Function at 0x100289f0
Capabilities:
Contain obfuscated stackstrings
Encrypt data using rc4 prga

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x20
cmp dword [0x100ba89c], 0
je 0x10028f55
mov ecx, 0x4c
xor edx, edx
nop word [eax + eax]
mov al, byte [edx + 0x100a5eec]
xor al, cl
inc ecx
mov byte [ebp + edx - 0x20], al
and ecx, 0x800000ff
jns 0x10028a2d
dec ecx
or ecx, 0xffffff00
inc ecx
inc edx
cmp edx, 0xb
jl 0x10028a10
push esi
mov esi, dword [sym.imp.USER32.dll_FindWindowA]
lea eax, [ebp - 0x20]
push eax
push 0
mov byte [ebp - 0x15], 0
call esi
test eax, eax
jne 0x10028a91
mov byte [ebp - 0xa], al
lea eax, [ebp - 0x14]
push eax
push 0
mov dword [ebp - 0x14], 0x6d616554
mov dword [ebp - 0x10], 0x77656956
mov word [ebp - 0xc], 0x7265
call esi
test eax, eax
jne 0x10028a91
lea eax, [ebp - 8]
mov dword [ebp - 8], 0x44796e41
push eax
push 0
mov dword [ebp - 4], 0x6b7365
call esi
test eax, eax
jne 0x10028a91
mov dword [0x100c0110], eax
pop esi
mov esp, ebp
pop ebp
ret
mov dword [0x100bf704], 0
mov dword [0x100c0f7c], 0
mov dword [0x100bf3dc], 0
mov dword [0x100bef80], 0
mov dword [0x100c0294], 0
mov dword [0x100c03f4], 0
mov dword [0x100bef0c], 0
mov dword [0x100bf3ec], 0
mov dword [0x100be71c], 0
mov dword [0x100bac44], 0
mov dword [0x100bf6c4], 0
mov dword [0x100c0810], 0
mov dword [0x100bef58], 0
mov dword [0x100bf408], 0
mov dword [0x100baadc], 0
mov dword [0x100baba0], 0
mov dword [0x100bf544], 0
mov dword [0x100ba76c], 0
mov dword [0x100bab28], 0
mov dword [0x100bf3f8], 0
mov dword [0x100be774], 0
mov dword [0x100c3ccc], 0
mov dword [0x100bac74], 0
mov dword [0x100ba6f8], 0
mov dword [0x100c43b4], 0
mov dword [0x100be314], 0
mov dword [0x100c0b74], 0
mov dword [0x100c0040], 0
mov dword [0x100c010c], 0
mov dword [0x100bac50], 0
mov dword [0x100ba6fc], 0
mov dword [0x100bf3ac], 0
mov dword [0x100c00cc], 0
mov dword [0x100c43ac], 0
mov dword [0x100be320], 0
mov dword [0x100c3cc8], 0
mov dword [0x100be724], 0
mov dword [0x100bab08], 0
mov dword [0x100baad4], 0
mov dword [0x100bac54], 0
mov dword [0x100bfc54], 0
mov dword [0x100babc8], 0
mov dword [0x100c3d94], 0
mov dword [0x100c0f78], 0
mov dword [0x100c0400], 0
mov dword [0x100ba6f4], 0
mov dword [0x100bf58c], 0
mov dword [0x100bf674], 0
mov dword [0x100c026c], 0
mov dword [0x100ba768], 0
mov dword [0x100bf5d0], 0
mov dword [0x100c0814], 0
mov dword [0x100c43bc], 0
mov dword [0x100c00c0], 0
mov dword [0x100bf3b4], 0
mov dword [0x100ba2ec], 0
mov dword [0x100c3d90], 0
mov dword [0x100bf3f4], 0
mov dword [0x100bf6bc], 0
mov dword [0x100c00b8], 0
mov dword [0x100ba784], 0
mov dword [0x100c0274], 0
mov dword [0x100ba78c], 0
mov dword [0x100bf3fc], 0
mov dword [0x100baaf0], 0
mov dword [0x100be32c], 0
mov dword [0x100c3c90], 0
mov dword [0x100bef3c], 0
mov dword [0x100be770], 0
mov dword [0x100bacdc], 0
mov dword [0x100c02ac], 0
mov dword [0x100c0b6c], 0
mov dword [0x100be720], 0
mov dword [0x100ba6ec], 0
mov dword [0x100baae8], 0
mov dword [0x100baae4], 0
mov dword [0x100c0298], 0
mov dword [0x100ba778], 0
mov dword [0x100bef74], 0
mov dword [0x100c3cf8], 0
mov dword [0x100bef54], 0
xorps xmm0, xmm0
mov dword [0x100c07f8], 0
mov eax, 1
mov dword [0x100be910], 0
mov dword [0x100bfc1c], 0
mov dword [0x100bf5ec], 0
mov dword [0x100c025c], 0
mov dword [0x100bf39c], 0
mov dword [0x100bdf0c], 0
mov dword [0x100bfc38], 0
mov dword [0x100ba794], 0
mov dword [0x100be310], 0
mov dword [0x100ba8a8], 0
mov dword [0x100ba790], 0
mov dword [0x100c43d8], 0
mov dword [0x100bf534], 0
mov dword [0x100bf548], 0
mov dword [0x100bf3a8], 0
mov dword [0x100c0f74], 0
mov dword [0x100bef14], 0
mov dword [0x100be758], 0
mov dword [0x100c028c], 0
mov dword [0x100c3d04], 0
mov dword [0x100bf3b8], 0
mov dword [0x100bab1c], 0
mov dword [0x100bfc3c], 0
mov dword [0x100bf52c], 0
mov dword [0x100be2fc], 0
mov dword [0x100c02a4], 0
mov dword [0x100bf600], 0
mov dword [0x100be75c], 0
mov dword [0x100ba8b4], 0
mov dword [0x100bf5f8], 0
mov dword [0x100ba770], 0
mov dword [0x100b7018], 0
mov dword [0x100c00e8], 0
mov dword [0x100c3d00], 0
movups xmmword [0x100c0828], xmm0
mov dword [0x100c0850], 0
movups xmmword [0x100c0838], xmm0
mov dword [0x100c3cc0], 1
movq qword [0x100c0848], xmm0
mov dword [0x100c0110], eax
pop esi
mov esp, ebp
pop ebp
ret
mov dword [0x100c0110], 0
mov esp, ebp
pop ebp
ret