Function at 0x10022ee0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
push ebx
mov ebx, esp
sub esp, 8
and esp, 0xfffffff8
add esp, 4
push ebp
mov ebp, dword [ebx + 4]
mov dword [esp + 4], ebp
mov ebp, esp
sub esp, 0x38
mov eax, dword [0x1003900c]
xor eax, ebp
mov dword [ebp - 4], eax
mov eax, dword [0x10039018]
push esi
mov esi, ecx
push edi
test byte [eax + 0x1435], 1
movss xmm0, dword [eax + 0x16f8]
mov edi, dword [ebx + 8]
movss dword [ebp - 0x24], xmm0
movss xmm0, dword [eax + 0x16fc]
mov dword [ebp - 0x18], esi
movss dword [ebp - 0x28], xmm0
je 0x10023201
mov eax, dword [ebx + 0x10]
and eax, 0xffffff
mov dword [ebp - 0x38], eax
mov eax, dword [ebx + 0xc]
lea ecx, [eax + eax]
lea eax, [eax + eax*8]
mov dword [ebp - 0x1c], ecx
push ecx
add eax, 0xfffffffa
mov ecx, esi
push eax
call fcn.100220f0
mov eax, dword [ebx + 0xc]
mov ecx, dword [esi + 0x28]
mov dword [ebp - 0xc], ecx
cmp eax, 2
jle 0x10022f9c
mov edi, 2
nop
mov eax, dword [esi + 0x30]
lea edx, [ecx + edi*2]
inc edi
mov word [eax], cx
lea ecx, [edx - 2]
mov eax, dword [esi + 0x30]
mov word [eax + 2], cx
mov eax, dword [esi + 0x30]
mov ecx, dword [ebp - 0xc]
mov word [eax + 4], dx
add dword [esi + 0x30], 6
mov eax, dword [ebx + 0xc]
cmp edi, eax
jl 0x10022f70
mov edi, dword [ebx + 8]
shl eax, 3
call fcn.1002e670
mov edx, dword [ebx + 0xc]
mov ecx, esp
movss xmm4, dword [0x10035d88]
mov dword [ebp - 0x14], ecx
lea eax, [edx - 1]
mov dword [ebp - 0x10], eax
test edx, edx
jle 0x1002307e
shl eax, 3
xorps xmm5, xmm5
mov dword [ebp - 8], eax
xor esi, esi
nop dword [eax]
movss xmm2, dword [edi + esi*8 + 4]
lea ecx, [esi*8]
movss xmm1, dword [edi + esi*8]
subss xmm1, dword [eax + edi]
subss xmm2, dword [eax + edi + 4]
mov dword [ebp - 0x34], ecx
lea ecx, [edi + 4]
mov dword [ebp - 0x20], ecx
mov ecx, dword [ebp - 0x14]
movaps xmm0, xmm1
movss dword [ebp - 0x2c], xmm1
movaps xmm3, xmm2
mulss xmm0, xmm1
mulss xmm3, xmm2
movss dword [ebp - 0x30], xmm2
addss xmm3, xmm0
comiss xmm3, xmm5
jbe 0x1002304d
cvtps2pd xmm0, xmm3
call sub.api_ms_win_crt_math_l1_1_0.dll__libm_sse2_sqrt_precise
movss xmm4, dword [0x10035d88]
xorps xmm5, xmm5
movss xmm1, dword [ebp - 0x2c]
movaps xmm3, xmm4
movss xmm2, dword [ebp - 0x30]
mov eax, dword [ebp - 8]
mov ecx, dword [ebp - 0x14]
mov edx, dword [ebx + 0xc]
cvtsd2ss xmm0, xmm0
divss xmm3, xmm0
jmp 0x10023050
movaps xmm3, xmm4
mulss xmm1, xmm3
inc esi
mulss xmm2, xmm3
xorps xmm1, xmmword [0x10036540]
movss dword [eax + ecx + 4], xmm1
movss dword [eax + ecx], xmm2
mov eax, dword [ebp - 0x34]
mov dword [ebp - 8], eax
cmp esi, edx
jl 0x10022fd0
mov esi, dword [ebp - 0x18]
jmp 0x10023084
lea eax, [edi + 4]
mov dword [ebp - 0x20], eax
mov dword [ebp - 8], 0
test edx, edx
jle 0x100231f6
movss xmm5, dword [0x10035d5c]
mov eax, ecx
movss xmm6, dword [0x10035d14]
sub eax, edi
movss xmm7, dword [0x10035e88]
xor edx, edx
mov edi, dword [ebp - 0x20]
mov dword [ebp - 0x18], eax
mov eax, dword [ebp - 0x10]
nop word [eax + eax]
movss xmm2, dword [ecx + edx*8]
mov edx, dword [ebp - 0x18]
addss xmm2, dword [ecx + eax*8]
movss xmm3, dword [edx + edi]
addss xmm3, dword [ecx + eax*8 + 4]
mov edx, dword [ebp - 8]
mulss xmm2, xmm5
mulss xmm3, xmm5
movaps xmm1, xmm2
mulss xmm1, xmm2
movaps xmm0, xmm3
mulss xmm0, xmm3
addss xmm1, xmm0
comiss xmm1, xmm6
jbe 0x10023113
movaps xmm0, xmm4
divss xmm0, xmm1
movaps xmm1, xmm7
minss xmm1, xmm0
movaps xmm0, xmm1
mulss xmm3, xmm1
mulss xmm2, xmm0
movss xmm1, dword [edi - 4]
movss xmm0, dword [edi]
mov eax, dword [esi + 0x2c]
mov ecx, dword [ebx + 0x10]
mulss xmm2, xmm5
mulss xmm3, xmm5
subss xmm1, xmm2
subss xmm0, xmm3
movss dword [eax], xmm1
movss xmm1, dword [ebp - 0x28]
movss dword [eax + 4], xmm0
mov eax, dword [esi + 0x2c]
movss xmm0, dword [ebp - 0x24]
movss dword [eax + 8], xmm0
movss dword [eax + 0xc], xmm1
mov eax, dword [esi + 0x2c]
mov dword [eax + 0x10], ecx
addss xmm2, dword [edi - 4]
addss xmm3, dword [edi]
mov eax, dword [esi + 0x2c]
add edi, 8
mov ecx, dword [ebp - 0x38]
movss dword [eax + 0x14], xmm2
movss dword [eax + 0x18], xmm3
mov eax, dword [esi + 0x2c]
movss dword [eax + 0x1c], xmm0
movss dword [eax + 0x20], xmm1
mov eax, dword [esi + 0x2c]
mov dword [eax + 0x24], ecx
mov eax, dword [esi + 0x30]
mov ecx, dword [ebp - 0xc]
add dword [esi + 0x2c], 0x28
lea edx, [ecx + edx*2]
mov word [eax], dx
mov eax, dword [ebp - 0x10]
lea ecx, [ecx + eax*2]
mov eax, dword [esi + 0x30]
mov word [eax + 2], cx
mov ecx, dword [ebp - 0x10]
mov eax, dword [esi + 0x30]
lea ecx, [ecx*2 + 1]
add ecx, dword [ebp - 0xc]
mov word [eax + 4], cx
mov eax, dword [esi + 0x30]
mov word [eax + 6], cx
mov ecx, dword [ebp - 8]
mov eax, dword [esi + 0x30]
lea ecx, [ecx*2 + 1]
add ecx, dword [ebp - 0xc]
mov word [eax + 8], cx
mov eax, dword [esi + 0x30]
mov ecx, dword [ebp - 0x14]
mov word [eax + 0xa], dx
mov edx, dword [ebp - 8]
mov eax, edx
add dword [esi + 0x30], 0xc
inc edx
mov dword [ebp - 0x10], eax
mov dword [ebp - 8], edx
cmp edx, dword [ebx + 0xc]
jl 0x100230c0
mov eax, dword [ebp - 0x1c]
movzx eax, ax
jmp 0x1002329a
mov eax, dword [ebx + 0xc]
push eax
lea eax, [eax + eax*2]
add eax, 0xfffffffa
push eax
call fcn.100220f0
mov edx, dword [ebx + 0xc]
test edx, edx
jle 0x10023255
movss xmm0, dword [ebp - 0x24]
movss xmm1, dword [ebp - 0x28]
mov ecx, dword [esi + 0x2c]
lea edi, [edi + 8]
mov eax, dword [edi - 8]
mov dword [ecx], eax
mov eax, dword [edi - 4]
mov dword [ecx + 4], eax
mov eax, dword [esi + 0x2c]
mov ecx, dword [ebx + 0x10]
movss dword [eax + 8], xmm0
movss dword [eax + 0xc], xmm1
mov eax, dword [esi + 0x2c]
mov dword [eax + 0x10], ecx
add dword [esi + 0x2c], 0x14
sub edx, 1
jne 0x10023222
mov edx, dword [ebx + 0xc]
mov edi, 2
cmp edx, edi
jle 0x10023297
nop
mov ecx, dword [esi + 0x30]
mov ax, word [esi + 0x28]
movzx edx, di
inc edi
mov word [ecx], ax
movzx ecx, word [esi + 0x28]
mov eax, dword [esi + 0x30]
dec cx
add cx, dx
mov word [eax + 2], cx
mov eax, dword [esi + 0x30]
movzx ecx, word [esi + 0x28]
add cx, dx
mov edx, dword [ebx + 0xc]
mov word [eax + 4], cx
add dword [esi + 0x30], 6
cmp edi, edx
jl 0x10023260
movzx eax, dx
add dword [esi + 0x28], eax
lea esp, [ebp - 0x40]
pop edi
pop esi
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.1002d3bc
mov esp, ebp
pop ebp
mov esp, ebx
pop ebx
ret 0x10