Function at 0x100289f0
Capabilities:
Contain obfuscated stackstrings
Encrypt data using rc4 prga

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x20
cmp dword [0x100bb8c0], 0
je 0x10028f55
mov ecx, 0x4c
xor edx, edx
nop word [eax + eax]
mov al, byte [edx + 0x100a6ee0]
xor al, cl
inc ecx
mov byte [ebp + edx - 0x20], al
and ecx, 0x800000ff
jns 0x10028a2d
dec ecx
or ecx, 0xffffff00
inc ecx
inc edx
cmp edx, 0xb
jl 0x10028a10
push esi
mov esi, dword [sym.imp.USER32.dll_FindWindowA]
lea eax, [ebp - 0x20]
push eax
push 0
mov byte [ebp - 0x15], 0
call esi
test eax, eax
jne 0x10028a91
mov byte [ebp - 0xa], al
lea eax, [ebp - 0x14]
push eax
push 0
mov dword [ebp - 0x14], 0x6d616554
mov dword [ebp - 0x10], 0x77656956
mov word [ebp - 0xc], 0x7265
call esi
test eax, eax
jne 0x10028a91
lea eax, [ebp - 8]
mov dword [ebp - 8], 0x44796e41
push eax
push 0
mov dword [ebp - 4], 0x6b7365
call esi
test eax, eax
jne 0x10028a91
mov dword [0x100c1148], eax
pop esi
mov esp, ebp
pop ebp
ret
mov dword [0x100c073c], 0
mov dword [0x100c1fc4], 0
mov dword [0x100c040c], 0
mov dword [0x100bffb0], 0
mov dword [0x100c12cc], 0
mov dword [0x100c142c], 0
mov dword [0x100bff38], 0
mov dword [0x100c041c], 0
mov dword [0x100bf740], 0
mov dword [0x100bbc68], 0
mov dword [0x100c06fc], 0
mov dword [0x100c1848], 0
mov dword [0x100bff88], 0
mov dword [0x100c0438], 0
mov dword [0x100bbb00], 0
mov dword [0x100bbbc4], 0
mov dword [0x100c0578], 0
mov dword [0x100bb790], 0
mov dword [0x100bbb4c], 0
mov dword [0x100c0428], 0
mov dword [0x100bf79c], 0
mov dword [0x100c4d18], 0
mov dword [0x100bbc98], 0
mov dword [0x100bb71c], 0
mov dword [0x100c5404], 0
mov dword [0x100bf338], 0
mov dword [0x100c1bbc], 0
mov dword [0x100c1078], 0
mov dword [0x100c1144], 0
mov dword [0x100bbc74], 0
mov dword [0x100bb720], 0
mov dword [0x100c03dc], 0
mov dword [0x100c1104], 0
mov dword [0x100c53fc], 0
mov dword [0x100bf344], 0
mov dword [0x100c4d14], 0
mov dword [0x100bf748], 0
mov dword [0x100bbb2c], 0
mov dword [0x100bbaf8], 0
mov dword [0x100bbc78], 0
mov dword [0x100c0c8c], 0
mov dword [0x100bbbec], 0
mov dword [0x100c51c8], 0
mov dword [0x100c1fc0], 0
mov dword [0x100c1438], 0
mov dword [0x100bb718], 0
mov dword [0x100c05c0], 0
mov dword [0x100c06a8], 0
mov dword [0x100c12a4], 0
mov dword [0x100bb78c], 0
mov dword [0x100c0604], 0
mov dword [0x100c184c], 0
mov dword [0x100c540c], 0
mov dword [0x100c10f8], 0
mov dword [0x100c03e4], 0
mov dword [0x100bb30c], 0
mov dword [0x100c4ddc], 0
mov dword [0x100c0424], 0
mov dword [0x100c06f4], 0
mov dword [0x100c10f0], 0
mov dword [0x100bb7a8], 0
mov dword [0x100c12ac], 0
mov dword [0x100bb7b0], 0
mov dword [0x100c042c], 0
mov dword [0x100bbb14], 0
mov dword [0x100bf350], 0
mov dword [0x100c4cdc], 0
mov dword [0x100bff6c], 0
mov dword [0x100bf798], 0
mov dword [0x100bbc9c], 0
mov dword [0x100c12e4], 0
mov dword [0x100c1bac], 0
mov dword [0x100bf744], 0
mov dword [0x100bb51c], 0
mov dword [0x100bbb0c], 0
mov dword [0x100bbb08], 0
mov dword [0x100c12d0], 0
mov dword [0x100bb79c], 0
mov dword [0x100bffa4], 0
mov dword [0x100c4d44], 0
mov dword [0x100bff84], 0
xorps xmm0, xmm0
mov dword [0x100c1830], 0
mov eax, 1
mov dword [0x100bf938], 0
mov dword [0x100c0c54], 0
mov dword [0x100c0620], 0
mov dword [0x100c1294], 0
mov dword [0x100c03cc], 0
mov dword [0x100bf318], 0
mov dword [0x100c0c70], 0
mov dword [0x100bb8b8], 0
mov dword [0x100bf334], 0
mov dword [0x100bb8cc], 0
mov dword [0x100bb7b4], 0
mov dword [0x100c5428], 0
mov dword [0x100c0568], 0
mov dword [0x100c057c], 0
mov dword [0x100c03d8], 0
mov dword [0x100c1fbc], 0
mov dword [0x100bff40], 0
mov dword [0x100bf77c], 0
mov dword [0x100c12c4], 0
mov dword [0x100c4d50], 0
mov dword [0x100c03e8], 0
mov dword [0x100bbb40], 0
mov dword [0x100c0c74], 0
mov dword [0x100c0560], 0
mov dword [0x100bf320], 0
mov dword [0x100c12dc], 0
mov dword [0x100c0634], 0
mov dword [0x100bf780], 0
mov dword [0x100bb8d8], 0
mov dword [0x100c062c], 0
mov dword [0x100bb794], 0
mov dword [0x100b8018], 0
mov dword [0x100c1120], 0
mov dword [0x100c4d4c], 0
movups xmmword [0x100c1868], xmm0
mov dword [0x100c1890], 0
movups xmmword [0x100c1878], xmm0
mov dword [0x100c4d0c], 1
movq qword [0x100c1888], xmm0
mov dword [0x100c1148], eax
pop esi
mov esp, ebp
pop ebp
ret
mov dword [0x100c1148], 0
mov esp, ebp
pop ebp
ret