Function at 0x100287a0
Capabilities:
Contain obfuscated stackstrings
Encrypt data using rc4 prga

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x20
cmp dword [0x100ba89c], 0
je 0x10028d05
mov ecx, 0x4c
xor edx, edx
nop word [eax + eax]
mov al, byte [edx + 0x100a5eec]
xor al, cl
inc ecx
mov byte [ebp + edx - 0x20], al
and ecx, 0x800000ff
jns 0x100287dd
dec ecx
or ecx, 0xffffff00
inc ecx
inc edx
cmp edx, 0xb
jl 0x100287c0
push esi
mov esi, dword [sym.imp.USER32.dll_FindWindowA]
lea eax, [ebp - 0x20]
push eax
push 0
mov byte [ebp - 0x15], 0
call esi
test eax, eax
jne 0x10028841
mov byte [ebp - 0xa], al
lea eax, [ebp - 0x14]
push eax
push 0
mov dword [ebp - 0x14], 0x6d616554
mov dword [ebp - 0x10], 0x77656956
mov word [ebp - 0xc], 0x7265
call esi
test eax, eax
jne 0x10028841
lea eax, [ebp - 8]
mov dword [ebp - 8], 0x44796e41
push eax
push 0
mov dword [ebp - 4], 0x6b7365
call esi
test eax, eax
jne 0x10028841
mov dword [0x100c010c], eax
pop esi
mov esp, ebp
pop ebp
ret
mov dword [0x100bf700], 0
mov dword [0x100c0f74], 0
mov dword [0x100bf3e0], 0
mov dword [0x100bef80], 0
mov dword [0x100c0290], 0
mov dword [0x100c03f0], 0
mov dword [0x100bef0c], 0
mov dword [0x100bf3e8], 0
mov dword [0x100be71c], 0
mov dword [0x100bac44], 0
mov dword [0x100bf6c0], 0
mov dword [0x100c080c], 0
mov dword [0x100bef58], 0
mov dword [0x100bf404], 0
mov dword [0x100baadc], 0
mov dword [0x100baba0], 0
mov dword [0x100bf540], 0
mov dword [0x100ba76c], 0
mov dword [0x100bab28], 0
mov dword [0x100bf3f4], 0
mov dword [0x100be774], 0
mov dword [0x100c3cc4], 0
mov dword [0x100bac74], 0
mov dword [0x100ba6f8], 0
mov dword [0x100c43ac], 0
mov dword [0x100be314], 0
mov dword [0x100c0f58], 0
mov dword [0x100c003c], 0
mov dword [0x100c0108], 0
mov dword [0x100bac50], 0
mov dword [0x100ba6fc], 0
mov dword [0x100bf3ac], 0
mov dword [0x100c00c8], 0
mov dword [0x100c43a4], 0
mov dword [0x100be320], 0
mov dword [0x100c3cc0], 0
mov dword [0x100be724], 0
mov dword [0x100bab08], 0
mov dword [0x100baad4], 0
mov dword [0x100bac54], 0
mov dword [0x100c0038], 0
mov dword [0x100babc8], 0
mov dword [0x100c3d8c], 0
mov dword [0x100c0f70], 0
mov dword [0x100c03fc], 0
mov dword [0x100ba6f4], 0
mov dword [0x100bf588], 0
mov dword [0x100bf670], 0
mov dword [0x100c0268], 0
mov dword [0x100ba768], 0
mov dword [0x100bf5cc], 0
mov dword [0x100c0810], 0
mov dword [0x100c43b4], 0
mov dword [0x100c00bc], 0
mov dword [0x100bf3b4], 0
mov dword [0x100ba2ec], 0
mov dword [0x100c3d88], 0
mov dword [0x100bf3f0], 0
mov dword [0x100bf6b8], 0
mov dword [0x100c00b4], 0
mov dword [0x100ba784], 0
mov dword [0x100c0270], 0
mov dword [0x100ba78c], 0
mov dword [0x100bf3f8], 0
mov dword [0x100baaf0], 0
mov dword [0x100be32c], 0
mov dword [0x100c3c88], 0
mov dword [0x100bef3c], 0
mov dword [0x100be770], 0
mov dword [0x100bacdc], 0
mov dword [0x100c02a8], 0
mov dword [0x100c0b68], 0
mov dword [0x100be720], 0
mov dword [0x100ba6ec], 0
mov dword [0x100baae8], 0
mov dword [0x100baae4], 0
mov dword [0x100c0294], 0
mov dword [0x100ba778], 0
mov dword [0x100bef74], 0
mov dword [0x100c3cf0], 0
mov dword [0x100bef54], 0
xorps xmm0, xmm0
mov dword [0x100c07f4], 0
mov eax, 1
mov dword [0x100be910], 0
mov dword [0x100bfc18], 0
mov dword [0x100bf5e8], 0
mov dword [0x100c0258], 0
mov dword [0x100bf39c], 0
mov dword [0x100bdf0c], 0
mov dword [0x100bfc34], 0
mov dword [0x100ba794], 0
mov dword [0x100be310], 0
mov dword [0x100ba8a8], 0
mov dword [0x100ba790], 0
mov dword [0x100c43d0], 0
mov dword [0x100bf530], 0
mov dword [0x100bf544], 0
mov dword [0x100bf3a8], 0
mov dword [0x100c0f6c], 0
mov dword [0x100bef14], 0
mov dword [0x100be758], 0
mov dword [0x100c0288], 0
mov dword [0x100c3cfc], 0
mov dword [0x100bf3b8], 0
mov dword [0x100bab1c], 0
mov dword [0x100bfc38], 0
mov dword [0x100bf528], 0
mov dword [0x100be2fc], 0
mov dword [0x100c02a0], 0
mov dword [0x100bf5fc], 0
mov dword [0x100be75c], 0
mov dword [0x100ba8b4], 0
mov dword [0x100bf5f4], 0
mov dword [0x100ba770], 0
mov dword [0x100b7018], 0
mov dword [0x100c00e4], 0
mov dword [0x100c3cf8], 0
movups xmmword [0x100c0828], xmm0
mov dword [0x100c0850], 0
movups xmmword [0x100c0838], xmm0
mov dword [0x100c3cb8], 1
movq qword [0x100c0848], xmm0
mov dword [0x100c010c], eax
pop esi
mov esp, ebp
pop ebp
ret
mov dword [0x100c010c], 0
mov esp, ebp
pop ebp
ret