Function at 0x10026e20
Capabilities:
Contain obfuscated stackstrings
Encrypt data using rc4 prga

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x20
cmp dword [0x100ba9fc], 0
je 0x10027385
mov ecx, 0x4c
xor edx, edx
nop word [eax + eax]
mov al, byte [edx + 0x100a1c64]
xor al, cl
inc ecx
mov byte [ebp + edx - 0x20], al
and ecx, 0x800000ff
jns 0x10026e5d
dec ecx
or ecx, 0xffffff00
inc ecx
inc edx
cmp edx, 0xb
jl 0x10026e40
push esi
mov esi, dword [sym.imp.USER32.dll_FindWindowA]
lea eax, [ebp - 0x20]
push eax
push 0
mov byte [ebp - 0x15], 0
call esi
test eax, eax
jne 0x10026ec1
mov byte [ebp - 0xa], al
lea eax, [ebp - 0x14]
push eax
push 0
mov dword [ebp - 0x14], 0x6d616554
mov dword [ebp - 0x10], 0x77656956
mov word [ebp - 0xc], 0x7265
call esi
test eax, eax
jne 0x10026ec1
lea eax, [ebp - 8]
mov dword [ebp - 8], 0x44796e41
push eax
push 0
mov dword [ebp - 4], 0x6b7365
call esi
test eax, eax
jne 0x10026ec1
mov dword [0x100b62a4], eax
pop esi
mov esp, ebp
pop ebp
ret
mov dword [0x100b589c], 0
mov dword [0x100b7004], 0
mov dword [0x100b5574], 0
mov dword [0x100b50f4], 0
mov dword [0x100b6308], 0
mov dword [0x100b646c], 0
mov dword [0x100b506c], 0
mov dword [0x100b5584], 0
mov dword [0x100b4880], 0
mov dword [0x100badac], 0
mov dword [0x100b585c], 0
mov dword [0x100b6888], 0
mov dword [0x100b50bc], 0
mov dword [0x100b55a0], 0
mov dword [0x100bac3c], 0
mov dword [0x100bad08], 0
mov dword [0x100b56dc], 0
mov dword [0x100ba8bc], 0
mov dword [0x100bac90], 0
mov dword [0x100b5590], 0
mov dword [0x100b48dc], 0
mov dword [0x100b9d4c], 0
mov dword [0x100bade0], 0
mov dword [0x100ba844], 0
mov dword [0x100ba3cc], 0
mov dword [0x100be488], 0
mov dword [0x100b6fe0], 0
mov dword [0x100b61d8], 0
mov dword [0x100b62a0], 0
mov dword [0x100badbc], 0
mov dword [0x100ba848], 0
mov dword [0x100b5530], 0
mov dword [0x100b6264], 0
mov dword [0x100ba3c4], 0
mov dword [0x100be494], 0
mov dword [0x100b9d48], 0
mov dword [0x100b4888], 0
mov dword [0x100bac70], 0
mov dword [0x100bac34], 0
mov dword [0x100badc0], 0
mov dword [0x100b61d0], 0
mov dword [0x100bad2c], 0
mov dword [0x100ba190], 0
mov dword [0x100b7000], 0
mov dword [0x100b6478], 0
mov dword [0x100ba840], 0
mov dword [0x100b5720], 0
mov dword [0x100b5814], 0
mov dword [0x100b62d8], 0
mov dword [0x100ba8b8], 0
mov dword [0x100b5764], 0
mov dword [0x100b688c], 0
mov dword [0x100ba3d4], 0
mov dword [0x100b6258], 0
mov dword [0x100b5538], 0
mov dword [0x100ba40c], 0
mov dword [0x100b9da0], 0
mov dword [0x100b558c], 0
mov dword [0x100b5858], 0
mov dword [0x100b6250], 0
mov dword [0x100ba8d8], 0
mov dword [0x100b62e0], 0
mov dword [0x100ba8e0], 0
mov dword [0x100b5594], 0
mov dword [0x100bac58], 0
mov dword [0x100be4a4], 0
mov dword [0x100b9d14], 0
mov dword [0x100b50a0], 0
mov dword [0x100b48d8], 0
mov dword [0x100bade4], 0
mov dword [0x100b6324], 0
mov dword [0x100b6be4], 0
mov dword [0x100b4884], 0
mov dword [0x100ba644], 0
mov dword [0x100bac50], 0
mov dword [0x100bac44], 0
mov dword [0x100b5ddc], 0
mov dword [0x100b630c], 0
mov dword [0x100ba8c8], 0
mov dword [0x100b50dc], 0
mov dword [0x100b9d84], 0
xorps xmm0, xmm0
mov dword [0x100b50b8], 0
mov eax, 1
mov dword [0x100b686c], 0
mov dword [0x100b5dac], 0
mov dword [0x100b5780], 0
mov dword [0x100b62c8], 0
mov dword [0x100b5520], 0
mov dword [0x100be460], 0
mov dword [0x100b5dcc], 0
mov dword [0x100ba9f0], 0
mov dword [0x100be484], 0
mov dword [0x100baa0c], 0
mov dword [0x100ba8e4], 0
mov dword [0x100ba3e8], 0
mov dword [0x100b56cc], 0
mov dword [0x100b56e0], 0
mov dword [0x100b552c], 0
mov dword [0x100b6ffc], 0
mov dword [0x100b5074], 0
mov dword [0x100b48c4], 0
mov dword [0x100b62fc], 0
mov dword [0x100b9d90], 0
mov dword [0x100b553c], 0
mov dword [0x100bac84], 0
mov dword [0x100b5dd0], 0
mov dword [0x100b56c8], 0
mov dword [0x100be46c], 0
mov dword [0x100b6318], 0
mov dword [0x100b57a0], 0
mov dword [0x100b48cc], 0
mov dword [0x100baa18], 0
mov dword [0x100b5794], 0
mov dword [0x100ba8c0], 0
mov dword [0x100b2460], 0
mov dword [0x100b627c], 0
mov dword [0x100b9d8c], 0
movups xmmword [0x100b68a0], xmm0
mov dword [0x100b68c8], 0
movups xmmword [0x100b68b0], xmm0
mov dword [0x100b9d44], 1
movq qword [0x100b68c0], xmm0
mov dword [0x100b62a4], eax
pop esi
mov esp, ebp
pop ebp
ret
mov dword [0x100b62a4], 0
mov esp, ebp
pop ebp
ret