Function at 0x1800068f0
Capabilities:
Encode data using xor
Hash data with crc32
Link many functions at runtime

Disassembly:
mov dword [rsp + 8], ecx
push rbp
push rbx
lea rbp, [rsp - 0x68]
sub rsp, 0x168
mov ebx, ecx
lea rcx, [rbp - 0x20]
call fcn.18003ca70
mov r8, qword [rax]
mov rdx, qword [r8 + 8]
cmp byte [rdx + 0x19], 0
jne 0x180006937
nop word [rax + rax]
cmp dword [rdx + 0x20], ebx
jae 0x18000692b
mov rdx, qword [rdx + 0x10]
jmp 0x180006931
mov r8, rdx
mov rdx, qword [rdx]
cmp byte [rdx + 0x19], 0
je 0x180006920
cmp byte [r8 + 0x19], 0
jne 0x180006968
cmp ebx, dword [r8 + 0x20]
jb 0x180006968
mov rdx, rax
mov rcx, rax
call fcn.18003eaa0
lea rdx, [rbp + 0x80]
call fcn.18003c990
mov rax, qword [rax]
add rsp, 0x168
pop rbx
pop rbp
ret
mov qword [rsp + 0x160], rsi
mov rdx, rax
mov qword [rsp + 0x158], rdi
mov rcx, rax
mov qword [rsp + 0x150], r12
mov qword [rsp + 0x148], r13
mov qword [rsp + 0x140], r14
mov qword [rsp + 0x138], r15
call fcn.18003eaa0
mov rcx, qword [0x1801a55e0]
lea rdx, str.il2cpp_domain_get
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
call rax
mov rcx, qword [0x1801a55e0]
lea rdx, str.il2cpp_domain_get_assemblies
xor r15d, r15d
mov qword [rbp + 0x10], rax
mov qword [rbp], r15
mov rbx, rax
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
lea rdx, [rbp]
mov rcx, rbx
call rax
mov rcx, qword [0x1801a55e0]
lea rdx, str.il2cpp_domain_get_assemblies
mov rdi, rax
mov qword [rbp - 0x10], rax
mov esi, r15d
mov dword [rbp + 0x90], r15d
mov qword [rbp + 0x98], r15
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
lea rdx, [rbp + 0x98]
mov rcx, rbx
call rax
cmp qword [rbp + 0x98], rsi
jbe 0x180007330
mov ebx, r15d
mov qword [rbp - 0x28], rbx
mov rax, qword [rdi + rbx*8]
lea rdx, str.il2cpp_image_get_class_count
mov rcx, qword [0x1801a55e0]
mov edi, r15d
mov dword [rbp + 0x88], r15d
mov r12, qword [rax]
mov qword [rbp + 8], r12
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov rcx, r12
call rax
test rax, rax
je 0x18000727d
nop word [rax + rax]
mov rdx, qword [r12]
xorps xmm0, xmm0
movups xmmword [rsp + 0x30], xmm0
mov qword [rsp + 0x40], r15
mov r8, 0xffffffffffffffff
mov qword [rsp + 0x48], r15
nop dword [rax]
inc r8
cmp byte [rdx + r8], 0
jne 0x180006a90
lea rcx, [rsp + 0x30]
call fcn.18003eed0
mov r15, qword [rsp + 0x48]
lea rbx, [rsp + 0x30]
mov r14, qword [rsp + 0x30]
cmp r15, 0x10
mov rsi, qword [rsp + 0x40]
cmovae rbx, r14
cmp rsi, 4
jb 0x180006b11
lea rdi, [rsi + rbx]
mov edx, 0x2e
lea r8, [rdi - 3]
mov rcx, rbx
sub r8, rbx
call sub.VCRUNTIME140.dll_memchr
test rax, rax
je 0x180006b0b
cmp dword [rax], 0x6c6c642e
je 0x180006c7d
inc rax
lea r8, [rdi - 3]
sub r8, rax
mov rcx, rax
mov edx, 0x2e
call sub.VCRUNTIME140.dll_memchr
test rax, rax
jne 0x180006ae3
mov edi, dword [rbp + 0x88]
mov rax, 0xffffffffffffffff
cmp rsi, rax
jb 0x18000736c
mov rcx, rsi
mov edx, 4
sub rcx, rax
cmp rcx, rdx
cmovb rdx, rcx
cmp r15, 0x10
lea rcx, [rsp + 0x30]
cmovae rcx, r14
sub rsi, rdx
add rcx, rax
mov r8, rsi
sub r8, rax
add rdx, rcx
inc r8
call sub.VCRUNTIME140.dll_memmove
mov rcx, qword [0x1801a55e0]
lea rdx, str.il2cpp_image_get_class
mov qword [rsp + 0x40], rsi
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
movsxd rdx, edi
mov rcx, r12
call rax
xor edi, edi
mov qword [rbp - 0x30], rax
xorps xmm0, xmm0
mov qword [rsp + 0x60], rdi
mov r13, rax
mov qword [rsp + 0x68], rdi
mov r14, qword [rax + 0x10]
mov r8, 0xffffffffffffffff
mov rsi, qword [rax + 0x18]
movups xmmword [rsp + 0x50], xmm0
inc r8
cmp byte [rsi + r8], dil
jne 0x180006ba2
mov rdx, rsi
lea rcx, [rsp + 0x50]
call fcn.18003eed0
cmp qword [rsp + 0x60], rdi
mov rdx, qword [rsp + 0x68]
sete bl
cmp rdx, 0x10
jb 0x180006bfd
mov rcx, qword [rsp + 0x50]
inc rdx
mov rax, rcx
cmp rdx, 0x1000
jb 0x180006bf8
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x18000731f
call fcn.1800eeebc
movabs rcx, 0x7fffffffffffffff
mov rax, rcx
test bl, bl
je 0x180006ded
mov rsi, qword [rsp + 0x40]
sub rax, rsi
cmp rax, 2
jb 0x180007378
cmp qword [rsp + 0x48], 0x10
lea r12, [rsp + 0x30]
lea r15, [rsi + 2]
mov qword [rsp + 0x60], rdi
cmovae r12, qword [rsp + 0x30]
mov ebx, 0xf
mov qword [rsp + 0x68], rdi
xorps xmm0, xmm0
lea rdi, [rsp + 0x50]
movups xmmword [rsp + 0x50], xmm0
cmp r15, rbx
jbe 0x180006ce7
mov rbx, r15
or rbx, 0xf
cmp rbx, rcx
jbe 0x180006c8b
movabs rax, 0x8000000000000000
mov rbx, rcx
add rax, 0x27
jmp 0x180006cb2
mov edi, dword [rbp + 0x88]
sub rax, rbx
jmp 0x180006b18
cmp rbx, 0x16
mov eax, 0x16
cmovb rbx, rax
lea rcx, [rbx + 1]
cmp rcx, 0x1000
jb 0x180006cd1
lea rax, [rcx + 0x27]
cmp rax, rcx
jbe 0x180007372
mov rcx, rax
call fcn.1800eeb00
test rax, rax
je 0x1800072c9
lea rdi, [rax + 0x27]
and rdi, 0xffffffffffffffe0
mov qword [rdi - 8], rax
jmp 0x180006ce2
test rcx, rcx
je 0x180006ce0
call fcn.1800eeb00
mov rdi, rax
jmp 0x180006ce2
xor edi, edi
mov qword [rsp + 0x50], rdi
mov r8, rsi
mov qword [rsp + 0x60], r15
mov rdx, r12
mov qword [rsp + 0x68], rbx
mov rcx, rdi
call sub.VCRUNTIME140.dll_memcpy
mov word [rdi + rsi], 0x3a3a
mov r8, 0xffffffffffffffff
mov byte [rdi + r15], 0
inc r8
cmp byte [r14 + r8], 0
jne 0x180006d11
mov rdx, r14
lea rcx, [rsp + 0x50]
call fcn.18003cf40
xor r15d, r15d
movups xmm0, xmmword [rax]
movups xmm1, xmmword [rax + 0x10]
mov qword [rax + 0x10], r15
mov qword [rax + 0x18], 0xf
mov byte [rax], r15b
mov rdx, qword [rsp + 0x48]
movups xmmword [rbp + 0x18], xmm0
movups xmmword [rbp - 0x20], xmm1
cmp rdx, 0x10
jb 0x180006d8e
mov rcx, qword [rsp + 0x30]
inc rdx
mov rax, rcx
cmp rdx, 0x1000
jb 0x180006d81
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1800072c9
call fcn.1800eeebc
movups xmm0, xmmword [rbp + 0x18]
movups xmm1, xmmword [rbp - 0x20]
mov rdx, qword [rsp + 0x68]
movups xmmword [rsp + 0x30], xmm0
movups xmmword [rsp + 0x40], xmm1
cmp rdx, 0x10
jb 0x180006dd5
mov rcx, qword [rsp + 0x50]
inc rdx
mov rax, rcx
cmp rdx, 0x1000
jb 0x180006dd0
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1800072c9
call fcn.1800eeebc
mov qword [rsp + 0x60], r15
mov qword [rsp + 0x68], 0xf
mov byte [rsp + 0x50], r15b
jmp 0x18000716a
mov r15, qword [rsp + 0x40]
sub rax, r15
cmp rax, 2
jb 0x180007384
cmp qword [rsp + 0x48], 0x10
lea r13, [rsp + 0x30]
lea r12, [r15 + 2]
mov qword [rbp - 0x40], rdi
cmovae r13, qword [rsp + 0x30]
mov ebx, 0xf
mov qword [rbp - 0x38], rdi
xorps xmm0, xmm0
lea rdi, [rbp - 0x50]
movups xmmword [rbp - 0x50], xmm0
cmp r12, rbx
jbe 0x180006eab
mov rbx, r12
or rbx, 0xf
cmp rbx, rcx
jbe 0x180006e50
movabs rax, 0x8000000000000000
mov rbx, rcx
add rax, 0x27
jmp 0x180006e77
cmp rbx, 0x16
mov eax, 0x16
cmovb rbx, rax
lea rcx, [rbx + 1]
cmp rcx, 0x1000
jb 0x180006e96
lea rax, [rcx + 0x27]
cmp rax, rcx
jbe 0x18000737e
mov rcx, rax
call fcn.1800eeb00
test rax, rax
je 0x1800072d0
lea rdi, [rax + 0x27]
and rdi, 0xffffffffffffffe0
mov qword [rdi - 8], rax
jmp 0x180006ea7
test rcx, rcx
je 0x180006ea5
call fcn.1800eeb00
mov rdi, rax
jmp 0x180006ea7
xor edi, edi
mov qword [rbp - 0x50], rdi
mov r8, r15
mov qword [rbp - 0x40], r12
mov rdx, r13
mov qword [rbp - 0x38], rbx
mov rcx, rdi
call sub.VCRUNTIME140.dll_memcpy
mov ebx, 0x3a3a
mov r8, 0xffffffffffffffff
mov word [rdi + r15], bx
mov byte [rdi + r12], 0
nop word [rax + rax]
inc r8
cmp byte [rsi + r8], 0
jne 0x180006ee0
mov rdx, rsi
lea rcx, [rbp - 0x50]
call fcn.18003cf40
xor r15d, r15d
xorps xmm0, xmm0
movups xmmword [rbp - 0x70], xmm0
mov qword [rbp - 0x60], r15
mov qword [rbp - 0x58], r15
movups xmm0, xmmword [rax]
movups xmmword [rbp - 0x70], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rbp - 0x60], xmm1
mov qword [rax + 0x10], r15
mov qword [rax + 0x18], 0xf
mov byte [rax], r15b
mov rdx, qword [rbp - 0x58]
mov rcx, qword [rbp - 0x60]
mov rax, rdx
sub rax, rcx
cmp rax, 2
jb 0x180006f5e
lea rax, [rcx + 2]
cmp rdx, 0x10
mov qword [rbp - 0x60], rax
lea rax, [rbp - 0x70]
cmovae rax, qword [rbp - 0x70]
mov word [rax + rcx], bx
mov byte [rax + rcx + 2], r15b
lea rax, [rbp - 0x70]
jmp 0x180006f7c
lea r9, [0x18018b344]
mov qword [rsp + 0x20], 2
mov edx, 2
lea rcx, [rbp - 0x70]
call fcn.18003ed40
mov qword [rbp - 0x80], r15
xorps xmm0, xmm0
movups xmmword [rsp + 0x70], xmm0
mov qword [rbp - 0x78], r15
mov rdi, 0xffffffffffffffff
movups xmm0, xmmword [rax]
movups xmmword [rsp + 0x70], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rbp - 0x80], xmm1
mov qword [rax + 0x10], r15
mov qword [rax + 0x18], 0xf
mov byte [rax], r15b
inc rdi
cmp byte [r14 + rdi], r15b
jne 0x180006fb2
mov rdx, qword [rbp - 0x78]
mov rcx, qword [rbp - 0x80]
mov rax, rdx
sub rax, rcx
cmp rdi, rax
ja 0x180007001
cmp rdx, 0x10
lea rax, [rcx + rdi]
lea rbx, [rsp + 0x70]
mov qword [rbp - 0x80], rax
cmovae rbx, qword [rsp + 0x70]
mov r8, rdi
add rbx, rcx
mov rdx, r14
mov rcx, rbx
call sub.VCRUNTIME140.dll_memmove
lea rax, [rsp + 0x70]
mov byte [rdi + rbx], r15b
jmp 0x180007016
mov r9, r14
mov qword [rsp + 0x20], rdi
mov rdx, rdi
lea rcx, [rsp + 0x70]
call fcn.18003ed40
movups xmm0, xmmword [rax]
movups xmm1, xmmword [rax + 0x10]
mov qword [rax + 0x10], r15
mov qword [rax + 0x18], 0xf
mov byte [rax], r15b
mov rdx, qword [rsp + 0x48]
movups xmmword [rbp - 0x20], xmm0
movups xmmword [rbp + 0x18], xmm1
cmp rdx, 0x10
jb 0x180007079
mov rcx, qword [rsp + 0x30]
inc rdx
mov rax, rcx
cmp rdx, 0x1000
jb 0x18000706c
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1800072d0
call fcn.1800eeebc
movups xmm0, xmmword [rbp - 0x20]
movups xmm1, xmmword [rbp + 0x18]
mov rdx, qword [rbp - 0x78]
movups xmmword [rsp + 0x30], xmm0
movups xmmword [rsp + 0x40], xmm1
cmp rdx, 0x10
jb 0x1800070bf
mov rcx, qword [rsp + 0x70]
inc rdx
mov rax, rcx
cmp rdx, 0x1000
jb 0x1800070ba
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1800072d0
call fcn.1800eeebc
mov rdx, qword [rbp - 0x58]
mov qword [rbp - 0x80], r15
mov qword [rbp - 0x78], 0xf
mov byte [rsp + 0x70], r15b
cmp rdx, 0x10
jb 0x18000710b
mov rcx, qword [rbp - 0x70]
inc rdx
mov rax, rcx
cmp rdx, 0x1000
jb 0x180007106
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1800072d0
call fcn.1800eeebc
mov rdx, qword [rbp - 0x38]
mov qword [rbp - 0x60], r15
mov qword [rbp - 0x58], 0xf
mov byte [rbp - 0x70], r15b
cmp rdx, 0x10
jb 0x180007156
mov rcx, qword [rbp - 0x50]
inc rdx
mov rax, rcx
cmp rdx, 0x1000
jb 0x180007151
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1800072d0
call fcn.1800eeebc
mov r13, qword [rbp - 0x30]
mov qword [rbp - 0x40], r15
mov qword [rbp - 0x38], 0xf
mov byte [rbp - 0x50], r15b
mov r11, qword [rsp + 0x48]
lea rcx, [rsp + 0x30]
mov r10, qword [rsp + 0x30]
cmp r11, 0x10
mov rax, 0xffffffffffffffff
cmovae rcx, r10
nop dword [rax + rax]
inc rax
cmp byte [rcx + rax], 0
jne 0x180007190
cmp r11, 0x10
lea r8, [rsp + 0x30]
mov edx, 0xffffffff
cmovae r8, r10
test eax, eax
je 0x1800071e2
mov r9d, eax
lea r13, [0x180171280]
nop dword [rax]
movsx ecx, byte [r8]
lea r8, [r8 + 1]
mov eax, edx
shr edx, 8
xor rcx, rax
movzx eax, cl
xor edx, dword [r13 + rax*4]
sub r9, 1
jne 0x1800071c0
mov r13, qword [rbp - 0x30]
mov eax, dword [rbp + 0x80]
not edx
cmp eax, edx
je 0x1800072d7
cmp r11, 0x10
jb 0x180007229
lea rdx, [r11 + 1]
mov rax, r10
cmp rdx, 0x1000
jb 0x180007221
mov r10, qword [r10 - 8]
add rdx, 0x27
sub rax, r10
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x18000731f
mov rcx, r10
call fcn.1800eeebc
mov edi, dword [rbp + 0x88]
lea rdx, str.il2cpp_image_get_class_count
mov rcx, qword [0x1801a55e0]
inc edi
mov dword [rbp + 0x88], edi
mov qword [rsp + 0x40], r15
mov qword [rsp + 0x48], 0xf
mov byte [rsp + 0x30], 0
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov r12, qword [rbp + 8]
mov rcx, r12
call rax
movsxd rcx, edi
cmp rcx, rax
jb 0x180006a70
mov rbx, qword [rbp - 0x28]
mov esi, dword [rbp + 0x90]
mov rcx, qword [0x1801a55e0]
lea rdx, str.il2cpp_domain_get_assemblies
inc esi
mov qword [rbp + 0x98], r15
inc rbx
mov dword [rbp + 0x90], esi
mov qword [rbp - 0x28], rbx
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov rcx, qword [rbp + 0x10]
lea rdx, [rbp + 0x98]
call rax
movsxd rax, esi
cmp rax, qword [rbp + 0x98]
jae 0x180007330
mov rdi, qword [rbp - 0x10]
jmp 0x180006a30
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
lea r8, [rbp - 0x10]
mov dword [rbp - 0x10], eax
lea rdx, [rbp - 0x20]
mov qword [rbp - 8], r13
call fcn.18003dfe0
mov rdx, qword [rsp + 0x48]
cmp rdx, 0x10
jb 0x18000732b
mov rcx, qword [rsp + 0x30]
inc rdx
mov rax, rcx
cmp rdx, 0x1000
jb 0x180007326
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x180007326
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1800eeebc
mov rax, r13
jmp 0x180007332
xor eax, eax
mov r14, qword [rsp + 0x140]
mov r13, qword [rsp + 0x148]
mov r12, qword [rsp + 0x150]
mov rdi, qword [rsp + 0x158]
mov rsi, qword [rsp + 0x160]
mov r15, qword [rsp + 0x138]
add rsp, 0x168
pop rbx
pop rbp
ret
call fcn.18003db70
int3
call fcn.180003b10
int3
call fcn.180003d00
int3
call fcn.180003b10
int3
call fcn.180003d00
int3