Function at 0x411190
Capabilities:
Check for time delay via gettickcount
Read file via mapping

Disassembly:
mov edi, edi
push ebp
mov ebp, esp
sub esp, 0x254
mov eax, dword [0x44d558]
mov dword [ebp - 0xc], eax
push esi
push edi
mov ecx, 0xd
mov esi, str.WaitForEngineThreadsToStop
lea edi, [ebp - 0x250]
rep movsd dword es:[edi], dword [esi]
movsw word es:[edi], word [esi]
mov ax, word [0x44dacc]
mov word [ebp - 0x210], ax
mov ecx, 0x7f
xor eax, eax
lea edi, [ebp - 0x20e]
rep stosd dword es:[edi], eax
stosw word es:[edi], ax
mov dword [ebp - 4], 0
mov dword [ebp - 8], 0
mov dword [ebp - 0x254], 0
mov dword [ebp - 0x218], 0
mov dword [ebp - 0x214], 0
mov ecx, dword [ebp + 8]
add ecx, dword [0x450750]
mov dword [ebp + 8], ecx
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [ebp - 0x254], eax
mov edx, 1
test edx, edx
je 0x4114b5
push 0x1f4
call dword [sym.imp.KERNEL32.dll_Sleep]
cmp dword [0x44de90], 0
je 0x411249
push 0x44f0a0
call dword [sym.imp.KERNEL32.dll_EnterCriticalSection]
jmp 0x41128a
push 0x44f0a0
call dword [0x44e628]
test eax, eax
jne 0x41128a
cmp dword [0x44de94], 0
je 0x41127f
cmp dword [0x450a88], 0
je 0x41127f
lea eax, [ebp - 0x250]
push eax
push 0x4416b4
call dword [sym.imp.MSVCR71.dll_wprintf]
add esp, 8
push 0x44f0a0
call dword [sym.imp.KERNEL32.dll_EnterCriticalSection]
cmp dword [0x44de94], 0
je 0x4112b1
cmp dword [0x450a88], 0
je 0x4112b1
lea ecx, [ebp - 0x250]
push ecx
push 0x4416f0
call dword [sym.imp.MSVCR71.dll_wprintf]
add esp, 8
cmp dword [0x44d9fc], 0
jne 0x4112f1
push 0x44f0a0
call dword [sym.imp.KERNEL32.dll_LeaveCriticalSection]
cmp dword [0x44de94], 0
je 0x4112ec
cmp dword [0x450a88], 0
je 0x4112ec
lea edx, [ebp - 0x250]
push edx
push 0x441724
call dword [sym.imp.MSVCR71.dll_wprintf]
add esp, 8
jmp 0x4114b5
push 0x44f0a0
call dword [sym.imp.KERNEL32.dll_LeaveCriticalSection]
cmp dword [0x44de94], 0
je 0x411323
cmp dword [0x450a88], 0
je 0x411323
lea eax, [ebp - 0x250]
push eax
push 0x441758
call dword [sym.imp.MSVCR71.dll_wprintf]
add esp, 8
cmp dword [ebp + 8], 0
je 0x4114b0
call dword [sym.imp.KERNEL32.dll_GetTickCount]
sub eax, dword [ebp - 0x254]
push eax
call sub.MSVCR71.dll_abs
add esp, 4
cdq
mov ecx, 0x3e8
idiv ecx
cmp eax, dword [ebp + 8]
jl 0x4114b0
mov edx, dword [ebp + 8]
push edx
mov eax, dword [0x44d9fc]
push eax
push 0xf0
push 0
push 1
call fcn.0041d760
add esp, 0x14
mov dword [0x44deb4], 1
cmp dword [0x44de90], 0
je 0x41138e
push 0x44f0a0
call dword [sym.imp.KERNEL32.dll_EnterCriticalSection]
jmp 0x4113cf
push 0x44f0a0
call dword [0x44e628]
test eax, eax
jne 0x4113cf
cmp dword [0x44de94], 0
je 0x4113c4
cmp dword [0x450a88], 0
je 0x4113c4
lea ecx, [ebp - 0x250]
push ecx
push 0x44178c
call dword [sym.imp.MSVCR71.dll_wprintf]
add esp, 8
push 0x44f0a0
call dword [sym.imp.KERNEL32.dll_EnterCriticalSection]
cmp dword [0x44de94], 0
je 0x4113f6
cmp dword [0x450a88], 0
je 0x4113f6
lea edx, [ebp - 0x250]
push edx
push 0x4417c8
call dword [sym.imp.MSVCR71.dll_wprintf]
add esp, 8
cmp dword [0x44f128], 0
je 0x411472
mov dword [ebp - 0x214], 0
jmp 0x41141a
mov eax, dword [ebp - 0x214]
add eax, 1
mov dword [ebp - 0x214], eax
mov ecx, dword [ebp - 0x214]
cmp ecx, dword [0x44f128]
jge 0x411472
mov edx, dword [ebp - 0x214]
push edx
push 0x44f120
call dword [sym.imp.SQLSVC.dll_SHRecMemLock]
add esp, 8
mov dword [ebp - 0x218], eax
cmp dword [ebp - 0x218], 0
je 0x411470
mov eax, dword [ebp - 0x218]
mov ecx, dword [eax]
push ecx
mov edx, dword [ebp - 0x218]
add edx, 4
push edx
push 0x137
push 0
push 1
call fcn.0041d760
add esp, 0x14
jmp 0x41140b
mov dword [0x44da00], 0
push 0x44f0a0
call dword [sym.imp.KERNEL32.dll_LeaveCriticalSection]
cmp dword [0x44de94], 0
je 0x4114ae
cmp dword [0x450a88], 0
je 0x4114ae
lea eax, [ebp - 0x250]
push eax
push 0x4417fc
call dword [sym.imp.MSVCR71.dll_wprintf]
add esp, 8
jmp 0x4114b5
jmp 0x41121b
push 0
mov ecx, dword [0x450d14]
push ecx
call dword [sym.imp.KERNEL32.dll_WaitForSingleObject]
test eax, eax
je 0x41153b
push 1
push str.SQLServerAgentShutdownStatus
push pe_nt_image_headers32
lea edx, [ebp - 0x210]
push edx
call fcn.004233a0
add esp, 0x10
lea eax, [ebp - 0x210]
push eax
push 0
push 2
mov ecx, dword [0x450d4c]
call dword [ecx + 0x354]
mov dword [ebp - 4], eax
cmp dword [ebp - 4], 0
je 0x41153b
push 4
push 0
push 0
push 2
mov edx, dword [ebp - 4]
push edx
call dword [sym.imp.KERNEL32.dll_MapViewOfFile]
mov dword [ebp - 8], eax
cmp dword [ebp - 8], 0
je 0x411531
mov eax, dword [ebp - 8]
mov dword [eax], 1
mov ecx, dword [ebp - 8]
push ecx
call dword [sym.imp.KERNEL32.dll_UnmapViewOfFile]
mov edx, dword [ebp - 4]
push edx
call dword [sym.imp.KERNEL32.dll_CloseHandle]
cmp dword [0x44e614], 0
je 0x411550
mov eax, dword [0x44e614]
push eax
call dword [sym.imp.KERNEL32.dll_CloseHandle]
mov ecx, dword [ebp - 0xc]
call fcn.00434de1
pop edi
pop esi
mov esp, ebp
pop ebp
ret