Function at 0x100280d0
Capabilities:
Contain obfuscated stackstrings
Encrypt data using rc4 prga

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x20
cmp dword [0x100b791c], 0
je 0x10028635
mov ecx, 0x4c
xor edx, edx
nop word [eax + eax]
mov al, byte [edx + 0x100a3e8c]
xor al, cl
inc ecx
mov byte [ebp + edx - 0x20], al
and ecx, 0x800000ff
jns 0x1002810d
dec ecx
or ecx, 0xffffff00
inc ecx
inc edx
cmp edx, 0xb
jl 0x100280f0
push esi
mov esi, dword [sym.imp.USER32.dll_FindWindowA]
lea eax, [ebp - 0x20]
push eax
push 0
mov byte [ebp - 0x15], 0
call esi
test eax, eax
jne 0x10028171
mov byte [ebp - 0xa], al
lea eax, [ebp - 0x14]
push eax
push 0
mov dword [ebp - 0x14], 0x6d616554
mov dword [ebp - 0x10], 0x77656956
mov word [ebp - 0xc], 0x7265
call esi
test eax, eax
jne 0x10028171
lea eax, [ebp - 8]
mov dword [ebp - 8], 0x44796e41
push eax
push 0
mov dword [ebp - 4], 0x6b7365
call esi
test eax, eax
jne 0x10028171
mov dword [0x100bd778], eax
pop esi
mov esp, ebp
pop ebp
ret
mov dword [0x100bcd78], 0
mov dword [0x100c12e8], 0
mov dword [0x100bca4c], 0
mov dword [0x100bc5ec], 0
mov dword [0x100bd8fc], 0
mov dword [0x100bda58], 0
mov dword [0x100bc37c], 0
mov dword [0x100bca58], 0
mov dword [0x100bb79c], 0
mov dword [0x100b7cc4], 0
mov dword [0x100bcd38], 0
mov dword [0x100bde74], 0
mov dword [0x100bc3cc], 0
mov dword [0x100bca74], 0
mov dword [0x100b7b60], 0
mov dword [0x100b7bbc], 0
mov dword [0x100bcbb8], 0
mov dword [0x100b77ec], 0
mov dword [0x100b7bac], 0
mov dword [0x100bca64], 0
mov dword [0x100bbd70], 0
mov dword [0x100c1338], 0
mov dword [0x100b7cf8], 0
mov dword [0x100b7778], 0
mov dword [0x100c1a2c], 0
mov dword [0x100bb398], 0
mov dword [0x100be5cc], 0
mov dword [0x100bd6b0], 0
mov dword [0x100bd774], 0
mov dword [0x100b7cd0], 0
mov dword [0x100b777c], 0
mov dword [0x100bca1c], 0
mov dword [0x100bd738], 0
mov dword [0x100c1a24], 0
mov dword [0x100bb3a0], 0
mov dword [0x100c1334], 0
mov dword [0x100bb7a4], 0
mov dword [0x100b7b8c], 0
mov dword [0x100b7b58], 0
mov dword [0x100b7cd4], 0
mov dword [0x100bd2c4], 0
mov dword [0x100b7c48], 0
mov dword [0x100c17f0], 0
mov dword [0x100be5e4], 0
mov dword [0x100bda64], 0
mov dword [0x100b7774], 0
mov dword [0x100bcc00], 0
mov dword [0x100bccec], 0
mov dword [0x100bd8d4], 0
mov dword [0x100b77e8], 0
mov dword [0x100bcc44], 0
mov dword [0x100bde78], 0
mov dword [0x100c1a34], 0
mov dword [0x100bd72c], 0
mov dword [0x100bca24], 0
mov dword [0x100b736c], 0
mov dword [0x100c1404], 0
mov dword [0x100bca60], 0
mov dword [0x100bcd30], 0
mov dword [0x100bd724], 0
mov dword [0x100b7804], 0
mov dword [0x100bd8dc], 0
mov dword [0x100b780c], 0
mov dword [0x100bca68], 0
mov dword [0x100b7b74], 0
mov dword [0x100bb3ac], 0
mov dword [0x100c12fc], 0
mov dword [0x100bc3b0], 0
mov dword [0x100bbbdc], 0
mov dword [0x100b7cfc], 0
mov dword [0x100bd910], 0
mov dword [0x100be1d8], 0
mov dword [0x100bb7a0], 0
mov dword [0x100b776c], 0
mov dword [0x100b7b6c], 0
mov dword [0x100b7b68], 0
mov dword [0x100bd900], 0
mov dword [0x100b77f8], 0
mov dword [0x100bc5dc], 0
mov dword [0x100c136c], 0
mov dword [0x100bc3c8], 0
xorps xmm0, xmm0
mov dword [0x100bde5c], 0
mov eax, 1
mov dword [0x100bbd7c], 0
mov dword [0x100bd288], 0
mov dword [0x100bcc64], 0
mov dword [0x100bd8c4], 0
mov dword [0x100bca0c], 0
mov dword [0x100bb378], 0
mov dword [0x100bd2a8], 0
mov dword [0x100b7814], 0
mov dword [0x100bb394], 0
mov dword [0x100b7928], 0
mov dword [0x100b7810], 0
mov dword [0x100c1a50], 0
mov dword [0x100bcba8], 0
mov dword [0x100bcbbc], 0
mov dword [0x100bca18], 0
mov dword [0x100be5e0], 0
mov dword [0x100bc384], 0
mov dword [0x100bbbc0], 0
mov dword [0x100bd8f4], 0
mov dword [0x100c1378], 0
mov dword [0x100bca28], 0
mov dword [0x100b7ba0], 0
mov dword [0x100bd2ac], 0
mov dword [0x100bcba0], 0
mov dword [0x100bb380], 0
mov dword [0x100bd908], 0
mov dword [0x100bcc7c], 0
mov dword [0x100bbbc4], 0
mov dword [0x100b7934], 0
mov dword [0x100bcc74], 0
mov dword [0x100b77f0], 0
mov dword [0x100b4018], 0
mov dword [0x100bd754], 0
mov dword [0x100c1374], 0
movups xmmword [0x100bde90], xmm0
mov dword [0x100bdeb8], 0
movups xmmword [0x100bdea0], xmm0
mov dword [0x100c132c], 1
movq qword [0x100bdeb0], xmm0
mov dword [0x100bd778], eax
pop esi
mov esp, ebp
pop ebp
ret
mov dword [0x100bd778], 0
mov esp, ebp
pop ebp
ret