Function at 0x14027f540
Capabilities:
Check for time delay via gettickcount
Encrypt data using rc4 prga

Disassembly:
push r15
push r14
push r13
push r12
push rsi
push rdi
push rbp
push rbx
sub rsp, 0x88
movaps xmmword [rsp + 0x70], xmm6
mov qword [rsp + 0x60], rcx
movabs rsi, 0xffff574000000000
xor r15d, r15d
movaps xmm6, xmmword [0x1403d40d0]
lea r12, [rsp + 0x20]
xor ecx, ecx
jmp 0x14027f5a5
mov rcx, qword [rsp + 0x48]
add rcx, 1
mov r15, qword [rsp + 0x50]
movabs rax, 0xa262b6dbb97e9b29
add r15, rax
cmp rcx, 4
je 0x14027fa16
mov qword [rsp + 0x48], rcx
mov qword [rsp + 0x50], r15
xor eax, eax
jmp 0x14027f711
imul eax, r8d, 0xc28f5c29
add eax, 0x51eb850
ror eax, 4
cmp eax, 0xa3d70b
setb r9b
movzx eax, byte [rsp + 0x26]
movzx ebp, r12b
cmp bpl, 3
setae cl
and cl, r9b
add ebx, eax
add ebx, r14d
add ebx, edi
add ebx, edx
add ebx, esi
lea rax, [0x1403d5570]
add ebx, dword [rax + rbp*4 - 4]
movzx eax, cl
add ebx, eax
movsxd rax, ebx
imul rax, rax, 0x15180
movabs rbx, 0x66f800fba399536f
lea r12, [rsp + 0x20]
movabs r13, 0xc85abc8da7534a4d
mov r14, qword [sym.imp.KERNEL32.DLL_GetTickCount]
mov rbp, qword [sym.imp.ole32.dll_CoCreateGuid]
mov r15, qword [rsp + 0x40]
mov rdi, qword [rsp + 0x58]
imul rcx, r11, 0xe10
imul rsi, rdi, 0x3c
add rsi, rcx
mov rcx, qword [rsp + 0x38]
imul rcx, r13
add rsi, r10
add rsi, rax
add rsi, rcx
call fcn.14035f360
movabs rcx, 0x20c49ba5e353f7cf
imul rcx
mov rax, rdx
shr rax, 0x3f
sar rdx, 7
add rdx, rax
imul rsi, r13
add rsi, rdx
call r14
cdqe
imul rsi, r13
add rsi, rax
mov rcx, r12
call rbp
mov rdi, qword [rsp + 0x20]
imul rsi, rbx
sub rdi, rsi
movabs rsi, 0xffff574000000000
add rdi, r15
movabs rax, 0xb8e2d08e71398555
add rdi, rax
imul rdi, r13
add rdi, qword [rsp + 0x28]
mov rcx, r12
call rbp
imul rdi, r13
add rdi, qword [rsp + 0x20]
imul rdi, r13
add rdi, qword [rsp + 0x28]
mov qword [rsp + 0x38], rdi
mov eax, dword [rsp + 0x30]
shl rdi, 0x20
or rdi, rax
mov rax, qword [rsp + 0x60]
mov rcx, qword [rsp + 0x68]
xor qword [rax + rcx*8], rdi
mov rax, rcx
add rax, 1
add r15, r13
cmp rax, 4
je 0x14027f580
mov qword [rsp + 0x68], rax
mov qword [rsp + 0x40], r15
movaps xmmword [rsp + 0x30], xmm6
mov rcx, r12
mov rax, qword [sym.imp.KERNEL32.DLL_GetLocalTime]
call rax
movsx ebp, word [rsp + 0x20]
movzx r10d, byte [rsp + 0x28]
movzx r9d, byte [rsp + 0x2c]
mov rax, rsi
cmp ebp, 0xffff8000
je 0x14027f85a
movzx eax, word [rsp + 0x22]
mov rcx, r9
shl rcx, 0x30
mov rdx, r10
shl rdx, 0x20
or rdx, rcx
shl eax, 8
movzx r11d, ax
or r11, rdx
shr r11, 8
imul eax, ebp, 0x147b
mov ecx, eax
sar ecx, 0x15
shr eax, 0x1f
add eax, ecx
add eax, 0xfffffffe
movsx ecx, ax
imul edi, ecx, 0xfffffe70
lea r12d, [rdi + rbp]
imul edx, ecx, 0x23ab1
imul r14d, r12d, 0x16d
lea ecx, [rdi + rbp]
add ecx, 0xffffffff
add edi, ebp
add edi, 2
test ecx, ecx
cmovns edi, ecx
sar edi, 2
movsxd rcx, ecx
imul rbx, rcx, 0xffffffffae147ae1
mov rbp, rbx
shr rbp, 0x3f
sar rbx, 0x25
add ebx, ebp
imul rsi, rcx, 0x51eb851f
mov rcx, rsi
shr rcx, 0x3f
sar rsi, 0x27
add esi, ecx
test r12b, 3
jne 0x14027f805
movsxd rcx, r12d
imul rcx, rcx, 0x51eb851f
mov rbp, rcx
shr rbp, 0x3f
sar rcx, 0x25
add ecx, ebp
imul ebp, ecx, 0x64
mov eax, r12d
mov r8b, 1
sub eax, ebp
jne 0x14027f81d
imul eax, r12d, 0xc28f5c29
add eax, 0x51eb850
ror eax, 4
cmp eax, 0xa3d70b
setb r8b
movzx eax, byte [rsp + 0x26]
movzx ebp, r11b
cmp bpl, 3
setae cl
and cl, r8b
add edx, eax
add edx, r14d
add edx, edi
add edx, ebx
add edx, esi
lea rax, [0x1403d5570]
add edx, dword [rax + rbp*4 - 4]
movzx eax, cl
add edx, eax
movsxd rax, edx
imul rax, rax, 0x15180
lea r12, [rsp + 0x20]
movzx ecx, byte [rsp + 0x2a]
imul rdx, r10, 0xe10
imul rsi, rcx, 0x3c
add rsi, rdx
mov rcx, qword [rsp + 0x30]
movabs r13, 0xc85abc8da7534a4d
imul rcx, r13
add rsi, r9
add rsi, rax
add rsi, rcx
call fcn.14035f360
movabs r15, 0x20c49ba5e353f7cf
imul r15
mov rax, rdx
shr rax, 0x3f
sar rdx, 7
add rdx, rax
imul rsi, r13
add rsi, rdx
mov r14, qword [sym.imp.KERNEL32.DLL_GetTickCount]
call r14
cdqe
imul rsi, r13
add rsi, rax
mov rcx, r12
mov rbp, qword [sym.imp.ole32.dll_CoCreateGuid]
call rbp
mov rdi, qword [rsp + 0x20]
movabs rbx, 0x66f800fba399536f
imul rsi, rbx
sub rdi, rsi
movabs rsi, 0xffff574000000000
mov r15, qword [rsp + 0x40]
add rdi, r15
imul rdi, r13
add rdi, qword [rsp + 0x28]
mov rcx, r12
call rbp
imul rdi, r13
add rdi, qword [rsp + 0x20]
imul rdi, r13
add rdi, qword [rsp + 0x28]
mov qword [rsp + 0x30], rdi
mov rcx, r12
call qword [sym.imp.KERNEL32.DLL_GetLocalTime]
movsx edx, word [rsp + 0x20]
movzx r11d, byte [rsp + 0x28]
movzx r10d, byte [rsp + 0x2c]
movzx edi, byte [rsp + 0x2a]
mov rax, rsi
cmp edx, 0xffff8000
je 0x14027f641
mov qword [rsp + 0x58], rdi
movzx eax, word [rsp + 0x22]
mov rcx, r10
shl rcx, 0x30
mov rbx, r11
shl rbx, 0x20
or rbx, rcx
shl eax, 8
movzx r12d, ax
or r12, rbx
shr r12, 8
imul eax, edx, 0x147b
mov ecx, eax
sar ecx, 0x15
shr eax, 0x1f
add eax, ecx
add eax, 0xfffffffe
movsx ecx, ax
imul esi, ecx, 0xfffffe70
lea r8d, [rsi + rdx]
imul ebx, ecx, 0x23ab1
imul r14d, r8d, 0x16d
lea ecx, [rsi + rdx]
add ecx, 0xffffffff
lea edi, [rsi + rdx]
add edi, 2
test ecx, ecx
cmovns edi, ecx
sar edi, 2
movsxd rcx, ecx
imul rdx, rcx, 0xffffffffae147ae1
mov rsi, rdx
shr rsi, 0x3f
sar rdx, 0x25
add edx, esi
imul rsi, rcx, 0x51eb851f
mov rcx, rsi
shr rcx, 0x3f
sar rsi, 0x27
add esi, ecx
test r8b, 3
jne 0x14027f5c0
movsxd rcx, r8d
imul rcx, rcx, 0x51eb851f
mov rbp, rcx
shr rbp, 0x3f
sar rcx, 0x25
add ecx, ebp
imul ebp, ecx, 0x64
mov eax, r8d
mov r9b, 1
sub eax, ebp
jne 0x14027f5d8
jmp 0x14027f5c0
movaps xmm6, xmmword [rsp + 0x70]
add rsp, 0x88
pop rbx
pop rbp
pop rdi
pop rsi
pop r12
pop r13
pop r14
pop r15
ret