Function at 0x10028790
Capabilities:
Contain obfuscated stackstrings
Encrypt data using rc4 prga

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x20
cmp dword [0x100bd8a0], 0
je 0x10028cf5
mov ecx, 0x4c
xor edx, edx
nop word [eax + eax]
mov al, byte [edx + 0x100a8f0c]
xor al, cl
inc ecx
mov byte [ebp + edx - 0x20], al
and ecx, 0x800000ff
jns 0x100287cd
dec ecx
or ecx, 0xffffff00
inc ecx
inc edx
cmp edx, 0xb
jl 0x100287b0
push esi
mov esi, dword [sym.imp.USER32.dll_FindWindowA]
lea eax, [ebp - 0x20]
push eax
push 0
mov byte [ebp - 0x15], 0
call esi
test eax, eax
jne 0x10028831
mov byte [ebp - 0xa], al
lea eax, [ebp - 0x14]
push eax
push 0
mov dword [ebp - 0x14], 0x6d616554
mov dword [ebp - 0x10], 0x77656956
mov word [ebp - 0xc], 0x7265
call esi
test eax, eax
jne 0x10028831
lea eax, [ebp - 8]
mov dword [ebp - 8], 0x44796e41
push eax
push 0
mov dword [ebp - 4], 0x6b7365
call esi
test eax, eax
jne 0x10028831
mov dword [0x100c3120], eax
pop esi
mov esp, ebp
pop ebp
ret
mov dword [0x100c2718], 0
mov dword [0x100c6c90], 0
mov dword [0x100c23ec], 0
mov dword [0x100c1f8c], 0
mov dword [0x100c32a4], 0
mov dword [0x100c3404], 0
mov dword [0x100c1f18], 0
mov dword [0x100c23fc], 0
mov dword [0x100c1728], 0
mov dword [0x100bdc4c], 0
mov dword [0x100c26d8], 0
mov dword [0x100c3820], 0
mov dword [0x100c1f64], 0
mov dword [0x100c2418], 0
mov dword [0x100bdae0], 0
mov dword [0x100bdba8], 0
mov dword [0x100c2554], 0
mov dword [0x100bd770], 0
mov dword [0x100bdb30], 0
mov dword [0x100c2408], 0
mov dword [0x100c1910], 0
mov dword [0x100c6ce0], 0
mov dword [0x100bdc7c], 0
mov dword [0x100bd6fc], 0
mov dword [0x100c73c8], 0
mov dword [0x100c1320], 0
mov dword [0x100c3f70], 0
mov dword [0x100c3050], 0
mov dword [0x100c311c], 0
mov dword [0x100bdc58], 0
mov dword [0x100bd700], 0
mov dword [0x100c23bc], 0
mov dword [0x100c30dc], 0
mov dword [0x100c73c0], 0
mov dword [0x100c132c], 0
mov dword [0x100c6cdc], 0
mov dword [0x100c1730], 0
mov dword [0x100bdb10], 0
mov dword [0x100bdad8], 0
mov dword [0x100bdc5c], 0
mov dword [0x100c2c64], 0
mov dword [0x100bdbd0], 0
mov dword [0x100c7190], 0
mov dword [0x100c3f8c], 0
mov dword [0x100c3410], 0
mov dword [0x100bd6f8], 0
mov dword [0x100c259c], 0
mov dword [0x100c2688], 0
mov dword [0x100c327c], 0
mov dword [0x100bd76c], 0
mov dword [0x100c25e4], 0
mov dword [0x100c3824], 0
mov dword [0x100c73d0], 0
mov dword [0x100c30d0], 0
mov dword [0x100c23c4], 0
mov dword [0x100bd2ec], 0
mov dword [0x100c6da4], 0
mov dword [0x100c2404], 0
mov dword [0x100c26d0], 0
mov dword [0x100c30c8], 0
mov dword [0x100bd788], 0
mov dword [0x100c3284], 0
mov dword [0x100bd790], 0
mov dword [0x100c240c], 0
mov dword [0x100bdaf8], 0
mov dword [0x100c1338], 0
mov dword [0x100c6ca4], 0
mov dword [0x100c1f48], 0
mov dword [0x100c177c], 0
mov dword [0x100bdce4], 0
mov dword [0x100c32bc], 0
mov dword [0x100c3b80], 0
mov dword [0x100c172c], 0
mov dword [0x100bd4fc], 0
mov dword [0x100bdaf0], 0
mov dword [0x100bdae8], 0
mov dword [0x100c32a8], 0
mov dword [0x100bd77c], 0
mov dword [0x100c1f80], 0
mov dword [0x100c6d0c], 0
mov dword [0x100c1f60], 0
xorps xmm0, xmm0
mov dword [0x100c3808], 0
mov eax, 1
mov dword [0x100c191c], 0
mov dword [0x100c2c28], 0
mov dword [0x100c2600], 0
mov dword [0x100c326c], 0
mov dword [0x100c23ac], 0
mov dword [0x100c0f14], 0
mov dword [0x100c2c48], 0
mov dword [0x100bd898], 0
mov dword [0x100c131c], 0
mov dword [0x100bd8ac], 0
mov dword [0x100bd794], 0
mov dword [0x100c73ec], 0
mov dword [0x100c2544], 0
mov dword [0x100c2558], 0
mov dword [0x100c23b8], 0
mov dword [0x100c3f88], 0
mov dword [0x100c1f20], 0
mov dword [0x100c1764], 0
mov dword [0x100c329c], 0
mov dword [0x100c6d18], 0
mov dword [0x100c23c8], 0
mov dword [0x100bdb24], 0
mov dword [0x100c2c4c], 0
mov dword [0x100c253c], 0
mov dword [0x100c1304], 0
mov dword [0x100c32b4], 0
mov dword [0x100c2614], 0
mov dword [0x100c1768], 0
mov dword [0x100bd8b8], 0
mov dword [0x100c260c], 0
mov dword [0x100bd774], 0
mov dword [0x100ba018], 0
mov dword [0x100c30f8], 0
mov dword [0x100c6d14], 0
movups xmmword [0x100c3838], xmm0
mov dword [0x100c3860], 0
movups xmmword [0x100c3848], xmm0
mov dword [0x100c6cd4], 1
movq qword [0x100c3858], xmm0
mov dword [0x100c3120], eax
pop esi
mov esp, ebp
pop ebp
ret
mov dword [0x100c3120], 0
mov esp, ebp
pop ebp
ret