Function at 0x180006fc8
Capabilities:
Check for time delay via queryperformancecounter
Encode data using xor
Execute anti-debugging instructions
Hash data using murmur3

Disassembly:
push r15
push r14
push r13
push r12
push rsi
push rdi
push rbp
push rbx
sub rsp, 0xc8
mov rax, qword [0x18003e280]
xor rax, rsp
mov qword [rsp + 0xc0], rax
xor r15d, r15d
lea r14, [0x18003f258]
mov r13, qword [sym.imp.KERNEL32.dll_QueryPerformanceCounter]
mov rbp, qword [sym.imp.KERNEL32.dll_GetTickCount]
lea rsi, [0x18002e4a0]
mov rcx, r14
call r13
call rbp
mov edi, eax
rdtsc
mov rbx, rax
call qword [sym.imp.KERNEL32.dll_GetCurrentThreadId]
mov ecx, ebx
rol ecx, 0xd
mov edx, edi
rol edx, 0xf
imul r8d, eax, 0x7fed5213
mov r9d, r15d
and r9d, 7
mov r9d, dword [rsi + r9*4]
imul r10d, r9d, 0x7ed55d16
xor edx, dword [0x18003f258]
xor edx, r8d
xor edx, ecx
xor edx, dword [0x18003f25c]
xor r10d, edi
xor r10d, ebx
xor r10d, eax
xor r10d, edx
or r9d, 1
imul r9d, r10d
mov dword [rsp + r15*4 + 0x30], r9d
inc r15
cmp r15, 0x1c
jne 0x18000700c
xor eax, eax
lea r12, [0x18002eeac]
xor edi, edi
mov dword [rsp + 0x24], edi
mov qword [rsp + 0x28], rax
mov eax, dword [rsi + rax*4]
mov dword [rsp + 0x20], eax
xor edi, edi
mov rbx, qword [sym.imp.KERNEL32.dll_GetCurrentThreadId]
lea rcx, [0x18003f258]
call r13
call rbp
mov r14d, eax
rdtsc
mov r15, rax
call rbx
mov ecx, r15d
rol ecx, 0xd
mov edx, r14d
rol edx, 0xf
imul r8d, eax, 0x7fed5213
xor edx, dword [0x18003f258]
xor edx, r8d
xor edx, ecx
xor edx, dword [0x18003f25c]
xor r14d, r15d
xor r14d, eax
xor r14d, edx
xor edx, edx
mov ecx, dword [rsi + rdx*4]
mov r8d, r14d
rol r8d, cl
mov eax, dword [rsi + rdx*4 + 8]
mov r14d, dword [rsp + rdx*4 + 0x30]
shr ecx, 8
ror r14d, cl
xor r14d, r8d
mov r8d, eax
or r8d, 1
imul r8d, r14d
mov ecx, eax
rol r8d, cl
xor dword [rsp + rdx*4 + 0x34], r8d
inc rdx
cmp rdx, 6
jne 0x1800070e0
mov eax, dword [rsi + rdi*4]
imul ecx, eax, 0x7ed55d16
xor ecx, r14d
or eax, 1
imul eax, ecx
mov dword [rsp + rdi*4 + 0xa0], eax
inc rdi
cmp rdi, 8
jne case.default.0x18000719c
mov ecx, dword [rsp + 0x20]
rol dword [rsp + 0x24], cl
lea rdi, [rsp + 0x30]
mov rcx, rdi
call fcn.18000c73a
mov rcx, rdi
call fcn.18000c802
mov r15d, eax
xor eax, eax
shr rax, 2
movabs rcx, 0x4924924924924925
mul rcx
shr rdx, 1
imul rcx, rdx, 0x70
xor eax, eax
sub rax, rcx
mov ecx, dword [rsi]
mov edx, ecx
shr edx, 0x18
and edx, 7
movsxd rdx, dword [r12 + rdx*4]
add rdx, r12
xor r13d, r13d
xor r14d, r14d
xor ebp, ebp
xor ebx, ebx
mov rdi, rsi
jmp rdx
add r14, 3
add rbp, 0x1c
add rbx, 7
mov rax, rbx
shr rax, 2
movabs rcx, 0x4924924924924925
mul rcx
add rdi, 4
shr rdx, 1
imul rcx, rdx, 0x70
mov rax, rbp
sub rax, rcx
mov ecx, dword [rdi]
mov edx, ecx
shr edx, 0x18
and edx, 7
movsxd rdx, dword [r12 + rdx*4]
add rdx, r12
jmp rdx
mov eax, r13d
and eax, 7
mov edx, dword [rsp + rax*4 + 0xa0]
test byte [rax - 0x75000000], ah
or al, 0x86
rol edx, cl
xor edx, r15d
mov r15d, dword [rsp + r13*4 + 0x30]
shr ecx, 8
ror r15d, cl
xor r15d, edx
jmp 0x180007304
lea eax, [r13 + 1]
and eax, 7
mov eax, dword [rsp + rax*4 + 0xa0]
add eax, r15d
lea ecx, [r13 + 2]
and ecx, 7
mov ecx, dword [rsi + rcx*4]
mov r15d, ecx
or r15d, 1
imul r15d, eax
rol r15d, cl
jmp 0x180007304
mov eax, r13d
and eax, 7
mov edx, dword [rsi + rax*4]
or edx, 1
imul edx, r15d
mov eax, 0x278072c
mov ecx, r14d
shr eax, cl
mov ecx, eax
jmp 0x1800072ff
lea eax, [r13 + 4]
and eax, 7
mov ecx, dword [rsi + rax*4]
rol r15d, cl
lea eax, [r13 + 3]
and eax, 7
mov eax, dword [rsp + rax*4 + 0xa0]
shr ecx, 8
ror eax, cl
xor r15d, eax
jmp 0x180007304
mov eax, dword [rsp + r14*4 + 0x30]
mov ecx, r13d
and ecx, 7
mov ecx, dword [rsi + rcx*4]
imul edx, ecx, 0x7ed55d16
xor edx, eax
or ecx, 1
imul ecx, edx
xor r15d, ecx
jmp 0x180007304
mov eax, dword [rsp + rax + 0x30]
add eax, r15d
shr ecx, 0x10
ror eax, cl
mov r15d, eax
jmp 0x180007304
mov eax, r13d
and eax, 7
mov eax, dword [rsp + rax*4 + 0xa0]
or eax, 1
lea ecx, [r13 + 5]
and ecx, 7
xor eax, dword [rsi + rcx*4]
imul r15d, eax
jmp 0x180007304
lea eax, [r13 + 2]
and eax, 7
mov edx, dword [rsp + rax*4 + 0xa0]
mov ecx, r13d
and ecx, 7
mov r8d, dword [rsi + rcx*4]
xor edx, r8d
or edx, 1
imul edx, r15d
mov ecx, dword [rsp + rax*4 + 0xa0]
xor ecx, r8d
rol edx, cl
mov r15d, edx
test r13b, 1
jne 0x180007361
inc r13
cmp r13, 9
jne 0x18000719e
mov ecx, dword [rsp + 0x20]
shr ecx, 8
ror r15d, cl
lea rdi, [rsp + 0x30]
mov rcx, rdi
call fcn.18000c73a
mov rcx, rdi
call fcn.18000c802
mov edi, dword [rsp + 0x24]
xor edi, eax
xor edi, r15d
mov rax, qword [rsp + 0x28]
inc rax
cmp rax, 3
mov r13, qword [sym.imp.KERNEL32.dll_QueryPerformanceCounter]
mov rbp, qword [sym.imp.KERNEL32.dll_GetTickCount]
jne 0x180007082
jmp 0x18000736d
lea rcx, [rsp + 0x30]
call fcn.18000c73a
jmp 0x18000730a
xor edi, 0x278072c
mov rcx, qword [rsp + 0xc0]
xor rcx, rsp
call fcn.18000f5a0
mov eax, edi
add rsp, 0xc8
pop rbx
pop rbp
pop rdi
pop rsi
pop r12
pop r13
pop r14
pop r15
ret
pop rsp