Function at 0x100280f0
Capabilities:
Contain obfuscated stackstrings
Encrypt data using rc4 prga

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x20
cmp dword [0x100bbfd8], 0
je 0x10028655
mov ecx, 0x4c
xor edx, edx
nop word [eax + eax]
mov al, byte [edx + 0x1009eeac]
xor al, cl
inc ecx
mov byte [ebp + edx - 0x20], al
and ecx, 0x800000ff
jns 0x1002812d
dec ecx
or ecx, 0xffffff00
inc ecx
inc edx
cmp edx, 0xb
jl 0x10028110
push esi
mov esi, dword [sym.imp.USER32.dll_FindWindowA]
lea eax, [ebp - 0x20]
push eax
push 0
mov byte [ebp - 0x15], 0
call esi
test eax, eax
jne 0x10028191
mov byte [ebp - 0xa], al
lea eax, [ebp - 0x14]
push eax
push 0
mov dword [ebp - 0x14], 0x6d616554
mov dword [ebp - 0x10], 0x77656956
mov word [ebp - 0xc], 0x7265
call esi
test eax, eax
jne 0x10028191
lea eax, [ebp - 8]
mov dword [ebp - 8], 0x44796e41
push eax
push 0
mov dword [ebp - 4], 0x6b7365
call esi
test eax, eax
jne 0x10028191
mov dword [0x100b7880], eax
pop esi
mov esp, ebp
pop ebp
ret
mov dword [0x100b6e80], 0
mov dword [0x100bb2b8], 0
mov dword [0x100b6b64], 0
mov dword [0x100b670c], 0
mov dword [0x100b78d8], 0
mov dword [0x100b7a38], 0
mov dword [0x100b6698], 0
mov dword [0x100b6b74], 0
mov dword [0x100b5eb0], 0
mov dword [0x100b23d8], 0
mov dword [0x100b6e40], 0
mov dword [0x100b7e50], 0
mov dword [0x100b66e4], 0
mov dword [0x100b6b90], 0
mov dword [0x100b226c], 0
mov dword [0x100b2330], 0
mov dword [0x100b6ccc], 0
mov dword [0x100bbeb0], 0
mov dword [0x100b22b8], 0
mov dword [0x100b6b80], 0
mov dword [0x100b6090], 0
mov dword [0x100bb300], 0
mov dword [0x100b2408], 0
mov dword [0x100bbe3c], 0
mov dword [0x100bb9e8], 0
mov dword [0x100b5aa8], 0
mov dword [0x100b8598], 0
mov dword [0x100b77b4], 0
mov dword [0x100b787c], 0
mov dword [0x100b23e4], 0
mov dword [0x100bbe40], 0
mov dword [0x100b6b38], 0
mov dword [0x100b7840], 0
mov dword [0x100bb9e0], 0
mov dword [0x100b5ab4], 0
mov dword [0x100bb2fc], 0
mov dword [0x100b5eb8], 0
mov dword [0x100b2298], 0
mov dword [0x100b2264], 0
mov dword [0x100b23e8], 0
mov dword [0x100b77b0], 0
mov dword [0x100b2358], 0
mov dword [0x100bb7b0], 0
mov dword [0x100b85b4], 0
mov dword [0x100b7a44], 0
mov dword [0x100bbe38], 0
mov dword [0x100b6d14], 0
mov dword [0x100b6df8], 0
mov dword [0x100b78b0], 0
mov dword [0x100bbeac], 0
mov dword [0x100b6d54], 0
mov dword [0x100b7e54], 0
mov dword [0x100bb9f0], 0
mov dword [0x100b7834], 0
mov dword [0x100b6b40], 0
mov dword [0x100bba30], 0
mov dword [0x100bb3c4], 0
mov dword [0x100b6b7c], 0
mov dword [0x100b6e3c], 0
mov dword [0x100b782c], 0
mov dword [0x100bbec4], 0
mov dword [0x100b78b8], 0
mov dword [0x100bbec8], 0
mov dword [0x100b6b84], 0
mov dword [0x100b2280], 0
mov dword [0x100b5ac0], 0
mov dword [0x100bb2c8], 0
mov dword [0x100b66c8], 0
mov dword [0x100b5efc], 0
mov dword [0x100b240c], 0
mov dword [0x100b78f0], 0
mov dword [0x100b81a8], 0
mov dword [0x100b5eb4], 0
mov dword [0x100bbc3c], 0
mov dword [0x100b2278], 0
mov dword [0x100b2274], 0
mov dword [0x100b78dc], 0
mov dword [0x100bbebc], 0
mov dword [0x100b6700], 0
mov dword [0x100bb32c], 0
mov dword [0x100b66e0], 0
xorps xmm0, xmm0
mov dword [0x100b7e38], 0
mov eax, 1
mov dword [0x100b609c], 0
mov dword [0x100b7390], 0
mov dword [0x100b6d70], 0
mov dword [0x100b78a0], 0
mov dword [0x100b6b28], 0
mov dword [0x100b5a88], 0
mov dword [0x100b73ac], 0
mov dword [0x100bbfd0], 0
mov dword [0x100b5aa4], 0
mov dword [0x100bbfe4], 0
mov dword [0x100bbecc], 0
mov dword [0x100bba08], 0
mov dword [0x100b6cbc], 0
mov dword [0x100b6cd0], 0
mov dword [0x100b6b34], 0
mov dword [0x100b85b0], 0
mov dword [0x100b66a0], 0
mov dword [0x100b5eec], 0
mov dword [0x100b78d0], 0
mov dword [0x100bb338], 0
mov dword [0x100b6b44], 0
mov dword [0x100b22ac], 0
mov dword [0x100b73b0], 0
mov dword [0x100b6cb4], 0
mov dword [0x100b5a90], 0
mov dword [0x100b78e8], 0
mov dword [0x100b6d84], 0
mov dword [0x100b5ef0], 0
mov dword [0x100bbff0], 0
mov dword [0x100b6d7c], 0
mov dword [0x100bbeb4], 0
mov dword [0x100b0080], 0
mov dword [0x100b7858], 0
mov dword [0x100bb334], 0
movups xmmword [0x100b7e68], xmm0
mov dword [0x100b7e90], 0
movups xmmword [0x100b7e78], xmm0
mov dword [0x100bb2f8], 1
movq qword [0x100b7e88], xmm0
mov dword [0x100b7880], eax
pop esi
mov esp, ebp
pop ebp
ret
mov dword [0x100b7880], 0
mov esp, ebp
pop ebp
ret