Function at 0x10027cb0
Capabilities:
Contain obfuscated stackstrings
Encrypt data using rc4 prga

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x20
cmp dword [0x100b78bc], 0
je 0x10028215
mov ecx, 0x4c
xor edx, edx
nop word [eax + eax]
mov al, byte [edx + 0x100a3e44]
xor al, cl
inc ecx
mov byte [ebp + edx - 0x20], al
and ecx, 0x800000ff
jns 0x10027ced
dec ecx
or ecx, 0xffffff00
inc ecx
inc edx
cmp edx, 0xb
jl 0x10027cd0
push esi
mov esi, dword [sym.imp.USER32.dll_FindWindowA]
lea eax, [ebp - 0x20]
push eax
push 0
mov byte [ebp - 0x15], 0
call esi
test eax, eax
jne 0x10027d51
mov byte [ebp - 0xa], al
lea eax, [ebp - 0x14]
push eax
push 0
mov dword [ebp - 0x14], 0x6d616554
mov dword [ebp - 0x10], 0x77656956
mov word [ebp - 0xc], 0x7265
call esi
test eax, eax
jne 0x10027d51
lea eax, [ebp - 8]
mov dword [ebp - 8], 0x44796e41
push eax
push 0
mov dword [ebp - 4], 0x6b7365
call esi
test eax, eax
jne 0x10027d51
mov dword [0x100bd118], eax
pop esi
mov esp, ebp
pop ebp
ret
mov dword [0x100bc718], 0
mov dword [0x100bdf84], 0
mov dword [0x100bc3f4], 0
mov dword [0x100bbf9c], 0
mov dword [0x100bd29c], 0
mov dword [0x100bd3f8], 0
mov dword [0x100bbf24], 0
mov dword [0x100bc400], 0
mov dword [0x100bb730], 0
mov dword [0x100b7c60], 0
mov dword [0x100bc6d4], 0
mov dword [0x100bd814], 0
mov dword [0x100bbf74], 0
mov dword [0x100bc41c], 0
mov dword [0x100b7afc], 0
mov dword [0x100b7bbc], 0
mov dword [0x100bc55c], 0
mov dword [0x100b778c], 0
mov dword [0x100b7b48], 0
mov dword [0x100bc40c], 0
mov dword [0x100bb918], 0
mov dword [0x100c0cd8], 0
mov dword [0x100b7c90], 0
mov dword [0x100b7718], 0
mov dword [0x100c13c4], 0
mov dword [0x100bb32c], 0
mov dword [0x100bdf68], 0
mov dword [0x100bd04c], 0
mov dword [0x100bd114], 0
mov dword [0x100b7c6c], 0
mov dword [0x100b771c], 0
mov dword [0x100bc3c8], 0
mov dword [0x100bd0d4], 0
mov dword [0x100c13bc], 0
mov dword [0x100bb334], 0
mov dword [0x100c0cd4], 0
mov dword [0x100bb738], 0
mov dword [0x100b7b28], 0
mov dword [0x100b7af4], 0
mov dword [0x100b7c70], 0
mov dword [0x100bd048], 0
mov dword [0x100b7be4], 0
mov dword [0x100c1188], 0
mov dword [0x100bdf80], 0
mov dword [0x100bd404], 0
mov dword [0x100b7714], 0
mov dword [0x100bc5a4], 0
mov dword [0x100bc684], 0
mov dword [0x100bd274], 0
mov dword [0x100b7788], 0
mov dword [0x100bc5e4], 0
mov dword [0x100bd818], 0
mov dword [0x100c13cc], 0
mov dword [0x100bd0c8], 0
mov dword [0x100bc3d0], 0
mov dword [0x100b730c], 0
mov dword [0x100c0d9c], 0
mov dword [0x100bc408], 0
mov dword [0x100bc6cc], 0
mov dword [0x100bd0c0], 0
mov dword [0x100b77a4], 0
mov dword [0x100bd27c], 0
mov dword [0x100b77ac], 0
mov dword [0x100bc410], 0
mov dword [0x100b7b10], 0
mov dword [0x100bb340], 0
mov dword [0x100c0c9c], 0
mov dword [0x100bbf58], 0
mov dword [0x100bb784], 0
mov dword [0x100b7c94], 0
mov dword [0x100bd2b0], 0
mov dword [0x100bdb78], 0
mov dword [0x100bb734], 0
mov dword [0x100b770c], 0
mov dword [0x100b7b08], 0
mov dword [0x100b7b04], 0
mov dword [0x100bd2a0], 0
mov dword [0x100b7798], 0
mov dword [0x100bbf90], 0
mov dword [0x100c0d04], 0
mov dword [0x100bbf70], 0
xorps xmm0, xmm0
mov dword [0x100bd7fc], 0
mov eax, 1
mov dword [0x100bb924], 0
mov dword [0x100bcc28], 0
mov dword [0x100bc600], 0
mov dword [0x100bd264], 0
mov dword [0x100bc3b8], 0
mov dword [0x100bb310], 0
mov dword [0x100bcc44], 0
mov dword [0x100b77b4], 0
mov dword [0x100bb328], 0
mov dword [0x100b78c8], 0
mov dword [0x100b77b0], 0
mov dword [0x100c13e8], 0
mov dword [0x100bc54c], 0
mov dword [0x100bc560], 0
mov dword [0x100bc3c4], 0
mov dword [0x100bdf7c], 0
mov dword [0x100bbf2c], 0
mov dword [0x100bb768], 0
mov dword [0x100bd294], 0
mov dword [0x100c0d10], 0
mov dword [0x100bc3d4], 0
mov dword [0x100b7b3c], 0
mov dword [0x100bcc48], 0
mov dword [0x100bc544], 0
mov dword [0x100bb318], 0
mov dword [0x100bd2a8], 0
mov dword [0x100bc614], 0
mov dword [0x100bb76c], 0
mov dword [0x100b78d4], 0
mov dword [0x100bc60c], 0
mov dword [0x100b7790], 0
mov dword [0x100b4018], 0
mov dword [0x100bd0f0], 0
mov dword [0x100c0d0c], 0
movups xmmword [0x100bd830], xmm0
mov dword [0x100bd858], 0
movups xmmword [0x100bd840], xmm0
mov dword [0x100c0ccc], 1
movq qword [0x100bd850], xmm0
mov dword [0x100bd118], eax
pop esi
mov esp, ebp
pop ebp
ret
mov dword [0x100bd118], 0
mov esp, ebp
pop ebp
ret