Function at 0x10028a80
Capabilities:
Contain obfuscated stackstrings
Encrypt data using rc4 prga

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x20
cmp dword [0x100ba8c0], 0
je 0x10028fe5
mov ecx, 0x4c
xor edx, edx
nop word [eax + eax]
mov al, byte [edx + 0x100a5e88]
xor al, cl
inc ecx
mov byte [ebp + edx - 0x20], al
and ecx, 0x800000ff
jns 0x10028abd
dec ecx
or ecx, 0xffffff00
inc ecx
inc edx
cmp edx, 0xb
jl 0x10028aa0
push esi
mov esi, dword [sym.imp.USER32.dll_FindWindowA]
lea eax, [ebp - 0x20]
push eax
push 0
mov byte [ebp - 0x15], 0
call esi
test eax, eax
jne 0x10028b21
mov byte [ebp - 0xa], al
lea eax, [ebp - 0x14]
push eax
push 0
mov dword [ebp - 0x14], 0x6d616554
mov dword [ebp - 0x10], 0x77656956
mov word [ebp - 0xc], 0x7265
call esi
test eax, eax
jne 0x10028b21
lea eax, [ebp - 8]
mov dword [ebp - 8], 0x44796e41
push eax
push 0
mov dword [ebp - 4], 0x6b7365
call esi
test eax, eax
jne 0x10028b21
mov dword [0x100c0140], eax
pop esi
mov esp, ebp
pop ebp
ret
mov dword [0x100bf740], 0
mov dword [0x100c3cb8], 0
mov dword [0x100bf410], 0
mov dword [0x100befb0], 0
mov dword [0x100c02c4], 0
mov dword [0x100c0424], 0
mov dword [0x100bef38], 0
mov dword [0x100bf418], 0
mov dword [0x100be740], 0
mov dword [0x100bac68], 0
mov dword [0x100bf6fc], 0
mov dword [0x100c0840], 0
mov dword [0x100bef88], 0
mov dword [0x100bf434], 0
mov dword [0x100bab00], 0
mov dword [0x100babc4], 0
mov dword [0x100bf574], 0
mov dword [0x100ba790], 0
mov dword [0x100bab4c], 0
mov dword [0x100bf424], 0
mov dword [0x100be79c], 0
mov dword [0x100c3d08], 0
mov dword [0x100bac98], 0
mov dword [0x100ba71c], 0
mov dword [0x100c43f4], 0
mov dword [0x100be338], 0
mov dword [0x100c0f98], 0
mov dword [0x100c0074], 0
mov dword [0x100c013c], 0
mov dword [0x100bac74], 0
mov dword [0x100ba720], 0
mov dword [0x100bf3dc], 0
mov dword [0x100c0100], 0
mov dword [0x100c43ec], 0
mov dword [0x100be344], 0
mov dword [0x100c3d04], 0
mov dword [0x100be748], 0
mov dword [0x100bab2c], 0
mov dword [0x100baaf8], 0
mov dword [0x100bac78], 0
mov dword [0x100c0070], 0
mov dword [0x100babec], 0
mov dword [0x100c41b8], 0
mov dword [0x100c0fb4], 0
mov dword [0x100c0430], 0
mov dword [0x100ba718], 0
mov dword [0x100bf5bc], 0
mov dword [0x100bf6ac], 0
mov dword [0x100c029c], 0
mov dword [0x100ba78c], 0
mov dword [0x100bf600], 0
mov dword [0x100c0844], 0
mov dword [0x100c43fc], 0
mov dword [0x100c00f4], 0
mov dword [0x100bf3e4], 0
mov dword [0x100ba30c], 0
mov dword [0x100c3dcc], 0
mov dword [0x100bf420], 0
mov dword [0x100bf6f4], 0
mov dword [0x100c00ec], 0
mov dword [0x100ba7a8], 0
mov dword [0x100c02a4], 0
mov dword [0x100ba7b0], 0
mov dword [0x100bf428], 0
mov dword [0x100bab14], 0
mov dword [0x100be350], 0
mov dword [0x100c3ccc], 0
mov dword [0x100bef6c], 0
mov dword [0x100be798], 0
mov dword [0x100bac9c], 0
mov dword [0x100c02dc], 0
mov dword [0x100c0ba4], 0
mov dword [0x100be744], 0
mov dword [0x100ba51c], 0
mov dword [0x100bab0c], 0
mov dword [0x100bab08], 0
mov dword [0x100c02c8], 0
mov dword [0x100ba79c], 0
mov dword [0x100befa4], 0
mov dword [0x100c3d34], 0
mov dword [0x100bef84], 0
xorps xmm0, xmm0
mov dword [0x100c0828], 0
mov eax, 1
mov dword [0x100be938], 0
mov dword [0x100bfc50], 0
mov dword [0x100bf61c], 0
mov dword [0x100c028c], 0
mov dword [0x100bf3cc], 0
mov dword [0x100be318], 0
mov dword [0x100bfc6c], 0
mov dword [0x100ba8b8], 0
mov dword [0x100be334], 0
mov dword [0x100ba8cc], 0
mov dword [0x100ba7b4], 0
mov dword [0x100c4418], 0
mov dword [0x100bf564], 0
mov dword [0x100bf578], 0
mov dword [0x100bf3d8], 0
mov dword [0x100c0fb0], 0
mov dword [0x100bef40], 0
mov dword [0x100be77c], 0
mov dword [0x100c02bc], 0
mov dword [0x100c3d40], 0
mov dword [0x100bf3e8], 0
mov dword [0x100bab40], 0
mov dword [0x100bfc70], 0
mov dword [0x100bf55c], 0
mov dword [0x100be320], 0
mov dword [0x100c02d4], 0
mov dword [0x100bf638], 0
mov dword [0x100be780], 0
mov dword [0x100ba8d8], 0
mov dword [0x100bf630], 0
mov dword [0x100ba794], 0
mov dword [0x100b7018], 0
mov dword [0x100c011c], 0
mov dword [0x100c3d3c], 0
movups xmmword [0x100c0860], xmm0
mov dword [0x100c0888], 0
movups xmmword [0x100c0870], xmm0
mov dword [0x100c3cfc], 1
movq qword [0x100c0880], xmm0
mov dword [0x100c0140], eax
pop esi
mov esp, ebp
pop ebp
ret
mov dword [0x100c0140], 0
mov esp, ebp
pop ebp
ret