Function at 0x100280b0
Capabilities:
Contain obfuscated stackstrings
Encrypt data using rc4 prga

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x20
cmp dword [0x100b78bc], 0
je 0x10028615
mov ecx, 0x4c
xor edx, edx
nop word [eax + eax]
mov al, byte [edx + 0x100a3e8c]
xor al, cl
inc ecx
mov byte [ebp + edx - 0x20], al
and ecx, 0x800000ff
jns 0x100280ed
dec ecx
or ecx, 0xffffff00
inc ecx
inc edx
cmp edx, 0xb
jl 0x100280d0
push esi
mov esi, dword [sym.imp.USER32.dll_FindWindowA]
lea eax, [ebp - 0x20]
push eax
push 0
mov byte [ebp - 0x15], 0
call esi
test eax, eax
jne 0x10028151
mov byte [ebp - 0xa], al
lea eax, [ebp - 0x14]
push eax
push 0
mov dword [ebp - 0x14], 0x6d616554
mov dword [ebp - 0x10], 0x77656956
mov word [ebp - 0xc], 0x7265
call esi
test eax, eax
jne 0x10028151
lea eax, [ebp - 8]
mov dword [ebp - 8], 0x44796e41
push eax
push 0
mov dword [ebp - 4], 0x6b7365
call esi
test eax, eax
jne 0x10028151
mov dword [0x100bd13c], eax
pop esi
mov esp, ebp
pop ebp
ret
mov dword [0x100bc73c], 0
mov dword [0x100bdfac], 0
mov dword [0x100bc418], 0
mov dword [0x100bbfb0], 0
mov dword [0x100bd2c0], 0
mov dword [0x100bd41c], 0
mov dword [0x100bbf34], 0
mov dword [0x100bc41c], 0
mov dword [0x100bb73c], 0
mov dword [0x100b7c64], 0
mov dword [0x100bc6fc], 0
mov dword [0x100bd838], 0
mov dword [0x100bbf84], 0
mov dword [0x100bc438], 0
mov dword [0x100b7b00], 0
mov dword [0x100b7b5c], 0
mov dword [0x100bc57c], 0
mov dword [0x100b778c], 0
mov dword [0x100b7b4c], 0
mov dword [0x100bc428], 0
mov dword [0x100bb928], 0
mov dword [0x100c0cfc], 0
mov dword [0x100b7c98], 0
mov dword [0x100b7718], 0
mov dword [0x100c13f0], 0
mov dword [0x100bb338], 0
mov dword [0x100bdf90], 0
mov dword [0x100bd074], 0
mov dword [0x100bd138], 0
mov dword [0x100b7c70], 0
mov dword [0x100b771c], 0
mov dword [0x100bc3e0], 0
mov dword [0x100bd0fc], 0
mov dword [0x100c13e8], 0
mov dword [0x100bb340], 0
mov dword [0x100c0cf8], 0
mov dword [0x100bb744], 0
mov dword [0x100b7b2c], 0
mov dword [0x100b7af8], 0
mov dword [0x100b7c74], 0
mov dword [0x100bd070], 0
mov dword [0x100b7be8], 0
mov dword [0x100c0dcc], 0
mov dword [0x100bdfa8], 0
mov dword [0x100bd428], 0
mov dword [0x100b7714], 0
mov dword [0x100bc5c4], 0
mov dword [0x100bc6b0], 0
mov dword [0x100bd298], 0
mov dword [0x100b7788], 0
mov dword [0x100bc608], 0
mov dword [0x100bd83c], 0
mov dword [0x100c13f8], 0
mov dword [0x100bd0f0], 0
mov dword [0x100bc3e8], 0
mov dword [0x100b730c], 0
mov dword [0x100c0dc8], 0
mov dword [0x100bc424], 0
mov dword [0x100bc6f4], 0
mov dword [0x100bd0e8], 0
mov dword [0x100b77a4], 0
mov dword [0x100bd2a0], 0
mov dword [0x100b77ac], 0
mov dword [0x100bc42c], 0
mov dword [0x100b7b14], 0
mov dword [0x100bb34c], 0
mov dword [0x100c0cc0], 0
mov dword [0x100bbf68], 0
mov dword [0x100bb794], 0
mov dword [0x100b7c9c], 0
mov dword [0x100bd2d4], 0
mov dword [0x100bdb9c], 0
mov dword [0x100bb740], 0
mov dword [0x100b770c], 0
mov dword [0x100b7b0c], 0
mov dword [0x100b7b08], 0
mov dword [0x100bd2c4], 0
mov dword [0x100b7798], 0
mov dword [0x100bbfa0], 0
mov dword [0x100c0d30], 0
mov dword [0x100bbf80], 0
xorps xmm0, xmm0
mov dword [0x100bd820], 0
mov eax, 1
mov dword [0x100bb934], 0
mov dword [0x100bcc4c], 0
mov dword [0x100bc628], 0
mov dword [0x100bd288], 0
mov dword [0x100bc3d0], 0
mov dword [0x100bb318], 0
mov dword [0x100bcc6c], 0
mov dword [0x100b77b4], 0
mov dword [0x100bb334], 0
mov dword [0x100b78c8], 0
mov dword [0x100b77b0], 0
mov dword [0x100c1414], 0
mov dword [0x100bc56c], 0
mov dword [0x100bc580], 0
mov dword [0x100bc3dc], 0
mov dword [0x100bdfa4], 0
mov dword [0x100bbf3c], 0
mov dword [0x100bb778], 0
mov dword [0x100bd2b8], 0
mov dword [0x100c0d3c], 0
mov dword [0x100bc3ec], 0
mov dword [0x100b7b40], 0
mov dword [0x100bcc70], 0
mov dword [0x100bc564], 0
mov dword [0x100bb320], 0
mov dword [0x100bd2cc], 0
mov dword [0x100bc640], 0
mov dword [0x100bb77c], 0
mov dword [0x100b78d4], 0
mov dword [0x100bc638], 0
mov dword [0x100b7790], 0
mov dword [0x100b4018], 0
mov dword [0x100bd118], 0
mov dword [0x100c0d38], 0
movups xmmword [0x100bd858], xmm0
mov dword [0x100bd880], 0
movups xmmword [0x100bd868], xmm0
mov dword [0x100c0cf0], 1
movq qword [0x100bd878], xmm0
mov dword [0x100bd13c], eax
pop esi
mov esp, ebp
pop ebp
ret
mov dword [0x100bd13c], 0
mov esp, ebp
pop ebp
ret