Function at 0x10025970
Capabilities:
Contain obfuscated stackstrings
Encrypt data using rc4 prga

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x20
cmp dword [0x100bfbfc], 0
je 0x10025edf
mov ecx, 0x4c
xor edx, edx
nop word [eax + eax]
mov al, byte [edx + 0x100a3db0]
xor al, cl
inc ecx
mov byte [ebp + edx - 0x20], al
and ecx, 0x800000ff
jns 0x100259ad
dec ecx
or ecx, 0xffffff00
inc ecx
inc edx
cmp edx, 0xb
jl 0x10025990
push esi
mov esi, dword [sym.imp.USER32.dll_FindWindowA]
lea eax, [ebp - 0x20]
push eax
push 0
mov byte [ebp - 0x15], 0
call esi
test eax, eax
jne 0x10025a11
mov byte [ebp - 0xa], al
lea eax, [ebp - 0x14]
push eax
push 0
mov dword [ebp - 0x14], 0x6d616554
mov dword [ebp - 0x10], 0x77656956
mov word [ebp - 0xc], 0x7265
call esi
test eax, eax
jne 0x10025a11
lea eax, [ebp - 8]
mov dword [ebp - 8], 0x44796e41
push eax
push 0
mov dword [ebp - 4], 0x6b7365
call esi
test eax, eax
jne 0x10025a11
mov dword [0x100bc8d4], eax
pop esi
mov esp, ebp
pop ebp
ret
mov dword [0x100bbed0], 0
mov dword [0x100bef28], 0
mov dword [0x100bbbc0], 0
mov dword [0x100bb750], 0
mov dword [0x100bc934], 0
mov dword [0x100bca98], 0
mov dword [0x100bb6d0], 0
mov dword [0x100bbbc8], 0
mov dword [0x100baee4], 0
mov dword [0x100b740c], 0
mov dword [0x100bbe90], 0
mov dword [0x100bceb0], 0
mov dword [0x100bb720], 0
mov dword [0x100bbbe4], 0
mov dword [0x100b72a4], 0
mov dword [0x100b7368], 0
mov dword [0x100bbd1c], 0
mov dword [0x100bfac8], 0
mov dword [0x100b72f0], 0
mov dword [0x100bbbd4], 0
mov dword [0x100bb0c8], 0
mov dword [0x100bef70], 0
mov dword [0x100b743c], 0
mov dword [0x100bfa54], 0
mov dword [0x100bf5e4], 0
mov dword [0x100baae4], 0
mov dword [0x100bd608], 0
mov dword [0x100bc808], 0
mov dword [0x100bc8d0], 0
mov dword [0x100b7418], 0
mov dword [0x100bfa58], 0
mov dword [0x100bbb84], 0
mov dword [0x100bc894], 0
mov dword [0x100bf5dc], 0
mov dword [0x100baae8], 0
mov dword [0x100bef6c], 0
mov dword [0x100baeec], 0
mov dword [0x100b72d0], 0
mov dword [0x100b729c], 0
mov dword [0x100b741c], 0
mov dword [0x100bc41c], 0
mov dword [0x100b738c], 0
mov dword [0x100befc4], 0
mov dword [0x100bd624], 0
mov dword [0x100bcaa4], 0
mov dword [0x100bfa50], 0
mov dword [0x100bbd60], 0
mov dword [0x100bbe48], 0
mov dword [0x100bc908], 0
mov dword [0x100bfac4], 0
mov dword [0x100bbda0], 0
mov dword [0x100bceb4], 0
mov dword [0x100bf5ec], 0
mov dword [0x100bc888], 0
mov dword [0x100bbb8c], 0
mov dword [0x100bf624], 0
mov dword [0x100befc0], 0
mov dword [0x100bbbd0], 0
mov dword [0x100bbe8c], 0
mov dword [0x100bc880], 0
mov dword [0x100bfae0], 0
mov dword [0x100bc910], 0
mov dword [0x100bfae4], 0
mov dword [0x100bbbd8], 0
mov dword [0x100b72b8], 0
mov dword [0x100baaf4], 0
mov dword [0x100bef38], 0
mov dword [0x100bb704], 0
mov dword [0x100baf34], 0
mov dword [0x100b74a4], 0
mov dword [0x100bc950], 0
mov dword [0x100bd210], 0
mov dword [0x100baee8], 0
mov dword [0x100bf854], 0
mov dword [0x100b72b0], 0
mov dword [0x100b72ac], 0
mov dword [0x100bc410], 0
mov dword [0x100bc938], 0
mov dword [0x100bfad4], 0
mov dword [0x100bb740], 0
mov dword [0x100befa4], 0
xorps xmm0, xmm0
mov dword [0x100bb71c], 0
mov eax, 1
mov dword [0x100bce98], 0
mov dword [0x100bb0d4], 0
mov dword [0x100bc3dc], 0
mov dword [0x100bbdbc], 0
mov dword [0x100bc8f8], 0
mov dword [0x100bbb74], 0
mov dword [0x100ba6d4], 0
mov dword [0x100bc400], 0
mov dword [0x100bfbf0], 0
mov dword [0x100baae0], 0
mov dword [0x100bfc04], 0
mov dword [0x100bfae8], 0
mov dword [0x100bf600], 0
mov dword [0x100bbd0c], 0
mov dword [0x100bbd20], 0
mov dword [0x100bbb80], 0
mov dword [0x100bd620], 0
mov dword [0x100bb6d8], 0
mov dword [0x100baf24], 0
mov dword [0x100bc92c], 0
mov dword [0x100befb0], 0
mov dword [0x100bbb90], 0
mov dword [0x100b72e4], 0
mov dword [0x100bc404], 0
mov dword [0x100bbd08], 0
mov dword [0x100baac8], 0
mov dword [0x100bc944], 0
mov dword [0x100bbdd4], 0
mov dword [0x100baf28], 0
mov dword [0x100bfc10], 0
mov dword [0x100bbdc8], 0
mov dword [0x100bfacc], 0
mov dword [0x100b5088], 0
mov dword [0x100bc8ac], 0
mov dword [0x100befac], 0
movups xmmword [0x100bcec8], xmm0
mov dword [0x100bcef0], 0
movups xmmword [0x100bced8], xmm0
mov dword [0x100bef68], 1
movq qword [0x100bcee8], xmm0
mov dword [0x100bc8d4], eax
pop esi
mov esp, ebp
pop ebp
ret
mov dword [0x100bc8d4], 0
mov esp, ebp
pop ebp
ret