Function at 0x401010
Capabilities:
Check for time delay via gettickcount
Create thread

Disassembly:
add byte [eax], al
add byte [eax], al
add byte [eax], al
add byte [eax], al
add byte [eax], al
add byte [eax], al
add byte [eax], al
add byte [eax], al
mov edi, edi
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x437430
push 0x434e46
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
sub esp, 8
mov eax, 0x1018
call fcn.00434e00
mov eax, dword [0x44d558]
mov dword [ebp - 0x20], eax
push ebx
push esi
push edi
mov dword [ebp - 0x18], esp
mov dword [ebp - 0x1024], 0
mov eax, dword [0x43d03c]
mov dword [ebp - 0x1014], eax
mov ecx, dword [0x43d040]
mov dword [ebp - 0x1010], ecx
mov edx, dword [0x43d044]
mov dword [ebp - 0x100c], edx
mov eax, dword [0x43d048]
mov dword [ebp - 0x1008], eax
mov ecx, dword [0x43d04c]
mov dword [ebp - 0x1004], ecx
mov edx, dword [0x43d050]
mov dword [ebp - 0x1000], edx
mov ax, word [0x44d6c0]
mov word [ebp - 0x420], ax
mov ecx, 0xff
xor eax, eax
lea edi, [ebp - 0x41e]
rep stosd dword es:[edi], eax
stosw word es:[edi], ax
mov dword [ebp - 0x42c], 0
mov dword [ebp - 0x1020], 0
mov dword [ebp - 0xffc], 0
mov dword [ebp - 0x1018], 0
mov dword [ebp - 0x428], 0
mov dword [ebp - 0x101c], 0
mov dword [ebp - 0x438], 1
mov dword [ebp - 0x430], 0
mov dword [ebp - 0x424], 0
mov dword [ebp - 0x1c], 0
mov dword [ebp - 0x434], 0
mov dword [ebp - 0x1028], 0
lea ecx, [ebp - 0x1014]
push ecx
push 0
push 1
call fcn.00410e40
add esp, 0xc
mov dword [ebp - 4], 0
cmp dword [0x44de90], 0
jne 0x401165
cmp dword [0x450cb0], 1
jne 0x401165
mov dword [ebp - 0x1030], 1
jmp 0x40116f
mov dword [ebp - 0x1030], 0
mov edx, dword [ebp - 0x1030]
mov dword [0x44d690], edx
cmp dword [0x44d690], 0
je 0x4011a4
push 0x200
lea eax, [ebp - 0x420]
push eax
push 0x16b
mov ecx, dword [0x44e620]
push ecx
call dword [sym.imp.SQLUNIRL.dll__LoadString_16]
jmp 0x4011c1
push 0x200
lea edx, [ebp - 0x420]
push edx
push 0x16a
mov eax, dword [0x44e620]
push eax
call dword [sym.imp.SQLUNIRL.dll__LoadString_16]
lea ecx, [ebp - 0x420]
push ecx
push 0xc1
push 0
push 3
call fcn.0041d760
add esp, 0x10
push str.SQLAgent___Alert_Engine
lea edx, [ebp - 0xff8]
push edx
call fcn.004080a0
add esp, 8
movzx eax, word [0x44f730]
test eax, eax
je 0x40122f
lea ecx, [ebp - 0xbc4]
push ecx
push 0x44f730
call dword [sym.imp.MSVCR71.dll__wcsicmp]
add esp, 8
test eax, eax
jne 0x40122f
lea edx, [ebp - 0xbc4]
push edx
push 2
push 2
push 0xc0000131
push 1
push 3
call fcn.0041cf30
add esp, 0x18
jmp 0x40125f
cmp dword [0x44d690], 0
je 0x40125f
push 0x80
push 0x44f730
push 0x44d590
mov eax, dword [0x450d4c]
call dword [eax + 0x4c4]
push 0x44d590
call fcn.00405920
add esp, 4
cmp dword [0x44d690], 0
je 0x401349
push 0xaf
lea ecx, [ebp - 0x1014]
push ecx
mov edx, dword [0x43d020]
push edx
call fcn.00422830
add esp, 0xc
mov dword [ebp - 0x101c], eax
cmp dword [ebp - 0x101c], 0
jne 0x4012a2
mov dword [ebp - 4], 0xffffffff
jmp 0x4016fd
mov eax, dword [0x43d020]
push eax
push 0
mov ecx, dword [ebp - 0x101c]
push ecx
call sub.MSVCR71.dll_memset
add esp, 0xc
call fcn.00405bf0
mov dword [ebp - 0x428], eax
cmp dword [ebp - 0x428], 0
jne 0x4012e3
mov dword [ebp - 0x438], 0
mov dword [ebp - 4], 0xffffffff
jmp 0x4016fd
lea edx, [ebp - 0x101c]
push edx
mov eax, dword [ebp - 0x428]
push eax
call fcn.00401fe0
add esp, 8
test eax, eax
jne 0x401313
mov dword [ebp - 0x438], 0
mov dword [ebp - 4], 0xffffffff
jmp 0x4016fd
mov dword [0x44d584], 0
push 0
push 0
push 0x401820
call dword [sym.imp.MSVCR71.dll__beginthread]
add esp, 0xc
cmp eax, 0xffffffff
jne 0x401347
push 0
push 0x80000130
push 1
push 3
call fcn.0041cf30
add esp, 0x10
jmp 0x40135e
call fcn.00402220
test eax, eax
jne 0x40135e
mov dword [ebp - 4], 0xffffffff
jmp 0x4016fd
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [ebp - 0x1018], eax
mov ecx, dword [ebp - 0x1018]
mov dword [ebp - 0xffc], ecx
push 0x3e8
mov edx, dword [0x450d00]
push edx
call dword [sym.imp.KERNEL32.dll_WaitForSingleObject]
cmp eax, 0x102
jne 0x4016b2
cmp dword [ebp - 0x438], 0
je 0x4016b2
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [ebp - 0x42c], eax
cmp dword [0x44de90], 0
je 0x4013c2
push 0x44f0c0
call dword [sym.imp.KERNEL32.dll_EnterCriticalSection]
jmp 0x401403
push 0x44f0c0
call dword [0x44e628]
test eax, eax
jne 0x401403
cmp dword [0x44de94], 0
je 0x4013f8
cmp dword [0x450a88], 0
je 0x4013f8
lea eax, [ebp - 0x1014]
push eax
push 0x43d084
call dword [sym.imp.MSVCR71.dll_wprintf]
add esp, 8
push 0x44f0c0
call dword [sym.imp.KERNEL32.dll_EnterCriticalSection]
cmp dword [0x44de94], 0
je 0x40142a
cmp dword [0x450a88], 0
je 0x40142a
lea ecx, [ebp - 0x1014]
push ecx
push 0x43d0c0
call dword [sym.imp.MSVCR71.dll_wprintf]
add esp, 8
mov edx, dword [0x44f1c8]
mov dword [ebp - 0x434], edx
push 0x44f0c0
call dword [sym.imp.KERNEL32.dll_LeaveCriticalSection]
cmp dword [0x44de94], 0
je 0x401468
cmp dword [0x450a88], 0
je 0x401468
lea eax, [ebp - 0x1014]
push eax
push 0x43d0f4
call dword [sym.imp.MSVCR71.dll_wprintf]
add esp, 8
cmp dword [ebp - 0x434], 0
jne 0x40147f
cmp dword [0x450cb4], 0
jne 0x40147f
jmp 0x401376
cmp dword [0x44d690], 0
je 0x4015de
mov ecx, dword [ebp - 0x42c]
sub ecx, dword [ebp - 0xffc]
push ecx
call sub.MSVCR71.dll_abs
add esp, 4
cdq
mov ecx, 0x3e8
idiv ecx
cmp eax, dword [0x44f728]
jl 0x4014e6
lea edx, [ebp - 0x438]
push edx
lea eax, [ebp - 0x428]
push eax
lea ecx, [ebp - 0x101c]
push ecx
push 0x44f1c0
lea edx, [ebp - 0xff8]
push edx
call fcn.00401970
add esp, 0x14
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [ebp - 0xffc], eax
cmp dword [0x44d584], 0
je 0x4015d9
lea eax, [ebp - 0x438]
push eax
lea ecx, [ebp - 0x428]
push ecx
lea edx, [ebp - 0x101c]
push edx
push 0x44f1c0
lea eax, [ebp - 0xff8]
push eax
call fcn.00401970
add esp, 0x14
cmp dword [0x44de90], 0
je 0x401532
push 0x44f020
call dword [sym.imp.KERNEL32.dll_EnterCriticalSection]
jmp 0x401573
push 0x44f020
call dword [0x44e628]
test eax, eax
jne 0x401573
cmp dword [0x44de94], 0
je 0x401568
cmp dword [0x450a88], 0
je 0x401568
lea ecx, [ebp - 0x1014]
push ecx
push 0x43d128
call dword [sym.imp.MSVCR71.dll_wprintf]
add esp, 8
push 0x44f020
call dword [sym.imp.KERNEL32.dll_EnterCriticalSection]
cmp dword [0x44de94], 0
je 0x40159a
cmp dword [0x450a88], 0
je 0x40159a
lea edx, [ebp - 0x1014]
push edx
push 0x43d164
call dword [sym.imp.MSVCR71.dll_wprintf]
add esp, 8
mov eax, dword [0x44d584]
sub eax, 1
mov dword [0x44d584], eax
push 0x44f020
call dword [sym.imp.KERNEL32.dll_LeaveCriticalSection]
cmp dword [0x44de94], 0
je 0x4015d9
cmp dword [0x450a88], 0
je 0x4015d9
lea ecx, [ebp - 0x1014]
push ecx
push 0x43d198
call dword [sym.imp.MSVCR71.dll_wprintf]
add esp, 8
jmp 0x40165f
push 0x44d694
push str.SQL_Agent
push 0
push 0x44f418
push 0x44f310
movzx edx, word [0x44f310]
neg edx
sbb edx, edx
inc edx
push edx
push 0x44f208
call dword [0x44d69c]
test eax, eax
jne 0x401619
cmp dword [0x44d694], 0
jne 0x401639
mov dword [ebp - 0x1024], 0
push 0x44f1c0
lea eax, [ebp - 0xff8]
push eax
call fcn.00402310
add esp, 8
jmp 0x40165f
mov ecx, dword [ebp - 0x1024]
mov edx, dword [ebp - 0x1024]
add edx, 1
mov dword [ebp - 0x1024], edx
cmp ecx, 0xa
jle 0x40165f
mov dword [ebp - 4], 0xffffffff
jmp 0x4016fd
cmp dword [0x45086c], 0
je 0x4016ad
mov eax, dword [ebp - 0x42c]
sub eax, dword [ebp - 0x1018]
push eax
call sub.MSVCR71.dll_abs
add esp, 4
cdq
mov ecx, 0x3e8
idiv ecx
cmp eax, dword [0x45086c]
jl 0x4016ad
push 0x44f1c0
lea edx, [ebp - 0xff8]
push edx
call fcn.00402870
add esp, 8
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [ebp - 0x1018], eax
jmp 0x401376
mov dword [ebp - 4], 0xffffffff
jmp 0x4016fd
push 0x44f100
call dword [sym.imp.SQLSVC.dll_SHRecMemFree]
add esp, 4
cmp dword [0x44d580], 0
je 0x401732
mov edx, dword [0x44d580]
push edx
call dword [sym.imp.SQLSVC.dll_SHRecMemFree]
add esp, 4
mov eax, dword [0x44d580]
push eax
call fcn.00422e50
add esp, 4
lea ecx, [ebp - 0xff8]
push ecx
call dword [sym.imp.SQLSVC.dll_QSQLLogoff]
add esp, 4
cmp dword [ebp - 0x428], 0
je 0x401758
mov edx, dword [ebp - 0x428]
push edx
call dword [sym.imp.ADVAPI32.dll_CloseEventLog]
cmp dword [0x44d588], 0
je 0x40176d
mov eax, dword [0x44d588]
push eax
call dword [sym.imp.ADVAPI32.dll_DeregisterEventSource]
cmp dword [ebp - 0x101c], 0
je 0x401785
mov ecx, dword [ebp - 0x101c]
push ecx
call fcn.00422e50
add esp, 4
cmp dword [0x44d690], 0
jne 0x4017a5
cmp dword [0x44d6ac], 0
je 0x4017a5
push 0x44d694
call dword [0x44d6ac]
add esp, 4
cmp dword [0x44d698], 0
je 0x4017bb
mov edx, dword [0x44d698]
push edx
call dword [sym.imp.KERNEL32.dll_FreeLibrary]
cmp dword [ebp - 0x438], 0
jne 0x4017d9
push 0
push 0x8000013d
push 1
push 3
call fcn.0041cf30
add esp, 0x10
jmp 0x4017ea
push 0xc5
push 0
push 3
call fcn.0041d760
add esp, 0xc
push 0
push 1
call fcn.00410ff0
add esp, 8
call dword [sym.imp.MSVCR71.dll__endthread]
mov ecx, dword [ebp - 0x10]
mov dword fs:[0], ecx
mov ecx, dword [ebp - 0x20]
call fcn.00434de1
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret