Function at 0x10027400
Capabilities:
Contain obfuscated stackstrings
Encrypt data using rc4 prga

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x20
cmp dword [0x100b0724], 0
je 0x1002796f
mov ecx, 0x4c
xor edx, edx
nop word [eax + eax]
mov al, byte [edx + 0x10097e04]
xor al, cl
inc ecx
mov byte [ebp + edx - 0x20], al
and ecx, 0x800000ff
jns 0x1002743d
dec ecx
or ecx, 0xffffff00
inc ecx
inc edx
cmp edx, 0xb
jl 0x10027420
push esi
mov esi, dword [sym.imp.USER32.dll_FindWindowA]
lea eax, [ebp - 0x20]
push eax
push 0
mov byte [ebp - 0x15], 0
call esi
test eax, eax
jne 0x100274a1
mov byte [ebp - 0xa], al
lea eax, [ebp - 0x14]
push eax
push 0
mov dword [ebp - 0x14], 0x6d616554
mov dword [ebp - 0x10], 0x77656956
mov word [ebp - 0xc], 0x7265
call esi
test eax, eax
jne 0x100274a1
lea eax, [ebp - 8]
mov dword [ebp - 8], 0x44796e41
push eax
push 0
mov dword [ebp - 4], 0x6b7365
call esi
test eax, eax
jne 0x100274a1
mov dword [0x100ac04c], eax
pop esi
mov esp, ebp
pop ebp
ret
mov dword [0x100ab654], 0
mov dword [0x100afa88], 0
mov dword [0x100ab344], 0
mov dword [0x100aaeec], 0
mov dword [0x100ac0a8], 0
mov dword [0x100ac20c], 0
mov dword [0x100aae70], 0
mov dword [0x100ab354], 0
mov dword [0x100aa68c], 0
mov dword [0x100b0abc], 0
mov dword [0x100ab614], 0
mov dword [0x100ac628], 0
mov dword [0x100aaec0], 0
mov dword [0x100ab370], 0
mov dword [0x100b095c], 0
mov dword [0x100b0a1c], 0
mov dword [0x100ab4ac], 0
mov dword [0x100b05fc], 0
mov dword [0x100b09a4], 0
mov dword [0x100ab360], 0
mov dword [0x100aa6dc], 0
mov dword [0x100afad4], 0
mov dword [0x100b0aec], 0
mov dword [0x100b0588], 0
mov dword [0x100b013c], 0
mov dword [0x100aa28c], 0
mov dword [0x100ac984], 0
mov dword [0x100abf8c], 0
mov dword [0x100ac048], 0
mov dword [0x100b0ac8], 0
mov dword [0x100b058c], 0
mov dword [0x100ab318], 0
mov dword [0x100ac014], 0
mov dword [0x100b0134], 0
mov dword [0x100aa290], 0
mov dword [0x100afad0], 0
mov dword [0x100aa694], 0
mov dword [0x100b0988], 0
mov dword [0x100b0954], 0
mov dword [0x100b0acc], 0
mov dword [0x100abf88], 0
mov dword [0x100b0a40], 0
mov dword [0x100afb1c], 0
mov dword [0x100acd84], 0
mov dword [0x100ac218], 0
mov dword [0x100b0584], 0
mov dword [0x100ab4ec], 0
mov dword [0x100ab5d0], 0
mov dword [0x100ac080], 0
mov dword [0x100b05f8], 0
mov dword [0x100ab52c], 0
mov dword [0x100ac62c], 0
mov dword [0x100b0144], 0
mov dword [0x100ac00c], 0
mov dword [0x100ab320], 0
mov dword [0x100b0180], 0
mov dword [0x100afb18], 0
mov dword [0x100ab35c], 0
mov dword [0x100ab60c], 0
mov dword [0x100ac004], 0
mov dword [0x100b060c], 0
mov dword [0x100ac088], 0
mov dword [0x100b0610], 0
mov dword [0x100ab364], 0
mov dword [0x100b0970], 0
mov dword [0x100aa29c], 0
mov dword [0x100afa98], 0
mov dword [0x100aaea4], 0
mov dword [0x100aa6d8], 0
mov dword [0x100b0b54], 0
mov dword [0x100ac0c4], 0
mov dword [0x100ac978], 0
mov dword [0x100aa690], 0
mov dword [0x100b057c], 0
mov dword [0x100b0968], 0
mov dword [0x100b0964], 0
mov dword [0x100abb94], 0
mov dword [0x100ac0ac], 0
mov dword [0x100b0604], 0
mov dword [0x100aaee0], 0
mov dword [0x100afafc], 0
xorps xmm0, xmm0
mov dword [0x100aaebc], 0
mov eax, 1
mov dword [0x100ac610], 0
mov dword [0x100aa878], 0
mov dword [0x100abb68], 0
mov dword [0x100ab548], 0
mov dword [0x100ac070], 0
mov dword [0x100ab308], 0
mov dword [0x100b3d84], 0
mov dword [0x100abb84], 0
mov dword [0x100b071c], 0
mov dword [0x100aa288], 0
mov dword [0x100b072c], 0
mov dword [0x100b0614], 0
mov dword [0x100b015c], 0
mov dword [0x100ab49c], 0
mov dword [0x100ab4b0], 0
mov dword [0x100ab314], 0
mov dword [0x100acd80], 0
mov dword [0x100aae78], 0
mov dword [0x100aa6c8], 0
mov dword [0x100ac0a0], 0
mov dword [0x100afb08], 0
mov dword [0x100ab324], 0
mov dword [0x100b0998], 0
mov dword [0x100abb88], 0
mov dword [0x100ab494], 0
mov dword [0x100b4178], 0
mov dword [0x100ac0b8], 0
mov dword [0x100ab55c], 0
mov dword [0x100aa6cc], 0
mov dword [0x100b0738], 0
mov dword [0x100ab554], 0
mov dword [0x100b0600], 0
mov dword [0x100a7458], 0
mov dword [0x100ac028], 0
mov dword [0x100afb04], 0
movups xmmword [0x100ac640], xmm0
mov dword [0x100ac668], 0
movups xmmword [0x100ac650], xmm0
mov dword [0x100afac8], 1
movq qword [0x100ac660], xmm0
mov dword [0x100ac04c], eax
pop esi
mov esp, ebp
pop ebp
ret
mov dword [0x100ac04c], 0
mov esp, ebp
pop ebp
ret