Function at 0x10028530
Capabilities:
Contain obfuscated stackstrings
Encrypt data using rc4 prga

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x20
cmp dword [0x100b989c], 0
je 0x10028a95
mov ecx, 0x4c
xor edx, edx
nop word [eax + eax]
mov al, byte [edx + 0x100a4edc]
xor al, cl
inc ecx
mov byte [ebp + edx - 0x20], al
and ecx, 0x800000ff
jns 0x1002856d
dec ecx
or ecx, 0xffffff00
inc ecx
inc edx
cmp edx, 0xb
jl 0x10028550
push esi
mov esi, dword [sym.imp.USER32.dll_FindWindowA]
lea eax, [ebp - 0x20]
push eax
push 0
mov byte [ebp - 0x15], 0
call esi
test eax, eax
jne 0x100285d1
mov byte [ebp - 0xa], al
lea eax, [ebp - 0x14]
push eax
push 0
mov dword [ebp - 0x14], 0x6d616554
mov dword [ebp - 0x10], 0x77656956
mov word [ebp - 0xc], 0x7265
call esi
test eax, eax
jne 0x100285d1
lea eax, [ebp - 8]
mov dword [ebp - 8], 0x44796e41
push eax
push 0
mov dword [ebp - 4], 0x6b7365
call esi
test eax, eax
jne 0x100285d1
mov dword [0x100bf110], eax
pop esi
mov esp, ebp
pop ebp
ret
mov dword [0x100be70c], 0
mov dword [0x100c2c80], 0
mov dword [0x100be3dc], 0
mov dword [0x100bdf84], 0
mov dword [0x100bf294], 0
mov dword [0x100bf3f4], 0
mov dword [0x100bdf0c], 0
mov dword [0x100be3ec], 0
mov dword [0x100bd71c], 0
mov dword [0x100b9c44], 0
mov dword [0x100be6cc], 0
mov dword [0x100bf814], 0
mov dword [0x100bdf58], 0
mov dword [0x100be408], 0
mov dword [0x100b9adc], 0
mov dword [0x100b9ba0], 0
mov dword [0x100be544], 0
mov dword [0x100b976c], 0
mov dword [0x100b9b28], 0
mov dword [0x100be3f8], 0
mov dword [0x100bd774], 0
mov dword [0x100c2cd0], 0
mov dword [0x100b9c74], 0
mov dword [0x100b96f8], 0
mov dword [0x100c33b8], 0
mov dword [0x100bd314], 0
mov dword [0x100bff60], 0
mov dword [0x100bf040], 0
mov dword [0x100bf10c], 0
mov dword [0x100b9c50], 0
mov dword [0x100b96fc], 0
mov dword [0x100be3b0], 0
mov dword [0x100bf0cc], 0
mov dword [0x100c33b0], 0
mov dword [0x100bd320], 0
mov dword [0x100c2ccc], 0
mov dword [0x100bd724], 0
mov dword [0x100b9b08], 0
mov dword [0x100b9ad4], 0
mov dword [0x100b9c54], 0
mov dword [0x100bec54], 0
mov dword [0x100b9bc8], 0
mov dword [0x100c3180], 0
mov dword [0x100bff7c], 0
mov dword [0x100bf400], 0
mov dword [0x100b96f4], 0
mov dword [0x100be58c], 0
mov dword [0x100be674], 0
mov dword [0x100bf26c], 0
mov dword [0x100b9768], 0
mov dword [0x100be5d0], 0
mov dword [0x100bf818], 0
mov dword [0x100c33c0], 0
mov dword [0x100bf0c0], 0
mov dword [0x100be3b8], 0
mov dword [0x100b92ec], 0
mov dword [0x100c2d94], 0
mov dword [0x100be3f4], 0
mov dword [0x100be6bc], 0
mov dword [0x100bf0b8], 0
mov dword [0x100b9784], 0
mov dword [0x100bf274], 0
mov dword [0x100b978c], 0
mov dword [0x100be3fc], 0
mov dword [0x100b9af0], 0
mov dword [0x100bd32c], 0
mov dword [0x100c2c94], 0
mov dword [0x100bdf3c], 0
mov dword [0x100bd770], 0
mov dword [0x100b9cdc], 0
mov dword [0x100bf2ac], 0
mov dword [0x100bfb70], 0
mov dword [0x100bd720], 0
mov dword [0x100b96ec], 0
mov dword [0x100b9ae8], 0
mov dword [0x100b9ae4], 0
mov dword [0x100bf298], 0
mov dword [0x100b9778], 0
mov dword [0x100bdf74], 0
mov dword [0x100c2cfc], 0
mov dword [0x100bdf54], 0
xorps xmm0, xmm0
mov dword [0x100bf7fc], 0
mov eax, 1
mov dword [0x100bd910], 0
mov dword [0x100bec1c], 0
mov dword [0x100be5ec], 0
mov dword [0x100bf25c], 0
mov dword [0x100be3a0], 0
mov dword [0x100bcf0c], 0
mov dword [0x100bec38], 0
mov dword [0x100b9794], 0
mov dword [0x100bd310], 0
mov dword [0x100b98a8], 0
mov dword [0x100b9790], 0
mov dword [0x100c33dc], 0
mov dword [0x100be534], 0
mov dword [0x100be548], 0
mov dword [0x100be3ac], 0
mov dword [0x100bff78], 0
mov dword [0x100bdf14], 0
mov dword [0x100bd758], 0
mov dword [0x100bf28c], 0
mov dword [0x100c2d08], 0
mov dword [0x100be3bc], 0
mov dword [0x100b9b1c], 0
mov dword [0x100bec3c], 0
mov dword [0x100be52c], 0
mov dword [0x100bd2fc], 0
mov dword [0x100bf2a4], 0
mov dword [0x100be600], 0
mov dword [0x100bd75c], 0
mov dword [0x100b98b4], 0
mov dword [0x100be5f8], 0
mov dword [0x100b9770], 0
mov dword [0x100b6018], 0
mov dword [0x100bf0e8], 0
mov dword [0x100c2d04], 0
movups xmmword [0x100bf830], xmm0
mov dword [0x100bf858], 0
movups xmmword [0x100bf840], xmm0
mov dword [0x100c2cc4], 1
movq qword [0x100bf850], xmm0
mov dword [0x100bf110], eax
pop esi
mov esp, ebp
pop ebp
ret
mov dword [0x100bf110], 0
mov esp, ebp
pop ebp
ret