Function at 0x10028b50
Capabilities:
Contain obfuscated stackstrings
Encrypt data using rc4 prga

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x20
cmp dword [0x100bb89c], 0
je 0x100290b5
mov ecx, 0x4c
xor edx, edx
nop word [eax + eax]
mov al, byte [edx + 0x100a6ed4]
xor al, cl
inc ecx
mov byte [ebp + edx - 0x20], al
and ecx, 0x800000ff
jns 0x10028b8d
dec ecx
or ecx, 0xffffff00
inc ecx
inc edx
cmp edx, 0xb
jl 0x10028b70
push esi
mov esi, dword [sym.imp.USER32.dll_FindWindowA]
lea eax, [ebp - 0x20]
push eax
push 0
mov byte [ebp - 0x15], 0
call esi
test eax, eax
jne 0x10028bf1
mov byte [ebp - 0xa], al
lea eax, [ebp - 0x14]
push eax
push 0
mov dword [ebp - 0x14], 0x6d616554
mov dword [ebp - 0x10], 0x77656956
mov word [ebp - 0xc], 0x7265
call esi
test eax, eax
jne 0x10028bf1
lea eax, [ebp - 8]
mov dword [ebp - 8], 0x44796e41
push eax
push 0
mov dword [ebp - 4], 0x6b7365
call esi
test eax, eax
jne 0x10028bf1
mov dword [0x100c1104], eax
pop esi
mov esp, ebp
pop ebp
ret
mov dword [0x100c0700], 0
mov dword [0x100c4c70], 0
mov dword [0x100c03e0], 0
mov dword [0x100bff80], 0
mov dword [0x100c1288], 0
mov dword [0x100c13e8], 0
mov dword [0x100bff0c], 0
mov dword [0x100c03e8], 0
mov dword [0x100bf71c], 0
mov dword [0x100bbc44], 0
mov dword [0x100c06c0], 0
mov dword [0x100c1804], 0
mov dword [0x100bff58], 0
mov dword [0x100c0404], 0
mov dword [0x100bbadc], 0
mov dword [0x100bbba0], 0
mov dword [0x100c0540], 0
mov dword [0x100bb76c], 0
mov dword [0x100bbb28], 0
mov dword [0x100c03f4], 0
mov dword [0x100bf774], 0
mov dword [0x100c4cc0], 0
mov dword [0x100bbc74], 0
mov dword [0x100bb6f8], 0
mov dword [0x100c53a8], 0
mov dword [0x100bf314], 0
mov dword [0x100c1f50], 0
mov dword [0x100c1034], 0
mov dword [0x100c1100], 0
mov dword [0x100bbc50], 0
mov dword [0x100bb6fc], 0
mov dword [0x100c03ac], 0
mov dword [0x100c10c0], 0
mov dword [0x100c53a0], 0
mov dword [0x100bf320], 0
mov dword [0x100c4cbc], 0
mov dword [0x100bf724], 0
mov dword [0x100bbb08], 0
mov dword [0x100bbad4], 0
mov dword [0x100bbc54], 0
mov dword [0x100c1030], 0
mov dword [0x100bbbc8], 0
mov dword [0x100c5170], 0
mov dword [0x100c1f6c], 0
mov dword [0x100c13f4], 0
mov dword [0x100bb6f4], 0
mov dword [0x100c0588], 0
mov dword [0x100c0670], 0
mov dword [0x100c1260], 0
mov dword [0x100bb768], 0
mov dword [0x100c05cc], 0
mov dword [0x100c1808], 0
mov dword [0x100c53b0], 0
mov dword [0x100c10b4], 0
mov dword [0x100c03b4], 0
mov dword [0x100bb2ec], 0
mov dword [0x100c4d84], 0
mov dword [0x100c03f0], 0
mov dword [0x100c06b8], 0
mov dword [0x100c10ac], 0
mov dword [0x100bb784], 0
mov dword [0x100c1268], 0
mov dword [0x100bb78c], 0
mov dword [0x100c03f8], 0
mov dword [0x100bbaf0], 0
mov dword [0x100bf32c], 0
mov dword [0x100c4c84], 0
mov dword [0x100bff3c], 0
mov dword [0x100bf770], 0
mov dword [0x100bbcdc], 0
mov dword [0x100c12a0], 0
mov dword [0x100c1b60], 0
mov dword [0x100bf720], 0
mov dword [0x100bb6ec], 0
mov dword [0x100bbae8], 0
mov dword [0x100bbae4], 0
mov dword [0x100c128c], 0
mov dword [0x100bb778], 0
mov dword [0x100bff74], 0
mov dword [0x100c4cec], 0
mov dword [0x100bff54], 0
xorps xmm0, xmm0
mov dword [0x100c17ec], 0
mov eax, 1
mov dword [0x100bf910], 0
mov dword [0x100c0c10], 0
mov dword [0x100c05e8], 0
mov dword [0x100c1250], 0
mov dword [0x100c039c], 0
mov dword [0x100bef0c], 0
mov dword [0x100c0c2c], 0
mov dword [0x100bb794], 0
mov dword [0x100bf310], 0
mov dword [0x100bb8a8], 0
mov dword [0x100bb790], 0
mov dword [0x100c53cc], 0
mov dword [0x100c0530], 0
mov dword [0x100c0544], 0
mov dword [0x100c03a8], 0
mov dword [0x100c1f68], 0
mov dword [0x100bff14], 0
mov dword [0x100bf758], 0
mov dword [0x100c1280], 0
mov dword [0x100c4cf8], 0
mov dword [0x100c03b8], 0
mov dword [0x100bbb1c], 0
mov dword [0x100c0c30], 0
mov dword [0x100c0528], 0
mov dword [0x100bf2fc], 0
mov dword [0x100c1298], 0
mov dword [0x100c05fc], 0
mov dword [0x100bf75c], 0
mov dword [0x100bb8b4], 0
mov dword [0x100c05f4], 0
mov dword [0x100bb770], 0
mov dword [0x100b8018], 0
mov dword [0x100c10dc], 0
mov dword [0x100c4cf4], 0
movups xmmword [0x100c1820], xmm0
mov dword [0x100c1848], 0
movups xmmword [0x100c1830], xmm0
mov dword [0x100c4cb4], 1
movq qword [0x100c1840], xmm0
mov dword [0x100c1104], eax
pop esi
mov esp, ebp
pop ebp
ret
mov dword [0x100c1104], 0
mov esp, ebp
pop ebp
ret