Function at 0x180003e85
Capabilities:
Check for time delay via queryperformancecounter
Encode data using xor
Execute anti-debugging instructions
Hash data using murmur3

Disassembly:
push r15
push r14
push r13
push r12
push rsi
push rdi
push rbp
push rbx
sub rsp, 0xb8
mov rax, qword [0x18003e280]
xor rax, rsp
mov qword [rsp + 0xb0], rax
xor esi, esi
lea r15, [0x18003f258]
mov r12, qword [sym.imp.KERNEL32.dll_QueryPerformanceCounter]
mov r13, qword [sym.imp.KERNEL32.dll_GetTickCount]
lea rdi, [0x18002e2c0]
mov rcx, r15
call r12
call r13
mov ebx, eax
rdtsc
mov r14, rax
call qword [sym.imp.KERNEL32.dll_GetCurrentThreadId]
mov ecx, r14d
rol ecx, 0xd
mov edx, ebx
rol edx, 0xf
imul r8d, eax, 0x7fed5213
mov r9d, esi
and r9d, 7
mov r9d, dword [rdi + r9*4]
imul r10d, r9d, 0x7ed55d16
xor edx, dword [0x18003f258]
xor edx, r8d
xor edx, ecx
xor edx, dword [0x18003f25c]
xor r10d, ebx
xor r10d, r14d
xor r10d, eax
xor r10d, edx
or r9d, 1
imul r9d, r10d
mov dword [rsp + rsi*4 + 0x30], r9d
inc rsi
cmp rsi, 0x18
jne 0x180003ec8
xor eax, eax
lea rbx, [0x18003f258]
lea r14, [0x18002ed4c]
xor esi, esi
mov qword [rsp + 0x28], rax
mov dword [rsp + 0x24], esi
xor esi, esi
mov rcx, rbx
call r12
call r13
mov ebp, eax
rdtsc
mov r15, rax
call qword [sym.imp.KERNEL32.dll_GetCurrentThreadId]
mov ecx, r15d
rol ecx, 0xd
mov edx, ebp
rol edx, 0xf
imul r8d, eax, 0x7fed5213
xor edx, dword [0x18003f258]
xor edx, r8d
xor edx, ecx
xor edx, dword [0x18003f25c]
xor ebp, r15d
xor ebp, eax
xor ebp, edx
xor edx, edx
mov ecx, dword [rdi + rdx*4]
mov r8d, ebp
rol r8d, cl
mov eax, dword [rdi + rdx*4 + 8]
mov ebp, dword [rsp + rdx*4 + 0x30]
shr ecx, 8
ror ebp, cl
xor ebp, r8d
mov r8d, eax
or r8d, 1
imul r8d, ebp
mov ecx, eax
rol r8d, cl
xor dword [rsp + rdx*4 + 0x34], r8d
inc rdx
cmp rdx, 5
jne 0x180003f94
mov eax, dword [rdi + rsi*4]
imul ecx, eax, 0x7ed55d16
xor ecx, ebp
or eax, 1
imul eax, ecx
mov dword [rsp + rsi*4 + 0x90], eax
inc rsi
cmp rsi, 8
jne 0x180003f52
lea rcx, [rsp + 0x30]
call fcn.18000b2f4
mov rcx, rbx
call r12
call r13
mov ebp, eax
rdtsc
mov r15, rax
call qword [sym.imp.KERNEL32.dll_GetCurrentThreadId]
mov ecx, r15d
rol ecx, 0xd
mov edx, ebp
rol edx, 0xf
imul r8d, eax, 0x7fed5213
xor edx, dword [0x18003f258]
xor edx, r8d
xor edx, ecx
xor edx, dword [0x18003f25c]
xor ebp, r15d
xor ebp, eax
xor ebp, edx
xor edx, edx
mov eax, edx
and eax, 7
mov eax, dword [rdi + rax*4]
mov ecx, eax
rol ebp, cl
mov ecx, eax
shr ecx, 8
ror eax, cl
xor eax, ebp
lea r8, [rdx + 1]
mov ecx, r8d
and ecx, 7
mov ecx, dword [rdi + rcx*4]
mov ebp, ecx
or ebp, 1
imul ebp, eax
rol ebp, cl
xor dword [rsp + rdx*4 + 0x30], ebp
mov rdx, r8
cmp r8, 0xf
jne case.default.0x180004096
mov r15, 0xffffffffffffffeb
mov eax, dword [rdi]
mov ecx, eax
shr ecx, 0x18
and ecx, 7
movsxd rcx, dword [r14 + rcx*4]
add rcx, r14
xor r12d, r12d
xor r13d, r13d
mov rsi, rdi
jmp rcx
invalid
add r15, 3
add r13, 7
add rsi, 4
mov eax, dword [rsi]
mov ecx, eax
shr ecx, 0x18
and ecx, 7
movsxd rcx, dword [r14 + rcx*4]
add rcx, r14
jmp rcx
mov edx, dword [rsp + r12*4 + 0x90]
mov ecx, eax
rol edx, cl
mov r8d, dword [rsp + r12*4 + 0x30]
shr eax, 8
mov ecx, eax
ror r8d, cl
xor r8d, ebp
xor r8d, edx
mov ebp, r8d
jmp 0x1800041b7
mov eax, dword [rsp + r12*4 + 0x94]
add eax, ebp
lea ecx, [r12 + 2]
and ecx, 7
mov ecx, dword [rdi + rcx*4]
mov ebp, ecx
or ebp, 1
imul ebp, eax
rol ebp, cl
jmp 0x1800041b7
mov ch, 0
add byte [rax], al
or eax, 1
imul eax, ebp
lea ecx, [r15 + 0x15]
mov edx, 0xa48fec18
shr edx, cl
mov ecx, edx
rol eax, cl
mov ebp, eax
jmp 0x1800041b7
lea eax, [r12 + 4]
and eax, 7
mov ecx, dword [rdi + rax*4]
rol ebp, cl
lea eax, [r12 + 3]
and eax, 7
mov eax, dword [rsp + rax*4 + 0x90]
shr ecx, 8
jmp 0x16bc91448
invalid
mov ecx, dword [rsp + r15*4 + 0x84]
imul edx, eax, 0x7ed55d16
xor edx, ecx
or eax, 1
imul eax, edx
xor ebp, eax
jmp 0x1800041b7
lea ecx, [r13 - 0x18]
cmp r12, 4
cmovb rcx, r13
mov ecx, ecx
mov edx, dword [rsp + rcx*4 + 0x30]
add edx, ebp
shr eax, 0x10
mov ecx, eax
rcl ebx, 0xca
jmp 0x1800041b5
mov eax, dword [rsp + r12*4 + 0x90]
or eax, 1
lea ecx, [r12 + 5]
and ecx, 7
xor eax, dword [rdi + rcx*4]
imul ebp, eax
jmp 0x1800041b7
lea ecx, [r12 + 2]
and ecx, 7
mov edx, dword [rsp + rcx*4 + 0x90]
xor edx, eax
or edx, 1
imul edx, ebp
mov ecx, dword [rsp + rcx*4 + 0x90]
xor ecx, eax
rol edx, cl
mov ebp, edx
test r12b, 1
jne 0x1800041fa
inc r12
cmp r12, 7
jne 0x180004098
mov esi, dword [rsp + 0x24]
xor esi, ebp
lea rcx, [rsp + 0x30]
call fcn.18000b2f4
mov rax, qword [rsp + 0x28]
inc eax
cmp eax, 0xf
mov r12, qword [sym.imp.KERNEL32.dll_QueryPerformanceCounter]
mov r13, qword [sym.imp.KERNEL32.dll_GetTickCount]
jne 0x180003f47
jmp 0x180004206
lea rcx, [rsp + 0x30]
call fcn.18000b2f4
jmp 0x1800041bd
xor esi, 0xa48fec18
mov rcx, qword [rsp + 0xb0]
xor rcx, rsp
call fcn.18000f5a0
mov eax, esi
add rsp, 0xb8
pop rbx
pop rbp
pop rdi
pop rsi
pop r12
pop r13
pop r14
pop r15
ret
mov qword [rsp + 0x28], rax
mov r12d, dword [r15 + rax*4]
imul r13d, r12d, 0x7ed55d16
xor r14d, r14d
mov rcx, rdi
call fcn.18000b3bc
mov ecx, dword [r14 + r15]
imul edx, ecx, 0x7ed55d16
xor edx, eax
or ecx, 1
imul ecx, edx
mov dword [rsp + r14 + 0x80], ecx
add r14, 4
cmp r14, 0x20
jne 0x18000448f
or r12d, 1
mov rcx, rdi
call fcn.18000b464
lea rcx, [0x18003f258]
call rbp
call qword [sym.imp.KERNEL32.dll_GetTickCount]
mov ebp, eax
rdtsc
mov r14, rax
call qword [sym.imp.KERNEL32.dll_GetCurrentThreadId]
mov ecx, r14d
rol ecx, 0xd
mov edx, ebp
rol edx, 0xf
imul r8d, eax, 0x7fed5213
xor edx, dword [0x18003f258]
xor edx, r8d
xor edx, ecx
xor edx, dword [0x18003f25c]
xor ebp, r14d
xor ebp, eax
xor ebp, edx
xor edx, edx
mov eax, edx
and eax, 7
mov eax, dword [r15 + rax*4]
mov ecx, eax
rol ebp, cl
mov ecx, eax
shr ecx, 8
ror eax, cl
xor eax, ebp
lea r8, [rdx + 1]
mov ecx, r8d
and ecx, 7
mov ecx, dword [r15 + rcx*4]
mov ebp, ecx
or ebp, 1
imul ebp, eax
rol ebp, cl
xor dword [rsp + rdx*4 + 0x34], ebp
mov rdx, r8
cmp r8, 0xf
jne 0x18000450f
xor esi, r13d
imul esi, r12d
xor eax, eax
mov eax, dword [r15 + rax*4]
mov ecx, eax
shr ecx, 0x18
and ecx, 7
movsxd rcx, dword [rbx + rcx*4]
add rcx, rbx
xor r13d, r13d
xor r14d, r14d
xor r12d, r12d
in al, 0xff
invalid
in al, 0xff
loope 0x1800045bb
add r14, 3
add esi, 3
add r12, 7
mov eax, dword [r15 + r13*4]
mov ecx, eax
shr ecx, 0x18
and ecx, 7
movsxd rcx, dword [rbx + rcx*4]
add rcx, rbx
jmp rcx
add byte [rcx + 0x46c2d3c1], cl
mov eax, dword [rsp + rbp*4 + 0x34]
shr eax, 8
mov ecx, eax
ror r8d, cl
xor r8d, ebp
xor r8d, edx
mov ebp, r8d
jmp 0x180004672
add byte [rax], al
add byte [rax], al
mov eax, dword [rsp + r13*4 + 0x84]
add byte [rax], al
add eax, ebp
mov ecx, dword [r15 + r13*4 + 8]
mov ebp, ecx
or ebp, 1
imul ebp, eax
rol ebp, cl
jmp 0x180004672
rcl ebx, 1
ror byte [rcx + 0x84e9c5], 0
add byte [rbx - 0x75], al
scasq rax, qword [rdi]
adc bl, dl
invalid
add byte [rax], al
shr ecx, 8
ror eax, cl
jmp 0x180004617
xor ebp, eax
jmp 0x180004672
rcl ebx, 0xca
jmp 0x180004670
mov ebp, edx
test r13b, 1
jne 0x1800046a2
inc r13
cmp r13, 4
jne 0x180004571
xor esi, ebp
mov rax, qword [rsp + 0x28]
inc rax
cmp rax, 7
mov rbp, qword [sym.imp.KERNEL32.dll_QueryPerformanceCounter]
jne 0x18000447c
jmp 0x1800046ac
mov rcx, rdi
call fcn.18000b464
jmp 0x180004678
xor esi, 0x770f69c3
mov rcx, qword [rsp + 0xa0]
xor rcx, rsp
call fcn.18000f5a0
mov eax, esi
add rsp, 0xa8
pop rbx
pop rbp
pop rdi
pop rsi
pop r12
pop r13
pop r14
pop r15
ret