Function at 0x40529c
Capabilities:
Accept command line arguments
Create process on windows
Create process suspended
Resolve function by parsing pe exports

Disassembly:
sub esp, 0x168
mov eax, dword [0x433034]
xor eax, esp
mov dword [esp + 0x164], eax
push ebx
push esi
mov esi, dword [esp + 0x174]
push edi
call fcn.00401c8c
mov edi, eax
mov ebx, 0x105
push ebx
lea eax, [esp + 0x6c]
push eax
push 0
call dword [sym.imp.kernel32.dll_GetModuleFileNameA]
test eax, eax
je 0x4055e9
cmp eax, 0x104
jg 0x4055e9
lea eax, [esp + 0x68]
push eax
push str.ExecJRE:_old:__s_n
call fcn.004011dd
push esi
push str.ExecJRE:_new:__s_n
call fcn.004011dd
push esi
call fcn.0040e990
push eax
lea eax, [esp + 0x80]
push eax
push esi
call fcn.0041db9e
add esp, 0x20
test eax, eax
je 0x4055fa
push ebp
push edi
push esi
push str._s_bin_s.exe
lea eax, [esp + 0x78]
push ebx
push eax
call fcn.00405cbc
add esp, 0x14
call dword [sym.imp.kernel32.dll_GetCommandLineA]
push eax
call fcn.004011bb
mov ebp, eax
lea eax, [esp + 0x14]
push eax
mov dword [esp + 0x18], ebp
call fcn.0040625c
mov ebx, dword [esp + 0x18]
push ebx
call fcn.0040e990
mov esi, eax
lea eax, [esp + 0x78]
push eax
call fcn.0040e990
add esi, 4
add eax, esi
push eax
call fcn.0040112b
mov esi, eax
lea eax, [esp + 0x80]
push 0x20
push eax
call fcn.0040bd50
add esp, 0x1c
test eax, eax
jne 0x4053ab
lea eax, [esp + 0x6c]
push 9
push eax
call fcn.0040bd50
pop ecx
pop ecx
test eax, eax
jne 0x4053ab
lea eax, [esp + 0x6c]
push eax
push esi
call fcn.00413c40
jmp 0x4053cd
mov ecx, 0x42788c
lea eax, [esp + 0x6c]
push ecx
push eax
push ecx
push esi
call fcn.00413c40
pop ecx
pop ecx
push eax
call fcn.00413c50
pop ecx
pop ecx
push eax
call fcn.00413c50
cmp byte [ebx], 0
mov edi, eax
pop ecx
pop ecx
je 0x4054ea
lea eax, [esp + 0x10]
push eax
call fcn.0040625c
mov ebx, eax
pop ecx
cmp byte [ebx], 0
je 0x4054a6
push ebx
call fcn.004062e8
mov esi, eax
pop ecx
cmp byte [esi], 0x2d
jne 0x4054b5
push str._classpath
push esi
call fcn.00413d40
pop ecx
pop ecx
test eax, eax
je 0x405462
push 0x426528
push esi
call fcn.00413d40
pop ecx
pop ecx
test eax, eax
je 0x405462
push 9
push str._version:
push esi
call fcn.0040ea20
add esp, 0xc
test eax, eax
je 0x40549f
push str._jre_restrict_search
push esi
call fcn.00413d40
pop ecx
pop ecx
test eax, eax
je 0x40549f
push str._no_jre_restrict_search
push esi
call fcn.00413d40
pop ecx
pop ecx
test eax, eax
je 0x40549f
push ebx
mov ebx, 0x426db0
jmp 0x40548c
push ebx
mov ebx, 0x426db0
push ebx
push edi
call fcn.00413c50
pop ecx
pop ecx
push eax
call fcn.00413c50
mov edi, eax
lea eax, [esp + 0x18]
push eax
call fcn.0040625c
add esp, 0xc
cmp byte [eax], 0
je 0x40549f
push eax
push ebx
push edi
call fcn.00413c50
pop ecx
pop ecx
push eax
call fcn.00413c50
pop ecx
mov edi, eax
pop ecx
push esi
call fcn.0040114d
pop ecx
mov eax, dword [esp + 0x10]
cmp byte [eax], 0
jne 0x4053da
jmp 0x4054ea
push ebx
mov ebx, 0x426db0
push ebx
push edi
call fcn.00413c50
pop ecx
pop ecx
push eax
call fcn.00413c50
pop ecx
pop ecx
push dword [esp + 0x10]
push ebx
push eax
call fcn.00413c50
pop ecx
pop ecx
push eax
call fcn.00413c50
push esi
mov edi, eax
call fcn.0040114d
add esp, 0xc
push ebp
call fcn.0040114d
pop ecx
call fcn.00401125
test al, al
je 0x405537
push edi
call fcn.004011bb
mov esi, eax
lea eax, [esp + 0x14]
push eax
mov dword [esp + 0x18], esi
call fcn.0040625c
push eax
lea eax, [esp + 0x78]
push eax
push str.ReExec_Command:__s___s__n
call fcn.00401108
push dword [esp + 0x24]
push str.ReExec_Args:__s_n
call fcn.00401108
push esi
call fcn.0040114d
add esp, 0x20
xor ebx, ebx
inc ebx
push ebx
call fcn.0041db9e
push eax
call fcn.0041db9e
push 2
call fcn.0041db9e
push eax
call fcn.0041db9e
push 0x44
pop esi
push esi
xor ebp, ebp
lea eax, [esp + 0x3c]
push ebp
push eax
call fcn.0040a570
push 0x10
lea eax, [esp + 0x38]
mov dword [esp + 0x48], esi
push ebp
push eax
call fcn.0040a570
add esp, 0x28
lea eax, [esp + 0x18]
push eax
lea eax, [esp + 0x2c]
push eax
push ebp
push ebp
push ebp
push ebx
push ebp
push ebp
push edi
lea eax, [esp + 0x90]
push eax
call dword [sym.imp.kernel32.dll_CreateProcessA]
pop ebp
test eax, eax
je 0x405612
push 0xffffffffffffffff
push dword [esp + 0x18]
call dword [sym.imp.kernel32.dll_WaitForSingleObject]
cmp eax, 0xffffffff
je 0x4055c2
lea eax, [esp + 0x10]
push eax
push dword [esp + 0x18]
call dword [sym.imp.kernel32.dll_GetExitCodeProcess]
test eax, eax
jne 0x4055d1
jmp 0x4055cd
push str.Error:_WaitForSingleObject___failed.
call fcn.0041db9e
pop ecx
mov dword [esp + 0x10], ebx
push dword [esp + 0x18]
mov esi, dword [sym.imp.kernel32.dll_CloseHandle]
call esi
push dword [esp + 0x14]
call esi
push dword [esp + 0x10]
jmp 0x405624
push edi
push str.Error:_Unable_to_resolve__s
call fcn.0041db9e
pop ecx
pop ecx
push 1
jmp 0x405624
mov ecx, dword [esp + 0x170]
pop edi
pop esi
pop ebx
xor ecx, esp
call fcn.00409736
add esp, 0x168
ret
lea eax, [esp + 0x68]
push eax
push str.Error:_CreateProcess__s__...__failed:
call fcn.0041db9e
pop ecx
pop ecx
push ebx
call fcn.0041db9e
int3