Function at 0x406aeb
Capabilities:
Check if file exists
Copy file
Encrypt data using rc4 ksa
Extract resource via kernel32 functions
Get common file path
Get file attributes

Disassembly:
mov eax, 0x432ad3
call fcn.004174a8
sub esp, 0x778
mov eax, dword [0x448640]
push ebx
xor ebx, ebx
xor eax, ebp
push esi
mov dword [ebp - 0x10], eax
push edi
mov dword [ebp - 0x6f8], ebx
mov dword [ebp - 0x6f4], ebx
mov dword [ebp - 0x6f0], ebx
mov dword [ebp - 4], ebx
xor edi, edi
xor esi, esi
lea eax, [ebp - 0x6dc]
push eax
push esi
push edi
call fcn.0040ccd0
add esp, 0xc
test eax, eax
jne 0x406bbc
mov eax, dword [ebp - 0x6dc]
mov dword [ebp - 0x6d8], eax
lea eax, [ebp - 0x6d8]
push eax
lea ecx, [ebp - 0x6fc]
call fcn.00406aab
inc esi
cmp esi, 7
jb 0x406b23
inc edi
cmp edi, 7
jb 0x406b21
mov dword [ebp - 0x6e8], ebx
mov dword [ebp - 0x6e4], ebx
mov dword [ebp - 0x6e0], ebx
lea eax, [ebp - 0x720]
push eax
lea eax, [ebp - 0x618]
push eax
mov byte [ebp - 4], 1
call fcn.0040cd7c
lea eax, [ebp - 0x700]
push eax
call fcn.0040cdd0
mov eax, dword [ebp - 0x700]
add esp, 0xc
cmp eax, 0xffffffff
push dword [ebp + 0xc]
je 0x406be0
inc eax
cmp byte [ebp + 8], bl
lea ecx, [ebp - 0x618]
je 0x406bd4
push 1
jmp 0x406bd5
push ebx
push str.GetNum
push 0x4348bc
call fcn.00402d2a
add esp, 0xc
jmp 0x40710e
push ebx
push ecx
lea ecx, [ebp - 0x6ec]
push ecx
push eax
jmp 0x406bfa
cmp byte [ebp + 8], bl
lea eax, [ebp - 0x618]
je 0x406bef
push 1
jmp 0x406bf0
push ebx
push eax
lea eax, [ebp - 0x6ec]
push eax
push 0xffffffffffffffff
lea eax, [ebp - 0x6fc]
push eax
call fcn.0040d4bf
add esp, 0x18
call fcn.004062bc
push eax
lea ecx, [ebp - 0x650]
call fcn.0040377c
mov byte [ebp - 4], 2
call fcn.0040caf2
mov eax, dword [eax]
mov dword [ebp - 0x710], eax
call fcn.0040caf2
mov eax, dword [eax + 4]
mov dword [ebp - 0x70c], eax
call fcn.0040caf2
mov eax, dword [eax + 8]
mov dword [ebp - 0x708], eax
call fcn.0040caf2
cmp dword [ebp - 0x638], 0x10
mov eax, dword [eax + 0xc]
mov dword [ebp - 0x704], eax
mov eax, dword [ebp - 0x64c]
jae 0x406c6a
lea eax, [ebp - 0x64c]
push eax
lea ecx, [ebp - 0x6d8]
call fcn.00406202
push ebx
push ebx
lea ecx, [ebp - 0x6d8]
mov byte [ebp - 4], 3
call fcn.0040622b
mov edi, eax
push edi
call fcn.0042a1d9
pop ecx
mov esi, eax
push edi
push esi
lea ecx, [ebp - 0x6d8]
call fcn.0040622b
lea ecx, [ebp - 0x700]
push ecx
lea ecx, [ebp - 0x710]
lea eax, [esi + edi]
push ecx
push eax
push esi
mov dword [ebp - 0x6dc], eax
call fcn.004061b6
push esi
mov edi, eax
call fcn.0042a1de
add esp, 0x14
cmp edi, dword [ebp - 0x6dc]
jne 0x406d00
push ebx
push 0x435248
push 0x4348bc
call fcn.00402d2a
add esp, 0xc
cmp dword [ebp - 0x6d8], ebx
je 0x4070f5
push dword [ebp - 0x6d8]
call fcn.004185b4
pop ecx
jmp 0x4070f5
sub edi, esi
cmp dword [ebp - 0x6d8], ebx
mov dword [ebp - 0x6dc], edi
je 0x406d1c
push dword [ebp - 0x6d8]
call fcn.004185b4
pop ecx
xor esi, esi
push ebx
lea ecx, [ebp - 0x634]
inc esi
mov dword [ebp - 0x61c], 0xf
call fcn.004031bd
mov byte [ebp - 4], 4
push esi
lea ecx, [ebp - 0x784]
call fcn.00401e7d
push eax
lea eax, [ebp - 0x650]
push eax
lea eax, [ebp - 0x71c]
push eax
call fcn.00406676
add esp, 0xc
push 0xffffffffffffffff
push ebx
push eax
lea ecx, [ebp - 0x634]
mov byte [ebp - 4], 5
call fcn.0040351a
push ebx
push 1
lea ecx, [ebp - 0x71c]
mov byte [ebp - 4], 4
call fcn.00403295
mov eax, dword [ebp - 0x630]
push 0x10
pop edi
cmp dword [ebp - 0x61c], edi
jae 0x406d98
lea eax, [ebp - 0x630]
push eax
call dword [sym.imp.KERNEL32.dll_GetFileAttributesA]
cmp eax, 0xffffffff
je 0x406da7
inc esi
jmp 0x406d39
cmp dword [ebp - 0x61c], edi
mov ecx, dword [ebp - 0x630]
jae 0x406dbb
lea ecx, [ebp - 0x630]
cmp dword [ebp - 0x638], edi
mov eax, dword [ebp - 0x64c]
jae 0x406dcf
lea eax, [ebp - 0x64c]
push 1
push ecx
push eax
call dword [sym.imp.KERNEL32.dll_CopyFileA]
test eax, eax
jne 0x406df5
push ebx
push 0x435238
push 0x4348bc
call fcn.00402d2a
add esp, 0xc
jmp 0x4070e7
cmp dword [ebp - 0x61c], edi
mov eax, dword [ebp - 0x630]
jae 0x406e09
lea eax, [ebp - 0x630]
push eax
lea ecx, [ebp - 0x6a0]
call fcn.004068b1
cmp dword [ebp - 0x6e8], ebx
mov byte [ebp - 4], 6
jne 0x406e25
xor eax, eax
jmp 0x406e31
mov eax, dword [ebp - 0x6e4]
sub eax, dword [ebp - 0x6e8]
push eax
push dword [ebp - 0x6e8]
lea ecx, [ebp - 0x6a0]
push ebx
push dword [ebp - 0x6dc]
call fcn.0040634f
cmp dword [ebp - 0x700], ebx
jne 0x406f9c
call fcn.00401428
xor edx, edx
mov ecx, 0x500001
div ecx
lea esi, [edx + 0x500000]
shr esi, 0xc
shl esi, 0xc
push esi
call fcn.0042a1d9
cmp esi, ebx
pop ecx
mov edi, eax
mov dword [ebp - 0x6dc], ebx
jbe 0x406ea4
call fcn.00401428
mov ecx, dword [ebp - 0x6dc]
and eax, 0xff
inc dword [ebp - 0x6dc]
cmp dword [ebp - 0x6dc], esi
mov byte [ecx + edi], al
jb 0x406e83
push esi
push edi
push 2
push ebx
lea ecx, [ebp - 0x6a0]
call fcn.0040634f
push edi
call fcn.0042a1de
pop ecx
push 4
pop edi
push edi
lea eax, [ebp - 0x6d8]
push eax
push ebx
push 0x148
lea ecx, [ebp - 0x6a0]
call fcn.004063b1
add dword [ebp - 0x6d8], esi
push edi
lea eax, [ebp - 0x6d8]
push eax
push ebx
push 0x148
lea ecx, [ebp - 0x6a0]
call fcn.0040634f
push edi
lea eax, [ebp - 0x6d8]
push eax
push ebx
push 0x184
lea ecx, [ebp - 0x6a0]
call fcn.004063b1
add dword [ebp - 0x6d8], esi
push edi
lea eax, [ebp - 0x6d8]
push eax
push ebx
push 0x184
lea ecx, [ebp - 0x6a0]
call fcn.0040634f
push edi
lea eax, [ebp - 0x6d8]
push eax
push ebx
push 0x270
lea ecx, [ebp - 0x6a0]
call fcn.004063b1
add dword [ebp - 0x6d8], esi
push edi
lea eax, [ebp - 0x6d8]
push eax
push ebx
push 0x270
lea ecx, [ebp - 0x6a0]
call fcn.0040634f
push edi
lea eax, [ebp - 0x6d8]
push eax
push ebx
mov edi, 0x278
push edi
lea ecx, [ebp - 0x6a0]
call fcn.004063b1
add dword [ebp - 0x6d8], esi
push 4
lea eax, [ebp - 0x6d8]
push eax
push ebx
push edi
lea ecx, [ebp - 0x6a0]
call fcn.0040634f
push 0x6f
push 0x84
push ebx
call dword [sym.imp.KERNEL32.dll_FindResourceA]
mov esi, eax
cmp esi, ebx
jne 0x406fc8
push ebx
push 0x435220
push 0x4348bc
call fcn.00402d2a
add esp, 0xc
jmp 0x4070dc
push esi
push ebx
call dword [sym.imp.KERNEL32.dll_LoadResource]
push esi
push ebx
mov edi, eax
call dword [sym.imp.KERNEL32.dll_SizeofResource]
mov esi, eax
lea eax, [ebp - 0x218]
push eax
push 0x104
call dword [sym.imp.KERNEL32.dll_GetTempPathA]
lea eax, [ebp - 0x114]
push eax
push ebx
push 0x43521c
lea eax, [ebp - 0x218]
push eax
call dword [sym.imp.KERNEL32.dll_GetTempFileNameA]
push 1
lea eax, [ebp - 0x114]
push eax
lea ecx, [ebp - 0x6d4]
call fcn.0040684e
push esi
push edi
lea ecx, [ebp - 0x6d4]
mov byte [ebp - 4], 7
call fcn.004062fb
mov esi, 0x4351fc
push esi
lea ecx, [ebp - 0x66c]
call fcn.0040377c
push 0xffffffffffffffff
push ebx
lea eax, [ebp - 0x634]
push eax
lea ecx, [ebp - 0x66c]
mov byte [ebp - 4], 8
call fcn.004064af
push 0x435218
lea ecx, [ebp - 0x66c]
call fcn.004065d9
push 0xffffffffffffffff
push ebx
lea eax, [ebp - 0x650]
push eax
lea ecx, [ebp - 0x66c]
call fcn.004064af
push esi
lea ecx, [ebp - 0x66c]
call fcn.004065d9
cmp dword [ebp - 0x654], 0x10
mov eax, dword [ebp - 0x668]
jae 0x40709d
lea eax, [ebp - 0x668]
push eax
lea eax, [ebp - 0x114]
push eax
call fcn.004066c4
test al, al
pop ecx
pop ecx
push ebx
jne 0x4070c4
push 0x435204
push 0x4348bc
call fcn.00402d2a
add esp, 0xc
push ebx
lea ecx, [ebp - 0x66c]
push 1
call fcn.00403295
lea ecx, [ebp - 0x6d4]
call fcn.00406495
lea ecx, [ebp - 0x6a0]
call fcn.00406495
push ebx
lea ecx, [ebp - 0x634]
push 1
call fcn.00403295
push ebx
lea ecx, [ebp - 0x650]
push 1
call fcn.00403295
lea ecx, [ebp - 0x6ec]
call fcn.00406456
lea ecx, [ebp - 0x6fc]
call fcn.00406456
mov ecx, dword [ebp - 0xc]
pop edi
mov dword fs:[0], ecx
mov ecx, dword [ebp - 0x10]
pop esi
xor ecx, ebp
pop ebx
call fcn.004174f8
leave
ret