Function at 0x18000f540
Capabilities:
Encode data using xor
Hash data with crc32
Link many functions at runtime

Disassembly:
push rbp
push rbx
push rsi
push rdi
push r15
lea rbp, [rsp - 0x50]
sub rsp, 0x150
mov rcx, qword [0x1802dce00]
lea rdx, str.il2cpp_domain_get
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
call rax
mov rcx, qword [0x1802dce00]
lea rdx, str.il2cpp_domain_get_assemblies
xor r15d, r15d
mov qword [rbp + 8], rax
mov qword [rbp - 8], r15
mov rbx, rax
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
lea rdx, [rbp - 8]
mov rcx, rbx
call rax
mov rcx, qword [0x1802dce00]
lea rdx, str.il2cpp_domain_get_assemblies
mov rdi, rax
mov qword [rbp + 0x10], rax
mov esi, r15d
mov dword [rbp + 0x88], r15d
mov qword [rbp + 0x90], r15
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
lea rdx, [rbp + 0x90]
mov rcx, rbx
call rax
cmp qword [rbp + 0x90], rsi
jbe 0x18000ff75
mov qword [rsp + 0x148], r12
mov ebx, r15d
mov qword [rsp + 0x140], r13
mov qword [rsp + 0x138], r14
mov qword [rbp - 0x10], rbx
nop dword [rax + rax]
mov rax, qword [rdi + rbx*8]
lea rdx, str.il2cpp_image_get_class_count
mov rcx, qword [0x1802dce00]
mov edi, r15d
mov dword [rbp + 0x80], r15d
mov r12, qword [rax]
mov qword [rbp], r12
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov rcx, r12
call rax
test rax, rax
je 0x18000fefc
nop word [rax + rax]
mov rdx, qword [r12]
xorps xmm0, xmm0
movups xmmword [rsp + 0x30], xmm0
mov qword [rsp + 0x40], r15
mov r8, 0xffffffffffffffff
mov qword [rsp + 0x48], r15
nop dword [rax]
inc r8
cmp byte [rdx + r8], 0
jne 0x18000f660
lea rcx, [rsp + 0x30]
call fcn.180042640
mov r15, qword [rsp + 0x48]
lea rbx, [rsp + 0x30]
mov r14, qword [rsp + 0x30]
cmp r15, 0xf
mov rsi, qword [rsp + 0x40]
cmova rbx, r14
cmp rsi, 4
jb 0x18000f6f2
lea rdi, [rsi + rbx]
mov edx, 0x2e
lea r8, [rdi - 3]
mov rcx, rbx
sub r8, rbx
call sub.VCRUNTIME140.dll_memchr
mov r9, rax
test rax, rax
je 0x18000f6ec
nop word [rax + rax]
cmp dword [r9], 0x6c6c642e
je 0x18000f861
inc r9
lea r8, [rdi - 3]
sub r8, r9
mov rcx, r9
mov edx, 0x2e
call sub.VCRUNTIME140.dll_memchr
mov r9, rax
test rax, rax
jne 0x18000f6c0
mov edi, dword [rbp + 0x80]
mov r9, 0xffffffffffffffff
cmp rsi, r9
jb 0x18000ff83
mov rax, rsi
lea rcx, [rsp + 0x30]
sub rax, r9
mov edx, 4
cmp rax, rdx
cmovb rdx, rax
cmp r15, 0xf
cmova rcx, r14
sub rsi, rdx
add rcx, r9
mov r8, rsi
sub r8, r9
add rdx, rcx
inc r8
call sub.VCRUNTIME140.dll_memmove
mov rcx, qword [0x1802dce00]
lea rdx, str.il2cpp_image_get_class
mov qword [rsp + 0x40], rsi
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
movsxd rdx, edi
mov rcx, r12
call rax
xor edi, edi
mov qword [rbp + 0x98], rax
xorps xmm0, xmm0
mov qword [rsp + 0x60], rdi
mov r13, rax
mov qword [rsp + 0x68], rdi
mov r14, qword [rax + 0x10]
mov r8, 0xffffffffffffffff
mov rsi, qword [rax + 0x18]
movups xmmword [rsp + 0x50], xmm0
inc r8
cmp byte [rsi + r8], dil
jne 0x18000f786
mov rdx, rsi
lea rcx, [rsp + 0x50]
call fcn.180042640
cmp qword [rsp + 0x60], rdi
mov rdx, qword [rsp + 0x68]
sete bl
cmp rdx, 0xf
jbe 0x18000f7e1
mov rcx, qword [rsp + 0x50]
inc rdx
mov rax, rcx
cmp rdx, 0x1000
jb 0x18000f7dc
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x18000ff56
call fcn.1800e8c1c
movabs rcx, 0x7fffffffffffffff
mov rax, rcx
test bl, bl
je 0x18000f9d1
mov rsi, qword [rsp + 0x40]
sub rax, rsi
cmp rax, 2
jb 0x18000ff8f
cmp qword [rsp + 0x48], 0xf
lea r12, [rsp + 0x30]
lea r15, [rsi + 2]
mov qword [rsp + 0x60], rdi
cmova r12, qword [rsp + 0x30]
mov ebx, 0xf
mov qword [rsp + 0x68], rdi
xorps xmm0, xmm0
lea rdi, [rsp + 0x50]
movups xmmword [rsp + 0x50], xmm0
cmp r15, rbx
jbe 0x18000f8cb
mov rbx, r15
or rbx, 0xf
cmp rbx, rcx
jbe 0x18000f86f
movabs rax, 0x8000000000000000
mov rbx, rcx
add rax, 0x27
jmp 0x18000f896
mov edi, dword [rbp + 0x80]
sub r9, rbx
jmp 0x18000f6f9
cmp rbx, 0x16
mov eax, 0x16
cmovb rbx, rax
lea rcx, [rbx + 1]
cmp rcx, 0x1000
jb 0x18000f8b5
lea rax, [rcx + 0x27]
cmp rax, rcx
jbe 0x18000ff89
mov rcx, rax
call fcn.1800e8be0
test rax, rax
je 0x18000ff48
lea rdi, [rax + 0x27]
and rdi, 0xffffffffffffffe0
mov qword [rdi - 8], rax
jmp 0x18000f8c6
test rcx, rcx
je 0x18000f8c4
call fcn.1800e8be0
mov rdi, rax
jmp 0x18000f8c6
xor edi, edi
mov qword [rsp + 0x50], rdi
mov r8, rsi
mov qword [rsp + 0x60], r15
mov rdx, r12
mov qword [rsp + 0x68], rbx
mov rcx, rdi
call sub.VCRUNTIME140.dll_memcpy
mov word [rdi + rsi], 0x3a3a
mov r8, 0xffffffffffffffff
mov byte [rdi + r15], 0
inc r8
cmp byte [r14 + r8], 0
jne 0x18000f8f5
mov rdx, r14
lea rcx, [rsp + 0x50]
call fcn.1800404b0
xor r15d, r15d
movups xmm0, xmmword [rax]
movups xmm1, xmmword [rax + 0x10]
mov qword [rax + 0x10], r15
mov qword [rax + 0x18], 0xf
mov byte [rax], r15b
mov rdx, qword [rsp + 0x48]
movups xmmword [rbp + 0x18], xmm0
movups xmmword [rbp - 0x50], xmm1
cmp rdx, 0xf
jbe 0x18000f972
mov rcx, qword [rsp + 0x30]
inc rdx
mov rax, rcx
cmp rdx, 0x1000
jb 0x18000f965
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x18000ff48
call fcn.1800e8c1c
movups xmm0, xmmword [rbp + 0x18]
movups xmm1, xmmword [rbp - 0x50]
mov rdx, qword [rsp + 0x68]
movups xmmword [rsp + 0x30], xmm0
movups xmmword [rsp + 0x40], xmm1
cmp rdx, 0xf
jbe 0x18000f9b9
mov rcx, qword [rsp + 0x50]
inc rdx
mov rax, rcx
cmp rdx, 0x1000
jb 0x18000f9b4
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x18000ff48
call fcn.1800e8c1c
mov qword [rsp + 0x60], r15
mov qword [rsp + 0x68], 0xf
mov byte [rsp + 0x50], r15b
jmp 0x18000fd4d
mov r15, qword [rsp + 0x40]
sub rax, r15
cmp rax, 2
jb 0x18000ffa1
cmp qword [rsp + 0x48], 0xf
lea r13, [rsp + 0x30]
lea r12, [r15 + 2]
mov qword [rbp - 0x20], rdi
cmova r13, qword [rsp + 0x30]
mov ebx, 0xf
mov qword [rbp - 0x18], rdi
xorps xmm0, xmm0
lea rdi, [rbp - 0x30]
movups xmmword [rbp - 0x30], xmm0
cmp r12, rbx
jbe 0x18000fa8f
mov rbx, r12
or rbx, 0xf
cmp rbx, rcx
jbe 0x18000fa34
movabs rax, 0x8000000000000000
mov rbx, rcx
add rax, 0x27
jmp 0x18000fa5b
cmp rbx, 0x16
mov eax, 0x16
cmovb rbx, rax
lea rcx, [rbx + 1]
cmp rcx, 0x1000
jb 0x18000fa7a
lea rax, [rcx + 0x27]
cmp rax, rcx
jbe 0x18000ff95
mov rcx, rax
call fcn.1800e8be0
test rax, rax
je 0x18000ff4f
lea rdi, [rax + 0x27]
and rdi, 0xffffffffffffffe0
mov qword [rdi - 8], rax
jmp 0x18000fa8b
test rcx, rcx
je 0x18000fa89
call fcn.1800e8be0
mov rdi, rax
jmp 0x18000fa8b
xor edi, edi
mov qword [rbp - 0x30], rdi
mov r8, r15
mov qword [rbp - 0x20], r12
mov rdx, r13
mov qword [rbp - 0x18], rbx
mov rcx, rdi
call sub.VCRUNTIME140.dll_memcpy
mov ebx, 0x3a3a
mov r8, 0xffffffffffffffff
mov word [rdi + r15], bx
mov byte [rdi + r12], 0
nop dword [rax + rax]
inc r8
cmp byte [rsi + r8], 0
jne 0x18000fac0
mov rdx, rsi
lea rcx, [rbp - 0x30]
call fcn.1800404b0
xor r15d, r15d
xorps xmm0, xmm0
movups xmmword [rbp - 0x70], xmm0
mov qword [rbp - 0x60], r15
mov qword [rbp - 0x58], r15
movups xmm0, xmmword [rax]
movups xmmword [rbp - 0x70], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rbp - 0x60], xmm1
mov qword [rax + 0x10], r15
mov qword [rax + 0x18], 0xf
mov byte [rax], r15b
mov rdx, qword [rbp - 0x58]
mov rcx, qword [rbp - 0x60]
mov rax, rdx
sub rax, rcx
cmp rax, 2
jb 0x18000fb3e
lea rax, [rcx + 2]
cmp rdx, 0xf
mov qword [rbp - 0x60], rax
lea rax, [rbp - 0x70]
cmova rax, qword [rbp - 0x70]
mov word [rax + rcx], bx
mov byte [rax + rcx + 2], r15b
lea rax, [rbp - 0x70]
jmp 0x18000fb5c
lea r9, [0x18026aae4]
mov qword [rsp + 0x20], 2
mov edx, 2
lea rcx, [rbp - 0x70]
call fcn.1800424b0
mov qword [rbp - 0x80], r15
xorps xmm0, xmm0
movups xmmword [rsp + 0x70], xmm0
mov qword [rbp - 0x78], r15
mov rdi, 0xffffffffffffffff
movups xmm0, xmmword [rax]
movups xmmword [rsp + 0x70], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rbp - 0x80], xmm1
mov qword [rax + 0x10], r15
mov qword [rax + 0x18], 0xf
mov byte [rax], r15b
inc rdi
cmp byte [r14 + rdi], r15b
jne 0x18000fb92
mov rdx, qword [rbp - 0x78]
mov rcx, qword [rbp - 0x80]
mov rax, rdx
sub rax, rcx
cmp rdi, rax
ja 0x18000fbe1
cmp rdx, 0xf
lea rax, [rcx + rdi]
lea rbx, [rsp + 0x70]
mov qword [rbp - 0x80], rax
cmova rbx, qword [rsp + 0x70]
mov r8, rdi
add rbx, rcx
mov rdx, r14
mov rcx, rbx
call sub.VCRUNTIME140.dll_memmove
lea rax, [rsp + 0x70]
mov byte [rdi + rbx], r15b
jmp 0x18000fbf6
mov r9, r14
mov qword [rsp + 0x20], rdi
mov rdx, rdi
lea rcx, [rsp + 0x70]
call fcn.1800424b0
movups xmm0, xmmword [rax]
movups xmm1, xmmword [rax + 0x10]
mov qword [rax + 0x10], r15
mov qword [rax + 0x18], 0xf
mov byte [rax], r15b
mov rdx, qword [rsp + 0x48]
movups xmmword [rbp - 0x50], xmm0
movups xmmword [rbp + 0x18], xmm1
cmp rdx, 0xf
jbe 0x18000fc59
mov rcx, qword [rsp + 0x30]
inc rdx
mov rax, rcx
cmp rdx, 0x1000
jb 0x18000fc4c
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x18000ff4f
call fcn.1800e8c1c
movups xmm0, xmmword [rbp - 0x50]
movups xmm1, xmmword [rbp + 0x18]
mov rdx, qword [rbp - 0x78]
movups xmmword [rsp + 0x30], xmm0
movups xmmword [rsp + 0x40], xmm1
cmp rdx, 0xf
jbe 0x18000fc9f
mov rcx, qword [rsp + 0x70]
inc rdx
mov rax, rcx
cmp rdx, 0x1000
jb 0x18000fc9a
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x18000ff4f
call fcn.1800e8c1c
mov rdx, qword [rbp - 0x58]
mov qword [rbp - 0x80], r15
mov qword [rbp - 0x78], 0xf
mov byte [rsp + 0x70], r15b
cmp rdx, 0xf
jbe 0x18000fceb
mov rcx, qword [rbp - 0x70]
inc rdx
mov rax, rcx
cmp rdx, 0x1000
jb 0x18000fce6
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x18000ff4f
call fcn.1800e8c1c
mov rdx, qword [rbp - 0x18]
mov qword [rbp - 0x60], r15
mov qword [rbp - 0x58], 0xf
mov byte [rbp - 0x70], r15b
cmp rdx, 0xf
jbe 0x18000fd36
mov rcx, qword [rbp - 0x30]
inc rdx
mov rax, rcx
cmp rdx, 0x1000
jb 0x18000fd31
mov rcx, qword [rcx - 8]
add rdx, 0x27
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x18000ff4f
call fcn.1800e8c1c
mov r13, qword [rbp + 0x98]
mov qword [rbp - 0x20], r15
mov qword [rbp - 0x18], 0xf
mov byte [rbp - 0x30], r15b
mov r10, qword [rsp + 0x48]
lea rcx, [rsp + 0x30]
mov r9, qword [rsp + 0x30]
cmp r10, 0xf
mov rax, 0xffffffffffffffff
cmova rcx, r9
nop dword [rax + rax]
inc rax
cmp byte [rcx + rax], 0
jne 0x18000fd70
cmp r10, 0xf
lea rdx, [rsp + 0x30]
mov ebx, 0xffffffff
cmova rdx, r9
test eax, eax
je 0x18000fdc4
mov r8d, eax
lea r13, [0x180241030]
nop dword [rax]
movsx ecx, byte [rdx]
lea rdx, [rdx + 1]
mov eax, ebx
shr ebx, 8
xor rcx, rax
movzx eax, cl
xor ebx, dword [r13 + rax*4]
sub r8, 1
jne 0x18000fda0
mov r13, qword [rbp + 0x98]
mov rdi, qword [0x1802dce70]
not ebx
mov dword [rbp - 0x48], r15d
mov rcx, rdi
mov rax, qword [rdi + 8]
mov qword [rbp - 0x50], rax
cmp byte [rax + 0x19], 0
jne 0x18000fe08
mov qword [rbp - 0x50], rax
cmp dword [rax + 0x20], ebx
jae 0x18000fdf5
mov rax, qword [rax + 0x10]
mov dword [rbp - 0x48], r15d
jmp 0x18000fe02
mov rcx, rax
mov dword [rbp - 0x48], 1
mov rax, qword [rax]
cmp byte [rax + 0x19], 0
je 0x18000fde2
cmp byte [rcx + 0x19], 0
jne 0x18000fe13
cmp ebx, dword [rcx + 0x20]
jae 0x18000fe71
movabs rax, 0x555555555555555
cmp qword [0x1802dce78], rax
je 0x18000ff9b
mov ecx, 0x30
call fcn.1800e8be0
movups xmm0, xmmword [rbp - 0x50]
mov r8, rax
lea rdx, [rbp - 0x50]
lea rcx, [0x1802dce70]
mov dword [rax + 0x20], ebx
mov qword [rax + 0x28], r13
mov qword [rax], rdi
mov qword [rax + 8], rdi
mov qword [rax + 0x10], rdi
mov word [rax + 0x18], 0
movaps xmmword [rbp - 0x50], xmm0
call fcn.180042a90
mov r10, qword [rsp + 0x48]
mov r9, qword [rsp + 0x30]
cmp r10, 0xf
jbe 0x18000fea8
lea rdx, [r10 + 1]
mov rax, r9
cmp rdx, 0x1000
jb 0x18000fea0
mov r9, qword [r9 - 8]
add rdx, 0x27
sub rax, r9
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x18000ff56
mov rcx, r9
call fcn.1800e8c1c
mov edi, dword [rbp + 0x80]
lea rdx, str.il2cpp_image_get_class_count
mov rcx, qword [0x1802dce00]
inc edi
mov dword [rbp + 0x80], edi
mov qword [rsp + 0x40], r15
mov qword [rsp + 0x48], 0xf
mov byte [rsp + 0x30], 0
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov r12, qword [rbp]
mov rcx, r12
call rax
movsxd rcx, edi
cmp rcx, rax
jb 0x18000f640
mov rbx, qword [rbp - 0x10]
mov esi, dword [rbp + 0x88]
mov rcx, qword [0x1802dce00]
lea rdx, str.il2cpp_domain_get_assemblies
inc esi
mov qword [rbp + 0x90], r15
inc rbx
mov dword [rbp + 0x88], esi
mov qword [rbp - 0x10], rbx
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov rcx, qword [rbp + 8]
lea rdx, [rbp + 0x90]
call rax
movsxd rax, esi
cmp rax, qword [rbp + 0x90]
jae 0x18000ff5d
mov rdi, qword [rbp + 0x10]
jmp 0x18000f600
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
mov r13, qword [rsp + 0x140]
mov r12, qword [rsp + 0x148]
mov r14, qword [rsp + 0x138]
add rsp, 0x150
pop r15
pop rdi
pop rsi
pop rbx
pop rbp
ret
call fcn.1800411a0
int3
call fcn.180004040
int3
call fcn.18000b270
int3
call fcn.180004040
int3
call fcn.18000bf30
int3
call fcn.18000b270
int3