Function at 0x4143f0
Capabilities:
Encrypt data using rc4 ksa
Read file on windows

Disassembly:
sub esp, 0x14
push ebx
push esi
mov esi, ecx
lea eax, [esp + 0x10]
xor ebx, ebx
mov dword [esp + 0x10], esi
test eax, eax
mov dword [esi], 0x42f0a4
jne 0x41490b
push ebx
push ebx
push ebx
push ebx
push ebx
call dword [sym.imp.KERNEL32.dll_LockFile]
xor eax, eax
movsx ecx, ax
mov byte [esp + ecx + 0x14], al
xor eax, eax
lea ecx, [esp + 0x14]
mov byte [ecx], al
inc eax
inc ecx
cmp ax, 0x100
jl 0x414429
xor eax, eax
lea ecx, [esp + 0x14]
mov byte [ecx], al
inc eax
inc ecx
cmp ax, 0x100
jl 0x414439
inc eax
cmp ax, 0x100
jl 0x41441c
xor eax, eax
lea ecx, [esp + 0x14]
mov byte [ecx], al
inc eax
inc ecx
cmp ax, 0x100
jl 0x414450
mov byte [esp + 8], bl
push ebp
mov ebp, dword [esp + 0xc]
push edi
mov byte [esp + 0x20], bl
mov byte [esp + 0x21], bl
mov byte [esp + 0x14], bl
xor eax, eax
lea ecx, [esp + 0x1c]
mov byte [ecx], al
inc eax
inc ecx
cmp ax, 0x100
jl 0x414476
xor eax, eax
lea ecx, [esp + 0x1c]
mov byte [ecx], al
inc eax
inc ecx
cmp ax, 0x100
jl 0x414486
xor ecx, ecx
lea eax, [esp + 0x1c]
mov byte [eax], cl
inc ecx
inc eax
cmp cx, 0x100
jl 0x414496
mov eax, dword [esp + 0x14]
xor ebx, ebx
movsx edx, cx
and eax, 0xff
and ebp, 0xff
lea esi, [esp + edx + 0x1c]
mov bl, byte [eax + 0x384]
mov dl, byte [esi]
mov edi, edx
and edi, 0xff
add ebx, edi
add ebx, ebp
and ebx, 0x800000ff
jns 0x4144dd
dec ebx
or ebx, 0xffffff00
inc ebx
mov byte [esp + 0x10], bl
mov ebp, dword [esp + 0x10]
mov edi, ebp
and edi, 0xff
inc eax
mov bl, byte [esp + edi + 0x1c]
lea edi, [esp + edi + 0x1c]
mov byte [esi], bl
mov esi, 0x57
mov byte [edi], dl
cdq
idiv esi
inc ecx
cmp cx, 0x100
mov byte [esp + 0x14], dl
jl 0x414470
mov edi, ebp
and edi, 0xff
xor eax, eax
lea ecx, [esp + 0x1c]
mov byte [ecx], al
inc eax
inc ecx
cmp ax, 0x100
jl 0x414520
xor eax, eax
lea ecx, [esp + 0x1c]
mov byte [ecx], al
inc eax
inc ecx
cmp ax, 0x100
jl 0x414530
xor ecx, ecx
lea eax, [esp + 0x1c]
mov byte [eax], cl
inc ecx
inc eax
cmp cx, 0x100
jl 0x414540
movsx eax, cx
mov dl, byte [esp + eax + 0x1c]
xor ebx, ebx
lea esi, [esp + eax + 0x1c]
mov eax, dword [esp + 0x14]
and eax, 0xff
mov ebp, edx
and ebp, 0xff
mov bl, byte [eax + 0x384]
add edi, ebx
add ebp, edi
mov ebx, ebp
and ebx, 0x800000ff
jns 0x414585
dec ebx
or ebx, 0xffffff00
inc ebx
mov byte [esp + 0x10], bl
mov edi, dword [esp + 0x10]
and edi, 0xff
inc eax
mov bl, byte [esp + edi + 0x1c]
mov byte [esi], bl
mov byte [esp + edi + 0x1c], dl
cdq
mov esi, 0x57
idiv esi
inc ecx
cmp cx, 0x100
mov byte [esp + 0x14], dl
jl 0x41451a
xor ebx, ebx
push ebx
push ebx
push ebx
push ebx
push ebx
call dword [sym.imp.KERNEL32.dll_ReadFile]
xor eax, eax
movsx ecx, ax
mov byte [esp + ecx + 0x1c], al
xor eax, eax
lea ecx, [esp + 0x1c]
mov byte [ecx], al
inc eax
inc ecx
cmp ax, 0x100
jl 0x4145d2
xor eax, eax
lea ecx, [esp + 0x1c]
mov byte [ecx], al
inc eax
inc ecx
cmp ax, 0x100
jl 0x4145e2
inc eax
cmp ax, 0x100
jl 0x4145c5
xor eax, eax
lea ecx, [esp + 0x1c]
mov byte [ecx], al
inc eax
inc ecx
cmp ax, 0x100
jl 0x4145f9
mov byte [esp + 0x10], bl
mov byte [esp + 0x20], bl
mov ebp, dword [esp + 0x10]
mov byte [esp + 0x21], bl
mov byte [esp + 0x14], bl
jmp 0x41461b
xor ebx, ebx
xor eax, eax
lea ecx, [esp + 0x1c]
mov byte [ecx], al
inc eax
inc ecx
cmp ax, 0x100
jl 0x414621
xor eax, eax
lea ecx, [esp + 0x1c]
mov byte [ecx], al
inc eax
inc ecx
cmp ax, 0x100
jl 0x414631
xor ecx, ecx
lea eax, [esp + 0x1c]
mov byte [eax], cl
inc ecx
inc eax
cmp cx, 0x100
jl 0x414641
mov eax, dword [esp + 0x14]
xor ebx, ebx
movsx edx, cx
and eax, 0xff
and ebp, 0xff
lea esi, [esp + edx + 0x1c]
mov bl, byte [eax + 0x384]
mov dl, byte [esi]
mov edi, edx
and edi, 0xff
add ebx, edi
add ebx, ebp
and ebx, 0x800000ff
jns 0x414688
dec ebx
or ebx, 0xffffff00
inc ebx
mov byte [esp + 0x10], bl
mov ebp, dword [esp + 0x10]
mov edi, ebp
and edi, 0xff
inc eax
mov bl, byte [esp + edi + 0x1c]
lea edi, [esp + edi + 0x1c]
mov byte [esi], bl
mov esi, 0x57
mov byte [edi], dl
cdq
idiv esi
inc ecx
cmp cx, 0x100
mov byte [esp + 0x14], dl
jl 0x414619
mov edi, ebp
and edi, 0xff
xor eax, eax
lea ecx, [esp + 0x1c]
mov byte [ecx], al
inc eax
inc ecx
cmp ax, 0x100
jl 0x4146cb
xor eax, eax
lea ecx, [esp + 0x1c]
mov byte [ecx], al
inc eax
inc ecx
cmp ax, 0x100
jl 0x4146db
xor ecx, ecx
lea eax, [esp + 0x1c]
mov byte [eax], cl
inc ecx
inc eax
cmp cx, 0x100
jl 0x4146eb
movsx eax, cx
mov dl, byte [esp + eax + 0x1c]
xor ebx, ebx
lea esi, [esp + eax + 0x1c]
mov eax, dword [esp + 0x14]
and eax, 0xff
mov ebp, edx
and ebp, 0xff
mov bl, byte [eax + 0x384]
add edi, ebx
add ebp, edi
mov ebx, ebp
and ebx, 0x800000ff
jns 0x414730
dec ebx
or ebx, 0xffffff00
inc ebx
mov byte [esp + 0x10], bl
mov edi, dword [esp + 0x10]
and edi, 0xff
inc eax
mov bl, byte [esp + edi + 0x1c]
mov byte [esi], bl
mov byte [esp + edi + 0x1c], dl
cdq
mov esi, 0x57
idiv esi
inc ecx
cmp cx, 0x100
mov byte [esp + 0x14], dl
jl 0x4146c5
call dword [sym.imp.KERNEL32.dll_GetLastError]
xor ecx, ecx
xor eax, eax
movsx edx, ax
mov byte [esp + edx + 0x1c], al
xor eax, eax
lea edx, [esp + 0x1c]
mov byte [edx], al
inc eax
inc edx
cmp ax, 0x100
jl 0x414778
xor eax, eax
lea edx, [esp + 0x1c]
mov byte [edx], al
inc eax
inc edx
cmp ax, 0x100
jl 0x414788
inc eax
cmp ax, 0x100
jl 0x41476b
xor eax, eax
lea edx, [esp + 0x1c]
mov byte [edx], al
inc eax
inc edx
cmp ax, 0x100
jl 0x41479f
mov byte [esp + 0x10], cl
mov byte [esp + 0x20], cl
mov ebp, dword [esp + 0x10]
mov byte [esp + 0x21], cl
mov byte [esp + 0x14], cl
jmp 0x4147c1
xor ecx, ecx
xor eax, eax
lea edx, [esp + 0x1c]
mov byte [edx], al
inc eax
inc edx
cmp ax, 0x100
jl 0x4147c7
xor eax, eax
lea edx, [esp + 0x1c]
mov byte [edx], al
inc eax
inc edx
cmp ax, 0x100
jl 0x4147d7
lea eax, [esp + 0x1c]
mov byte [eax], cl
inc ecx
inc eax
cmp cx, 0x100
jl 0x4147e5
movsx eax, cx
mov dl, byte [esp + eax + 0x1c]
xor ebx, ebx
lea esi, [esp + eax + 0x1c]
mov eax, dword [esp + 0x14]
and eax, 0xff
mov edi, edx
and edi, 0xff
and ebp, 0xff
mov bl, byte [eax + 0x384]
add ebx, edi
add ebx, ebp
and ebx, 0x800000ff
jns 0x41482e
dec ebx
or ebx, 0xffffff00
inc ebx
mov byte [esp + 0x10], bl
mov ebp, dword [esp + 0x10]
mov edi, ebp
and edi, 0xff
inc eax
mov bl, byte [esp + edi + 0x1c]
lea edi, [esp + edi + 0x1c]
mov byte [esi], bl
mov esi, 0x57
mov byte [edi], dl
cdq
idiv esi
inc ecx
cmp cx, 0x100
mov byte [esp + 0x14], dl
jl 0x4147bf
mov edi, ebp
and edi, 0xff
xor eax, eax
lea ecx, [esp + 0x1c]
mov byte [ecx], al
inc eax
inc ecx
cmp ax, 0x100
jl 0x414871
xor eax, eax
lea ecx, [esp + 0x1c]
mov byte [ecx], al
inc eax
inc ecx
cmp ax, 0x100
jl 0x414881
xor ecx, ecx
lea eax, [esp + 0x1c]
mov byte [eax], cl
inc ecx
inc eax
cmp cx, 0x100
jl 0x414891
mov eax, dword [esp + 0x14]
xor ebx, ebx
movsx edx, cx
and eax, 0xff
lea esi, [esp + edx + 0x1c]
mov bl, byte [eax + 0x384]
mov dl, byte [esi]
add edi, ebx
mov ebp, edx
and ebp, 0xff
add ebp, edi
mov ebx, ebp
and ebx, 0x800000ff
jns 0x4148d4
dec ebx
or ebx, 0xffffff00
inc ebx
mov byte [esp + 0x10], bl
mov edi, dword [esp + 0x10]
and edi, 0xff
inc eax
mov bl, byte [esp + edi + 0x1c]
mov byte [esi], bl
mov byte [esp + edi + 0x1c], dl
cdq
mov esi, 0x57
idiv esi
inc ecx
cmp cx, 0x100
mov byte [esp + 0x14], dl
jl 0x41486b
mov esi, dword [esp + 0x18]
pop edi
pop ebp
mov eax, dword [esi + 0x18]
mov ecx, dword [0x4353d0]
push eax
call dword [ecx + 0x48]
mov eax, dword [esi + 0x1c]
test eax, eax
je 0x414950
mov edx, dword [0x4353d0]
push 0xbb8
push eax
call dword [edx + 0x70]
cmp eax, 0x102
jne 0x414944
mov eax, dword [esi + 0x1c]
mov ecx, dword [0x4353d0]
push 0
push eax
call dword [ecx + 0x6c]
mov edx, dword [esi + 0x1c]
mov eax, dword [0x4353d0]
push edx
call dword [eax + 0x44]
mov eax, dword [esi + 0xc]
test eax, eax
je 0x414961
mov ecx, dword [0x4353d0]
push eax
call dword [ecx + 0x44]
mov eax, dword [esi + 0x10]
test eax, eax
je 0x414972
mov edx, dword [0x4353d0]
push eax
call dword [edx + 0x44]
mov eax, dword [esi + 0x14]
test eax, eax
je 0x414982
push eax
mov eax, dword [0x4353d0]
call dword [eax + 0x44]
mov eax, dword [esi + 4]
test eax, eax
je 0x414992
push eax
call sub.MSVCRT.dll_void___cdecl_operator_delete_void__
add esp, 4
mov ecx, dword [esi + 0x18]
mov edx, dword [0x4353d0]
push ecx
call dword [edx + 0x44]
pop esi
pop ebx
add esp, 0x14
ret