Function at 0x42b8a0
Capabilities:
Check for time delay via gettickcount

Disassembly:
push ebp
mov ebp, esp
and esp, 0xfffffff8
push 0xffffffffffffffff
push 0x4b7f66
mov eax, dword fs:[0]
push eax
sub esp, 0x48
push ebx
push esi
push edi
mov eax, dword [0x4e1370]
xor eax, esp
push eax
lea eax, [esp + 0x58]
mov dword fs:[0], eax
mov edi, ecx
mov dword [esp + 0x28], edi
lea esi, [edi + 8]
xor ebx, ebx
push esi
mov dword [esp + 0x34], ebx
mov dword [esp + 0x44], esi
call dword [sym.imp.KERNEL32.dll_EnterCriticalSection]
mov byte [esp + 0x44], 1
mov dword [esp + 0x60], ebx
cmp dword [edi + 0x20], 0
lea ebx, [edi + 0x20]
jne 0x42b961
lea eax, [esp + 0x2c]
push eax
mov ecx, str.somkernl.dll
call fcn.00405a20
mov byte [esp + 0x60], 1
call fcn.0042b330
mov byte [esp + 0x60], 0
mov eax, dword [esp + 0x2c]
add eax, 0xfffffff0
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x42b936
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov eax, dword [ebx]
test eax, eax
je 0x42b94a
mov dword [ebx], 0
mov ecx, dword [eax]
mov edx, dword [ecx + 8]
push eax
call edx
mov eax, dword [0x4e8740]
test eax, eax
je 0x42b958
push ebx
push 0x61
call eax
cmp dword [ebx], 0
je 0x42bc33
mov esi, dword [sym.imp.KERNEL32.dll_GetTickCount]
call esi
sub eax, dword [edi + 0x68]
cmp eax, 0xea60
jbe 0x42b97d
mov eax, dword [ebx]
mov ecx, dword [eax]
mov edx, dword [ecx + 0x34]
push eax
call edx
mov eax, dword [ebx]
mov ecx, dword [eax]
mov edx, dword [ecx + 0x18]
push eax
call edx
test eax, eax
jl 0x42b993
mov dword [esp + 0x30], 1
call esi
cmp dword [edi + 0x24], 0
mov dword [edi + 0x68], eax
jne 0x42ba2b
test byte [0x4ea4e8], 1
jne 0x42ba04
or dword [0x4ea4e8], 1
lea eax, [esp + 0x2c]
push str.SoftMgrSpeedupOpt.dll
push eax
mov byte [esp + 0x68], 2
call fcn.0047b079
add esp, 8
mov byte [esp + 0x60], 3
mov eax, dword [eax]
call fcn.0040d0c0
mov dword [0x4ea4e4], eax
mov byte [esp + 0x60], 2
mov eax, dword [esp + 0x2c]
add eax, 0xfffffff0
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x42b9ff
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov byte [esp + 0x60], 0
mov ecx, dword [0x4ea4e4]
push str.CreateOptBoottime
push ecx
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
test eax, eax
je 0x42ba2b
call eax
mov dword [edi + 0x24], eax
test eax, eax
je 0x42ba2b
mov edx, dword [eax]
push eax
mov eax, dword [edx + 4]
call eax
mov ecx, dword [edi + 0x40]
mov edx, dword [ecx + 4]
lea esi, [edi + 0x28]
push edx
mov ecx, esi
call fcn.0042c590
mov eax, dword [esi + 0x18]
mov dword [eax + 4], eax
mov eax, dword [esi + 0x18]
mov dword [esi + 0x1c], 0
mov dword [eax], eax
mov esi, dword [esi + 0x18]
mov dword [esi + 8], esi
mov eax, dword [ebx]
mov ecx, dword [eax]
mov edx, dword [ecx + 0x1c]
push eax
call edx
xor esi, esi
mov dword [esp + 0x34], eax
mov dword [esp + 0x1c], esi
test eax, eax
jbe 0x42bc2f
push 1
push 1
lea eax, [edi + 4]
push eax
call dword [sym.imp.KERNEL32.dll_InterlockedCompareExchange]
test eax, eax
jne 0x42bc2f
xor ebx, ebx
mov dword [esp + 0x14], ebx
mov byte [esp + 0x60], 5
mov eax, dword [edi + 0x20]
lea edx, [esp + 0x18]
push edx
mov dword [esp + 0x1c], ebx
mov ecx, dword [eax]
push esi
push eax
mov eax, dword [ecx + 0x2c]
call eax
test eax, eax
jl 0x42baeb
mov eax, dword [esp + 0x14]
mov esi, dword [edi + 0x20]
cmp eax, ebx
je 0x42bac1
mov dword [esp + 0x14], ebx
mov ecx, dword [eax]
mov edx, dword [ecx + 8]
push eax
call edx
mov edx, dword [esp + 0x1c]
lea ecx, [esp + 0x14]
push ecx
mov dword [esp + 0x18], ebx
mov eax, dword [esi]
mov eax, dword [eax + 0x20]
push edx
push esi
call eax
test eax, eax
jl 0x42baeb
mov eax, dword [esp + 0x18]
mov ecx, dword [eax]
mov edx, dword [ecx + 0x48]
push eax
call edx
test eax, eax
je 0x42bb1e
mov byte [esp + 0x60], 4
mov eax, dword [esp + 0x18]
cmp eax, ebx
je 0x42bb00
mov ecx, dword [eax]
mov edx, dword [ecx + 8]
push eax
call edx
mov byte [esp + 0x60], 0
mov eax, dword [esp + 0x14]
cmp eax, ebx
je 0x42bc1c
mov ecx, dword [eax]
mov edx, dword [ecx + 8]
push eax
call edx
jmp 0x42bc1c
mov eax, dword [esp + 0x14]
mov ecx, dword [eax]
mov edx, dword [ecx + 0x40]
push eax
call edx
test eax, eax
jne 0x42baeb
mov eax, dword [esp + 0x18]
mov ecx, dword [eax]
mov edx, dword [ecx + 0x70]
push eax
call edx
test eax, eax
jne 0x42baeb
mov eax, dword [esp + 0x14]
mov ecx, dword [eax]
mov edx, dword [ecx + 0x2c]
push eax
call edx
test eax, eax
jne 0x42bc68
mov dword [esp + 0x24], ebx
mov byte [esp + 0x60], 6
mov eax, dword [esp + 0x14]
mov ebx, dword [eax]
lea esi, [esp + 0x24]
mov edi, eax
add ebx, 0x18
call fcn.0042c380
push eax
mov eax, dword [ebx]
push edi
call eax
mov eax, dword [esp + 0x24]
mov ecx, dword [eax]
mov edx, dword [ecx + 0x28]
push eax
call edx
lea ecx, [esp + 0x20]
push ecx
mov ecx, eax
call fcn.00405a20
mov byte [esp + 0x60], 7
mov edx, dword [esp + 0x20]
cmp dword [edx - 0xc], 0
je 0x42bbd0
lea eax, [esp + 0x20]
push eax
lea ecx, [esp + 0x30]
push ecx
call fcn.0042b530
mov edx, dword [esp + 0x28]
add edx, 0x48
push edx
lea ecx, [esp + 0x30]
mov byte [esp + 0x64], 8
call fcn.0042c3a0
mov ecx, dword [esp + 0x1c]
mov dword [eax], ecx
lea eax, [esp + 0x2c]
call fcn.0040c7d0
lea ecx, [esp + 0x20]
call fcn.00406090
mov byte [esp + 0x60], 5
mov eax, dword [esp + 0x24]
test eax, eax
je 0x42bbee
mov edx, dword [eax]
push eax
mov eax, dword [edx + 8]
call eax
mov byte [esp + 0x60], 4
mov eax, dword [esp + 0x18]
test eax, eax
je 0x42bc03
mov ecx, dword [eax]
mov edx, dword [ecx + 8]
push eax
call edx
mov byte [esp + 0x60], 0
mov eax, dword [esp + 0x14]
test eax, eax
je 0x42bc18
mov ecx, dword [eax]
mov edx, dword [ecx + 8]
push eax
call edx
mov edi, dword [esp + 0x28]
mov esi, dword [esp + 0x1c]
inc esi
mov dword [esp + 0x1c], esi
cmp esi, dword [esp + 0x34]
jb 0x42ba70
mov esi, dword [esp + 0x40]
mov eax, dword [ebp + 8]
mov ecx, dword [edi - 0x20]
push 0
push eax
push 0x402
push ecx
call dword [sym.imp.USER32.dll_PostMessageW]
push esi
call dword [sym.imp.KERNEL32.dll_LeaveCriticalSection]
mov eax, dword [esp + 0x30]
mov ecx, dword [esp + 0x58]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 4
mov eax, dword [esp + 0x18]
mov ecx, dword [eax]
mov edx, dword [ecx + 0x10]
push eax
call edx
cmp eax, 1
je 0x42baeb
mov eax, dword [esp + 0x18]
mov ecx, dword [eax]
mov edx, dword [ecx + 0x10]
push eax
call edx
cmp eax, 2
je 0x42baeb
mov eax, dword [esp + 0x18]
mov ecx, dword [eax]
mov edx, dword [ecx + 0x10]
push eax
call edx
cmp eax, 4
je 0x42baeb
push 0x4e74e0
push 0x38
call fcn.00490df2
add esp, 8
cmp eax, ebx
je 0x42bcc1
call fcn.0042d790
jmp 0x42bcc3
xor eax, eax
push eax
lea eax, [esp + 0x3c]
push eax
mov dword [esp + 0x40], ebx
mov dword [esp + 0x44], ebx
call fcn.0042d5b0
mov byte [esp + 0x60], 9
mov eax, dword [esp + 0x38]
cmp eax, ebx
je 0x42bd15
mov ecx, dword [esp + 0x14]
mov ebx, dword [esp + 0x1c]
mov edx, dword [edi + 0x24]
mov esi, dword [esp + 0x18]
mov dword [eax + 0x24], ebx
test ecx, ecx
je 0x42bd01
push edx
push esi
push eax
call fcn.0042d800
lea ecx, [esp + 0x38]
push ecx
lea edx, [esp + 0x4c]
push edx
lea ebx, [edi + 0x28]
call fcn.0044b250
xor ebx, ebx
lea eax, [esp + 0x38]
mov byte [esp + 0x60], 5
call fcn.0043af80
jmp 0x42baeb