Function at 0x10022e50
Capabilities:
Contain obfuscated stackstrings
Encrypt data using rc4 prga

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x20
cmp dword [0x10070edc], 0
je 0x1002321b
mov ecx, 0x4c
xor edx, edx
nop word [eax + eax]
mov al, byte [edx + 0x1006496c]
xor al, cl
inc ecx
mov byte [ebp + edx - 0x20], al
and ecx, 0x800000ff
jns 0x10022e8d
dec ecx
or ecx, 0xffffff00
inc ecx
inc edx
cmp edx, 0xb
jl 0x10022e70
push esi
mov esi, dword [sym.imp.USER32.dll_FindWindowA]
lea eax, [ebp - 0x20]
push eax
push 0
mov byte [ebp - 0x15], 0
call esi
test eax, eax
jne 0x10022ef1
mov byte [ebp - 0xa], al
lea eax, [ebp - 0x14]
push eax
push 0
mov dword [ebp - 0x14], 0x6d616554
mov dword [ebp - 0x10], 0x77656956
mov word [ebp - 0xc], 0x7265
call esi
test eax, eax
jne 0x10022ef1
lea eax, [ebp - 8]
mov dword [ebp - 8], 0x44796e41
push eax
push 0
mov dword [ebp - 4], 0x6b7365
call esi
test eax, eax
jne 0x10022ef1
mov dword [0x10075af0], eax
pop esi
mov esp, ebp
pop ebp
ret
xorps xmm0, xmm0
mov dword [0x10076810], 0
mov dword [0x10074dbc], 0
mov dword [0x10075b38], 0
mov dword [0x10075c94], 0
mov dword [0x1007521c], 0
mov dword [0x10074954], 0
mov dword [0x10071280], 0
mov dword [0x100754c8], 0
mov dword [0x100760b0], 0
mov dword [0x10074d8c], 0
mov dword [0x10075238], 0
mov dword [0x10071114], 0
mov dword [0x100711dc], 0
mov dword [0x10075364], 0
mov dword [0x10076f94], 0
mov dword [0x10071164], 0
mov dword [0x10075228], 0
mov dword [0x1007499c], 0
mov dword [0x10076850], 0
mov dword [0x100712ac], 0
mov dword [0x10076f24], 0
mov dword [0x100767f8], 0
mov dword [0x10075a38], 0
mov dword [0x10075aec], 0
mov dword [0x100751e8], 0
mov dword [0x10075ab4], 0
mov dword [0x10076acc], 0
mov dword [0x1007684c], 0
mov dword [0x10074958], 0
mov dword [0x1007110c], 0
mov dword [0x1007128c], 0
mov dword [0x10075a34], 0
mov dword [0x10071200], 0
mov dword [0x1007689c], 0
mov dword [0x1007680c], 0
mov dword [0x10075398], 0
mov dword [0x10075484], 0
mov dword [0x10075b20], 0
mov dword [0x100753dc], 0
mov dword [0x10076ad8], 0
mov dword [0x100751f0], 0
mov dword [0x10076b10], 0
mov dword [0x10076894], 0
mov dword [0x10075224], 0
mov dword [0x100754c4], 0
mov dword [0x1007522c], 0
mov dword [0x10076818], 0
mov dword [0x10075b4c], 0
mov dword [0x10076400], 0
mov dword [0x1007112c], 0
mov dword [0x10071120], 0
mov dword [0x10076878], 0
mov dword [0x10074d88], 0
mov dword [0x10076094], 0
mov dword [0x10075a10], 0
mov dword [0x100753f8], 0
mov dword [0x10075b10], 0
mov dword [0x100770b4], 0
mov dword [0x10070ee8], 0
mov dword [0x10076fac], 0
mov dword [0x10076aec], 0
mov dword [0x10074d48], 0
mov dword [0x1007498c], 0
mov dword [0x10076884], 0
mov dword [0x100751f4], 0
mov dword [0x10071158], 0
mov dword [0x10075b44], 0
mov dword [0x1007540c], 0
mov dword [0x10074990], 0
mov dword [0x10070ef4], 0
mov dword [0x10075404], 0
mov dword [0x10076f98], 0
mov dword [0x1006f018], 0
mov dword [0x10075acc], 0
mov dword [0x10076880], 0
movups xmmword [0x100760c0], xmm0
mov dword [0x100760e8], 0
movups xmmword [0x100760d0], xmm0
mov dword [0x10076848], 1
movq qword [0x100760e0], xmm0
mov eax, 1
mov dword [0x10075af0], eax
pop esi
mov esp, ebp
pop ebp
ret
mov dword [0x10075af0], 0
mov esp, ebp
pop ebp
ret