Function at 0x401570
Capabilities:
Check for time delay via gettickcount
Check if file exists
Create directory
Create process on windows
Extract resource via kernel32 functions
Get common file path
Terminate process

Disassembly:
push ebp
mov ebp, esp
and esp, 0xfffffff8
sub esp, 0xb14
mov eax, dword [0x411040]
xor eax, esp
mov dword [esp + 0xb10], eax
push ebx
push esi
push edi
push 0x10
push 1
push 0
call dword [sym.imp.KERNEL32.dll_FindResourceW]
push eax
push 0
call dword [sym.imp.KERNEL32.dll_LoadResource]
push eax
call dword [sym.imp.KERNEL32.dll_LockResource]
movzx ecx, byte [eax + 0x34]
push ecx
movzx ecx, byte [eax + 0x36]
push ecx
movzx ecx, byte [eax + 0x30]
movzx eax, byte [eax + 0x32]
push ecx
push eax
lea eax, [esp + 0x20]
push 0x40f45c
push eax
call fcn.00401320
mov eax, dword [0x412e84]
add esp, 0x18
test al, 1
jne 0x401607
or eax, 1
mov dword [0x412e84], eax
lea eax, [esp + 0x10]
mov dword [0x411ef8], eax
mov dword [0x411efc], 0x40f478
mov dword [0x411f00], 0x40f484
mov dword [0x411f04], 0x40f490
mov ebx, dword [sym.imp.KERNEL32.dll_GetTickCount]
call ebx
push 0
push 0x1a
lea eax, [esp + 0x910]
push eax
push 0
call dword [sym.imp.SHELL32.dll_SHGetSpecialFolderPathA]
lea eax, [esp + 0x908]
push eax
lea eax, [esp + 0x54]
push 0x40f498
push eax
call fcn.00401300
add esp, 0xc
lea eax, [esp + 0x50]
push str.ScreenCastServer.exe
push str.SCScSoft
push eax
lea eax, [esp + 0x374]
push 0x40f49c
push eax
call fcn.00401300
add esp, 0x14
lea eax, [esp + 0x50]
push str.ScreenCastServerTemp.exe
push str.SCScSoft
push eax
lea eax, [esp + 0xa1c]
push 0x40f49c
push eax
call fcn.00401300
add esp, 0x14
lea eax, [esp + 0x50]
push 0x40f408
push str.SCScSoft
push eax
lea eax, [esp + 0x584]
push 0x40f49c
push eax
call fcn.00401300
add esp, 0x14
lea edx, [esp + 0x680]
lea ecx, [esp + 0x368]
call fcn.004018c0
xor eax, eax
push 0x206
push eax
mov word [esp + 0x708], ax
lea eax, [esp + 0x70a]
push eax
call fcn.00408f00
add esp, 0xc
lea eax, [esp + 0x159]
push 0x103
push 0
push eax
mov byte [esp + 0x164], 0
call fcn.00408f00
add esp, 0xc
lea eax, [esp + 0x700]
push 0x208
push eax
push 0
call dword [sym.imp.KERNEL32.dll_GetModuleFileNameW]
call ebx
mov dword [esp + 0xc], eax
call section..text
mov esi, eax
test esi, esi
je 0x401754
mov edi, dword [sym.imp.KERNEL32.dll_Sleep]
push 0x32
call edi
mov ecx, esi
call fcn.004011a0
call section..text
mov esi, eax
call ebx
sub eax, dword [esp + 0xc]
cmp eax, 0x1388
ja 0x40174c
test esi, esi
jne 0x401727
jmp 0x401754
test esi, esi
jne 0x4018ab
xor edi, edi
cmp dword [str.SCScSoftlibgcc_s_dw2_1.dll], edi
je 0x40181e
mov ebx, 0x40f4e0
xor esi, esi
lea esp, [esp]
cmp dword [esi + 0x40f4ec], 2
jne 0x401804
push dword [ebx]
lea eax, [esp + 0x54]
push eax
lea eax, [esp + 0x478]
push 0x40f4a8
push eax
call fcn.00401300
push dword [ebx]
lea eax, [esp + 0x64]
push eax
lea eax, [esp + 0x278]
push 0x40f4a8
push eax
call fcn.00401300
lea eax, [esp + 0x280]
push 0x5c
push eax
call fcn.004021b0
add esp, 0x28
mov byte [eax], 0
lea eax, [esp + 0x260]
push eax
call dword [sym.imp.SHLWAPI.dll_PathFileExistsA]
test eax, eax
jne 0x4017e7
push eax
lea eax, [esp + 0x264]
push eax
push 0
call dword [sym.imp.SHELL32.dll_SHCreateDirectoryExA]
mov edx, dword [esi + 0x40f4e4]
mov cx, word [esi + 0x40f4e8]
lea eax, [esp + 0x470]
push eax
call fcn.004019a0
add esp, 4
inc edi
lea esi, [edi + edi*4]
shl esi, 2
cmp dword [esi + 0x40f4e0], 0
lea ebx, [esi + 0x40f4e0]
jne 0x401770
push str.SCScSoft
lea eax, [esp + 0x54]
push eax
lea eax, [esp + 0x160]
push str._s_sToolFiePath.txt
push eax
call fcn.00401300
push 0x40f4c8
lea eax, [esp + 0x16c]
push eax
lea eax, [esp + 0x24]
push eax
mov dword [esp + 0x28], 0
call fcn.004023ab
add esp, 0x1c
cmp dword [esp + 0xc], 0
je 0x40188d
lea ecx, [esp + 0x700]
call fcn.00401280
push eax
push 0x40f498
push dword [esp + 0x14]
call fcn.004023f0
add esp, 0xc
push dword [esp + 0xc]
call fcn.00402577
add esp, 4
push 1
push 0x40f350
push 0
lea eax, [esp + 0x584]
push eax
push 0x40f4cc
push 0
call dword [sym.imp.SHELL32.dll_ShellExecuteA]
push 0
call fcn.00402978
int3