Function at 0x404ea0
Capabilities:
Check for time delay via gettickcount
Create thread
Get file size
Read file on windows

Disassembly:
push 0xffffffffffffffff
push 0x4293ea
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
sub esp, 0x48
push ebx
push ebp
push esi
push edi
mov esi, ecx
mov eax, dword [esp + 0x68]
xor ebp, ebp
push ebp
push ebp
push 3
push ebp
push 1
push SysReAllocString
push eax
mov dword [esp + 0x7c], ebp
call dword [sym.imp.KERNEL32.dll_CreateFileA]
mov edi, eax
cmp edi, 0xffffffff
je 0x404f50
mov eax, dword [esi + 0x554]
cmp eax, ebp
je 0x404efb
push eax
call fcn.0040ed41
add esp, 4
mov dword [esi + 0x554], ebp
lea ebx, [esi + 0x558]
push ebp
push edi
mov dword [ebx], ebp
call dword [sym.imp.KERNEL32.dll_GetFileSize]
mov ebp, eax
push ebp
call fcn.0040ee59
add esp, 4
mov dword [esi + 0x554], eax
test eax, eax
je 0x404f49
push 0
push ebx
push ebp
push eax
push edi
call dword [sym.imp.KERNEL32.dll_ReadFile]
cmp dword [ebx], ebp
je 0x404f68
mov ecx, dword [esi + 0x554]
push ecx
call fcn.0040ed41
add esp, 4
mov dword [esi + 0x554], 0
push edi
call dword [sym.imp.KERNEL32.dll_CloseHandle]
lea ecx, [esp + 0x68]
mov dword [esp + 0x60], 0xffffffff
call fcn.004210d1
xor eax, eax
jmp 0x4052c7
mov ebp, dword [sym.imp.KERNEL32.dll_CloseHandle]
push edi
call ebp
push 0xc8
call fcn.00421441
add esp, 4
mov dword [esp + 0x10], eax
xor ebx, ebx
mov byte [esp + 0x60], 1
cmp eax, ebx
je 0x404f9d
push ebx
mov ecx, eax
call fcn.00406970
mov edi, eax
mov dword [esp + 0x10], edi
jmp 0x404fa3
mov dword [esp + 0x10], ebx
mov edi, ebx
push esi
push 0x8a
mov ecx, edi
mov byte [esp + 0x68], 0
call fcn.00421dcc
push 5
mov ecx, edi
call fcn.00420838
mov edi, dword [esp + 0x6c]
cmp edi, ebx
jbe 0x405011
cmp edi, 4
jbe 0x404fe6
cmp edi, 5
jne 0x405011
push 4
mov ecx, esi
call fcn.00405c20
push eax
lea edx, [esp + 0x1c]
push str.UI_s
push edx
jmp 0x405025
push 4
mov ecx, esi
call fcn.00405c20
add edi, 0x15
push eax
push edi
mov ecx, esi
call fcn.00405c20
push eax
lea eax, [esp + 0x20]
push 0x438274
push eax
call dword [sym.imp.USER32.dll_wsprintfA]
add esp, 0x10
jmp 0x40502e
push 4
mov ecx, esi
call fcn.00405c20
push eax
lea ecx, [esp + 0x1c]
push 0x4382c4
push ecx
call dword [sym.imp.USER32.dll_wsprintfA]
add esp, 0xc
push 0x64
push ecx
lea edx, [esp + 0x20]
mov ecx, esp
mov dword [esp + 0x74], esp
push edx
call fcn.004210fb
mov edi, dword [esp + 0x18]
mov ecx, edi
call fcn.00406b00
mov eax, dword [edi + 0x1c]
push eax
call dword [sym.imp.USER32.dll_UpdateWindow]
mov dword [esi + 0x55c], ebx
mov eax, dword [esi + 0x538]
cmp eax, ebx
je 0x405147
mov edi, dword [sym.imp.KERNEL32.dll_CreateThread]
jmp 0x405076
mov eax, dword [esp + 0x6c]
mov ecx, dword [eax]
mov eax, dword [eax + 8]
mov dword [esp + 0x6c], ecx
cmp dword [eax + 0xc], ebx
je case.default.0x4050b5
cmp dword [eax + 0x14], ebx
je case.default.0x4050b5
cmp dword [eax], 0xc
jge case.default.0x4050b5
mov dword [eax + 0x18], ebx
mov edx, dword [esi + 0x55c]
inc edx
mov dword [esi + 0x55c], edx
mov eax, dword [eax]
cmp eax, 0xb
ja case.default.0x4050b5
jmp dword [eax*4 + 0x4052dc]
push ebx
push ebx
push esi
push 0x4054a0
jmp 0x405132
push ebx
push ebx
push esi
push 0x4054c0
jmp 0x405132
push ebx
push ebx
push esi
push 0x4054e0
jmp 0x405132
push ebx
push ebx
push esi
push 0x405500
jmp 0x405132
push ebx
push ebx
push esi
push 0x405520
jmp 0x405132
push ebx
push ebx
push esi
push 0x405540
jmp 0x405132
push ebx
push ebx
push esi
push 0x405560
jmp 0x405132
push ebx
push ebx
push esi
push 0x405580
jmp 0x405132
push ebx
push ebx
push esi
push 0x4055a0
jmp 0x405132
push ebx
push ebx
push esi
push 0x4055c0
jmp 0x405132
push ebx
push ebx
push esi
push 0x4055e0
jmp 0x405132
push ebx
push ebx
push esi
push 0x405600
push ebx
push ebx
call edi
push eax
call ebp
cmp dword [esp + 0x6c], ebx
jne 0x405072
mov edi, dword [esp + 0x10]
mov edx, dword [0x4385d4]
mov dword [esp + 0x14], edx
mov eax, dword [esi + 0x558]
mov ecx, esi
shr eax, 0xa
push eax
push 0x12
mov byte [esp + 0x68], 2
call fcn.00405c20
push eax
lea ecx, [esp + 0x1c]
push str._s0K__ldK
push ecx
call fcn.0041d2bf
add esp, 0x10
lea edx, [esp + 0x14]
push ebx
push ecx
mov ecx, esp
mov dword [esp + 0x74], esp
push edx
call fcn.00420e46
mov ecx, edi
call fcn.00406b70
mov eax, dword [edi + 0x1c]
push eax
call dword [sym.imp.USER32.dll_UpdateWindow]
mov ebx, dword [sym.imp.KERNEL32.dll_GetTickCount]
call ebx
mov ebp, eax
mov eax, dword [esi + 0x55c]
test eax, eax
je 0x405272
call ebx
sub eax, ebp
cmp eax, 0x3e8
jb 0x4051a9
call ebx
mov ecx, dword [esi + 0x538]
mov ebp, eax
test ecx, ecx
mov edi, 0x64
je 0x405200
mov eax, ecx
mov ecx, dword [ecx]
mov eax, dword [eax + 8]
test eax, eax
je 0x4051fc
mov edx, dword [eax + 0xc]
test edx, edx
je 0x4051fc
mov edx, dword [eax + 0x14]
test edx, edx
je 0x4051fc
cmp dword [eax], 0xc
jge 0x4051fc
mov eax, dword [eax + 0x18]
cmp edi, eax
jle 0x4051fc
mov edi, eax
test ecx, ecx
jne 0x4051d5
mov eax, dword [esi + 0x558]
mov ecx, eax
lea edx, [eax - 0x400]
mov eax, 0x51eb851f
mul edx
shr edx, 5
imul edx, edi
shr ecx, 0xa
shr edx, 0xa
push ecx
push edx
push 0x12
mov ecx, esi
call fcn.00405c20
push eax
lea eax, [esp + 0x20]
push str._s_ldK__ldK
push eax
call fcn.0041d2bf
add esp, 0x14
lea edx, [esp + 0x14]
push edi
push ecx
mov ecx, esp
mov dword [esp + 0x74], esp
push edx
call fcn.00420e46
mov edi, dword [esp + 0x18]
mov ecx, edi
call fcn.00406b70
mov eax, dword [edi + 0x1c]
push eax
call dword [sym.imp.USER32.dll_UpdateWindow]
mov ecx, esi
call fcn.00405620
jmp 0x4051a9
mov ecx, dword [esi + 0x554]
push ecx
call fcn.0040ed41
mov dword [esi + 0x554], 0
mov esi, dword [esp + 0x14]
add esp, 4
mov ecx, esi
mov edx, dword [esi]
call dword [edx + 0x58]
test esi, esi
je 0x4052a3
mov eax, dword [esi]
push 1
mov ecx, esi
call dword [eax + 4]
lea ecx, [esp + 0x14]
mov byte [esp + 0x60], 0
call fcn.004210d1
lea ecx, [esp + 0x68]
mov dword [esp + 0x60], 0xffffffff
call fcn.004210d1
mov eax, 1
mov ecx, dword [esp + 0x58]
pop edi
pop esi
pop ebp
mov dword fs:[0], ecx
pop ebx
add esp, 0x54
ret 8