Function at 0x4052aa
Capabilities:
Accept command line arguments
Create process on windows
Create process suspended
Resolve function by parsing pe exports
Terminate process

Disassembly:
sub esp, 0x168
mov eax, dword [0x433034]
xor eax, esp
mov dword [esp + 0x164], eax
push ebx
push esi
mov esi, dword [esp + 0x174]
push edi
call fcn.00401c9a
mov edi, eax
mov ebx, 0x105
push ebx
lea eax, [esp + 0x6c]
push eax
push 0
call dword [sym.imp.KERNEL32.dll_GetModuleFileNameA]
test eax, eax
je 0x4055f7
cmp eax, 0x104
jg 0x4055f7
lea eax, [esp + 0x68]
push eax
push str.ExecJRE:_old:__s_n
call fcn.004011eb
push esi
push str.ExecJRE:_new:__s_n
call fcn.004011eb
push esi
call fcn.0040ee70
push eax
lea eax, [esp + 0x80]
push eax
push esi
call fcn.00417ab3
add esp, 0x20
test eax, eax
je 0x405608
push ebp
push edi
push esi
push str._s_bin_s.exe
lea eax, [esp + 0x78]
push ebx
push eax
call fcn.00405cca
add esp, 0x14
call dword [sym.imp.KERNEL32.dll_GetCommandLineA]
push eax
call fcn.004011c9
mov ebp, eax
lea eax, [esp + 0x14]
push eax
mov dword [esp + 0x18], ebp
call fcn.0040626a
mov ebx, dword [esp + 0x18]
push ebx
call fcn.0040ee70
mov esi, eax
lea eax, [esp + 0x78]
push eax
call fcn.0040ee70
add esi, 4
add eax, esi
push eax
call fcn.00401139
mov esi, eax
lea eax, [esp + 0x80]
push 0x20
push eax
call fcn.0040bd80
add esp, 0x1c
test eax, eax
jne 0x4053b9
lea eax, [esp + 0x6c]
push 9
push eax
call fcn.0040bd80
pop ecx
pop ecx
test eax, eax
jne 0x4053b9
lea eax, [esp + 0x6c]
push eax
push esi
call fcn.00414120
jmp 0x4053db
mov ecx, 0x427894
lea eax, [esp + 0x6c]
push ecx
push eax
push ecx
push esi
call fcn.00414120
pop ecx
pop ecx
push eax
call fcn.00414130
pop ecx
pop ecx
push eax
call fcn.00414130
cmp byte [ebx], 0
mov edi, eax
pop ecx
pop ecx
je 0x4054f8
lea eax, [esp + 0x10]
push eax
call fcn.0040626a
mov ebx, eax
pop ecx
cmp byte [ebx], 0
je 0x4054b4
push ebx
call fcn.004062f6
mov esi, eax
pop ecx
cmp byte [esi], 0x2d
jne 0x4054c3
push str._classpath
push esi
call fcn.00414220
pop ecx
pop ecx
test eax, eax
je 0x405470
push 0x426530
push esi
call fcn.00414220
pop ecx
pop ecx
test eax, eax
je 0x405470
push 9
push str._version:
push esi
call fcn.0040ef00
add esp, 0xc
test eax, eax
je 0x4054ad
push str._jre_restrict_search
push esi
call fcn.00414220
pop ecx
pop ecx
test eax, eax
je 0x4054ad
push str._no_jre_restrict_search
push esi
call fcn.00414220
pop ecx
pop ecx
test eax, eax
je 0x4054ad
push ebx
mov ebx, 0x426db8
jmp 0x40549a
push ebx
mov ebx, 0x426db8
push ebx
push edi
call fcn.00414130
pop ecx
pop ecx
push eax
call fcn.00414130
mov edi, eax
lea eax, [esp + 0x18]
push eax
call fcn.0040626a
add esp, 0xc
cmp byte [eax], 0
je 0x4054ad
push eax
push ebx
push edi
call fcn.00414130
pop ecx
pop ecx
push eax
call fcn.00414130
pop ecx
mov edi, eax
pop ecx
push esi
call fcn.0040115b
pop ecx
mov eax, dword [esp + 0x10]
cmp byte [eax], 0
jne 0x4053e8
jmp 0x4054f8
push ebx
mov ebx, 0x426db8
push ebx
push edi
call fcn.00414130
pop ecx
pop ecx
push eax
call fcn.00414130
pop ecx
pop ecx
push dword [esp + 0x10]
push ebx
push eax
call fcn.00414130
pop ecx
pop ecx
push eax
call fcn.00414130
push esi
mov edi, eax
call fcn.0040115b
add esp, 0xc
push ebp
call fcn.0040115b
pop ecx
call fcn.00401133
test al, al
je 0x405545
push edi
call fcn.004011c9
mov esi, eax
lea eax, [esp + 0x14]
push eax
mov dword [esp + 0x18], esi
call fcn.0040626a
push eax
lea eax, [esp + 0x78]
push eax
push str.ReExec_Command:__s___s__n
call fcn.00401116
push dword [esp + 0x24]
push str.ReExec_Args:__s_n
call fcn.00401116
push esi
call fcn.0040115b
add esp, 0x20
xor ebx, ebx
inc ebx
push ebx
call fcn.0040c8f8
push eax
call fcn.00414d4a
push 2
call fcn.0040c8f8
push eax
call fcn.00414d4a
push 0x44
pop esi
push esi
xor ebp, ebp
lea eax, [esp + 0x3c]
push ebp
push eax
call fcn.0040a5a0
push 0x10
lea eax, [esp + 0x38]
mov dword [esp + 0x48], esi
push ebp
push eax
call fcn.0040a5a0
add esp, 0x28
lea eax, [esp + 0x18]
push eax
lea eax, [esp + 0x2c]
push eax
push ebp
push ebp
push ebp
push ebx
push ebp
push ebp
push edi
lea eax, [esp + 0x90]
push eax
call dword [sym.imp.KERNEL32.dll_CreateProcessA]
pop ebp
test eax, eax
je 0x405620
push 0xffffffffffffffff
push dword [esp + 0x18]
call dword [sym.imp.KERNEL32.dll_WaitForSingleObject]
cmp eax, 0xffffffff
je 0x4055d0
lea eax, [esp + 0x10]
push eax
push dword [esp + 0x18]
call dword [sym.imp.KERNEL32.dll_GetExitCodeProcess]
test eax, eax
jne 0x4055df
jmp 0x4055db
push str.Error:_WaitForSingleObject___failed.
call fcn.00405ae7
pop ecx
mov dword [esp + 0x10], ebx
push dword [esp + 0x18]
mov esi, dword [sym.imp.KERNEL32.dll_CloseHandle]
call esi
push dword [esp + 0x14]
call esi
push dword [esp + 0x10]
jmp 0x405632
push edi
push str.Error:_Unable_to_resolve__s
call fcn.00405b71
pop ecx
pop ecx
push 1
jmp 0x405632
mov ecx, dword [esp + 0x170]
pop edi
pop esi
pop ebx
xor ecx, esp
call fcn.0040973e
add esp, 0x168
ret
lea eax, [esp + 0x68]
push eax
push str.Error:_CreateProcess__s__...__failed:
call fcn.00405b71
pop ecx
pop ecx
push ebx
call fcn.0040f2a7
int3