Function at 0x1000649f
Capabilities:
Accept command line arguments
Create process on windows
Create process suspended
Resolve function by parsing pe exports

Disassembly:
sub esp, 0x168
mov eax, dword [0x1003102c]
xor eax, esp
mov dword [esp + 0x164], eax
push ebx
push esi
mov esi, dword [esp + 0x174]
push edi
call fcn.10003bbf
mov edi, eax
mov ebx, 0x105
push ebx
lea eax, [esp + 0x6c]
push eax
push 0
call dword [sym.imp.kernel32.dll_GetModuleFileNameA]
test eax, eax
je 0x100067ec
cmp eax, 0x104
jg 0x100067ec
lea eax, [esp + 0x68]
push eax
push str.ExecJRE:_old:__s_n
call fcn.1000765d
push esi
push str.ExecJRE:_new:__s_n
call fcn.1000765d
push esi
call fcn.10013dc0
push eax
lea eax, [esp + 0x80]
push eax
push esi
call fcn.1001ef41
add esp, 0x20
test eax, eax
je 0x100067fd
push ebp
push edi
push esi
push str._s_bin_s.exe
lea eax, [esp + 0x78]
push ebx
push eax
call fcn.10006ebf
add esp, 0x14
call dword [sym.imp.kernel32.dll_GetCommandLineA]
push eax
call fcn.1000763b
mov ebp, eax
lea eax, [esp + 0x14]
push eax
mov dword [esp + 0x18], ebp
call fcn.10007465
mov ebx, dword [esp + 0x18]
push ebx
call fcn.10013dc0
mov esi, eax
lea eax, [esp + 0x78]
push eax
call fcn.10013dc0
add esi, 4
add eax, esi
push eax
call sym.jli.dll_JLI_MemAlloc
mov esi, eax
lea eax, [esp + 0x80]
push 0x20
push eax
call fcn.1000a870
add esp, 0x1c
test eax, eax
jne 0x100065ae
lea eax, [esp + 0x6c]
push 9
push eax
call fcn.1000a870
pop ecx
pop ecx
test eax, eax
jne 0x100065ae
lea eax, [esp + 0x6c]
push eax
push esi
call fcn.10013be0
jmp 0x100065d0
mov ecx, 0x10027354
lea eax, [esp + 0x6c]
push ecx
push eax
push ecx
push esi
call fcn.10013be0
pop ecx
pop ecx
push eax
call fcn.10013bf0
pop ecx
pop ecx
push eax
call fcn.10013bf0
cmp byte [ebx], 0
mov edi, eax
pop ecx
pop ecx
je 0x100066ed
lea eax, [esp + 0x10]
push eax
call fcn.10007465
mov ebx, eax
pop ecx
cmp byte [ebx], 0
je 0x100066a9
push ebx
call fcn.100074f1
mov esi, eax
pop ecx
cmp byte [esi], 0x2d
jne 0x100066b8
push str._classpath
push esi
call fcn.10013ce0
pop ecx
pop ecx
test eax, eax
je 0x10006665
push 0x10026048
push esi
call fcn.10013ce0
pop ecx
pop ecx
test eax, eax
je 0x10006665
push 9
push str._version:
push esi
call fcn.10013fd0
add esp, 0xc
test eax, eax
je 0x100066a2
push str._jre_restrict_search
push esi
call fcn.10013ce0
pop ecx
pop ecx
test eax, eax
je 0x100066a2
push str._no_jre_restrict_search
push esi
call fcn.10013ce0
pop ecx
pop ecx
test eax, eax
je 0x100066a2
push ebx
mov ebx, 0x100268f4
jmp 0x1000668f
push ebx
mov ebx, 0x100268f4
push ebx
push edi
call fcn.10013bf0
pop ecx
pop ecx
push eax
call fcn.10013bf0
mov edi, eax
lea eax, [esp + 0x18]
push eax
call fcn.10007465
add esp, 0xc
cmp byte [eax], 0
je 0x100066a2
push eax
push ebx
push edi
call fcn.10013bf0
pop ecx
pop ecx
push eax
call fcn.10013bf0
pop ecx
mov edi, eax
pop ecx
push esi
call fcn.100075cd
pop ecx
mov eax, dword [esp + 0x10]
cmp byte [eax], 0
jne 0x100065dd
jmp 0x100066ed
push ebx
mov ebx, 0x100268f4
push ebx
push edi
call fcn.10013bf0
pop ecx
pop ecx
push eax
call fcn.10013bf0
pop ecx
pop ecx
push dword [esp + 0x10]
push ebx
push eax
call fcn.10013bf0
pop ecx
pop ecx
push eax
call fcn.10013bf0
push esi
mov edi, eax
call fcn.100075cd
add esp, 0xc
push ebp
call fcn.100075cd
pop ecx
call fcn.100075a5
test al, al
je 0x1000673a
push edi
call fcn.1000763b
mov esi, eax
lea eax, [esp + 0x14]
push eax
mov dword [esp + 0x18], esi
call fcn.10007465
push eax
lea eax, [esp + 0x78]
push eax
push str.ReExec_Command:__s___s__n
call fcn.10005cc9
push dword [esp + 0x24]
push str.ReExec_Args:__s_n
call fcn.10005cc9
push esi
call fcn.100075cd
add esp, 0x20
xor ebx, ebx
inc ebx
push ebx
call fcn.1001ef41
push eax
call fcn.1001ef41
push 2
call fcn.1001ef41
push eax
call fcn.1001ef41
push 0x44
pop esi
push esi
xor ebp, ebp
lea eax, [esp + 0x3c]
push ebp
push eax
call fcn.1000a710
push 0x10
lea eax, [esp + 0x38]
mov dword [esp + 0x48], esi
push ebp
push eax
call fcn.1000a710
add esp, 0x28
lea eax, [esp + 0x18]
push eax
lea eax, [esp + 0x2c]
push eax
push ebp
push ebp
push ebp
push ebx
push ebp
push ebp
push edi
lea eax, [esp + 0x90]
push eax
call dword [sym.imp.kernel32.dll_CreateProcessA]
pop ebp
test eax, eax
je 0x10006815
push 0xffffffffffffffff
push dword [esp + 0x18]
call dword [sym.imp.kernel32.dll_WaitForSingleObject]
cmp eax, 0xffffffff
je 0x100067c5
lea eax, [esp + 0x10]
push eax
push dword [esp + 0x18]
call dword [sym.imp.kernel32.dll_GetExitCodeProcess]
test eax, eax
jne 0x100067d4
jmp 0x100067d0
push str.Error:_WaitForSingleObject___failed.
call fcn.1001ef41
pop ecx
mov dword [esp + 0x10], ebx
push dword [esp + 0x18]
mov esi, dword [sym.imp.kernel32.dll_CloseHandle]
call esi
push dword [esp + 0x14]
call esi
push dword [esp + 0x10]
jmp 0x10006827
push edi
push str.Error:_Unable_to_resolve__s
call fcn.1001ef41
pop ecx
pop ecx
push 1
jmp 0x10006827
mov ecx, dword [esp + 0x170]
pop edi
pop esi
pop ebx
xor ecx, esp
call fcn.10009534
add esp, 0x168
ret
lea eax, [esp + 0x68]
push eax
push str.Error:_CreateProcess__s__...__failed:
call fcn.1001ef41
pop ecx
pop ecx
push ebx
call fcn.1001ef41
int3