Function at 0x180003b50
Capabilities:
Contain obfuscated stackstrings
Encode data using xor

Disassembly:
mov qword [rsp + 0x10], rbx
mov qword [rsp + 0x18], rsi
mov qword [rsp + 0x20], rdi
mov qword [rsp + 8], rcx
push rbp
mov rbp, rsp
sub rsp, 0x50
xor eax, eax
mov dword [rbp - 0x30], 0x797c7756
xor ebx, ebx
mov dword [rbp - 0x2c], 0x71637850
mov rsi, rdx
mov word [rbp - 0x28], 0x636d
mov edx, ebx
mov byte [rbp - 0x26], al
mov rdi, r8
nop
movsxd rax, edx
lea rcx, [rbp - 0x30]
add rcx, rax
lea eax, [rdx + 0x11]
inc edx
xor byte [rcx], al
cmp edx, 0xa
jb 0x180003b90
lea rdx, [rbp - 0x30]
mov byte [rbp - 0x26], bl
mov rcx, rsi
call qword [sym.imp.VCRUNTIME140.dll_strstr]
test rax, rax
je 0x180003ca0
movdqa xmm0, xmmword [0x1800011f0]
xor eax, eax
movdqu xmmword [rbp - 0x20], xmm0
mov byte [rbp - 0xe], al
mov edx, ebx
mov word [rbp - 0x10], 0x4644
nop dword [rax]
movsxd rax, edx
lea rcx, [rbp - 0x20]
add rcx, rax
lea eax, [rdx + 0x11]
inc edx
xor byte [rcx], al
cmp edx, 0x12
jb 0x180003be0
lea rdx, [rbp - 0x20]
mov byte [rbp - 0xe], bl
mov rcx, rdi
call qword [sym.imp.VCRUNTIME140.dll_strstr]
test rax, rax
jne 0x180003dbb
mov dword [rbp - 0x30], 0x607c7d5d
mov edx, ebx
mov dword [rbp - 0x2c], 0x476f7977
mov dword [rbp - 0x28], 0x6f74765a
mov word [rbp - 0x24], 0x7a78
mov byte [rbp - 0x22], al
nop
movsxd rax, edx
lea rcx, [rbp - 0x30]
add rcx, rax
lea eax, [rdx + 0x11]
inc edx
xor byte [rcx], al
cmp edx, 0xe
jb 0x180003c30
lea rdx, [rbp - 0x30]
mov byte [rbp - 0x22], bl
mov rcx, rdi
call qword [sym.imp.VCRUNTIME140.dll_strstr]
test rax, rax
jne 0x180003dbb
mov dword [rbp + 0x10], 0x6063735d
mov edx, ebx
mov word [rbp + 0x14], 0x667a
mov byte [rbp + 0x16], al
movsxd rax, edx
lea rcx, [rbp + 0x10]
add rcx, rax
lea eax, [rdx + 0x11]
inc edx
xor byte [rcx], al
cmp edx, 6
jb 0x180003c71
lea rdx, [rbp + 0x10]
mov byte [rbp + 0x16], bl
mov rcx, rdi
call qword [sym.imp.VCRUNTIME140.dll_strstr]
test rax, rax
jne 0x180003dbb
mov dword [rbp - 0x30], 0x7d607353
mov edx, ebx
mov dword [rbp - 0x2c], 0x6c795376
mov dword [rbp - 0x28], 0x626e70
nop word [rax + rax]
movsxd rax, edx
lea rcx, [rbp - 0x30]
add rcx, rax
lea eax, [rdx + 0x11]
inc edx
xor byte [rcx], al
cmp edx, 0xb
jb 0x180003cc0
lea rdx, [rbp - 0x30]
mov byte [rbp - 0x25], bl
mov rcx, rsi
call qword [sym.imp.VCRUNTIME140.dll_strstr]
test rax, rax
je 0x180003d3f
movdqa xmm0, xmmword [0x1800011a0]
xor eax, eax
movdqu xmmword [rbp - 0x20], xmm0
mov byte [rbp - 0xe], al
mov edx, ebx
mov word [rbp - 0x10], 0x4757
nop word [rax + rax]
movsxd rax, edx
lea rcx, [rbp - 0x20]
add rcx, rax
lea eax, [rdx + 0x11]
inc edx
xor byte [rcx], al
cmp edx, 0x12
jb 0x180003d10
lea rdx, [rbp - 0x20]
mov byte [rbp - 0xe], bl
mov rcx, rdi
call qword [sym.imp.VCRUNTIME140.dll_strstr]
test rax, rax
jne 0x180003dbb
movdqa xmm0, xmmword [0x180001140]
mov edx, ebx
movdqu xmmword [rbp - 0x30], xmm0
nop
movsxd rax, edx
lea rcx, [rbp - 0x30]
add rcx, rax
lea eax, [rdx + 0x11]
inc edx
xor byte [rcx], al
cmp edx, 0xf
jb 0x180003d50
lea rdx, [rbp - 0x30]
mov byte [rbp - 0x21], bl
mov rcx, rsi
call qword [sym.imp.VCRUNTIME140.dll_strstr]
test rax, rax
je 0x180003dc2
mov dword [rbp + 0x10], 0x7f6070
mov edx, ebx
nop dword [rax]
nop dword [rax + rax]
movsxd rax, edx
lea rcx, [rbp + 0x10]
add rcx, rax
lea eax, [rdx + 0x11]
inc edx
xor byte [rcx], al
cmp edx, 3
jb 0x180003d90
lea rdx, [rbp + 0x10]
mov byte [rbp + 0x13], bl
mov rcx, rdi
call qword [sym.imp.VCRUNTIME140.dll_strstr]
test rax, rax
je 0x180003dc2
mov al, 1
jmp 0x180003e4d
mov dword [rbp - 0x30], 0x78636a74
mov edx, ebx
mov dword [rbp - 0x2c], 0x6e7e657a
mov word [rbp - 0x28], 0x7c
nop dword [rax + rax]
movsxd rax, edx
lea rcx, [rbp - 0x30]
add rcx, rax
lea eax, [rdx + 0x11]
inc edx
xor byte [rcx], al
cmp edx, 9
jb 0x180003de0
lea rdx, [rbp - 0x30]
mov byte [rbp - 0x27], bl
mov rcx, rsi
call qword [sym.imp.VCRUNTIME140.dll_strstr]
test rax, rax
je 0x180003e4d
xor eax, eax
mov dword [rbp + 0x10], 0x7b7e7f70
mov byte [rbp + 0x14], al
nop word [rax + rax]
movsxd rax, ebx
lea rcx, [rbp + 0x10]
add rcx, rax
lea eax, [rbx + 0x11]
inc ebx
xor byte [rcx], al
cmp ebx, 4
jb 0x180003e20
lea rdx, [rbp + 0x10]
mov byte [rbp + 0x14], 0
mov rcx, rdi
call qword [sym.imp.VCRUNTIME140.dll_strstr]
test rax, rax
setne al
mov rbx, qword [rsp + 0x68]
mov rsi, qword [rsp + 0x70]
mov rdi, qword [rsp + 0x78]
add rsp, 0x50
pop rbp
ret