Function at 0x100f070
Capabilities:
Check if file exists
Get memory capacity

Disassembly:
mov edi, edi
push ebp
mov ebp, esp
mov eax, 0x263c
call fcn.01047580
mov eax, dword [0x104c68c]
xor eax, ebp
mov dword [ebp - 0x24], eax
push esi
push edi
mov ecx, 0xd
mov esi, 0x1001a0c
lea edi, [ebp - 0x185c]
rep movsd dword es:[edi], dword [esi]
mov ax, word [0x10015d4]
mov word [ebp - 0xf60], ax
push 0x7e
push 0
lea ecx, [ebp - 0xf5e]
push ecx
call sub.MSVCR80.dll_memset
add esp, 0xc
mov dx, word [0x10015d4]
mov word [ebp - 0x1828], dx
push 0x106
push 0
lea eax, [ebp - 0x1826]
push eax
call sub.MSVCR80.dll_memset
add esp, 0xc
mov cx, word [0x10015d4]
mov word [ebp - 0x9b8], cx
push 0x1fe
push 0
lea edx, [ebp - 0x9b6]
push edx
call sub.MSVCR80.dll_memset
add esp, 0xc
mov ax, word [0x10015d4]
mov word [ebp - 0x7b8], ax
push 0xfe
push 0
lea ecx, [ebp - 0x7b6]
push ecx
call sub.MSVCR80.dll_memset
add esp, 0xc
mov dx, word [0x10015d4]
mov word [ebp - 0x1a8], dx
push 0xfe
push 0
lea eax, [ebp - 0x1a6]
push eax
call sub.MSVCR80.dll_memset
add esp, 0xc
mov cx, word [0x10015d4]
mov word [ebp - 0x1170], cx
push 0xfe
push 0
lea edx, [ebp - 0x116e]
push edx
call sub.MSVCR80.dll_memset
add esp, 0xc
mov ax, word [0x10015d4]
mov word [ebp - 0x6b8], ax
push 0x7e
push 0
lea ecx, [ebp - 0x6b6]
push ecx
call sub.MSVCR80.dll_memset
add esp, 0xc
mov dx, word [0x10015d4]
mov word [ebp - 0x1718], dx
push 0x3fe
push 0
lea eax, [ebp - 0x1716]
push eax
call sub.MSVCR80.dll_memset
add esp, 0xc
mov cx, word [0x10015d4]
mov word [ebp - 0x5b0], cx
push 0x3fe
push 0
lea edx, [ebp - 0x5ae]
push edx
call sub.MSVCR80.dll_memset
add esp, 0xc
mov ax, word [0x10015d4]
mov word [ebp - 0xa8], ax
push 0x7e
push 0
lea ecx, [ebp - 0xa6]
push ecx
call sub.MSVCR80.dll_memset
add esp, 0xc
mov dx, word [0x10015d4]
mov word [ebp - 0x638], dx
push 0x7e
push 0
lea eax, [ebp - 0x636]
push eax
call sub.MSVCR80.dll_memset
add esp, 0xc
mov cx, word [0x10015d4]
mov word [ebp - 0x1070], cx
push 0x106
push 0
lea edx, [ebp - 0x106e]
push edx
call sub.MSVCR80.dll_memset
add esp, 0xc
mov ax, word [0x10015d4]
mov word [ebp - 0x11f8], ax
push 0x7e
push 0
lea ecx, [ebp - 0x11f6]
push ecx
call sub.MSVCR80.dll_memset
add esp, 0xc
mov dx, word [0x10015d4]
mov word [ebp - 0xee0], dx
push 0x3fe
push 0
lea eax, [ebp - 0xede]
push eax
call sub.MSVCR80.dll_memset
add esp, 0xc
mov cx, word [0x10015d4]
mov word [ebp - 0x1308], cx
push 0x106
push 0
lea edx, [ebp - 0x1306]
push edx
call sub.MSVCR80.dll_memset
add esp, 0xc
mov ax, word [0x10015d4]
mov word [ebp - 0x2628], ax
push 0x1fe
push 0
lea ecx, [ebp - 0x2626]
push ecx
call sub.MSVCR80.dll_memset
add esp, 0xc
mov dword [ebp - 0x1314], 0
mov dword [ebp - 0x11fc], 0
mov dword [ebp - 0x9bc], 0
mov dword [ebp - 0x1174], 0
mov dword [ebp - 0x1310], 0
mov dword [ebp - 0x2424], 0
mov dword [ebp - 0xadc], 0
mov dword [ebp - 0x1720], 0
mov dword [ebp - 0x5b4], 0
mov dword [ebp - 0x171c], 0
mov dword [ebp - 0x1ac], 0
mov dword [ebp - 0x130c], 0
mov dword [ebp - 0xf64], 0
mov dword [ebp - 0x1860], 0
push 0x40
lea edx, [ebp - 0xf60]
push edx
push 0x17
mov eax, dword [0x104ef34]
push eax
call dword [sym.imp.USER32.dll_LoadStringW]
mov dword [ebp - 0x20], 0x20
lea ecx, [ebp - 0x20]
push ecx
call dword [sym.imp.KERNEL32.dll_GlobalMemoryStatus]
cmp dword [ebp - 0x18], 0
jne 0x100f389
mov dword [ebp - 0x18], 0xffffffff
mov ecx, dword [ebp - 0x18]
shr ecx, 0x14
mov eax, dword [ebp - 0x18]
xor edx, edx
mov esi, 0x100000
div esi
neg edx
sbb edx, edx
neg edx
add ecx, edx
mov dword [ebp - 0xadc], ecx
mov dword [ebp - 0xad8], 0x114
lea edx, [ebp - 0xad8]
push edx
call dword [sym.imp.KERNEL32.dll_GetVersionExW]
test eax, eax
je 0x100f42e
lea eax, [ebp - 0xac4]
push eax
call fcn.01042790
add esp, 4
cmp dword [ebp - 0xac8], 2
jne 0x100f3e8
mov dword [ebp - 0x262c], 0x1001a04
jmp 0x100f3f2
mov dword [ebp - 0x262c], 0x10019fc
lea ecx, [ebp - 0xac4]
push ecx
mov edx, dword [ebp - 0xacc]
push edx
mov eax, dword [ebp - 0xad0]
push eax
mov ecx, dword [ebp - 0xad4]
push ecx
mov edx, dword [ebp - 0x262c]
push edx
push 0x10019c4
push 0x100
lea eax, [ebp - 0x9b8]
push eax
call fcn.01011d00
add esp, 0x20
lea ecx, [ebp - 0xf60]
push ecx
push 0x40
lea edx, [ebp - 0x6b8]
push edx
call fcn.01010390
push 0x10019bc
push 0x40
lea eax, [ebp - 0x6b8]
push eax
call fcn.01010390
push 0x10019ac
push 0x40
lea ecx, [ebp - 0xa8]
push ecx
call fcn.01010390
cmp dword [0x104e7a8], 0
je 0x100f48e
push 0x40
lea edx, [ebp - 0x638]
push edx
push 0x16e
mov eax, dword [0x104ef34]
push eax
call dword [sym.imp.USER32.dll_LoadStringW]
jmp 0x100f4a9
push 0x40
lea ecx, [ebp - 0x638]
push ecx
push 0x16f
mov edx, dword [0x104ef34]
push edx
call dword [sym.imp.USER32.dll_LoadStringW]
mov eax, dword [0x104e7d4]
and eax, 1
jne 0x100f6b2
push 0x100
lea ecx, [ebp - 0x2628]
push ecx
call fcn.0102b310
add esp, 8
lea edx, [ebp - 0x2628]
push edx
push 0
push 0x100000
call dword [sym.imp.KERNEL32.dll_OpenEventW]
mov dword [ebp - 0x1ac], eax
cmp dword [ebp - 0x1ac], 0
jne 0x100f5fa
call dword [sym.imp.KERNEL32.dll_GetLastError]
mov dword [ebp - 0x171c], eax
cmp dword [ebp - 0x171c], 2
jne 0x100f595
push 0
push 0
push 0
push 4
call fcn.010319b0
add esp, 0x10
mov eax, dword [0x104ef2c]
push eax
call dword [sym.imp.KERNEL32.dll_SetEvent]
push 0x15e
push 0
push 4
call fcn.01028fb0
add esp, 0xc
push 0x100
lea ecx, [ebp - 0x2628]
push ecx
call fcn.0102b310
add esp, 8
lea edx, [ebp - 0x2628]
push edx
push 0
push 0x100000
call dword [sym.imp.KERNEL32.dll_OpenEventW]
mov dword [ebp - 0x1ac], eax
cmp dword [ebp - 0x1ac], 0
jne 0x100f593
push 0x1f4
mov eax, dword [0x104e760]
push eax
call dword [sym.imp.KERNEL32.dll_WaitForSingleObject]
cmp eax, 0x102
je 0x100f591
jmp 0x100fe9c
jmp 0x100f54c
jmp 0x100f5fa
push 0x400
lea ecx, [ebp - 0xee0]
push ecx
mov edx, dword [ebp - 0x171c]
push edx
call fcn.010425e0
add esp, 0xc
push 0x200
lea eax, [ebp - 0x5b0]
push eax
push 0x17d
mov ecx, dword [0x104ef34]
push ecx
call dword [sym.imp.USER32.dll_LoadStringW]
lea edx, [ebp - 0xee0]
push edx
lea eax, [ebp - 0x5b0]
push eax
push 0x200
lea ecx, [ebp - 0x1718]
push ecx
call fcn.01011d00
add esp, 0x10
jmp 0x100fe9c
cmp dword [ebp - 0x1ac], 0
je 0x100f643
push 0
mov edx, dword [ebp - 0x1ac]
push edx
call dword [sym.imp.KERNEL32.dll_WaitForSingleObject]
test eax, eax
je 0x100f643
push 0x189
push 0
push 4
call fcn.01028fb0
add esp, 0xc
push 0
push 0
push 0
push 4
call fcn.010319b0
add esp, 0x10
mov eax, dword [0x104ef2c]
push eax
call dword [sym.imp.KERNEL32.dll_SetEvent]
cmp dword [ebp - 0x1ac], 0
je 0x100f67c
push 0
mov ecx, dword [ebp - 0x1ac]
push ecx
call dword [sym.imp.KERNEL32.dll_WaitForSingleObject]
test eax, eax
je 0x100f67c
push 0x1f4
mov edx, dword [0x104e760]
push edx
call dword [sym.imp.KERNEL32.dll_WaitForSingleObject]
cmp eax, 0x102
je 0x100f67a
jmp 0x100f67c
jmp 0x100f643
cmp dword [ebp - 0x1ac], 0
je 0x100f692
mov eax, dword [ebp - 0x1ac]
push eax
call dword [sym.imp.KERNEL32.dll_CloseHandle]
push 0
mov ecx, dword [0x104e760]
push ecx
call dword [sym.imp.KERNEL32.dll_WaitForSingleObject]
cmp eax, 0x102
je 0x100f6b2
jmp 0x100fe9c
push 0x1001970
lea edx, [ebp - 0x2420]
push edx
call fcn.0101a5a0
add esp, 8
push 0
push 1
lea eax, [ebp - 0x2420]
push eax
call fcn.0101a630
add esp, 0xc
test eax, eax
je 0x100fa2d
push 1
lea ecx, [ebp - 0x2420]
push ecx
call fcn.01011560
add esp, 8
push 0x1001964
lea edx, [ebp - 0x2420]
push edx
call fcn.0101af30
add esp, 8
test eax, eax
jne 0x100f762
lea eax, [ebp - 0x2420]
push eax
call dword [sym.imp.SQLSVC90.dll_QSQLLogoff]
add esp, 4
push 0x200
lea ecx, [ebp - 0x5b0]
push ecx
push 0x15f
mov edx, dword [0x104ef34]
push edx
call dword [sym.imp.USER32.dll_LoadStringW]
push 0x1001964
lea eax, [ebp - 0x5b0]
push eax
push 0x200
lea ecx, [ebp - 0x1718]
push ecx
call fcn.01011d00
add esp, 0x10
jmp 0x100fe9c
lea edx, [ebp - 0x1314]
push edx
push 0x80
push 0x104f058
push 0x12
push 2
push 1
lea eax, [ebp - 0x2420]
push eax
call dword [sym.imp.SQLSVC90.dll_QSQLGetProperty]
add esp, 0x1c
test eax, eax
jne 0x100f82c
push 0x104f058
push 0x80
lea ecx, [ebp - 0x7b8]
push ecx
call fcn.01010390
push 0x100
lea edx, [ebp - 0x1a8]
push edx
push 0x10015d4
push 0x1001960
lea eax, [ebp - 0x7b8]
push eax
call fcn.01042360
add esp, 0x14
lea ecx, [ebp - 0x1a8]
push ecx
call dword [sym.imp.MSVCR80.dll__wtol]
add esp, 4
mov dword [0x104ef54], eax
mov eax, dword [0x104ef54]
cdq
mov ecx, 0x2710
idiv ecx
push edx
mov eax, dword [0x104ef54]
cdq
mov ecx, 0xf4240
idiv ecx
mov eax, edx
cdq
mov ecx, 0x2710
idiv ecx
push eax
mov eax, dword [0x104ef54]
cdq
mov ecx, 0xf4240
idiv ecx
push eax
push 0x1001940
push 0x80
push 0x104f058
call fcn.01011d00
add esp, 0x18
lea edx, [ebp - 0x1314]
push edx
push 0x80
push 0x104ef58
push 7
push 2
push 1
lea eax, [ebp - 0x2420]
push eax
call dword [sym.imp.SQLSVC90.dll_QSQLGetProperty]
add esp, 0x1c
test eax, eax
jne 0x100f8fa
push 0x104ef58
push 0x80
lea ecx, [ebp - 0x7b8]
push ecx
call fcn.01010390
push 0x100
lea edx, [ebp - 0x1a8]
push edx
push 0x10015d4
push 0x1001960
lea eax, [ebp - 0x7b8]
push eax
call fcn.01042360
add esp, 0x14
lea ecx, [ebp - 0x1a8]
push ecx
call dword [sym.imp.MSVCR80.dll__wtol]
add esp, 4
mov dword [ebp - 0xf64], eax
mov eax, dword [ebp - 0xf64]
cdq
mov ecx, 0x2710
idiv ecx
push edx
mov eax, dword [ebp - 0xf64]
cdq
mov ecx, 0xf4240
idiv ecx
mov eax, edx
cdq
mov ecx, 0x2710
idiv ecx
push eax
mov eax, dword [ebp - 0xf64]
cdq
mov ecx, 0xf4240
idiv ecx
push eax
push 0x1001940
push 0x80
push 0x104ef58
call fcn.01011d00
add esp, 0x18
lea edx, [ebp - 0x1314]
push edx
push 0x80
lea eax, [ebp - 0x1170]
push eax
push 0x4af
push 2
push 1
lea ecx, [ebp - 0x2420]
push ecx
call dword [sym.imp.SQLSVC90.dll_QSQLGetProperty]
add esp, 0x1c
push 0
push 0
push 0x84
lea edx, [ebp - 0x1828]
push edx
lea eax, [ebp - 0x9bc]
push eax
push 0
push 0
lea ecx, [ebp - 0x2420]
push ecx
call fcn.0101ac40
add esp, 0x20
push 0x104e7cc
lea edx, [ebp - 0x1308]
push edx
push 0x104ef50
push 0x104ef4c
lea eax, [ebp - 0x1070]
push eax
lea ecx, [ebp - 0x1860]
push ecx
push 0x104e7b4
lea edx, [ebp - 0x2424]
push edx
lea eax, [ebp - 0x1174]
push eax
lea ecx, [ebp - 0x1310]
push ecx
lea edx, [ebp - 0x2420]
push edx
call fcn.0101b080
add esp, 0x2c
cmp dword [0x104b004], 0
jne 0x100f9cb
lea eax, [ebp - 0x185c]
push eax
push 0
push 0
push 0
push 1
push 1
push 0x10017c0
lea ecx, [ebp - 0x2420]
push ecx
call fcn.0101a970
add esp, 0x20
push 0x104b114
lea edx, [ebp - 0x2420]
push edx
call fcn.010213a0
add esp, 8
test eax, eax
jne 0x100fa1b
lea eax, [ebp - 0x2420]
push eax
call dword [sym.imp.SQLSVC90.dll_QSQLLogoff]
add esp, 4
push 0x200
lea ecx, [ebp - 0x1718]
push ecx
push 0x1b7
mov edx, dword [0x104ef34]
push edx
call dword [sym.imp.USER32.dll_LoadStringW]
jmp 0x100fe9c
lea eax, [ebp - 0x2420]
push eax
call dword [sym.imp.SQLSVC90.dll_QSQLLogoff]
add esp, 4
jmp 0x100fa79
push 0x200
lea ecx, [ebp - 0x5b0]
push ecx
push 0x63
mov edx, dword [0x104ef34]
push edx
call dword [sym.imp.USER32.dll_LoadStringW]
push 0x10015b4
lea eax, [ebp - 0x240c]
push eax
lea ecx, [ebp - 0x5b0]
push ecx
push 0x200
lea edx, [ebp - 0x1718]
push edx
call fcn.01011d00
add esp, 0x14
jmp 0x100fe9c
call dword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
push eax
push 0x10017b4
push 0x40
lea eax, [ebp - 0x11f8]
push eax
call fcn.01011d00
add esp, 0x10
lea ecx, [ebp - 0x11f8]
push ecx
lea edx, [ebp - 0x638]
push edx
lea eax, [ebp - 0xa8]
push eax
lea ecx, [ebp - 0x6b8]
push ecx
push 0x1001598
push 0x10015b4
push 0x64
push 0
push 4
call fcn.01028fb0
add esp, 0x24
movzx edx, word [0x104f058]
test edx, edx
je 0x100fae1
mov dword [ebp - 0x2630], 0x104f058
jmp 0x100faed
lea eax, [ebp - 0xf60]
mov dword [ebp - 0x2630], eax
mov ecx, dword [ebp - 0x1860]
push ecx
mov edx, dword [ebp - 0x2630]
push edx
lea eax, [ebp - 0x1070]
push eax
push 0x65
push 0
push 4
call fcn.01028fb0
add esp, 0x18
movzx ecx, word [0x104ef58]
test ecx, ecx
je 0x100fb27
mov dword [ebp - 0x2634], 0x104ef58
jmp 0x100fb33
lea edx, [ebp - 0xf60]
mov dword [ebp - 0x2634], edx
mov eax, dword [ebp - 0x2634]
push eax
push 0x66
push 0
push 4
call fcn.01028fb0
add esp, 0x10
movzx ecx, word [ebp - 0x1170]
test ecx, ecx
je 0x100fb6b
lea edx, [ebp - 0x1170]
push edx
call dword [sym.imp.MSVCR80.dll__wcsupr]
add esp, 4
mov dword [ebp - 0x2638], eax
jmp 0x100fb77
lea eax, [ebp - 0xf60]
mov dword [ebp - 0x2638], eax
push 0x104ca54
mov ecx, dword [ebp - 0x2638]
push ecx
push 0x67
push 0
push 4
call fcn.01028fb0
add esp, 0x14
mov edx, dword [ebp - 0xadc]
push edx
mov eax, dword [0x104e7d8]
push eax
push 0x136
push 0
push 4
call fcn.01028fb0
add esp, 0x14
lea ecx, [ebp - 0x9b8]
push ecx
push 0x104e9e8
push 0x153
push 0
push 4
call fcn.01028fb0
add esp, 0x14
cmp dword [ebp - 0x9bc], 0
jne 0x100fc45
push 0x200
lea edx, [ebp - 0x5b0]
push edx
push 0x6a
mov eax, dword [0x104ef34]
push eax
call dword [sym.imp.USER32.dll_LoadStringW]
movzx ecx, word [ebp - 0x1828]
test ecx, ecx
je 0x100fc08
lea edx, [ebp - 0x1828]
mov dword [ebp - 0x263c], edx
jmp 0x100fc14
lea eax, [ebp - 0xf60]
mov dword [ebp - 0x263c], eax
mov ecx, dword [ebp - 0x263c]
push ecx
push 0x10015b4
lea edx, [ebp - 0x5b0]
push edx
push 0x200
lea eax, [ebp - 0x1718]
push eax
call fcn.01011d00
add esp, 0x14
jmp 0x100fe9c
cmp dword [ebp - 0x1174], 0
je 0x100fc9b
push 0x200
lea ecx, [ebp - 0x5b0]
push ecx
push 0xff
mov edx, dword [0x104ef34]
push edx
call dword [sym.imp.USER32.dll_LoadStringW]
push 0x1001964
push 0x10015b4
lea eax, [ebp - 0x5b0]
push eax
push 0x200
lea ecx, [ebp - 0x1718]
push ecx
call fcn.01011d00
add esp, 0x14
jmp 0x100fe9c
cmp dword [ebp - 0x1310], 0
jne 0x100fcf0
push 0x200
lea edx, [ebp - 0x5b0]
push edx
push 0x183
mov eax, dword [0x104ef34]
push eax
call dword [sym.imp.USER32.dll_LoadStringW]
push 0x1001964
push 0x10015b4
lea ecx, [ebp - 0x5b0]
push ecx
push 0x200
lea edx, [ebp - 0x1718]
push edx
call fcn.01011d00
add esp, 0x14
jmp 0x100fe9c
cmp dword [ebp - 0x2424], 0
jne 0x100fd46
push 0x200
lea eax, [ebp - 0x5b0]
push eax
push 0x184
mov ecx, dword [0x104ef34]
push ecx
call dword [sym.imp.USER32.dll_LoadStringW]
push 0x1001964
push 0x10015b4
lea edx, [ebp - 0x5b0]
push edx
push 0x200
lea eax, [ebp - 0x1718]
push eax
call fcn.01011d00
add esp, 0x14
jmp 0x100fe9c
push str.MSSQLSERVER
lea ecx, [ebp - 0x1308]
push ecx
call dword [sym.imp.MSVCR80.dll_wcscmp]
add esp, 8
test eax, eax
je 0x100fdb2
push 0x200
lea edx, [ebp - 0x5b0]
push edx
push 0x197
mov eax, dword [0x104ef34]
push eax
call dword [sym.imp.USER32.dll_LoadStringW]
push str.MSSQLSERVER
lea ecx, [ebp - 0x1308]
push ecx
push 0x10015b4
lea edx, [ebp - 0x5b0]
push edx
push 0x200
lea eax, [ebp - 0x1718]
push eax
call fcn.01011d00
add esp, 0x18
jmp 0x100fe9c
cmp dword [0x104dd98], 0
jne 0x100fe40
cmp dword [0x104ef54], 0
jne 0x100fe0f
push 0x200
lea ecx, [ebp - 0x5b0]
push ecx
push 0x6b
mov edx, dword [0x104ef34]
push edx
call dword [sym.imp.USER32.dll_LoadStringW]
push 0x10015b4
lea eax, [ebp - 0x5b0]
push eax
push 0x200
lea ecx, [ebp - 0x1718]
push ecx
call fcn.01011d00
add esp, 0x10
jmp 0x100fe9c
cmp dword [0x104ef54], 0x6c5660
jge 0x100fe40
push 0x10017ac
push 2
push 0x10015b4
push 2
push 4
push 0xc000006b
push 1
push 3
call fcn.010287e0
add esp, 0x20
jmp 0x100fe9c
call fcn.01032250
mov dword [ebp - 0x11fc], eax
cmp dword [ebp - 0x11fc], 0
jne 0x100fe75
push 0x200
lea edx, [ebp - 0x1718]
push edx
push 0x1c2
mov eax, dword [0x104ef34]
push eax
call dword [sym.imp.USER32.dll_LoadStringW]
jmp 0x100fe9c
push 0x1001798
call fcn.01031c00
add esp, 4
test eax, eax
jne 0x100fe9c
push 0x1001798
push 0x16c
push 0
push 1
call fcn.01028fb0
add esp, 0x10
cmp dword [ebp - 0x11fc], 0
jne 0x100feed
lea ecx, [ebp - 0x1718]
push ecx
call dword [sym.imp.MSVCR80.dll_wcslen]
add esp, 4
test eax, eax
je 0x100feed
lea edx, [ebp - 0x1718]
push edx
push 0
push 0x100155c
push 1
call fcn.01028fb0
add esp, 0x10
lea eax, [ebp - 0x1718]
push eax
push 2
push 2
push 0x40000067
push 1
push 1
call fcn.010287e0
add esp, 0x18
push 0
mov ecx, dword [0x104e760]
push ecx
call dword [sym.imp.KERNEL32.dll_WaitForSingleObject]
cmp eax, 0x102
je 0x100ff09
xor eax, eax
jmp 0x100ff0f
mov eax, dword [ebp - 0x11fc]
pop edi
pop esi
mov ecx, dword [ebp - 0x24]
xor ecx, ebp
call fcn.010471ba
mov esp, ebp
pop ebp
ret