Function at 0x100284c0
Capabilities:
Contain obfuscated stackstrings
Encrypt data using rc4 prga

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x20
cmp dword [0x100ba920], 0
je 0x10028a25
mov ecx, 0x4c
xor edx, edx
nop word [eax + eax]
mov al, byte [edx + 0x100a5f58]
xor al, cl
inc ecx
mov byte [ebp + edx - 0x20], al
and ecx, 0x800000ff
jns 0x100284fd
dec ecx
or ecx, 0xffffff00
inc ecx
inc edx
cmp edx, 0xb
jl 0x100284e0
push esi
mov esi, dword [sym.imp.USER32.dll_FindWindowA]
lea eax, [ebp - 0x20]
push eax
push 0
mov byte [ebp - 0x15], 0
call esi
test eax, eax
jne 0x10028561
mov byte [ebp - 0xa], al
lea eax, [ebp - 0x14]
push eax
push 0
mov dword [ebp - 0x14], 0x6d616554
mov dword [ebp - 0x10], 0x77656956
mov word [ebp - 0xc], 0x7265
call esi
test eax, eax
jne 0x10028561
lea eax, [ebp - 8]
mov dword [ebp - 8], 0x44796e41
push eax
push 0
mov dword [ebp - 4], 0x6b7365
call esi
test eax, eax
jne 0x10028561
mov dword [0x100c0798], eax
pop esi
mov esp, ebp
pop ebp
ret
mov dword [0x100bfd90], 0
mov dword [0x100c4308], 0
mov dword [0x100bfa54], 0
mov dword [0x100bf5f8], 0
mov dword [0x100c0918], 0
mov dword [0x100c0934], 0
mov dword [0x100bf38c], 0
mov dword [0x100bfa64], 0
mov dword [0x100be7ac], 0
mov dword [0x100baccc], 0
mov dword [0x100bfd50], 0
mov dword [0x100c0e90], 0
mov dword [0x100bf3dc], 0
mov dword [0x100bfa80], 0
mov dword [0x100bab64], 0
mov dword [0x100bac28], 0
mov dword [0x100bfbc4], 0
mov dword [0x100ba7f0], 0
mov dword [0x100babb0], 0
mov dword [0x100bfa70], 0
mov dword [0x100bed80], 0
mov dword [0x100c4358], 0
mov dword [0x100bad00], 0
mov dword [0x100ba77c], 0
mov dword [0x100c4a4c], 0
mov dword [0x100be3a4], 0
mov dword [0x100c15e8], 0
mov dword [0x100c06cc], 0
mov dword [0x100c0794], 0
mov dword [0x100bacd8], 0
mov dword [0x100ba780], 0
mov dword [0x100bfa28], 0
mov dword [0x100c0758], 0
mov dword [0x100c4a44], 0
mov dword [0x100be3b0], 0
mov dword [0x100c4354], 0
mov dword [0x100be7b4], 0
mov dword [0x100bab90], 0
mov dword [0x100bab5c], 0
mov dword [0x100bacdc], 0
mov dword [0x100c06c8], 0
mov dword [0x100bac50], 0
mov dword [0x100c4810], 0
mov dword [0x100c1604], 0
mov dword [0x100c0a80], 0
mov dword [0x100ba778], 0
mov dword [0x100bfc0c], 0
mov dword [0x100bfd00], 0
mov dword [0x100c08f4], 0
mov dword [0x100ba7ec], 0
mov dword [0x100bfc54], 0
mov dword [0x100c0e94], 0
mov dword [0x100c4a54], 0
mov dword [0x100c074c], 0
mov dword [0x100bfa30], 0
mov dword [0x100ba36c], 0
mov dword [0x100c4424], 0
mov dword [0x100bfa6c], 0
mov dword [0x100bfd48], 0
mov dword [0x100c0744], 0
mov dword [0x100ba808], 0
mov dword [0x100c08fc], 0
mov dword [0x100ba810], 0
mov dword [0x100bfa74], 0
mov dword [0x100bab78], 0
mov dword [0x100be3bc], 0
mov dword [0x100c431c], 0
mov dword [0x100bf3c0], 0
mov dword [0x100bebec], 0
mov dword [0x100bad04], 0
mov dword [0x100c0930], 0
mov dword [0x100c11f4], 0
mov dword [0x100be7b0], 0
mov dword [0x100ba57c], 0
mov dword [0x100bab70], 0
mov dword [0x100bab6c], 0
mov dword [0x100c091c], 0
mov dword [0x100ba7fc], 0
mov dword [0x100bf5e8], 0
mov dword [0x100c438c], 0
mov dword [0x100bf3d8], 0
xorps xmm0, xmm0
mov dword [0x100c0e78], 0
mov eax, 1
mov dword [0x100bed8c], 0
mov dword [0x100c02a8], 0
mov dword [0x100bfc74], 0
mov dword [0x100c08e4], 0
mov dword [0x100bfa18], 0
mov dword [0x100be380], 0
mov dword [0x100c02c4], 0
mov dword [0x100ba918], 0
mov dword [0x100be3a0], 0
mov dword [0x100ba92c], 0
mov dword [0x100ba814], 0
mov dword [0x100c4a70], 0
mov dword [0x100bfbb4], 0
mov dword [0x100bfbc8], 0
mov dword [0x100bfa24], 0
mov dword [0x100c1600], 0
mov dword [0x100bf394], 0
mov dword [0x100bebd0], 0
mov dword [0x100c0910], 0
mov dword [0x100c4398], 0
mov dword [0x100bfa34], 0
mov dword [0x100baba4], 0
mov dword [0x100c02c8], 0
mov dword [0x100bfbac], 0
mov dword [0x100be388], 0
mov dword [0x100c0928], 0
mov dword [0x100bfc8c], 0
mov dword [0x100bebd4], 0
mov dword [0x100ba938], 0
mov dword [0x100bfc84], 0
mov dword [0x100ba7f4], 0
mov dword [0x100b7018], 0
mov dword [0x100c0774], 0
mov dword [0x100c4394], 0
movups xmmword [0x100c0eb0], xmm0
mov dword [0x100c0ed8], 0
movups xmmword [0x100c0ec0], xmm0
mov dword [0x100c434c], 1
movq qword [0x100c0ed0], xmm0
mov dword [0x100c0798], eax
pop esi
mov esp, ebp
pop ebp
ret
mov dword [0x100c0798], 0
mov esp, ebp
pop ebp
ret