Function at 0x10028d00
Capabilities:
Contain obfuscated stackstrings
Encrypt data using rc4 prga

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x20
cmp dword [0x100bb860], 0
je 0x10029265
mov ecx, 0x4c
xor edx, edx
nop word [eax + eax]
mov al, byte [edx + 0x100a6ef4]
xor al, cl
inc ecx
mov byte [ebp + edx - 0x20], al
and ecx, 0x800000ff
jns 0x10028d3d
dec ecx
or ecx, 0xffffff00
inc ecx
inc edx
cmp edx, 0xb
jl 0x10028d20
push esi
mov esi, dword [sym.imp.USER32.dll_FindWindowA]
lea eax, [ebp - 0x20]
push eax
push 0
mov byte [ebp - 0x15], 0
call esi
test eax, eax
jne 0x10028da1
mov byte [ebp - 0xa], al
lea eax, [ebp - 0x14]
push eax
push 0
mov dword [ebp - 0x14], 0x6d616554
mov dword [ebp - 0x10], 0x77656956
mov word [ebp - 0xc], 0x7265
call esi
test eax, eax
jne 0x10028da1
lea eax, [ebp - 8]
mov dword [ebp - 8], 0x44796e41
push eax
push 0
mov dword [ebp - 4], 0x6b7365
call esi
test eax, eax
jne 0x10028da1
mov dword [0x100c10e4], eax
pop esi
mov esp, ebp
pop ebp
ret
mov dword [0x100c06dc], 0
mov dword [0x100c1f5c], 0
mov dword [0x100c03b8], 0
mov dword [0x100bff50], 0
mov dword [0x100c126c], 0
mov dword [0x100c13cc], 0
mov dword [0x100bfed8], 0
mov dword [0x100c03c0], 0
mov dword [0x100bf6e8], 0
mov dword [0x100bbc0c], 0
mov dword [0x100c069c], 0
mov dword [0x100c17e8], 0
mov dword [0x100bff24], 0
mov dword [0x100c03dc], 0
mov dword [0x100bbaa0], 0
mov dword [0x100bbb68], 0
mov dword [0x100c0518], 0
mov dword [0x100bb730], 0
mov dword [0x100bbaf0], 0
mov dword [0x100c03cc], 0
mov dword [0x100bf8d0], 0
mov dword [0x100c4cac], 0
mov dword [0x100bbc3c], 0
mov dword [0x100bb6bc], 0
mov dword [0x100c5398], 0
mov dword [0x100bf2e0], 0
mov dword [0x100c1f3c], 0
mov dword [0x100c1014], 0
mov dword [0x100c10e0], 0
mov dword [0x100bbc18], 0
mov dword [0x100bb6c0], 0
mov dword [0x100c0380], 0
mov dword [0x100c10a0], 0
mov dword [0x100c5390], 0
mov dword [0x100bf2ec], 0
mov dword [0x100c4ca8], 0
mov dword [0x100bf6f0], 0
mov dword [0x100bbad0], 0
mov dword [0x100bba98], 0
mov dword [0x100bbc1c], 0
mov dword [0x100c1010], 0
mov dword [0x100bbb90], 0
mov dword [0x100c5160], 0
mov dword [0x100c1f58], 0
mov dword [0x100c13d8], 0
mov dword [0x100bb6b8], 0
mov dword [0x100c0560], 0
mov dword [0x100c064c], 0
mov dword [0x100c1240], 0
mov dword [0x100bb72c], 0
mov dword [0x100c05a8], 0
mov dword [0x100c17ec], 0
mov dword [0x100c53a0], 0
mov dword [0x100c1094], 0
mov dword [0x100c0388], 0
mov dword [0x100bb2ac], 0
mov dword [0x100c4d74], 0
mov dword [0x100c03c8], 0
mov dword [0x100c0694], 0
mov dword [0x100c108c], 0
mov dword [0x100bb748], 0
mov dword [0x100c1248], 0
mov dword [0x100bb750], 0
mov dword [0x100c03d0], 0
mov dword [0x100bbab8], 0
mov dword [0x100bf2f8], 0
mov dword [0x100c4c70], 0
mov dword [0x100bff08], 0
mov dword [0x100bf73c], 0
mov dword [0x100bbca4], 0
mov dword [0x100c1284], 0
mov dword [0x100c1b48], 0
mov dword [0x100bf6ec], 0
mov dword [0x100bb4bc], 0
mov dword [0x100bbab0], 0
mov dword [0x100bbaa8], 0
mov dword [0x100c1270], 0
mov dword [0x100bb73c], 0
mov dword [0x100bff40], 0
mov dword [0x100c4cdc], 0
mov dword [0x100bff20], 0
xorps xmm0, xmm0
mov dword [0x100c17d0], 0
mov eax, 1
mov dword [0x100bf8dc], 0
mov dword [0x100c0bec], 0
mov dword [0x100c05c4], 0
mov dword [0x100c1230], 0
mov dword [0x100c0370], 0
mov dword [0x100beed4], 0
mov dword [0x100c0c0c], 0
mov dword [0x100bb858], 0
mov dword [0x100bf2dc], 0
mov dword [0x100bb86c], 0
mov dword [0x100bb754], 0
mov dword [0x100c53bc], 0
mov dword [0x100c0508], 0
mov dword [0x100c051c], 0
mov dword [0x100c037c], 0
mov dword [0x100c1f54], 0
mov dword [0x100bfee0], 0
mov dword [0x100bf724], 0
mov dword [0x100c1264], 0
mov dword [0x100c4ce8], 0
mov dword [0x100c038c], 0
mov dword [0x100bbae4], 0
mov dword [0x100c0c10], 0
mov dword [0x100c0500], 0
mov dword [0x100bf2c4], 0
mov dword [0x100c127c], 0
mov dword [0x100c05d8], 0
mov dword [0x100bf728], 0
mov dword [0x100bb878], 0
mov dword [0x100c05d0], 0
mov dword [0x100bb734], 0
mov dword [0x100b8018], 0
mov dword [0x100c10bc], 0
mov dword [0x100c4ce4], 0
movups xmmword [0x100c1800], xmm0
mov dword [0x100c1828], 0
movups xmmword [0x100c1810], xmm0
mov dword [0x100c4ca0], 1
movq qword [0x100c1820], xmm0
mov dword [0x100c10e4], eax
pop esi
mov esp, ebp
pop ebp
ret
mov dword [0x100c10e4], 0
mov esp, ebp
pop ebp
ret