Function at 0x180299560
Capabilities:
Encode data using xor

Disassembly:
push rbp
push r15
push r14
push r13
push r12
push rsi
push rdi
push rbx
sub rsp, 0x298
lea rbp, [rsp + 0x80]
mov eax, 0x10
call fcn.18045a590
sub rsp, rax
mov r12, rsp
mov eax, 0x30
call fcn.18045a590
sub rsp, rax
mov rsi, rsp
mov eax, 0x20
call fcn.18045a590
sub rsp, rax
mov rdi, rsp
mov eax, 0x10
call fcn.18045a590
sub rsp, rax
mov qword [rbp + 0x1f0], rsp
mov eax, 0x30
call fcn.18045a590
sub rsp, rax
mov r15, rsp
mov eax, 0x20
call fcn.18045a590
sub rsp, rax
mov r14, rsp
lea rax, [0x180483c1c]
mov qword [rbp + 0x200], rax
lea rax, [rbp + 0x200]
mov rcx, qword [rbp + 0x200]
movabs rax, 0x9f4908fb786e1465
mov qword [rbp + 0x1f8], rax
lea rax, [rbp + 0x1f8]
mov rdx, qword [rbp + 0x1f8]
sub rsp, 0x20
call fcn.1801bfb80
add rsp, 0x20
mov r13d, dword [rax]
movzx ebx, word [rax + 4]
movzx eax, byte [rax + 6]
shl eax, 0x10
or ebx, eax
mov al, byte [0x1805297c8]
sub rsp, 0x20
mov ecx, 7
mov edx, 1
call fcn.1802cbf10
add rsp, 0x20
cmp rax, 0
jne 0x180299673
sub rsp, 0x20
mov ecx, 1
mov edx, 7
call fcn.180407090
add rsp, 0x20
ud2
mov ecx, ebx
shr ecx, 0x10
xor cl, 0xf4
movzx ecx, cl
shl rcx, 0x30
shl ecx, 0x30
mov edx, ebx
shr edx, 8
xor dl, 0x42
movzx edx, dl
shl rdx, 0x28
shl edx, 0x28
or rcx, rdx
xor bl, 0xc7
movzx edx, bl
shl rdx, 0x20
or rcx, rdx
xor r13d, 0xf1c63d15
mov edx, ecx
or edx, r13d
mov r8, rcx
shr r8, 0x30
mov byte [rax + 6], r8b
shr rcx, 0x20
mov word [rax + 4], cx
mov dword [rax], edx
mov qword [r14], 7
mov rcx, r14
add rcx, 8
mov qword [rcx], rax
mov qword [r14 + 0x10], 7
lea rcx, [rbp + 0xf0]
sub rsp, 0x20
mov rdx, r14
call fcn.1802abb30
add rsp, 0x20
mov rcx, qword [rbp + 0xf0]
mov rax, qword [rbp + 0xf8]
movabs rdx, 0x8000000000000007
cmp rcx, rdx
jne 0x180299796
mov qword [rbp + 0x168], rax
mov dword [rbp + 0xc0], 0
mov dword [rbp + 0xc4], 0
movaps xmm0, xmmword [0x180487830]
movups xmmword [rbp + 0xe0], xmm0
mov qword [rbp + 0xd0], 0
mov dword [rbp + 0xd8], 0
mov dword [rbp + 0xc8], 0
lea rcx, [rbp - 0x78]
lea rdx, [rbp + 0x168]
lea r8, [rbp + 0xc0]
sub rsp, 0x20
call fcn.1802d37b0
add rsp, 0x20
mov rax, qword [rbp - 0x78]
movabs rcx, 0x8000000000000007
cmp rax, rcx
je 0x180299c87
jmp 0x180299c8c
mov rdx, qword [rbp + 0x100]
mov qword [r15 + 0x10], rdx
mov rdx, qword [rbp + 0x108]
xchg ebp, eax
or byte [rcx], al
add byte [rax], al
mov qword [r15 + 0x18], rdx
mov rdx, qword [rbp + 0x110]
add byte [rcx - 0x77], cl
push rdi
and byte [rcx - 0x77], cl
cmovge ecx, dword [rcx - 0x3a7cb603]
or byte [rcx - 0x77], cl
or byte [r13 - 0x77], r9b
cmp al, 0x24
lea rax, [0x180295ee0]
mov qword [r12 + 8], rax
lea rax, [0x180488058]
mov qword [rsi], rax
mov qword [rsi + 8], 1
mov qword [rsi + 0x20], 0
mov qword [rsi + 0x10], r12
mov qword [rsi + 0x18], 1
sub rsp, 0x20
mov rcx, rdi
mov rdx, rsi
call fcn.1804484a0
add rsp, 0x20
mov rsi, qword [rdi]
mov r14, qword [rdi + 8]
mov r8, qword [rdi + 0x10]
sub rsp, 0x20
mov rcx, qword [rbp + 0x1f0]
mov rdx, r14
mov r9d, 3
call fcn.1803bf910
add rsp, 0x20
cmp rsi, 0
je 0x180299857
sub rsp, 0x20
mov rcx, r14
mov rdx, rsi
mov r8d, 1
call fcn.1802cbf20
add eax, dword es:[rax]
add rsp, 0x20
jmp 0x180299857
sub rsp, 0x20
mov ecx, 5
xor edx, edx
call fcn.180427510
add rsp, 0x20
mov r8, qword [r15]
movabs rax, 0x7ffffffffffffffe
mov rcx, r8
add rcx, rax
mov rax, rcx
sub rax, 5
mov eax, 1
cmovb rax, rcx
test rax, rax
je case.0x1802998d1.0
jmp 0x180299899
mov rcx, rax
sub rcx, 1
add dword [rdi], ecx
invalid
invalid
add dword [rax], eax
invalid
jmp 0x1802998a8
add rax, 0xfffffffffffffffe
sub rax, 2
jb case.0x1802998d1.0
jmp 0x1802998b8
mov rcx, qword [r13]
mov rax, rcx
and rax, 3
lea rdx, [0x180488784]
movsxd rax, dword [rdx + rax*4]
add rax, rdx
jmp rax
mov eax, dword [0x180524a20]
xor edx, edx
div dword [0x180524a24]
or eax, 0x4997f01c
sub eax, 0x14ab6b6b
and eax, 0x3bbf9a7c
cmp eax, 0x4c892ae6
jae 0x18029a389
jmp 0x18029990c
mov eax, dword [0x180524a28]
and eax, dword [0x180524a2c]
sub eax, 0xfb24780f
sub eax, 0x58937a28
mov r8d, 0x937d0daf
xor edx, edx
div r8d
mov rsi, rcx
add rsi, 0xffffffffffffffff
mov rdi, qword [rcx - 1]
mov rbx, qword [rcx + 7]
cmp eax, 0xf77c510c
jae 0x18029990c
jmp 0x180299945
mov eax, dword [0x180524a30]
xor edx, edx
div dword [0x180524a34]
sub eax, 0x40c36dd3
mov ecx, 0x4668ce74
xor edx, edx
div ecx
xor eax, 0x776e7f13
cmp eax, 0x18cf58d1
jbe 0x18029a396
mov edx, dword [0x180524a38]
sub edx, dword [0x180524a3c]
add edx, 0xdeb13906
xor edx, 0xfbe08a26
sub edx, 0x4a40a163
mov rax, qword [rbx]
cmp rax, 0
sete cl
cmp edx, 0xcbc59bea
jae 0x18029a396
jmp 0x1802999a7
test cl, 1
jne 0x1802999bd
jmp 0x1802999ae
sub rsp, 0x20
mov rcx, rdi
call rax
add rsp, 0x20
jmp 0x1802999bd
mov rdx, qword [rbx + 8]
add rbx, 0x10
ret
adc byte [rbx + 0x28b07505], cl
add byte [rdi], cl
scasd eax, dword [rdi]
add eax, 0x28b072
sub eax, 0xd13ba825
xor eax, 0x2dc18f5
xor eax, 0x3d6b668a
cmp eax, 0xdd3da849
jae 0x18029a3a3
mov eax, dword [0x180524a48]
and eax, dword [0x180524a4c]
xor eax, 0xad7eb87b
sub eax, 0x6c41e1d7
sub eax, 0xc115d348
mov r8, qword [rbx]
movabs rcx, 0x8000000000000001
cmp r8, rcx
setb cl
cmp eax, 0x4558d683
je 0x18029a3a3
jmp 0x180299a27
cmp rdx, 0
je 0x180299a3f
sub rsp, 0x20
mov rcx, rdi
call fcn.1802cbf20
add rsp, 0x20
jmp 0x180299a3f
sub rsp, 0x20
mov rcx, rsi
mov edx, 0x18
mov r8d, 8
call fcn.1802cbf20
add rsp, 0x20
jmp case.0x1802998d1.0
mov eax, dword [0x180524a50]
xor eax, dword [0x180524a54]
mov ecx, 0x9ccf4af1
xor edx, edx
div ecx
imul eax, eax, 0xb9317ec2
xor eax, 0xa7b5c098
cmp eax, 0x4badb25
jbe 0x18029a3b4
jmp 0x180299a8c
mov ecx, dword [0x180524a58]
and ecx, dword [0x180524a5c]
or ecx, 0xe035fa06
xor ecx, 0x64f2a6b6
add ecx, 0xd0f9efd9
movabs rax, 0x8000000000000002
cmp r8, rax
setl al
cmp ecx, 0x7344aa50
jae 0x180299a8c
jmp 0x180299ac4
test al, 1
jne case.0x1802998d1.0
jmp 0x180299aca
cmp r8, 0
sete al
test al, 1
jne case.0x1802998d1.0
jmp 0x180299ad7
mov rcx, qword [r13]
sub rsp, 0x20
mov rdx, r8
mov r8d, 1
call fcn.1802cbf20
add rsp, 0x20
jmp case.0x1802998d1.0
jmp 0x180299af5
lea r15, [rbp + 0x118]
add r15, 0x30
lea rdi, [rbp + 0x118]
add rdi, 0x38
lea rax, [rbp + 0x118]
add rax, 8
mov qword [rbp + 0x170], rax
lea r13, [rbp + 0x118]
add r13, 0x10
lea rax, [rbp + 0x118]
add rax, 0x18
mov qword [rbp + 0x178], rax
lea r12, [rbp + 0x118]
add r12, 0x20
lea rax, [rbp + 0x118]
add rax, 0x28
mov qword [rbp + 0x180], rax
lea rax, [rbp - 0x50]
add rax, 0x20
mov qword [rbp + 0x188], rax
lea rax, [rbp - 0x50]
add rax, 0x88
mov qword [rbp + 0x190], rax
lea rax, [rbp - 0x50]
add rax, 0x38
mov qword [rbp + 0x198], rax
lea rax, [rbp - 0x50]
add rax, 0x58
mov qword [rbp + 0x1a0], rax
lea rax, [rbp - 0x50]
add rax, 0x60
mov qword [rbp + 0x1a8], rax
lea rax, [rbp - 0x50]
add rax, 0x68
mov qword [rbp + 0x1b0], rax
lea rax, [rbp - 0x50]
add rax, 0x70
mov qword [rbp + 0x1b8], rax
lea rax, [rbp - 0x50]
add rax, 0x78
mov qword [rbp + 0x1c0], rax
lea rax, [rbp - 0x50]
add rax, 0x80
mov qword [rbp + 0x1c8], rax
lea rax, [rbp - 0x50]
add rax, 0xa8
mov qword [rbp + 0x1d0], rax
lea rsi, [rbp + 0x158]
add rsi, 8
lea rcx, [rbp - 0x50]
lea rdx, str.C:Program_FilesWindows_NTidentity_provider.exe__
sub rsp, 0x20
mov r8d, 0x31
call fcn.180429720
add rsp, 0x20
lea rcx, [rbp + 0x80]
lea rdx, [rbp - 0x50]
sub rsp, 0x20
call fcn.180433aa0
add rsp, 0x20
cmp qword [rbp + 0x80], 2
je 0x18029a385
lea rax, [rbp - 0x50]
add rax, 8
mov qword [rbp + 0x1d8], rax
lea rax, [rbp - 0x50]
add rax, 0x28
mov qword [rbp + 0x210], rax
lea rax, [rbp - 0x50]
add rax, 0x30
mov qword [rbp + 0x1e0], rax
lea rax, [rbp - 0x50]
add rax, 0x40
mov qword [rbp + 0x1e8], rax
mov qword [rbp + 0x208], rdi
jmp 0x180299c90
jmp 0x180299af5
ud2
mov eax, dword [0x180524a60]
add eax, dword [0x180524a64]
xor eax, 0x364c3212
and eax, 0x91d95110
imul eax, eax, 0x1dbe23cf
cmp eax, 0x368ee5b5
je 0x18029a3c5
jmp 0x180299cb9
mov eax, dword [0x180524a68]
sub eax, dword [0x180524a6c]
mov ecx, 0xc0f6796a
xor edx, edx
div ecx
mov ebx, eax
add ebx, 0xa9ae011c
and ebx, 0xf806be19
lea rcx, [rbp + 0x118]
lea rdx, [rbp + 0x80]
sub rsp, 0x20
mov r8d, 0x40
call fcn.180468b10
add rsp, 0x20
lea rcx, [rbp + 0x158]
lea rdx, [rbp + 0x118]
sub rsp, 0x20
call fcn.180433b10
add rsp, 0x20
mov rcx, qword [r15]
cmp ebx, 0xb73571d6
ja 0x180299cb9
jmp 0x180299d25
mov rbx, qword [rdi]
sub rsp, 0x20
call qword [sym.imp.kernel32.dll_CloseHandle]
mov rcx, rbx
call qword [sym.imp.kernel32.dll_CloseHandle]
add rsp, 0x20
cmp qword [rbp + 0x118], 0
je 0x180299d63
mov rax, qword [rbp + 0x170]
mov rcx, qword [rax]
sub rsp, 0x20
call qword [sym.imp.kernel32.dll_CloseHandle]
add rsp, 0x20
jmp 0x180299d63
mov eax, dword [0x180524a70]
or eax, dword [0x180524a74]
sub eax, 0x368f8864
mov ecx, 0x3539325
xor edx, edx
div ecx
imul eax, eax, 0x417a65cb
cmp eax, 0xc2c747f7
jae 0x18029a412
jmp 0x180299d90
mov eax, dword [0x180524a78]
or eax, dword [0x180524a7c]
imul eax, eax, 0x29bd6b79
imul ecx, eax, 0xad5af6ca
xor ecx, 0xd40fa11c
mov rax, qword [r13]
cmp ecx, 0x1251c1ef
jb 0x180299d90
jmp 0x180299dbc
cmp rax, 0
sete cl
mov eax, dword [0x180524a80]
sub eax, dword [0x180524a84]
add eax, 0x9b214dc7
add eax, 0x443d0150
or eax, 0xa0acc110
cmp eax, 0x561d1355
jb 0x18029a423
jmp 0x180299deb
mov eax, dword [0x180524a88]
sub eax, dword [0x180524a8c]
or eax, 0xc18d217d
mov r8d, 0xfae470a2
xor edx, edx
div r8d
and eax, 0xe138620c
cmp eax, 0x737a87cc
je 0x180299deb
test cl, 1
jne 0x180299e34
jmp 0x180299e1a
mov rax, qword [rbp + 0x178]
mov rcx, qword [rax]
sub rsp, 0x20
call qword [sym.imp.kernel32.dll_CloseHandle]
add rsp, 0x20
jmp 0x180299e34
mov eax, dword [0x180524a90]
xor eax, dword [0x180524a94]
imul eax, eax, 0x64fe87fa
xor eax, 0x81e4aaea
add eax, 0x5905252b
cmp eax, 0xd6c324c6
jae 0x18029a430
jmp 0x180299e5d
mov eax, dword [0x180524a98]
imul eax, dword [0x180524a9c]
xor eax, 0x3072d99
imul ecx, eax, 0xaa8baf31
and ecx, 0x6deaa595
mov rax, qword [r12]
cmp ecx, 0xcdca44e7
jae 0x180299e5d
jmp 0x180299e89
cmp rax, 0
sete al
test al, 1
jne 0x180299eb0
jmp 0x180299e96
mov rax, qword [rbp + 0x180]
mov rcx, qword [rax]
sub rsp, 0x20
call qword [sym.imp.kernel32.dll_CloseHandle]
add rsp, 0x20
jmp 0x180299eb0
mov rdx, qword [rbp - 0x50]
cmp rdx, 0
sete al
test al, 1
jne 0x180299ee0
jmp 0x180299ec1
mov rax, qword [rbp + 0x1d8]
mov rcx, qword [rax]
sub rsp, 0x20
mov r8d, 1
call fcn.1802cbf20
add rsp, 0x20
jmp 0x180299ee0
mov rax, qword [rbp + 0x210]
mov rbx, qword [rax]
mov rax, qword [rbp + 0x1e0]
mov r14, qword [rax]
cmp r14, 0
je 0x180299f4b
xor edi, edi
jmp 0x180299efe
mov rax, rdi
add rdi, 1
imul rcx, rax, 0x28
mov rax, rbx
add rax, rcx
add rax, 8
mov rdx, qword [rax]
cmp rdx, 0
je 0x180299f36
add rax, 8
mov rcx, qword [rax]
sub rsp, 0x20
mov r8d, 1
call fcn.1802cbf20
add rsp, 0x20
cmp rdi, r14
sete al
test al, 1
jne 0x180299f42
jmp 0x180299efe
mov rdi, qword [rbp + 0x208]
jmp 0x180299f4b
mov rax, qword [rbp + 0x188]
mov rax, qword [rax]
cmp rax, 0
je 0x180299fcf
mov rcx, qword [rbp + 0x210]
mov rcx, qword [rcx]
imul rdx, rax, 0x28
sub rsp, 0x20
mov r8d, 8
call fcn.1802cbf20
add rsp, 0x20
mov eax, dword [0x180524aa0]
imul eax, dword [0x180524aa4]
xor eax, 0xc6bb1ef4
sub eax, 0x325648dd
sub eax, 0x999ec127
cmp eax, 0x627ab69b
jbe 0x18029a43d
mov eax, dword [0x180524aa8]
xor eax, dword [0x180524aac]
mov ecx, 0x976f9bc2
xor edx, edx
div ecx
xor eax, 0x9a324814
and eax, 0x73e8f2bd
cmp eax, 0xceca7dee
ja 0x18029a43d
jmp 0x180299fcf
sub rsp, 0x20
mov rcx, qword [rbp + 0x190]
call fcn.18026c6f0
add rsp, 0x20
mov rax, qword [rbp + 0x198]
mov r8, qword [rax]
movabs rax, 0x8000000000000000
cmp r8, rax
sete al
test al, 1
jne 0x18029a08b
jmp 0x18029a007
mov eax, dword [0x180524ab0]
imul eax, dword [0x180524ab4]
mov ecx, 0x56736b31
xor edx, edx
div ecx
sub eax, 0x1ea7c029
sub eax, 0x22ed0716
cmp eax, 0xf6e50b32
jae 0x18029a44e
jmp 0x18029a034
mov eax, dword [0x180524ab8]
or eax, dword [0x180524abc]
imul eax, eax, 0xc9355dfb
imul ecx, eax, 0x93279978
or ecx, 0xe6fb375a
cmp r8, 0
sete al
cmp ecx, 0x36f5b4b5
je 0x18029a034
jmp 0x18029a063
test al, 1
jne 0x18029a08b
jmp 0x18029a069
mov rax, qword [rbp + 0x1e8]
mov rcx, qword [rax]
sub rsp, 0x20
mov rdx, r8
mov r8d, 1
call fcn.1802cbf20
add rsp, 0x20
jmp 0x18029a08b
mov rax, qword [rbp + 0x1a0]
mov eax, dword [rax]
mov ecx, eax
sub ecx, 4
jb 0x18029a0be
jmp 0x18029a09d
sub eax, 6
je 0x18029a0be
jmp 0x18029a0a4
mov rax, qword [rbp + 0x1a8]
mov rcx, qword [rax]
sub rsp, 0x20
call qword [sym.imp.kernel32.dll_CloseHandle]
add rsp, 0x20
jmp 0x18029a0be
mov rax, qword [rbp + 0x1b0]
mov eax, dword [rax]
mov ecx, eax
sub ecx, 4
jb 0x18029a140
invalid
jmp 0x18029a0d0
sub eax, 6
je 0x18029a140
jmp 0x18029a0d7
mov eax, dword [0x180524ac0]
sub eax, dword [0x180524ac4]
sub eax, 0x23fe768a
sub eax, 0x53f5370b
add eax, 0xc3e17437
cmp eax, 0x9fb9e3bd
jae 0x18029a45b
mov eax, dword [0x180524ac8]
imul eax, dword [0x180524acc]
or eax, 0x3ff70ee6
and eax, 0x269a51be
xor eax, 0x41825363
mov rcx, qword [rbp + 0x1b8]
mov rcx, qword [rcx]
cmp eax, 0x64d6d260
jb 0x18029a45b
jmp 0x18029a130
sub rsp, 0x20
call qword [sym.imp.kernel32.dll_CloseHandle]
add rsp, 0x20
jmp 0x18029a140
mov rax, qword [rbp + 0x1c0]
mov eax, dword [rax]
mov ecx, eax
sub ecx, 4
jb 0x18029a173
jmp 0x18029a152
sub eax, 6
je 0x18029a173
jmp 0x18029a159
mov rax, qword [rbp + 0x1c8]
mov rcx, qword [rax]
sub rsp, 0x20
call qword [sym.imp.kernel32.dll_CloseHandle]
movabs dword [0xeb20c48348001dc1], eax
invalid
sub rsp, 0x20
mov rcx, qword [rbp + 0x1d0]
mov ecx, dword [rbp + 0x1d0]
call fcn.18026b2b0
add rsp, 0x20
mov eax, dword [0x180524ad0]
imul eax, dword [0x180524ad4]
xor eax, 0xd307c7c5
add eax, 0x2f9c2c7b
sub eax, 0xc705c8c5
cmp eax, 0x354df23c
jbe 0x18029a46c
mov eax, dword [0x180524ad8]
xor edx, edx
div dword [0x180524adc]
imul eax, eax, 0x9466f81c
imul edx, eax, 0x9b48955b
sub edx, 0xe619898d
mov ecx, dword [rbp + 0x158]
mov rax, qword [rsi]
cmp ecx, 0
sete cl
cmp edx, 0xf78b8170
jae 0x18029a46c
jmp 0x18029a1eb
test cl, 1
jne case.0x18029a20b.0
jmp 0x18029a1f6
mov rcx, rax
and rcx, 3
lea rdx, [0x180488794]
movsxd rcx, dword [rdx + rcx*4]
add rcx, rdx
jmp rcx
mov rbx, rax
add rbx, 0xffffffffffffffff
mov r14, qword [rax - 1]
add rax, 7
mov rdi, qword [rax]
mov rax, qword [rdi]
cmp rax, 0
sete cl
test cl, 1
jne 0x18029a24e
jmp 0x18029a23f
sub rsp, 0x20
mov rcx, r14
call rax
add rsp, 0x20
jmp 0x18029a24e
invalid
mov rdx, qword [rdi + 8]
mov r8, qword [rdi + 0x10]
mov rdi, qword [rbp + 0x208]
cmp rdx, 0
je 0x18029a275
sub rsp, 0x20
mov rcx, r14
call fcn.1802cbf20
add rsp, 0x20
jmp 0x18029a275
mov eax, dword [str._a__aKMY]
xor edx, edx
div dword [0x180524ae4]
or eax, 0x46fe3207
mov ecx, 0x8804d4e8
xor edx, edx
div ecx
sub eax, 0x96cb147d
cmp eax, 0x6c3d3b12
ja 0x18029a47d
mov eax, dword [0x180524ae8]
xor edx, edx
div dword [0x180524aec]
add eax, 0x8cd74289
sub eax, 0x76a7c47e
mov ecx, 0x7382308a
xor edx, edx
div ecx
mov r14d, eax
sub rsp, 0x20
mov rcx, rbx
mov edx, 0x18
mov r8d, 8
call fcn.1802cbf20
add rsp, 0x20
cmp r14d, 0x31eef5
je 0x18029a47d
jmp 0x18029a2ef
jmp case.0x18029a20b.0
mov eax, dword [0x180524af0]
or eax, dword [0x180524af4]
xor eax, 0x36d13725
sub eax, 0x6faf4cd5
imul eax, eax, 0x2687edd7
cmp eax, 0xa5299944
je 0x18029a4a5
jmp 0x18029a31a
mov eax, dword [str.V_nDb_r_]
sub eax, dword [0x180524afc]
imul eax, eax, 0x2b3d3659
or eax, 0x359a85de
rcr byte [rcx + 0x36], 0x3d
sub ecx, dword [0x1b5c4290f]
and eax, 0x811089d2
cmp eax, 0x3ae77810
je 0x18029a31a
jmp 0x18029a33f
lea rcx, [rbp - 0x50]
lea rdx, str.C:Program_FilesWindows_NTidentity_provider.exe__
sub rsp, 0x20
mov r8d, 0x31
call fcn.180429720
add rsp, 0x20
lea rcx, [rbp + 0x80]
lea rdx, [rbp - 0x50]
sub rsp, 0x20
call fcn.180433aa0
add rsp, 0x20
cmp qword [rbp + 0x80], 2
jne 0x180299c90
jmp 0x18029a385
ud2
push rbx
mov ch, 0xcc
fstp dword [rbx - 0x162ddb30]
je 0x18029a389
invalid
jl 0x18029a3cc
mov esp, 0xf778d08f
std
jmp 0x180299971
jmp 0x18029a327
imul dword [rbx]
fsubr dword [rbx]
cmp dh, byte [rax]
xor r15b, byte [rsi + rdx*4 - 0x3a16fbe7]
idiv bh
jmp [rbx + 0x4f5a74d4]
stosd dword [rdi], eax
invalid
mov edx, 0x15824c93
lea rcx, [rbp + 0x118]
lea rdx, [rbp + 0x80]
add byte [rax], al
sub rsp, 0x20
mov r8d, 0x40
call fcn.180468b10
add rsp, 0x20
lea rcx, [rbp + 0x158]
lea rdx, [rbp + 0x118]
sub rsp, 0x20
call fcn.180433b10
add rsp, 0x20
jmp 0x180299cb7
pushfq
mov dl, 8
movabs eax, dword [0xe9450ff6aa0f1b00]
imul edi, ecx, 0xffffffff
dec dword [rax + 0x70]
add esi, esi
fcomp dword [rbp + 0x6b]
invalid
jo 0x18029a429
neg al
pop rbp
imul eax, esp, 0xffffffe9
mov ecx, 0xc6fffff9
in al, dx
invalid
invalid
invalid
invalid
loop 0x18029a3dd
mov dl, dh
push rsi
invalid
sbb byte [rbx - 0xa], bh
fild qword cs:[rax - 0x1c]
adc ecx, esi
jbe 0x18029a4e1
invalid
xchg esi, eax
sahf
invalid
cmp eax, 0x335c038
jb 0x18029a448
out dx, eax
sub rsp, 0x20
mov rcx, rbx
mov edx, 0x18
mov r8d, 8
call fcn.1802cbf20
add rsp, 0x20
jmp 0x18029a2a1
fadd qword ds:[rdi + 0x7eb8d9b5]
jmp 0x18029a318
mov edi, esp
mov eax, 0x50
call fcn.18045a590
sub rsp, rax
mov rsi, rsp
mov eax, 0x10a0
call fcn.18045a590
sub rsp, rax
mov rbx, rsp
mov byte [rbx + 0xad], 0
lea rcx, [rbp - 0x78]
sub rsp, 0x20
call fcn.18040a8b0
add rsp, 0x20
mov byte [rbp + 0x39], 1
mov byte [rbp + 0x3a], 1
lea rdx, [rbp - 0x78]
sub rsp, 0x20
mov rcx, rdi
call fcn.18040a9b0
add rsp, 0x20
cmp qword [rdi], 2
je 0x18029aa9e
sub rsp, 0x20
mov rcx, rsi
mov rdx, rdi
mov r8d, 0x50
call fcn.180468b10
add rsp, 0x20
lea r8, [0x180488270]
sub rsp, 0x20
mov rcx, rsi
mov rdx, rbx
call fcn.18028ccb0
add rsp, 0x20
sub rsp, 0x20
mov rcx, rsi
call fcn.180406020
add rsp, 0x20
cmp qword [rsi], 0
sete al
test al, 1
jne 0x18029a591
jmp 0x18029a5b2
mov rax, rsi
add rax, 0x28
xor ecx, ecx
xchg qword [rax], rcx
mov qword [rbp + 0x40], rcx
lea rcx, [rbp + 0x40]
sub rsp, 0x20
call fcn.1802c2580
add rsp, 0x20
mov rax, rsi
add rax, 0x30
cmp qword [rax], 0
sete al
mov rcx, rsi
add rcx, 0x38
test al, 1
jne 0x18029a5cd
jmp 0x18029a5ef
mov rax, qword [rcx]
lock dec qword [rax]
sete al
test al, 1
jne 0x18029a5e0
jmp 0x18029a666
sub rsp, 0x20
call fcn.180275eb0
add rsp, 0x20
jmp 0x18029a666
mov eax, dword [0x180524b00]
and eax, dword [0x180524b04]
xor eax, 0xd8624e53
sub eax, 0x50e6443
mov r8d, 0x2f33f7ef
xor edx, edx
div r8d
cmp eax, 0xd87c46e2
je 0x18029aaa2
jmp 0x18029a61d
mov edx, dword [0x180524b08]
sub edx, dword [0x180524b0c]
and edx, 0xfc7d2f32
xor edx, 0x884a4b06
add edx, 0xbd863116
mov rax, qword [rcx]
lock dec qword [rax]
sete al
cmp edx, 0x31c9d43e
jb 0x18029a61d
jmp 0x18029a64f
jmp 0x18029a651
test al, 1
jne 0x18029a657
jmp 0x18029a666
sub rsp, 0x20
call fcn.180279770
add rsp, 0x20
jmp 0x18029a666
mov rdi, rsi
add rdi, 0x40
sub rsp, 0x20
mov rcx, rdi
call fcn.18040ec60
add rsp, 0x20
mov rax, qword [rdi]
lock dec qword [rax]
sete al
test al, 1
jne 0x18029a68d
jmp 0x18029a6e8
mov eax, dword [0x180524b10]
xor edx, edx
div dword [0x180524b14]
xor eax, 0xc327b36c
add eax, 0x1877526
imul eax, eax, 0xd62d8066
cmp eax, 0xe7c394a2
ja 0x18029aab6
jmp 0x18029a6b8
mov eax, dword [0x180524b18]
mov ecx, dword [0x180524b1c]
xor edx, edx
div ecx
add eax, 0xdb1e0fd3
cmp eax, 0x9aed2150
jbe 0x18029a6b8
jmp 0x18029a6d6
sub rsp, 0x20
mov rcx, rdi
call fcn.180275a50
add rsp, 0x20
jmp 0x18029a6e8
mov rdi, rsi
add rdi, 0x48
mov rbx, qword [rsi + 0x48]
cmp rbx, 0
sete al
test al, 1
jne 0x18029a7f2
jmp 0x18029a704
mov rcx, rbx
add rcx, 0x30
sub rsp, 0x20
call fcn.180406760
add rsp, 0x20
mov rsi, rax
mov rax, rsi
and rax, 0xa
cmp rax, 8
sete al
test al, 1
jne 0x18029a72f
jmp 0x18029a748
mov rax, qword [rbx + 0x10]
mov rcx, qword [rbx + 0x18]
add rax, 0x10
mov rax, qword [rax]
sub rsp, 0x20
call rax
add rsp, 0x20
and rsi, 2
cmp rsi, 0
sete al
test al, 1
jne 0x18029a762
jmp 0x18029a759
add rbx, 0x38
mov byte [rbx], 0
jmp 0x18029a762
mov rax, qword [rdi]
cmp rax, 0
je 0x18029a7f2
mov rcx, 0xffffffffffffffff
lock xadd qword [rax], rcx
mov eax, dword [0x180524b20]
imul eax, dword [0x180524b24]
and eax, 0x2b280196
mov r8d, 0x6da91cce
xor edx, edx
div r8d
imul eax, eax, 0xef2790c1
cmp eax, 0x14e75241
ja 0x18029aac3
jmp 0x18029a7ab
mov edx, dword [0x180524b28]
sub edx, dword [0x180524b2c]
sub edx, 0xac3f9d19
sub edx, 0x2c483423
or edx, 0x768706b3
cmp rcx, 1
sete al
cmp edx, 0x7dca3fa7
jae 0x18029a7ab
jmp 0x18029a7da
test al, 1
jne 0x18029a7e0
jmp 0x18029a7f2
sub rsp, 0x20
mov rcx, rdi
call fcn.180273180
add rsp, 0x20
jmp 0x18029a7f2
mov eax, dword [0x180524b30]
imul eax, dword [0x180524b34]
imul eax, eax, 0xc9376f74
sub eax, 0x3384e191
and eax, 0x9e98b5cc
cmp eax, 0x6100a109
jb 0x18029aad4
mov eax, dword [0x180524b38]
and eax, dword [0x180524b3c]
mov ecx, 0xa20c23ce
xor edx, edx
div ecx
and eax, 0xec15b144
and eax, 0x91067754
lea rcx, [rbp - 0x78]
add rcx, 0x38
cmp eax, 0x93242ef1
je 0x18029aad4
jmp 0x18029a84e
mov rax, qword [rcx]
lock dec qword [rax]
sete al
mov edx, dword [0x180524b40]
and edx, dword [0x180524b44]
and edx, 0x5469ff06
add edx, 0xd948b8b3
xor edx, 0x9778df2d
cmp edx, 0x5d60808e
jae 0x18029aae5
jmp 0x18029a884
mov edx, dword [0x180524b48]
or edx, dword [0x180524b4c]
sub edx, 0xe397bd31
or edx, 0xe49a7840
and edx, 0x7929d93f
cmp edx, 0xaf9de044
jae 0x18029a884
test al, 1
jne 0x18029a8b0
jmp 0x18029a8bf
sub rsp, 0x20
call fcn.180273990
add rsp, 0x20
jmp 0x18029a8bf
lea rcx, [rbp - 0x78]
add rcx, 0x58
mov r8, qword [rbp - 0x20]
mov eax, dword [0x180524b50]
sub eax, dword [0x180524b54]
add eax, 0xe938a3c2
add eax, 0x5e4453c
imul eax, eax, 0xa1d5f7fd
cmp eax, 0x41ffc5aa
je 0x18029aaf2
jmp 0x18029a8f4
mov eax, dword [0x180524b58]
xor edx, edx
div dword [0x180524b5c]
add eax, 0xb2facf65
mov r9d, 0x3924cd25
xor edx, edx
div r9d
and eax, 0xcb4c3df7
cmp r8, 0
sete dl
cmp eax, 0x6c79c819
jae 0x18029a8f4
jmp 0x18029a927
test dl, 1
jne 0x18029a9ec
jmp 0x18029a932
lock dec qword [r8]
sete al
jmp 0x18029a93b
test al, 1
jne 0x18029a944
jmp 0x18029a9ec
mov eax, dword [0x180524b60]
and eax, dword [str.G]
sub eax, 0xbd36284f
xor eax, 0x2b690a8
or eax, 0x2066c157
cmp eax, 0xd9c6847a
je 0x18029ab03
mov eax, dword [0x180524b68]
mov edx, dword [0x180524b6c]
xor eax, edx
or eax, 0x89ffef6f
add eax, 0xb60ce37f
cmp eax, 0x665e951
jbe 0x18029ab03
jmp 0x18029a98f
sub rsp, 0x20
call fcn.180273990
add rsp, 0x20
mov eax, dword [0x180524b70]
add eax, dword [0x180524b74]
and eax, 0x79c35761
add eax, 0x7d74384b
and eax, 0x3a5b1b2e
cmp eax, 0xe7f8d1ea
je 0x18029ab10
jmp 0x18029a9c4
mov eax, dword [0x180524b78]
xor eax, dword [0x180524b7c]
or eax, 0x1e731ba9
and eax, 0xcd9fa0b1
mov ecx, 0x67ea90d3
xor edx, edx
div ecx
cmp eax, 0x77518983
jae 0x18029a9c4
jmp 0x18029a9ec
lea rcx, [rbp - 0x78]
add rcx, 0x68
mov rax, qword [rcx]
cmp rax, 0
sete dl
test dl, 1
jne 0x18029aa23
jmp 0x18029aa05
lock dec qword [rax]
sete al
jmp 0x18029aa0e
test al, 1
jne 0x18029aa14
jmp 0x18029aa23
sub rsp, 0x20
call fcn.180273990
add rsp, 0x20
jmp 0x18029aa23
lea rcx, [rbp - 0x78]
add rcx, 0x78
mov rax, qword [rcx]
cmp rax, 0
sete dl
test dl, 1
jne 0x18029aa5a
jmp 0x18029aa3c
lock dec qword [rax]
sete al
jmp 0x18029aa45
test al, 1
jne 0x18029aa4b
jmp 0x18029aa5a
sub rsp, 0x20
call fcn.180273990
add rsp, 0x20
jmp 0x18029aa5a
lea rcx, [rbp - 0x78]
add rcx, 0x88
add ecx, 0x88
mov rax, qword [rbp + 0x10]
cmp rax, 0
sete dl
test dl, 1
jne 0x18029aa95
jmp 0x18029aa77
lock dec qword [rax]
sete al
jmp 0x18029aa80
test al, 1
jne 0x18029aa86
jmp 0x18029aa95
sub rsp, 0x20
call fcn.180273990
add rsp, 0x20
jmp 0x18029aa95
lea rsp, [rbp + 0x48]
pop rbx
pop rdi
pop rsi
pop rbp
ret
ud2
adc esp, ebx
movsd dword [rdi], dword ds:[rsi]
jge 0x18029aa5f
movabs byte [0xe908ff48f0018b48], al
sti
invalid
sbb eax, 0x51536bd2
pop rsp
fidivr word [rsi - 0x17]
sti
invalid
adc dword [rdi], 0xbf05d751
loope 0x18029aaec
adc byte [rdi - 0x47], bh
mov ebx, 0xfffcd5e9
invalid
fistp word [rsi]
jl 0x18029aafb
jno 0x18029ab19
xor dword [rdi + 0x58bdd34d], eax
jmp 0x18029a81a
lodsd eax, dword [rsi]
enter 0xffffffffffff8834, 0xffffffffffffff94
sal byte [rdi - 0x26f16f9], 0xff
inc dword [rcx - 0x790dc907]
outsb dx, byte ss:[rsi]
invalid
cmp ecx, 0x3686f236
outsb dx, byte [rsi]
jle 0x18029ab60
invalid
pop rax
ror ebp, cl
mov dl, 0x28
jmp 0x1db13796e
mov edx, ecx
mov ebp, edi
invalid
movsd dword [rdi], dword [rsi]
invalid
imul ecx, ecx, 0x107e2ac9
sub ecx, 0xdec1e4b3
cmp ecx, 0xd7570d9d
je 0x18029abbc
mov ecx, dword [0x180524b88]
mov edx, dword [0x180524b8c]
sub ecx, edx
xor ecx, 0xa05d6ae
imul ecx, ecx, 0xd08e3aca
add ecx, 0xe8c69276
lea rdx, [0x180488840]
cmp ecx, 0x4dfe7e3f
jb 0x18029abbc
jmp 0x18029aba5
add rsp, 0x20
pop rsi
ret
push rcx
or al, 0xc5
add eax, 0x1ce2fab6
outsb dx, byte [rsi]
invalid