Function at 0x10022d80
Capabilities:
Contain obfuscated stackstrings
Encrypt data using rc4 prga

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x20
cmp dword [0x10093500], 0
je 0x10023169
mov ecx, 0x4c
xor edx, edx
nop word [eax + eax]
mov al, byte [edx + 0x1008278c]
xor al, cl
inc ecx
mov byte [ebp + edx - 0x20], al
and ecx, 0x800000ff
jns 0x10022dbd
dec ecx
or ecx, 0xffffff00
inc ecx
inc edx
cmp edx, 0xb
jl 0x10022da0
push esi
mov esi, dword [sym.imp.USER32.dll_FindWindowA]
lea eax, [ebp - 0x20]
push eax
push 0
mov byte [ebp - 0x15], 0
call esi
test eax, eax
jne 0x10022e21
mov byte [ebp - 0xa], al
lea eax, [ebp - 0x14]
push eax
push 0
mov dword [ebp - 0x14], 0x6d616554
mov dword [ebp - 0x10], 0x77656956
mov word [ebp - 0xc], 0x7265
call esi
test eax, eax
jne 0x10022e21
lea eax, [ebp - 8]
mov dword [ebp - 8], 0x44796e41
push eax
push 0
mov dword [ebp - 4], 0x6b7365
call esi
test eax, eax
jne 0x10022e21
mov dword [0x1009811c], eax
pop esi
mov esp, ebp
pop ebp
ret
xorps xmm0, xmm0
mov dword [0x10098e5c], 0
mov dword [0x100973cc], 0
mov dword [0x1009816c], 0
mov dword [0x100982cc], 0
mov dword [0x10097844], 0
mov dword [0x10096f68], 0
mov dword [0x10093898], 0
mov dword [0x10097af4], 0
mov dword [0x100986e8], 0
mov dword [0x100973a0], 0
mov dword [0x10097860], 0
mov dword [0x10093738], 0
mov dword [0x100937f8], 0
mov dword [0x1009798c], 0
mov dword [0x100933d4], 0
mov dword [0x10093780], 0
mov dword [0x10097850], 0
mov dword [0x10097140], 0
mov dword [0x10098e9c], 0
mov dword [0x100938c4], 0
mov dword [0x10093368], 0
mov dword [0x10098e40], 0
mov dword [0x10098064], 0
mov dword [0x10098118], 0
mov dword [0x10097800], 0
mov dword [0x100980e0], 0
mov dword [0x1009911c], 0
mov dword [0x10098e98], 0
mov dword [0x10096f6c], 0
mov dword [0x10093730], 0
mov dword [0x100938a4], 0
mov dword [0x10098060], 0
mov dword [0x1009381c], 0
mov dword [0x10098eec], 0
mov dword [0x10098e58], 0
mov dword [0x100982d8], 0
mov dword [0x100979c8], 0
mov dword [0x10097ab4], 0
mov dword [0x1009814c], 0
mov dword [0x10097a0c], 0
mov dword [0x10099128], 0
mov dword [0x10097808], 0
mov dword [0x10092f3c], 0
mov dword [0x10098ee4], 0
mov dword [0x1009784c], 0
mov dword [0x10097af0], 0
mov dword [0x100933e4], 0
mov dword [0x10097854], 0
mov dword [0x10098e64], 0
mov dword [0x10098184], 0
mov dword [0x10098a44], 0
mov dword [0x10093748], 0
mov dword [0x10093740], 0
mov dword [0x10098ec8], 0
mov dword [0x1009739c], 0
mov dword [0x100986cc], 0
mov dword [0x10098038], 0
mov dword [0x10097a28], 0
mov dword [0x1009813c], 0
mov dword [0x10096b58], 0
mov dword [0x100934f4], 0
mov dword [0x10093508], 0
mov dword [0x100933ec], 0
mov dword [0x1009913c], 0
mov dword [0x1009735c], 0
mov dword [0x10096fa0], 0
mov dword [0x10098ed4], 0
mov dword [0x1009780c], 0
mov dword [0x10093774], 0
mov dword [0x10098178], 0
mov dword [0x10097a3c], 0
mov dword [0x10096fa4], 0
mov dword [0x10093514], 0
mov dword [0x10097a34], 0
mov dword [0x100933d8], 0
mov dword [0x10091018], 0
mov dword [0x100980f8], 0
mov dword [0x10098ed0], 0
movups xmmword [0x100986f8], xmm0
movups xmmword [0x10098708], xmm0
mov eax, 1
movq qword [0x10098718], xmm0
mov dword [0x10098720], 0
mov dword [0x10098e94], 1
mov dword [0x1009811c], eax
pop esi
mov esp, ebp
pop ebp
ret
mov dword [0x1009811c], 0
mov esp, ebp
pop ebp
ret