Function at 0x10028350
Capabilities:
Contain obfuscated stackstrings
Encrypt data using rc4 prga

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x20
cmp dword [0x100ba88c], 0
je 0x100288b5
mov ecx, 0x4c
xor edx, edx
nop word [eax + eax]
mov al, byte [edx + 0x100a5e98]
xor al, cl
inc ecx
mov byte [ebp + edx - 0x20], al
and ecx, 0x800000ff
jns 0x1002838d
dec ecx
or ecx, 0xffffff00
inc ecx
inc edx
cmp edx, 0xb
jl 0x10028370
push esi
mov esi, dword [sym.imp.USER32.dll_FindWindowA]
lea eax, [ebp - 0x20]
push eax
push 0
mov byte [ebp - 0x15], 0
call esi
test eax, eax
jne 0x100283f1
mov byte [ebp - 0xa], al
lea eax, [ebp - 0x14]
push eax
push 0
mov dword [ebp - 0x14], 0x6d616554
mov dword [ebp - 0x10], 0x77656956
mov word [ebp - 0xc], 0x7265
call esi
test eax, eax
jne 0x100283f1
lea eax, [ebp - 8]
mov dword [ebp - 8], 0x44796e41
push eax
push 0
mov dword [ebp - 4], 0x6b7365
call esi
test eax, eax
jne 0x100283f1
mov dword [0x100c00f0], eax
pop esi
mov esp, ebp
pop ebp
ret
mov dword [0x100bf6ec], 0
mov dword [0x100c2358], 0
mov dword [0x100bf3d0], 0
mov dword [0x100bef70], 0
mov dword [0x100c0274], 0
mov dword [0x100c03d4], 0
mov dword [0x100beefc], 0
mov dword [0x100bf3d8], 0
mov dword [0x100be70c], 0
mov dword [0x100bac34], 0
mov dword [0x100bf6ac], 0
mov dword [0x100c07ec], 0
mov dword [0x100bef48], 0
mov dword [0x100bf3f4], 0
mov dword [0x100baac8], 0
mov dword [0x100bab8c], 0
mov dword [0x100bf530], 0
mov dword [0x100ba75c], 0
mov dword [0x100bab14], 0
mov dword [0x100bf3e4], 0
mov dword [0x100be764], 0
mov dword [0x100c23a0], 0
mov dword [0x100bac64], 0
mov dword [0x100ba6e8], 0
mov dword [0x100c2a88], 0
mov dword [0x100be304], 0
mov dword [0x100c0b4c], 0
mov dword [0x100c0020], 0
mov dword [0x100c00ec], 0
mov dword [0x100bac40], 0
mov dword [0x100ba6ec], 0
mov dword [0x100bf39c], 0
mov dword [0x100c00ac], 0
mov dword [0x100c2a80], 0
mov dword [0x100be310], 0
mov dword [0x100c239c], 0
mov dword [0x100be714], 0
mov dword [0x100baaf4], 0
mov dword [0x100baac0], 0
mov dword [0x100bac44], 0
mov dword [0x100bfc34], 0
mov dword [0x100babb4], 0
mov dword [0x100c2850], 0
mov dword [0x100c0f54], 0
mov dword [0x100c03e0], 0
mov dword [0x100ba6e4], 0
mov dword [0x100bf578], 0
mov dword [0x100bf660], 0
mov dword [0x100c024c], 0
mov dword [0x100ba758], 0
mov dword [0x100bf5bc], 0
mov dword [0x100c07f0], 0
mov dword [0x100c2a90], 0
mov dword [0x100c00a0], 0
mov dword [0x100bf3a4], 0
mov dword [0x100ba2dc], 0
mov dword [0x100c2464], 0
mov dword [0x100bf3e0], 0
mov dword [0x100bf6a8], 0
mov dword [0x100c0098], 0
mov dword [0x100ba774], 0
mov dword [0x100c0254], 0
mov dword [0x100ba77c], 0
mov dword [0x100bf3e8], 0
mov dword [0x100baadc], 0
mov dword [0x100be31c], 0
mov dword [0x100c2368], 0
mov dword [0x100bef2c], 0
mov dword [0x100be760], 0
mov dword [0x100baccc], 0
mov dword [0x100c028c], 0
mov dword [0x100c0b44], 0
mov dword [0x100be710], 0
mov dword [0x100ba6dc], 0
mov dword [0x100baad4], 0
mov dword [0x100baad0], 0
mov dword [0x100c0278], 0
mov dword [0x100ba768], 0
mov dword [0x100bef64], 0
mov dword [0x100c23cc], 0
mov dword [0x100bef44], 0
xorps xmm0, xmm0
mov dword [0x100c07d4], 0
mov eax, 1
mov dword [0x100be900], 0
mov dword [0x100bfbfc], 0
mov dword [0x100bf5d8], 0
mov dword [0x100c023c], 0
mov dword [0x100bf38c], 0
mov dword [0x100bdefc], 0
mov dword [0x100bfc18], 0
mov dword [0x100ba784], 0
mov dword [0x100be300], 0
mov dword [0x100ba898], 0
mov dword [0x100ba780], 0
mov dword [0x100c2aa8], 0
mov dword [0x100bf520], 0
mov dword [0x100bf534], 0
mov dword [0x100bf398], 0
mov dword [0x100c0f50], 0
mov dword [0x100bef04], 0
mov dword [0x100be748], 0
mov dword [0x100c026c], 0
mov dword [0x100c23d8], 0
mov dword [0x100bf3a8], 0
mov dword [0x100bab08], 0
mov dword [0x100bfc1c], 0
mov dword [0x100bf518], 0
mov dword [0x100be2ec], 0
mov dword [0x100c0284], 0
mov dword [0x100bf5ec], 0
mov dword [0x100be74c], 0
mov dword [0x100ba8a4], 0
mov dword [0x100bf5e4], 0
mov dword [0x100ba760], 0
mov dword [0x100b7018], 0
mov dword [0x100c00c8], 0
mov dword [0x100c23d4], 0
movups xmmword [0x100c0800], xmm0
mov dword [0x100c0828], 0
movups xmmword [0x100c0810], xmm0
mov dword [0x100c2398], 1
movq qword [0x100c0820], xmm0
mov dword [0x100c00f0], eax
pop esi
mov esp, ebp
pop ebp
ret
mov dword [0x100c00f0], 0
mov esp, ebp
pop ebp
ret