Function at 0x100289f0
Capabilities:
Contain obfuscated stackstrings
Encrypt data using rc4 prga

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x20
cmp dword [0x100bb8c0], 0
je 0x10028f55
mov ecx, 0x4c
xor edx, edx
nop word [eax + eax]
mov al, byte [edx + 0x100a6ef0]
xor al, cl
inc ecx
mov byte [ebp + edx - 0x20], al
and ecx, 0x800000ff
jns 0x10028a2d
dec ecx
or ecx, 0xffffff00
inc ecx
inc edx
cmp edx, 0xb
jl 0x10028a10
push esi
mov esi, dword [sym.imp.USER32.dll_FindWindowA]
lea eax, [ebp - 0x20]
push eax
push 0
mov byte [ebp - 0x15], 0
call esi
test eax, eax
jne 0x10028a91
mov byte [ebp - 0xa], al
lea eax, [ebp - 0x14]
push eax
push 0
mov dword [ebp - 0x14], 0x6d616554
mov dword [ebp - 0x10], 0x77656956
mov word [ebp - 0xc], 0x7265
call esi
test eax, eax
jne 0x10028a91
lea eax, [ebp - 8]
mov dword [ebp - 8], 0x44796e41
push eax
push 0
mov dword [ebp - 4], 0x6b7365
call esi
test eax, eax
jne 0x10028a91
mov dword [0x100c114c], eax
pop esi
mov esp, ebp
pop ebp
ret
mov dword [0x100c0748], 0
mov dword [0x100c1fc4], 0
mov dword [0x100c040c], 0
mov dword [0x100bffb0], 0
mov dword [0x100c12d0], 0
mov dword [0x100c1430], 0
mov dword [0x100bff38], 0
mov dword [0x100c041c], 0
mov dword [0x100bf740], 0
mov dword [0x100bbc68], 0
mov dword [0x100c0704], 0
mov dword [0x100c184c], 0
mov dword [0x100bff88], 0
mov dword [0x100c0438], 0
mov dword [0x100bbb00], 0
mov dword [0x100bbbc4], 0
mov dword [0x100c0578], 0
mov dword [0x100bb790], 0
mov dword [0x100bbb4c], 0
mov dword [0x100c0428], 0
mov dword [0x100bf79c], 0
mov dword [0x100c4d18], 0
mov dword [0x100bbc98], 0
mov dword [0x100bb71c], 0
mov dword [0x100c5404], 0
mov dword [0x100bf338], 0
mov dword [0x100c1bbc], 0
mov dword [0x100c107c], 0
mov dword [0x100c1148], 0
mov dword [0x100bbc74], 0
mov dword [0x100bb720], 0
mov dword [0x100c03dc], 0
mov dword [0x100c1108], 0
mov dword [0x100c53fc], 0
mov dword [0x100bf344], 0
mov dword [0x100c4d14], 0
mov dword [0x100bf748], 0
mov dword [0x100bbb2c], 0
mov dword [0x100bbaf8], 0
mov dword [0x100bbc78], 0
mov dword [0x100c1078], 0
mov dword [0x100bbbec], 0
mov dword [0x100c51c8], 0
mov dword [0x100c1fc0], 0
mov dword [0x100c143c], 0
mov dword [0x100bb718], 0
mov dword [0x100c05c0], 0
mov dword [0x100c06b0], 0
mov dword [0x100c12a8], 0
mov dword [0x100bb78c], 0
mov dword [0x100c0604], 0
mov dword [0x100c1850], 0
mov dword [0x100c540c], 0
mov dword [0x100c10fc], 0
mov dword [0x100c03e4], 0
mov dword [0x100bb30c], 0
mov dword [0x100c4ddc], 0
mov dword [0x100c0424], 0
mov dword [0x100c06fc], 0
mov dword [0x100c10f4], 0
mov dword [0x100bb7a8], 0
mov dword [0x100c12b0], 0
mov dword [0x100bb7b0], 0
mov dword [0x100c042c], 0
mov dword [0x100bbb14], 0
mov dword [0x100bf350], 0
mov dword [0x100c4cdc], 0
mov dword [0x100bff6c], 0
mov dword [0x100bf798], 0
mov dword [0x100bbc9c], 0
mov dword [0x100c12e8], 0
mov dword [0x100c1bb0], 0
mov dword [0x100bf744], 0
mov dword [0x100bb51c], 0
mov dword [0x100bbb0c], 0
mov dword [0x100bbb08], 0
mov dword [0x100c12d4], 0
mov dword [0x100bb79c], 0
mov dword [0x100bffa4], 0
mov dword [0x100c4d44], 0
mov dword [0x100bff84], 0
xorps xmm0, xmm0
mov dword [0x100c1834], 0
mov eax, 1
mov dword [0x100bf938], 0
mov dword [0x100c0c58], 0
mov dword [0x100c0620], 0
mov dword [0x100c1298], 0
mov dword [0x100c03cc], 0
mov dword [0x100bf318], 0
mov dword [0x100c0c74], 0
mov dword [0x100bb8b8], 0
mov dword [0x100bf334], 0
mov dword [0x100bb8cc], 0
mov dword [0x100bb7b4], 0
mov dword [0x100c5428], 0
mov dword [0x100c0568], 0
mov dword [0x100c057c], 0
mov dword [0x100c03d8], 0
mov dword [0x100c1fbc], 0
mov dword [0x100bff40], 0
mov dword [0x100bf77c], 0
mov dword [0x100c12c8], 0
mov dword [0x100c4d50], 0
mov dword [0x100c03e8], 0
mov dword [0x100bbb40], 0
mov dword [0x100c0c78], 0
mov dword [0x100c0560], 0
mov dword [0x100bf320], 0
mov dword [0x100c12e0], 0
mov dword [0x100c063c], 0
mov dword [0x100bf780], 0
mov dword [0x100bb8d8], 0
mov dword [0x100c0634], 0
mov dword [0x100bb794], 0
mov dword [0x100b8018], 0
mov dword [0x100c1124], 0
mov dword [0x100c4d4c], 0
movups xmmword [0x100c1868], xmm0
mov dword [0x100c1890], 0
movups xmmword [0x100c1878], xmm0
mov dword [0x100c4d0c], 1
movq qword [0x100c1888], xmm0
mov dword [0x100c114c], eax
pop esi
mov esp, ebp
pop ebp
ret
mov dword [0x100c114c], 0
mov esp, ebp
pop ebp
ret