Function at 0x1400471e0
Capabilities:
Check for time delay via gettickcount
Encode data using xor
Terminate process

Disassembly:
mov r11, rsp
mov qword [r11 + 0x18], rbx
mov qword [r11 + 0x20], r14
push r15
sub rsp, 0xc0
vmovaps xmmword [r11 - 0x18], xmm6
vmovaps xmmword [r11 - 0x28], xmm7
vmovaps xmmword [r11 - 0x38], xmm8
vmovaps xmmword [r11 - 0x48], xmm9
vmovaps xmmword [r11 - 0x58], xmm10
mov rax, qword [0x14006b060]
xor rax, rsp
mov qword [rsp + 0x60], rax
vmovsd xmm0, qword [0x140061818]
movzx eax, word [0x140061820]
lea rdx, [rsp + 0x20]
xor ecx, ecx
mov qword [r11 + 8], rsi
cmp byte [0x140061821], cl
vmovsd qword [rsp + 0x20], xmm0
mov word [rsp + 0x28], ax
je 0x140047280
xor byte [rsp + 0x21], 0x31
xor byte [rsp + 0x22], 0x32
xor byte [rsp + 0x23], 0x33
xor byte [rsp + 0x24], 0x34
xor byte [rsp + 0x25], 0x35
xor byte [rsp + 0x26], 0x36
xor byte [rsp + 0x27], 0x37
xor byte [rsp + 0x28], 0x38
xor byte [rsp + 0x29], 0x39
mov byte [rsp + 0x20], 0xc9
call qword [sym.imp.USER32.dll_FindWindowA]
mov rcx, rax
lea rdx, [rsp + 0x58]
call qword [sym.imp.USER32.dll_GetWindowThreadProcessId]
vmovups xmm0, xmmword [str.wP_VQ_v]
mov eax, dword [str.nolID]
lea rcx, [rsp + 0x34]
vmovdqu xmm7, xmmword [0x140061ed0]
vmovdqu xmm6, xmmword [0x140062020]
vmovdqu xmm9, xmmword [0x140061f20]
vmovups xmmword [rsp + 0x30], xmm0
vmovdqu xmm0, xmmword [0x140061fe0]
mov dword [rsp + 0x40], eax
xor ebx, ebx
movzx eax, byte [0x140061bac]
mov r14d, 4
mov r15d, 0x1f
mov byte [rsp + 0x44], al
vmovdqu xmmword [rsp + 0x20], xmm0
mov edx, dword [rsp + 0x20]
mov r8d, ebx
vmovd xmm8, r14d
vmovd xmm10, r15d
vmovd xmm0, r8d
vpshufd xmm0, xmm0, 0
vpaddd xmm5, xmm0, xmm7
vpunpckldq xmm0, xmm5, xmm5
vpmuldq xmm3, xmm0, xmm6
vpunpckhdq xmm1, xmm5, xmm5
vpmuldq xmm2, xmm1, xmm6
vshufps xmm0, xmm3, xmm2, 0xdd
vpsrad xmm4, xmm0, xmm8
vpsrld xmm0, xmm4, xmm10
vpaddd xmm1, xmm0, xmm4
vmovd xmm0, dword [rcx - 4]
vpmulld xmm2, xmm1, xmm9
vpsubd xmm3, xmm5, xmm2
vpshufb xmm4, xmm3, xmmword [0x140061e90]
vmovd xmm1, edx
vpaddb xmm2, xmm4, xmm1
vpxor xmm1, xmm2, xmm0
vmovd dword [rcx - 4], xmm1
lea eax, [r8 + 4]
add r8d, 8
lea rcx, [rcx + 8]
vmovd xmm0, eax
vpshufd xmm0, xmm0, 0
vpaddd xmm5, xmm0, xmm7
vpunpckldq xmm0, xmm5, xmm5
vpmuldq xmm3, xmm0, xmm6
vpunpckhdq xmm1, xmm5, xmm5
vpmuldq xmm2, xmm1, xmm6
vshufps xmm0, xmm3, xmm2, 0xdd
vpsrad xmm4, xmm0, xmm8
vpsrld xmm1, xmm4, xmm10
vpaddd xmm0, xmm1, xmm4
vpmulld xmm2, xmm0, xmm9
vmovd xmm0, edx
vpsubd xmm3, xmm5, xmm2
vpshufb xmm4, xmm3, xmmword [0x140061e90]
vpaddb xmm1, xmm4, xmm0
vmovd xmm0, dword [rcx - 8]
vpxor xmm1, xmm1, xmm0
vmovd dword [rcx - 8], xmm1
cmp r8d, 0x10
jl 0x140047301
cmp r8d, 0x15
jge 0x140047440
movsxd rax, r8d
lea r9, [rsp + 0x30]
add r9, rax
nop dword [rax]
mov eax, 0x5397829d
lea r9, [r9 + 1]
imul r8d
sar edx, 4
mov eax, edx
shr eax, 0x1f
add edx, eax
movsx eax, dl
imul ecx, eax, 0x31
movzx eax, r8b
inc r8d
sub al, cl
add al, 0x30
xor byte [r9 - 1], al
cmp r8d, 0x15
jl 0x1400473e0
mov edx, dword [rsp + 0x58]
lea rcx, [rsp + 0x30]
call fcn.1400036e0
call qword [sym.imp.KERNEL32.dll_GetTickCount]
mov esi, eax
movzx eax, word [0x140061db0]
mov word [rsp + 0x50], ax
movzx eax, byte [0x140061db2]
mov byte [rsp + 0x52], al
jmp 0x14004746d
mov edx, dword [rsp + 0x58]
lea rcx, [rsp + 0x30]
call fcn.1400036e0
call qword [sym.imp.KERNEL32.dll_GetTickCount]
movzx ecx, word [0x140061db0]
mov esi, eax
mov word [rsp + 0x50], cx
movzx ecx, byte [0x140061db2]
mov byte [rsp + 0x52], cl
vmovups ymm0, ymmword [0x140061d90]
vmovdqu xmm7, xmmword [0x140061ed0]
vmovdqu xmm6, xmmword [0x140062020]
vmovdqu xmm9, xmmword [0x140061f20]
vmovups ymmword [rsp + 0x30], ymm0
vmovdqu xmm0, xmmword [0x140061fe0]
vmovdqu xmmword [rsp + 0x20], xmm0
mov edx, dword [rsp + 0x20]
lea rcx, [rsp + 0x34]
mov r8d, ebx
vmovd xmm8, r14d
vmovd xmm10, r15d
nop word [rax + rax]
vmovd xmm0, r8d
vpshufd xmm0, xmm0, 0
vpaddd xmm5, xmm0, xmm7
vpunpckldq xmm0, xmm5, xmm5
vpmuldq xmm3, xmm0, xmm6
vpunpckhdq xmm1, xmm5, xmm5
vpmuldq xmm2, xmm1, xmm6
vshufps xmm0, xmm3, xmm2, 0xdd
vpsrad xmm4, xmm0, xmm8
vpsrld xmm0, xmm4, xmm10
vpaddd xmm1, xmm0, xmm4
vmovd xmm0, dword [rcx - 4]
vpmulld xmm2, xmm1, xmm9
vpsubd xmm3, xmm5, xmm2
vpshufb xmm4, xmm3, xmmword [0x140061e90]
vmovd xmm1, edx
vpaddb xmm2, xmm4, xmm1
vpxor xmm1, xmm2, xmm0
vmovd dword [rcx - 4], xmm1
lea eax, [r8 + 4]
add r8d, 8
lea rcx, [rcx + 8]
vmovd xmm0, eax
vpshufd xmm0, xmm0, 0
vpaddd xmm5, xmm0, xmm7
vpunpckldq xmm0, xmm5, xmm5
vpmuldq xmm3, xmm0, xmm6
vpunpckhdq xmm1, xmm5, xmm5
vpmuldq xmm2, xmm1, xmm6
vshufps xmm0, xmm3, xmm2, 0xdd
vpsrad xmm4, xmm0, xmm8
vpsrld xmm1, xmm4, xmm10
vpaddd xmm0, xmm1, xmm4
vpmulld xmm2, xmm0, xmm9
vmovd xmm0, edx
vpsubd xmm3, xmm5, xmm2
vpshufb xmm4, xmm3, xmmword [0x140061e90]
vpaddb xmm1, xmm4, xmm0
vmovd xmm0, dword [rcx - 8]
vpxor xmm1, xmm1, xmm0
vmovd dword [rcx - 8], xmm1
cmp r8d, 0x20
jl 0x1400474c0
cmp r8d, 0x23
jge 0x1400475d1
movsxd rax, r8d
lea r9, [rsp + 0x30]
add r9, rax
nop dword [rax]
mov eax, 0x5397829d
lea r9, [r9 + 1]
imul r8d
sar edx, 4
mov eax, edx
shr eax, 0x1f
add edx, eax
movsx eax, dl
imul ecx, eax, 0x31
movzx eax, r8b
inc r8d
sub al, cl
add al, 0x30
xor byte [r9 - 1], al
cmp r8d, 0x23
jl 0x1400475a0
lea rcx, [rsp + 0x30]
vzeroupper
call fcn.1400036e0
mov rax, qword [0x140fb3ef8]
test rax, rax
jne 0x1400477ca
mov qword [rsp + 0xd8], rdi
mov rdi, rbx
nop dword [rax]
test rax, rax
jne 0x1400477c2
test rdi, rdi
jne 0x140047615
mov ecx, 0x10000
jmp 0x14004761c
mov rcx, rdi
shl rcx, 0x1c
call fcn.140047c50
call qword [sym.imp.KERNEL32.dll_GetTickCount]
vmovups xmm0, xmmword [0x140061ac0]
vmovsd xmm1, qword [0x140061ad0]
vmovdqu xmm7, xmmword [0x140061ed0]
vmovdqu xmm6, xmmword [0x140062020]
vmovdqu xmm9, xmmword [0x140061f20]
mov r8d, eax
lea rdx, [rsp + 0x34]
movzx eax, byte [0x140061ad8]
sub r8d, esi
vmovups xmmword [rsp + 0x30], xmm0
vmovdqu xmm0, xmmword [0x140061fe0]
vmovdqu xmmword [rsp + 0x20], xmm0
mov r9d, dword [rsp + 0x20]
mov ecx, ebx
vmovsd qword [rsp + 0x40], xmm1
mov byte [rsp + 0x48], al
vmovd xmm8, r14d
vmovd xmm10, r15d
vmovd xmm0, ecx
vpshufd xmm0, xmm0, 0
vpaddd xmm5, xmm0, xmm7
vpunpckldq xmm0, xmm5, xmm5
vpmuldq xmm3, xmm0, xmm6
vpunpckhdq xmm1, xmm5, xmm5
vpmuldq xmm2, xmm1, xmm6
vshufps xmm0, xmm3, xmm2, 0xdd
vpsrad xmm4, xmm0, xmm8
vpsrld xmm0, xmm4, xmm10
vpaddd xmm1, xmm0, xmm4
vmovd xmm0, dword [rdx - 4]
vpmulld xmm2, xmm1, xmm9
vpsubd xmm3, xmm5, xmm2
vpshufb xmm4, xmm3, xmmword [0x140061e90]
vmovd xmm1, r9d
vpaddb xmm2, xmm4, xmm1
vpxor xmm1, xmm2, xmm0
vmovd dword [rdx - 4], xmm1
lea eax, [rcx + 4]
add ecx, 8
lea rdx, [rdx + 8]
vmovd xmm0, eax
vpshufd xmm0, xmm0, 0
vpaddd xmm5, xmm0, xmm7
vpunpckldq xmm0, xmm5, xmm5
vpmuldq xmm3, xmm0, xmm6
vpunpckhdq xmm1, xmm5, xmm5
vpmuldq xmm2, xmm1, xmm6
vshufps xmm0, xmm3, xmm2, 0xdd
vpsrad xmm4, xmm0, xmm8
vpsrld xmm1, xmm4, xmm10
vpaddd xmm0, xmm1, xmm4
vpmulld xmm2, xmm0, xmm9
vmovd xmm0, r9d
vpsubd xmm3, xmm5, xmm2
vpshufb xmm4, xmm3, xmmword [0x140061e90]
vpaddb xmm1, xmm4, xmm0
vmovd xmm0, dword [rdx - 8]
vpxor xmm1, xmm1, xmm0
vmovd dword [rdx - 8], xmm1
cmp ecx, 0x18
jl 0x140047690
cmp ecx, 0x19
jge 0x14004779d
movsxd rax, ecx
lea r9, [rsp + 0x30]
add r9, rax
nop dword [rax]
mov eax, 0x5397829d
lea r9, [r9 + 1]
imul ecx
sar edx, 4
mov eax, edx
shr eax, 0x1f
add edx, eax
movsx eax, dl
imul edx, eax, 0x31
movzx eax, cl
inc ecx
sub al, dl
add al, 0x30
xor byte [r9 - 1], al
cmp ecx, 0x19
jl 0x140047770
mov rdx, rdi
lea rcx, [rsp + 0x30]
call fcn.1400036e0
inc rdi
cmp rdi, 0xffff
jae 0x1400477c2
mov rax, qword [0x140fb3ef8]
jmp 0x140047600
mov rdi, qword [rsp + 0xd8]
call qword [sym.imp.KERNEL32.dll_GetTickCount]
vmovups xmm0, xmmword [0x140061c50]
vmovsd xmm1, qword [0x140061c60]
mov r10d, eax
mov eax, dword [0x140061c68]
sub r10d, esi
mov dword [rsp + 0x48], eax
cmp byte [0x140061c6b], bl
mov rsi, qword [rsp + 0xd0]
vmovups xmmword [rsp + 0x30], xmm0
vmovsd qword [rsp + 0x40], xmm1
je 0x140047961
vmovdqu xmm0, xmmword [0x140061fe0]
vmovdqu xmm7, xmmword [0x140061ed0]
vmovdqu xmm6, xmmword [0x140062020]
vmovdqu xmm9, xmmword [0x140061f20]
vmovdqu xmmword [rsp + 0x20], xmm0
mov edx, dword [rsp + 0x20]
lea rcx, [rsp + 0x34]
mov r8d, ebx
vmovd xmm8, r14d
vmovd xmm10, r15d
nop dword [rax]
vmovd xmm0, r8d
vpshufd xmm0, xmm0, 0
vpaddd xmm5, xmm0, xmm7
vpunpckldq xmm0, xmm5, xmm5
vpmuldq xmm3, xmm0, xmm6
vpunpckhdq xmm1, xmm5, xmm5
vpmuldq xmm2, xmm1, xmm6
vshufps xmm0, xmm3, xmm2, 0xdd
vpsrad xmm4, xmm0, xmm8
vpsrld xmm0, xmm4, xmm10
vpaddd xmm1, xmm0, xmm4
vmovd xmm0, dword [rcx - 4]
vpmulld xmm2, xmm1, xmm9
vpsubd xmm3, xmm5, xmm2
vpshufb xmm4, xmm3, xmmword [0x140061e90]
vmovd xmm1, edx
vpaddb xmm2, xmm4, xmm1
vpxor xmm1, xmm2, xmm0
vmovd dword [rcx - 4], xmm1
lea eax, [r8 + 4]
add r8d, 8
lea rcx, [rcx + 8]
vmovd xmm0, eax
vpshufd xmm0, xmm0, 0
vpaddd xmm5, xmm0, xmm7
vpunpckldq xmm0, xmm5, xmm5
vpmuldq xmm3, xmm0, xmm6
vpunpckhdq xmm1, xmm5, xmm5
vpmuldq xmm2, xmm1, xmm6
vshufps xmm0, xmm3, xmm2, 0xdd
vpsrad xmm4, xmm0, xmm8
vpsrld xmm1, xmm4, xmm10
vpaddd xmm0, xmm1, xmm4
vpmulld xmm2, xmm0, xmm9
vmovd xmm0, edx
vpsubd xmm3, xmm5, xmm2
vpshufb xmm4, xmm3, xmmword [0x140061e90]
vpaddb xmm1, xmm4, xmm0
vmovd xmm0, dword [rcx - 8]
vpxor xmm1, xmm1, xmm0
vmovd dword [rcx - 8], xmm1
cmp r8d, 0x18
jl 0x140047850
cmp r8d, 0x1c
jge 0x140047961
movsxd rax, r8d
lea r9, [rsp + 0x30]
add r9, rax
nop dword [rax]
mov eax, 0x5397829d
lea r9, [r9 + 1]
imul r8d
sar edx, 4
mov eax, edx
shr eax, 0x1f
add edx, eax
movsx eax, dl
imul ecx, eax, 0x31
movzx eax, r8b
inc r8d
sub al, cl
add al, 0x30
xor byte [r9 - 1], al
cmp r8d, 0x1c
jl 0x140047930
mov edx, r10d
lea rcx, [rsp + 0x30]
call fcn.1400036e0
cmp qword [0x140fb3ef8], rbx
jne 0x140047ae9
lea rdx, [rsp + 0x30]
call fcn.1400470c0
mov r9, rax
cmp byte [rax + 0x1b], bl
je 0x140047acd
vmovdqu xmm0, xmmword [0x140061fe0]
vmovdqu xmm7, xmmword [0x140061ed0]
vmovdqu xmm6, xmmword [0x140062020]
vmovdqu xmm9, xmmword [0x140061f20]
vmovdqu xmmword [rsp + 0x20], xmm0
mov edx, dword [rsp + 0x20]
mov rcx, rax
vmovd xmm8, r14d
vmovd xmm10, r15d
nop dword [rax + rax]
vmovd xmm0, ebx
vpshufd xmm0, xmm0, 0
vpaddd xmm5, xmm0, xmm7
vpunpckldq xmm0, xmm5, xmm5
vpmuldq xmm3, xmm0, xmm6
vpunpckhdq xmm1, xmm5, xmm5
vpmuldq xmm2, xmm1, xmm6
vshufps xmm0, xmm3, xmm2, 0xdd
vpsrad xmm4, xmm0, xmm8
vpsrld xmm1, xmm4, xmm10
vpaddd xmm0, xmm1, xmm4
vpmulld xmm2, xmm0, xmm9
vpsubd xmm3, xmm5, xmm2
vpshufb xmm4, xmm3, xmmword [0x140061e90]
vmovd xmm0, edx
vpaddb xmm1, xmm4, xmm0
vmovd xmm0, dword [rcx]
vpxor xmm1, xmm1, xmm0
vmovd dword [rcx], xmm1
lea eax, [rbx + 4]
add ebx, 8
lea rcx, [rcx + 8]
vmovd xmm0, eax
vpshufd xmm0, xmm0, 0
vpaddd xmm5, xmm0, xmm7
vpunpckldq xmm0, xmm5, xmm5
vpmuldq xmm3, xmm0, xmm6
vpunpckhdq xmm1, xmm5, xmm5
vpmuldq xmm2, xmm1, xmm6
vshufps xmm0, xmm3, xmm2, 0xdd
vpsrad xmm4, xmm0, xmm8
vpsrld xmm0, xmm4, xmm10
vpaddd xmm1, xmm0, xmm4
vmovd xmm0, dword [rcx - 4]
vpmulld xmm2, xmm1, xmm9
vpsubd xmm3, xmm5, xmm2
vpshufb xmm4, xmm3, xmmword [0x140061e90]
vmovd xmm1, edx
vpaddb xmm2, xmm4, xmm1
vpxor xmm1, xmm2, xmm0
vmovd dword [rcx - 4], xmm1
cmp ebx, 0x18
jl 0x1400479d0
cmp ebx, 0x1c
jge 0x140047acd
movsxd r8, ebx
add r8, r9
mov eax, 0x5397829d
lea r8, [r8 + 1]
imul ebx
sar edx, 4
mov eax, edx
shr eax, 0x1f
add edx, eax
movsx eax, dl
imul ecx, eax, 0x31
movzx eax, bl
inc ebx
sub al, cl
add al, 0x30
xor byte [r8 - 1], al
cmp ebx, 0x1c
jl 0x140047aa0
mov rcx, r9
call fcn.1400036e0
mov ecx, 0x2710
call qword [sym.imp.KERNEL32.dll_Sleep]
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_ExitProcess]
mov ecx, 0x1f4
call qword [sym.imp.KERNEL32.dll_Sleep]
mov rcx, qword [rsp + 0x60]
xor rcx, rsp
call fcn.14000ee10
lea r11, [rsp + 0xc0]
mov rbx, qword [r11 + 0x20]
mov r14, qword [r11 + 0x28]
vmovaps xmm6, xmmword [r11 - 0x10]
vmovaps xmm7, xmmword [r11 - 0x20]
vmovaps xmm8, xmmword [r11 - 0x30]
vmovaps xmm9, xmmword [r11 - 0x40]
vmovaps xmm10, xmmword [r11 - 0x50]
mov rsp, r11
pop r15
ret