Function at 0x10028d00
Capabilities:
Contain obfuscated stackstrings
Encrypt data using rc4 prga

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x20
cmp dword [0x100bc8a0], 0
je 0x10029265
mov ecx, 0x4c
xor edx, edx
nop word [eax + eax]
mov al, byte [edx + 0x100a7f0c]
xor al, cl
inc ecx
mov byte [ebp + edx - 0x20], al
and ecx, 0x800000ff
jns 0x10028d3d
dec ecx
or ecx, 0xffffff00
inc ecx
inc edx
cmp edx, 0xb
jl 0x10028d20
push esi
mov esi, dword [sym.imp.USER32.dll_FindWindowA]
lea eax, [ebp - 0x20]
push eax
push 0
mov byte [ebp - 0x15], 0
call esi
test eax, eax
jne 0x10028da1
mov byte [ebp - 0xa], al
lea eax, [ebp - 0x14]
push eax
push 0
mov dword [ebp - 0x14], 0x6d616554
mov dword [ebp - 0x10], 0x77656956
mov word [ebp - 0xc], 0x7265
call esi
test eax, eax
jne 0x10028da1
lea eax, [ebp - 8]
mov dword [ebp - 8], 0x44796e41
push eax
push 0
mov dword [ebp - 4], 0x6b7365
call esi
test eax, eax
jne 0x10028da1
mov dword [0x100c212c], eax
pop esi
mov esp, ebp
pop ebp
ret
mov dword [0x100c171c], 0
mov dword [0x100c2fa4], 0
mov dword [0x100c13f8], 0
mov dword [0x100c0f90], 0
mov dword [0x100c22b4], 0
mov dword [0x100c2414], 0
mov dword [0x100c0f18], 0
mov dword [0x100c1400], 0
mov dword [0x100c0728], 0
mov dword [0x100bcc4c], 0
mov dword [0x100c16dc], 0
mov dword [0x100c2830], 0
mov dword [0x100c0f64], 0
mov dword [0x100c141c], 0
mov dword [0x100bcae0], 0
mov dword [0x100bcba8], 0
mov dword [0x100c1558], 0
mov dword [0x100bc770], 0
mov dword [0x100bcb30], 0
mov dword [0x100c140c], 0
mov dword [0x100c0910], 0
mov dword [0x100c5cf4], 0
mov dword [0x100bcc7c], 0
mov dword [0x100bc6fc], 0
mov dword [0x100c63e0], 0
mov dword [0x100c0320], 0
mov dword [0x100c2f84], 0
mov dword [0x100c205c], 0
mov dword [0x100c2128], 0
mov dword [0x100bcc58], 0
mov dword [0x100bc700], 0
mov dword [0x100c13c0], 0
mov dword [0x100c20e8], 0
mov dword [0x100c63d8], 0
mov dword [0x100c032c], 0
mov dword [0x100c5cf0], 0
mov dword [0x100c0730], 0
mov dword [0x100bcb10], 0
mov dword [0x100bcad8], 0
mov dword [0x100bcc5c], 0
mov dword [0x100c2058], 0
mov dword [0x100bcbd0], 0
mov dword [0x100c61a8], 0
mov dword [0x100c2fa0], 0
mov dword [0x100c2420], 0
mov dword [0x100bc6f8], 0
mov dword [0x100c15a0], 0
mov dword [0x100c168c], 0
mov dword [0x100c2288], 0
mov dword [0x100bc76c], 0
mov dword [0x100c15e8], 0
mov dword [0x100c2834], 0
mov dword [0x100c63e8], 0
mov dword [0x100c20dc], 0
mov dword [0x100c13c8], 0
mov dword [0x100bc2ec], 0
mov dword [0x100c5dbc], 0
mov dword [0x100c1408], 0
mov dword [0x100c16d4], 0
mov dword [0x100c20d4], 0
mov dword [0x100bc788], 0
mov dword [0x100c2290], 0
mov dword [0x100bc790], 0
mov dword [0x100c1410], 0
mov dword [0x100bcaf8], 0
mov dword [0x100c0338], 0
mov dword [0x100c5cb8], 0
mov dword [0x100c0f48], 0
mov dword [0x100c077c], 0
mov dword [0x100bcce4], 0
mov dword [0x100c22cc], 0
mov dword [0x100c2b90], 0
mov dword [0x100c072c], 0
mov dword [0x100bc4fc], 0
mov dword [0x100bcaf0], 0
mov dword [0x100bcae8], 0
mov dword [0x100c22b8], 0
mov dword [0x100bc77c], 0
mov dword [0x100c0f80], 0
mov dword [0x100c5d24], 0
mov dword [0x100c0f60], 0
xorps xmm0, xmm0
mov dword [0x100c2818], 0
mov eax, 1
mov dword [0x100c091c], 0
mov dword [0x100c1c34], 0
mov dword [0x100c1604], 0
mov dword [0x100c2278], 0
mov dword [0x100c13b0], 0
mov dword [0x100bff14], 0
mov dword [0x100c1c54], 0
mov dword [0x100bc898], 0
mov dword [0x100c031c], 0
mov dword [0x100bc8ac], 0
mov dword [0x100bc794], 0
mov dword [0x100c6404], 0
mov dword [0x100c1548], 0
mov dword [0x100c155c], 0
mov dword [0x100c13bc], 0
mov dword [0x100c2f9c], 0
mov dword [0x100c0f20], 0
mov dword [0x100c0764], 0
mov dword [0x100c22ac], 0
mov dword [0x100c5d30], 0
mov dword [0x100c13cc], 0
mov dword [0x100bcb24], 0
mov dword [0x100c1c58], 0
mov dword [0x100c1540], 0
mov dword [0x100c0304], 0
mov dword [0x100c22c4], 0
mov dword [0x100c1618], 0
mov dword [0x100c0768], 0
mov dword [0x100bc8b8], 0
mov dword [0x100c1610], 0
mov dword [0x100bc774], 0
mov dword [0x100b9018], 0
mov dword [0x100c2104], 0
mov dword [0x100c5d2c], 0
movups xmmword [0x100c2848], xmm0
mov dword [0x100c2870], 0
movups xmmword [0x100c2858], xmm0
mov dword [0x100c5ce8], 1
movq qword [0x100c2868], xmm0
mov dword [0x100c212c], eax
pop esi
mov esp, ebp
pop ebp
ret
mov dword [0x100c212c], 0
mov esp, ebp
pop ebp
ret