Function at 0x40c9c0
Capabilities:
Encrypt data using rc4 ksa
Read file on windows

Disassembly:
lea eax, [esp - 0xc]
sub esp, 0x10
test eax, eax
mov dword [ecx], 0x42f098
jne 0x40ced7
push ebx
push ebp
push esi
xor ebx, ebx
push edi
push ebx
push ebx
push ebx
push ebx
push ebx
call dword [sym.imp.KERNEL32.dll_LockFile]
xor eax, eax
movsx ecx, ax
mov byte [esp + ecx + 0x18], al
xor eax, eax
lea ecx, [esp + 0x18]
mov byte [ecx], al
inc eax
inc ecx
cmp ax, 0x100
jl 0x40c9f5
xor eax, eax
lea ecx, [esp + 0x18]
mov byte [ecx], al
inc eax
inc ecx
cmp ax, 0x100
jl 0x40ca05
inc eax
cmp ax, 0x100
jl 0x40c9e8
xor eax, eax
lea ecx, [esp + 0x18]
mov byte [ecx], al
inc eax
inc ecx
cmp ax, 0x100
jl 0x40ca1c
mov byte [esp + 0x10], bl
mov byte [esp + 0x1c], bl
mov ebp, dword [esp + 0x10]
mov byte [esp + 0x1d], bl
mov byte [esp + 0x14], bl
jmp 0x40ca3e
xor ebx, ebx
xor eax, eax
lea ecx, [esp + 0x18]
mov byte [ecx], al
inc eax
inc ecx
cmp ax, 0x100
jl 0x40ca44
xor eax, eax
lea ecx, [esp + 0x18]
mov byte [ecx], al
inc eax
inc ecx
cmp ax, 0x100
jl 0x40ca54
xor ecx, ecx
lea eax, [esp + 0x18]
mov byte [eax], cl
inc ecx
inc eax
cmp cx, 0x100
jl 0x40ca64
mov eax, dword [esp + 0x14]
xor ebx, ebx
movsx edx, cx
and eax, 0xff
and ebp, 0xff
lea esi, [esp + edx + 0x18]
mov bl, byte [eax + 0x384]
mov dl, byte [esi]
mov edi, edx
and edi, 0xff
add ebx, edi
add ebx, ebp
and ebx, 0x800000ff
jns 0x40caab
dec ebx
or ebx, 0xffffff00
inc ebx
mov byte [esp + 0x10], bl
mov ebp, dword [esp + 0x10]
mov edi, ebp
and edi, 0xff
inc eax
mov bl, byte [esp + edi + 0x18]
lea edi, [esp + edi + 0x18]
mov byte [esi], bl
mov esi, 0x57
mov byte [edi], dl
cdq
idiv esi
inc ecx
cmp cx, 0x100
mov byte [esp + 0x14], dl
jl 0x40ca3c
mov edi, ebp
and edi, 0xff
xor eax, eax
lea ecx, [esp + 0x18]
mov byte [ecx], al
inc eax
inc ecx
cmp ax, 0x100
jl 0x40caee
xor eax, eax
lea ecx, [esp + 0x18]
mov byte [ecx], al
inc eax
inc ecx
cmp ax, 0x100
jl 0x40cafe
xor ecx, ecx
lea eax, [esp + 0x18]
mov byte [eax], cl
inc ecx
inc eax
cmp cx, 0x100
jl 0x40cb0e
movsx eax, cx
mov dl, byte [esp + eax + 0x18]
xor ebx, ebx
lea esi, [esp + eax + 0x18]
mov eax, dword [esp + 0x14]
and eax, 0xff
mov ebp, edx
and ebp, 0xff
mov bl, byte [eax + 0x384]
add edi, ebx
add ebp, edi
mov ebx, ebp
and ebx, 0x800000ff
jns 0x40cb53
dec ebx
or ebx, 0xffffff00
inc ebx
mov byte [esp + 0x10], bl
mov edi, dword [esp + 0x10]
and edi, 0xff
inc eax
mov bl, byte [esp + edi + 0x18]
mov byte [esi], bl
mov byte [esp + edi + 0x18], dl
cdq
mov esi, 0x57
idiv esi
inc ecx
cmp cx, 0x100
mov byte [esp + 0x14], dl
jl 0x40cae8
xor ebx, ebx
push ebx
push ebx
push ebx
push ebx
push ebx
call dword [sym.imp.KERNEL32.dll_ReadFile]
xor eax, eax
movsx ecx, ax
mov byte [esp + ecx + 0x18], al
xor eax, eax
lea ecx, [esp + 0x18]
mov byte [ecx], al
inc eax
inc ecx
cmp ax, 0x100
jl 0x40cba0
xor eax, eax
lea ecx, [esp + 0x18]
mov byte [ecx], al
inc eax
inc ecx
cmp ax, 0x100
jl 0x40cbb0
inc eax
cmp ax, 0x100
jl 0x40cb93
xor eax, eax
lea ecx, [esp + 0x18]
mov byte [ecx], al
inc eax
inc ecx
cmp ax, 0x100
jl 0x40cbc7
mov byte [esp + 0x10], bl
mov byte [esp + 0x1c], bl
mov ebp, dword [esp + 0x10]
mov byte [esp + 0x1d], bl
mov byte [esp + 0x14], bl
jmp 0x40cbe9
xor ebx, ebx
xor eax, eax
lea ecx, [esp + 0x18]
mov byte [ecx], al
inc eax
inc ecx
cmp ax, 0x100
jl 0x40cbef
xor eax, eax
lea ecx, [esp + 0x18]
mov byte [ecx], al
inc eax
inc ecx
cmp ax, 0x100
jl 0x40cbff
xor ecx, ecx
lea eax, [esp + 0x18]
mov byte [eax], cl
inc ecx
inc eax
cmp cx, 0x100
jl 0x40cc0f
mov eax, dword [esp + 0x14]
xor ebx, ebx
movsx edx, cx
and eax, 0xff
and ebp, 0xff
lea esi, [esp + edx + 0x18]
mov bl, byte [eax + 0x384]
mov dl, byte [esi]
mov edi, edx
and edi, 0xff
add ebx, edi
add ebx, ebp
and ebx, 0x800000ff
jns 0x40cc56
dec ebx
or ebx, 0xffffff00
inc ebx
mov byte [esp + 0x10], bl
mov ebp, dword [esp + 0x10]
mov edi, ebp
and edi, 0xff
inc eax
mov bl, byte [esp + edi + 0x18]
lea edi, [esp + edi + 0x18]
mov byte [esi], bl
mov esi, 0x57
mov byte [edi], dl
cdq
idiv esi
inc ecx
cmp cx, 0x100
mov byte [esp + 0x14], dl
jl 0x40cbe7
mov edi, ebp
and edi, 0xff
xor eax, eax
lea ecx, [esp + 0x18]
mov byte [ecx], al
inc eax
inc ecx
cmp ax, 0x100
jl 0x40cc99
xor eax, eax
lea ecx, [esp + 0x18]
mov byte [ecx], al
inc eax
inc ecx
cmp ax, 0x100
jl 0x40cca9
xor ecx, ecx
lea eax, [esp + 0x18]
mov byte [eax], cl
inc ecx
inc eax
cmp cx, 0x100
jl 0x40ccb9
movsx eax, cx
mov dl, byte [esp + eax + 0x18]
xor ebx, ebx
lea esi, [esp + eax + 0x18]
mov eax, dword [esp + 0x14]
and eax, 0xff
mov ebp, edx
and ebp, 0xff
mov bl, byte [eax + 0x384]
add edi, ebx
add ebp, edi
mov ebx, ebp
and ebx, 0x800000ff
jns 0x40ccfe
dec ebx
or ebx, 0xffffff00
inc ebx
mov byte [esp + 0x10], bl
mov edi, dword [esp + 0x10]
and edi, 0xff
inc eax
mov bl, byte [esp + edi + 0x18]
mov byte [esi], bl
mov byte [esp + edi + 0x18], dl
cdq
mov esi, 0x57
idiv esi
inc ecx
cmp cx, 0x100
mov byte [esp + 0x14], dl
jl 0x40cc93
call dword [sym.imp.KERNEL32.dll_GetLastError]
xor ecx, ecx
xor eax, eax
movsx edx, ax
mov byte [esp + edx + 0x18], al
xor eax, eax
lea edx, [esp + 0x18]
mov byte [edx], al
inc eax
inc edx
cmp ax, 0x100
jl 0x40cd46
xor eax, eax
lea edx, [esp + 0x18]
mov byte [edx], al
inc eax
inc edx
cmp ax, 0x100
jl 0x40cd56
inc eax
cmp ax, 0x100
jl 0x40cd39
xor eax, eax
lea edx, [esp + 0x18]
mov byte [edx], al
inc eax
inc edx
cmp ax, 0x100
jl 0x40cd6d
mov byte [esp + 0x10], cl
mov byte [esp + 0x1c], cl
mov ebp, dword [esp + 0x10]
mov byte [esp + 0x1d], cl
mov byte [esp + 0x14], cl
jmp 0x40cd8f
xor ecx, ecx
xor eax, eax
lea edx, [esp + 0x18]
mov byte [edx], al
inc eax
inc edx
cmp ax, 0x100
jl 0x40cd95
xor eax, eax
lea edx, [esp + 0x18]
mov byte [edx], al
inc eax
inc edx
cmp ax, 0x100
jl 0x40cda5
lea eax, [esp + 0x18]
mov byte [eax], cl
inc ecx
inc eax
cmp cx, 0x100
jl 0x40cdb3
movsx eax, cx
mov dl, byte [esp + eax + 0x18]
xor ebx, ebx
lea esi, [esp + eax + 0x18]
mov eax, dword [esp + 0x14]
and eax, 0xff
mov edi, edx
and edi, 0xff
and ebp, 0xff
mov bl, byte [eax + 0x384]
add ebx, edi
add ebx, ebp
and ebx, 0x800000ff
jns 0x40cdfc
dec ebx
or ebx, 0xffffff00
inc ebx
mov byte [esp + 0x10], bl
mov ebp, dword [esp + 0x10]
mov edi, ebp
and edi, 0xff
inc eax
mov bl, byte [esp + edi + 0x18]
lea edi, [esp + edi + 0x18]
mov byte [esi], bl
mov esi, 0x57
mov byte [edi], dl
cdq
idiv esi
inc ecx
cmp cx, 0x100
mov byte [esp + 0x14], dl
jl 0x40cd8d
mov edi, ebp
and edi, 0xff
xor eax, eax
lea ecx, [esp + 0x18]
mov byte [ecx], al
inc eax
inc ecx
cmp ax, 0x100
jl 0x40ce3f
xor eax, eax
lea ecx, [esp + 0x18]
mov byte [ecx], al
inc eax
inc ecx
cmp ax, 0x100
jl 0x40ce4f
xor ecx, ecx
lea eax, [esp + 0x18]
mov byte [eax], cl
inc ecx
inc eax
cmp cx, 0x100
jl 0x40ce5f
mov eax, dword [esp + 0x14]
xor ebx, ebx
movsx edx, cx
and eax, 0xff
lea esi, [esp + edx + 0x18]
mov bl, byte [eax + 0x384]
mov dl, byte [esi]
add edi, ebx
mov ebp, edx
and ebp, 0xff
add ebp, edi
mov ebx, ebp
and ebx, 0x800000ff
jns 0x40cea2
dec ebx
or ebx, 0xffffff00
inc ebx
mov byte [esp + 0x10], bl
mov edi, dword [esp + 0x10]
and edi, 0xff
inc eax
mov bl, byte [esp + edi + 0x18]
mov byte [esi], bl
mov byte [esp + edi + 0x18], dl
cdq
mov esi, 0x57
idiv esi
inc ecx
cmp cx, 0x100
mov byte [esp + 0x14], dl
jl 0x40ce39
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x10
ret