Function at 0x401310
Capabilities:
Check if file exists
Create directory
Create pipe
Get common file path
Get file attributes
Resume thread
Set current directory
Terminate process
Write file on windows
Write pipe

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x405e18
mov eax, dword fs:[0]
push eax
mov eax, 0x1f2c
call fcn.00405b90
mov eax, dword [0x409018]
xor eax, ebp
mov dword [ebp - 0x10], eax
push ebx
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov eax, dword [ebp + 0xc]
xor ebx, ebx
push 0x400
lea ecx, [ebp - 0xd14]
push ebx
push ecx
mov dword [ebp - 0x1eb0], eax
mov dword [ebp - 0x1ed8], ebx
mov dword [ebp - 0x1ef4], 0xc
mov dword [ebp - 0x1eec], 1
mov dword [ebp - 0x1ef0], ebx
call sub.MSVCR100.dll_memset
push 0x400
lea edx, [ebp - 0x914]
push ebx
push edx
call sub.MSVCR100.dll_memset
push 0x104
lea eax, [ebp - 0x114]
push ebx
push eax
call sub.MSVCR100.dll_memset
add esp, 0x24
push 0x104
lea ecx, [ebp - 0x114]
push ecx
push ebx
call dword [sym.imp.KERNEL32.dll_GetModuleFileNameA]
lea eax, [ebp - 0x114]
mov dword [ebp - 0x1de0], 0xf
mov dword [ebp - 0x1de4], ebx
mov byte [ebp - 0x1df4], bl
lea ecx, [eax + 1]
mov dl, byte [eax]
inc eax
cmp dl, bl
jne 0x4013d8
sub eax, ecx
mov edi, eax
lea eax, [ebp - 0x114]
lea esi, [ebp - 0x1df4]
call fcn.00403b20
lea edx, [ebp - 0x1ea0]
mov dword [ebp - 4], ebx
push edx
mov edi, esi
mov byte [ebp - 0x1ea0], 0x5c
call fcn.00403830
push eax
mov eax, esi
push eax
xor ebx, ebx
lea esi, [ebp - 0x1dbc]
call fcn.004035d0
mov byte [ebp - 4], 1
cmp dword [ebp - 0x1da8], 0x10
mov eax, dword [ebp - 0x1dbc]
jae 0x401432
mov eax, esi
push eax
call dword [sym.imp.KERNEL32.dll_SetCurrentDirectoryA]
push 0x400
xor ebx, ebx
lea ecx, [ebp - 0x514]
push ebx
push ecx
call sub.MSVCR100.dll_memset
add esp, 0xc
push ebx
push 0x28
lea edx, [ebp - 0x514]
push edx
push ebx
call dword [sym.imp.SHELL32.dll_SHGetSpecialFolderPathA]
lea eax, [ebp - 0x514]
dec eax
mov cl, byte [eax + 1]
inc eax
cmp cl, bl
jne 0x401468
mov ecx, dword [str.proxy_log_]
mov edx, dword [0x407370]
mov dword [eax], ecx
mov ecx, dword [0x407374]
mov dword [eax + 4], edx
lea edx, [ebp - 0x514]
push ebx
push edx
mov dword [eax + 8], ecx
call dword [sym.imp.MSVCR100.dll__access]
add esp, 8
test eax, eax
je 0x4014af
lea eax, [ebp - 0x514]
push eax
call dword [sym.imp.MSVCR100.dll__mkdir]
add esp, 4
lea ecx, [ebp - 0x514]
push ecx
call fcn.004010e0
add esp, 4
lea edx, [ebp - 0x1ea0]
push edx
lea edi, [ebp - 0x1dbc]
mov dword [ebp - 0x1ea4], ebx
mov dword [ebp - 0x1ed0], ebx
mov dword [ebp - 0x1ecc], ebx
mov dword [ebp - 0x1ebc], ebx
mov dword [ebp - 0x1ec0], ebx
mov dword [ebp - 0x1eb4], ebx
mov dword [ebp - 0x1eb8], ebx
mov byte [ebp - 0x1ea0], 0x5c
call fcn.00403830
push eax
mov eax, edi
push eax
xor ebx, ebx
lea esi, [ebp - 0x1da0]
call fcn.004035d0
mov dword [ebp - 0x1d70], 0xf
mov dword [ebp - 0x1d74], ebx
mov byte [ebp - 0x1d84], bl
xor esi, esi
mov byte [ebp - 4], 3
cmp dword [ebp + 8], ebx
jle 0x40157a
mov edi, dword [ebp - 0x1eb0]
mov eax, dword [edi + esi*4]
mov ecx, eax
lea edx, [ecx + 1]
mov dword [ebp - 0x1ea8], edx
mov dl, byte [ecx]
inc ecx
cmp dl, bl
jne 0x401547
sub ecx, dword [ebp - 0x1ea8]
push ecx
lea ecx, [ebp - 0x1d84]
call fcn.00403670
push 1
mov eax, 0x407384
lea ecx, [ebp - 0x1d84]
call fcn.00403670
inc esi
cmp esi, dword [ebp + 8]
jl 0x401533
jmp 0x401580
mov edi, dword [ebp - 0x1eb0]
push 1
lea eax, [ebp - 0x1d84]
or esi, 0xffffffff
call fcn.004038b0
mov ecx, dword [ebp - 0x1d74]
inc eax
cmp ecx, eax
jae 0x4015a6
push str.invalid_string_position
call dword [sym.imp.MSVCP100.dll_void___cdecl_std::_Xout_of_range_char_const__]
sub ecx, eax
cmp ecx, 0xffffffff
jae 0x4015b3
mov esi, ecx
cmp esi, ebx
jbe 0x401623
cmp dword [ebp - 0x1d70], 0x10
mov edx, dword [ebp - 0x1d84]
jae 0x4015c8
lea edx, [ebp - 0x1d84]
cmp dword [ebp - 0x1d70], 0x10
mov dword [ebp - 0x1eac], edx
mov edx, dword [ebp - 0x1d84]
jae 0x4015e3
lea edx, [ebp - 0x1d84]
sub ecx, esi
push ecx
mov ecx, dword [ebp - 0x1eac]
add ecx, eax
add ecx, esi
push ecx
add edx, eax
push edx
call dword [sym.imp.MSVCR100.dll_memmove]
mov eax, dword [ebp - 0x1d74]
mov ecx, dword [ebp - 0x1d84]
sub eax, esi
add esp, 0xc
cmp dword [ebp - 0x1d70], 0x10
mov dword [ebp - 0x1d74], eax
jae 0x401620
lea ecx, [ebp - 0x1d84]
mov byte [eax + ecx], bl
xor ecx, ecx
mov dword [ebp - 0x1eac], ecx
cmp dword [ebp + 8], ebx
jle 0x40174d
mov eax, dword [edi + ecx*4]
cmp byte [eax], 0x2d
jne 0x4016b2
cmp byte [eax + 1], 0x44
je 0x40173a
cmp byte [eax], 0x2d
jne 0x4016b2
cmp byte [eax + 1], 0x70
jne 0x401661
mov edx, dword [edi + ecx*4 + 4]
inc ecx
mov dword [ebp - 0x1ebc], edx
jmp 0x40172e
cmp byte [eax], 0x2d
jne 0x4016b2
cmp byte [eax + 1], 0x69
jne 0x40167c
mov eax, dword [edi + ecx*4 + 4]
inc ecx
mov dword [ebp - 0x1ecc], eax
jmp 0x40172e
cmp byte [eax], 0x2d
jne 0x4016b2
cmp byte [eax + 1], 0x72
jne 0x401697
mov edx, dword [edi + ecx*4 + 4]
inc ecx
mov dword [ebp - 0x1ed0], edx
jmp 0x40172e
cmp byte [eax], 0x2d
jne 0x4016b2
cmp byte [eax + 1], 0x6c
jne 0x4016b2
mov eax, dword [edi + ecx*4 + 4]
inc ecx
mov dword [ebp - 0x1ec0], eax
jmp 0x40172e
mov edx, 0xa
mov esi, str._decryptip
mov edi, eax
mov edi, edi
mov ebx, dword [edi]
cmp ebx, dword [esi]
jne 0x4016f5
sub edx, 4
add esi, 4
add edi, 4
cmp edx, 4
jae 0x4016c0
mov dl, byte [esi]
cmp dl, byte [edi]
jne 0x4016f5
mov dl, byte [esi + 1]
cmp dl, byte [edi + 1]
jne 0x4016f5
mov edi, dword [ebp - 0x1eb0]
mov eax, dword [edi + ecx*4 + 4]
inc ecx
mov dword [ebp - 0x1eb4], eax
jmp 0x40172c
mov edx, str._decryptport
mov esi, 0xc
sub eax, edx
mov edi, dword [eax + edx]
cmp edi, dword [edx]
jne 0x401726
sub esi, 4
add edx, 4
cmp esi, 4
jae 0x401701
mov edi, dword [ebp - 0x1eb0]
mov edx, dword [edi + ecx*4 + 4]
inc ecx
mov dword [ebp - 0x1eb8], edx
jmp 0x40172c
mov edi, dword [ebp - 0x1eb0]
xor ebx, ebx
inc ecx
cmp ecx, dword [ebp + 8]
jl 0x401634
jmp 0x401747
mov eax, dword [edi + ecx*4 + 4]
mov dword [ebp - 0x1ea4], eax
add ecx, 2
mov dword [ebp - 0x1eac], ecx
mov ecx, dword [ebp - 0x1eb8]
mov edx, dword [ebp - 0x1eb4]
push ecx
push edx
push str.decryptip:__s__decryptport:_s_n
push 2
push 3
push 0x409404
mov esi, 0x10
call sym.db_proxy.exe_log_output
mov eax, dword [ebp - 0x1ea4]
add esp, 0x18
cmp eax, ebx
jne 0x40183c
push str.app_path_is_NULL._n
push ebx
push 3
push 0x409404
call sym.db_proxy.exe_log_output
add esp, 0x10
cmp dword [ebp - 0x1d70], esi
jb 0x4017b1
mov eax, dword [ebp - 0x1d84]
push eax
call dword [sym.imp.MSVCR100.dll_void___cdecl_operator_delete_void__]
add esp, 4
mov edi, 0xf
mov dword [ebp - 0x1d70], edi
mov dword [ebp - 0x1d74], ebx
mov byte [ebp - 0x1d84], bl
cmp dword [ebp - 0x1d8c], esi
jb 0x4017e0
mov ecx, dword [ebp - 0x1da0]
push ecx
call dword [sym.imp.MSVCR100.dll_void___cdecl_operator_delete_void__]
add esp, 4
mov byte [ebp - 0x1da0], bl
mov dword [ebp - 0x1d90], ebx
mov dword [ebp - 0x1d8c], edi
cmp dword [ebp - 0x1da8], esi
jb 0x40180a
mov edx, dword [ebp - 0x1dbc]
push edx
call dword [sym.imp.MSVCR100.dll_void___cdecl_operator_delete_void__]
add esp, 4
mov dword [ebp - 0x1da8], edi
mov dword [ebp - 0x1dac], ebx
mov byte [ebp - 0x1dbc], bl
cmp dword [ebp - 0x1de0], esi
jb 0x401834
mov eax, dword [ebp - 0x1df4]
push eax
call dword [sym.imp.MSVCR100.dll_void___cdecl_operator_delete_void__]
add esp, 4
or eax, 0xffffffff
jmp 0x40348b
mov dword [ebp - 0x1d1c], 0xf
mov dword [ebp - 0x1d20], ebx
mov byte [ebp - 0x1d30], bl
lea edx, [eax + 1]
mov cl, byte [eax]
inc eax
cmp cl, bl
jne 0x401855
sub eax, edx
mov edi, eax
mov eax, dword [ebp - 0x1ea4]
lea esi, [ebp - 0x1d30]
call fcn.00403b20
mov eax, 0xf
mov dword [ebp - 0x1d54], eax
mov dword [ebp - 0x1d58], ebx
mov byte [ebp - 0x1d68], bl
mov dword [ebp - 0x1d38], eax
mov dword [ebp - 0x1d3c], ebx
mov byte [ebp - 0x1d4c], bl
mov byte [ebp - 4], 6
cmp dword [ebp - 0x1d1c], 0x10
mov eax, dword [ebp - 0x1d30]
jae 0x4018af
mov eax, esi
push eax
call dword [sym.imp.KERNEL32.dll_GetFileAttributesA]
cmp eax, 0xffffffff
jne 0x401a25
mov eax, dword [ebp - 0x1d30]
mov esi, 0x10
cmp dword [ebp - 0x1d1c], esi
jae 0x4018d8
lea eax, [ebp - 0x1d30]
push eax
push str._s_is_not_a_valid_app_path._n
push ebx
push 3
push 0x409404
call sym.db_proxy.exe_log_output
add esp, 0x14
push esi
push 0x4073f8
push 0x407400
push ebx
call dword [sym.imp.USER32.dll_MessageBoxW]
cmp dword [ebp - 0x1d38], esi
jb 0x401918
mov ecx, dword [ebp - 0x1d4c]
push ecx
call dword [sym.imp.MSVCR100.dll_void___cdecl_operator_delete_void__]
add esp, 4
mov edi, 0xf
mov byte [ebp - 0x1d4c], bl
mov dword [ebp - 0x1d3c], ebx
mov dword [ebp - 0x1d38], edi
cmp dword [ebp - 0x1d54], esi
jb 0x401947
mov edx, dword [ebp - 0x1d68]
push edx
call dword [sym.imp.MSVCR100.dll_void___cdecl_operator_delete_void__]
add esp, 4
mov byte [ebp - 0x1d68], bl
mov dword [ebp - 0x1d58], ebx
mov dword [ebp - 0x1d54], edi
cmp dword [ebp - 0x1d1c], esi
jb 0x401971
mov eax, dword [ebp - 0x1d30]
push eax
call dword [sym.imp.MSVCR100.dll_void___cdecl_operator_delete_void__]
add esp, 4
mov byte [ebp - 0x1d30], bl
mov dword [ebp - 0x1d20], ebx
mov dword [ebp - 0x1d1c], edi
cmp dword [ebp - 0x1d70], esi
jb 0x40199b
mov ecx, dword [ebp - 0x1d84]
push ecx
call dword [sym.imp.MSVCR100.dll_void___cdecl_operator_delete_void__]
add esp, 4
mov byte [ebp - 0x1d84], bl
mov dword [ebp - 0x1d74], ebx
mov dword [ebp - 0x1d70], edi
cmp dword [ebp - 0x1d8c], esi
jb 0x4019c5
mov edx, dword [ebp - 0x1da0]
push edx
call dword [sym.imp.MSVCR100.dll_void___cdecl_operator_delete_void__]
add esp, 4
mov byte [ebp - 0x1da0], bl
mov dword [ebp - 0x1d90], ebx
mov dword [ebp - 0x1d8c], edi
cmp dword [ebp - 0x1da8], esi
jb 0x4019ef
mov eax, dword [ebp - 0x1dbc]
push eax
call dword [sym.imp.MSVCR100.dll_void___cdecl_operator_delete_void__]
add esp, 4
mov dword [ebp - 0x1da8], edi
mov dword [ebp - 0x1dac], ebx
mov byte [ebp - 0x1dbc], bl
cmp dword [ebp - 0x1de0], esi
jb 0x401834
mov ecx, dword [ebp - 0x1df4]
push ecx
call dword [sym.imp.MSVCR100.dll_void___cdecl_operator_delete_void__]
add esp, 4
or eax, 0xffffffff
jmp 0x40348b
lea edx, [ebp - 0x1ed8]
push edx
lea eax, [ebp - 0xd14]
push eax
push 0x400
push str.db_proxy.dll
call dword [sym.imp.KERNEL32.dll_GetFullPathNameA]
push str.db_proxy.dll
test eax, eax
jne 0x401a6b
push str._s_is_not_a_valid_DLL_path._n
push ebx
push 3
push 0x409404
call sym.db_proxy.exe_log_output
add esp, 0x14
mov esi, 0x10
jmp 0x401900
push str.pszDllPath___s_n
push 3
push 3
push 0x409404
call sym.db_proxy.exe_log_output
add esp, 0x14
push 1
push ebx
push str.db_proxy.dll
call dword [sym.imp.KERNEL32.dll_LoadLibraryExA]
mov esi, eax
cmp esi, ebx
jne 0x401ab8
call dword [sym.imp.KERNEL32.dll_GetLastError]
push eax
push str.db_proxy.dll
push str.LoadLibraryEx__s__failed_with_error__d._n
push ebx
push 3
push 0x409404
call sym.db_proxy.exe_log_output
add esp, 0x18
jmp 0x401ae3
push 0x4010c0
lea edx, [ebp - 0x1ea8]
push edx
push esi
mov dword [ebp - 0x1ea8], ebx
call fcn.00404a9a
push esi
call dword [sym.imp.KERNEL32.dll_FreeLibrary]
cmp dword [ebp - 0x1ea8], ebx
jne 0x401ba6
push str.db_proxy.dll
push str._s_does_not_export_function_with_ordinal_1._n
push ebx
push 3
push 0x409404
call sym.db_proxy.exe_log_output
mov esi, 0x10
add esp, 0x14
cmp dword [ebp - 0x1d38], esi
jb 0x401b1a
mov eax, dword [ebp - 0x1d4c]
push eax
call dword [sym.imp.MSVCR100.dll_void___cdecl_operator_delete_void__]
add esp, 4
mov edi, 0xf
mov byte [ebp - 0x1d4c], bl
mov dword [ebp - 0x1d3c], ebx
mov dword [ebp - 0x1d38], edi
cmp dword [ebp - 0x1d54], esi
jb 0x401b49
mov ecx, dword [ebp - 0x1d68]
push ecx
call dword [sym.imp.MSVCR100.dll_void___cdecl_operator_delete_void__]
add esp, 4
mov byte [ebp - 0x1d68], bl
mov dword [ebp - 0x1d58], ebx
mov dword [ebp - 0x1d54], edi
cmp dword [ebp - 0x1d1c], esi
jb 0x401b73
mov edx, dword [ebp - 0x1d30]
push edx
call dword [sym.imp.MSVCR100.dll_void___cdecl_operator_delete_void__]
add esp, 4
mov dword [ebp - 0x1d1c], edi
mov dword [ebp - 0x1d20], ebx
mov byte [ebp - 0x1d30], bl
cmp dword [ebp - 0x1d70], esi
jb 0x4017b6
mov eax, dword [ebp - 0x1d84]
push eax
call dword [sym.imp.MSVCR100.dll_void___cdecl_operator_delete_void__]
add esp, 4
jmp 0x4017b6
call fcn.0040587e
push 0x400
lea ecx, [ebp - 0x914]
push ecx
push eax
call dword [sym.imp.KERNEL32.dll_GetModuleFileNameA]
push 0x44
lea edx, [ebp - 0x1f38]
push ebx
push edx
call sub.MSVCR100.dll_memset
add esp, 0xc
push ebx
lea eax, [ebp - 0x1ef4]
push eax
lea ecx, [ebp - 0x1ec4]
push ecx
lea edx, [ebp - 0x1ec8]
push edx
mov dword [ebp - 0x1ee8], ebx
mov dword [ebp - 0x1ee4], ebx
mov dword [ebp - 0x1ee0], ebx
mov dword [ebp - 0x1edc], ebx
call dword [sym.imp.KERNEL32.dll_CreatePipe]
test eax, eax
jne 0x401c1d
push str.CreatePipe_failed._n
push ebx
push 3
push 0x409404
call sym.db_proxy.exe_log_output
add esp, 0x10
push 0xfffffffffffffff6
call dword [sym.imp.KERNEL32.dll_GetStdHandle]
mov dword [ebp - 0x1ea8], eax
mov eax, dword [ebp - 0x1ec8]
push eax
push 0xfffffffffffffff6
call dword [sym.imp.KERNEL32.dll_SetStdHandle]
lea ecx, [ebp - 0x1f38]
push ecx
call dword [sym.imp.KERNEL32.dll_GetStartupInfoA]
mov edx, dword [ebp - 0x1ea4]
push str.GBaseStudio.exe
push edx
call dword [sym.imp.MSVCR100.dll_strstr]
add esp, 8
test eax, eax
je 0x401fe3
lea eax, [ebp - 0x1ea0]
push eax
lea edi, [ebp - 0x1d30]
mov byte [ebp - 0x1ea0], 0x5c
call fcn.00403830
inc eax
cmp eax, ebx
jle 0x401dea
dec eax
push eax
mov ecx, edi
push ecx
xor ebx, ebx
lea esi, [ebp - 0x1dd8]
call fcn.004035d0
mov edi, eax
lea esi, [ebp - 0x1d30]
mov byte [ebp - 4], 7
call fcn.00403600
mov bl, 6
mov byte [ebp - 4], bl
cmp dword [ebp - 0x1dc4], 0x10
jb 0x401cc7
mov edx, dword [ebp - 0x1dd8]
push edx
call dword [sym.imp.MSVCR100.dll_void___cdecl_operator_delete_void__]
add esp, 4
push str.pluginsorg.eclipse.equinox.launcher_1.3.0.v20140415_2008.jar
lea eax, [ebp - 0x1d30]
push eax
lea ecx, [ebp - 0x1dd8]
push ecx
call fcn.00403e60
add esp, 0xc
mov edi, eax
lea esi, [ebp - 0x1d68]
mov byte [ebp - 4], 8
call fcn.00403600
mov byte [ebp - 4], bl
cmp dword [ebp - 0x1dc4], 0x10
jb 0x401d0f
mov edx, dword [ebp - 0x1dd8]
push edx
call dword [sym.imp.MSVCR100.dll_void___cdecl_operator_delete_void__]
add esp, 4
lea eax, [ebp - 0x1ea0]
push eax
lea edi, [ebp - 0x1d30]
mov byte [ebp - 0x1ea0], 0x5c
call fcn.00403830
inc eax
xor ebx, ebx
test eax, eax
jle 0x401dea
push eax
mov ecx, edi
push ecx
lea esi, [ebp - 0x1dd8]
call fcn.004035d0
mov edi, eax
lea esi, [ebp - 0x1d30]
mov byte [ebp - 4], 9
call fcn.00403600
mov bl, 6
mov byte [ebp - 4], bl
cmp dword [ebp - 0x1dc4], 0x10
jb 0x401d71
mov edx, dword [ebp - 0x1dd8]
push edx
call dword [sym.imp.MSVCR100.dll_void___cdecl_operator_delete_void__]
add esp, 4
push 0x4074ec
lea eax, [ebp - 0x1d30]
push eax
lea ecx, [ebp - 0x1dd8]
push ecx
call fcn.00403e60
add esp, 0xc
mov edi, eax
lea esi, [ebp - 0x1d4c]
mov byte [ebp - 4], 0xa
call fcn.00403600
mov esi, 0x10
mov byte [ebp - 4], bl
cmp dword [ebp - 0x1dc4], esi
jb 0x401dbd
mov edx, dword [ebp - 0x1dd8]
push edx
call dword [sym.imp.MSVCR100.dll_void___cdecl_operator_delete_void__]
add esp, 4
mov eax, dword [ebp - 0x1d4c]
cmp dword [ebp - 0x1d38], esi
jae 0x401dd1
lea eax, [ebp - 0x1d4c]
push eax
push str.JrePath:__s_n
push 2
push 3
push 0x409404
call sym.db_proxy.exe_log_output
add esp, 0x14
xor ebx, ebx
mov eax, dword [ebp - 0x1d68]
mov esi, 0x10
cmp dword [ebp - 0x1d54], esi
jae 0x401e03
lea eax, [ebp - 0x1d68]
mov edi, dword [sym.imp.KERNEL32.dll_GetFileAttributesA]
push eax
call edi
cmp eax, 0xffffffff
jne 0x401e3d
mov eax, dword [ebp - 0x1d68]
cmp dword [ebp - 0x1d54], esi
jae 0x401e25
lea eax, [ebp - 0x1d68]
push eax
push str._s_is_not_a_valid_app_path._n
push ebx
push 3
push 0x409404
call sym.db_proxy.exe_log_output
jmp 0x401aff
mov eax, dword [ebp - 0x1d4c]
cmp dword [ebp - 0x1d38], esi
jae 0x401e51
lea eax, [ebp - 0x1d4c]
push eax
call edi
cmp eax, 0xffffffff
jne 0x401fbe
mov eax, dword [ebp - 0x1d4c]
cmp dword [ebp - 0x1d38], esi
jae 0x401e71
lea eax, [ebp - 0x1d4c]
push eax
push str._s_is_not_a_valid_app_path._n
push ebx
push 3
push 0x409404
call sym.db_proxy.exe_log_output
add esp, 0x14
push esi
push 0x4073f8
push 0x407510
push ebx
call dword [sym.imp.USER32.dll_MessageBoxW]
cmp dword [ebp - 0x1d38], esi
jb 0x401eb1
mov ecx, dword [ebp - 0x1d4c]
push ecx
call dword [sym.imp.MSVCR100.dll_void___cdecl_operator_delete_void__]
add esp, 4
mov edi, 0xf
mov dword [ebp - 0x1d38], edi
mov dword [ebp - 0x1d3c], ebx
mov byte [ebp - 0x1d4c], bl
cmp dword [ebp - 0x1d54], esi
jb 0x401ee0
mov edx, dword [ebp - 0x1d68]
push edx
call dword [sym.imp.MSVCR100.dll_void___cdecl_operator_delete_void__]
add esp, 4
mov dword [ebp - 0x1d54], edi
mov dword [ebp - 0x1d58], ebx
mov byte [ebp - 0x1d68], bl
cmp dword [ebp - 0x1d1c], esi
jb 0x401f0a
mov eax, dword [ebp - 0x1d30]
push eax
call dword [sym.imp.MSVCR100.dll_void___cdecl_operator_delete_void__]
add esp, 4
mov dword [ebp - 0x1d1c], edi
mov dword [ebp - 0x1d20], ebx
mov byte [ebp - 0x1d30], bl
cmp dword [ebp - 0x1d70], esi
jb 0x401f34
mov ecx, dword [ebp - 0x1d84]
push ecx
call dword [sym.imp.MSVCR100.dll_void___cdecl_operator_delete_void__]
add esp, 4
mov dword [ebp - 0x1d70], edi
mov dword [ebp - 0x1d74], ebx
mov byte [ebp - 0x1d84], bl
cmp dword [ebp - 0x1d8c], esi
jb 0x401f5e
mov edx, dword [ebp - 0x1da0]
push edx
call dword [sym.imp.MSVCR100.dll_void___cdecl_operator_delete_void__]
add esp, 4
mov byte [ebp - 0x1da0], bl
mov dword [ebp - 0x1d90], ebx
mov dword [ebp - 0x1d8c], edi
cmp dword [ebp - 0x1da8], esi
jb 0x401f88
mov eax, dword [ebp - 0x1dbc]
push eax
call dword [sym.imp.MSVCR100.dll_void___cdecl_operator_delete_void__]
add esp, 4
mov dword [ebp - 0x1da8], edi
mov dword [ebp - 0x1dac], ebx
mov byte [ebp - 0x1dbc], bl
cmp dword [ebp - 0x1de0], esi
jb 0x401834
mov ecx, dword [ebp - 0x1df4]
push ecx
call dword [sym.imp.MSVCR100.dll_void___cdecl_operator_delete_void__]
add esp, 4
or eax, 0xffffffff
jmp 0x40348b
mov eax, dword [ebp - 0x1ea4]
lea edx, [eax + 1]
mov cl, byte [eax]
inc eax
cmp cl, bl
jne 0x401fc7
sub eax, edx
mov edi, eax
mov eax, dword [ebp - 0x1ea4]
lea esi, [ebp - 0x1d30]
call fcn.00403b20
mov edx, dword [ebp - 0x1ea4]
push str.mongochef.exe
push edx
call dword [sym.imp.MSVCR100.dll_strstr]
add esp, 8
test eax, eax
je 0x402361
lea eax, [ebp - 0x1ea0]
push eax
lea edi, [ebp - 0x1d30]
mov byte [ebp - 0x1ea0], 0x5c
call fcn.00403830
inc eax
cmp eax, ebx
jle 0x402147
dec eax
push eax
mov ecx, edi
push ecx
xor ebx, ebx
lea esi, [ebp - 0x1dd8]
call fcn.004035d0
mov edi, eax
lea esi, [ebp - 0x1d30]
mov byte [ebp - 4], 0xb
call fcn.00403600
mov bl, 6
mov byte [ebp - 4], bl
cmp dword [ebp - 0x1dc4], 0x10
jb 0x402063
mov edx, dword [ebp - 0x1dd8]
push edx
call dword [sym.imp.MSVCR100.dll_void___cdecl_operator_delete_void__]
add esp, 4
push str.data_man_mongodb_core_4.3.0.jar
lea eax, [ebp - 0x1d30]
push eax
lea ecx, [ebp - 0x1dd8]
push ecx
call fcn.00403e60
add esp, 0xc
mov edi, eax
lea esi, [ebp - 0x1d68]
mov byte [ebp - 4], 0xc
call fcn.00403600
mov byte [ebp - 4], bl
cmp dword [ebp - 0x1dc4], 0x10
jb 0x4020ab
mov edx, dword [ebp - 0x1dd8]
push edx
call dword [sym.imp.MSVCR100.dll_void___cdecl_operator_delete_void__]
add esp, 4
lea eax, [ebp - 0x1ea0]
push eax
lea edi, [ebp - 0x1d30]
mov byte [ebp - 0x1ea0], 0x5c
call fcn.00403830
inc eax
test eax, eax
jle 0x402145
push str.jre_binjavaw.exe
mov ecx, edi
push ecx
lea edx, [ebp - 0x1dd8]
push edx
call fcn.00403e60
add esp, 0xc
mov edi, eax
lea esi, [ebp - 0x1d4c]
mov byte [ebp - 4], 0xd
call fcn.00403600
mov esi, 0x10
mov byte [ebp - 4], 6
cmp dword [ebp - 0x1dc4], esi
jb 0x402116
mov eax, dword [ebp - 0x1dd8]
push eax
call dword [sym.imp.MSVCR100.dll_void___cdecl_operator_delete_void__]
add esp, 4
mov eax, dword [ebp - 0x1d4c]
cmp dword [ebp - 0x1d38], esi
jae 0x40212a
lea eax, [ebp - 0x1d4c]
push eax
push str.JrePath:__s_n
push 2
push 3
push 0x409404
call sym.db_proxy.exe_log_output
add esp, 0x14
xor ebx, ebx
jmp 0x40214c
xor ebx, ebx
mov esi, 0x10
mov eax, dword [ebp - 0x1d68]
mov edi, 0xf
cmp dword [ebp - 0x1d54], esi
jae 0x402165
lea eax, [ebp - 0x1d68]
push eax
call dword [sym.imp.KERNEL32.dll_GetFileAttributesA]
cmp eax, 0xffffffff
jne 0x4021bc
mov eax, dword [ebp - 0x1d68]
cmp dword [ebp - 0x1d54], esi
jae 0x402185
lea eax, [ebp - 0x1d68]
push eax
push str._s_is_not_a_valid_app_path._n
push ebx
push 3
push 0x409404
call sym.db_proxy.exe_log_output
add esp, 0x14
cmp dword [ebp - 0x1d38], esi
jb 0x401eb6
mov ecx, dword [ebp - 0x1d4c]
push ecx
call dword [sym.imp.MSVCR100.dll_void___cdecl_operator_delete_void__]
add esp, 4
jmp 0x401eb6
mov eax, dword [ebp - 0x1d4c]
cmp dword [ebp - 0x1d38], esi
jae 0x4021d0
lea eax, [ebp - 0x1d4c]
push eax
call dword [sym.imp.KERNEL32.dll_GetFileAttributesA]
cmp eax, 0xffffffff
jne 0x40233c
mov eax, dword [ebp - 0x1d4c]
cmp dword [ebp - 0x1d38], esi
jae 0x4021f4
lea eax, [ebp - 0x1d4c]
push eax
push str._s_is_not_a_valid_app_path._n
push ebx
push 3
push 0x409404
call sym.db_proxy.exe_log_output
add esp, 0x14
push esi
push 0x4073f8
push 0x407510
push ebx
call dword [sym.imp.USER32.dll_MessageBoxW]
cmp dword [ebp - 0x1d38], esi
jb 0x402234
mov edx, dword [ebp - 0x1d4c]
push edx
call dword [sym.imp.MSVCR100.dll_void___cdecl_operator_delete_void__]
add esp, 4
mov dword [ebp - 0x1d38], edi
mov dword [ebp - 0x1d3c], ebx
mov byte [ebp - 0x1d4c], bl
cmp dword [ebp - 0x1d54], esi
jb 0x40225e
mov eax, dword [ebp - 0x1d68]
push eax
call dword [sym.imp.MSVCR100.dll_void___cdecl_operator_delete_void__]
add esp, 4
mov dword [ebp - 0x1d54], edi
mov dword [ebp - 0x1d58], ebx
mov byte [ebp - 0x1d68], bl
cmp dword [ebp - 0x1d1c], esi
jb 0x402288
mov ecx, dword [ebp - 0x1d30]
push ecx
call dword [sym.imp.MSVCR100.dll_void___cdecl_operator_delete_void__]
add esp, 4
mov dword [ebp - 0x1d1c], edi
mov dword [ebp - 0x1d20], ebx
mov byte [ebp - 0x1d30], bl
cmp dword [ebp - 0x1d70], esi
jb 0x4022b2
mov edx, dword [ebp - 0x1d84]
push edx
call dword [sym.imp.MSVCR100.dll_void___cdecl_operator_delete_void__]
add esp, 4
mov dword [ebp - 0x1d70], edi
mov dword [ebp - 0x1d74], ebx
mov byte [ebp - 0x1d84], bl
cmp dword [ebp - 0x1d8c], esi
jb 0x4022dc
mov eax, dword [ebp - 0x1da0]
push eax
call dword [sym.imp.MSVCR100.dll_void___cdecl_operator_delete_void__]
add esp, 4
mov dword [ebp - 0x1d8c], edi
mov dword [ebp - 0x1d90], ebx
mov byte [ebp - 0x1da0], bl
cmp dword [ebp - 0x1da8], esi
jb 0x402306
mov ecx, dword [ebp - 0x1dbc]
push ecx
call dword [sym.imp.MSVCR100.dll_void___cdecl_operator_delete_void__]
add esp, 4
mov dword [ebp - 0x1da8], edi
mov dword [ebp - 0x1dac], ebx
mov byte [ebp - 0x1dbc], bl
cmp dword [ebp - 0x1de0], esi
jb 0x401834
mov edx, dword [ebp - 0x1df4]
push edx
call dword [sym.imp.MSVCR100.dll_void___cdecl_operator_delete_void__]
add esp, 4
or eax, 0xffffffff
jmp 0x40348b
mov eax, dword [ebp - 0x1ea4]
lea edx, [eax + 1]
mov cl, byte [eax]
inc eax
cmp cl, bl
jne 0x402345
sub eax, edx
mov edi, eax
mov eax, dword [ebp - 0x1ea4]
lea esi, [ebp - 0x1d30]
call fcn.00403b20
mov eax, dword [ebp - 0x1ea4]
push str.Studio_3T.exe
push eax
call dword [sym.imp.MSVCR100.dll_strstr]
add esp, 8
test eax, eax
je 0x4025a4
lea ecx, [ebp - 0x1ea0]
push ecx
lea edi, [ebp - 0x1d30]
mov byte [ebp - 0x1ea0], 0x5c
call fcn.00403830
inc eax
cmp eax, ebx
jle 0x4024af
dec eax
push eax
mov edx, edi
push edx
xor ebx, ebx
lea esi, [ebp - 0x1dd8]
call fcn.004035d0
mov edi, eax
lea esi, [ebp - 0x1d30]
mov byte [ebp - 4], 0xe
call fcn.00403600
mov bl, 6
mov byte [ebp - 4], bl
cmp dword [ebp - 0x1dc4], 0x10
jb 0x4023e1
mov eax, dword [ebp - 0x1dd8]
push eax
call dword [sym.imp.MSVCR100.dll_void___cdecl_operator_delete_void__]
add esp, 4
push str.data_man_mongodb_ent_5.0.1.jar
lea ecx, [ebp - 0x1d30]
push ecx
lea edx, [ebp - 0x1dd8]
push edx
call fcn.00403e60
add esp, 0xc
mov edi, eax
lea esi, [ebp - 0x1d68]
mov byte [ebp - 4], 0xf
call fcn.00403600
mov byte [ebp - 4], bl
cmp dword [ebp - 0x1dc4], 0x10
jb 0x402429
mov eax, dword [ebp - 0x1dd8]
push eax
call dword [sym.imp.MSVCR100.dll_void___cdecl_operator_delete_void__]
add esp, 4
lea ecx, [ebp - 0x1ea0]
push ecx
lea edi, [ebp - 0x1d30]
mov byte [ebp - 0x1ea0], 0x5c
call fcn.00403830
inc eax
test eax, eax
jle 0x4024ad
push str.jre_binjavaw.exe
mov edx, edi
push edx
lea eax, [ebp - 0x1e48]
push eax
call fcn.00403e60
add esp, 0xc
mov ebx, 0x10
mov edi, eax
lea esi, [ebp - 0x1d4c]
mov byte [ebp - 4], bl
call fcn.00403600
lea esi, [ebp - 0x1e48]
mov byte [ebp - 4], 6
call fcn.004034f0
mov eax, dword [ebp - 0x1d4c]
cmp dword [ebp - 0x1d38], ebx
jae 0x402496
lea eax, [ebp - 0x1d4c]
push eax
push str.JrePath:__s_n
push 2
push 3
push 0x409404
call sym.db_proxy.exe_log_output
add esp, 0x14
xor ebx, ebx
mov eax, dword [ebp - 0x1d68]
mov esi, 0x10
mov edi, 0xf
cmp dword [ebp - 0x1d54], esi
jae 0x4024cd
lea eax, [ebp - 0x1d68]
push eax
call dword [sym.imp.KERNEL32.dll_GetFileAttributesA]
cmp eax, 0xffffffff
je 0x402171
mov eax, dword [ebp - 0x1d4c]
cmp dword [ebp - 0x1d38], esi
jae 0x4024f1
lea eax, [ebp - 0x1d4c]
push eax
call dword [sym.imp.KERNEL32.dll_GetFileAttributesA]
cmp eax, 0xffffffff
jne 0x402592
mov eax, dword [ebp - 0x1d4c]
cmp dword [ebp - 0x1d38], esi
jae 0x402515
lea eax, [ebp - 0x1d4c]
push eax
push str._s_is_not_a_valid_app_path._n
push ebx
push 3
push 0x409404
call sym.db_proxy.exe_log_output
add esp, 0x14
push esi
push 0x4073f8
push 0x407510
push ebx
call dword [sym.imp.USER32.dll_MessageBoxW]
lea esi, [ebp - 0x1d4c]
call fcn.004034f0
lea esi, [ebp - 0x1d68]
call fcn.004034f0
lea esi, [ebp - 0x1d30]
call fcn.004034f0
lea esi, [ebp - 0x1d84]
call fcn.004034f0
lea esi, [ebp - 0x1da0]
call fcn.004034f0
lea esi, [ebp - 0x1dbc]
call fcn.004034f0
lea esi, [ebp - 0x1df4]
call fcn.004034f0
or eax, 0xffffffff
jmp 0x40348b
mov eax, dword [ebp - 0x1ea4]
lea edx, [ebp - 0x1d30]
push edx
call fcn.00403520
mov eax, dword [ebp - 0x1ea4]
push str.razorsql.exe
push eax
call dword [sym.imp.MSVCR100.dll_strstr]
add esp, 8
test eax, eax
je 0x40275a
lea ecx, [ebp - 0x1ea0]
push ecx
lea edi, [ebp - 0x1d30]
mov byte [ebp - 0x1ea0], 0x5c
call fcn.00403830
inc eax
cmp eax, ebx
jle 0x4026d2
dec eax
push eax
mov edx, edi
push edx
xor ebx, ebx
lea esi, [ebp - 0x1e48]
call fcn.004035d0
mov edi, eax
lea esi, [ebp - 0x1d30]
mov byte [ebp - 4], 0x11
call fcn.00403600
mov bl, 6
lea esi, [ebp - 0x1e48]
mov byte [ebp - 4], bl
call fcn.004034f0
push str._razorsql.jar
lea eax, [ebp - 0x1d30]
push eax
lea ecx, [ebp - 0x1e48]
push ecx
call fcn.00403e60
add esp, 0xc
mov edi, eax
lea esi, [ebp - 0x1d68]
mov byte [ebp - 4], 0x12
call fcn.00403600
lea esi, [ebp - 0x1e48]
mov byte [ebp - 4], bl
call fcn.004034f0
lea edx, [ebp - 0x1ea0]
push edx
lea edi, [ebp - 0x1d30]
mov byte [ebp - 0x1ea0], 0x5c
call fcn.00403830
inc eax
test eax, eax
jle 0x4026d0
push str.jre11_binjavaw.exe
mov eax, edi
push eax
lea ecx, [ebp - 0x1e48]
push ecx
call fcn.00403e60
add esp, 0xc
mov edi, eax
lea esi, [ebp - 0x1d4c]
mov byte [ebp - 4], 0x13
call fcn.00403600
lea esi, [ebp - 0x1e48]
mov byte [ebp - 4], bl
call fcn.004034f0
cmp dword [ebp - 0x1d38], 0x10
mov eax, dword [ebp - 0x1d4c]
jae 0x4026b9
lea eax, [ebp - 0x1d4c]
push eax
push str.JrePath:__s_n
push 2
push 3
push 0x409404
call sym.db_proxy.exe_log_output
add esp, 0x14
xor ebx, ebx
mov eax, dword [ebp - 0x1d68]
mov esi, 0x10
cmp dword [ebp - 0x1d54], esi
jae 0x4026eb
lea eax, [ebp - 0x1d68]
mov edi, dword [sym.imp.KERNEL32.dll_GetFileAttributesA]
push eax
call edi
cmp eax, 0xffffffff
jne 0x402728
mov eax, dword [ebp - 0x1d68]
cmp dword [ebp - 0x1d54], esi
jae 0x40270d
lea eax, [ebp - 0x1d68]
push eax
push str._s_is_not_a_valid_app_path._n
push ebx
push 3
push 0x409404
call sym.db_proxy.exe_log_output
add esp, 0x14
jmp 0x40253d
mov eax, dword [ebp - 0x1d4c]
cmp dword [ebp - 0x1d38], esi
jae 0x40273c
lea eax, [ebp - 0x1d4c]
push eax
call edi
cmp eax, 0xffffffff
je 0x402501
mov eax, dword [ebp - 0x1ea4]
lea edx, [ebp - 0x1d30]
push edx
call fcn.00403520
mov eax, dword [ebp - 0x1ea4]
push str.CPapp_Platform_Manager
push eax
call dword [sym.imp.MSVCR100.dll_strstr]
add esp, 8
test eax, eax
je 0x402960
mov esi, dword [ebp - 0x1ea4]
push esi
push str.app_path:___s_n
push 2
push 3
push 0x409404
call sym.db_proxy.exe_log_output
add esp, 0x14
mov eax, esi
lea ecx, [ebp - 0x1e10]
call fcn.004034b0
mov byte [ebp - 4], 0x14
cmp dword [ebp - 0x1dfc], 0x10
mov eax, dword [ebp - 0x1e10]
jae 0x4027ba
lea eax, [ebp - 0x1e10]
push eax
push str.strAppPath_tmp:___s_n
push 2
push 3
push 0x409404
call sym.db_proxy.exe_log_output
add esp, 0x14
push 0x1a
lea ecx, [ebp - 0x1e10]
push ecx
call fcn.00403790
mov edi, eax
push edi
lea edx, [ebp - 0x1e10]
push edx
xor ebx, ebx
lea esi, [ebp - 0x1e64]
call fcn.004035d0
mov byte [ebp - 4], 0x15
mov eax, dword [ebp - 0x1e00]
push eax
lea ecx, [ebp - 0x1e10]
push ecx
mov ebx, edi
lea esi, [ebp - 0x1e9c]
call fcn.004035d0
mov byte [ebp - 4], 0x16
mov eax, dword [ebp - 0x1e64]
mov esi, 0x10
cmp dword [ebp - 0x1e50], esi
jae 0x402832
lea eax, [ebp - 0x1e64]
push eax
push str.app_path_tmp:___s_n
push 2
push 3
push 0x409404
call sym.db_proxy.exe_log_output
mov eax, dword [ebp - 0x1e9c]
add esp, 0x14
cmp dword [ebp - 0x1e88], esi
jae 0x40285d
lea eax, [ebp - 0x1e9c]
push eax
push str.app_path_temp:___s_n
push 2
push 3
push 0x409404
call sym.db_proxy.exe_log_output
mov eax, dword [ebp - 0x1e64]
add esp, 0x14
cmp dword [ebp - 0x1e50], esi
jae 0x402888
lea eax, [ebp - 0x1e64]
push eax
call dword [sym.imp.MSVCR100.dll__chdir]
add esp, 4
test eax, eax
jne 0x40289d
push 0x407658
jmp 0x4028a2
push 0x407664
push 2
push 3
push 0x409404
call sym.db_proxy.exe_log_output
add esp, 0x10
push 0
push 0
call dword [sym.imp.MSVCR100.dll__getcwd]
push eax
push str.current_working_directory:__s_n
push 2
push 3
push 0x409404
call sym.db_proxy.exe_log_output
add esp, 0x1c
lea edx, [ebp - 0x1e9c]
push edx
or eax, 0xffffffff
xor ebx, ebx
lea ecx, [ebp - 0x1d30]
call fcn.00403a40
cmp dword [ebp - 0x1e88], esi
jb 0x402903
mov eax, dword [ebp - 0x1e9c]
push eax
call dword [sym.imp.MSVCR100.dll_void___cdecl_operator_delete_void__]
add esp, 4
xor ebx, ebx
mov edi, 0xf
mov dword [ebp - 0x1e88], edi
mov dword [ebp - 0x1e8c], ebx
mov byte [ebp - 0x1e9c], bl
cmp dword [ebp - 0x1e50], esi
jb 0x402934
mov ecx, dword [ebp - 0x1e64]
push ecx
call dword [sym.imp.MSVCR100.dll_void___cdecl_operator_delete_void__]
add esp, 4
mov dword [ebp - 0x1e50], edi
mov dword [ebp - 0x1e54], ebx
mov byte [ebp - 0x1e64], bl
cmp dword [ebp - 0x1dfc], esi
jb 0x40295e
mov edx, dword [ebp - 0x1e10]
push edx
call dword [sym.imp.MSVCR100.dll_void___cdecl_operator_delete_void__]
add esp, 4
xor ebx, ebx
lea eax, [ebp - 0x1ea0]
push eax
lea edi, [ebp - 0x1d30]
mov byte [ebp - 0x1ea0], 0x5c
call fcn.00403830
inc eax
mov dword [ebp - 0x1e18], 0xf
mov dword [ebp - 0x1e1c], ebx
mov byte [ebp - 0x1e2c], bl
mov byte [ebp - 4], 0x17
cmp eax, ebx
jle 0x4029da
push 0xffffffffffffffff
mov ecx, edi
push ecx
mov ebx, eax
lea esi, [ebp - 0x1dd8]
call fcn.004035d0
mov edi, eax
lea esi, [ebp - 0x1e2c]
mov byte [ebp - 4], 0x18
call fcn.00403600
mov byte [ebp - 4], 0x17
cmp dword [ebp - 0x1dc4], 0x10
jb 0x4029f1
mov edx, dword [ebp - 0x1dd8]
push edx
call dword [sym.imp.MSVCR100.dll_void___cdecl_operator_delete_void__]
add esp, 4
jmp 0x4029f1
lea eax, [ebp - 0x1d30]
push eax
or eax, 0xffffffff
xor ebx, ebx
lea ecx, [ebp - 0x1e2c]
call fcn.00403a40
mov esi, dword [ebp - 0x1eac]
mov ebx, dword [ebp + 8]
cmp esi, ebx
jge 0x402a5e
mov edi, edi
push 1
mov eax, 0x407384
lea ecx, [ebp - 0x1e2c]
call fcn.00403670
push 1
mov eax, 0x407690
lea ecx, [ebp - 0x1e2c]
call fcn.00403670
mov ecx, dword [ebp - 0x1eb0]
mov eax, dword [ecx + esi*4]
mov ecx, eax
lea edi, [ecx + 1]
mov dl, byte [ecx]
inc ecx
test dl, dl
jne 0x402a32
sub ecx, edi
push ecx
lea ecx, [ebp - 0x1e2c]
call fcn.00403670
push 1
mov eax, 0x407690
lea ecx, [ebp - 0x1e2c]
call fcn.00403670
inc esi
cmp esi, ebx
jl 0x402a00
mov eax, dword [ebp - 0x1d30]
mov edi, 0x10
cmp dword [ebp - 0x1d1c], edi
jae 0x402a77
lea eax, [ebp - 0x1d30]
mov esi, dword [sym.imp.MSVCR100.dll_strstr]
push str.GBaseStudio.exe
push eax
call esi
add esp, 8
test eax, eax
je 0x402c3b
lea edx, [ebp - 0x1d4c]
push edx
lea eax, [ebp - 0x1e48]
push eax
call fcn.00403f40
push eax
mov eax, 0x407690
lea ecx, [ebp - 0x1dd8]
mov byte [ebp - 4], 0x19
call fcn.00404000
push eax
mov eax, str.__Xms40m__Xmx1024m__Dfile.encodingGB18030__Djdbc.useOldAliasMetadataBehaviortrue__jar
lea ecx, [ebp - 0x1e80]
mov byte [ebp - 4], 0x1a
call fcn.00404000
push eax
mov eax, 0x407690
lea ecx, [ebp - 0x1e64]
mov byte [ebp - 4], 0x1b
call fcn.00404000
mov ecx, eax
lea eax, [ebp - 0x1d68]
lea ebx, [ebp - 0x1e9c]
mov byte [ebp - 4], 0x1c
call fcn.00404050
push eax
mov eax, 0x407690
lea ecx, [ebp - 0x1e10]
mov byte [ebp - 4], 0x1d
call fcn.00404000
add esp, 0x18
mov edi, eax
lea esi, [ebp - 0x1e2c]
mov byte [ebp - 4], 0x1e
call fcn.00403600
mov esi, 0x10
cmp dword [ebp - 0x1dfc], esi
jb 0x402b3f
mov ecx, dword [ebp - 0x1e10]
push ecx
call dword [sym.imp.MSVCR100.dll_void___cdecl_operator_delete_void__]
add esp, 4
xor ebx, ebx
mov edi, 0xf
mov dword [ebp - 0x1dfc], edi
mov dword [ebp - 0x1e00], ebx
mov byte [ebp - 0x1e10], bl
cmp dword [ebp - 0x1e88], esi
jb 0x402b70
mov edx, dword [ebp - 0x1e9c]
push edx
call dword [sym.imp.MSVCR100.dll_void___cdecl_operator_delete_void__]
add esp, 4
mov dword [ebp - 0x1e88], edi
mov dword [ebp - 0x1e8c], ebx
mov byte [ebp - 0x1e9c], bl
cmp dword [ebp - 0x1e50], esi
jb 0x402b9a
mov eax, dword [ebp - 0x1e64]
push eax
call dword [sym.imp.MSVCR100.dll_void___cdecl_operator_delete_void__]
add esp, 4
mov dword [ebp - 0x1e50], edi
mov dword [ebp - 0x1e54], ebx
mov byte [ebp - 0x1e64], bl
cmp dword [ebp - 0x1e6c], esi
jb 0x402bc4
mov ecx, dword [ebp - 0x1e80]
push ecx
call dword [sym.imp.MSVCR100.dll_void___cdecl_operator_delete_void__]
add esp, 4
mov dword [ebp - 0x1e6c], edi
mov dword [ebp - 0x1e70], ebx
mov byte [ebp - 0x1e80], bl
cmp dword [ebp - 0x1dc4], esi
jb 0x402bee
mov edx, dword [ebp - 0x1dd8]
push edx
call dword [sym.imp.MSVCR100.dll_void___cdecl_operator_delete_void__]
add esp, 4
mov byte [ebp - 4], 0x17
mov dword [ebp - 0x1dc4], edi
mov dword [ebp - 0x1dc8], ebx
mov byte [ebp - 0x1dd8], bl
cmp dword [ebp - 0x1e34], esi
jb 0x402c1c
mov eax, dword [ebp - 0x1e48]
push eax
call dword [sym.imp.MSVCR100.dll_void___cdecl_operator_delete_void__]
add esp, 4
lea ecx, [ebp - 0x1d4c]
push ecx
or eax, 0xffffffff
xor ebx, ebx
lea ecx, [ebp - 0x1d30]
call fcn.00403a40
mov edi, esi
mov esi, dword [sym.imp.MSVCR100.dll_strstr]
mov eax, dword [ebp - 0x1d30]
cmp dword [ebp - 0x1d1c], edi
jae 0x402c4f
lea eax, [ebp - 0x1d30]
push str.mongochef.exe
push eax
call esi
add esp, 8
test eax, eax
jne 0x402c85
mov eax, dword [ebp - 0x1d30]
cmp dword [ebp - 0x1d1c], edi
jae 0x402c72
lea eax, [ebp - 0x1d30]
push str.Studio_3T.exe
push eax
call esi
add esp, 8
test eax, eax
je 0x402db2
lea edx, [ebp - 0x1d4c]
push edx
lea eax, [ebp - 0x1e48]
push eax
call fcn.00403f40
push eax
mov eax, str.___Dprism.ordersw__jar__
lea ecx, [ebp - 0x1e10]
mov byte [ebp - 4], 0x1f
call fcn.00404000
mov ecx, eax
lea eax, [ebp - 0x1d68]
lea ebx, [ebp - 0x1e80]
mov byte [ebp - 4], 0x20
call fcn.00404050
push eax
mov eax, 0x407690
lea ecx, [ebp - 0x1dd8]
mov byte [ebp - 4], 0x21
call fcn.00404000
add esp, 0x10
mov edi, eax
lea esi, [ebp - 0x1e2c]
mov byte [ebp - 4], 0x22
call fcn.00403600
mov esi, 0x10
cmp dword [ebp - 0x1dc4], esi
jb 0x402d0a
mov ecx, dword [ebp - 0x1dd8]
push ecx
call dword [sym.imp.MSVCR100.dll_void___cdecl_operator_delete_void__]
add esp, 4
xor ebx, ebx
mov edi, 0xf
mov dword [ebp - 0x1dc4], edi
mov dword [ebp - 0x1dc8], ebx
mov byte [ebp - 0x1dd8], bl
cmp dword [ebp - 0x1e6c], esi
jb 0x402d3b
mov edx, dword [ebp - 0x1e80]
push edx
call dword [sym.imp.MSVCR100.dll_void___cdecl_operator_delete_void__]
add esp, 4
mov dword [ebp - 0x1e6c], edi
mov dword [ebp - 0x1e70], ebx
mov byte [ebp - 0x1e80], bl
cmp dword [ebp - 0x1dfc], esi
jb 0x402d65
mov eax, dword [ebp - 0x1e10]
push eax
call dword [sym.imp.MSVCR100.dll_void___cdecl_operator_delete_void__]
add esp, 4
mov byte [ebp - 4], 0x17
mov dword [ebp - 0x1dfc], edi
mov dword [ebp - 0x1e00], ebx
mov byte [ebp - 0x1e10], bl
cmp dword [ebp - 0x1e34], esi
jb 0x402d93
mov ecx, dword [ebp - 0x1e48]
push ecx
call dword [sym.imp.MSVCR100.dll_void___cdecl_operator_delete_void__]
add esp, 4
lea edx, [ebp - 0x1d4c]
push edx
or eax, 0xffffffff
xor ebx, ebx
lea ecx, [ebp - 0x1d30]
call fcn.00403a40
mov edi, esi
mov esi, dword [sym.imp.MSVCR100.dll_strstr]
mov eax, dword [ebp - 0x1d30]
cmp dword [ebp - 0x1d1c], edi
jae 0x402dc6
lea eax, [ebp - 0x1d30]
push str.razorsql.exe
push eax
call esi
add esp, 8
test eax, eax
je 0x402f06
lea eax, [ebp - 0x1d4c]
push eax
lea ecx, [ebp - 0x1e48]
push ecx
call fcn.00403f40
push eax
mov eax, str.___Xms128M__XX:MaxRAMPercentage40__Dwindowsexetrue__Dsun.java2d.uiScale.enabledfalse__jar__
lea ecx, [ebp - 0x1e10]
mov byte [ebp - 4], 0x23
call fcn.00404000
mov ecx, eax
lea eax, [ebp - 0x1d68]
lea ebx, [ebp - 0x1e80]
mov byte [ebp - 4], 0x24
call fcn.00404050
push eax
mov eax, 0x407690
lea ecx, [ebp - 0x1dd8]
mov byte [ebp - 4], 0x25
call fcn.00404000
add esp, 0x10
mov edi, eax
lea esi, [ebp - 0x1e2c]
mov byte [ebp - 4], 0x26
call fcn.00403600
mov esi, 0x10
cmp dword [ebp - 0x1dc4], esi
jb 0x402e5e
mov edx, dword [ebp - 0x1dd8]
push edx
call dword [sym.imp.MSVCR100.dll_void___cdecl_operator_delete_void__]
add esp, 4
xor ebx, ebx
mov edi, 0xf
mov dword [ebp - 0x1dc4], edi
mov dword [ebp - 0x1dc8], ebx
mov byte [ebp - 0x1dd8], bl
cmp dword [ebp - 0x1e6c], esi
jb 0x402e8f
mov eax, dword [ebp - 0x1e80]
push eax
call dword [sym.imp.MSVCR100.dll_void___cdecl_operator_delete_void__]
add esp, 4
mov dword [ebp - 0x1e6c], edi
mov dword [ebp - 0x1e70], ebx
mov byte [ebp - 0x1e80], bl
cmp dword [ebp - 0x1dfc], esi
jb 0x402eb9
mov ecx, dword [ebp - 0x1e10]
push ecx
call dword [sym.imp.MSVCR100.dll_void___cdecl_operator_delete_void__]
add esp, 4
mov byte [ebp - 4], 0x17
mov dword [ebp - 0x1dfc], edi
mov dword [ebp - 0x1e00], ebx
mov byte [ebp - 0x1e10], bl
cmp dword [ebp - 0x1e34], esi
jb 0x402ee7
mov edx, dword [ebp - 0x1e48]
push edx
call dword [sym.imp.MSVCR100.dll_void___cdecl_operator_delete_void__]
add esp, 4
lea eax, [ebp - 0x1d4c]
push eax
or eax, 0xffffffff
xor ebx, ebx
lea ecx, [ebp - 0x1d30]
call fcn.00403a40
mov edi, esi
mov esi, dword [sym.imp.MSVCR100.dll_strstr]
mov eax, dword [ebp - 0x1d30]
cmp dword [ebp - 0x1d1c], edi
jae 0x402f1a
lea eax, [ebp - 0x1d30]
push str.startup.exe
push eax
call esi
add esp, 8
test eax, eax
je 0x402fc4
mov eax, dword [ebp - 0x1d30]
cmp dword [ebp - 0x1d1c], edi
jae 0x402f41
lea eax, [ebp - 0x1d30]
push str.Teradata
push eax
call esi
add esp, 8
test eax, eax
je 0x402fc4
lea ecx, [ebp - 0x1ea0]
push ecx
lea edi, [ebp - 0x1d30]
mov byte [ebp - 0x1ea0], 0x5c
call fcn.00403830
inc eax
test eax, eax
jle 0x402fbf
push eax
mov edx, edi
push edx
xor ebx, ebx
lea esi, [ebp - 0x1e48]
call fcn.004035d0
mov edi, eax
lea esi, [ebp - 0x1d30]
mov byte [ebp - 4], 0x27
call fcn.00403600
mov byte [ebp - 4], 0x17
cmp dword [ebp - 0x1e34], 0x10
jb 0x402fad
mov eax, dword [ebp - 0x1e48]
push eax
call dword [sym.imp.MSVCR100.dll_void___cdecl_operator_delete_void__]
add esp, 4
push 8
mov eax, str.SQLA.exe
lea ecx, [ebp - 0x1d30]
call fcn.00403670
mov edi, 0x10
mov eax, dword [ebp - 0x1d30]
cmp dword [ebp - 0x1d1c], edi
jae 0x402fd8
lea eax, [ebp - 0x1d30]
push eax
push str.strAppPath_:__s_n
push 3
push 3
push 0x409404
call sym.db_proxy.exe_log_output
mov eax, dword [ebp - 0x1e2c]
add esp, 0x14
cmp dword [ebp - 0x1e18], edi
jae 0x403003
lea eax, [ebp - 0x1e2c]
push eax
push str.strCmdLine_:__s_n
push 3
push 3
push 0x409404
call sym.db_proxy.exe_log_output
lea ecx, [ebp - 0x914]
push ecx
push str.szDetouredDllPath_:__s_n
push 3
push 3
push 0x409404
call sym.db_proxy.exe_log_output
lea edx, [ebp - 0xd14]
push edx
push str.szDllPath_:__s_n
push 3
push 3
push 0x409404
call sym.db_proxy.exe_log_output
mov ecx, dword [ebp - 0x1e2c]
add esp, 0x3c
cmp dword [ebp - 0x1e18], edi
jae 0x403062
lea ecx, [ebp - 0x1e2c]
mov eax, dword [ebp - 0x1d30]
cmp dword [ebp - 0x1d1c], edi
jae 0x403076
lea eax, [ebp - 0x1d30]
push 0
lea edx, [ebp - 0xd14]
push edx
lea edx, [ebp - 0x914]
push edx
lea edx, [ebp - 0x1ee8]
push edx
lea edx, [ebp - 0x1f38]
push edx
push 0
push 0
push 0x4000004
push 1
push 0
push 0
push ecx
push eax
call fcn.004057e5
test eax, eax
jne 0x40317f
mov esi, dword [sym.imp.KERNEL32.dll_GetLastError]
call esi
push eax
push str.DetourCreateProcessWithDll_failed_:__d_n
call dword [sym.imp.MSVCR100.dll___iob_func]
add eax, 0x40
push eax
call dword [sym.imp.MSVCR100.dll_fprintf]
mov eax, dword [ebp - 0x1d30]
add esp, 0xc
cmp dword [ebp - 0x1d1c], edi
jae 0x4030e7
lea eax, [ebp - 0x1d30]
push eax
push str.strAppPath_:__s_n
push 0
push 3
push 0x409404
call sym.db_proxy.exe_log_output
mov eax, dword [ebp - 0x1e2c]
add esp, 0x14
cmp dword [ebp - 0x1e18], edi
jae 0x403112
lea eax, [ebp - 0x1e2c]
push eax
push str.strCmdLine_:__s_n
push 0
push 3
push 0x409404
call sym.db_proxy.exe_log_output
lea eax, [ebp - 0x914]
push eax
push str.szDetouredDllPath_:__s_n
push 0
push 3
push 0x409404
call sym.db_proxy.exe_log_output
lea ecx, [ebp - 0xd14]
push ecx
push str.szDllPath_:__s_n
push 0
push 3
push 0x409404
call sym.db_proxy.exe_log_output
add esp, 0x3c
call esi
push eax
push str.DetourCreateProcessWithDll_failed_:__d_n
push 0
push 3
push 0x409404
call sym.db_proxy.exe_log_output
add esp, 0x14
call esi
push eax
call dword [sym.imp.KERNEL32.dll_ExitProcess]
mov edx, dword [ebp - 0x1ee4]
push edx
call dword [sym.imp.KERNEL32.dll_ResumeThread]
mov eax, dword [ebp - 0x1ea8]
push eax
push 0xfffffffffffffff6
call dword [sym.imp.KERNEL32.dll_SetStdHandle]
mov ecx, dword [ebp - 0x1ec8]
push ecx
call dword [sym.imp.KERNEL32.dll_CloseHandle]
push 0xfff
lea edx, [ebp - 0x1d13]
push 0
push edx
mov byte [ebp - 0x1d14], 0
call sub.MSVCR100.dll_memset
add esp, 0xc
cmp dword [ebp - 0x1d8c], edi
jb 0x4031db
mov eax, dword [ebp - 0x1da0]
test eax, eax
je 0x4031e3
mov ebx, eax
jmp 0x4031e8
lea ebx, [ebp - 0x1da0]
jmp 0x4031e8
mov ebx, 0x407384
mov eax, dword [ebp - 0x1eb8]
mov dword [ebp - 0x1ea8], eax
test eax, eax
jne 0x403202
mov dword [ebp - 0x1ea8], 0x407384
mov eax, dword [ebp - 0x1eb4]
mov edi, eax
test eax, eax
jne 0x403213
mov edi, 0x407384
mov esi, dword [ebp - 0x1ebc]
test esi, esi
jne 0x403222
mov esi, 0x407384
mov edx, dword [ebp - 0x1ec0]
test edx, edx
jne 0x403231
mov edx, 0x407384
mov ecx, dword [ebp - 0x1ecc]
test ecx, ecx
jne 0x403240
mov ecx, 0x407384
mov eax, dword [ebp - 0x1ed0]
test eax, eax
jne 0x40324f
mov eax, 0x407384
push ebx
mov ebx, dword [ebp - 0x1ea8]
push ebx
push edi
push esi
push edx
push ecx
push eax
push str._s__s__s__s__s__s__s
lea eax, [ebp - 0x1d14]
push 0x1000
push eax
call dword [sym.imp.MSVCR100.dll__snprintf]
lea ecx, [ebp - 0x1d14]
push ecx
push str.res_id_list_:__s_n
push 3
push 3
push 0x409404
call sym.db_proxy.exe_log_output
mov eax, dword [ebp - 0x1da0]
mov edi, 0x10
add esp, 0x3c
cmp dword [ebp - 0x1d8c], edi
jae 0x4032a9
lea eax, [ebp - 0x1da0]
push eax
push str.strCurrPath1_:__s_n
push 3
push 3
push 0x409404
call sym.db_proxy.exe_log_output
mov ecx, dword [ebp - 0x1ec4]
add esp, 0x14
xor ebx, ebx
push ebx
lea edx, [ebp - 0x1ed4]
push edx
push 0x1000
lea eax, [ebp - 0x1d14]
push eax
push ecx
call dword [sym.imp.KERNEL32.dll_WriteFile]
test eax, eax
jne 0x403303
call dword [sym.imp.KERNEL32.dll_GetLastError]
push eax
push str.WriteFile_failed._d_n
push ebx
push 3
push 0x409404
call sym.db_proxy.exe_log_output
add esp, 0x14
mov edx, dword [ebp - 0x1ed4]
push edx
push str.WriteFile_:_d_n
push 3
push 3
push 0x409404
call sym.db_proxy.exe_log_output
mov eax, dword [ebp - 0x1ec4]
add esp, 0x14
push eax
call dword [sym.imp.KERNEL32.dll_CloseHandle]
test eax, eax
jne 0x403346
push str.Close_pipe_failed._n
push ebx
push 3
push 0x409404
call sym.db_proxy.exe_log_output
add esp, 0x10
cmp dword [ebp - 0x1e18], edi
jb 0x40335e
mov ecx, dword [ebp - 0x1e2c]
push ecx
call dword [sym.imp.MSVCR100.dll_void___cdecl_operator_delete_void__]
add esp, 4
mov esi, 0xf
mov dword [ebp - 0x1e18], esi
mov dword [ebp - 0x1e1c], ebx
mov byte [ebp - 0x1e2c], bl
cmp dword [ebp - 0x1d38], edi
jb 0x40338d
mov edx, dword [ebp - 0x1d4c]
push edx
call dword [sym.imp.MSVCR100.dll_void___cdecl_operator_delete_void__]
add esp, 4
mov dword [ebp - 0x1d38], esi
mov dword [ebp - 0x1d3c], ebx
mov byte [ebp - 0x1d4c], bl
cmp dword [ebp - 0x1d54], edi
jb 0x4033b7
mov eax, dword [ebp - 0x1d68]
push eax
call dword [sym.imp.MSVCR100.dll_void___cdecl_operator_delete_void__]
add esp, 4
mov dword [ebp - 0x1d54], esi
mov dword [ebp - 0x1d58], ebx
mov byte [ebp - 0x1d68], bl
cmp dword [ebp - 0x1d1c], edi
jb 0x4033e1
mov ecx, dword [ebp - 0x1d30]
push ecx
call dword [sym.imp.MSVCR100.dll_void___cdecl_operator_delete_void__]
add esp, 4
mov dword [ebp - 0x1d1c], esi
mov dword [ebp - 0x1d20], ebx
mov byte [ebp - 0x1d30], bl
cmp dword [ebp - 0x1d70], edi
jb 0x40340b
mov edx, dword [ebp - 0x1d84]
push edx
call dword [sym.imp.MSVCR100.dll_void___cdecl_operator_delete_void__]
add esp, 4
mov dword [ebp - 0x1d70], esi
mov dword [ebp - 0x1d74], ebx
mov byte [ebp - 0x1d84], bl
cmp dword [ebp - 0x1d8c], edi
jb 0x403435
mov eax, dword [ebp - 0x1da0]
push eax
call dword [sym.imp.MSVCR100.dll_void___cdecl_operator_delete_void__]
add esp, 4
mov dword [ebp - 0x1d8c], esi
mov dword [ebp - 0x1d90], ebx
mov byte [ebp - 0x1da0], bl
cmp dword [ebp - 0x1da8], edi
jb 0x40345f
mov ecx, dword [ebp - 0x1dbc]
push ecx
call dword [sym.imp.MSVCR100.dll_void___cdecl_operator_delete_void__]
add esp, 4
mov dword [ebp - 0x1da8], esi
mov dword [ebp - 0x1dac], ebx
mov byte [ebp - 0x1dbc], bl
cmp dword [ebp - 0x1de0], edi
jb 0x403489
mov edx, dword [ebp - 0x1df4]
push edx
call dword [sym.imp.MSVCR100.dll_void___cdecl_operator_delete_void__]
add esp, 4
xor eax, eax
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
call fcn.00404137
mov esp, ebp
pop ebp
ret