Function at 0x10027da0
Capabilities:
Contain obfuscated stackstrings
Encrypt data using rc4 prga

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x24
cmp dword [0x100b88c0], 0
push esi
je 0x10028304
mov ecx, 0x4c
xor edx, edx
nop dword [eax + eax]
mov al, byte [edx + 0x100a4e24]
xor al, cl
inc ecx
mov byte [ebp + edx - 0x20], al
and ecx, 0x800000ff
jns 0x10027ddd
dec ecx
or ecx, 0xffffff00
inc ecx
inc edx
cmp edx, 0xb
jl 0x10027dc0
mov esi, dword [sym.imp.USER32.dll_FindWindowA]
lea eax, [ebp - 0x20]
push eax
push 0
mov byte [ebp - 0x15], 0
call esi
test eax, eax
jne 0x10027e40
mov byte [ebp - 0xa], al
lea eax, [ebp - 0x14]
push eax
push 0
mov dword [ebp - 0x14], 0x6d616554
mov dword [ebp - 0x10], 0x77656956
mov word [ebp - 0xc], 0x7265
call esi
test eax, eax
jne 0x10027e40
lea eax, [ebp - 8]
mov dword [ebp - 8], 0x44796e41
push eax
push 0
mov dword [ebp - 4], 0x6b7365
call esi
test eax, eax
jne 0x10027e40
mov dword [0x100be140], eax
pop esi
mov esp, ebp
pop ebp
ret
mov dword [0x100bd740], 0
mov dword [0x100befb4], 0
mov dword [0x100bd418], 0
mov dword [0x100bcfb4], 0
mov dword [0x100be2c4], 0
mov dword [0x100be420], 0
mov dword [0x100bcf38], 0
mov dword [0x100bd41c], 0
mov dword [0x100bc740], 0
mov dword [0x100b8c68], 0
mov dword [0x100bd6fc], 0
mov dword [0x100be83c], 0
mov dword [0x100bcf88], 0
mov dword [0x100bd438], 0
mov dword [0x100b8b04], 0
mov dword [0x100b8bc4], 0
mov dword [0x100bd57c], 0
mov dword [0x100b8790], 0
mov dword [0x100b8b50], 0
mov dword [0x100bd428], 0
mov dword [0x100bc79c], 0
mov dword [0x100c1d04], 0
mov dword [0x100b8c9c], 0
mov dword [0x100b871c], 0
mov dword [0x100c23fc], 0
mov dword [0x100bc33c], 0
mov dword [0x100bef98], 0
mov dword [0x100be078], 0
mov dword [0x100be13c], 0
mov dword [0x100b8c74], 0
mov dword [0x100b8720], 0
mov dword [0x100bd3e4], 0
mov dword [0x100be100], 0
mov dword [0x100c23f4], 0
mov dword [0x100bc344], 0
mov dword [0x100c1d00], 0
mov dword [0x100bc748], 0
mov dword [0x100b8b30], 0
mov dword [0x100b8afc], 0
mov dword [0x100b8c78], 0
mov dword [0x100bdc8c], 0
mov dword [0x100b8bec], 0
mov dword [0x100c21c0], 0
mov dword [0x100befb0], 0
mov dword [0x100be42c], 0
mov dword [0x100b8718], 0
mov dword [0x100bd5c4], 0
mov dword [0x100bd6b0], 0
mov dword [0x100be29c], 0
mov dword [0x100b878c], 0
mov dword [0x100bd608], 0
mov dword [0x100be840], 0
mov dword [0x100c2404], 0
mov dword [0x100be0f4], 0
mov dword [0x100bd3ec], 0
mov dword [0x100b830c], 0
mov dword [0x100c1dd4], 0
mov dword [0x100bd424], 0
mov dword [0x100bd6f4], 0
mov dword [0x100be0ec], 0
mov dword [0x100b87a8], 0
mov dword [0x100be2a4], 0
mov dword [0x100b87b0], 0
mov dword [0x100bd42c], 0
mov dword [0x100b8b18], 0
mov dword [0x100bc350], 0
mov dword [0x100c1cc8], 0
mov dword [0x100bcf6c], 0
mov dword [0x100bc798], 0
mov dword [0x100b8d04], 0
mov dword [0x100be2d8], 0
mov dword [0x100beba4], 0
mov dword [0x100bc744], 0
mov dword [0x100b851c], 0
mov dword [0x100b8b10], 0
mov dword [0x100b8b0c], 0
mov dword [0x100be2c8], 0
mov dword [0x100b879c], 0
mov dword [0x100bcfa4], 0
mov dword [0x100c1d3c], 0
mov dword [0x100bcf84], 0
xorps xmm0, xmm0
mov dword [0x100be824], 0
mov eax, 1
mov dword [0x100bc938], 0
mov dword [0x100bdc50], 0
mov dword [0x100bd628], 0
mov dword [0x100be28c], 0
mov dword [0x100bd3d4], 0
mov dword [0x100bbf34], 0
mov dword [0x100bdc70], 0
mov dword [0x100b88b8], 0
mov dword [0x100bc338], 0
mov dword [0x100b88cc], 0
mov dword [0x100b87b4], 0
mov dword [0x100c2420], 0
mov dword [0x100bd56c], 0
mov dword [0x100bd580], 0
mov dword [0x100bd3e0], 0
mov dword [0x100befac], 0
mov dword [0x100bcf40], 0
mov dword [0x100bc77c], 0
mov dword [0x100be2bc], 0
mov dword [0x100c1d48], 0
mov dword [0x100bd3f0], 0
mov dword [0x100b8b44], 0
mov dword [0x100bdc74], 0
mov dword [0x100bd564], 0
mov dword [0x100bc324], 0
mov dword [0x100be2d0], 0
mov dword [0x100bd640], 0
mov dword [0x100bc780], 0
mov dword [0x100b88dc], 0
mov dword [0x100bd638], 0
mov dword [0x100b8794], 0
mov dword [0x100b5018], 0
mov dword [0x100be11c], 0
mov dword [0x100c1d44], 0
movups xmmword [0x100be858], xmm0
mov dword [0x100be880], 0
movups xmmword [0x100be868], xmm0
mov dword [0x100c1cf8], 1
movq qword [0x100be878], xmm0
mov dword [0x100be140], eax
pop esi
mov esp, ebp
pop ebp
ret
mov dword [0x100be140], 0
pop esi
mov esp, ebp
pop ebp
ret