Function at 0x401df0
Capabilities:
Encode data using xor
Encrypt data using rc4 prga

Disassembly:
push ebp
mov ebp, esp
sub esp, 8
push edi
mov edi, ecx
mov eax, 0x974827b8
mov dword [ebp - 4], eax
cmp byte [edi], 0
je 0x402daa
push ebx
push esi
nop dword [eax]
push 0x414d0c
call fcn.004062df
push 0x414d0c
mov esi, eax
call fcn.004062df
add esi, eax
push 0x414d0c
movzx esi, si
call fcn.004062df
add eax, esi
push 0x414d0c
movzx esi, ax
call fcn.004062df
add eax, esi
push 0x414d0c
movzx esi, ax
call fcn.004062df
add eax, esi
push 0x414d0c
movzx esi, ax
call fcn.004062df
add eax, esi
push 0x414d0c
movzx esi, ax
call fcn.004062df
add eax, esi
push 0x414d0c
movzx esi, ax
call fcn.004062df
add eax, esi
push 0x414d0c
movzx esi, ax
call fcn.004062df
add eax, esi
push 0x414d0c
movzx esi, ax
call fcn.004062df
add eax, esi
push 0x414d0c
movzx esi, ax
call fcn.004062df
add eax, esi
push 0x414d0c
movzx esi, ax
call fcn.004062df
add eax, esi
push 0x414d0c
movzx esi, ax
call fcn.004062df
add eax, esi
push 0x414d0c
movzx esi, ax
call fcn.004062df
add eax, esi
push 0x414d0c
movzx esi, ax
call fcn.004062df
add eax, esi
push 0x414d0c
movzx esi, ax
call fcn.004062df
add esp, 0x40
add eax, esi
movzx esi, ax
push 0x414d0c
call fcn.004062df
add eax, esi
push 0x414d0c
movzx esi, ax
call fcn.004062df
add eax, esi
push 0x414d0c
movzx esi, ax
call fcn.004062df
add eax, esi
push 0x414d0c
movzx esi, ax
call fcn.004062df
add eax, esi
movzx esi, ax
push 0x414d0c
call fcn.004062df
add eax, esi
push 0x414d0c
movzx esi, ax
call fcn.004062df
add eax, esi
push 0x414d0c
movzx esi, ax
call fcn.004062df
add eax, esi
push 0x414d0c
movzx esi, ax
call fcn.004062df
add eax, esi
push 0x414d0c
movzx esi, ax
call fcn.004062df
add eax, esi
push 0x414d0c
movzx esi, ax
call fcn.004062df
add eax, esi
push 0x414d0c
movzx esi, ax
call fcn.004062df
add eax, esi
push 0x414d0c
movzx esi, ax
call fcn.004062df
add eax, esi
push 0x414d0c
movzx esi, ax
call fcn.004062df
add eax, esi
push 0x414d0c
movzx esi, ax
call fcn.004062df
add eax, esi
push 0x414d0c
movzx esi, ax
call fcn.004062df
add eax, esi
push 0x414d0c
movzx esi, ax
call fcn.004062df
add esp, 0x40
add eax, esi
movzx esi, ax
push 0x414d0c
call fcn.004062df
add eax, esi
push 0x414d0c
movzx esi, ax
call fcn.004062df
add eax, esi
push 0x414d0c
movzx esi, ax
call fcn.004062df
add eax, esi
push 0x414d0c
movzx esi, ax
call fcn.004062df
add eax, esi
push 0x414d0c
movzx esi, ax
call fcn.004062df
add eax, esi
push 0x414d0c
movzx esi, ax
call fcn.004062df
add eax, esi
push 0x414d0c
movzx esi, ax
call fcn.004062df
add eax, esi
push 0x414d0c
movzx esi, ax
call fcn.004062df
add eax, esi
movzx esi, ax
push 0x414d0c
call fcn.004062df
add eax, esi
push 0x414d0c
movzx esi, ax
call fcn.004062df
add eax, esi
push 0x414d0c
movzx esi, ax
call fcn.004062df
add eax, esi
push 0x414d0c
movzx esi, ax
call fcn.004062df
add eax, esi
push 0x414d0c
movzx esi, ax
call fcn.004062df
add eax, esi
push 0x414d0c
movzx esi, ax
call fcn.004062df
add eax, esi
push 0x414d0c
movzx esi, ax
call fcn.004062df
add eax, esi
push 0x414d0c
movzx esi, ax
call fcn.004062df
add esp, 0x40
add eax, esi
movzx esi, ax
push 0x414d0c
call fcn.004062df
add eax, esi
push 0x414d0c
movzx esi, ax
call fcn.004062df
add eax, esi
push 0x414d0c
movzx esi, ax
call fcn.004062df
add eax, esi
push 0x414d0c
movzx esi, ax
call fcn.004062df
add eax, esi
push 0x414d0c
movzx esi, ax
call fcn.004062df
add eax, esi
push 0x414d0c
movzx esi, ax
call fcn.004062df
add eax, esi
push 0x414d0c
movzx esi, ax
call fcn.004062df
add eax, esi
push 0x414d0c
movzx esi, ax
call fcn.004062df
add eax, esi
push 0x414d0c
movzx esi, ax
call fcn.004062df
add eax, esi
push 0x414d0c
movzx esi, ax
call fcn.004062df
add eax, esi
push 0x414d0c
movzx esi, ax
call fcn.004062df
add eax, esi
push 0x414d0c
movzx esi, ax
call fcn.004062df
add eax, esi
movzx esi, ax
push 0x414d0c
call fcn.004062df
add eax, esi
push 0x414d0c
movzx esi, ax
call fcn.004062df
add eax, esi
push 0x414d0c
movzx esi, ax
call fcn.004062df
add eax, esi
push 0x414d0c
movzx esi, ax
call fcn.004062df
add esp, 0x40
add eax, esi
movzx esi, ax
push 0x414d0c
call fcn.004062df
add eax, esi
push 0x414d0c
movzx esi, ax
call fcn.004062df
add eax, esi
push 0x414d0c
movzx esi, ax
call fcn.004062df
add eax, esi
push 0x414d0c
movzx esi, ax
call fcn.004062df
add eax, esi
push 0x414d0c
movzx esi, ax
call fcn.004062df
add eax, esi
push 0x414d0c
movzx esi, ax
call fcn.004062df
add eax, esi
push 0x414d0c
movzx esi, ax
call fcn.004062df
add eax, esi
push 0x414d0c
movzx esi, ax
call fcn.004062df
add eax, esi
push 0x414d0c
movzx esi, ax
call fcn.004062df
add eax, esi
push 0x414d0c
movzx esi, ax
call fcn.004062df
add eax, esi
push 0x414d0c
movzx esi, ax
call fcn.004062df
add eax, esi
push 0x414d0c
movzx esi, ax
call fcn.004062df
add eax, esi
push 0x414d0c
movzx esi, ax
call fcn.004062df
add eax, esi
push 0x414d0c
movzx esi, ax
call fcn.004062df
add eax, esi
push 0x414d0c
movzx esi, ax
call fcn.004062df
add eax, esi
push 0x414d0c
movzx esi, ax
call fcn.004062df
add esp, 0x40
add eax, esi
movzx esi, ax
push 0x414d0c
call fcn.004062df
add eax, esi
push 0x414d0c
movzx esi, ax
call fcn.004062df
add eax, esi
push 0x414d0c
movzx esi, ax
call fcn.004062df
add eax, esi
push 0x414d0c
movzx esi, ax
call fcn.004062df
add eax, esi
push 0x414d0c
movzx esi, ax
call fcn.004062df
add eax, esi
push 0x414d0c
movzx esi, ax
call fcn.004062df
add eax, esi
push 0x414d0c
movzx esi, ax
call fcn.004062df
add eax, esi
push 0x414d0c
movzx esi, ax
call fcn.004062df
add eax, esi
push 0x414d0c
movzx esi, ax
call fcn.004062df
add eax, esi
push 0x414d0c
movzx esi, ax
call fcn.004062df
add eax, esi
push 0x414d0c
movzx esi, ax
call fcn.004062df
add eax, esi
push 0x414d0c
movzx esi, ax
call fcn.004062df
add eax, esi
push 0x414d0c
movzx esi, ax
call fcn.004062df
add eax, esi
push 0x414d0c
movzx esi, ax
call fcn.004062df
add eax, esi
push 0x414d0c
movzx esi, ax
call fcn.004062df
add eax, esi
push 0x414d0c
movzx esi, ax
call fcn.004062df
add esp, 0x40
add eax, esi
movzx esi, ax
push 0x414d0c
call fcn.004062df
add eax, esi
push 0x414d0c
movzx esi, ax
call fcn.004062df
add eax, esi
push 0x414d0c
movzx esi, ax
call fcn.004062df
add eax, esi
push 0x414d0c
movzx esi, ax
call fcn.004062df
add eax, esi
movzx esi, ax
push 0x414d0c
call fcn.004062df
add eax, esi
push 0x414d0c
movzx esi, ax
call fcn.004062df
add eax, esi
push 0x414d0c
movzx esi, ax
call fcn.004062df
add eax, esi
push 0x414d0c
movzx esi, ax
call fcn.004062df
add eax, esi
push 0x414d0c
movzx esi, ax
call fcn.004062df
add eax, esi
push 0x414d0c
movzx esi, ax
call fcn.004062df
add eax, esi
push 0x414d0c
movzx esi, ax
call fcn.004062df
add eax, esi
push 0x414d0c
movzx esi, ax
call fcn.004062df
add eax, esi
push 0x414d0c
movzx esi, ax
call fcn.004062df
add eax, esi
push 0x414d0c
movzx esi, ax
call fcn.004062df
mov cx, word [edi]
add eax, esi
movzx eax, ax
inc edi
add cx, ax
mov dword [ebp - 8], edi
push 0x414d0c
movzx ebx, cx
call fcn.004062df
push 0x414d0c
mov edi, eax
call fcn.004062df
add esp, 0x40
add edi, eax
push 0x414d0c
call fcn.004062df
push 0x414d0c
add edi, eax
call fcn.004062df
push 0x414d0c
add edi, eax
call fcn.004062df
push 0x414d0c
add edi, eax
call fcn.004062df
push 0x414d0c
add edi, eax
call fcn.004062df
push 0x414d0c
add edi, eax
call fcn.004062df
push 0x414d0c
add edi, eax
call fcn.004062df
push 0x414d0c
add edi, eax
call fcn.004062df
push 0x414d0c
add edi, eax
call fcn.004062df
push 0x414d0c
add edi, eax
call fcn.004062df
push 0x414d0c
add edi, eax
call fcn.004062df
push 0x414d0c
add edi, eax
call fcn.004062df
push 0x414d0c
add edi, eax
call fcn.004062df
push 0x414d0c
add edi, eax
call fcn.004062df
push 0x414d0c
add edi, eax
call fcn.004062df
push 0x414d0c
add edi, eax
call fcn.004062df
add esp, 0x40
add edi, eax
push 0x414d0c
call fcn.004062df
push 0x414d0c
add edi, eax
call fcn.004062df
push 0x414d0c
add edi, eax
call fcn.004062df
push 0x414d0c
add edi, eax
call fcn.004062df
push 0x414d0c
add edi, eax
call fcn.004062df
push 0x414d0c
add edi, eax
call fcn.004062df
push 0x414d0c
add edi, eax
call fcn.004062df
push 0x414d0c
add edi, eax
call fcn.004062df
push 0x414d0c
add edi, eax
call fcn.004062df
push 0x414d0c
add edi, eax
call fcn.004062df
push 0x414d0c
add edi, eax
call fcn.004062df
push 0x414d0c
add edi, eax
call fcn.004062df
push 0x414d0c
add edi, eax
call fcn.004062df
push 0x414d0c
add edi, eax
call fcn.004062df
push 0x414d0c
add edi, eax
call fcn.004062df
push 0x414d0c
add edi, eax
call fcn.004062df
add esp, 0x40
add edi, eax
push 0x414d0c
call fcn.004062df
push 0x414d0c
add edi, eax
call fcn.004062df
push 0x414d0c
add edi, eax
call fcn.004062df
push 0x414d0c
add edi, eax
call fcn.004062df
add edi, eax
push 0x414d0c
call fcn.004062df
push 0x414d0c
add edi, eax
call fcn.004062df
push 0x414d0c
add edi, eax
call fcn.004062df
push 0x414d0c
add edi, eax
call fcn.004062df
push 0x414d0c
add edi, eax
call fcn.004062df
push 0x414d0c
add edi, eax
call fcn.004062df
push 0x414d0c
add edi, eax
call fcn.004062df
push 0x414d0c
add edi, eax
call fcn.004062df
push 0x414d0c
add edi, eax
call fcn.004062df
push 0x414d0c
add edi, eax
call fcn.004062df
push 0x414d0c
add edi, eax
call fcn.004062df
push 0x414d0c
add edi, eax
call fcn.004062df
add esp, 0x40
add edi, eax
push 0x414d0c
call fcn.004062df
push 0x414d0c
add edi, eax
call fcn.004062df
push 0x414d0c
add edi, eax
call fcn.004062df
push 0x414d0c
add edi, eax
call fcn.004062df
push 0x414d0c
add edi, eax
call fcn.004062df
push 0x414d0c
add edi, eax
call fcn.004062df
push 0x414d0c
add edi, eax
call fcn.004062df
push 0x414d0c
add edi, eax
call fcn.004062df
push 0x414d0c
add edi, eax
call fcn.004062df
push 0x414d0c
add edi, eax
call fcn.004062df
push 0x414d0c
add edi, eax
call fcn.004062df
push 0x414d0c
add edi, eax
call fcn.004062df
push 0x414d0c
add edi, eax
call fcn.004062df
push 0x414d0c
add edi, eax
call fcn.004062df
push 0x414d0c
add edi, eax
call fcn.004062df
push 0x414d0c
add edi, eax
call fcn.004062df
add esp, 0x40
add edi, eax
push 0x414d0c
call fcn.004062df
push 0x414d0c
add edi, eax
call fcn.004062df
push 0x414d0c
add edi, eax
call fcn.004062df
push 0x414d0c
add edi, eax
call fcn.004062df
push 0x414d0c
add edi, eax
call fcn.004062df
push 0x414d0c
add edi, eax
call fcn.004062df
push 0x414d0c
add edi, eax
call fcn.004062df
push 0x414d0c
add edi, eax
call fcn.004062df
push 0x414d0c
add edi, eax
call fcn.004062df
push 0x414d0c
add edi, eax
call fcn.004062df
push 0x414d0c
add edi, eax
call fcn.004062df
push 0x414d0c
add edi, eax
call fcn.004062df
push 0x414d0c
add edi, eax
call fcn.004062df
push 0x414d0c
add edi, eax
call fcn.004062df
push 0x414d0c
add edi, eax
call fcn.004062df
push 0x414d0c
add edi, eax
call fcn.004062df
add esp, 0x40
add edi, eax
push 0x414d0c
call fcn.004062df
push 0x414d0c
add edi, eax
call fcn.004062df
push 0x414d0c
add edi, eax
call fcn.004062df
push 0x414d0c
add edi, eax
call fcn.004062df
push 0x414d0c
add edi, eax
call fcn.004062df
push 0x414d0c
add edi, eax
call fcn.004062df
push 0x414d0c
add edi, eax
call fcn.004062df
push 0x414d0c
add edi, eax
call fcn.004062df
push 0x414d0c
add edi, eax
call fcn.004062df
add edi, eax
push 0x414d0c
call fcn.004062df
push 0x414d0c
add edi, eax
call fcn.004062df
push 0x414d0c
add edi, eax
call fcn.004062df
push 0x414d0c
add edi, eax
call fcn.004062df
push 0x414d0c
add edi, eax
call fcn.004062df
push 0x414d0c
add edi, eax
call fcn.004062df
push 0x414d0c
add edi, eax
call fcn.004062df
add esp, 0x40
add edi, eax
push 0x414d0c
call fcn.004062df
push 0x414d0c
add edi, eax
call fcn.004062df
push 0x414d0c
add edi, eax
call fcn.004062df
push 0x414d0c
add edi, eax
call fcn.004062df
push 0x414d0c
add edi, eax
call fcn.004062df
push 0x414d0c
add edi, eax
call fcn.004062df
push 0x414d0c
add edi, eax
call fcn.004062df
push 0x414d0c
add edi, eax
call fcn.004062df
push 0x414d0c
add edi, eax
call fcn.004062df
push 0x414d0c
add edi, eax
call fcn.004062df
push 0x414d0c
add edi, eax
call fcn.004062df
push 0x414d0c
add edi, eax
call fcn.004062df
push 0x414d0c
add edi, eax
call fcn.004062df
push 0x414d0c
add edi, eax
call fcn.004062df
push 0x414d0c
add edi, eax
call fcn.004062df
push 0x414d0c
add edi, eax
call fcn.004062df
add esp, 0x40
add edi, eax
push 0x414d0c
call fcn.004062df
push 0x414d0c
add edi, eax
call fcn.004062df
push 0x414d0c
add edi, eax
call fcn.004062df
add edi, eax
push 0x414d0c
call fcn.004062df
push 0x414d0c
add edi, eax
call fcn.004062df
push 0x414d0c
add edi, eax
call fcn.004062df
push 0x414d0c
add edi, eax
call fcn.004062df
push 0x414d0c
add edi, eax
call fcn.004062df
push 0x414d0c
add edi, eax
call fcn.004062df
push 0x414d0c
add edi, eax
call fcn.004062df
push 0x414d0c
add edi, eax
call fcn.004062df
push 0x414d0c
add edi, eax
call fcn.004062df
push 0x414d0c
add edi, eax
call fcn.004062df
push 0x414d0c
add edi, eax
call fcn.004062df
push 0x414d0c
add edi, eax
call fcn.004062df
push 0x414d0c
add edi, eax
call fcn.004062df
add esp, 0x40
add edi, eax
push 0x414d0c
call fcn.004062df
push 0x414d0c
add edi, eax
call fcn.004062df
push 0x414d0c
add edi, eax
call fcn.004062df
push 0x414d0c
add edi, eax
call fcn.004062df
push 0x414d0c
add edi, eax
call fcn.004062df
push 0x414d0c
add edi, eax
call fcn.004062df
push 0x414d0c
add edi, eax
call fcn.004062df
push 0x414d0c
add edi, eax
call fcn.004062df
push 0x414d0c
add edi, eax
call fcn.004062df
push 0x414d0c
add edi, eax
call fcn.004062df
push 0x414d0c
add edi, eax
call fcn.004062df
push 0x414d0c
add edi, eax
call fcn.004062df
push 0x414d0c
add edi, eax
call fcn.004062df
push 0x414d0c
add edi, eax
call fcn.004062df
add edi, eax
push 0x414d0c
call fcn.004062df
push 0x414d0c
add edi, eax
call fcn.004062df
add esp, 0x40
add edi, eax
push 0x414d0c
call fcn.004062df
push 0x414d0c
add edi, eax
call fcn.004062df
push 0x414d0c
add edi, eax
call fcn.004062df
push 0x414d0c
add edi, eax
call fcn.004062df
push 0x414d0c
add edi, eax
call fcn.004062df
push 0x414d0c
add edi, eax
call fcn.004062df
push 0x414d0c
add edi, eax
call fcn.004062df
push 0x414d0c
add edi, eax
call fcn.004062df
push 0x414d0c
add edi, eax
call fcn.004062df
push 0x414d0c
add edi, eax
call fcn.004062df
push 0x414d0c
add edi, eax
call fcn.004062df
push 0x414d0c
add edi, eax
call fcn.004062df
push 0x414d0c
add edi, eax
call fcn.004062df
push 0x414d0c
add edi, eax
call fcn.004062df
push 0x414d0c
add edi, eax
call fcn.004062df
push 0x414d0c
add edi, eax
call fcn.004062df
add esp, 0x40
add edi, eax
push 0x414d0c
call fcn.004062df
push 0x414d0c
add edi, eax
call fcn.004062df
push 0x414d0c
add edi, eax
call fcn.004062df
push 0x414d0c
add edi, eax
call fcn.004062df
push 0x414d0c
add edi, eax
call fcn.004062df
push 0x414d0c
add edi, eax
call fcn.004062df
push 0x414d0c
add edi, eax
call fcn.004062df
push 0x414d0c
add edi, eax
call fcn.004062df
add edi, eax
push 0x414d0c
call fcn.004062df
push 0x414d0c
add edi, eax
call fcn.004062df
push 0x414d0c
add edi, eax
call fcn.004062df
push 0x414d0c
add edi, eax
call fcn.004062df
push 0x414d0c
add edi, eax
call fcn.004062df
push 0x414d0c
add edi, eax
call fcn.004062df
push 0x414d0c
add edi, eax
call fcn.004062df
push 0x414d0c
add edi, eax
call fcn.004062df
add esp, 0x40
add edi, eax
push 0x414d0c
call fcn.004062df
push 0x414d0c
add edi, eax
call fcn.004062df
push 0x414d0c
add edi, eax
call fcn.004062df
push 0x414d0c
add edi, eax
call fcn.004062df
push 0x414d0c
add edi, eax
call fcn.004062df
push 0x414d0c
add edi, eax
call fcn.004062df
push 0x414d0c
add edi, eax
call fcn.004062df
push 0x414d0c
add edi, eax
call fcn.004062df
push 0x414d0c
add edi, eax
call fcn.004062df
mov esi, dword [ebp - 4]
add esp, 0x24
mov edx, esi
ror edx, 8
add edx, edi
mov edi, dword [ebp - 8]
add edx, eax
add ebx, edx
xor esi, ebx
cmp byte [edi], 0
mov dword [ebp - 4], esi
jne 0x401e10
mov eax, esi
pop esi
pop ebx
pop edi
mov esp, ebp
pop ebp
ret