Function at 0x18000e6e0
Capabilities:
Encode data using xor
Hash data with crc32
Link many functions at runtime

Disassembly:
mov dword [rsp + 8], ecx
push rbp
push rbx
lea rbp, [rsp - 0xa8]
sub rsp, 0x1a8
mov ebx, ecx
lea rcx, [rbp - 0x60]
call fcn.180040680
mov r8, qword [rax]
mov rdx, qword [r8 + 8]
cmp byte [rdx + 0x19], 0
jne 0x18000e727
nop dword [rax]
cmp dword [rdx + 0x20], ebx
jae 0x18000e71b
mov rdx, qword [rdx + 0x10]
jmp 0x18000e721
mov r8, rdx
mov rdx, qword [rdx]
cmp byte [rdx + 0x19], 0
je 0x18000e710
cmp byte [r8 + 0x19], 0
jne 0x18000e757
cmp ebx, dword [r8 + 0x20]
jb 0x18000e757
mov rdx, rax
mov rcx, rax
call fcn.180042760
lea rdx, [rbp + 0xc0]
call fcn.1800405a0
mov eax, dword [rax]
add rsp, 0x1a8
pop rbx
pop rbp
ret
mov qword [rsp + 0x1a0], rsi
mov rdx, rax
mov qword [rsp + 0x198], rdi
mov rcx, rax
mov qword [rsp + 0x190], r12
mov qword [rsp + 0x188], r13
mov qword [rsp + 0x180], r14
mov qword [rsp + 0x178], r15
call fcn.180042760
mov rcx, qword [0x1802e0e30]
lea rdx, str.il2cpp_domain_get
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
call rax
mov rcx, qword [0x1802e0e30]
lea rdx, str.il2cpp_domain_get_assemblies
xor r14d, r14d
mov qword [rbp + 0x38], rax
mov qword [rbp + 0x28], r14
mov rbx, rax
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
lea rdx, [rbp + 0x28]
mov rcx, rbx
call rax
mov rcx, qword [0x1802e0e30]
lea rdx, str.il2cpp_domain_get_assemblies
mov rdi, rax
mov qword [rbp + 0x40], rax
mov esi, r14d
mov dword [rbp + 0xd0], r14d
mov qword [rbp + 0xd8], r14
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
lea rdx, [rbp + 0xd8]
mov rcx, rbx
call rax
cmp qword [rbp + 0xd8], rsi
jbe 0x18000f394
mov ebx, r14d
movabs r13, 0x7fffffffffffffff
mov qword [rbp], rbx
nop dword [rax]
mov rax, qword [rdi + rbx*8]
lea rdx, str.il2cpp_image_get_class_count
mov rcx, qword [0x1802e0e30]
mov edi, r14d
mov dword [rbp + 0xc8], r14d
mov r12, qword [rax]
mov qword [rbp + 0x30], r12
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov rcx, r12
call rax
test rax, rax
je 0x18000f27a
nop word [rax + rax]
mov rdx, qword [r12]
xorps xmm0, xmm0
movups xmmword [rsp + 0x30], xmm0
mov qword [rsp + 0x40], r14
mov r8, 0xffffffffffffffff
mov qword [rsp + 0x48], r14
nop dword [rax]
inc r8
cmp byte [rdx + r8], 0
jne 0x18000e890
lea rcx, [rsp + 0x30]
call fcn.180042a30
mov r15, qword [rsp + 0x48]
lea rbx, [rsp + 0x30]
mov r14, qword [rsp + 0x30]
cmp r15, 0xf
mov rsi, qword [rsp + 0x40]
cmova rbx, r14
cmp rsi, 4
jb 0x18000e922
lea rdi, [rsi + rbx]
mov edx, 0x2e
lea r8, [rdi - 3]
mov rcx, rbx
sub r8, rbx
call sub.VCRUNTIME140.dll_memchr
mov r9, rax
test rax, rax
je 0x18000e91c
nop word [rax + rax]
cmp dword [r9], 0x6c6c642e
je 0x18000ea81
inc r9
lea r8, [rdi - 3]
sub r8, r9
mov rcx, r9
mov edx, 0x2e
call sub.VCRUNTIME140.dll_memchr
mov r9, rax
test rax, rax
jne 0x18000e8f0
mov edi, dword [rbp + 0xc8]
mov r9, 0xffffffffffffffff
cmp rsi, r9
jb 0x18000f3d0
mov rax, rsi
lea rcx, [rsp + 0x30]
sub rax, r9
mov edx, 4
cmp rax, rdx
cmovb rdx, rax
cmp r15, 0xf
cmova rcx, r14
sub rsi, rdx
add rcx, r9
mov r8, rsi
sub r8, r9
add rdx, rcx
inc r8
call sub.VCRUNTIME140.dll_memmove
mov rcx, qword [0x1802e0e30]
lea rdx, str.il2cpp_image_get_class
mov qword [rsp + 0x40], rsi
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
movsxd rdx, edi
mov rcx, r12
call rax
xor edi, edi
mov qword [rbp - 8], rax
xorps xmm0, xmm0
mov qword [rsp + 0x60], rdi
movups xmmword [rsp + 0x50], xmm0
mov r15, qword [rax + 0x10]
mov r8, 0xffffffffffffffff
mov rsi, qword [rax + 0x18]
mov qword [rsp + 0x68], rdi
inc r8
cmp byte [rsi + r8], dil
jne 0x18000e9b0
mov rdx, rsi
lea rcx, [rsp + 0x50]
call fcn.180042a30
cmp qword [rsp + 0x60], rdi
mov rdx, qword [rsp + 0x68]
sete bl
cmp rdx, 0xf
jbe 0x18000ea0b
mov rcx, qword [rsp + 0x50]
inc rdx
mov rax, rcx
cmp rdx, 0x1000
jb 0x18000ea06
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x18000f38d
call fcn.18008145c
mov rax, r13
test bl, bl
je 0x18000ebf1
mov rsi, qword [rsp + 0x40]
sub rax, rsi
cmp rax, 2
jb 0x18000f3dc
cmp qword [rsp + 0x48], 0xf
lea r12, [rsp + 0x30]
lea r14, [rsi + 2]
mov qword [rsp + 0x60], rdi
cmova r12, qword [rsp + 0x30]
mov ebx, 0xf
mov qword [rsp + 0x68], rdi
xorps xmm0, xmm0
lea rdi, [rsp + 0x50]
movups xmmword [rsp + 0x50], xmm0
cmp r14, rbx
jbe 0x18000eaeb
mov rbx, r14
or rbx, 0xf
cmp rbx, r13
jbe 0x18000ea8f
movabs rax, 0x8000000000000000
mov rbx, r13
add rax, 0x27
jmp 0x18000eabf
mov edi, dword [rbp + 0xc8]
sub r9, rbx
jmp 0x18000e929
cmp rbx, 0x16
mov eax, 0x16
cmovb rbx, rax
lea rcx, [rbx + 1]
test rcx, rcx
jne 0x18000eaa9
xor edi, edi
jmp 0x18000eae6
cmp rcx, 0x1000
jb 0x18000eade
lea rax, [rcx + 0x27]
cmp rax, rcx
jbe 0x18000f3d6
mov rcx, rax
call fcn.180081420
test rax, rax
je 0x18000f2ca
lea rdi, [rax + 0x27]
and rdi, 0xffffffffffffffe0
mov qword [rdi - 8], rax
jmp 0x18000eae6
call fcn.180081420
mov rdi, rax
mov qword [rsp + 0x50], rdi
mov r8, rsi
mov qword [rsp + 0x60], r14
mov rdx, r12
mov qword [rsp + 0x68], rbx
mov rcx, rdi
call sub.VCRUNTIME140.dll_memcpy
mov word [rdi + rsi], 0x3a3a
mov r8, 0xffffffffffffffff
mov byte [rdi + r14], 0
inc r8
cmp byte [r15 + r8], 0
jne 0x18000eb15
mov rdx, r15
lea rcx, [rsp + 0x50]
call fcn.180040890
xor r14d, r14d
movups xmm0, xmmword [rax]
movups xmm1, xmmword [rax + 0x10]
mov qword [rax + 0x10], r14
mov qword [rax + 0x18], 0xf
mov byte [rax], r14b
mov rdx, qword [rsp + 0x48]
movups xmmword [rbp - 0x70], xmm0
movups xmmword [rbp - 0x60], xmm1
cmp rdx, 0xf
jbe 0x18000eb92
mov rcx, qword [rsp + 0x30]
inc rdx
mov rax, rcx
cmp rdx, 0x1000
jb 0x18000eb85
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x18000f2ca
call fcn.18008145c
movups xmm0, xmmword [rbp - 0x70]
movups xmm1, xmmword [rbp - 0x60]
mov rdx, qword [rsp + 0x68]
movups xmmword [rsp + 0x30], xmm0
movups xmmword [rsp + 0x40], xmm1
cmp rdx, 0xf
jbe 0x18000ebd9
mov rcx, qword [rsp + 0x50]
inc rdx
mov rax, rcx
cmp rdx, 0x1000
jb 0x18000ebd4
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x18000f2ca
call fcn.18008145c
mov qword [rsp + 0x60], r14
mov qword [rsp + 0x68], 0xf
mov byte [rsp + 0x50], r14b
jmp 0x18000ef2b
mov r14, qword [rsp + 0x40]
sub rax, r14
cmp rax, 2
jb 0x18000f3f4
cmp qword [rsp + 0x48], 0xf
lea r13, [rsp + 0x30]
lea r12, [r14 + 2]
mov qword [rbp - 0x40], rdi
cmova r13, qword [rsp + 0x30]
mov ebx, 0xf
mov qword [rbp - 0x38], rdi
xorps xmm0, xmm0
lea rdi, [rbp - 0x50]
movups xmmword [rbp - 0x50], xmm0
cmp r12, rbx
jbe 0x18000ecbd
mov rbx, r12
movabs rax, 0x7fffffffffffffff
or rbx, 0xf
cmp rbx, rax
jbe 0x18000ec62
mov rbx, rax
movabs rax, 0x8000000000000000
add rax, 0x27
jmp 0x18000ec92
cmp rbx, 0x16
mov eax, 0x16
cmovb rbx, rax
lea rcx, [rbx + 1]
test rcx, rcx
jne 0x18000ec7c
xor edi, edi
jmp 0x18000ecb9
cmp rcx, 0x1000
jb 0x18000ecb1
lea rax, [rcx + 0x27]
cmp rax, rcx
jbe 0x18000f3e2
mov rcx, rax
call fcn.180081420
test rax, rax
je 0x18000f2d1
lea rdi, [rax + 0x27]
and rdi, 0xffffffffffffffe0
mov qword [rdi - 8], rax
jmp 0x18000ecb9
call fcn.180081420
mov rdi, rax
mov qword [rbp - 0x50], rdi
mov r8, r14
mov qword [rbp - 0x40], r12
mov rdx, r13
mov qword [rbp - 0x38], rbx
mov rcx, rdi
call sub.VCRUNTIME140.dll_memcpy
mov ebx, 0x3a3a
mov r8, 0xffffffffffffffff
mov word [rdi + r14], bx
mov byte [rdi + r12], 0
nop dword [rax]
inc r8
cmp byte [rsi + r8], 0
jne 0x18000ecf0
mov rdx, rsi
lea rcx, [rbp - 0x50]
call fcn.180040890
xor r14d, r14d
xorps xmm0, xmm0
movups xmmword [rsp + 0x70], xmm0
mov qword [rbp - 0x80], r14
mov qword [rbp - 0x78], r14
movups xmm0, xmmword [rax]
movups xmmword [rsp + 0x70], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rbp - 0x80], xmm1
mov qword [rax + 0x10], r14
mov qword [rax + 0x18], 0xf
mov byte [rax], r14b
mov rdx, qword [rbp - 0x78]
mov rcx, qword [rbp - 0x80]
mov rax, rdx
sub rax, rcx
cmp rax, 2
jb 0x18000ed73
lea rax, [rcx + 2]
cmp rdx, 0xf
mov qword [rbp - 0x80], rax
lea rax, [rsp + 0x70]
cmova rax, qword [rsp + 0x70]
mov word [rax + rcx], bx
mov byte [rax + rcx + 2], r14b
lea rax, [rsp + 0x70]
jmp 0x18000ed92
lea r9, [0x18026dac4]
mov qword [rsp + 0x20], 2
mov edx, 2
lea rcx, [rsp + 0x70]
call fcn.1800428a0
mov qword [rbp + 0x18], r14
xorps xmm0, xmm0
movups xmmword [rbp + 8], xmm0
mov qword [rbp + 0x20], r14
mov r8, 0xffffffffffffffff
movups xmm0, xmmword [rax]
movups xmmword [rbp + 8], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rbp + 0x18], xmm1
mov qword [rax + 0x10], r14
mov qword [rax + 0x18], 0xf
mov byte [rax], r14b
inc r8
cmp byte [r15 + r8], r14b
jne 0x18000edc6
mov rdx, r15
lea rcx, [rbp + 8]
call fcn.180040890
movups xmm0, xmmword [rax]
movups xmm1, xmmword [rax + 0x10]
mov qword [rax + 0x10], r14
mov qword [rax + 0x18], 0xf
mov byte [rax], r14b
mov rdx, qword [rsp + 0x48]
movups xmmword [rbp - 0x60], xmm0
movups xmmword [rbp - 0x70], xmm1
cmp rdx, 0xf
jbe 0x18000ee3e
mov rcx, qword [rsp + 0x30]
inc rdx
mov rax, rcx
cmp rdx, 0x1000
jb 0x18000ee31
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x18000f2d1
call fcn.18008145c
movups xmm0, xmmword [rbp - 0x60]
movups xmm1, xmmword [rbp - 0x70]
mov rdx, qword [rbp + 0x20]
movups xmmword [rsp + 0x30], xmm0
movups xmmword [rsp + 0x40], xmm1
cmp rdx, 0xf
jbe 0x18000ee83
mov rcx, qword [rbp + 8]
inc rdx
mov rax, rcx
cmp rdx, 0x1000
jb 0x18000ee7e
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x18000f2d1
call fcn.18008145c
mov rdx, qword [rbp - 0x78]
mov qword [rbp + 0x18], r14
mov qword [rbp + 0x20], 0xf
mov byte [rbp + 8], r14b
cmp rdx, 0xf
jbe 0x18000eecf
mov rcx, qword [rsp + 0x70]
inc rdx
mov rax, rcx
cmp rdx, 0x1000
jb 0x18000eeca
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x18000f2d1
call fcn.18008145c
mov rdx, qword [rbp - 0x38]
mov qword [rbp - 0x80], r14
mov qword [rbp - 0x78], 0xf
mov byte [rsp + 0x70], r14b
cmp rdx, 0xf
jbe 0x18000ef1b
mov rcx, qword [rbp - 0x50]
inc rdx
mov rax, rcx
cmp rdx, 0x1000
jb 0x18000ef16
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x18000f2d1
call fcn.18008145c
mov qword [rbp - 0x40], r14
mov qword [rbp - 0x38], 0xf
mov byte [rbp - 0x50], r14b
mov rcx, qword [0x1802e0e30]
lea rdx, str.il2cpp_class_get_fields
mov qword [rbp - 0x10], r14
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov rcx, qword [rbp - 8]
lea rdx, [rbp - 0x10]
call rax
mov r13, rax
test rax, rax
je 0x18000f1df
nop dword [rax]
mov rcx, qword [0x1802e0e30]
lea rdx, str.il2cpp_field_get_name
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov rcx, r13
call rax
mov r15, qword [rsp + 0x40]
mov rsi, rax
movabs rax, 0x7fffffffffffffff
mov rcx, rax
sub rcx, r15
cmp rcx, 2
jb 0x18000f3ee
cmp qword [rsp + 0x48], 0xf
lea r12, [rsp + 0x30]
mov qword [rbp - 0x20], r14
lea rdi, [rbp - 0x30]
cmova r12, qword [rsp + 0x30]
mov ebx, 0xf
mov qword [rbp - 0x18], r14
xorps xmm0, xmm0
lea r14, [r15 + 2]
movups xmmword [rbp - 0x30], xmm0
cmp r14, rbx
jbe 0x18000f047
mov rbx, r14
or rbx, 0xf
cmp rbx, rax
jbe 0x18000efec
mov rbx, rax
movabs rax, 0x8000000000000000
add rax, 0x27
jmp 0x18000f01c
cmp rbx, 0x16
mov eax, 0x16
cmovb rbx, rax
lea rcx, [rbx + 1]
test rcx, rcx
jne 0x18000f006
xor edi, edi
jmp 0x18000f043
cmp rcx, 0x1000
jb 0x18000f03b
lea rax, [rcx + 0x27]
cmp rax, rcx
jbe 0x18000f3e8
mov rcx, rax
call fcn.180081420
test rax, rax
je 0x18000f2d8
lea rdi, [rax + 0x27]
and rdi, 0xffffffffffffffe0
mov qword [rdi - 8], rax
jmp 0x18000f043
call fcn.180081420
mov rdi, rax
mov qword [rbp - 0x30], rdi
mov r8, r15
mov qword [rbp - 0x20], r14
mov rdx, r12
mov qword [rbp - 0x18], rbx
mov rcx, rdi
call sub.VCRUNTIME140.dll_memcpy
mov word [rdi + r15], 0x3a3a
mov r8, 0xffffffffffffffff
mov byte [rdi + r14], 0
inc r8
cmp byte [rsi + r8], 0
jne 0x18000f070
mov rdx, rsi
lea rcx, [rbp - 0x30]
call fcn.180040890
xor r14d, r14d
movups xmm0, xmmword [rax]
movups xmmword [rbp - 0x70], xmm0
movups xmmword [rbp + 0x48], xmm0
movups xmm0, xmmword [rax + 0x10]
mov qword [rax + 0x10], r14
mov qword [rax + 0x18], 0xf
mov byte [rax], r14b
mov rdx, qword [rbp - 0x18]
movups xmmword [rbp - 0x60], xmm0
movups xmmword [rbp + 0x58], xmm0
cmp rdx, 0xf
jbe 0x18000f0ee
mov rcx, qword [rbp - 0x30]
inc rdx
mov rax, rcx
cmp rdx, 0x1000
jb 0x18000f0e5
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x18000f2d8
call fcn.18008145c
movups xmm0, xmmword [rbp - 0x60]
mov rdi, qword [rbp - 0x70]
lea rax, [rbp + 0x48]
psrldq xmm0, 8
mov rcx, 0xffffffffffffffff
movq rsi, xmm0
mov qword [rbp - 0x20], r14
cmp rsi, 0xf
mov qword [rbp - 0x18], 0xf
mov byte [rbp - 0x30], r14b
cmova rax, rdi
mov qword [rbp - 0x70], rsi
inc rcx
cmp byte [rax + rcx], r14b
jne 0x18000f123
cmp rsi, 0xf
lea r8, [rbp + 0x48]
mov eax, 0xffffffff
cmova r8, rdi
test ecx, ecx
je 0x18000f170
mov r9d, ecx
lea rsi, [0x180244010]
nop dword [rax + rax]
movsx edx, byte [r8]
lea r8, [r8 + 1]
mov ecx, eax
shr eax, 8
xor rdx, rcx
movzx ecx, dl
xor eax, dword [rsi + rcx*4]
sub r9, 1
jne 0x18000f150
mov rsi, qword [rbp - 0x70]
not eax
cmp eax, dword [rbp + 0xc0]
je 0x18000f2df
cmp rsi, 0xf
jbe 0x18000f1b5
lea rdx, [rsi + 1]
mov rax, rdi
cmp rdx, 0x1000
jb 0x18000f1ad
mov rdi, qword [rdi - 8]
add rdx, 0x27
sub rax, rdi
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x18000f38d
mov rcx, rdi
call fcn.18008145c
mov rcx, qword [0x1802e0e30]
lea rdx, str.il2cpp_class_get_fields
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov rcx, qword [rbp - 8]
lea rdx, [rbp - 0x10]
call rax
mov r13, rax
test rax, rax
jne 0x18000ef60
mov rdx, qword [rsp + 0x48]
cmp rdx, 0xf
jbe 0x18000f21c
mov rcx, qword [rsp + 0x30]
inc rdx
mov rax, rcx
cmp rdx, 0x1000
jb 0x18000f217
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x18000f38d
call fcn.18008145c
mov edi, dword [rbp + 0xc8]
lea rdx, str.il2cpp_image_get_class_count
mov rcx, qword [0x1802e0e30]
inc edi
mov dword [rbp + 0xc8], edi
mov qword [rsp + 0x40], r14
mov qword [rsp + 0x48], 0xf
mov byte [rsp + 0x30], 0
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov r12, qword [rbp + 0x30]
mov rcx, r12
call rax
movsxd rcx, edi
movabs r13, 0x7fffffffffffffff
cmp rcx, rax
jb 0x18000e870
mov rbx, qword [rbp]
mov esi, dword [rbp + 0xd0]
mov rcx, qword [0x1802e0e30]
lea rdx, str.il2cpp_domain_get_assemblies
inc esi
mov qword [rbp + 0xd8], r14
inc rbx
mov dword [rbp + 0xd0], esi
mov qword [rbp], rbx
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov rcx, qword [rbp + 0x38]
lea rdx, [rbp + 0xd8]
call rax
movsxd rax, esi
cmp rax, qword [rbp + 0xd8]
jae 0x18000f394
mov rdi, qword [rbp + 0x40]
jmp 0x18000e830
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
mov rcx, qword [0x1802e0e30]
lea rdx, str.il2cpp_field_get_offset
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov rcx, r13
call rax
mov ecx, dword [rbp + 0xc0]
lea r8, [rbp + 0xc8]
mov ebx, eax
lea rdx, [rbp - 0x60]
mov dword [rbp + 0xcc], ebx
mov dword [rbp + 0xc8], ecx
call fcn.1800418a0
cmp rsi, 0xf
jbe 0x18000f34f
lea rdx, [rsi + 1]
mov rax, rdi
cmp rdx, 0x1000
jb 0x18000f347
mov rdi, qword [rdi - 8]
add rdx, 0x27
sub rax, rdi
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x18000f38d
mov rcx, rdi
call fcn.18008145c
mov rdx, qword [rsp + 0x48]
cmp rdx, 0xf
jbe 0x18000f388
mov rcx, qword [rsp + 0x30]
inc rdx
mov r8, rcx
cmp rdx, 0x1000
jb 0x18000f383
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub r8, rcx
add r8, 0xfffffffffffffff8
cmp r8, 0x1f
ja 0x18000f38d
call fcn.18008145c
mov rax, rbx
jmp 0x18000f396
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
xor eax, eax
mov r14, qword [rsp + 0x180]
mov r13, qword [rsp + 0x188]
mov r12, qword [rsp + 0x190]
mov rdi, qword [rsp + 0x198]
mov rsi, qword [rsp + 0x1a0]
mov r15, qword [rsp + 0x178]
add rsp, 0x1a8
pop rbx
pop rbp
ret
call fcn.180041580
int3
call fcn.180003ff0
int3
call fcn.18000b1a0
int3
call fcn.180003ff0
int3
call fcn.180003ff0
int3
call fcn.18000b1a0
int3
call fcn.18000b1a0
int3