Function at 0x18000f9f0
Capabilities:
Encode data using xor
Hash data with crc32
Link many functions at runtime

Disassembly:
mov dword [rsp + 8], ecx
push rbp
push rbx
lea rbp, [rsp - 0x98]
sub rsp, 0x198
mov ebx, ecx
lea rcx, [rbp - 0x50]
call fcn.18004c940
mov r8, qword [rax]
mov rdx, qword [r8 + 8]
cmp byte [rdx + 0x19], 0
jne 0x18000fa37
nop dword [rax]
cmp dword [rdx + 0x20], ebx
jae 0x18000fa2b
mov rdx, qword [rdx + 0x10]
jmp 0x18000fa31
mov r8, rdx
mov rdx, qword [rdx]
cmp byte [rdx + 0x19], 0
je 0x18000fa20
cmp byte [r8 + 0x19], 0
jne 0x18000fa67
cmp ebx, dword [r8 + 0x20]
jb 0x18000fa67
mov rdx, rax
mov rcx, rax
call fcn.18004e9b0
lea rdx, [rbp + 0xb0]
call fcn.18004c860
mov eax, dword [rax]
add rsp, 0x198
pop rbx
pop rbp
ret
mov qword [rsp + 0x190], rsi
mov rdx, rax
mov qword [rsp + 0x188], rdi
mov rcx, rax
mov qword [rsp + 0x180], r12
mov qword [rsp + 0x178], r13
mov qword [rsp + 0x170], r14
mov qword [rsp + 0x168], r15
call fcn.18004e9b0
mov rcx, qword [0x180230870]
lea rdx, str.il2cpp_domain_get
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
call rax
mov rcx, qword [0x180230870]
lea rdx, str.il2cpp_domain_get_assemblies
mov rbx, rax
mov qword [rbp + 0x38], rax
mov qword [rbp + 0x28], 0
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
lea rdx, [rbp + 0x28]
mov rcx, rbx
call rax
mov rcx, qword [0x180230870]
lea rdx, str.il2cpp_domain_get_assemblies
xor esi, esi
mov qword [rbp + 0x40], rax
mov dword [rbp + 0xc0], esi
mov rdi, rax
mov qword [rbp + 0xc8], rsi
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
lea rdx, [rbp + 0xc8]
mov rcx, rbx
call rax
cmp qword [rbp + 0xc8], rsi
jbe 0x1800106e8
xor ebx, ebx
movabs r13, 0x7fffffffffffffff
mov qword [rbp + 0x20], rbx
nop word [rax + rax]
mov rax, qword [rdi + rbx*8]
lea rdx, str.il2cpp_image_get_class_count
mov rcx, qword [0x180230870]
xor edi, edi
mov dword [rbp + 0xb8], edi
mov r12, qword [rax]
mov qword [rbp + 0x30], r12
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov rcx, r12
call rax
test rax, rax
je 0x1800105ca
xor ebx, ebx
nop word [rax + rax]
mov rdx, qword [r12]
xorps xmm0, xmm0
movups xmmword [rsp + 0x30], xmm0
mov qword [rsp + 0x40], rbx
mov r8, 0xffffffffffffffff
mov qword [rsp + 0x48], rbx
nop dword [rax]
inc r8
cmp byte [rdx + r8], 0
jne 0x18000fba0
lea rcx, [rsp + 0x30]
call fcn.18004eeb0
mov r15, qword [rsp + 0x48]
lea rbx, [rsp + 0x30]
mov r14, qword [rsp + 0x30]
cmp r15, 0x10
mov rsi, qword [rsp + 0x40]
cmovae rbx, r14
cmp rsi, 4
jb 0x18000fc32
lea rdi, [rsi + rbx]
mov edx, 0x2e
lea r8, [rdi - 3]
mov rcx, rbx
sub r8, rbx
call sub.VCRUNTIME140.dll_memchr
mov r9, rax
test rax, rax
je 0x18000fc2c
nop word [rax + rax]
cmp dword [r9], 0x6c6c642e
je 0x18000fd91
inc r9
lea r8, [rdi - 3]
sub r8, r9
mov rcx, r9
mov edx, 0x2e
call sub.VCRUNTIME140.dll_memchr
mov r9, rax
test rax, rax
jne 0x18000fc00
mov edi, dword [rbp + 0xb8]
mov r9, 0xffffffffffffffff
cmp rsi, r9
jb 0x180010724
mov rax, rsi
lea rcx, [rsp + 0x30]
sub rax, r9
mov edx, 4
cmp rax, rdx
cmovb rdx, rax
cmp r15, 0x10
cmovae rcx, r14
sub rsi, rdx
add rcx, r9
mov r8, rsi
sub r8, r9
add rdx, rcx
inc r8
call sub.VCRUNTIME140.dll_memmove
mov rcx, qword [0x180230870]
lea rdx, str.il2cpp_image_get_class
mov qword [rsp + 0x40], rsi
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
movsxd rdx, edi
mov rcx, r12
call rax
xor edi, edi
mov qword [rbp + 0x18], rax
xorps xmm0, xmm0
mov qword [rsp + 0x60], rdi
movups xmmword [rsp + 0x50], xmm0
mov r14, qword [rax + 0x10]
mov r8, 0xffffffffffffffff
mov rsi, qword [rax + 0x18]
mov qword [rsp + 0x68], rdi
inc r8
cmp byte [rsi + r8], dil
jne 0x18000fcc0
mov rdx, rsi
lea rcx, [rsp + 0x50]
call fcn.18004eeb0
cmp qword [rsp + 0x60], rdi
mov rdx, qword [rsp + 0x68]
sete bl
cmp rdx, 0x10
jb 0x18000fd1b
mov rcx, qword [rsp + 0x50]
inc rdx
mov rax, rcx
cmp rdx, 0x1000
jb 0x18000fd16
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1800106e1
call fcn.1800fbf00
mov rax, r13
test bl, bl
je 0x18000ff09
mov rsi, qword [rsp + 0x40]
sub rax, rsi
cmp rax, 2
jb 0x180010730
cmp qword [rsp + 0x48], 0x10
lea r12, [rsp + 0x30]
lea r15, [rsi + 2]
mov qword [rsp + 0x60], rdi
cmovae r12, qword [rsp + 0x30]
mov ebx, 0xf
mov qword [rsp + 0x68], rdi
xorps xmm0, xmm0
lea rdi, [rsp + 0x50]
movups xmmword [rsp + 0x50], xmm0
cmp r15, rbx
jbe 0x18000fdfb
mov rbx, r15
or rbx, 0xf
cmp rbx, r13
jbe 0x18000fd9f
movabs rax, 0x8000000000000000
mov rbx, r13
add rax, 0x27
jmp 0x18000fdc6
mov edi, dword [rbp + 0xb8]
sub r9, rbx
jmp 0x18000fc39
cmp rbx, 0x16
mov eax, 0x16
cmovb rbx, rax
lea rcx, [rbx + 1]
cmp rcx, 0x1000
jb 0x18000fde5
lea rax, [rcx + 0x27]
cmp rax, rcx
jbe 0x18001072a
mov rcx, rax
call fcn.1800fbb44
test rax, rax
je 0x18001061e
lea rdi, [rax + 0x27]
and rdi, 0xffffffffffffffe0
mov qword [rdi - 8], rax
jmp 0x18000fdf6
test rcx, rcx
je 0x18000fdf4
call fcn.1800fbb44
mov rdi, rax
jmp 0x18000fdf6
xor edi, edi
mov qword [rsp + 0x50], rdi
mov r8, rsi
mov qword [rsp + 0x60], r15
mov rdx, r12
mov qword [rsp + 0x68], rbx
mov rcx, rdi
call sub.VCRUNTIME140.dll_memcpy
mov eax, 0x3a3a
mov r8, 0xffffffffffffffff
mov word [rdi + rsi], ax
mov byte [rdi + r15], 0
nop dword [rax + rax]
inc r8
cmp byte [r14 + r8], 0
jne 0x18000fe30
mov rdx, r14
lea rcx, [rsp + 0x50]
call fcn.18004cd80
xor ebx, ebx
movups xmm0, xmmword [rax]
movups xmm1, xmmword [rax + 0x10]
mov qword [rax + 0x10], rbx
mov qword [rax + 0x18], 0xf
mov byte [rax], bl
mov rdx, qword [rsp + 0x48]
movups xmmword [rbp + 0x48], xmm0
movups xmmword [rbp - 0x50], xmm1
cmp rdx, 0x10
jb 0x18000feab
mov rcx, qword [rsp + 0x30]
inc rdx
mov rax, rcx
cmp rdx, 0x1000
jb 0x18000fe9e
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x18001061e
call fcn.1800fbf00
movups xmm0, xmmword [rbp + 0x48]
movups xmm1, xmmword [rbp - 0x50]
mov rdx, qword [rsp + 0x68]
movups xmmword [rsp + 0x30], xmm0
movups xmmword [rsp + 0x40], xmm1
cmp rdx, 0x10
jb 0x18000fef2
mov rcx, qword [rsp + 0x50]
inc rdx
mov rax, rcx
cmp rdx, 0x1000
jb 0x18000feed
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x18001061e
call fcn.1800fbf00
mov qword [rsp + 0x60], rbx
mov qword [rsp + 0x68], 0xf
mov byte [rsp + 0x50], bl
jmp 0x180010287
mov r15, qword [rsp + 0x40]
sub rax, r15
cmp rax, 2
jb 0x180010748
cmp qword [rsp + 0x48], 0x10
lea r13, [rsp + 0x30]
lea r12, [r15 + 2]
mov qword [rbp - 0x20], rdi
cmovae r13, qword [rsp + 0x30]
mov ebx, 0xf
mov qword [rbp - 0x18], rdi
xorps xmm0, xmm0
lea rdi, [rbp - 0x30]
movups xmmword [rbp - 0x30], xmm0
cmp r12, rbx
jbe 0x18000ffd5
mov rbx, r12
movabs rax, 0x7fffffffffffffff
or rbx, 0xf
cmp rbx, rax
jbe 0x18000ff7a
mov rbx, rax
movabs rax, 0x8000000000000000
add rax, 0x27
jmp 0x18000ffa1
cmp rbx, 0x16
mov eax, 0x16
cmovb rbx, rax
lea rcx, [rbx + 1]
cmp rcx, 0x1000
jb 0x18000ffc0
lea rax, [rcx + 0x27]
cmp rax, rcx
jbe 0x180010736
mov rcx, rax
call fcn.1800fbb44
test rax, rax
je 0x180010625
lea rdi, [rax + 0x27]
and rdi, 0xffffffffffffffe0
mov qword [rdi - 8], rax
jmp 0x18000ffd1
test rcx, rcx
je 0x18000ffcf
call fcn.1800fbb44
mov rdi, rax
jmp 0x18000ffd1
xor edi, edi
mov qword [rbp - 0x30], rdi
mov r8, r15
mov qword [rbp - 0x20], r12
mov rdx, r13
mov qword [rbp - 0x18], rbx
mov rcx, rdi
call sub.VCRUNTIME140.dll_memcpy
mov r13d, 0x3a3a
mov r8, 0xffffffffffffffff
mov word [rdi + r15], r13w
mov byte [rdi + r12], 0
inc r8
cmp byte [rsi + r8], 0
jne 0x180010002
mov rdx, rsi
lea rcx, [rbp - 0x30]
call fcn.18004cd80
xor ebx, ebx
xorps xmm0, xmm0
movups xmmword [rbp - 0x70], xmm0
mov qword [rbp - 0x60], rbx
mov qword [rbp - 0x58], rbx
movups xmm0, xmmword [rax]
movups xmmword [rbp - 0x70], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rbp - 0x60], xmm1
mov qword [rax + 0x10], rbx
mov qword [rax + 0x18], 0xf
mov byte [rax], bl
mov rdx, qword [rbp - 0x58]
mov rcx, qword [rbp - 0x60]
mov rax, rdx
sub rax, rcx
cmp rax, 2
jb 0x18001007e
lea rax, [rcx + 2]
cmp rdx, 0x10
mov qword [rbp - 0x60], rax
lea rax, [rbp - 0x70]
cmovae rax, qword [rbp - 0x70]
mov word [rax + rcx], r13w
mov byte [rax + rcx + 2], bl
lea rax, [rbp - 0x70]
jmp 0x18001009c
lea r9, [0x1801991b4]
mov qword [rsp + 0x20], 2
mov edx, 2
lea rcx, [rbp - 0x70]
call fcn.18004ed20
mov qword [rbp - 0x80], rbx
xorps xmm0, xmm0
movups xmmword [rsp + 0x70], xmm0
mov qword [rbp - 0x78], rbx
mov rdi, 0xffffffffffffffff
movups xmm0, xmmword [rax]
movups xmmword [rsp + 0x70], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rbp - 0x80], xmm1
mov qword [rax + 0x10], rbx
mov qword [rax + 0x18], 0xf
mov byte [rax], bl
inc rdi
cmp byte [r14 + rdi], bl
jne 0x1800100d1
mov rdx, qword [rbp - 0x78]
mov rcx, qword [rbp - 0x80]
mov rax, rdx
sub rax, rcx
cmp rdi, rax
ja 0x180010122
cmp rdx, 0x10
lea rax, [rcx + rdi]
lea rbx, [rsp + 0x70]
mov qword [rbp - 0x80], rax
cmovae rbx, qword [rsp + 0x70]
mov r8, rdi
add rbx, rcx
mov rdx, r14
mov rcx, rbx
call sub.VCRUNTIME140.dll_memmove
mov byte [rdi + rbx], 0
lea rax, [rsp + 0x70]
xor ebx, ebx
jmp 0x180010137
mov r9, r14
mov qword [rsp + 0x20], rdi
mov rdx, rdi
lea rcx, [rsp + 0x70]
call fcn.18004ed20
movups xmm0, xmmword [rax]
movups xmm1, xmmword [rax + 0x10]
mov qword [rax + 0x10], rbx
mov qword [rax + 0x18], 0xf
mov byte [rax], 0
mov rdx, qword [rsp + 0x48]
movups xmmword [rbp - 0x50], xmm0
movups xmmword [rbp + 0x48], xmm1
cmp rdx, 0x10
jb 0x18001019a
mov rcx, qword [rsp + 0x30]
inc rdx
mov rax, rcx
cmp rdx, 0x1000
jb 0x18001018d
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x180010625
call fcn.1800fbf00
movups xmm0, xmmword [rbp - 0x50]
movups xmm1, xmmword [rbp + 0x48]
mov rdx, qword [rbp - 0x78]
movups xmmword [rsp + 0x30], xmm0
movups xmmword [rsp + 0x40], xmm1
cmp rdx, 0x10
jb 0x1800101e0
mov rcx, qword [rsp + 0x70]
inc rdx
mov rax, rcx
cmp rdx, 0x1000
jb 0x1800101db
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x180010625
call fcn.1800fbf00
mov rdx, qword [rbp - 0x58]
mov qword [rbp - 0x80], rbx
mov qword [rbp - 0x78], 0xf
mov byte [rsp + 0x70], 0
cmp rdx, 0x10
jb 0x18001022c
mov rcx, qword [rbp - 0x70]
inc rdx
mov rax, rcx
cmp rdx, 0x1000
jb 0x180010227
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x180010625
call fcn.1800fbf00
mov rdx, qword [rbp - 0x18]
mov qword [rbp - 0x60], rbx
mov qword [rbp - 0x58], 0xf
mov byte [rbp - 0x70], 0
cmp rdx, 0x10
jb 0x180010277
mov rcx, qword [rbp - 0x30]
inc rdx
mov rax, rcx
cmp rdx, 0x1000
jb 0x180010272
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x180010625
call fcn.1800fbf00
mov qword [rbp - 0x20], rbx
mov qword [rbp - 0x18], 0xf
mov byte [rbp - 0x30], 0
mov rcx, qword [0x180230870]
lea rdx, str.il2cpp_class_get_fields
mov qword [rbp + 0x10], rbx
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov rcx, qword [rbp + 0x18]
lea rdx, [rbp + 0x10]
call rax
mov r13, rax
test rax, rax
je 0x18001052f
nop word [rax + rax]
mov rcx, qword [0x180230870]
lea rdx, str.il2cpp_field_get_name
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov rcx, r13
call rax
mov r15, qword [rsp + 0x40]
mov rsi, rax
movabs rax, 0x7fffffffffffffff
mov rcx, rax
sub rcx, r15
cmp rcx, 2
jb 0x180010742
cmp qword [rsp + 0x48], 0x10
lea r12, [rsp + 0x30]
mov qword [rbp], rbx
lea r14, [r15 + 2]
cmovae r12, qword [rsp + 0x30]
lea rdi, [rbp - 0x10]
mov qword [rbp + 8], rbx
xorps xmm0, xmm0
mov ebx, 0xf
movups xmmword [rbp - 0x10], xmm0
cmp r14, rbx
jbe 0x1800103a7
mov rbx, r14
or rbx, 0xf
cmp rbx, rax
jbe 0x18001034c
mov rbx, rax
movabs rax, 0x8000000000000000
add rax, 0x27
jmp 0x180010373
cmp rbx, 0x16
mov eax, 0x16
cmovb rbx, rax
lea rcx, [rbx + 1]
cmp rcx, 0x1000
jb 0x180010392
lea rax, [rcx + 0x27]
cmp rax, rcx
jbe 0x18001073c
mov rcx, rax
call fcn.1800fbb44
test rax, rax
je 0x18001062c
lea rdi, [rax + 0x27]
and rdi, 0xffffffffffffffe0
mov qword [rdi - 8], rax
jmp 0x1800103a3
test rcx, rcx
je 0x1800103a1
call fcn.1800fbb44
mov rdi, rax
jmp 0x1800103a3
xor edi, edi
mov qword [rbp - 0x10], rdi
mov r8, r15
mov qword [rbp], r14
mov rdx, r12
mov qword [rbp + 8], rbx
mov rcx, rdi
call sub.VCRUNTIME140.dll_memcpy
mov eax, 0x3a3a
mov r8, 0xffffffffffffffff
mov word [rdi + r15], ax
mov byte [rdi + r14], 0
inc r8
cmp byte [rsi + r8], 0
jne 0x1800103d3
mov rdx, rsi
lea rcx, [rbp - 0x10]
call fcn.18004cd80
xor ebx, ebx
movups xmm0, xmmword [rax]
movups xmm1, xmmword [rax + 0x10]
mov qword [rax + 0x10], rbx
mov qword [rax + 0x18], 0xf
mov byte [rax], bl
mov rdx, qword [rbp + 8]
movups xmmword [rbp - 0x50], xmm0
movups xmmword [rbp - 0x40], xmm1
cmp rdx, 0x10
jb 0x180010443
mov rcx, qword [rbp - 0x10]
inc rdx
mov rax, rcx
cmp rdx, 0x1000
jb 0x18001043e
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x18001062c
call fcn.1800fbf00
mov rsi, qword [rbp - 0x38]
lea rax, [rbp - 0x50]
mov rdi, qword [rbp - 0x50]
cmp rsi, 0x10
mov qword [rbp], rbx
mov rcx, 0xffffffffffffffff
cmovae rax, rdi
mov qword [rbp + 8], 0xf
mov byte [rbp - 0x10], bl
nop dword [rax]
inc rcx
cmp byte [rax + rcx], bl
jne 0x180010470
cmp rsi, 0x10
lea r8, [rbp - 0x50]
mov eax, 0xffffffff
cmovae r8, rdi
test ecx, ecx
je 0x1800104c0
mov r9d, ecx
lea rsi, [0x18017e450]
nop word [rax + rax]
movsx edx, byte [r8]
lea r8, [r8 + 1]
mov ecx, eax
shr eax, 8
xor rdx, rcx
movzx ecx, dl
xor eax, dword [rsi + rcx*4]
sub r9, 1
jne 0x1800104a0
mov rsi, qword [rbp - 0x38]
not eax
cmp eax, dword [rbp + 0xb0]
je 0x180010633
cmp rsi, 0x10
jb 0x180010505
lea rdx, [rsi + 1]
mov rax, rdi
cmp rdx, 0x1000
jb 0x1800104fd
mov rdi, qword [rdi - 8]
add rdx, 0x27
sub rax, rdi
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1800106e1
mov rcx, rdi
call fcn.1800fbf00
mov rcx, qword [0x180230870]
lea rdx, str.il2cpp_class_get_fields
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov rcx, qword [rbp + 0x18]
lea rdx, [rbp + 0x10]
call rax
mov r13, rax
test rax, rax
jne 0x1800102c0
mov rdx, qword [rsp + 0x48]
cmp rdx, 0x10
jb 0x18001056c
mov rcx, qword [rsp + 0x30]
inc rdx
mov rax, rcx
cmp rdx, 0x1000
jb 0x180010567
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1800106e1
call fcn.1800fbf00
mov edi, dword [rbp + 0xb8]
lea rdx, str.il2cpp_image_get_class_count
mov rcx, qword [0x180230870]
inc edi
mov dword [rbp + 0xb8], edi
mov qword [rsp + 0x40], rbx
mov qword [rsp + 0x48], 0xf
mov byte [rsp + 0x30], 0
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov r12, qword [rbp + 0x30]
mov rcx, r12
call rax
movsxd rcx, edi
movabs r13, 0x7fffffffffffffff
cmp rcx, rax
jb 0x18000fb80
mov rbx, qword [rbp + 0x20]
mov esi, dword [rbp + 0xc0]
mov rcx, qword [0x180230870]
lea rdx, str.il2cpp_domain_get_assemblies
inc esi
mov qword [rbp + 0xc8], 0
inc rbx
mov dword [rbp + 0xc0], esi
mov qword [rbp + 0x20], rbx
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov rcx, qword [rbp + 0x38]
lea rdx, [rbp + 0xc8]
call rax
movsxd rax, esi
cmp rax, qword [rbp + 0xc8]
jae 0x1800106e8
mov rdi, qword [rbp + 0x40]
jmp 0x18000fb40
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
mov rcx, qword [0x180230870]
lea rdx, str.il2cpp_field_get_offset
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov rcx, r13
call rax
mov ecx, dword [rbp + 0xb0]
lea r8, [rbp + 0xb8]
mov ebx, eax
lea rdx, [rbp - 0x50]
mov dword [rbp + 0xbc], ebx
mov dword [rbp + 0xb8], ecx
call fcn.18004dd50
cmp rsi, 0x10
jb 0x1800106a3
lea rdx, [rsi + 1]
mov rax, rdi
cmp rdx, 0x1000
jb 0x18001069b
mov rdi, qword [rdi - 8]
add rdx, 0x27
sub rax, rdi
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1800106e1
mov rcx, rdi
call fcn.1800fbf00
mov rdx, qword [rsp + 0x48]
cmp rdx, 0x10
jb 0x1800106dc
mov rcx, qword [rsp + 0x30]
inc rdx
mov r8, rcx
cmp rdx, 0x1000
jb 0x1800106d7
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub r8, rcx
add r8, 0xfffffffffffffff8
cmp r8, 0x1f
ja 0x1800106e1
call fcn.1800fbf00
mov rax, rbx
jmp 0x1800106ea
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
xor eax, eax
mov r14, qword [rsp + 0x170]
mov r13, qword [rsp + 0x178]
mov r12, qword [rsp + 0x180]
mov rdi, qword [rsp + 0x188]
mov rsi, qword [rsp + 0x190]
mov r15, qword [rsp + 0x168]
add rsp, 0x198
pop rbx
pop rbp
ret
call fcn.18004da30
int3
call fcn.180003f90
int3
call fcn.18000bbf0
int3
call fcn.180003f90
int3
call fcn.180003f90
int3
call fcn.18000bbf0
int3
call fcn.18000bbf0
int3