Function at 0x10028b50
Capabilities:
Contain obfuscated stackstrings
Encrypt data using rc4 prga

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x20
cmp dword [0x100ba89c], 0
je 0x100290b5
mov ecx, 0x4c
xor edx, edx
nop word [eax + eax]
mov al, byte [edx + 0x100a5ed4]
xor al, cl
inc ecx
mov byte [ebp + edx - 0x20], al
and ecx, 0x800000ff
jns 0x10028b8d
dec ecx
or ecx, 0xffffff00
inc ecx
inc edx
cmp edx, 0xb
jl 0x10028b70
push esi
mov esi, dword [sym.imp.USER32.dll_FindWindowA]
lea eax, [ebp - 0x20]
push eax
push 0
mov byte [ebp - 0x15], 0
call esi
test eax, eax
jne 0x10028bf1
mov byte [ebp - 0xa], al
lea eax, [ebp - 0x14]
push eax
push 0
mov dword [ebp - 0x14], 0x6d616554
mov dword [ebp - 0x10], 0x77656956
mov word [ebp - 0xc], 0x7265
call esi
test eax, eax
jne 0x10028bf1
lea eax, [ebp - 8]
mov dword [ebp - 8], 0x44796e41
push eax
push 0
mov dword [ebp - 4], 0x6b7365
call esi
test eax, eax
jne 0x10028bf1
mov dword [0x100c010c], eax
pop esi
mov esp, ebp
pop ebp
ret
mov dword [0x100bf708], 0
mov dword [0x100c3c78], 0
mov dword [0x100bf3e0], 0
mov dword [0x100bef80], 0
mov dword [0x100c0290], 0
mov dword [0x100c03f0], 0
mov dword [0x100bef0c], 0
mov dword [0x100bf3e8], 0
mov dword [0x100be71c], 0
mov dword [0x100bac44], 0
mov dword [0x100bf6c8], 0
mov dword [0x100c080c], 0
mov dword [0x100bef58], 0
mov dword [0x100bf404], 0
mov dword [0x100baadc], 0
mov dword [0x100baba0], 0
mov dword [0x100bf540], 0
mov dword [0x100ba76c], 0
mov dword [0x100bab28], 0
mov dword [0x100bf3f4], 0
mov dword [0x100be774], 0
mov dword [0x100c3cc8], 0
mov dword [0x100bac74], 0
mov dword [0x100ba6f8], 0
mov dword [0x100c43b0], 0
mov dword [0x100be314], 0
mov dword [0x100c0f58], 0
mov dword [0x100c003c], 0
mov dword [0x100c0108], 0
mov dword [0x100bac50], 0
mov dword [0x100ba6fc], 0
mov dword [0x100bf3ac], 0
mov dword [0x100c00c8], 0
mov dword [0x100c43a8], 0
mov dword [0x100be320], 0
mov dword [0x100c3cc4], 0
mov dword [0x100be724], 0
mov dword [0x100bab08], 0
mov dword [0x100baad4], 0
mov dword [0x100bac54], 0
mov dword [0x100c0038], 0
mov dword [0x100babc8], 0
mov dword [0x100c4178], 0
mov dword [0x100c0f74], 0
mov dword [0x100c03fc], 0
mov dword [0x100ba6f4], 0
mov dword [0x100bf588], 0
mov dword [0x100bf670], 0
mov dword [0x100c0268], 0
mov dword [0x100ba768], 0
mov dword [0x100bf5cc], 0
mov dword [0x100c0810], 0
mov dword [0x100c43b8], 0
mov dword [0x100c00bc], 0
mov dword [0x100bf3b4], 0
mov dword [0x100ba2ec], 0
mov dword [0x100c3d8c], 0
mov dword [0x100bf3f0], 0
mov dword [0x100bf6c0], 0
mov dword [0x100c00b4], 0
mov dword [0x100ba784], 0
mov dword [0x100c0270], 0
mov dword [0x100ba78c], 0
mov dword [0x100bf3f8], 0
mov dword [0x100baaf0], 0
mov dword [0x100be32c], 0
mov dword [0x100c3c8c], 0
mov dword [0x100bef3c], 0
mov dword [0x100be770], 0
mov dword [0x100bacdc], 0
mov dword [0x100c02a8], 0
mov dword [0x100c0b68], 0
mov dword [0x100be720], 0
mov dword [0x100ba6ec], 0
mov dword [0x100baae8], 0
mov dword [0x100baae4], 0
mov dword [0x100c0294], 0
mov dword [0x100ba778], 0
mov dword [0x100bef74], 0
mov dword [0x100c3cf4], 0
mov dword [0x100bef54], 0
xorps xmm0, xmm0
mov dword [0x100c07f4], 0
mov eax, 1
mov dword [0x100be910], 0
mov dword [0x100bfc18], 0
mov dword [0x100bf5e8], 0
mov dword [0x100c0258], 0
mov dword [0x100bf39c], 0
mov dword [0x100bdf0c], 0
mov dword [0x100bfc34], 0
mov dword [0x100ba794], 0
mov dword [0x100be310], 0
mov dword [0x100ba8a8], 0
mov dword [0x100ba790], 0
mov dword [0x100c43d4], 0
mov dword [0x100bf530], 0
mov dword [0x100bf544], 0
mov dword [0x100bf3a8], 0
mov dword [0x100c0f70], 0
mov dword [0x100bef14], 0
mov dword [0x100be758], 0
mov dword [0x100c0288], 0
mov dword [0x100c3d00], 0
mov dword [0x100bf3b8], 0
mov dword [0x100bab1c], 0
mov dword [0x100bfc38], 0
mov dword [0x100bf528], 0
mov dword [0x100be2fc], 0
mov dword [0x100c02a0], 0
mov dword [0x100bf5fc], 0
mov dword [0x100be75c], 0
mov dword [0x100ba8b4], 0
mov dword [0x100bf5f4], 0
mov dword [0x100ba770], 0
mov dword [0x100b7018], 0
mov dword [0x100c00e4], 0
mov dword [0x100c3cfc], 0
movups xmmword [0x100c0828], xmm0
mov dword [0x100c0850], 0
movups xmmword [0x100c0838], xmm0
mov dword [0x100c3cbc], 1
movq qword [0x100c0848], xmm0
mov dword [0x100c010c], eax
pop esi
mov esp, ebp
pop ebp
ret
mov dword [0x100c010c], 0
mov esp, ebp
pop ebp
ret