Function at 0x4010d0
Capabilities:
Read file on windows
Terminate process

Disassembly:
sub esp, 0x2c4
mov eax, dword [0x411510]
push ebx
mov ebx, dword [esp + 0x2cc]
push ebp
push esi
mov dword [esp + 0x2cc], eax
xor esi, esi
xor eax, eax
test ebx, ebx
push edi
mov edi, dword [esp + 0x2dc]
jle 0x401149
mov ebp, 1
mov ecx, dword [edi + eax*4]
mov dl, byte [ecx]
cmp dl, 0x2d
je 0x401110
cmp dl, 0x2f
jne 0x401143
mov dl, byte [ecx + 1]
cmp dl, 0x53
je 0x40111d
cmp dl, 0x73
jne 0x401190
lea esi, [ecx + 2]
cmp byte [esi], 0
jne 0x401143
cmp ebp, ebx
jge 0x401141
mov ecx, dword [edi + eax*4 + 4]
mov cl, byte [ecx]
cmp cl, 0x2d
je 0x401141
cmp cl, 0x2f
je 0x401141
mov esi, dword [edi + eax*4 + 4]
inc eax
inc ebp
jmp 0x401143
xor esi, esi
inc eax
inc ebp
cmp eax, ebx
jl 0x401101
push 0
push 0x4112b0
call fcn.00401933
mov eax, dword [str.Console.exe_for_SQL_Server_2000_SP3_and_above._n_nNotification_of_tape_mount_requests_will_occur_here._n_nNo_input_to_SQL_Server_is_possible_from_this_tool._n_nTo_cancel_BACKUP_RESTORE_tasks__use_KILL_from_an_administrative_connection._n_n]
push eax
call fcn.00401612
xor ebx, ebx
add esp, 0xc
cmp esi, ebx
je 0x4011c6
push 0x5c
push esi
call fcn.00401870
add esp, 8
cmp eax, ebx
jne 0x4011a7
push esi
lea ecx, [esp + 0x1d4]
push str._spipe_sqlconsole
push ecx
call fcn.004017c1
add esp, 0xc
jmp 0x4011db
mov edx, dword [str.Usage:_console___S_Server__n]
push edx
call fcn.00401612
add esp, 4
push 0xffffffffffffffff
call dword [sym.imp.KERNEL32.dll_ExitProcess]
lea edx, [eax + 1]
push edx
push esi
sub eax, esi
push eax
lea eax, [esp + 0x1dc]
push str._.spipeMSSQL__sconsole
push eax
call fcn.004017c1
add esp, 0x14
jmp 0x4011db
lea ecx, [esp + 0x1d0]
push str..pipe_sqlconsole
push ecx
call fcn.004017c1
add esp, 8
push ebx
push 0x110080
push 3
push ebx
push ebx
push 0x80000000
lea edx, [esp + 0x1e8]
push edx
call dword [sym.imp.KERNEL32.dll_CreateFileA]
mov esi, eax
cmp esi, 0xffffffff
jne 0x401231
call dword [sym.imp.KERNEL32.dll_GetLastError]
mov ecx, dword [str.Connection_to_pipe__s_failed._n]
mov esi, eax
lea eax, [esp + 0x1d0]
push eax
push ecx
push 0x4112d0
call fcn.0040175e
push esi
call fcn.00401010
add esp, 0x10
push 0xffffffffffffffff
call dword [sym.imp.KERNEL32.dll_ExitProcess]
mov eax, dword [str.Connected_to_SQLServer_on__s_n]
lea edx, [esp + 0x1d0]
push edx
push eax
call fcn.00401612
mov edi, dword [sym.imp.KERNEL32.dll_ReadFile]
add esp, 8
push ebx
lea ecx, [esp + 0x14]
push ecx
push 0x194
lea edx, [esp + 0x20]
push edx
push esi
mov dword [esp + 0x24], ebx
call edi
test eax, eax
je 0x401328
mov ebp, 4
lea eax, [esp + 0x1a8]
push eax
call fcn.004016e9
lea ecx, [esp + 0x1c0]
push ecx
call fcn.0040167d
lea edx, [esp + 0x1c4]
push edx
lea eax, [esp + 0x1b4]
push eax
push str._s__s_:
call fcn.00401612
mov eax, dword [esp + 0x24]
add esp, 0x14
cmp eax, ebp
jbe 0x4012fb
mov ax, word [esp + 0x16]
cmp ax, 0x190
jae 0x4012fb
movzx ecx, ax
mov byte [esp + ecx + 0x18], 0
movzx eax, word [esp + 0x14]
sub eax, 0xc
je 0x4012e5
dec eax
jne 0x4012fb
mov eax, dword [str.Mount_first_tape__s._n]
lea edx, [esp + 0x18]
push edx
push eax
call fcn.00401612
add esp, 8
jmp 0x401309
mov edx, dword [str.Change_tapes_and_mount__s._n]
lea ecx, [esp + 0x18]
push ecx
push edx
call fcn.00401612
add esp, 8
jmp 0x401309
mov eax, dword [str.Invalid_message_received._n]
push eax
call fcn.00401612
add esp, 4
push ebx
lea ecx, [esp + 0x14]
push ecx
push 0x194
lea edx, [esp + 0x20]
push edx
push esi
mov dword [esp + 0x24], ebx
call edi
test eax, eax
jne 0x401271
call dword [sym.imp.KERNEL32.dll_GetLastError]
mov esi, eax
mov eax, dword [str.Read_on_pipe_failed._n]
push eax
push 0x4112d0
call fcn.0040175e
push esi
call fcn.00401010
add esp, 0xc
push 0xffffffffffffffff
call dword [sym.imp.KERNEL32.dll_ExitProcess]