Function at 0x100289f0
Capabilities:
Contain obfuscated stackstrings
Encrypt data using rc4 prga

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x20
cmp dword [0x100ba89c], 0
je 0x10028f55
mov ecx, 0x4c
xor edx, edx
nop word [eax + eax]
mov al, byte [edx + 0x100a5eec]
xor al, cl
inc ecx
mov byte [ebp + edx - 0x20], al
and ecx, 0x800000ff
jns 0x10028a2d
dec ecx
or ecx, 0xffffff00
inc ecx
inc edx
cmp edx, 0xb
jl 0x10028a10
push esi
mov esi, dword [sym.imp.USER32.dll_FindWindowA]
lea eax, [ebp - 0x20]
push eax
push 0
mov byte [ebp - 0x15], 0
call esi
test eax, eax
jne 0x10028a91
mov byte [ebp - 0xa], al
lea eax, [ebp - 0x14]
push eax
push 0
mov dword [ebp - 0x14], 0x6d616554
mov dword [ebp - 0x10], 0x77656956
mov word [ebp - 0xc], 0x7265
call esi
test eax, eax
jne 0x10028a91
lea eax, [ebp - 8]
mov dword [ebp - 8], 0x44796e41
push eax
push 0
mov dword [ebp - 4], 0x6b7365
call esi
test eax, eax
jne 0x10028a91
mov dword [0x100c0104], eax
pop esi
mov esp, ebp
pop ebp
ret
mov dword [0x100bf700], 0
mov dword [0x100c0f6c], 0
mov dword [0x100bf3e0], 0
mov dword [0x100bef80], 0
mov dword [0x100c0288], 0
mov dword [0x100c03e8], 0
mov dword [0x100bef0c], 0
mov dword [0x100bf3e8], 0
mov dword [0x100be71c], 0
mov dword [0x100bac44], 0
mov dword [0x100bf6c0], 0
mov dword [0x100c0804], 0
mov dword [0x100bef58], 0
mov dword [0x100bf404], 0
mov dword [0x100baadc], 0
mov dword [0x100baba0], 0
mov dword [0x100bf540], 0
mov dword [0x100ba76c], 0
mov dword [0x100bab28], 0
mov dword [0x100bf3f4], 0
mov dword [0x100be774], 0
mov dword [0x100c3cbc], 0
mov dword [0x100bac74], 0
mov dword [0x100ba6f8], 0
mov dword [0x100c43a4], 0
mov dword [0x100be314], 0
mov dword [0x100c0f50], 0
mov dword [0x100c0034], 0
mov dword [0x100c0100], 0
mov dword [0x100bac50], 0
mov dword [0x100ba6fc], 0
mov dword [0x100bf3ac], 0
mov dword [0x100c00c0], 0
mov dword [0x100c439c], 0
mov dword [0x100be320], 0
mov dword [0x100c3cb8], 0
mov dword [0x100be724], 0
mov dword [0x100bab08], 0
mov dword [0x100baad4], 0
mov dword [0x100bac54], 0
mov dword [0x100c0030], 0
mov dword [0x100babc8], 0
mov dword [0x100c3d84], 0
mov dword [0x100c0f68], 0
mov dword [0x100c03f4], 0
mov dword [0x100ba6f4], 0
mov dword [0x100bf588], 0
mov dword [0x100bf670], 0
mov dword [0x100c0260], 0
mov dword [0x100ba768], 0
mov dword [0x100bf5cc], 0
mov dword [0x100c0808], 0
mov dword [0x100c43ac], 0
mov dword [0x100c00b4], 0
mov dword [0x100bf3b4], 0
mov dword [0x100ba2ec], 0
mov dword [0x100c3d80], 0
mov dword [0x100bf3f0], 0
mov dword [0x100bf6b8], 0
mov dword [0x100c00ac], 0
mov dword [0x100ba784], 0
mov dword [0x100c0268], 0
mov dword [0x100ba78c], 0
mov dword [0x100bf3f8], 0
mov dword [0x100baaf0], 0
mov dword [0x100be32c], 0
mov dword [0x100c3c80], 0
mov dword [0x100bef3c], 0
mov dword [0x100be770], 0
mov dword [0x100bacdc], 0
mov dword [0x100c02a0], 0
mov dword [0x100c0b60], 0
mov dword [0x100be720], 0
mov dword [0x100ba6ec], 0
mov dword [0x100baae8], 0
mov dword [0x100baae4], 0
mov dword [0x100c028c], 0
mov dword [0x100ba778], 0
mov dword [0x100bef74], 0
mov dword [0x100c3ce8], 0
mov dword [0x100bef54], 0
xorps xmm0, xmm0
mov dword [0x100c07ec], 0
mov eax, 1
mov dword [0x100be910], 0
mov dword [0x100bfc10], 0
mov dword [0x100bf5e8], 0
mov dword [0x100c0250], 0
mov dword [0x100bf39c], 0
mov dword [0x100bdf0c], 0
mov dword [0x100bfc2c], 0
mov dword [0x100ba794], 0
mov dword [0x100be310], 0
mov dword [0x100ba8a8], 0
mov dword [0x100ba790], 0
mov dword [0x100c43c8], 0
mov dword [0x100bf530], 0
mov dword [0x100bf544], 0
mov dword [0x100bf3a8], 0
mov dword [0x100c0f64], 0
mov dword [0x100bef14], 0
mov dword [0x100be758], 0
mov dword [0x100c0280], 0
mov dword [0x100c3cf4], 0
mov dword [0x100bf3b8], 0
mov dword [0x100bab1c], 0
mov dword [0x100bfc30], 0
mov dword [0x100bf528], 0
mov dword [0x100be2fc], 0
mov dword [0x100c0298], 0
mov dword [0x100bf5fc], 0
mov dword [0x100be75c], 0
mov dword [0x100ba8b4], 0
mov dword [0x100bf5f4], 0
mov dword [0x100ba770], 0
mov dword [0x100b7018], 0
mov dword [0x100c00dc], 0
mov dword [0x100c3cf0], 0
movups xmmword [0x100c0820], xmm0
mov dword [0x100c0848], 0
movups xmmword [0x100c0830], xmm0
mov dword [0x100c3cb0], 1
movq qword [0x100c0840], xmm0
mov dword [0x100c0104], eax
pop esi
mov esp, ebp
pop ebp
ret
mov dword [0x100c0104], 0
mov esp, ebp
pop ebp
ret