Function at 0x100277d0
Capabilities:
Contain obfuscated stackstrings
Encrypt data using rc4 prga

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x20
cmp dword [0x100b788c], 0
je 0x10027d35
mov ecx, 0x4c
xor edx, edx
nop word [eax + eax]
mov al, byte [edx + 0x100a3e14]
xor al, cl
inc ecx
mov byte [ebp + edx - 0x20], al
and ecx, 0x800000ff
jns 0x1002780d
dec ecx
or ecx, 0xffffff00
inc ecx
inc edx
cmp edx, 0xb
jl 0x100277f0
push esi
mov esi, dword [sym.imp.USER32.dll_FindWindowA]
lea eax, [ebp - 0x20]
push eax
push 0
mov byte [ebp - 0x15], 0
call esi
test eax, eax
jne 0x10027871
mov byte [ebp - 0xa], al
lea eax, [ebp - 0x14]
push eax
push 0
mov dword [ebp - 0x14], 0x6d616554
mov dword [ebp - 0x10], 0x77656956
mov word [ebp - 0xc], 0x7265
call esi
test eax, eax
jne 0x10027871
lea eax, [ebp - 8]
mov dword [ebp - 8], 0x44796e41
push eax
push 0
mov dword [ebp - 4], 0x6b7365
call esi
test eax, eax
jne 0x10027871
mov dword [0x100bd0c8], eax
pop esi
mov esp, ebp
pop ebp
ret
mov dword [0x100bc6c4], 0
mov dword [0x100bdf34], 0
mov dword [0x100bc3d8], 0
mov dword [0x100bbf74], 0
mov dword [0x100bd24c], 0
mov dword [0x100bd3ac], 0
mov dword [0x100bbefc], 0
mov dword [0x100bc3e0], 0
mov dword [0x100bb70c], 0
mov dword [0x100b7c34], 0
mov dword [0x100bc6b4], 0
mov dword [0x100bd7c4], 0
mov dword [0x100bbf4c], 0
mov dword [0x100bc3fc], 0
mov dword [0x100b7ac8], 0
mov dword [0x100b7b8c], 0
mov dword [0x100bc538], 0
mov dword [0x100b775c], 0
mov dword [0x100b7b14], 0
mov dword [0x100bc3ec], 0
mov dword [0x100bb764], 0
mov dword [0x100bf37c], 0
mov dword [0x100b7c64], 0
mov dword [0x100b76e8], 0
mov dword [0x100bfa64], 0
mov dword [0x100bb308], 0
mov dword [0x100bdf10], 0
mov dword [0x100bcff8], 0
mov dword [0x100bd0c4], 0
mov dword [0x100b7c40], 0
mov dword [0x100b76ec], 0
mov dword [0x100bc3a4], 0
mov dword [0x100bd084], 0
mov dword [0x100bfa5c], 0
mov dword [0x100bb310], 0
mov dword [0x100bf378], 0
mov dword [0x100bb714], 0
mov dword [0x100b7af4], 0
mov dword [0x100b7ac0], 0
mov dword [0x100b7c44], 0
mov dword [0x100bcc0c], 0
mov dword [0x100b7bb4], 0
mov dword [0x100bf444], 0
mov dword [0x100bdf30], 0
mov dword [0x100bd3b8], 0
mov dword [0x100b76e4], 0
mov dword [0x100bc580], 0
mov dword [0x100bc668], 0
mov dword [0x100bd224], 0
mov dword [0x100b7758], 0
mov dword [0x100bc5c4], 0
mov dword [0x100bd7c8], 0
mov dword [0x100bfa6c], 0
mov dword [0x100bd078], 0
mov dword [0x100bc3ac], 0
mov dword [0x100b72dc], 0
mov dword [0x100bf440], 0
mov dword [0x100bc3e8], 0
mov dword [0x100bc6b0], 0
mov dword [0x100bd070], 0
mov dword [0x100b7774], 0
mov dword [0x100bd22c], 0
mov dword [0x100b777c], 0
mov dword [0x100bc3f0], 0
mov dword [0x100b7adc], 0
mov dword [0x100bb31c], 0
mov dword [0x100bf344], 0
mov dword [0x100bbf30], 0
mov dword [0x100bb760], 0
mov dword [0x100b7ccc], 0
mov dword [0x100bd264], 0
mov dword [0x100bdb1c], 0
mov dword [0x100bb710], 0
mov dword [0x100b76dc], 0
mov dword [0x100b7ad4], 0
mov dword [0x100b7ad0], 0
mov dword [0x100bd250], 0
mov dword [0x100b7768], 0
mov dword [0x100bbf68], 0
mov dword [0x100bf3a8], 0
mov dword [0x100bbf48], 0
xorps xmm0, xmm0
mov dword [0x100bd7ac], 0
mov eax, 1
mov dword [0x100bb900], 0
mov dword [0x100bcbd4], 0
mov dword [0x100bc5e0], 0
mov dword [0x100bd214], 0
mov dword [0x100bc394], 0
mov dword [0x100baefc], 0
mov dword [0x100bcbf0], 0
mov dword [0x100b7784], 0
mov dword [0x100bb304], 0
mov dword [0x100b7898], 0
mov dword [0x100b7780], 0
mov dword [0x100bfa84], 0
mov dword [0x100bc528], 0
mov dword [0x100bc53c], 0
mov dword [0x100bc3a0], 0
mov dword [0x100bdf2c], 0
mov dword [0x100bbf04], 0
mov dword [0x100bb748], 0
mov dword [0x100bd244], 0
mov dword [0x100bf3b4], 0
mov dword [0x100bc3b0], 0
mov dword [0x100b7b08], 0
mov dword [0x100bcbf4], 0
mov dword [0x100bc520], 0
mov dword [0x100bb2f0], 0
mov dword [0x100bd25c], 0
mov dword [0x100bc5f4], 0
mov dword [0x100bb74c], 0
mov dword [0x100b78a4], 0
mov dword [0x100bc5ec], 0
mov dword [0x100b7760], 0
mov dword [0x100b4018], 0
mov dword [0x100bd0a0], 0
mov dword [0x100bf3b0], 0
movups xmmword [0x100bd7d8], xmm0
mov dword [0x100bd800], 0
movups xmmword [0x100bd7e8], xmm0
mov dword [0x100bf374], 1
movq qword [0x100bd7f8], xmm0
mov dword [0x100bd0c8], eax
pop esi
mov esp, ebp
pop ebp
ret
mov dword [0x100bd0c8], 0
mov esp, ebp
pop ebp
ret