Function at 0x100262e0
Capabilities:
Contain obfuscated stackstrings
Encrypt data using rc4 prga

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x20
cmp dword [0x100b0308], 0
je 0x1002684f
mov ecx, 0x4c
xor edx, edx
nop word [eax + eax]
mov al, byte [edx + 0x10098d6c]
xor al, cl
inc ecx
mov byte [ebp + edx - 0x20], al
and ecx, 0x800000ff
jns 0x1002631d
dec ecx
or ecx, 0xffffff00
inc ecx
inc edx
cmp edx, 0xb
jl 0x10026300
push esi
mov esi, dword [sym.imp.USER32.dll_FindWindowA]
lea eax, [ebp - 0x20]
push eax
push 0
mov byte [ebp - 0x15], 0
call esi
test eax, eax
jne 0x10026381
mov byte [ebp - 0xa], al
lea eax, [ebp - 0x14]
push eax
push 0
mov dword [ebp - 0x14], 0x6d616554
mov dword [ebp - 0x10], 0x77656956
mov word [ebp - 0xc], 0x7265
call esi
test eax, eax
jne 0x10026381
lea eax, [ebp - 8]
mov dword [ebp - 8], 0x44796e41
push eax
push 0
mov dword [ebp - 4], 0x6b7365
call esi
test eax, eax
jne 0x10026381
mov dword [0x100ad03c], eax
pop esi
mov esp, ebp
pop ebp
ret
mov dword [0x100ac64c], 0
mov dword [0x100af678], 0
mov dword [0x100ac348], 0
mov dword [0x100abee8], 0
mov dword [0x100ad098], 0
mov dword [0x100ad1fc], 0
mov dword [0x100abe70], 0
mov dword [0x100ac350], 0
mov dword [0x100ab684], 0
mov dword [0x100b06a4], 0
mov dword [0x100ac60c], 0
mov dword [0x100ad614], 0
mov dword [0x100abebc], 0
mov dword [0x100ac36c], 0
mov dword [0x100b0540], 0
mov dword [0x100b0604], 0
mov dword [0x100ac4a4], 0
mov dword [0x100b01e0], 0
mov dword [0x100b058c], 0
mov dword [0x100ac35c], 0
mov dword [0x100ab868], 0
mov dword [0x100af6c0], 0
mov dword [0x100b06d4], 0
mov dword [0x100b016c], 0
mov dword [0x100afd28], 0
mov dword [0x100b3d74], 0
mov dword [0x100ad974], 0
mov dword [0x100acf7c], 0
mov dword [0x100ad038], 0
mov dword [0x100b06b0], 0
mov dword [0x100b0170], 0
mov dword [0x100ac314], 0
mov dword [0x100ad004], 0
mov dword [0x100afd20], 0
mov dword [0x100ab288], 0
mov dword [0x100af6bc], 0
mov dword [0x100ab68c], 0
mov dword [0x100b056c], 0
mov dword [0x100b0538], 0
mov dword [0x100b06b4], 0
mov dword [0x100acf78], 0
mov dword [0x100b0628], 0
mov dword [0x100afaf0], 0
mov dword [0x100add74], 0
mov dword [0x100ad208], 0
mov dword [0x100b0168], 0
mov dword [0x100ac4e8], 0
mov dword [0x100ac5cc], 0
mov dword [0x100ad070], 0
mov dword [0x100b01dc], 0
mov dword [0x100ac528], 0
mov dword [0x100ad618], 0
mov dword [0x100afd30], 0
mov dword [0x100acffc], 0
mov dword [0x100ac31c], 0
mov dword [0x100afd64], 0
mov dword [0x100af704], 0
mov dword [0x100ac358], 0
mov dword [0x100ac608], 0
mov dword [0x100acff4], 0
mov dword [0x100b01f0], 0
mov dword [0x100ad078], 0
mov dword [0x100b01f4], 0
mov dword [0x100ac360], 0
mov dword [0x100b0554], 0
mov dword [0x100ab294], 0
mov dword [0x100af688], 0
mov dword [0x100abea0], 0
mov dword [0x100ab6d4], 0
mov dword [0x100b073c], 0
mov dword [0x100ad0b4], 0
mov dword [0x100ad968], 0
mov dword [0x100ab688], 0
mov dword [0x100aff6c], 0
mov dword [0x100b054c], 0
mov dword [0x100b0548], 0
mov dword [0x100acb84], 0
mov dword [0x100ad09c], 0
mov dword [0x100b01e8], 0
mov dword [0x100abedc], 0
mov dword [0x100af6e8], 0
xorps xmm0, xmm0
mov dword [0x100abeb8], 0
mov eax, 1
mov dword [0x100ad5fc], 0
mov dword [0x100ab874], 0
mov dword [0x100acb58], 0
mov dword [0x100ac540], 0
mov dword [0x100ad060], 0
mov dword [0x100ac304], 0
mov dword [0x100b396c], 0
mov dword [0x100acb74], 0
mov dword [0x100b0300], 0
mov dword [0x100b3d70], 0
mov dword [0x100b0310], 0
mov dword [0x100b01f8], 0
mov dword [0x100afd44], 0
mov dword [0x100ac494], 0
mov dword [0x100ac4a8], 0
mov dword [0x100ac310], 0
mov dword [0x100add70], 0
mov dword [0x100abe78], 0
mov dword [0x100ab6c4], 0
mov dword [0x100ad090], 0
mov dword [0x100af6f4], 0
mov dword [0x100ac320], 0
mov dword [0x100b0580], 0
mov dword [0x100acb78], 0
mov dword [0x100ac490], 0
mov dword [0x100b3d5c], 0
mov dword [0x100ad0a8], 0
mov dword [0x100ac558], 0
mov dword [0x100ab6c8], 0
mov dword [0x100b031c], 0
mov dword [0x100ac54c], 0
mov dword [0x100b01e4], 0
mov dword [0x100a845c], 0
mov dword [0x100ad018], 0
mov dword [0x100af6f0], 0
movups xmmword [0x100ad628], xmm0
mov dword [0x100ad650], 0
movups xmmword [0x100ad638], xmm0
mov dword [0x100af6b8], 1
movq qword [0x100ad648], xmm0
mov dword [0x100ad03c], eax
pop esi
mov esp, ebp
pop ebp
ret
mov dword [0x100ad03c], 0
mov esp, ebp
pop ebp
ret