Function at 0x100287a0
Capabilities:
Contain obfuscated stackstrings
Encrypt data using rc4 prga

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x20
cmp dword [0x100b785c], 0
je 0x10028d05
mov ecx, 0x4c
xor edx, edx
nop word [eax + eax]
mov al, byte [edx + 0x100a3ecc]
xor al, cl
inc ecx
mov byte [ebp + edx - 0x20], al
and ecx, 0x800000ff
jns 0x100287dd
dec ecx
or ecx, 0xffffff00
inc ecx
inc edx
cmp edx, 0xb
jl 0x100287c0
push esi
mov esi, dword [sym.imp.USER32.dll_FindWindowA]
lea eax, [ebp - 0x20]
push eax
push 0
mov byte [ebp - 0x15], 0
call esi
test eax, eax
jne 0x10028841
mov byte [ebp - 0xa], al
lea eax, [ebp - 0x14]
push eax
push 0
mov dword [ebp - 0x14], 0x6d616554
mov dword [ebp - 0x10], 0x77656956
mov word [ebp - 0xc], 0x7265
call esi
test eax, eax
jne 0x10028841
lea eax, [ebp - 8]
mov dword [ebp - 8], 0x44796e41
push eax
push 0
mov dword [ebp - 4], 0x6b7365
call esi
test eax, eax
jne 0x10028841
mov dword [0x100bd0c4], eax
pop esi
mov esp, ebp
pop ebp
ret
mov dword [0x100bc6c0], 0
mov dword [0x100bdf2c], 0
mov dword [0x100bc3a0], 0
mov dword [0x100bbf40], 0
mov dword [0x100bd248], 0
mov dword [0x100bd3a8], 0
mov dword [0x100bbecc], 0
mov dword [0x100bc3a8], 0
mov dword [0x100bb6dc], 0
mov dword [0x100b7c04], 0
mov dword [0x100bc680], 0
mov dword [0x100bd7c4], 0
mov dword [0x100bbf18], 0
mov dword [0x100bc3c4], 0
mov dword [0x100b7a9c], 0
mov dword [0x100b7b60], 0
mov dword [0x100bc500], 0
mov dword [0x100b772c], 0
mov dword [0x100b7ae8], 0
mov dword [0x100bc3b4], 0
mov dword [0x100bb734], 0
mov dword [0x100c0c7c], 0
mov dword [0x100b7c34], 0
mov dword [0x100b76b8], 0
mov dword [0x100c1364], 0
mov dword [0x100bb2d4], 0
mov dword [0x100bdf10], 0
mov dword [0x100bcff4], 0
mov dword [0x100bd0c0], 0
mov dword [0x100b7c10], 0
mov dword [0x100b76bc], 0
mov dword [0x100bc36c], 0
mov dword [0x100bd080], 0
mov dword [0x100c135c], 0
mov dword [0x100bb2e0], 0
mov dword [0x100c0c78], 0
mov dword [0x100bb6e4], 0
mov dword [0x100b7ac8], 0
mov dword [0x100b7a94], 0
mov dword [0x100b7c14], 0
mov dword [0x100bcff0], 0
mov dword [0x100b7b88], 0
mov dword [0x100c0d44], 0
mov dword [0x100bdf28], 0
mov dword [0x100bd3b4], 0
mov dword [0x100b76b4], 0
mov dword [0x100bc548], 0
mov dword [0x100bc630], 0
mov dword [0x100bd220], 0
mov dword [0x100b7728], 0
mov dword [0x100bc58c], 0
mov dword [0x100bd7c8], 0
mov dword [0x100c136c], 0
mov dword [0x100bd074], 0
mov dword [0x100bc374], 0
mov dword [0x100b72ac], 0
mov dword [0x100c0d40], 0
mov dword [0x100bc3b0], 0
mov dword [0x100bc678], 0
mov dword [0x100bd06c], 0
mov dword [0x100b7744], 0
mov dword [0x100bd228], 0
mov dword [0x100b774c], 0
mov dword [0x100bc3b8], 0
mov dword [0x100b7ab0], 0
mov dword [0x100bb2ec], 0
mov dword [0x100c0c40], 0
mov dword [0x100bbefc], 0
mov dword [0x100bb730], 0
mov dword [0x100b7c9c], 0
mov dword [0x100bd260], 0
mov dword [0x100bdb20], 0
mov dword [0x100bb6e0], 0
mov dword [0x100b76ac], 0
mov dword [0x100b7aa8], 0
mov dword [0x100b7aa4], 0
mov dword [0x100bd24c], 0
mov dword [0x100b7738], 0
mov dword [0x100bbf34], 0
mov dword [0x100c0ca8], 0
mov dword [0x100bbf14], 0
xorps xmm0, xmm0
mov dword [0x100bd7ac], 0
mov eax, 1
mov dword [0x100bb8d0], 0
mov dword [0x100bcbd0], 0
mov dword [0x100bc5a8], 0
mov dword [0x100bd210], 0
mov dword [0x100bc35c], 0
mov dword [0x100baecc], 0
mov dword [0x100bcbec], 0
mov dword [0x100b7754], 0
mov dword [0x100bb2d0], 0
mov dword [0x100b7868], 0
mov dword [0x100b7750], 0
mov dword [0x100c1388], 0
mov dword [0x100bc4f0], 0
mov dword [0x100bc504], 0
mov dword [0x100bc368], 0
mov dword [0x100bdf24], 0
mov dword [0x100bbed4], 0
mov dword [0x100bb718], 0
mov dword [0x100bd240], 0
mov dword [0x100c0cb4], 0
mov dword [0x100bc378], 0
mov dword [0x100b7adc], 0
mov dword [0x100bcbf0], 0
mov dword [0x100bc4e8], 0
mov dword [0x100bb2bc], 0
mov dword [0x100bd258], 0
mov dword [0x100bc5bc], 0
mov dword [0x100bb71c], 0
mov dword [0x100b7874], 0
mov dword [0x100bc5b4], 0
mov dword [0x100b7730], 0
mov dword [0x100b4018], 0
mov dword [0x100bd09c], 0
mov dword [0x100c0cb0], 0
movups xmmword [0x100bd7e0], xmm0
mov dword [0x100bd808], 0
movups xmmword [0x100bd7f0], xmm0
mov dword [0x100c0c70], 1
movq qword [0x100bd800], xmm0
mov dword [0x100bd0c4], eax
pop esi
mov esp, ebp
pop ebp
ret
mov dword [0x100bd0c4], 0
mov esp, ebp
pop ebp
ret