Function at 0x10025c70
Capabilities:
Contain obfuscated stackstrings
Encrypt data using rc4 prga

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x20
cmp dword [0x100b2a6c], 0
je 0x100261c1
mov ecx, 0x4c
xor edx, edx
nop word [eax + eax]
mov al, byte [edx + 0x1009bb5c]
xor al, cl
inc ecx
mov byte [ebp + edx - 0x20], al
and ecx, 0x800000ff
jns 0x10025cad
dec ecx
or ecx, 0xffffff00
inc ecx
inc edx
cmp edx, 0xb
jl 0x10025c90
push esi
mov esi, dword [sym.imp.USER32.dll_FindWindowA]
lea eax, [ebp - 0x20]
push eax
push 0
mov byte [ebp - 0x15], 0
call esi
test eax, eax
jne 0x10025d11
mov byte [ebp - 0xa], al
lea eax, [ebp - 0x14]
push eax
push 0
mov dword [ebp - 0x14], 0x6d616554
mov dword [ebp - 0x10], 0x77656956
mov word [ebp - 0xc], 0x7265
call esi
test eax, eax
jne 0x10025d11
lea eax, [ebp - 8]
mov dword [ebp - 8], 0x44796e41
push eax
push 0
mov dword [ebp - 4], 0x6b7365
call esi
test eax, eax
jne 0x10025d11
mov dword [0x100af230], eax
pop esi
mov esp, ebp
pop ebp
ret
mov dword [0x100ae834], 0
mov dword [0x100aff8c], 0
mov dword [0x100ae51c], 0
mov dword [0x100ae09c], 0
mov dword [0x100af290], 0
mov dword [0x100af3f4], 0
mov dword [0x100ae014], 0
mov dword [0x100ae52c], 0
mov dword [0x100b68e8], 0
mov dword [0x100b2e08], 0
mov dword [0x100ae7f4], 0
mov dword [0x100af810], 0
mov dword [0x100ae064], 0
mov dword [0x100ae548], 0
mov dword [0x100b2ca4], 0
mov dword [0x100b2d68], 0
mov dword [0x100ae680], 0
mov dword [0x100b2938], 0
mov dword [0x100b2cf0], 0
mov dword [0x100ae538], 0
mov dword [0x100ad884], 0
mov dword [0x100b1dd4], 0
mov dword [0x100b2e3c], 0
mov dword [0x100b28c4], 0
mov dword [0x100b2454], 0
mov dword [0x100b64e4], 0
mov dword [0x100aff68], 0
mov dword [0x100af16c], 0
mov dword [0x100af22c], 0
mov dword [0x100b2e18], 0
mov dword [0x100b28c8], 0
mov dword [0x100ae4d8], 0
mov dword [0x100af1f0], 0
mov dword [0x100b244c], 0
mov dword [0x100b64e8], 0
mov dword [0x100b1dd0], 0
mov dword [0x100b68f0], 0
mov dword [0x100b2c9c], 0
mov dword [0x100b2e1c], 0
mov dword [0x100aed7c], 0
mov dword [0x100b2d8c], 0
mov dword [0x100b2218], 0
mov dword [0x100aff88], 0
mov dword [0x100af400], 0
mov dword [0x100b28c0], 0
mov dword [0x100ae6c4], 0
mov dword [0x100ae7b0], 0
mov dword [0x100af264], 0
mov dword [0x100b2934], 0
mov dword [0x100ae708], 0
mov dword [0x100af814], 0
mov dword [0x100b245c], 0
mov dword [0x100ae4e0], 0
mov dword [0x100b2490], 0
mov dword [0x100b1e28], 0
mov dword [0x100ae534], 0
mov dword [0x100ae7f0], 0
mov dword [0x100af1e4], 0
mov dword [0x100b294c], 0
mov dword [0x100af26c], 0
mov dword [0x100b2954], 0
mov dword [0x100ae53c], 0
mov dword [0x100b2cbc], 0
mov dword [0x100b64f8], 0
mov dword [0x100b1d9c], 0
mov dword [0x100ae048], 0
mov dword [0x100ad880], 0
mov dword [0x100b2ea4], 0
mov dword [0x100af2ac], 0
mov dword [0x100afb6c], 0
mov dword [0x100b68ec], 0
mov dword [0x100b26c4], 0
mov dword [0x100b2cb4], 0
mov dword [0x100b2cac], 0
mov dword [0x100aed70], 0
mov dword [0x100af294], 0
mov dword [0x100b2940], 0
mov dword [0x100ae084], 0
mov dword [0x100b1e0c], 0
mov dword [0x100ae060], 0
mov dword [0x100af7f4], 0
xorps xmm0, xmm0
mov dword [0x100aed40], 0
mov eax, 1
mov dword [0x100ae724], 0
mov dword [0x100af254], 0
mov dword [0x100ae4c8], 0
mov dword [0x100b60d4], 0
mov dword [0x100aed60], 0
mov dword [0x100b2a60], 0
mov dword [0x100b64e0], 0
mov dword [0x100b2a74], 0
mov dword [0x100b2958], 0
mov dword [0x100b2470], 0
mov dword [0x100ae670], 0
mov dword [0x100ae684], 0
mov dword [0x100ae4d4], 0
mov dword [0x100aff84], 0
mov dword [0x100ae01c], 0
mov dword [0x100b6928], 0
mov dword [0x100af284], 0
mov dword [0x100b1e18], 0
mov dword [0x100ae4e4], 0
mov dword [0x100b2ce4], 0
mov dword [0x100aed64], 0
mov dword [0x100ae66c], 0
mov dword [0x100b64c8], 0
mov dword [0x100af2a0], 0
mov dword [0x100ae73c], 0
mov dword [0x100b692c], 0
mov dword [0x100b2a80], 0
mov dword [0x100ae730], 0
mov dword [0x100b293c], 0
mov dword [0x100ab460], 0
mov dword [0x100af208], 0
mov dword [0x100b1e14], 0
movups xmmword [0x100af828], xmm0
mov dword [0x100af850], 0
movups xmmword [0x100af838], xmm0
mov dword [0x100b1dcc], 1
movq qword [0x100af848], xmm0
mov dword [0x100af230], eax
pop esi
mov esp, ebp
pop ebp
ret
mov dword [0x100af230], 0
mov esp, ebp
pop ebp
ret