Function at 0x402f07
Capabilities:
Create thread
Hide graphical window

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x30
push str.MICROSOFTSQLServiceControlManagerRefresh
push 0
push 1
push 0
mov eax, dword [0x41109c]
call dword [eax + 0x98]
mov dword [0x411474], eax
push 0
push 0
push 1
push 0
mov ecx, dword [0x41109c]
call dword [ecx + 0x98]
mov dword [0x411464], eax
push 0
push 1
push 1
push 0
mov edx, dword [0x41109c]
call dword [edx + 0xc4]
mov dword [0x411470], eax
push 0
push 1
push 1
push 0
mov eax, dword [0x41109c]
call dword [eax + 0xc4]
mov dword [0x41146c], eax
push 0
push 1
push 1
push 0
mov ecx, dword [0x41109c]
call dword [ecx + 0xc4]
mov dword [0x411468], eax
push 0xa
push 0x410
push 0x411338
call fcn.0040ae70
add esp, 0xc
mov dword [0x411360], 0x411440
mov dword [ebp - 4], 0x6e
jmp 0x402fbb
mov edx, dword [ebp - 4]
add edx, 1
mov dword [ebp - 4], edx
cmp dword [ebp - 4], 0x75
jg 0x402ff3
push 0
push 0x10
push 0x10
push 1
mov eax, dword [ebp - 4]
push eax
call dword [sym.imp.SQLUNIRL.dll__MAKEINTRESOURCE_4]
push eax
mov ecx, dword [0x411478]
push ecx
mov edx, dword [0x41109c]
call dword [edx + 0x2b8]
mov ecx, dword [ebp - 4]
mov dword [ecx*4 + 0x411288], eax
jmp 0x402fb2
mov dword [ebp - 4], 0x76
jmp 0x403005
mov edx, dword [ebp - 4]
add edx, 1
mov dword [ebp - 4], edx
cmp dword [ebp - 4], 0x7d
jg 0x40303d
push 0
push 0x10
push 0x10
push 1
mov eax, dword [ebp - 4]
push eax
call dword [sym.imp.SQLUNIRL.dll__MAKEINTRESOURCE_4]
push eax
mov ecx, dword [0x411478]
push ecx
mov edx, dword [0x41109c]
call dword [edx + 0x2b8]
mov ecx, dword [ebp - 4]
mov dword [ecx*4 + 0x411248], eax
jmp 0x402ffc
mov dword [ebp - 4], 0x93
jmp 0x40304f
mov edx, dword [ebp - 4]
add edx, 1
mov dword [ebp - 4], edx
cmp dword [ebp - 4], 0x9a
jg 0x40308a
push 0
push 0x10
push 0x10
push 1
mov eax, dword [ebp - 4]
push eax
call dword [sym.imp.SQLUNIRL.dll__MAKEINTRESOURCE_4]
push eax
mov ecx, dword [0x411478]
push ecx
mov edx, dword [0x41109c]
call dword [edx + 0x2b8]
mov ecx, dword [ebp - 4]
mov dword [ecx*4 + 0x4111b4], eax
jmp 0x403046
mov dword [ebp - 4], 0x9b
jmp 0x40309c
mov edx, dword [ebp - 4]
add edx, 1
mov dword [ebp - 4], edx
cmp dword [ebp - 4], 0xa2
jg 0x4030d7
push 0
push 0x10
push 0x10
push 1
mov eax, dword [ebp - 4]
push eax
call dword [sym.imp.SQLUNIRL.dll__MAKEINTRESOURCE_4]
push eax
mov ecx, dword [0x411478]
push ecx
mov edx, dword [0x41109c]
call dword [edx + 0x2b8]
mov ecx, dword [ebp - 4]
mov dword [ecx*4 + 0x411174], eax
jmp 0x403093
mov dword [ebp - 4], 0xa3
jmp 0x4030e9
mov edx, dword [ebp - 4]
add edx, 1
mov dword [ebp - 4], edx
cmp dword [ebp - 4], 0xaa
jg 0x403124
push 0
push 0x10
push 0x10
push 1
mov eax, dword [ebp - 4]
push eax
call dword [sym.imp.SQLUNIRL.dll__MAKEINTRESOURCE_4]
push eax
mov ecx, dword [0x411478]
push ecx
mov edx, dword [0x41109c]
call dword [edx + 0x2b8]
mov ecx, dword [ebp - 4]
mov dword [ecx*4 + 0x411134], eax
jmp 0x4030e0
mov dword [ebp - 4], 0x7e
jmp 0x403136
mov edx, dword [ebp - 4]
add edx, 1
mov dword [ebp - 4], edx
cmp dword [ebp - 4], 0x85
jg 0x403171
push 0
push 0x10
push 0x10
push 1
mov eax, dword [ebp - 4]
push eax
call dword [sym.imp.SQLUNIRL.dll__MAKEINTRESOURCE_4]
push eax
mov ecx, dword [0x411478]
push ecx
mov edx, dword [0x41109c]
call dword [edx + 0x2b8]
mov ecx, dword [ebp - 4]
mov dword [ecx*4 + 0x4111a8], eax
jmp 0x40312d
mov dword [ebp - 4], 0x8d
jmp 0x403183
mov edx, dword [ebp - 4]
add edx, 1
mov dword [ebp - 4], edx
cmp dword [ebp - 4], 0x92
jg 0x4031be
push 0x40
push 0
push 0
push 1
mov eax, dword [ebp - 4]
push eax
call dword [sym.imp.SQLUNIRL.dll__MAKEINTRESOURCE_4]
push eax
mov ecx, dword [0x411478]
push ecx
mov edx, dword [0x41109c]
call dword [edx + 0x2b8]
mov ecx, dword [ebp - 4]
mov dword [ecx*4 + 0x41114c], eax
jmp 0x40317a
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
mov edx, dword [ebp + 8]
push edx
call fcn.0040628c
add esp, 8
push 0
mov eax, dword [ebp + 8]
push eax
call dword [sym.imp.USER32.dll_ShowWindow]
push 0
mov ecx, dword [ebp + 8]
push ecx
call dword [sym.imp.USER32.dll_GetSystemMenu]
mov dword [0x4110b4], eax
cmp dword [0x4110b4], 0
je 0x40322a
push 0
push 0xf000
mov edx, dword [0x4110b4]
push edx
call dword [sym.imp.USER32.dll_DeleteMenu]
push 0
push 0xf030
mov eax, dword [0x4110b4]
push eax
call dword [sym.imp.USER32.dll_DeleteMenu]
mov ecx, dword [ebp + 8]
push ecx
call fcn.00402c14
add esp, 4
mov dword [ebp - 0x24], 0x208
lea edx, [ebp - 0x24]
push edx
push 0x412220
call dword [sym.imp.SQLUNIRL.dll__GetComputerName_8]
push 0x412220
push 0x411de0
mov eax, dword [0x41109c]
call dword [eax + 0x4c0]
push 0x412220
push 0x412000
mov ecx, dword [0x41109c]
call dword [ecx + 0x4c0]
push 0
push 0x80
push 0x141
push 0x3e8
mov edx, dword [ebp + 8]
push edx
call dword [sym.imp.USER32.dll_GetDlgItem]
push eax
call dword [sym.imp.SQLUNIRL.dll__SendMessage_16]
mov eax, dword [ebp + 8]
push eax
call fcn.0040743e
add esp, 4
push 0x207
push 0x412220
push 0x3e8
mov ecx, dword [ebp + 8]
push ecx
call dword [sym.imp.USER32.dll_GetDlgItem]
push eax
call dword [sym.imp.SQLUNIRL.dll__GetWindowText_12]
push 0x86
call dword [sym.imp.SQLUNIRL.dll__MAKEINTRESOURCE_4]
push eax
mov edx, dword [0x411478]
push edx
call dword [sym.imp.SQLUNIRL.dll__LoadBitmap_8]
mov dword [ebp - 0x30], eax
lea eax, [ebp - 0x20]
push eax
push 0x18
mov ecx, dword [ebp - 0x30]
push ecx
call dword [sym.imp.SQLUNIRL.dll__GetObject_12]
push 4
push 4
push 1
mov edx, dword [ebp - 0x18]
push edx
mov eax, dword [ebp - 0x1c]
push eax
call dword [sym.imp.COMCTL32.dll_ImageList_Create]
mov dword [0x4110b0], eax
push 0xff00ff
mov ecx, dword [ebp - 0x30]
push ecx
mov edx, dword [0x4110b0]
push edx
call dword [sym.imp.COMCTL32.dll_ImageList_AddMasked]
push 0x87
call dword [sym.imp.SQLUNIRL.dll__MAKEINTRESOURCE_4]
push eax
mov eax, dword [0x411478]
push eax
call dword [sym.imp.SQLUNIRL.dll__LoadBitmap_8]
mov dword [ebp - 0x30], eax
lea ecx, [ebp - 0x20]
push ecx
push 0x18
mov edx, dword [ebp - 0x30]
push edx
call dword [sym.imp.SQLUNIRL.dll__GetObject_12]
push 0xff00ff
mov eax, dword [ebp - 0x30]
push eax
mov ecx, dword [0x4110b0]
push ecx
call dword [sym.imp.COMCTL32.dll_ImageList_AddMasked]
push 0x88
call dword [sym.imp.SQLUNIRL.dll__MAKEINTRESOURCE_4]
push eax
mov edx, dword [0x411478]
push edx
call dword [sym.imp.SQLUNIRL.dll__LoadBitmap_8]
mov dword [ebp - 0x30], eax
lea eax, [ebp - 0x20]
push eax
push 0x18
mov ecx, dword [ebp - 0x30]
push ecx
call dword [sym.imp.SQLUNIRL.dll__GetObject_12]
push 0xff00ff
mov edx, dword [ebp - 0x30]
push edx
mov eax, dword [0x4110b0]
push eax
call dword [sym.imp.COMCTL32.dll_ImageList_AddMasked]
push 0x89
call dword [sym.imp.SQLUNIRL.dll__MAKEINTRESOURCE_4]
push eax
mov ecx, dword [0x411478]
push ecx
call dword [sym.imp.SQLUNIRL.dll__LoadBitmap_8]
mov dword [ebp - 0x30], eax
lea edx, [ebp - 0x20]
push edx
push 0x18
mov eax, dword [ebp - 0x30]
push eax
call dword [sym.imp.SQLUNIRL.dll__GetObject_12]
push 0xff00ff
mov ecx, dword [ebp - 0x30]
push ecx
mov edx, dword [0x4110b0]
push edx
call dword [sym.imp.COMCTL32.dll_ImageList_AddMasked]
push 0xffffffffffffffff
mov eax, dword [0x4110b0]
push eax
call dword [sym.imp.COMCTL32.dll_ImageList_SetBkColor]
push 0x3fb
mov ecx, dword [ebp + 8]
push ecx
call dword [sym.imp.USER32.dll_GetDlgItem]
mov dword [ebp - 0x28], eax
push 0x4068cf
push 0xfffffffffffffffc
mov edx, dword [ebp - 0x28]
push edx
call dword [sym.imp.SQLUNIRL.dll__SetWindowLong_12]
mov dword [0x4110a8], eax
cmp dword [0x4110a8], 0
jne 0x40344a
push 0
push 0
lea eax, [ebp - 0x2c]
push eax
push 0x400
call dword [sym.imp.KERNEL32.dll_GetLastError]
push eax
push 0
push 0x1300
call dword [sym.imp.SQLUNIRL.dll__FormatMessage_28]
push 0
push 0
mov ecx, dword [ebp - 0x2c]
push ecx
mov edx, dword [ebp + 8]
push edx
call dword [sym.imp.SQLUNIRL.dll__MessageBox_16]
mov dword [0x4110ac], 3
push 3
call fcn.00406660
add esp, 4
cmp dword [0x41264c], 0
jne 0x403491
mov dword [0x412658], 1
lea eax, [ebp - 8]
push eax
push 0
mov ecx, dword [ebp + 8]
push ecx
push 0x408030
push 0
push 0
call sub.MSVCRT.dll__beginthreadex
add esp, 0x18
mov dword [0x40f45c], eax
push 0
push 0x4110c0
mov edx, dword [ebp + 8]
push edx
call fcn.004087bb
add esp, 0xc
push 0
call fcn.00402d8d
add esp, 4
push 0x412440
mov eax, dword [0x40f460]
mov ecx, dword [0x411360]
mov edx, dword [ecx + eax*4 - 0x1b8]
push edx
push 0xbb8
push 0
mov eax, dword [ebp + 8]
push eax
call fcn.0040bbc0
add esp, 0x14
lea ecx, [ebp - 8]
push ecx
push 0
push 0
push 0x40541f
push 0
push 0
call sub.MSVCRT.dll__beginthreadex
add esp, 0x18
mov dword [0x40f458], eax
cmp dword [0x4110c0], 0
jne 0x403516
push 0
push 0x1f4
push 0x111
mov edx, dword [ebp + 8]
push edx
call dword [sym.imp.SQLUNIRL.dll__PostMessage_16]
mov esp, ebp
pop ebp
ret