Function at 0x180009220
Capabilities:
Encode data using xor
Hash data with crc32
Link many functions at runtime

Disassembly:
push rbp
push rbx
push rsi
push rdi
push r15
lea rbp, [rsp - 0x50]
sub rsp, 0x150
mov rcx, qword [0x18014b890]
lea rdx, str.il2cpp_domain_get
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
call rax
mov rcx, qword [0x18014b890]
lea rdx, str.il2cpp_domain_get_assemblies
xor r15d, r15d
mov qword [rbp + 0x20], rax
mov qword [rbp + 8], r15
mov rbx, rax
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
lea rdx, [rbp + 8]
mov rcx, rbx
call rax
mov rcx, qword [0x18014b890]
lea rdx, str.il2cpp_domain_get_assemblies
mov rdi, rax
mov qword [rbp + 0x28], rax
mov esi, r15d
mov dword [rbp + 0x88], r15d
mov qword [rbp + 0x90], r15
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
lea rdx, [rbp + 0x90]
mov rcx, rbx
call rax
cmp qword [rbp + 0x90], rsi
jbe 0x180009bad
mov qword [rsp + 0x148], r12
mov ebx, r15d
mov qword [rsp + 0x140], r13
mov qword [rsp + 0x138], r14
movabs r14, 0x7fffffffffffffff
mov qword [rbp - 0x10], rbx
mov rax, qword [rdi + rbx*8]
lea rdx, str.il2cpp_image_get_class_count
mov rcx, qword [0x18014b890]
mov dword [rbp + 0x80], r15d
mov rdi, qword [rax]
mov qword [rbp + 0x18], rdi
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov rcx, rdi
call rax
test rax, rax
je 0x180009b34
mov rbx, r15
nop dword [rax]
mov rdx, qword [rdi]
xorps xmm0, xmm0
movups xmmword [rsp + 0x50], xmm0
mov qword [rsp + 0x60], r15
mov r8, 0xffffffffffffffff
mov qword [rsp + 0x68], r15
nop dword [rax]
inc r8
cmp byte [rdx + r8], 0
jne 0x180009340
lea rcx, [rsp + 0x50]
call fcn.180034c30
mov rcx, qword [0x18014b890]
lea rdx, str.il2cpp_image_get_class
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov rdx, rbx
mov rcx, rdi
call rax
xorps xmm0, xmm0
mov qword [rbp + 0x10], rax
movups xmmword [rsp + 0x30], xmm0
mov qword [rsp + 0x40], r15
mov r8, 0xffffffffffffffff
mov rcx, qword [rax + 0x10]
mov rsi, qword [rax + 0x18]
mov qword [rbp + 0x98], rcx
mov qword [rsp + 0x48], r15
nop dword [rax]
inc r8
cmp byte [rsi + r8], 0
jne 0x1800093a0
mov rdx, rsi
lea rcx, [rsp + 0x30]
call fcn.180034c30
cmp qword [rsp + 0x40], 0
mov rdx, qword [rsp + 0x48]
sete bl
cmp rdx, 0xf
jbe 0x1800093fd
mov rcx, qword [rsp + 0x30]
inc rdx
mov rax, rcx
cmp rdx, 0x1000
jb 0x1800093f8
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x180009b8e
call fcn.1800cf2ec
mov rax, r14
test bl, bl
je 0x1800095ec
mov rsi, qword [rsp + 0x60]
sub rax, rsi
cmp rax, 2
jb 0x180009bc7
mov r13, qword [rsp + 0x68]
lea r12, [rsp + 0x50]
mov r15, qword [rsp + 0x50]
lea r14, [rsi + 2]
cmp r13, 0xf
lea rdi, [rsp + 0x30]
mov ebx, 0xf
xorps xmm0, xmm0
cmova r12, r15
xor eax, eax
mov qword [rsp + 0x40], rax
mov qword [rsp + 0x48], rax
movups xmmword [rsp + 0x30], xmm0
cmp r14, rbx
jbe 0x1800094dd
mov rbx, r14
movabs rcx, 0x7fffffffffffffff
or rbx, 0xf
cmp rbx, rcx
jbe 0x180009485
movabs rax, 0x8000000000000000
mov rbx, rcx
add rax, 0x27
jmp 0x1800094ac
cmp rbx, 0x16
mov ecx, 0x16
cmovb rbx, rcx
lea rcx, [rbx + 1]
cmp rcx, 0x1000
jb 0x1800094cb
lea rax, [rcx + 0x27]
cmp rax, rcx
jbe 0x180009bc1
mov rcx, rax
call fcn.1800cef40
test rax, rax
je 0x180009b80
lea rdi, [rax + 0x27]
and rdi, 0xffffffffffffffe0
mov qword [rdi - 8], rax
jmp 0x1800094d8
test rcx, rcx
je 0x1800094d5
call fcn.1800cef40
mov rdi, rax
mov qword [rsp + 0x30], rdi
mov r8, rsi
mov qword [rsp + 0x40], r14
mov rdx, r12
mov qword [rsp + 0x48], rbx
mov rcx, rdi
call sub.VCRUNTIME140.dll_memcpy
mov rax, qword [rbp + 0x98]
mov r8, 0xffffffffffffffff
mov word [rdi + rsi], 0x3a3a
mov byte [rdi + r14], 0
nop
inc r8
cmp byte [rax + r8], 0
jne 0x180009510
mov rdx, rax
lea rcx, [rsp + 0x30]
call fcn.1800330e0
movups xmm0, xmmword [rax]
movups xmmword [rbp - 8], xmm0
movups xmm0, xmmword [rax + 0x10]
mov qword [rax + 0x10], 0
mov qword [rax + 0x18], 0xf
mov byte [rax], 0
movups xmmword [rsp + 0x70], xmm0
cmp r13, 0xf
jbe 0x180009586
lea rdx, [r13 + 1]
mov rax, r15
cmp rdx, 0x1000
jb 0x180009579
mov r15, qword [r15 - 8]
add rdx, 0x27
sub rax, r15
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x180009b80
mov rcx, r15
call fcn.1800cf2ec
movups xmm0, xmmword [rsp + 0x70]
movups xmm1, xmmword [rbp - 8]
mov rdx, qword [rsp + 0x48]
movups xmmword [rsp + 0x60], xmm0
movups xmmword [rsp + 0x50], xmm1
cmp rdx, 0xf
jbe 0x1800095d1
mov rcx, qword [rsp + 0x30]
inc rdx
mov rax, rcx
cmp rdx, 0x1000
jb 0x1800095cc
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x180009b80
call fcn.1800cf2ec
xor r15d, r15d
mov qword [rsp + 0x48], 0xf
mov qword [rsp + 0x40], r15
mov byte [rsp + 0x30], r15b
jmp 0x18000997c
mov r14, qword [rsp + 0x60]
sub rax, r14
cmp rax, 2
jb 0x180009bbb
cmp qword [rsp + 0x68], 0xf
lea r12, [rsp + 0x50]
mov r13, qword [rsp + 0x50]
lea rdi, [rbp - 0x30]
mov qword [rbp - 0x20], r15
mov ebx, 0xf
mov qword [rbp - 0x18], r15
cmova r12, r13
lea r15, [r14 + 2]
xorps xmm0, xmm0
movups xmmword [rbp - 0x30], xmm0
cmp r15, rbx
jbe 0x1800096bb
mov rbx, r15
movabs rcx, 0x7fffffffffffffff
or rbx, 0xf
cmp rbx, rcx
jbe 0x180009660
movabs rax, 0x8000000000000000
mov rbx, rcx
add rax, 0x27
jmp 0x180009687
cmp rbx, 0x16
mov eax, 0x16
cmovb rbx, rax
lea rcx, [rbx + 1]
cmp rcx, 0x1000
jb 0x1800096a6
lea rax, [rcx + 0x27]
cmp rax, rcx
jbe 0x180009bcd
mov rcx, rax
call fcn.1800cef40
test rax, rax
je 0x180009b87
lea rdi, [rax + 0x27]
and rdi, 0xffffffffffffffe0
mov qword [rdi - 8], rax
jmp 0x1800096b7
test rcx, rcx
je 0x1800096b5
call fcn.1800cef40
mov rdi, rax
jmp 0x1800096b7
xor edi, edi
mov qword [rbp - 0x30], rdi
mov r8, r14
mov qword [rbp - 0x20], r15
mov rdx, r12
mov qword [rbp - 0x18], rbx
mov rcx, rdi
call sub.VCRUNTIME140.dll_memcpy
mov r12d, 0x3a3a
mov r8, 0xffffffffffffffff
mov word [rdi + r14], r12w
mov byte [rdi + r15], 0
nop dword [rax + rax]
inc r8
cmp byte [rsi + r8], 0
jne 0x1800096f0
mov rdx, rsi
lea rcx, [rbp - 0x30]
call fcn.1800330e0
xor r15d, r15d
xorps xmm0, xmm0
movups xmmword [rbp - 0x50], xmm0
mov qword [rbp - 0x40], r15
mov qword [rbp - 0x38], r15
movups xmm0, xmmword [rax]
movups xmmword [rbp - 0x50], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rbp - 0x40], xmm1
mov qword [rax + 0x10], r15
mov qword [rax + 0x18], 0xf
mov byte [rax], r15b
mov rdx, qword [rbp - 0x38]
mov rcx, qword [rbp - 0x40]
mov rax, rdx
sub rax, rcx
cmp rax, 2
jb 0x18000976f
lea rax, [rcx + 2]
cmp rdx, 0xf
mov qword [rbp - 0x40], rax
lea rax, [rbp - 0x50]
cmova rax, qword [rbp - 0x50]
mov word [rax + rcx], r12w
mov byte [rax + rcx + 2], r15b
lea rax, [rbp - 0x50]
jmp 0x18000978d
lea r9, [0x18010e74c]
mov qword [rsp + 0x20], 2
mov edx, 2
lea rcx, [rbp - 0x50]
call fcn.180034aa0
mov r9, qword [rbp + 0x98]
xorps xmm0, xmm0
movups xmmword [rbp - 0x70], xmm0
mov qword [rbp - 0x60], r15
mov rdi, 0xffffffffffffffff
mov qword [rbp - 0x58], r15
movups xmm0, xmmword [rax]
movups xmmword [rbp - 0x70], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rbp - 0x60], xmm1
mov qword [rax + 0x10], r15
mov qword [rax + 0x18], 0xf
mov byte [rax], r15b
nop dword [rax + rax]
inc rdi
cmp byte [r9 + rdi], r15b
jne 0x1800097d0
mov rdx, qword [rbp - 0x58]
mov rcx, qword [rbp - 0x60]
mov rax, rdx
sub rax, rcx
cmp rdi, rax
ja 0x18000981c
cmp rdx, 0xf
lea rax, [rcx + rdi]
lea rbx, [rbp - 0x70]
mov qword [rbp - 0x60], rax
cmova rbx, qword [rbp - 0x70]
mov r8, rdi
add rbx, rcx
mov rdx, r9
mov rcx, rbx
call sub.VCRUNTIME140.dll_memmove
lea rax, [rbp - 0x70]
mov byte [rdi + rbx], r15b
jmp 0x18000982d
mov rdx, rdi
mov qword [rsp + 0x20], rdi
lea rcx, [rbp - 0x70]
call fcn.180034aa0
movups xmm0, xmmword [rax]
movups xmmword [rbp - 8], xmm0
movups xmm0, xmmword [rax + 0x10]
mov qword [rax + 0x10], r15
mov qword [rax + 0x18], 0xf
mov byte [rax], r15b
mov rax, qword [rsp + 0x68]
movups xmmword [rsp + 0x70], xmm0
cmp rax, 0xf
jbe 0x18000988d
lea rdx, [rax + 1]
mov rax, r13
cmp rdx, 0x1000
jb 0x180009880
mov r13, qword [r13 - 8]
add rdx, 0x27
sub rax, r13
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x180009b87
mov rcx, r13
call fcn.1800cf2ec
movups xmm0, xmmword [rsp + 0x70]
movups xmm1, xmmword [rbp - 8]
mov rdx, qword [rbp - 0x58]
movups xmmword [rsp + 0x60], xmm0
movups xmmword [rsp + 0x50], xmm1
cmp rdx, 0xf
jbe 0x1800098d6
mov rcx, qword [rbp - 0x70]
inc rdx
mov rax, rcx
cmp rdx, 0x1000
jb 0x1800098d1
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x180009b87
call fcn.1800cf2ec
mov rdx, qword [rbp - 0x38]
mov qword [rbp - 0x60], r15
mov qword [rbp - 0x58], 0xf
mov byte [rbp - 0x70], r15b
cmp rdx, 0xf
jbe 0x180009921
mov rcx, qword [rbp - 0x50]
inc rdx
mov rax, rcx
cmp rdx, 0x1000
jb 0x18000991c
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x180009b87
call fcn.1800cf2ec
mov rdx, qword [rbp - 0x18]
mov qword [rbp - 0x40], r15
mov qword [rbp - 0x38], 0xf
mov byte [rbp - 0x50], r15b
cmp rdx, 0xf
jbe 0x18000996c
mov rcx, qword [rbp - 0x30]
inc rdx
mov rax, rcx
cmp rdx, 0x1000
jb 0x180009967
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x180009b87
call fcn.1800cf2ec
mov qword [rbp - 0x20], r15
mov qword [rbp - 0x18], 0xf
mov byte [rbp - 0x30], r15b
movups xmm0, xmmword [rsp + 0x70]
mov rsi, qword [rbp - 8]
lea rcx, [rsp + 0x50]
mov rax, 0xffffffffffffffff
psrldq xmm0, 8
movq r14, xmm0
cmp r14, 0xf
mov qword [rbp + 0x98], r14
cmova rcx, rsi
nop word [rax + rax]
inc rax
cmp byte [rcx + rax], 0
jne 0x1800099b0
cmp r14, 0xf
lea rdx, [rsp + 0x50]
mov ebx, 0xffffffff
cmova rdx, rsi
test eax, eax
je 0x180009a03
mov r8d, eax
lea r14, [0x1801090a0]
nop dword [rax]
movsx ecx, byte [rdx]
lea rdx, [rdx + 1]
mov eax, ebx
shr ebx, 8
xor rcx, rax
movzx eax, cl
xor ebx, dword [r14 + rax*4]
sub r8, 1
jne 0x1800099e0
mov r14, qword [rbp + 0x98]
mov rdi, qword [0x18014b8f0]
not ebx
mov dword [rsp + 0x78], r15d
mov rcx, rdi
mov rax, qword [rdi + 8]
mov qword [rsp + 0x70], rax
cmp byte [rax + 0x19], 0
jne 0x180009a4c
mov qword [rsp + 0x70], rax
cmp dword [rax + 0x20], ebx
jae 0x180009a38
mov rax, qword [rax + 0x10]
mov dword [rsp + 0x78], r15d
jmp 0x180009a46
mov rcx, rax
mov dword [rsp + 0x78], 1
mov rax, qword [rax]
cmp byte [rax + 0x19], 0
je 0x180009a23
cmp byte [rcx + 0x19], 0
jne 0x180009a57
cmp ebx, dword [rcx + 0x20]
jae 0x180009ab2
movabs rax, 0x555555555555555
cmp qword [0x18014b8f8], rax
je 0x180009bd3
mov ecx, 0x30
call fcn.1800cef40
mov rcx, qword [rbp + 0x10]
lea rdx, [rsp + 0x70]
movups xmm0, xmmword [rsp + 0x70]
mov r8, rax
mov qword [rax + 0x28], rcx
lea rcx, [0x18014b8f0]
mov dword [rax + 0x20], ebx
mov qword [rax], rdi
mov qword [rax + 8], rdi
mov qword [rax + 0x10], rdi
mov word [rax + 0x18], 0
movaps xmmword [rsp + 0x70], xmm0
call fcn.180004b70
cmp r14, 0xf
jbe 0x180009ae9
lea rdx, [r14 + 1]
mov rax, rsi
cmp rdx, 0x1000
jb 0x180009ae1
mov rsi, qword [rsi - 8]
add rdx, 0x27
sub rax, rsi
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x180009b8e
mov rcx, rsi
call fcn.1800cf2ec
mov esi, dword [rbp + 0x80]
lea rdx, str.il2cpp_image_get_class_count
mov rcx, qword [0x18014b890]
inc esi
mov dword [rbp + 0x80], esi
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov rdi, qword [rbp + 0x18]
mov rcx, rdi
movsxd rbx, esi
call rax
movabs r14, 0x7fffffffffffffff
cmp rbx, rax
jb 0x180009320
mov rbx, qword [rbp - 0x10]
mov esi, dword [rbp + 0x88]
mov rcx, qword [0x18014b890]
lea rdx, str.il2cpp_domain_get_assemblies
inc esi
mov qword [rbp + 0x90], r15
inc rbx
mov dword [rbp + 0x88], esi
mov qword [rbp - 0x10], rbx
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov rcx, qword [rbp + 0x20]
lea rdx, [rbp + 0x90]
call rax
movsxd rax, esi
cmp rax, qword [rbp + 0x90]
jae 0x180009b95
mov rdi, qword [rbp + 0x28]
jmp 0x1800092e2
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
mov r13, qword [rsp + 0x140]
mov r12, qword [rsp + 0x148]
mov r14, qword [rsp + 0x138]
add rsp, 0x150
pop r15
pop rdi
pop rsi
pop rbx
pop rbp
ret
call fcn.180004fb0
int3
call fcn.180004010
int3
call fcn.180004fb0
int3
call fcn.180004010
int3
call fcn.1800040b0
int3