mov dword [esp + 0x48], esi
push ebp
push eax
call fcn.0040a6f0
add esp, 0x28
lea eax, [esp + 0x18]
push eax
lea eax, [esp + 0x2c]
push eax
push ebp
push ebp
push ebp
push ebx
push ebp
push ebp
push edi
lea eax, [esp + 0x90]
push eax
call dword [sym.imp.kernel32.dll_CreateProcessA]
pop ebp
test eax, eax
je 0x4055ef
push 0xffffffffffffffff
push dword [esp + 0x18]
call dword [sym.imp.kernel32.dll_WaitForSingleObject]
cmp eax, 0xffffffff
je 0x40559f
lea eax, [esp + 0x10]
push eax
push dword [esp + 0x18]
call dword [sym.imp.kernel32.dll_GetExitCodeProcess]
test eax, eax
jne 0x4055ae
jmp 0x4055aa
push str.Error:_WaitForSingleObject___failed.
call fcn.00420d83
pop ecx
mov dword [esp + 0x10], ebx
push dword [esp + 0x18]
mov esi, dword [sym.imp.kernel32.dll_CloseHandle]
call esi
push dword [esp + 0x14]
call esi
push dword [esp + 0x10]
jmp 0x405601
push edi
push str.Error:_Unable_to_resolve__s
call fcn.00420d83
pop ecx
pop ecx
push 1
jmp 0x405601
mov ecx, dword [esp + 0x170]
pop edi
pop esi
pop ebx
xor ecx, esp
call fcn.004097b0
add esp, 0x168
ret
lea eax, [esp + 0x68]
push eax
push str.Error:_CreateProcess__s__...__failed:
call fcn.00420d83
pop ecx
pop ecx
push ebx
call fcn.00420d83
int3