Function at 0x40526b
Capabilities:
Accept command line arguments
Create process on windows
Create process suspended
Resolve function by parsing pe exports

Disassembly:
sub esp, 0x168
mov eax, dword [0x431034]
xor eax, esp
mov dword [esp + 0x164], eax
push ebx
push esi
mov esi, dword [esp + 0x174]
push edi
call fcn.00401c82
mov edi, eax
mov ebx, 0x105
push ebx
lea eax, [esp + 0x6c]
push eax
push 0
call dword [sym.imp.kernel32.dll_GetModuleFileNameA]
test eax, eax
je 0x4055b8
cmp eax, 0x104
jg 0x4055b8
lea eax, [esp + 0x68]
push eax
push str.ExecJRE:_old:__s_n
call fcn.004011d9
push esi
push str.ExecJRE:_new:__s_n
call fcn.004011d9
push esi
call fcn.0040e970
push eax
lea eax, [esp + 0x80]
push eax
push esi
call fcn.0041766c
add esp, 0x20
test eax, eax
je 0x4055c9
push ebp
push edi
push esi
push str._s_bin_s.exe
lea eax, [esp + 0x78]
push ebx
push eax
call fcn.00405c8b
add esp, 0x14
call dword [sym.imp.kernel32.dll_GetCommandLineA]
push eax
call fcn.004011b7
mov ebp, eax
lea eax, [esp + 0x14]
push eax
mov dword [esp + 0x18], ebp
call fcn.00406231
mov ebx, dword [esp + 0x18]
push ebx
call fcn.0040e970
mov esi, eax
lea eax, [esp + 0x78]
push eax
call fcn.0040e970
add esi, 4
add eax, esi
push eax
call fcn.00401127
mov esi, eax
lea eax, [esp + 0x80]
push 0x20
push eax
call fcn.0040bd30
add esp, 0x1c
test eax, eax
jne 0x40537a
lea eax, [esp + 0x6c]
push 9
push eax
call fcn.0040bd30
pop ecx
pop ecx
test eax, eax
jne 0x40537a
lea eax, [esp + 0x6c]
push eax
push esi
call fcn.00413c40
jmp 0x40539c
mov ecx, 0x42687c
lea eax, [esp + 0x6c]
push ecx
push eax
push ecx
push esi
call fcn.00413c40
pop ecx
pop ecx
push eax
call fcn.00413c50
pop ecx
pop ecx
push eax
call fcn.00413c50
cmp byte [ebx], 0
mov edi, eax
pop ecx
pop ecx
je 0x4054b9
lea eax, [esp + 0x10]
push eax
call fcn.00406231
mov ebx, eax
pop ecx
cmp byte [ebx], 0
je 0x405475
push ebx
call fcn.004062bd
mov esi, eax
pop ecx
cmp byte [esi], 0x2d
jne 0x405484
push str._classpath
push esi
call fcn.00413d40
pop ecx
pop ecx
test eax, eax
je 0x405431
push 0x425518
push esi
call fcn.00413d40
pop ecx
pop ecx
test eax, eax
je 0x405431
push 9
push str._version:
push esi
call fcn.0040ea00
add esp, 0xc
test eax, eax
je 0x40546e
push str._jre_restrict_search
push esi
call fcn.00413d40
pop ecx
pop ecx
test eax, eax
je 0x40546e
push str._no_jre_restrict_search
push esi
call fcn.00413d40
pop ecx
pop ecx
test eax, eax
je 0x40546e
push ebx
mov ebx, 0x425da0
jmp 0x40545b
push ebx
mov ebx, 0x425da0
push ebx
push edi
call fcn.00413c50
pop ecx
pop ecx
push eax
call fcn.00413c50
mov edi, eax
lea eax, [esp + 0x18]
push eax
call fcn.00406231
add esp, 0xc
cmp byte [eax], 0
je 0x40546e
push eax
push ebx
push edi
call fcn.00413c50
pop ecx
pop ecx
push eax
call fcn.00413c50
pop ecx
mov edi, eax
pop ecx
push esi
call fcn.00401149
pop ecx
mov eax, dword [esp + 0x10]
cmp byte [eax], 0
jne 0x4053a9
jmp 0x4054b9
push ebx
mov ebx, 0x425da0
push ebx
push edi
call fcn.00413c50
pop ecx
pop ecx
push eax
call fcn.00413c50
pop ecx
pop ecx
push dword [esp + 0x10]
push ebx
push eax
call fcn.00413c50
pop ecx
pop ecx
push eax
call fcn.00413c50
push esi
mov edi, eax
call fcn.00401149
add esp, 0xc
push ebp
call fcn.00401149
pop ecx
call fcn.00401121
test al, al
je 0x405506
push edi
call fcn.004011b7
mov esi, eax
lea eax, [esp + 0x14]
push eax
mov dword [esp + 0x18], esi
call fcn.00406231
push eax
lea eax, [esp + 0x78]
push eax
push str.ReExec_Command:__s___s__n
call fcn.00401104
push dword [esp + 0x24]
push str.ReExec_Args:__s_n
call fcn.00401104
push esi
call fcn.00401149
add esp, 0x20
xor ebx, ebx
inc ebx
push ebx
call fcn.0041766c
push eax
call fcn.0041766c
push 2
call fcn.0041766c
push eax
call fcn.0041766c
push 0x44
pop esi
push esi
xor ebp, ebp
lea eax, [esp + 0x3c]
push ebp
push eax
call fcn.0040a6b0
push 0x10
lea eax, [esp + 0x38]
mov dword [esp + 0x48], esi
push ebp
push eax
call fcn.0040a6b0
add esp, 0x28
lea eax, [esp + 0x18]
push eax
lea eax, [esp + 0x2c]
push eax
push ebp
push ebp
push ebp
push ebx
push ebp
push ebp
push edi
lea eax, [esp + 0x90]
push eax
call dword [sym.imp.kernel32.dll_CreateProcessA]
pop ebp
test eax, eax
je 0x4055e1
push 0xffffffffffffffff
push dword [esp + 0x18]
call dword [sym.imp.kernel32.dll_WaitForSingleObject]
cmp eax, 0xffffffff
je 0x405591
lea eax, [esp + 0x10]
push eax
push dword [esp + 0x18]
call dword [sym.imp.kernel32.dll_GetExitCodeProcess]
test eax, eax
jne 0x4055a0
jmp 0x40559c
push str.Error:_WaitForSingleObject___failed.
call fcn.0041766c
pop ecx
mov dword [esp + 0x10], ebx
push dword [esp + 0x18]
mov esi, dword [sym.imp.kernel32.dll_CloseHandle]
call esi
push dword [esp + 0x14]
call esi
push dword [esp + 0x10]
jmp 0x4055f3
push edi
push str.Error:_Unable_to_resolve__s
call fcn.0041766c
pop ecx
pop ecx
push 1
jmp 0x4055f3
mov ecx, dword [esp + 0x170]
pop edi
pop esi
pop ebx
xor ecx, esp
call fcn.004097a8
add esp, 0x168
ret
lea eax, [esp + 0x68]
push eax
push str.Error:_CreateProcess__s__...__failed:
call fcn.0041766c
pop ecx
pop ecx
push ebx
call fcn.0041766c
int3