Function at 0x100284c0
Capabilities:
Contain obfuscated stackstrings
Encrypt data using rc4 prga

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x20
cmp dword [0x100b78e0], 0
je 0x10028a25
mov ecx, 0x4c
xor edx, edx
nop word [eax + eax]
mov al, byte [edx + 0x100a3f38]
xor al, cl
inc ecx
mov byte [ebp + edx - 0x20], al
and ecx, 0x800000ff
jns 0x100284fd
dec ecx
or ecx, 0xffffff00
inc ecx
inc edx
cmp edx, 0xb
jl 0x100284e0
push esi
mov esi, dword [sym.imp.USER32.dll_FindWindowA]
lea eax, [ebp - 0x20]
push eax
push 0
mov byte [ebp - 0x15], 0
call esi
test eax, eax
jne 0x10028561
mov byte [ebp - 0xa], al
lea eax, [ebp - 0x14]
push eax
push 0
mov dword [ebp - 0x14], 0x6d616554
mov dword [ebp - 0x10], 0x77656956
mov word [ebp - 0xc], 0x7265
call esi
test eax, eax
jne 0x10028561
lea eax, [ebp - 8]
mov dword [ebp - 8], 0x44796e41
push eax
push 0
mov dword [ebp - 4], 0x6b7365
call esi
test eax, eax
jne 0x10028561
mov dword [0x100bd750], eax
pop esi
mov esp, ebp
pop ebp
ret
mov dword [0x100bcd50], 0
mov dword [0x100c12c0], 0
mov dword [0x100bca14], 0
mov dword [0x100bc5b8], 0
mov dword [0x100bd8d0], 0
mov dword [0x100bd8ec], 0
mov dword [0x100bc34c], 0
mov dword [0x100bca24], 0
mov dword [0x100bb76c], 0
mov dword [0x100b7c8c], 0
mov dword [0x100bcd10], 0
mov dword [0x100bde48], 0
mov dword [0x100bc39c], 0
mov dword [0x100bca40], 0
mov dword [0x100b7b24], 0
mov dword [0x100b7be8], 0
mov dword [0x100bcb84], 0
mov dword [0x100b77b0], 0
mov dword [0x100b7b70], 0
mov dword [0x100bca30], 0
mov dword [0x100bbd40], 0
mov dword [0x100c1310], 0
mov dword [0x100b7cc0], 0
mov dword [0x100b773c], 0
mov dword [0x100c1a04], 0
mov dword [0x100bb364], 0
mov dword [0x100be5a0], 0
mov dword [0x100bd684], 0
mov dword [0x100bd74c], 0
mov dword [0x100b7c98], 0
mov dword [0x100b7740], 0
mov dword [0x100bc9e8], 0
mov dword [0x100bd710], 0
mov dword [0x100c19fc], 0
mov dword [0x100bb370], 0
mov dword [0x100c130c], 0
mov dword [0x100bb774], 0
mov dword [0x100b7b50], 0
mov dword [0x100b7b1c], 0
mov dword [0x100b7c9c], 0
mov dword [0x100bd680], 0
mov dword [0x100b7c10], 0
mov dword [0x100c17c8], 0
mov dword [0x100be5bc], 0
mov dword [0x100bda38], 0
mov dword [0x100b7738], 0
mov dword [0x100bcbcc], 0
mov dword [0x100bccc0], 0
mov dword [0x100bd8ac], 0
mov dword [0x100b77ac], 0
mov dword [0x100bcc14], 0
mov dword [0x100bde4c], 0
mov dword [0x100c1a0c], 0
mov dword [0x100bd704], 0
mov dword [0x100bc9f0], 0
mov dword [0x100b732c], 0
mov dword [0x100c13dc], 0
mov dword [0x100bca2c], 0
mov dword [0x100bcd08], 0
mov dword [0x100bd6fc], 0
mov dword [0x100b77c8], 0
mov dword [0x100bd8b4], 0
mov dword [0x100b77d0], 0
mov dword [0x100bca34], 0
mov dword [0x100b7b38], 0
mov dword [0x100bb37c], 0
mov dword [0x100c12d4], 0
mov dword [0x100bc380], 0
mov dword [0x100bbbac], 0
mov dword [0x100b7cc4], 0
mov dword [0x100bd8e8], 0
mov dword [0x100be1ac], 0
mov dword [0x100bb770], 0
mov dword [0x100b753c], 0
mov dword [0x100b7b30], 0
mov dword [0x100b7b2c], 0
mov dword [0x100bd8d4], 0
mov dword [0x100b77bc], 0
mov dword [0x100bc5a8], 0
mov dword [0x100c1344], 0
mov dword [0x100bc398], 0
xorps xmm0, xmm0
mov dword [0x100bde30], 0
mov eax, 1
mov dword [0x100bbd4c], 0
mov dword [0x100bd260], 0
mov dword [0x100bcc34], 0
mov dword [0x100bd89c], 0
mov dword [0x100bc9d8], 0
mov dword [0x100bb340], 0
mov dword [0x100bd27c], 0
mov dword [0x100b78d8], 0
mov dword [0x100bb360], 0
mov dword [0x100b78ec], 0
mov dword [0x100b77d4], 0
mov dword [0x100c1a28], 0
mov dword [0x100bcb74], 0
mov dword [0x100bcb88], 0
mov dword [0x100bc9e4], 0
mov dword [0x100be5b8], 0
mov dword [0x100bc354], 0
mov dword [0x100bbb90], 0
mov dword [0x100bd8c8], 0
mov dword [0x100c1350], 0
mov dword [0x100bc9f4], 0
mov dword [0x100b7b64], 0
mov dword [0x100bd280], 0
mov dword [0x100bcb6c], 0
mov dword [0x100bb348], 0
mov dword [0x100bd8e0], 0
mov dword [0x100bcc4c], 0
mov dword [0x100bbb94], 0
mov dword [0x100b78f8], 0
mov dword [0x100bcc44], 0
mov dword [0x100b77b4], 0
mov dword [0x100b4018], 0
mov dword [0x100bd72c], 0
mov dword [0x100c134c], 0
movups xmmword [0x100bde68], xmm0
mov dword [0x100bde90], 0
movups xmmword [0x100bde78], xmm0
mov dword [0x100c1304], 1
movq qword [0x100bde88], xmm0
mov dword [0x100bd750], eax
pop esi
mov esp, ebp
pop ebp
ret
mov dword [0x100bd750], 0
mov esp, ebp
pop ebp
ret