Function at 0x67c870
Capabilities:
Check for peb beingdebugged flag

Disassembly:
or al, 0xae
mov dword [reloc.KERNEL32.dll_LockFile], eax
mov esp, gs
mov cl, 0xa5
imul esi, dword [edx - 5], 0x9269594a
or dword [eax], reloc.KERNEL32.dll_LockFile
stc
insd dword es:[edi], dx
jbe 0x61d5e0
stosd dword es:[edi], eax
invalid
mov esi, 0xf94968c2
pop edi
ret
lea esi, reloc.KERNEL32.dll_LockFile
bswap esi
mov esi, dword [esp]
not si
bswap esi
jmp 0x675e49
mov edi, eax
mov byte [esp], cl
lea esi, [edx*4]
mov byte [esp], cl
mov ebp, esp
add esp, 0
xchg di, si
rol esi, 0xc
mov di, cx
shl bp, 0xf
mov esi, dword [esp]
mov si, 0x26db
mov esi, ebx
mov ebp, 0x46c4a70
jmp 0x675598
sub esp, 0x13
bsf si, si
stc
bswap ebp
xchg dword [esp + 3], esi
pop dword [esp + 0xb]
pop ebp
push dword [esp + 1]
pop ebp
lea esp, [esp + 5]
xchg word [esp + 3], si
mov byte [esp + 3], al
xchg dword [esp + 2], esi
mov si, di
pop word [esp + 3]
lea esp, [esp + 5]
xchg edi, esi
dec si
mov si, ax
bsr edi, eax
lea esi, reloc.KERNEL32.dll_LockFile
dec ebp
mov edi, ebp
stc
lea ebp, [edx + esi]
lea esp, [esp]
mov esi, 0x58d26b91
bswap ebp
add esp, 0
lea ebp, [ebp*4]
lea edi, reloc.KERNEL32.dll_LockFile
btc si, cx
lea esp, [esp]
bswap di
lea esp, [esp]
lea ebp, [edx - 0x21]
lea esp, [esp]
bswap esi
bswap di
lea edi, [eax + ecx]
mov edi, eax
lea esi, reloc.KERNEL32.dll_LockFile
mov di, 0x5cf9
mov byte [esp], bh
jmp 0x6755b9
xchg esi, edi
bswap esi
pushfd
pop esi
mov esi, edx
lea ebp, [ecx - 0x67]
mov ebp, edx
lea ebp, [eax*4]
xchg word [esp], bp
push word [esp + 1]
lea edi, reloc.KERNEL32.dll_LockFile
mov si, 0x3b48
push dword [esp]
bsf esi, esi
lea edi, [esi + ebp]
push si
lea ebp, [edx*4]
mov word [esp + 6], cx
push sp
neg ebp
lea edi, reloc.KERNEL32.dll_LockFile
sub esp, 0x1f
push dword [esp + 1]
clc
bswap si
lea esi, [ebp - 0x86]
mov esi, ebx
xchg dword [esp + 0x1f], ebp
bsr esi, edi
clc
mov edi, esi
push word [esp + 4]
cld
lea edi, reloc.KERNEL32.dll_LockFile
push word [esp + 0x2c]
neg esi
lea esi, [edi + ebp]
xchg word [esp + 0xf], si
mov dword [esp + 0xd], edi
mov si, bp
lea esi, [eax + edx]
neg ebp
bsf ebp, edx
bsf edi, ecx
bswap esi
btc di, ax
lea esp, [esp + 0xe]
xchg word [esp + 0x15], si
xchg dword [esp + 9], esi
dec edi
push word [esp + 0x12]
pop dword [esp + 0x13]
mov bp, dx
xchg bp, si
cmc
mov edi, esi
neg esi
push dword [esp + 0x1e]
mov bp, word [esp + 0x1f]
push word [esp + 0x26]
mov word [esp + 2], dx
bts esi, edi
neg di
mov edi, edx
mov si, 0x3c25
lea edi, [edx*4]
inc esi
xchg word [esp + 0x15], di
sub esp, 0xf
xchg si, bp
lea ebp, [esi + 0xb8]
bsr esi, ecx
pop dword [esp + 0x2a]
push dword [esp + 7]
pop dword [esp + 0x2a]
mov ebp, dword [esp + 0xc]
add si, 0xb12
mov edi, dword [esp + 0x15]
mov si, di
mov esi, 0x67cc18e7
xchg word [esp + 0x24], bp
bswap edi
bswap edi
neg si
mov si, word [esp + 0x28]
lea esp, [esp + 8]
pop si
pop dword [esp + 0xc]
mov word [esp + 4], si
mov edi, edx
pop ebp
xchg di, si
neg edi
xchg dword [esp + 9], edi
not bp
push dword [esp + 0x1b]
pop edi
xchg dword [esp + 6], ebp
mov dword [esp + 1], ebx
push dword [esp + 0x20]
xchg dword [esp + 0x16], edi
xchg dword [esp + 0x1c], esi
xchg word [esp + 0x23], si
pop word [esp + 0x10]
bswap si
mov si, word [esp + 0xd]
xchg ebp, edi
clc
xchg dword [esp + 0x15], ebp
pop word [esp + 8]
bt di, bx
push bp
bsr si, si
bswap esi
neg di
dec si
bswap esi
dec esi
lea esi, [eax + esi]
pop esi
mov byte [esp], bh
sub esp, 0xe
mov word [esp + 0x16], dx
xchg si, di
pop esi
bt ebp, edi
bswap esi
neg esi
not si
mov si, word [esp + 0xf]
pushfd
pushfd
neg esi
pop word [esp + 0x12]
mov word [esp + 4], cx
lea esp, [esp + 0x21]
not bp
lea esp, [esp + 4]
pop si
lea edi, [esi*4]
lea ebp, [ecx + edi]
pop dword [esp]
mov si, word [esp + 4]
shl si, 0xc
xchg esi, edi
mov si, sp
lea esp, [esp + 2]
lea edi, [eax + ecx]
add esp, 2
mov ebp, dword [esp]
sub esp, 0x1f
lea esi, [ecx + edx]
btr ebp, eax
pop dword [esp + 2]
bsf si, cx
inc ebp
mov byte [esp + 0x16], dl
mov dword [esp + 5], edx
pop word [esp + 4]
bswap ebp
mov dword [esp + 0xa], ebp
pop ebp
bt bp, bp
cmc
pop word [esp + 5]
mov esi, edx
add esp, 0xe
push dword [esp + 1]
mov si, di
lea ebp, reloc.KERNEL32.dll_LockFile
add esp, 2
xchg dword [esp + 3], ebp
bswap bp
pop ebp
mov byte [esp], dh
pop esi
lea esi, reloc.KERNEL32.dll_LockFile
mov esi, dword [esp]
lea esi, [edx + edx]
mov di, cx
cmp di, bp
mov ebp, 0x9ec6270
push edx
lea esi, [eax + edi]
push bp
mov byte [esp + 2], al
bswap si
bt di, dx
lea edi, [ecx*4]
bswap ebp
pop ebp
mov si, word [esp]
neg edi
lea ebp, [ecx + ebx]
jmp 0x6755fb
inc dword [eax + 0x55da53]
pushfd
clc
sub esp, 0xf
mov dword [esp + 4], esi
sub esp, 0x13
pushfd
push word [esp + 4]
mov word [esp + 4], dx
push bx
mov byte [esp + 6], dh
pushal
pop word [esp + 0x32]
add esp, 0x17
push dx
lea esp, [esp + 3]
mov dword [esp + 0x17], ebp
cmp ebp, esp
mov ebp, 0xa3914d0
shr bp, cl
btr ebp, ebp
neg bp
stc
sub esp, 0x19
pop ebp
pop word [esp + 3]
push dword [esp]
mov byte [esp + 2], bh
mov ebp, dword [esp + 0x11]
lea esp, [esp + 3]
mov dword [esp + 0x12], esi
cld
lea esi, [ebx*4]
stc
mov ebp, dword [esp]
lea ebp, reloc.KERNEL32.dll_LockFile
mov ebp, edi
adc ebp, eax
xchg ebp, esi
xchg bp, si
mov dword [esp + 9], edi
xchg bp, si
bswap ebp
bswap bp
sub esp, 0x10
mov ebp, 0x799f0c59
mov bp, 0x1ea4
pop word [esp + 3]
mov word [esp + 3], bp
mov si, 0x1c8b
mov edi, 0x52c91d2b
mov dword [esp + 3], ebp
lea esp, [esp + 6]
btr si, di
pop di
lea esi, reloc.KERNEL32.dll_LockFile
lea ebp, [edx*4]
mov si, word [esp]
mov byte [esp], dl
adc bp, sp
lea edi, [esi + esi]
push word [esp + 5]
stc
lea esp, [esp + 4]
neg di
mov byte [esp + 2], bh
bts esi, edx
mov di, 0x3185
pop word [esp]
lea esi, [ebx - 0xc3]
mov edi, dword [esp]
mov ebp, 0x6cc83aa8
lea esi, reloc.KERNEL32.dll_LockFile
neg si
mov esi, eax
lea edi, [esi*4]
dec edi
mov bp, 0x43b6
bts esi, eax
sub esp, 0xf
mov byte [esp + 1], ch
mov di, 0x4010
dec si
lea esi, [esp + esi]
not di
pop dword [esp + 5]
shl si, cl
bswap si
cmc
bswap si
cld
pop dword [esp + 2]
mov byte [esp + 7], dh
bswap edi
bswap esi
mov dword [esp + 1], esp
add esp, 7
lea edi, reloc.KERNEL32.dll_LockFile
lea esp, [esp]
mov si, 0x296e
mov byte [esp], ch
xchg edi, ebp
mov ebp, dword [esp]
mov si, 0x1da7
add esp, 0
add esp, 1
mov di, dx
lea ebp, reloc.KERNEL32.dll_LockFile
inc esi
bswap bp
btc esi, esp
lea esp, [esp]
rcl esi, cl
pushal
lea esi, [ebx*4]
mov esi, dword [esp + 9]
lea esi, reloc.KERNEL32.dll_LockFile
pushfd
push word [esp + 0x11]
cmp esi, eax
mov dword [esp + 0x1c], esi
lea ebp, [ebx*4]
pop si
bswap esi
mov edi, dword [esp]
bts si, cx
cmc
add esp, 0x19
mov bp, 0x6002
lea esi, reloc.KERNEL32.dll_LockFile
xchg dword [esp + 5], esi
xchg word [esp + 7], si
mov byte [esp], ah
stc
bsr bp, si
mov si, word [esp + 0xa]
sbb ebp, esp
lea edi, [esi*4]
mov word [esp + 6], ax
push dword [esp + 3]
mov bp, 0x2b02
push cx
mov si, dx
mov di, bp
mov di, 0x782e
bsf esi, eax
bts di, sp
pop dword [esp + 7]
mov si, word [esp + 0xa]
mov si, cx
mov byte [esp + 7], ah
lea esp, [esp + 0xc]
pop bp
inc bp
bsf di, bx
mov esi, 0x368269ce
mov si, dx
pushfd
inc si
mov si, word [esp + 3]
mov esi, 0xa3f0c18
bswap ebp
lea esp, [esp]
xchg dword [esp], esi
pop si
mov esi, 0x7c3a3671
jmp 0x67569d
push eax
jmp 0x675ff6
btc esi, ebp
pop word [esp + 0xa]
mov di, sp
pop ebp
pop word [esp + 0x17]
jmp 0x679233
sub esp, 0x1f
bswap esi
pop dword [esp + 0xf]
add esp, 0xc
pop dword [esp + 7]
sub esp, 0xa
xchg word [esp + 0xd], si
add esp, 2
push word [esp + 0xc]
xchg word [esp], si
push word [esp + 0xf]
not ebp
mov bp, di
push dword [esp]
pushfd
mov ebp, ebx
mov ebp, 0x363f05a1
xchg edi, esi
mov esi, ebx
mov byte [esp + 0x15], bl
pushal
pop edi
pop word [esp + 0x23]
lea ebp, reloc.KERNEL32.dll_LockFile
mov si, word [esp + 0x26]
pop word [esp + 0x1d]
btr esi, eax
bsf esi, edx
pop word [esp + 0xd]
xchg dword [esp + 0x16], esi
rcr edi, cl
bswap esi
mov si, word [esp + 0x15]
mov word [esp + 0x10], bp
add esp, 0x1a
add esp, 0xa
mov byte [esp + 0xb], cl
push word [esp + 0xd]
mov bp, dx
bswap esi
xchg dword [esp], edi
sub esp, 0x17
pop word [esp + 0xa]
bswap esi
xchg ebp, edi
push word [esp + 0xb]
pop dword [esp + 0x21]
btc si, di
pop dword [esp + 0x1a]
mov di, si
mov bp, word [esp + 6]
mov si, dx
lea esi, [esi + 0xa5]
xchg esi, ebp
mov byte [esp + 0x12], ah
pop di
xchg esi, edi
sub esp, 0x14
mov word [esp + 0x2d], di
inc si
sub esp, 0xb
mov si, word [esp + 0xe]
inc edi
lea esp, [esp + 0x30]
pop si
xchg bp, di
lea esi, [esi*4]
xchg ebp, esi
clc
bts di, dx
push dword [esp]
mov esi, 0x41847667
push dword [esp + 0xc]
shl edi, cl
push word [esp + 0x12]
mov esi, 0x7148362e
mov ebp, dword [esp + 5]
lea esp, [esp + 9]
mov word [esp + 7], bp
push dword [esp]
mov bp, 0x5a6e
xchg dword [esp + 0xc], edi
bts ebp, eax
lea esp, [esp + 0x11]
lea esi, [ebx*4]
bswap esi
xchg word [esp], si
lea esi, [esi + edi]
lea ebp, [ebx - 0xf3]
mov byte [esp], bl
push word [esp]
mov si, word [esp + 3]
push word [esp + 2]
lea esi, reloc.KERNEL32.dll_LockFile
mov bp, 0x7e1e
bswap esi
not si
xchg dword [esp], edi
clc
lea ebp, reloc.KERNEL32.dll_LockFile
mov di, 0x5524
btc edi, edx
xchg dword [esp], esi
adc si, bx
mov byte [esp + 4], cl
add esp, 2
pushfd
bsr ebp, esi
pop esi
mov word [esp], di
push dword [esp + 1]
clc
bswap esi
sub esp, 6
add esp, 4
cld
mov byte [esp + 8], bl
mov byte [esp + 2], ah
bswap bp
bswap esi
pop bp
rcl edi, cl
bt esi, esi
xchg esi, ebp
not edi
mov byte [esp + 3], dh
mov esi, esp
inc di
mov si, 0x5083
bsf esi, ebx
xchg word [esp + 2], si
pop bp
xchg dword [esp], esi
lea ebp, [ecx + edx]
bts si, dx
pop word [esp + 1]
lea esp, [esp + 2]
mov di, word [esp + 1]
xchg word [esp], bp
mov si, 0x693a
xchg word [esp], bp
mov bp, word [esp + 1]
pop di
not edi
mov edi, dword [esp]
mov esi, edi
xchg si, di
lea ebp, [ecx + edx]
bsf si, bp
btc ebp, edx
pushal
pop dword [esp + 0x15]
lea esi, [ecx + ebp]
mov ebp, dword [esp + 0xb]
pop dword [esp + 0xd]
lea ebp, [edx + edi]
bsf di, di
xchg ebp, edi
add esp, 0
bt ebp, edx
pop word [esp + 0xd]
dec ebp
mov edi, 0x1fac5be5
mov esi, dword [esp + 0x15]
bswap esi
sub esp, 0x15
adc bp, 0x2cf2
cld
pop dword [esp + 3]
mov ebp, 0x14d3196e
mov dword [esp + 0xc], ebx
pop word [esp + 8]
push word [esp + 0x1e]
not esi
pop dword [esp + 7]
not edi
cmp esi, 0x24c77ac4
stc
mov esi, 0x7c8a3183
xchg bp, si
mov byte [esp + 0x1a], ah
jmp 0x675ba7
mov si, word [esp]
neg esi
bsr di, dx
bts ebp, ebp
add esp, 0
or esi, ebx
mov si, dx
mov byte [esp], bl
lea ebp, reloc.KERNEL32.dll_LockFile
sub esi, esi
mov edi, 0x49f76790
bswap si
pushfd
mov bp, word [esp + 1]
mov ebp, dword [esp + 2]
mov si, 0x653e
pop di
dec esi
add esp, 1
inc di
push word [esp]
mov si, 0x5c17
mov si, word [esp + 3]
lea esi, reloc.KERNEL32.dll_LockFile
cmc
stc
lea esi, reloc.KERNEL32.dll_LockFile
mov si, bp
mov word [esp + 1], dx
xor esi, edi
cmc
mov di, word [esp + 1]
cld
mov esi, 0x2d6a25cc
mov di, ax
mov di, sp
pop di
xchg esi, edi
pushfd
mov di, 0x3c83
mov byte [esp + 1], bl
shl ebp, 7
xchg dword [esp], esi
mov ebp, edi
mov esi, 0x6dd72d1f
bts esi, eax
bts si, sp
mov byte [esp + 1], ch
mov dword [esp], ebx
lea esi, reloc.KERNEL32.dll_LockFile
xchg word [esp], di
push word [esp + 1]
pop word [esp + 3]
mov dword [esp], esp
lea esi, reloc.KERNEL32.dll_LockFile
neg di
push word [esp + 3]
xchg di, si
lea esi, [ebx*4]
bsr bp, bx
xchg dword [esp + 1], ebp
sub esp, 0x14
neg esi
pop word [esp + 0x11]
lea esi, [ebx + edi]
inc si
mov bp, word [esp + 8]
lea esi, reloc.KERNEL32.dll_LockFile
pop ebp
mov esi, dword [esp + 0xf]
lea esi, [esi*4]
cld
lea edi, [eax*4]
pop esi
lea edi, [ecx + 0x11]
xchg word [esp + 0xc], si
bsr bp, dx
mov ebp, edi
not di
bts ebp, edx
lea esi, [ebp + ebp]
xchg dword [esp + 3], ebp
xchg si, bp
push dword [esp + 0x11]
push word [esp + 8]
lea esi, [eax*4]
lea ebp, [ebx + ebp]
bswap bp
pop esi
bswap si
bsr edi, esi
and esi, 0x67777c0
xchg word [esp + 9], bp
mov edi, ecx
lea edi, [ebp*4]
lea esi, reloc.KERNEL32.dll_LockFile
cld
sub esp, 0x12
mov di, dx
pop esi
mov bp, sp
mov edi, ebp
mov byte [esp + 2], dh
lea esi, reloc.KERNEL32.dll_LockFile
push word [esp + 0xb]
neg esi
shr edi, 0x16
bswap edi
cmc
sub esp, 6
xchg esi, edi
lea ebp, [edx + edx]
push dword [esp + 0x14]
add esp, 0x2b
xchg esi, edi
add esp, 2
neg di
mov ebp, dword [esp]
bswap si
add esp, 0
xchg edi, esi
mov esi, dword [esp]
jmp 0x675bc8
call 0x675ffb
pop eax
sub eax, 0x675ffb
cmp dword [eax + reloc.KERNEL32.dll_LockFile], 0
je 0x67593d
jne 0x6761b0
fstp dword [ebp - 0x33]
xchg esp, eax
mov word [si + 0x79c8], ds
jnp 0x676088
push 0xe5e8c70e
push cs
invalid
add dword [esp], reloc.KERNEL32.dll_LockFile
pushfd
mov byte [esp + 2], dl
mov byte [esp + 1], dl
push word [esp + 3]
push eax
mov byte [esp + 3], bl
mov word [esp + 3], ax
pop word [esp + 3]
pop dword [esp]
mov word [esp], sp
mov byte [esp + 1], dl
mov word [esp], cx
mov word [esp], bp
mov byte [esp], cl
push cx
mov word [esp + 1], ax
pushfd
lea esp, [esp + 9]
mov byte [esp], cl
pushfd
lea esp, [esp + 4]
mov byte [esp], bl
lea esp, [esp]
push eax
lea esp, [esp]
pop word [esp]
lea esp, [esp + 2]
lea esp, [esp]
lea esp, [esp]
and al, 0x24
pushal
push dword [esp + 0x10]
push dword [esp + 0x17]
mov word [esp + 0xf], cx
pop word [esp + 0x18]
mov dword [esp + 0x10], ebx
push word [esp + 0x20]
pop dword [esp + 0x18]
mov byte [esp + 5], ch
mov byte [esp + 0xf], cl
push word [esp + 0x10]
mov dword [esp + 0xc], ebp
lea esp, [esp + 0x19]
pop dword [esp + 2]
push word [esp + 7]
lea esp, [esp + 0xb]
lea esp, [esp]
push edi
pop word [esp]
push word [esp + 2]
push si
pushfd
mov dword [esp + 5], esi
mov dword [esp + 5], ebx
mov dword [esp + 3], esi
pushal
push word [esp + 0xa]
push dword [esp + 0x24]
mov dword [esp + 0x19], esi
mov word [esp + 0x2c], bx
push dword [esp + 0xf]
push word [esp + 0x1d]
pop dword [esp + 0x1d]
pop dword [esp + 0x28]
mov dword [esp + 0x15], eax
push dword [esp + 0x28]
push dword [esp + 6]
mov dword [esp + 0x29], ecx
mov dword [esp + 3], edi
pop dword [esp + 0xd]
mov word [esp + 0x29], cx
pushal
lea esp, [esp + 0x53]
pushal
pop word [esp + 0xd]
pop dword [esp + 0xe]
pop word [esp + 0x15]
pop word [esp + 0x12]
mov byte [esp + 0x13], bh
pop dword [esp + 7]
mov word [esp + 9], bx
mov byte [esp + 9], bh
pop dword [esp + 4]
push dword [esp + 6]
lea esp, [esp + 0x10]
push word [esp + 1]
push dword [esp + 2]
mov dword [esp], edx
pop word [esp + 1]
push word [esp + 3]
push word [esp + 6]
pushal
push dword [esp + 0x19]
mov byte [esp + 0x1a], al
push dword [esp + 5]
lea esp, [esp + 0x2d]
push dword [esp]
mov dword [esp + 1], esp
pop word [esp + 4]
lea esp, [esp + 6]
mov byte [esp], bh
pushfd
jmp 0x676237
lea esp, [esp + 8]
popal
jmp 0x61d5b5
xchg bl, ah
mov dh, byte [esp]
xchg ecx, eax
mov cl, byte [esp]
mov bp, 0x511e
push bx
jmp 0x678e35
mov bp, di
not ecx
lea eax, [edi*4]
xchg cx, bx
bswap ebp
xchg bp, cx
mov bp, 0x3b11
lea edx, [ebp*4]
bswap edx
bswap esi
mov edx, 0x2bd10c31
mov eax, ebx
bswap cx
jmp 0x6761ba
mov ebp, dword [esp]
setg ah
xchg si, bx
not ah
mov si, word [esp]
jmp 0x6761db
lea esp, [esp + 1]
lea esp, [esp + 4]
push 0
pushal
setle al
lea ebx, [esp + 0x2f]
mov cx, 0x6506
mov bh, byte [esp]
mov esi, 0x45d34bc8
mov ebp, dword [esp]
jmp 0x676219
xchg bp, si
xchg word [esp], si
mov si, ax
lea esi, [ecx*4]
xchg di, bp
add esp, 0
cmc
add esp, 0
lea edi, [ebx*4]
or si, ax
rcl si, cl
push word [esp + 1]
cmc
lea edi, [edx + ebx]
add esp, 0
lea esp, [esp + 3]
cld
mov esi, ebp
lea esp, [esp]
bswap di
lea edi, [ebp*4]
lea esp, [esp]
lea ebp, [esp + 0x7d]
mov bp, word [esp]
btc esi, ebp
mov esi, 0x54bf78c6
bsr si, bp
lea esi, [ebp*4]
pushfd
cmc
mov word [esp], ax
mov ebp, 0x62f31179
lea esp, [esp + 1]
sub esp, 0x1e
mov dword [esp + 5], ebp
bswap esi
push word [esp + 0x13]
neg esi
bswap esi
mov word [esp + 0x17], bx
pop si
xchg di, bp
lea esi, reloc.KERNEL32.dll_LockFile
lea esp, [esp + 0x12]
xchg word [esp + 0xa], bp
xchg dword [esp + 6], esi
clc
bswap bp
mov dword [esp + 1], ecx
mov esi, 0x51507859
sbb esi, 0x4bae26ab
pop esi
mov bp, word [esp + 9]
pop di
lea ebp, [eax + 0x35]
bswap ebp
clc
sub esp, 7
mov bp, word [esp + 5]
push word [esp + 8]
mov esi, 0x5fe627dc
push word [esp + 0xa]
pop dword [esp + 2]
pop esi
add esp, 0
lea esi, reloc.KERNEL32.dll_LockFile
mov edi, 0x78ef3752
push word [esp + 0xc]
pop dword [esp + 3]
shl edi, cl
bsr bp, si
push dword [esp + 4]
pop word [esp + 7]
not si
mov si, word [esp + 4]
add esp, 4
lea edi, reloc.KERNEL32.dll_LockFile
mov edi, 0x50567a0e
mov word [esp + 2], di
pop dword [esp]
sub edi, 0x48ef7ad9
xchg edi, ebp
mov byte [esp], al
xchg word [esp + 1], si
neg esi
mov edi, 0x24ee6b9d
bswap di
mov esi, dword [esp + 1]
sub esp, 0x15
mov esi, ecx
lea edi, [ebp*4]
pushal
mov dword [esp + 0x1d], edi
mov di, word [esp + 8]
bswap ebp
inc di
xchg dword [esp + 3], ebp
add esp, 0x37
mov esi, dword [esp]
mov edi, dword [esp]
push word [esp + 2]
push word [esp + 2]
mov esi, edx
bswap ebp
mov esi, edx
mov word [esp + 4], ax
lea esp, [esp + 6]
mov esi, dword [esp]
add esp, 0
lea edi, [eax + esi]
bt ebp, ebp
mov bp, cx
mov bp, 0x642c
btc ebp, ebx
clc
mov si, word [esp]
pushfd
pop word [esp]
mov bp, 0x68c8
bswap si
mov esi, dword [esp]
rcr si, 0xb
bswap bp
bt edi, ebx
mov word [esp], sp
inc edi
bts esi, edi
mov si, sp
mov word [esp], dx
xchg esi, ebp
cmc
xchg word [esp], si
xchg word [esp], bp
bswap esi
xchg bp, si
or edi, 0x1794604d
mov ebp, esi
bsr esi, esp
sub esp, 0x15
lea esp, [esp + 0xd]
bswap esi
bswap esi
pop word [esp + 6]
lea esi, [eax + edi]
pop word [esp + 1]
xchg dword [esp], esi
shr esi, 0x13
lea esp, [esp + 6]
mov esi, dword [esp]
lea esp, [esp]
mov edi, dword [esp]
mov byte [esp], bh
mov esi, dword [esp]
sub esp, 0xd
mov word [esp + 3], cx
xchg dword [esp + 7], esi
mov edi, esi
push ax
push word [esp + 0xa]
pop ebp
bswap bp
mov si, 0x3a5b
sub esp, 0x19
neg ebp
bswap bp
bsf si, sp
bts ebp, edx
bswap edi
add esp, 8
push word [esp + 0x1e]
xchg di, bp
pop dword [esp + 8]
lea esi, reloc.KERNEL32.dll_LockFile
mov word [esp + 0x14], cx
mov si, word [esp + 2]
xchg dword [esp + 0xf], edi
push dword [esp + 0xf]
btc ebp, esp
pop si
xchg dword [esp + 0xc], esi
mov dword [esp + 6], edi
lea esi, [edx - 0xb9]
shl si, cl
pushfd
bswap edi
xchg word [esp + 0x1b], si
mov esi, dword [esp + 5]
pop di
pop word [esp + 0x15]
bswap di
stc
mov edi, dword [esp]
bts bp, ax
lea esp, [esp + 0xa]
bswap si
xchg dword [esp], esi
xchg word [esp + 8], si
mov dword [esp + 0xb], ebx
lea esp, [esp + 0xf]
push dword [esp + 3]
lea esp, [esp + 9]
bt bp, di
btr esi, ecx
bswap ebp
add esp, 0
mov byte [esp], bh
add esp, 0
mov esi, dword [esp]
mov esi, 0x73193350
rol ebp, cl
lea esi, [edi*4]
push si
lea ebp, [ebp + 0x97]
clc
lea ebp, reloc.KERNEL32.dll_LockFile
lea ebp, [ecx + edx]
bsr esi, edx
push edx
bswap di
xchg di, bp
add esp, 2
push word [esp + 2]
pop esi
cmc
lea esp, [esp]
xchg esi, edi
bswap si
lea esp, [esp + 2]
mov ebp, esi
add esp, 0
mov esi, 0x1c350fdd
and bp, 0x39b7
clc
mov edi, edx
mov byte [esp], al
dec edi
mov esi, 0x59c56849
mov edi, 0x4cc97d2c
mov si, word [esp]
mov bp, 0x33fc
mov esi, edi
bswap esi
not si
mov bp, si
btc esi, esi
and edi, 0x190f5d37
bswap di
adc esi, 0x3bf071c8
clc
lea edi, [edx + edx]
stc
bswap esi
lea edi, [edx + edi]
ror esi, cl
mov si, word [esp]
bswap di
mov byte [esp], dl
mov esi, 0x2c6b68f2
lea esi, reloc.KERNEL32.dll_LockFile
xchg si, di
xchg esi, edi
sub esp, 6
mov byte [esp + 2], ah
xchg esi, edi
pop ebp
cld
sub esp, 4
pop word [esp]
mov di, 0x2274
pop si
lea esp, [esp]
mov byte [esp], dh
mov byte [esp + 1], dh
cmc
bswap esi
rcl si, 0xd
mov si, 0x177b
mov si, 0x2635
mov edi, 0x673a7eb6
lea ebp, [edx + edx]
sub esp, 4
clc
bsr si, di
mov si, word [esp + 4]
lea esi, [ecx + edx]
bsr si, sp
xchg dword [esp], ebp
not esi
xchg dword [esp], ebp
mov word [esp + 4], cx
push dword [esp + 5]
mov esi, dword [esp + 6]
lea esi, reloc.KERNEL32.dll_LockFile
xchg si, bp
pop si
mov si, 0x2ffc
mov esi, edx
mov si, 0x5d3d
pop bp
mov di, word [esp + 3]
pop esi
pushal
mov esi, 0xba20238
xchg word [esp + 4], di
bswap esi
bsr esi, ebx
mov si, cx
lea edi, [esp + edi]
pop word [esp + 0x19]
mov word [esp + 0x1a], si
mov esi, dword [esp + 0xb]
btc ebp, edi
mov ebp, dword [esp + 0x19]
xchg si, di
lea edi, [esp + ebp]
push dword [esp + 0x20]
bswap si
lea edi, reloc.KERNEL32.dll_LockFile
mov bp, word [esp]
pop dword [esp + 8]
pop edi
not esi
lea edi, [eax + esi]
bswap edi
rcr di, 0
mov di, bx
xchg esi, edi
mov esi, dword [esp + 7]
xchg di, si
bswap si
lea edi, [ebx*4]
pop dword [esp + 0x10]
pop di
push dword [esp + 0xe]
btc si, dx
xchg word [esp + 0xe], di
bsr esi, esp
mov esi, eax
lea ebp, [esi*4]
xchg dword [esp + 4], edi
pop word [esp + 0x14]
push word [esp + 0xd]
mov esi, ebx
add esp, 0x19
bswap esi
bswap esi
mov si, 0x725a
lea esi, [edx*4]
xchg di, si
shr ebp, 4
mov bp, 0x2cd5
lea edi, [edi*4]
bswap esi
mov esi, 0x47a301d0
bsr ebp, ebp
dec edi
inc si
mov esi, 0x424d2f79
mov byte [esp], bl
mov ebp, dword [esp]
bswap esi
mov si, ax
bswap edi
pop si
neg ebp
not di
rcl bp, cl
lea edi, [esp + esi]
mov si, di
lea edi, [esi + edi]
mov bp, bx
pushfd
sub esp, 4
mov esi, dword [esp + 2]
lea esi, [ecx + esi]
pop dword [esp]
xchg esi, edi
mov bp, 0x341
pop si
add esp, 0
mov word [esp], ax
cld
bsr edi, ebx
mov esi, edi
mov ebp, 0x2b0b5a4f
bsf si, di
lea esp, [esp + 1]
bswap ebp
bsr edi, esp
shr di, cl
push dx
xchg word [esp], si
lea edi, [ecx*4]
mov di, 0x30b2
bsf di, bx
bswap di
mov byte [esp + 1], bl
btr esi, esp
xchg ebp, edi
bswap si
mov bp, bx
xchg esi, edi
mov word [esp], di
inc si
add esp, 0
mov esi, dword [esp]
not ebp
mov di, word [esp + 2]
bswap edi
pop di
lea esi, reloc.KERNEL32.dll_LockFile
mov byte [esp], bh
pushal
bsr ebp, edi
rol esi, 2
bt esi, eax
pop di
pop bp
mov dword [esp + 0xb], edx
sub esp, 7
bts esi, edx
lea esi, [edi*4]
clc
mov ebp, eax
xchg word [esp + 0x1a], si
push dword [esp + 0x19]
lea ebp, reloc.KERNEL32.dll_LockFile
inc bp
bswap bp
xchg si, di
mov word [esp + 9], bx
adc bp, si
mov si, word [esp + 1]
dec edi
pop dword [esp + 0x1f]
xor edi, edi
pop dword [esp + 0x17]
add esp, 0x1a
stc
bswap esi
lea esp, [esp + 5]
bsr ebp, esp
mov edi, dword [esp]
cmc
mov esi, 0x716e653a
mov byte [esp], dh
mov di, 0x7f02
bswap edi
lea edi, reloc.KERNEL32.dll_LockFile
mov bp, 0x28b8
xor esi, esp
mov bp, 0x9ec
cmp bp, ax
lea esi, reloc.KERNEL32.dll_LockFile
mov esi, eax
bswap si
lea esp, [esp]
stc
not si
not esi
bswap si
mov bp, word [esp]
lea esi, reloc.KERNEL32.dll_LockFile
add esp, 0
mov byte [esp], ah
lea esp, [esp]
sub esp, 0x1f
pop dword [esp + 0xf]
xchg ebp, esi
mov di, sp
cld
sub esp, 0x1f
sub esp, 5
bswap esi
pop ebp
bswap si
mov esi, 0x1af26e9b
bswap si
add esp, 0x16
mov byte [esp + 0xa], ah
mov si, word [esp + 0xf]
neg ebp
bswap di
bswap si
mov esi, 0x4eab4d7e
mov esi, dword [esp + 0xa]
not si
mov si, 0x264
pop word [esp + 0x18]
adc si, 0x6b68
mov byte [esp + 0x16], al
mov si, word [esp + 0x10]
mov word [esp + 0xb], sp
mov esi, esp
mov edi, 0x2e70132f
lea edi, [eax*4]
bswap ebp
bsf esi, ebp
bsf ebp, edi
mov edi, dword [esp + 0xa]
xchg esi, ebp
pop word [esp + 0x1e]
pop word [esp + 0xe]
xchg di, si
lea esp, [esp + 2]
shl edi, cl
neg ebp
mov si, 0x2139
xchg dword [esp + 2], ebp
mov word [esp + 0x11], bp
mov word [esp + 3], sp
inc esi
push dword [esp + 2]
bts edi, eax
mov edi, 0x6b440f12
sub esp, 0xf
mov dword [esp + 5], edi
bswap di
pop word [esp + 0x12]
bswap esi
add esp, 0x1e
mov dword [esp + 4], eax
pop si
mov si, word [esp + 0xd]
push dword [esp + 2]
mov si, ax
bsf bp, si
sub esp, 7
mov edi, 0x78fb2c4c
mov esi, 0x19f95ee6
neg edi
push word [esp + 0x18]
lea esp, [esp + 0x15]
mov esi, dword [esp + 4]
xor edi, 0x4aea121d
lea esi, [edx*4]
sub esp, 0x1a
cld
not di
mov edi, edx
not esi
xchg esi, ebp
xchg esi, ebp
xchg esi, edi
bswap esi
lea ebp, [ebp + ebp]
pop word [esp + 0xc]
cmc
sub di, 0x7a53
bsf di, bx
mov si, word [esp + 0x1d]
pop word [esp + 7]
pop word [esp + 0xd]
xchg si, di
pop esi
bswap esi
xchg bp, si
mov dword [esp + 2], eax
pop word [esp + 0xf]
pop esi
xchg ebp, esi
mov dword [esp + 0xa], edx
mov esi, dword [esp + 0xb]
mov esi, eax
xchg esi, edi
bswap si
mov word [esp + 9], ax
xchg dword [esp + 1], esi
lea esi, [ecx - 0x14]
pop word [esp + 7]
pop si
lea esp, [esp + 5]
mov ebp, ecx
lea esi, reloc.KERNEL32.dll_LockFile
push dword [esp]
xchg dword [esp + 7], ebp
btc esi, ebp
mov ebp, dword [esp + 4]
bswap ebp
mov di, word [esp + 4]
push esi
mov word [esp + 7], bp
sub esp, 0x15
mov edi, ebp
neg esi
pop dword [esp + 0xb]
mov dword [esp + 8], eax
stc
not si
xchg esi, edi
sub esp, 9
lea ebp, reloc.KERNEL32.dll_LockFile
neg si
inc bp
lea edi, [edx + ebp]
mov si, 0x5a7d
cmp bp, cx
mov bp, di
mov bp, word [esp + 0x1f]
shl si, cl
pop si
mov ebp, dword [esp + 8]
pop dword [esp + 2]
shr edi, 5
xchg ebp, esi
and ebp, ebx
lea esp, [esp + 0x18]
rcr si, 0xe
neg si
xchg esi, ebp
mov si, 0x3934
xchg esi, edi
lea edi, [ebp*4]
bswap di
mov si, 0x28bc
neg si
bsf si, bx
push dword [esp]
bsf esi, eax
pop word [esp + 8]
mov bp, word [esp + 2]
mov dword [esp + 9], edi
xchg bp, si
bswap bp
clc
lea ebp, [edx + ebp]
sub esp, 0x1e
mov edi, dword [esp + 0x1a]
lea esi, [edi + ebp]
mov dword [esp + 0x16], ebp
mov si, ax
push word [esp + 9]
pop si
mov si, ax
inc esi
pushal
mov dword [esp + 5], edi
bswap di
bsr di, di
stc
xchg dword [esp + 0x34], ebp
ror si, 0xa
add esp, 0x1c
mov dword [esp + 4], edx
mov edi, ebp
xchg esi, edi
pop esi
pop ebp
lea edi, [ebx*4]
xchg si, bp
mov edi, 0x63ca09e6
push esp
mov byte [esp + 0x24], dh
stc
btc di, dx
mov edi, dword [esp + 0x18]
inc edi
not bp
lea esi, [esi*4]
push dword [esp + 0x17]
lea esi, [esi*4]
dec di
push edi
cld
pop dword [esp + 2]
not bp
mov di, 0x786b
mov dword [esp + 0x23], edi
pushal
lea ebp, [eax + ebp]
not esi
lea esp, [esp + 0x21]
pop si
bswap si
pop word [esp + 2]
mov word [esp + 0x24], si
mov esi, 0xb3b63bd
bswap bp
pop word [esp + 0x20]
ror bp, cl
rcl si, 4
mov dword [esp + 0x24], eax
mov esi, dword [esp + 0x25]
not si
mov word [esp + 0xd], cx
mov bp, 0x2e04
mov ebp, dword [esp + 0xa]
xchg esi, edi
cmp ebp, eax
sub esp, 0xa
lea esi, [edi*4]
mov bp, word [esp + 0xd]
bswap edi
mov byte [esp + 0xa], cl
pop dword [esp + 0x1f]
inc esi
mov word [esp + 0x2c], dx
mov si, ax
xchg esi, edi
push word [esp + 0x1d]
clc
mov byte [esp + 1], al
lea esi, reloc.KERNEL32.dll_LockFile
xchg dword [esp + 0x2b], ebp
mov si, word [esp + 0x15]
mov bp, word [esp + 0x11]
xchg bp, di
lea ebp, [ecx + ebp]
mov ebp, 0x4edf04f9
lea ebp, reloc.KERNEL32.dll_LockFile
pop dword [esp + 0xb]
pop si
lea edi, reloc.KERNEL32.dll_LockFile
lea ebp, [esp + ecx]
mov esi, ebx
bswap bp
mov bp, sp
xor edi, 0x28262da5
mov si, sp
xchg word [esp + 0xc], bp
mov bp, dx
lea edi, [ebx*4]
pop dword [esp + 0x19]
bswap esi
pop esi
lea esi, [edi*4]
mov si, dx
pop dword [esp + 0x11]
bswap di
btr si, cx
cld
push word [esp + 0x18]
pushfd
bsr esi, ecx
mov dword [esp + 0x1e], esi
push ecx
mov byte [esp + 0x1a], dh
bswap esi
pop dword [esp + 0x14]
lea esp, [esp + 0x20]
and esi, 0x73c8539e
mov byte [esp + 1], cl
or esi, 0x132c695d
bswap esi
mov esi, 0x711764f9
mov word [esp], dx
xchg word [esp + 1], si
mov ebp, dword [esp]
push ebp
add esp, 8
bts ebp, eax
xchg si, bp
bswap edi
mov bp, word [esp]
bswap di
sub esp, 3
mov si, bx
not si
pushal
mov ebp, dword [esp + 0x1c]
mov si, word [esp + 9]
add esp, 0xa
lea esp, [esp + 6]
mov esi, dword [esp + 3]
sub esp, 0x16
lea esi, [edx + edi]
xchg bp, si
xor edi, ebp
bsr esi, edx
pop si
add esp, 0x1b
xchg word [esp + 3], si
pop esi
xchg esi, ebp
sub esp, 3
cmc
bswap si
mov si, 0x2682
mov di, 0x36c4
add esp, 3
lea edi, [esp + ebp]
mov esi, dword [esp + 4]
clc
mov word [esp + 6], bp
sub esp, 0
bswap si
pop esi
bsf edi, eax
xchg dword [esp], esi
pop edi
bt esi, ecx
not esi
add esp, 0
lea edi, reloc.KERNEL32.dll_LockFile
stc
lea edi, [ecx + ebp]
mov bp, word [esp]
lea esi, [esi + edi]
bswap esi
pushal
bsr ebp, ecx
push word [esp + 0x16]
mov dword [esp + 6], ebp
xchg dword [esp + 0xa], ebp
lea edi, [eax*4]
mov esi, ecx
xchg word [esp + 0x14], si
mov byte [esp + 0xc], bl
lea esi, [ecx*4]
lea esp, [esp + 4]
not ebp
pop ebp
mov ebp, 0x3c540b4b
pop si
push word [esp + 0x17]
mov edi, dword [esp + 0x19]
bts ebp, ebp
mov edi, dword [esp + 0x11]
mov esi, dword [esp + 0xb]
mov word [esp + 0xd], cx
lea esi, reloc.KERNEL32.dll_LockFile
cmc
push word [esp + 0xa]
push word [esp + 0x17]
pop word [esp + 0x15]
pop esi
mov ebp, 0x39d33ad0
xchg word [esp + 1], di
push word [esp + 2]
lea esp, [esp + 7]
lea esp, [esp]
pop bp
lea esi, reloc.KERNEL32.dll_LockFile
mov word [esp + 4], cx
mov si, word [esp + 7]
inc esi
pop esi
push ax
not esi
mov bp, word [esp + 0xa]
lea esi, [esi + esi]
add esp, 9
push word [esp]
mov si, bp
xchg word [esp + 1], di
mov edi, ebp
mov bp, 0x30a7
mov di, 0x4ff1
not bp
mov word [esp + 1], si
push ecx
mov byte [esp + 8], bh
cmc
push dword [esp + 0xa]
pop di
bswap si
bswap ebp
mov edi, 0x5bd0696e
lea esp, [esp + 9]
add si, sp
rcl edi, 0x13
xchg esi, ebp
lea esi, [ebx*4]
mov di, 0x2486
mov word [esp + 2], cx
lea esi, [edi*4]
bt bp, sp
btc esi, edx
xchg word [esp + 1], di
mov esi, eax
mov dword [esp], eax
neg di
not di
sub esp, 2
btr si, dx
push dword [esp + 6]
lea esp, [esp + 4]
neg si
mov word [esp], si
pop word [esp]
xchg dword [esp], esi
bsr ebp, edx
bswap edi
lea esi, [esp + edi]
pop word [esp]
mov esi, dword [esp + 1]
mov edi, 0xd7f037d
xchg dword [esp], edi
xchg edi, ebp
xchg word [esp], bp
add esi, esp
mov dword [esp], edi
not esi
bswap di
xchg dword [esp], esi
neg si
mov dword [esp], ebx
mov dword [esp], ebp
bswap bp
lea edi, [edx*4]
sub esp, 0x15
pop bp
neg di
mov dword [esp + 0xb], ebx
mov word [esp + 8], bx
mov si, word [esp + 2]
xchg edi, esi
xchg word [esp + 0xa], di
or bp, 0xe50
not di
push word [esp + 2]
pop si
xchg di, si
mov di, word [esp + 0xd]
mov dword [esp + 0xa], edx
mov di, cx
inc ebp
xchg dword [esp + 7], esi
mov byte [esp + 9], bh
lea ebp, [eax*4]
xchg word [esp + 3], bp
lea edi, [eax + edx]
bswap si
xchg word [esp + 2], bp
lea esp, [esp + 0x16]
bsr esi, ebx
lea esi, [edi + ebp]
xchg si, di
sub esp, 6
mov esi, 0x36111b6a
mov ebp, dword [esp]
lea esi, [eax + ebx]
lea esp, [esp + 1]
xchg si, bp
cld
add esp, 5
pushfd
lea esi, reloc.KERNEL32.dll_LockFile
lea esi, [ebx + edi]
add esp, 3
mov byte [esp], al
mov bp, word [esp + 1]
bswap edi
lea edi, reloc.KERNEL32.dll_LockFile
mov esi, ebp
mov byte [esp], dh
or edi, edx
mov esi, edi
cmc
mov esi, ebp
xor bp, ax
mov byte [esp], cl
mov byte [esp], bh
pop di
sub esp, 0xd
not esi
mov dword [esp + 8], ebp
pop di
bswap bp
cmc
neg edi
mov ebp, dword [esp + 9]
lea esi, [esp + 0x56]
mov di, word [esp + 2]
bswap si
bswap si
mov bp, di
push dword [esp + 5]
push dword [esp + 1]
pop di
sub esp, 4
xchg dword [esp + 1], esi
bswap di
add esp, 7
rcl si, 0xe
xchg di, si
xchg dword [esp + 1], ebp
mov bp, di
xchg word [esp + 0xb], bp
mov byte [esp + 6], dh
not edi
lea edi, [esp + ebp]
rcl bp, cl
mov dword [esp + 4], edx
push word [esp + 6]
bswap ebp
lea esp, [esp + 6]
lea edi, [eax + ecx]
rol si, cl
bswap di
neg di
pop dword [esp]
push dword [esp + 2]
lea edi, [ebx + ebp]
mov si, word [esp + 1]
bswap bp
clc
not edi
neg di
push word [esp + 1]
mov si, bx
mov si, ax
xchg word [esp + 5], si
lea esp, [esp + 2]
add esp, 5
pop esi
sub esp, 0x17
push dword [esp + 0x14]
add esp, 0x12
btr edi, ebp
add esp, 6
bswap bp
mov edi, dword [esp + 2]
mov byte [esp + 2], bh
pop esi
bsr bp, bp
mov bp, 0x5f92
mov esi, 0x543a5e30
mov si, word [esp]
mov di, 0xabf
bts si, cx
inc edi
cld
clc
bswap si
xchg bp, si
mov esi, dword [esp]
cmp si, sp
not esi
cmc
clc
not esi
shl bp, cl
neg ebp
mov edi, dword [esp]
mov edi, dword [esp]
mov edi, dword [esp]
mov esi, 0x3e4d1b63
sub si, di
mov di, dx
dec si
bts edi, eax
mov di, dx
mov bp, word [esp]
mov si, word [esp]
bt di, bx
lea esi, reloc.KERNEL32.dll_LockFile
not esi
mov ebp, dword [esp]
cmc
bsr bp, dx
bswap esi
not edi
mov bp, dx
mov di, ax
bswap si
lea edi, reloc.KERNEL32.dll_LockFile
lea ebp, [eax + edi]
bt esi, ecx
bswap si
or edi, 0x66f22dfa
bswap esi
not di
mov esi, ebp
bsr si, di
mov esi, dword [esp]
mov ebp, dword [esp]
bswap esi
mov ebp, dword [esp]
mov edi, 0x5201028d
mov edi, dword [esp]
lea esi, [ebx*4]
dec edi
mov di, 0x5308
bswap bp
push ax
lea ebp, [ebx + 0x61]
bsf si, di
cmp bp, di
mov byte [esp], bl
lea ebp, reloc.KERNEL32.dll_LockFile
clc
cld
mov word [esp], cx
mov bp, sp
bswap bp
rcr edi, cl
mov si, cx
mov byte [esp], bh
push dx
mov bp, 0x187d
mov edi, esp
pushal
not si
bt bp, sp
lea edi, [eax + esi]
bswap bp
sub esp, 0x17
add esp, 0x2f
dec si
add esi, esi
push sp
pop dword [esp + 1]
mov si, word [esp + 7]
bsf esi, ecx
clc
dec di
stc
mov esi, edx
push word [esp + 3]
bsr ebp, ebx
push dword [esp + 6]
mov si, 0x7282
xchg word [esp], bp
mov bp, 0x7b6e
add esp, 0xd
lea esi, [ecx - 0x30]
cld
lea esi, [ebx + ebx]
mov byte [esp + 1], cl
btr di, si
sub esp, 5
stc
inc di
rcr edi, 1
pop esi
neg si
mov di, 0x6b34
lea ebp, [ebx*4]
push dword [esp + 3]
clc
mov di, 0x7df8
lea ebp, [ebx*4]
not esi
push eax
xchg bp, di
mov si, 0x6d9c
bswap di
mov esi, 0x7b02299b
bswap esi
mov ebp, 0x495e5000
push si
lea esp, [esp]
bsf ebp, eax
mov si, word [esp + 9]
xchg word [esp + 7], di
shr di, 2
and esi, 0x6917185e
lea edi, reloc.KERNEL32.dll_LockFile
pop esi
bswap di
pop bp
pop dword [esp]
pop word [esp]
mov si, word [esp + 1]
push ebp
bt ebp, ecx
add esp, 0
sub esp, 5
add esp, 9
clc
mov ebp, 0x51f12012
mov edi, 0x23b75fc7
neg esi
bswap si
sub esp, 0x17
mov esi, 0x75ed1c44
xchg word [esp + 7], bp
add esp, 0x10
mov byte [esp + 3], al
lea edi, [edi*4]
xchg ebp, edi
add si, 0x3319
not si
xchg word [esp], si
pop edi
inc ebp
push word [esp + 4]
xchg word [esp], bp
lea esi, reloc.KERNEL32.dll_LockFile
bsf edi, esi
dec di
bswap bp
pop edi
not bp
rol si, 7
pop di
mov si, di
lea esp, [esp]
neg ebp
bsr edi, edx
mov esi, 0x608c0f88
xchg si, bp
btr esi, eax
mov si, 0x722e
mov si, dx
lea esp, [esp]
bswap edi
lea edi, [edx + edi]
pushfd
xchg dword [esp], ebp
mov edi, dword [esp + 2]
xchg dword [esp], esi
ror edi, cl
pop ebp
sbb si, di
bsr bp, sp
mov si, sp
bt esi, esi
add esp, 0
lea esp, [esp]
mov si, word [esp]
add esp, 0
push ebp
mov dword [esp], eax
clc
lea ebp, [ecx*4]
xchg word [esp + 1], di
lea ebp, [esi + edi]
xchg dword [esp], esi
clc
xchg word [esp + 2], si
lea esi, [eax*4]
xchg dword [esp], ebp
sub esp, 0xe
pushfd
xchg dword [esp + 0xe], esi
mov byte [esp + 0x10], ch
xchg dword [esp + 0xa], edi
lea edi, [edi*4]
lea esp, [esp + 0x16]
bswap edi
mov edi, esi
lea ebp, reloc.KERNEL32.dll_LockFile
bswap di
btr edi, edi
lea edi, [ebp*4]
mov byte [esp], dl
mov di, 0xd46
neg esi
and edi, 0x6f1304c1
ror di, cl
mov ebp, 0x287d006a
pushal
add bp, bp
lea esi, [ecx + esi]
lea esp, [esp + 0x18]
push dword [esp + 8]
xchg ebp, edi
lea esp, [esp + 2]
lea ebp, reloc.KERNEL32.dll_LockFile
neg edi
not di
shr si, cl
lea esi, reloc.KERNEL32.dll_LockFile
rcr bp, cl
lea esi, [edx + ebx]
clc
mov si, 0x2648
mov esi, dword [esp + 8]
xchg si, di
push eax
xchg word [esp + 9], si
mov edi, ecx
inc esi
mov di, 0x5c89
mov dword [esp + 9], ebx
xchg dword [esp + 3], esi
lea esp, [esp + 0xc]
lea esp, [esp + 2]
lea esp, [esp]
mov edi, 0x102d32ab
lea esi, [ebp*4]
rcr bp, 8
bswap ebp
pushfd
cmc
lea edi, [ecx*4]
mov dword [esp], edi
dec esi
lea esi, reloc.KERNEL32.dll_LockFile
mov si, word [esp + 2]
mov byte [esp + 2], ch
mov ebp, edx
pop si
lea esi, [edi + 0x87]
lea ebp, reloc.KERNEL32.dll_LockFile
xchg esi, ebp
push word [esp + 1]
ror edi, cl
mov esi, dword [esp + 4]
clc
pop esi
mov esi, esp
btc ebp, edi
cmc
lea edi, [ebp*4]
mov byte [esp], cl
not di
clc
bswap ebp
dec esi
bsr esi, eax
add esp, 0
btc edi, ecx
mov di, ax
pushfd
xchg bp, di
neg ebp
bsr bp, ax
lea edi, [ecx + edx]
neg si
bsr si, dx
btr esi, ebx
lea edi, reloc.KERNEL32.dll_LockFile
xchg word [esp + 2], di
mov dword [esp], eax
bswap si
pop word [esp]
cld
cmc
mov esi, dword [esp]
mov bp, si
pushfd
lea esi, [esp + eax]
pop esi
mov byte [esp], ah
neg si
bswap si
mov ebp, 0x4d3f4cd2
bswap si
shl esi, 3
mov esi, 0x3fac6cc6
cld
stc
pushfd
bswap si
not si
bswap bp
clc
push dword [esp + 6]
mov si, word [esp + 0xa]
mov byte [esp + 8], al
mov word [esp + 8], bx
cld
add esp, 0
sub esp, 0x16
not edi
mov ebp, 0x601a59d6
xchg word [esp + 0x11], si
lea edi, reloc.KERNEL32.dll_LockFile
bswap bp
push word [esp + 0x18]
pushfd
bswap edi
rcr di, 0xd
mov dword [esp + 0x11], esp
pop si
xchg esi, ebp
xchg di, bp
sbb edi, esp
push dword [esp + 0x24]
push word [esp + 0xf]
neg si
lea esp, [esp + 0x24]
bsf esi, edx
xchg word [esp + 1], di
mov esi, 0x54c71216
bswap esi
mov bp, word [esp + 2]
mov edi, dword [esp + 2]
stc
xchg di, si
cld
xchg word [esp + 1], di
xchg dword [esp], edi
xchg word [esp], di
cld
btc bp, dx
xchg dword [esp], esi
pushal
xchg edi, esi
pop edi
pop word [esp + 0xa]
inc esi
sub esp, 0x1f
mov di, ax
push word [esp + 8]
mov esi, edi
mov ebp, ebx
mov ebp, edx
lea esi, [ecx + 0x74]
lea esp, [esp + 0x1b]
pop dword [esp + 0x18]
mov esi, esp
cmc
sub edi, 0xfd42da0
mov byte [esp + 0x16], ah
xchg dword [esp + 0xf], esi
mov dword [esp + 0xe], edx
xchg esi, edi
mov word [esp + 7], ax
add esp, 0x1a
btc edi, esp
mov dword [esp + 4], ecx
bswap esi
mov byte [esp + 2], ch
mov dword [esp + 2], esp
pop word [esp + 4]
mov word [esp + 4], cx
lea ebp, [edx + ebp]
cmc
pop si
btr si, si
bswap ebp
btr si, cx
pop esi
mov edi, dword [esp]
bswap si
mov di, 0xd0d
sub esp, 8
mov word [esp + 2], bp
rcr bp, 0xa
sub esp, 5
add esp, 0xd
mov ebp, 0x3e5f3565
lea edi, [edi*4]
bswap si
mov esi, 0x496583
not si
pushfd
add esp, 4
lea esi, reloc.KERNEL32.dll_LockFile
lea esp, [esp]
mov byte [esp], ah
mov edi, 0x40c745a
xchg ebp, edi
stc
btc si, di
bsf si, di
add esp, 0
lea esp, [esp]
bswap di
rcr edi, cl
lea edi, [edi*4]
xchg di, bp
clc
lea ebp, [ecx + 0xc0]
neg si
lea esi, reloc.KERNEL32.dll_LockFile
neg bp
lea esi, [edi + edi]
mov si, bx
bswap edi
cmc
push ebx
bsf esi, edi
btr si, si
stc
sub esp, 0x17
mov si, sp
mov word [esp + 9], si
mov esi, esp
bswap si
xchg dword [esp + 3], edi
mov word [esp + 9], di
cmc
lea edi, [eax + ecx]
rcr edi, 8
bswap bp
neg di
lea ebp, reloc.KERNEL32.dll_LockFile
mov di, word [esp + 0x15]
btr esi, eax
pop dword [esp + 4]
mov dword [esp + 1], edi
bswap esi
pop word [esp + 0xf]
push dx
dec esi
mov di, sp
xchg si, bp
dec ebp
rcr si, cl
not esi
or edi, 0x61575e20
mov ebp, edx
mov si, dx
mov byte [esp + 0x16], bh
xchg word [esp + 8], bp
lea edi, reloc.KERNEL32.dll_LockFile
cmc
pop bp
push word [esp + 1]
shr di, 0xd
mov si, di
push bp
bts edi, esi
pop dword [esp + 0xd]
lea esi, reloc.KERNEL32.dll_LockFile
sub esp, 2
push word [esp + 4]
pop word [esp + 0x15]
mov dword [esp + 1], ecx
bswap esi
mov bp, 0xb99
pop dword [esp + 0xc]
lea edi, [edi + edi]
stc
cmc
cmc
mov si, word [esp + 2]
mov esi, ebx
not bp
mov word [esp + 0x10], ax
add esp, 9
cmc
shl ebp, cl
inc si
mov si, word [esp + 6]
lea esi, [esi - 0x8c]
cld
xchg bp, di
mov esi, 0x4e420ec2
xchg di, bp
pop di
add esp, 8
bswap di
mov si, 0x3f35
mov esi, dword [esp]
inc esi
neg ebp
bswap di
lea ebp, [eax + 0x71]
lea esp, [esp]
push bx
mov di, si
xchg di, si
sub esp, 3
mov si, word [esp + 3]
xchg word [esp], di
bts ebp, ebx
bsf si, dx
lea esi, [ebp*4]
cld
mov edi, dword [esp + 5]
lea ebp, reloc.KERNEL32.dll_LockFile
mov esi, 0x1d9e4b53
push word [esp + 1]
push word [esp + 3]
mov byte [esp + 5], bh
push dword [esp + 6]
pushfd
bsr bp, si
mov byte [esp + 0xe], dh
pop si
xchg dword [esp + 0xa], esi
mov di, dx
rcl si, cl
neg esi
cmc
xchg dword [esp + 8], esi
mov word [esp + 0xb], dx
mov si, 0x7d94
pop dword [esp + 6]
add esp, 2
cmp ebp, ebp
adc di, dx
xchg dword [esp + 4], esi
pop esi
lea esp, [esp + 5]
bswap di
rcr bp, 0xf
bsf si, sp
sub esp, 0x18
btr ebp, esi
lea esi, [esp + edx]
push word [esp + 0x13]
pop esi
bsr si, cx
mov ebp, dword [esp]
xchg dword [esp + 0x11], esi
mov dword [esp], edi
add esp, 0x12
bswap esi
add esp, 1
cld
rcl esi, cl
mov si, bx
pop edi
bsf bp, di
neg bp
lea edi, reloc.KERNEL32.dll_LockFile
xchg ebp, esi
bswap edi
mov esi, 0x75b710d4
bswap ebp
bswap si
mov edi, ecx
dec si
mov ebp, dword [esp]
lea ebp, [esi + edi]
shr si, 0
ror si, 0xf
clc
sub esp, 0xa
mov esi, dword [esp + 9]
lea esp, [esp + 2]
sbb si, 0x68e3
dec ebp
xchg di, si
add esp, 6
push word [esp + 1]
bts esi, ecx
shr esi, cl
mov byte [esp + 2], bh
bswap esi
push word [esp + 1]
bswap si
mov dword [esp], ecx
pop ebp
lea esp, [esp]
lea esp, [esp]
cld
mov si, 0x2d04
lea esi, reloc.KERNEL32.dll_LockFile
shr esi, 0x1f
xchg si, di
sub esp, 0xf
rcl ebp, 6
mov si, bp
sub esp, 9
neg si
pop dword [esp + 0x10]
lea esi, [edi - 0xa4]
xchg dword [esp + 0xf], ebp
mov si, cx
add esp, 3
btr si, cx
mov byte [esp + 0xf], ch
stc
mov esi, 0x5ac778c1
mov si, dx
pop bp
add esp, 0xe
lea esi, [esi*4]
bswap si
bswap di
mov word [esp], ax
dec esi
mov esi, 0x5ff8198d
lea esi, reloc.KERNEL32.dll_LockFile
sub esp, 5
adc ebp, 0x339e0992
pushfd
ror ebp, 0x17
mov bp, 0x2192
mov si, word [esp + 0xa]
mov si, 0x6ed2
bswap si
mov dword [esp + 2], edx
mov esi, 0x12cd68b8
bswap si
lea ebp, [edx - 0xda]
pop word [esp + 4]
lea esp, [esp + 7]
lea ebp, [edi*4]
lea ebp, [ebp*4]
add esp, 2
bswap bp
lea ebp, reloc.KERNEL32.dll_LockFile
stc
lea esi, [eax*4]
bsr esi, edx
lea esp, [esp]
inc esi
mov ebp, ecx
mov ebp, dword [esp]
mov si, 0x6892
mov bp, word [esp]
lea esi, [edx + 0x94]
lea esi, [edx*4]
neg si
mov ebp, 0x395b448d
mov si, 0x1820
lea esp, [esp]
lea esi, [edx*4]
xchg bp, si
bsr ebp, edx
neg esi
sub edi, 0x1051600e
push edi
bswap ebp
pop di
mov byte [esp], cl
mov edi, dword [esp]
mov word [esp], cx
mov word [esp], bx
xchg word [esp], bp
mov byte [esp], al
bswap ebp
bswap si
mov di, cx
mov word [esp], di
lea esi, [eax + ebx]
mov si, word [esp + 2]
sub esp, 4
add esp, 0
mov di, word [esp]
pop esi
btc di, dx
mov byte [esp + 1], dh
pop di
mov bp, si
mov ebp, edi
mov edi, 0x38a14357
neg ebp
sub esp, 0xe
xchg word [esp + 8], bp
lea esi, [eax + edx]
mov byte [esp + 2], al
mov si, bx
mov ebp, 0x60b46001
mov esi, ebp
push word [esp]
bts si, sp
mov si, ax
push dword [esp + 2]
mov di, cx
mov si, 0x6121
pop di
stc
mov byte [esp + 4], bh
mov byte [esp + 0xa], bl
mov dword [esp + 1], esp
bsf esi, edi
lea esi, reloc.KERNEL32.dll_LockFile
xchg esi, ebp
xchg dword [esp + 8], ebp
xchg edi, esi
lea esp, [esp + 2]
mov dword [esp + 1], edx
pop dword [esp + 4]
mov word [esp + 3], bx
xchg word [esp + 6], si
bswap ebp
xchg word [esp + 9], bp
cld
push word [esp + 7]
mov esi, dword [esp + 5]
mov dword [esp + 0xa], eax
lea esi, [eax*4]
pop ebp
pop si
dec bp
mov word [esp + 4], bx
xchg esi, ebp
mov ebp, ecx
pop ebp
rcl esi, 2
lea esi, [eax*4]
push word [esp + 2]
mov word [esp + 3], cx
mov byte [esp], bh
sub esp, 0x12
mov bp, ax
xchg word [esp + 5], si
clc
add esp, 0x12
sub esp, 0x1d
pop dword [esp + 0xa]
mov dword [esp + 0xb], edi
dec ebp
pop si
pop si
xchg word [esp + 0x18], si
bswap esi
pop word [esp + 0xf]
push word [esp + 4]
pop dword [esp + 0xf]
inc si
cld
mov word [esp + 0x15], cx
mov dword [esp + 0x11], eax
dec edi
bts ebp, esi
mov byte [esp + 0x11], dh
lea esi, [eax*4]
xchg bp, di
add esp, 0xb
lea esi, [ecx - 0x29]
pop dword [esp + 2]
pop si
pushal
bt edi, esp
bswap esi
push dword [esp + 0x1d]
lea esp, [esp + 0x2a]
lea ebp, reloc.KERNEL32.dll_LockFile
add esp, 0
add esp, 0
xchg esi, ebp
xchg edi, esi
cmc
mov si, 0x2fb5
bsr ebp, eax
lea esp, [esp]
add esp, 0
add esp, 0
mov di, word [esp]
not ebp
bswap di
bswap si
neg bp
mov esi, 0x74f8385a
sub esp, 5
pop si
bt esi, ebx
pushfd
mov word [esp + 2], sp
push word [esp + 3]
pop si
mov si, 0x165a
pop dword [esp]
lea ebp, reloc.KERNEL32.dll_LockFile
lea ebp, reloc.KERNEL32.dll_LockFile
mov byte [esp + 2], dl
bswap si
not esi
neg ebp
pop edi
lea edi, [ebx*4]
mov bp, word [esp]
mov si, word [esp]
pushfd
add esp, 2
mov byte [esp], dh
cld
bts bp, bp
or edi, 0x23703f91
lea esp, [esp]
sbb ebp, eax
mov esi, 0x3af2643f
neg bp
mov si, word [esp]
neg si
mov ebp, 0x61b86a48
lea ebp, [edi*4]
bswap bp
push word [esp + 1]
mov si, word [esp + 3]
bswap bp
bsr si, bp
xchg dword [esp], esi
bsr di, ax
xor esi, 0x13800ec1
mov byte [esp + 2], ch
mov si, di
mov byte [esp], al
xchg dword [esp], edi
lea esi, reloc.KERNEL32.dll_LockFile
xchg esi, edi
xchg word [esp], si
pop word [esp]
mov byte [esp], dh
stc
bts bp, ax
xchg word [esp], di
push word [esp + 1]
shr bp, 0xf
mov si, word [esp + 1]
mov dword [esp], ecx
pushfd
pop dword [esp]
mov byte [esp + 2], bl
stc
pop bp
push bp
push dword [esp]
pop esi
lea esi, [edi + 0x7f]
lea esi, reloc.KERNEL32.dll_LockFile
lea edi, reloc.KERNEL32.dll_LockFile
mov esi, edx
neg esi
mov si, 0x194e
lea esi, reloc.KERNEL32.dll_LockFile
push dword [esp]
mov ebp, dword [esp + 4]
pushfd
bts di, sp
push word [esp + 5]
lea esi, [eax + ebx]
dec si
pop word [esp + 4]
xchg dword [esp], esi
mov bp, word [esp + 8]
push ebp
add esp, 7
xchg si, di
mov esi, 0x6012312
xchg dword [esp + 2], edi
cmp di, bx
cld
mov word [esp + 3], di
mov si, word [esp + 4]
btr esi, esp
xchg bp, di
neg si
mov esi, esp
xchg dword [esp + 3], esi
xchg word [esp + 2], bp
mov dword [esp + 4], ebx
lea ebp, [ebx + edi]
bsf si, di
mov dword [esp + 4], ecx
add esp, 8
inc si
add esp, 0
mov esi, dword [esp]
clc
bswap bp
cmc
lea esi, [edi*4]
lea esi, [eax*4]
stc
bswap si
add esp, 0
bts di, di
bswap di
mov byte [esp], dl
bswap edi
bswap esi
add esp, 0
mov esi, edi
bswap si
add esp, 0
mov si, 0x3483
mov esi, edi
cmc
mov byte [esp], bh
mov esi, ebx
mov si, ax
mov si, bp
mov ebp, 0x7643701d
xchg ebp, esi
bswap esi
not esi
bswap edi
mov ebp, eax
mov si, 0x5138
mov edi, 0x44b16a2b
bswap si
add esp, 0
mov edi, 0x1e7f4b3c
bts di, bp
or esi, ebp
lea edi, [edx*4]
sub esp, 0x18
mov esi, ecx
bswap di
mov esi, dword [esp + 5]
neg esi
mov ebp, 0x5b973732
neg bp
mov word [esp + 5], bx
mov di, 0xde4
mov word [esp + 0x11], dx
bswap ebp
mov di, ax
mov esi, 0x33a39b4
mov byte [esp + 0x11], al
add esp, 0x12
mov si, 0x3f8a
mov byte [esp + 4], dl
xchg dword [esp], esi
sub esp, 0
xchg word [esp], bp
rol esi, 7
clc
lea ebp, [ebx + ebx]
bswap bp
cld
push ax
sub esp, 0
add esp, 6
not di
lea esi, [ebx*4]
push word [esp]
bswap si
lea esp, [esp + 4]
bt esi, eax
bsf ebp, esp
shl si, 0xc
xchg si, bp
sub esp, 0x15
mov di, word [esp + 0xa]
mov word [esp + 7], bp
xchg ebp, esi
pushal
sub esp, 0x1e
lea esp, [esp + 0x54]
sub esp, 0x19
pop di
mov bp, sp
mov bp, dx
mov esi, 0x6d97a61
bswap bp
xchg word [esp + 9], si
add esp, 1
xchg bp, si
add esp, 0xc
lea edi, [edx + edx]
sub esp, 7
lea ebp, [ecx + ebx]
cld
push edi
sub esp, 0x12
inc esi
sbb si, 0x6a4d
pop word [esp + 0x1a]
push word [esp]
mov ebp, ebx
mov di, 0xc9d
lea esi, [ecx + ebx]
lea esp, [esp + 0x17]
clc
bsr ebp, edx
clc
mov di, 0x71b1
pushal
inc ebp
xchg word [esp + 6], bp
mov byte [esp + 0x1a], ch
mov bp, cx
neg si
bsr bp, bx
mov esi, edx
lea esp, [esp + 0x19]
mov byte [esp + 0x11], bl
bsr si, bx
bswap bp
not ebp
bsr esi, edi
push sp
lea esp, [esp + 0xc]
pop dword [esp + 1]
xchg ebp, esi
pushal
lea esi, [edx + edi]
xchg dword [esp + 0x16], esi
pop esi
push dword [esp + 0xe]
pop edi
push esp
bsr bp, ax
pop edi
cld
mov si, 0x3d4e
mov dword [esp + 1], edx
lea ebp, [ebp + 0x20]
add esp, 3
btc edi, ecx
push dword [esp + 0x1c]
add esp, 0x15
bswap bp
bswap esi
xchg edi, esi
pop dword [esp + 2]
pushfd
pop word [esp + 0xb]
not si
pop di
xchg esi, ebp
mov word [esp + 3], sp
mov esi, 0x67ab6246
mov di, bp
mov si, word [esp + 5]
add esp, 8
mov ebp, dword [esp + 3]
not di
inc si
add esp, 4
bt di, sp
bsf di, ax
mov si, 0x5194
lea esi, reloc.KERNEL32.dll_LockFile
lea edi, [ecx*4]
lea esp, [esp]
add esp, 0
mov bp, word [esp]
lea esi, [ebx + 0xfa]
lea edi, [edi*4]
bswap esi
not bp
push sp
bsr bp, di
bsr ebp, ebp
stc
add edi, 0x50f35bb
push word [esp + 1]
xchg dword [esp], esi
pop bp
not bp
lea ebp, [edx*4]
xchg esi, edi
sub esp, 2
push edx
xchg bp, di
pop word [esp + 1]
bswap si
mov si, cx
pop ebp
stc
mov esi, esp
not edi
bswap di
bswap esi
lea esp, [esp + 1]
xchg word [esp], di
mov si, 0x7906
lea esp, [esp]
mov si, dx
xchg word [esp], si
mov esi, ebp
add esp, 1
rcl si, 2
bsf si, ax
lea edi, [esi - 0x45]
inc bp
bts di, sp
clc
mov si, bx
mov esi, dword [esp]
xchg esi, ebp
bswap edi
lea esp, [esp]
lea esi, [ebx*4]
mov si, sp
lea esi, reloc.KERNEL32.dll_LockFile
mov edi, 0xd826d2f
lea edi, reloc.KERNEL32.dll_LockFile
mov edi, 0x69cb0b45
inc ebp
pushal
xchg si, di
push bp
pop word [esp + 2]
bt esi, esi
bswap si
pop dword [esp + 0x14]
mov edi, 0x1d7b674a
mov si, word [esp]
pop word [esp + 0xe]
cmp edi, ebp
btr ebp, ecx
not edi
mov esi, 0x1b7e2aaa
push word [esp + 0x14]
mov di, 0x79ad
mov ebp, 0x1f703d76
neg bp
inc esi
cld
lea esp, [esp + 0x10]
mov bp, word [esp]
bsf esi, eax
pop word [esp + 1]
push edx
mov word [esp + 1], bx
lea esi, [esp - 0x88]
btr di, bp
pushal
mov esi, eax
mov byte [esp + 0x23], al
lea ebp, [esi - 0xc9]
cmc
mov di, 0xb4c
push word [esp + 9]
xchg word [esp + 0x18], bp
pop esi
mov edi, dword [esp + 0x22]
neg si
xchg bp, si
cmp bp, ax
lea esp, [esp + 0x1c]
bswap si
mov di, si
pop edi
mov ebp, dword [esp + 2]
inc ebp
lea esi, [eax + ecx]
btr si, di
bsr esi, ecx
add esp, 0xb
bswap ebp
neg esi
xchg word [esp], di
sub esp, 0x18
clc
rol si, 6
mov esi, 0x50f66a78
sub esp, 0xe
pushfd
mov di, 0x7851
ror si, cl
xchg bp, si
lea esi, [eax + ebp]
mov edi, edx
mov esi, eax
bswap di
btc esi, esi
sub esp, 2
clc
mov ebp, dword [esp]
lea esp, [esp]
mov edi, dword [esp]
lea esp, [esp + 2]
mov edi, dword [esp + 0x35]
not bp
not ebp
mov bp, di
xchg ebp, esi
bsf bp, bp
bts ebp, ebx
xchg ebp, esi
lea ebp, reloc.KERNEL32.dll_LockFile
mov esi, dword [esp + 0x3e]
bsr bp, si
bts ebp, ebx
lea ebp, [edx + 0xa0]
add bp, sp
shr ebp, 1
lea ebp, [edx + ebx]
bt bp, sp
mov ebp, dword [esp + 0x57]
lea esp, [esp + 0x70]
popfd
jb 0x67601f
push 0xe5e8c70e
jmp 0x676024
lea esp, [esp + 0xd]
pop dword [esp + 0x11]
mov dword [esp + 0x1d], eax
pop dword [esp + 0x15]
push dword [esp + 8]
mov word [esp + 0x1b], bp
pushfd
mov word [esp + 4], cx
push dword [esp + 0x1e]
mov word [esp + 0x15], di
mov byte [esp + 0xe], ah
push bp
mov byte [esp + 0x21], al
mov word [esp + 0x29], dx
push word [esp + 0x1a]
push word [esp + 0x26]
lea esp, [esp + 2]
lea esp, [esp + 0x34]
call fcn.005685dc
jmp 0x67c743
xchg dx, ax
lea edx, [esi + edi]
setp dl
lea ebx, [edi*4]
mov dx, bx
xchg word [esp], bx
not ebp
mov di, word [esp]
lea ebx, reloc.KERNEL32.dll_LockFile
mov esi, 0x653f4d16
lea eax, [ecx + esi]
xchg byte [esp], ch
lea edi, [ecx*4]
lea edx, [ebx + edi]
lea edi, [edx + 0x20]
setae bh
xchg bp, cx
xchg word [esp], ax
mov ch, 0x8c
pushfd
mov di, dx
push word [esp + 2]
xchg di, si
mov cl, byte [esp + 5]
mov bp, word [esp + 1]
mov ebp, dword [esp]
xchg word [esp + 4], cx
pop esi
lea ebx, [esi*4]
lea ecx, [ecx + ebx]
lea ebx, reloc.KERNEL32.dll_LockFile
xchg word [esp], si
mov ah, 0x29
pop ebp
lea esi, [edi*4]
mov edx, esi
lea eax, reloc.KERNEL32.dll_LockFile
lea ecx, reloc.KERNEL32.dll_LockFile
mov bh, byte [esp]
mov dx, word [esp]
lea edi, [edi*4]
mov ch, dl
mov bx, 0x7c4b
mov bp, word [esp]
xchg ch, cl
bswap esi
lea ebx, reloc.KERNEL32.dll_LockFile
lea ebp, [ebx + edi]
bswap edi
lea ebp, [edi + 0x77]
xchg bx, dx
mov al, 0x99
lea ebx, [ebx + edi]
mov esi, 0x49d20569
mov edx, 0x59461d09
lea esi, [eax*4]
lea ecx, [eax + edx]
xchg dx, ax
bswap esi
setno al
mov di, cx
mov dl, 6
mov bh, dl
pushfd
mov ecx, 0x2619c9
mov edx, 0x58374990
push esp
mov ax, word [esp + 3]
pop dx
mov byte [esp + 2], al
lea esp, [esp + 2]
lea esp, [esp + 4]
popal
pushal
pop dword [esp + 0x10]
pop dword [esp + 7]
mov dword [esp + 2], esi
pop dword [esp + 0xd]
mov byte [esp], ah
mov word [esp + 0xb], ax
lea esp, [esp + 0x14]
push 0
push di
lea esp, [esp + 1]
pushal
push dword [esp + 0x20]
pop word [esp + 0xd]
mov byte [esp + 0x1c], ah
pop word [esp + 0xa]
push word [esp + 6]
lea esp, [esp + 8]
mov byte [esp + 0xe], ch
mov word [esp + 0x18], cx
mov byte [esp + 0x18], cl
pop dword [esp + 4]
push word [esp]
push dword [esp + 0x17]
push word [esp]
pushfd
push dword [esp + 8]
push bp
pop dword [esp + 0x15]
pop word [esp + 0x1c]
lea esp, [esp + 1]
lea esp, [esp + 4]
push word [esp + 3]
mov word [esp + 3], bx
push di
push dword [esp + 0xd]
lea esp, [esp + 0x22]
pushfd
push dword [esp + 3]
lea esp, [esp + 5]
mov dword [esp], esp
mov dword [esp], edx
pop word [esp + 1]
pop word [esp]
lea esp, [esp + 1]
push word [esp + 1]
lea esp, [esp]
pushal
mov word [esp + 0x14], sp
mov byte [esp + 0xb], cl
mov dword [esp + 0xa], ebx
pop word [esp + 0x1b]
push word [esp + 0x1d]
mov word [esp + 0x19], bx
pop dword [esp + 0xc]
pop word [esp + 2]
mov byte [esp + 7], bl
mov word [esp + 0x1b], dx
lea esp, [esp + 0x1d]
push di
mov byte [esp], bl
mov word [esp], sp
mov word [esp], sp
push edi
mov byte [esp + 5], bl
mov dword [esp], esi
lea esp, [esp + 1]
pushal
mov word [esp + 0x1a], si
push dword [esp + 0x15]
push dword [esp]
pop word [esp + 8]
pop word [esp + 0x14]
mov dword [esp + 0xb], edx
pop word [esp + 0x21]
mov word [esp + 0x24], bp
mov word [esp + 4], bp
pop dword [esp + 0x18]
pop dword [esp + 0xf]
mov word [esp + 0x12], bp
pop dword [esp + 8]
mov word [esp + 9], bp
pop dword [esp + 0xf]
mov byte [esp + 7], ah
mov byte [esp + 5], bh
mov word [esp + 0x14], ax
lea esp, [esp + 0xf]
push dword [esp + 3]
lea esp, [esp + 9]
push dword [esp + 1]
pushfd
mov dword [esp + 7], edx
pop dword [esp + 3]
pop dword [esp]
mov dword [esp], eax
mov byte [esp + 2], cl
mov byte [esp + 1], cl
push word [esp]
push edi
push word [esp]
mov dword [esp + 4], ebx
mov byte [esp + 6], ah
push dword [esp]
mov dword [esp + 7], eax
push dword [esp + 7]
push dword [esp + 0xe]
pushfd
push word [esp + 9]
mov byte [esp + 0x17], cl
lea esp, [esp + 2]
lea esp, [esp + 0x1c]
push 0
push bx
mov word [esp], di
push word [esp]
mov byte [esp + 2], dh
pop word [esp]
mov byte [esp], bl
lea esp, [esp + 1]
push ax
mov word [esp], di
mov byte [esp], al
mov byte [esp + 1], ah
push word [esp + 1]
push dword [esp]
mov word [esp + 2], dx
mov byte [esp + 1], dl
mov dword [esp], eax
push dword [esp + 1]
pop dword [esp + 4]
lea esp, [esp + 3]
mov byte [esp + 2], al
mov word [esp + 1], bx
mov word [esp + 2], dx
lea esp, [esp + 4]
mov byte [esp], dl
lea esp, [esp]
mov byte [esp], dl
lea esp, [esp + 1]
mov byte [esp], bl
push ebx
mov word [esp], bx
push dword [esp + 2]
lea esp, [esp + 1]
pop word [esp + 1]
pop word [esp]
mov dword [esp], edi
pop word [esp]
mov byte [esp], cl
mov word [esp], si
push word [esp]
lea esp, [esp + 3]
lea esp, [esp]
lea esp, [esp]
lea esp, [esp]
pushfd
push dword [esp + 4]
pop word [esp + 2]
push word [esp + 6]
pop word [esp + 3]
mov dword [esp], esi
pop word [esp + 2]
push edx
push word [esp + 2]
push word [esp + 0xa]
lea esp, [esp + 9]
lea esp, [esp + 2]
lea esp, [esp]
mov word [esp], bp
lea esp, [esp + 1]
lea esp, [esp]
mov byte [esp], bl
mov byte [esp], cl
push edi
mov dword [esp], esp
lea esp, [esp + 2]
push word [esp + 1]
pop word [esp]
push word [esp + 2]
mov byte [esp + 1], bh
mov dword [esp], ebx
push dword [esp + 2]
push dword [esp + 1]
push dword [esp + 1]
push dword [esp + 5]
mov byte [esp + 6], dh
mov byte [esp + 4], bl
pop word [esp + 0xf]
pushal
push word [esp + 0x1f]
mov byte [esp + 0x1f], dh
push dword [esp + 0x11]
pop word [esp + 0x20]
mov byte [esp + 0xf], ah
push dword [esp + 0x18]
pop word [esp + 0x26]
jmp 0x678c8b
lea ebp, [esi*4]
xchg dword [esp + 0xc], ebp
dec esi
lea edi, [edx + esi]
mov esi, 0x73003113
pop dword [esp + 9]
push dword [esp + 6]
lea esp, [esp + 0xf]
xchg word [esp + 2], bp
xchg dword [esp + 1], ebp
mov edi, 0x2e9e7821
rol si, cl
xchg dword [esp + 5], edi
pop dword [esp + 1]
xchg word [esp + 1], bp
clc
bswap edi
bsr esi, eax
xchg di, si
sub esp, 0x1d
xchg bp, di
pop word [esp + 0xb]
bswap edi
lea edi, [edi*4]
mov byte [esp + 0x1e], al
lea esp, [esp + 0x15]
lea edi, reloc.KERNEL32.dll_LockFile
push word [esp + 6]
mov byte [esp + 1], al
lea ebp, reloc.KERNEL32.dll_LockFile
lea ebp, reloc.KERNEL32.dll_LockFile
shr edi, cl
pop word [esp + 7]
mov esi, dword [esp + 7]
xchg bp, si
bts si, dx
xchg bp, di
bswap bp
lea esp, [esp + 4]
mov bp, ax
mov ebp, 0x3ec1074b
pop di
push dword [esp]
mov edi, 0x3e2b0458
bt di, sp
mov bp, 0x2e9c
xchg si, di
mov si, word [esp + 0xa]
mov ebp, dword [esp + 7]
pop dword [esp + 2]
adc bp, di
xor bp, 0x3b77
clc
mov esi, dword [esp + 2]
lea edi, [ebx + ebp]
mov ebp, ecx
mov si, 0x551d
sub esp, 0xd
mov bp, dx
pop word [esp + 7]
lea edi, [ebp + 0xe6]
pop word [esp + 7]
push dword [esp + 0xa]
dec si
cld
mov esi, dword [esp + 1]
lea edi, [edx*4]
rcr si, cl
lea ebp, [ecx*4]
pop dword [esp + 7]
mov byte [esp + 6], ah
lea ebp, [eax*4]
xchg dword [esp], ebp
pop word [esp + 0xb]
bswap bp
pop di
cmp ebp, 0x357922f1
xchg dword [esp + 5], ebp
lea esi, reloc.KERNEL32.dll_LockFile
xchg word [esp + 3], si
cmc
sub esp, 9
xchg dword [esp + 5], ebp
bsr edi, esi
xchg dword [esp + 6], esi
clc
pop dword [esp + 0xd]
push dword [esp + 6]
rol bp, 3
cmc
add esp, 8
pop esi
push word [esp + 2]
lea esi, [ebp*4]
cld
mov word [esp + 9], cx
shl ebp, 6
shr di, 0xe
pop dword [esp + 1]
lea esi, [eax + edx]
mov si, bp
mov bp, si
clc
clc
neg bp
neg si
xchg ebp, esi
lea ebp, reloc.KERNEL32.dll_LockFile
bswap ebp
mov esi, 0x607233bd
cmc
mov si, ax
xchg word [esp + 5], si
mov esi, 0x4f8105f1
mov esi, 0x29266918
cld
lea ebp, [ecx + 0xc]
bswap ebp
mov byte [esp + 6], cl
lea esp, [esp + 2]
mov si, 0x10ad
lea esp, [esp + 2]
mov di, 0x14c8
pop word [esp]
not si
xchg bp, di
push eax
mov dword [esp], esi
not di
pushfd
mov edi, dword [esp + 8]
bsf si, cx
mov byte [esp], dh
xchg bp, si
bsf si, dx
push word [esp + 2]
rcl esi, cl
sub esp, 9
lea esi, [eax + ebx]
mov esi, dword [esp + 0xf]
mov esi, dword [esp + 0xa]
lea esi, [edx + ebx]
btr esi, ebx
lea esp, [esp + 8]
xchg di, bp
btc di, si
mov word [esp + 2], di
pop dword [esp + 4]
mov si, bp
bswap di
xchg dword [esp], esi
mov esi, eax
pop dword [esp]
bswap bp
lea edi, reloc.KERNEL32.dll_LockFile
xchg word [esp + 2], bp
mov si, 0x48ec
pushal
xchg word [esp + 5], si
pop di
sub esp, 0xf
mov si, 0x254
mov esi, 0x6a60366c
xchg word [esp + 0xc], si
mov ebp, dword [esp + 0x11]
mov bp, 0x75dd
lea esi, [esp + esi]
bsf di, di
pop word [esp + 0x2b]
neg ebp
not bp
mov edi, dword [esp + 0x2e]
xchg word [esp + 0x27], si
lea esp, [esp + 3]
pop edi
inc esi
xchg word [esp + 0x25], di
shr di, 0xe
mov word [esp + 0x15], bp
inc ebp
bswap esi
push word [esp + 0x1b]
lea edi, [edi*4]
bswap si
pop dword [esp + 7]
xchg esi, ebp
pop word [esp + 1]
push dword [esp + 6]
xchg edi, esi
mov si, dx
inc di
add esp, 0x15
bswap esi
pop word [esp + 0xc]
bt edi, ebx
cmp ebp, edx
sub esp, 0xb
pop di
mov esi, 0x48461364
pop word [esp + 0x10]
pop word [esp + 0x12]
mov edi, 0x5259016d
mov di, 0x5c9e
xchg si, bp
xchg word [esp + 9], si
mov byte [esp + 9], bl
mov byte [esp + 0xd], dh
bswap bp
sub esp, 0x14
inc edi
mov esi, dword [esp + 7]
rcr esi, cl
rcr esi, 8
xchg word [esp + 0x17], si
push word [esp + 0x26]
pop word [esp + 4]
mov esi, esp
xchg ebp, edi
lea esi, [ebx + 0x44]
lea esi, [ebx*4]
add esp, 0xb
mov dword [esp + 5], edi
push word [esp + 0x15]
bswap esi
cld
pop dword [esp + 1]
mov esi, 0x452d676a
dec ebp
mov dword [esp + 0x17], esi
neg si
bsr si, di
lea esi, [edx + ebx]
mov dword [esp + 0xd], ebp
lea edi, reloc.KERNEL32.dll_LockFile
mov word [esp + 0x1b], sp
lea esi, [ebp*4]
pop di
pushfd
lea esi, [esp - 0xd6]
push dword [esp + 0x1f]
pop ebp
lea esp, [esp + 0xa]
lea edi, [edx*4]
lea esi, reloc.KERNEL32.dll_LockFile
mov si, di
bswap si
pop word [esp + 0x10]
sub esp, 0xa
pop si
mov bp, word [esp + 0x11]
bsr ebp, edx
mov esi, eax
mov byte [esp + 0xc], ah
lea esp, [esp + 0x15]
xchg ebp, esi
mov edi, 0x444e2161
pop esi
lea esp, [esp]
lea ebp, [esi*4]
rol si, cl
bswap esi
neg si
mov di, word [esp]
push word [esp]
neg edi
add esp, 4
lea esi, [edi*4]
bswap ebp
lea ebp, [ebp - 0xe8]
ror ebp, cl
lea edi, [ebx*4]
mov bp, bx
rcl si, cl
btr si, di
mov si, bp
bswap edi
mov bp, dx
cld
mov byte [esp], bl
rol si, 0xa
mov esi, dword [esp]
mov esi, eax
mov edi, dword [esp]
mov si, word [esp]
mov edi, dword [esp]
not edi
not esi
lea esp, [esp]
mov edi, dword [esp]
lea esp, [esp]
push cx
push word [esp]
mov byte [esp + 3], dl
pop bp
rcr ebp, 0
xchg ebp, edi
cmp di, 0x7d66
stc
bswap edi
cld
mov di, word [esp + 1]
btr si, si
neg bp
pop si
lea esi, reloc.KERNEL32.dll_LockFile
bswap edi
mov esi, dword [esp]
lea esi, [esp - 0x4b]
lea esp, [esp]
bsr di, bx
mov si, 0x53e3
lea edi, [eax + esi]
btr bp, cx
add esp, 0
xchg esi, ebp
lea edi, [ecx*4]
mov esi, dword [esp]
mov byte [esp], bl
sub esp, 0x19
lea esp, [esp + 0x11]
sub esp, 0x1c
bswap si
mov ebp, 0x530a0a82
xchg si, di
mov dword [esp + 0xd], edi
mov bp, word [esp + 8]
pop dword [esp + 0x1a]
neg ebp
pop word [esp + 0xa]
mov bp, sp
sub edi, 0x4cd57e7d
clc
pop word [esp + 0x18]
pop dword [esp + 7]
xchg dword [esp], esi
mov si, 0x7611
xchg dword [esp + 9], esi
clc
add esp, 7
not edi
xchg ebp, esi
mov esi, dword [esp + 0xe]
add esp, 0xf
sub esp, 0
bts ebp, eax
lea esi, [esi + 0xc7]
mov edi, 0x6c281cf5
pop di
btc bp, sp
clc
neg esi
shr esi, 0xf
lea edi, [esp - 0xb3]
dec esi
pushal
xchg dword [esp + 0x1b], esi
push word [esp + 0x14]
lea ebp, [eax*4]
lea esi, [ebx - 0x24]
lea esp, [esp + 0x17]
xchg dword [esp + 7], esi
bswap esi
clc
mov di, ax
xchg bp, si
lea esp, [esp + 1]
pop word [esp + 1]
push edi
mov esi, 0x5cca179c
sub esp, 0x19
add esp, 0x21
bswap ebp
mov si, 0x4516
lea ebp, reloc.KERNEL32.dll_LockFile
sub esp, 0x15
lea edi, [ebp*4]
sub esp, 3
bswap esi
mov dword [esp + 7], edx
lea esp, [esp + 3]
bt edi, edx
mov esi, dword [esp + 8]
lea ebp, reloc.KERNEL32.dll_LockFile
lea esi, [eax + ebp]
mov si, 0x69a1
add esp, 0x12
clc
bswap esi
mov edi, 0x359d0963
bsr edi, edx
mov word [esp + 1], ax
neg ebp
xchg word [esp + 2], bp
cmc
neg edi
lea esi, [eax + edi]
xchg dword [esp + 1], edi
mov ebp, edi
xchg di, si
lea edi, reloc.KERNEL32.dll_LockFile
bswap si
lea ebp, reloc.KERNEL32.dll_LockFile
pop dword [esp]
mov bp, si
lea esi, [esi + esi]
mov dword [esp], eax
push dword [esp + 3]
clc
lea esi, [esi + edi]
mov dword [esp], edi
pop dword [esp]
lea esi, [edx*4]
not si
pop word [esp]
push word [esp + 1]
push dword [esp + 3]
pop si
mov si, word [esp]
mov dword [esp], edx
mov ebp, dword [esp + 3]
adc si, 0x17e9
pop ebp
mov bp, word [esp + 1]
mov esi, ebx
push dx
mov edi, esp
sub esp, 0x11
bt di, di
add esp, 0x11
push word [esp]
xchg dword [esp], esi
lea esi, [edx*4]
bswap di
bsf di, bx
bsr si, sp
btc si, sp
pop word [esp + 1]
pop ebp
mov di, 0x61a
mov esi, esp
mov si, 0x2b47
bswap edi
btr ebp, edx
not edi
mov di, word [esp]
lea edi, [eax + ebx]
mov bp, word [esp]
pushfd
mov esi, dword [esp + 2]
sub esp, 7
mov esi, ebx
mov ebp, 0x3987097c
cmc
inc esi
pop ebp
push word [esp + 4]
bts ebp, esi
xchg word [esp + 5], si
xchg esi, edi
mov di, ax
bsr di, ax
push dword [esp + 8]
mov esi, dword [esp + 1]
mov bp, cx
bswap bp
rcl si, 0xd
mov byte [esp + 1], dh
pop dword [esp + 2]
bswap esi
xchg dword [esp + 4], ebp
rcl si, 0xc
bswap esi
mov di, word [esp + 2]
mov word [esp + 5], bp
cld
xchg edi, esi
push word [esp + 2]
pop dword [esp]
mov edi, edx
lea esi, [edi*4]
xor esi, 0x34bd6804
bsr si, dx
push dword [esp + 4]
bswap di
mov byte [esp + 2], bl
dec esi
sub esp, 0x14
push word [esp + 1]
rcr si, 0xa
lea esi, [edx + ebp]
push dword [esp + 0xd]
push dword [esp + 0xc]
mov word [esp + 8], dx
mov word [esp + 0x24], di
mov byte [esp + 0x20], al
push eax
pop dword [esp + 0x14]
lea ebp, [edx + ebx]
mov ebp, dword [esp]
mov byte [esp + 0x1f], ch
push word [esp + 0x21]
mov word [esp + 0x18], bx
add esp, 0xd
xchg dword [esp + 0x15], ebp
push dword [esp + 6]
mov byte [esp + 0x18], ch
pop word [esp + 0x11]
mov dword [esp], edi
lea esi, [edx + edi]
lea ebp, [ecx + ecx]
xchg dword [esp + 0x19], esi
mov di, 0xa94
bt si, ax
push word [esp + 0x12]
push word [esp + 0xe]
xchg dword [esp + 0x18], ebp
lea ebp, [ecx + ebp]
mov di, word [esp + 0x1b]
mov di, 0x473e
not esi
pop word [esp + 0x11]
adc edi, eax
ror esi, cl
lea ebp, [ebx + ebp]
mov dword [esp + 0xa], esi
cmc
pop word [esp + 0x15]
btc bp, si
bswap esi
mov dword [esp + 0xd], esi
mov word [esp + 0x15], cx
pop bp
mov di, 0x26d8
mov esi, dword [esp + 6]
lea esp, [esp + 0xe]
xchg dword [esp + 5], ebp
lea edi, [esp + eax]
bswap di
mov word [esp], di
mov edi, dword [esp + 0xf]
clc
pop dword [esp]
mov byte [esp + 5], dh
add esp, 7
mov edi, dword [esp + 4]
mov esi, 0x28291fc1
pop esi
lea ebp, [ebx*4]
mov si, word [esp]
btr esi, ecx
bsf si, ax
bswap si
bsr esi, ebx
cld
mov esi, 0x13ba4c27
mov esi, ebp
sub esp, 0xd
mov word [esp + 8], cx
not edi
mov bp, bx
xor ebp, 0x2e276f1c
mov bp, word [esp + 8]
lea esi, reloc.KERNEL32.dll_LockFile
bswap edi
mov word [esp + 7], bp
xchg esi, edi
sub esp, 0x18
bswap si
add esp, 0x1b
mov esi, dword [esp + 7]
bt di, cx
mov di, sp
xchg word [esp + 1], bp
mov bp, 0x6c3f
lea esp, [esp + 5]
cmc
inc di
mov esi, dword [esp + 4]
bswap esi
mov si, cx
sub esp, 9
mov dword [esp + 6], edi
mov dword [esp], ecx
mov bp, 0x2776
xchg dword [esp], esi
lea edi, [ecx + 0x62]
lea ebp, reloc.KERNEL32.dll_LockFile
pop esi
mov si, 0x351a
mov byte [esp + 1], dh
xchg dword [esp + 4], ebp
sub esp, 0x1e
neg si
sub esp, 1
pop dword [esp + 4]
mov byte [esp + 1], bl
pushal
not si
rcr si, cl
not ebp
mov si, cx
mov si, word [esp + 0x26]
xchg bp, di
lea esi, [eax*4]
pop si
xchg word [esp + 0xd], di
xchg si, di
rol edi, cl
lea ebp, [eax + 0xad]
neg si
sub esp, 0
push dword [esp + 0x3f]
pop si
pop word [esp + 0x32]
rol edi, cl
btr di, ax
clc
pushfd
mov si, 0x1ffb
pushal
lea esp, [esp + 0x68]
mov ebp, ebx
not esi
lea esi, reloc.KERNEL32.dll_LockFile
mov si, 0x3ccf
dec ebp
bts di, sp
xchg si, di
sub esp, 6
pop word [esp + 1]
bswap ebp
clc
mov esi, 0x1e221482
mov word [esp + 1], dx
bsr esi, edx
add esp, 0
bswap ebp
mov edi, 0x46e33dc1
bswap esi
mov byte [esp + 2], bh
mov word [esp], si
mov esi, dword [esp]
push word [esp + 1]
mov si, 0x40df
sub esp, 0x1b
bswap bp
push dword [esp + 0x16]
xchg word [esp + 0xd], si
add esp, 3
neg esi
mov bp, word [esp + 0x1b]
lea esi, [edi*4]
mov esi, dword [esp + 0x16]
mov word [esp + 4], di
mov si, word [esp + 0x20]
mov esi, 0x6f5a51dd
lea esi, [eax + edi]
mov bp, 0x4020
pop dword [esp + 0xb]
bswap bp
push dword [esp + 0x17]
xchg word [esp + 0xc], si
sub esp, 0x12
bswap ebp
mov si, word [esp + 0x28]
mov ebp, ecx
lea esi, [esp + esi]
bswap bp
push sp
mov dword [esp + 0x20], ecx
sub esp, 0x1a
mov byte [esp + 0x30], bl
xchg esi, ebp
xchg word [esp + 0x2e], si
mov esi, dword [esp + 0xa]
stc
xchg word [esp + 0x16], si
mov byte [esp + 7], cl
mov edi, 0x2a5f2c0b
pop dword [esp + 0x44]
lea esi, [ecx + ecx]
add esp, 0x31
xchg dword [esp + 0xc], esi
pushfd
xchg word [esp + 0x13], si
push word [esp + 7]
push esi
push cx
add esp, 3
lea edi, reloc.KERNEL32.dll_LockFile
xchg word [esp + 0xf], bp
not esi
pop ebp
mov si, 0x6dd7
mov dword [esp + 0xc], esi
mov ebp, dword [esp + 0x12]
xchg word [esp + 0x1a], bp
xchg bp, di
push word [esp + 0x14]
mov dword [esp + 2], edi
mov esi, ecx
xchg di, bp
neg edi
push word [esp + 0x13]
lea edi, reloc.KERNEL32.dll_LockFile
pop word [esp + 0x1e]
push dword [esp + 0x15]
bswap esi
bswap di
mov bp, word [esp + 0x18]
mov byte [esp + 6], bh
mov si, 0x7f42
cld
xchg si, bp
sub esp, 0x12
stc
pop word [esp + 0x27]
xchg dword [esp + 0x15], edi
adc bp, 0x4ec5
mov byte [esp + 4], al
sub esp, 0xf
lea esp, [esp + 0xe]
mov byte [esp + 0x23], bl
xchg dword [esp + 5], ebp
mov ebp, 0x5b5f3e9f
xchg si, di
mov si, word [esp + 0x10]
shr si, cl
dec bp
neg bp
btr di, dx
inc edi
push di
mov si, word [esp + 5]
btr ebp, ecx
push dword [esp + 0x2a]
pop bp
lea ebp, [edx + edi]
xchg dword [esp + 9], edi
bsr esi, ecx
mov byte [esp + 0x1f], dh
mov esi, edi
lea esi, [ebx + esi]
mov word [esp + 0x14], si
lea esp, [esp + 0x23]
lea esi, [esp + ecx]
lea esp, [esp + 2]
clc
lea esp, [esp + 0xb]
lea esp, [esp + 8]
mov bp, word [esp + 1]
mov edi, 0x15820663
mov byte [esp], ch
sub esp, 3
mov edi, 0x37b057fb
neg ebp
xchg ebp, edi
mov esi, edx
sub esp, 0x19
stc
push dword [esp + 0x1c]
mov ebp, dword [esp + 3]
lea edi, [ecx + edi]
mov di, 0x2e48
mov si, word [esp + 0x17]
add esp, 0x1b
inc esi
mov word [esp + 3], dx
sub esp, 1
xchg esi, ebp
lea esi, [ebx*4]
mov word [esp], di
push dword [esp + 7]
push dword [esp + 6]
mov esi, dword [esp + 7]
bswap edi
cmc
bswap si
cld
clc
pop ebp
mov si, bp
pop si
mov si, 0x2714
sub esp, 1
sub esp, 0x1e
xchg ebp, esi
bsf edi, edx
bswap esi
push dword [esp + 5]
push dword [esp]
push edi
mov bp, word [esp + 0x32]
add esp, 0xc
or di, 0x5cea
inc bp
lea esi, [ebx + ebx]
pop word [esp + 4]
push dword [esp + 0xe]
mov si, sp
pop word [esp + 0x12]
mov dword [esp + 0x15], ebx
mov byte [esp + 0x16], dh
neg ebp
mov edi, ebx
dec bp
push dword [esp + 0x1a]
xchg bp, di
sub esp, 0x1d
cld
xchg esi, edi
dec esi
mov word [esp + 0x2d], si
mov edi, 0xb2250c2
stc
xchg dword [esp + 5], edi
push ax
push dword [esp]
lea esp, [esp + 0x51]
bt si, di
lea esi, [edx - 0xb3]
mov edi, ebp
mov ebp, dword [esp]
sub esp, 9
bsf di, di
lea esi, [ebx + esi]
mov di, 0xd5c
pop dword [esp]
xchg edi, esi
rcr di, 0xd
clc
xchg esi, ebp
mov ebp, esi
push word [esp + 4]
xchg word [esp + 3], si
mov esi, ebx
mov ebp, 0x59917ebe
mov ebp, dword [esp + 2]
pop edi
mov edi, dword [esp]
bts si, ax
sub esp, 7
mov edi, dword [esp + 1]
sub esp, 0x1a
bswap si
mov ebp, dword [esp]
cmc
stc
pop esi
mov dword [esp + 0xd], ebx
pop di
xchg si, bp
pop si
dec edi
mov esi, edx
add esp, 0
mov dword [esp + 0x17], edi
neg di
lea ebp, [esp + 0x2b]
mov esi, dword [esp + 6]
inc esi
add esp, 0xc
mov esi, esp
mov byte [esp], ch
xchg word [esp + 4], di
push dword [esp + 5]
mov dword [esp + 0xf], eax
mov si, 0x51f0
mov word [esp + 0xc], dx
bswap bp
push word [esp + 0xa]
push dword [esp + 6]
mov di, word [esp + 4]
pop si
mov di, ax
sub esp, 0x14
xchg word [esp + 0xd], si
pop si
lea ebp, [edx + ebp]
mov dword [esp + 0x1b], ecx
mov edi, ebx
mov esi, 0x693c4bb5
lea esi, [ecx - 0xc5]
push dword [esp + 0xc]
mov ebp, dword [esp + 0x2d]
pop dword [esp + 0x24]
pop word [esp + 4]
bswap ebp
push word [esp + 4]
mov dword [esp + 3], esi
cmc
pushfd
pop word [esp + 0x1d]
push dword [esp + 0x1a]
dec esi
bts si, dx
bsr ebp, ecx
mov word [esp + 0x24], ax
xchg word [esp + 0x2b], si
rol esi, cl
mov di, cx
cmc
not esi
btr esi, eax
mov esi, 0x4e87094d
neg ebp
add esp, 0x1c
neg si
xchg ebp, edi
xchg di, bp
bt esi, eax
pop dword [esp + 0xb]
bsf esi, edi
mov ebp, ecx
mov byte [esp + 8], bl
push dword [esp + 7]
not si
mov word [esp + 0xf], di
stc
mov edi, esi
mov ebp, 0x66905859
push word [esp + 1]
bswap di
bswap edi
xor di, 0x6f6f
push word [esp + 3]
pop esi
not esi
mov ebp, 0x65b3510f
xchg di, bp
lea ebp, [esp + 0x6b]
push word [esp + 6]
and si, sp
push dword [esp]
shl esi, cl
pop bp
mov si, word [esp + 6]
mov ebp, dword [esp + 0xa]
xchg dword [esp + 0xc], esi
lea esp, [esp + 0x12]
lea esi, reloc.KERNEL32.dll_LockFile
clc
lea edi, [esi - 0x7e]
mov bp, di
bts ebp, esi
push word [esp + 3]
push word [esp + 7]
pop esi
bts ebp, esp
pop di
mov dword [esp], esp
push si
lea ebp, [ebp*4]
pop esi
bswap di
btc bp, cx
mov si, 0x397b
mov di, 0x3671
lea esp, [esp]
bsr esi, edx
lea esp, [esp + 1]
lea esi, [ecx + 0x21]
mov edi, ebx
add esp, 0
sub esp, 0x1d
sub esp, 0xa
not bp
xchg dword [esp + 0xd], ebp
mov dword [esp + 0xe], ebx
push word [esp + 0xe]
add esp, 1
xchg di, si
xchg dword [esp], esi
mov di, 0x6a67
mov edi, dword [esp + 4]
pop dword [esp + 0x11]
mov bp, 0x77c2
pop ebp
pop dword [esp + 0x17]
btc si, di
bsf ebp, edx
lea esi, [eax + ebx]
and edi, 0x2c210dd9
xchg word [esp + 0x14], si
lea esi, reloc.KERNEL32.dll_LockFile
lea esi, [edx + edi]
lea ebp, [edi*4]
pop bp
pop dword [esp + 8]
xchg ebp, esi
mov byte [esp + 6], bh
pop dword [esp + 0xd]
lea esp, [esp + 0x11]
push word [esp]
pop word [esp]
rcl di, cl
lea esi, [ecx*4]
neg ebp
jmp 0x67626a
call 0x67c748
add dword [esp], reloc.KERNEL32.dll_LockFile
jmp 0x67c788
call 0x67c756
pop eax
jmp 0x67c78f
call 0x563b79
jmp 0x67c751
sub eax, 0x67c756
mov ebx, eax
add eax, 0x562529
add ebx, 0x4a02d0
mov dword [ebx], eax
popal
jmp 0x61d5b5
mov dword [esp + 0x10], ebx
push dword [esp + 9]
pop dword [esp + 1]
pop word [esp + 8]
jmp 0x67c81b
push word [esp + 1]
pushal
mov byte [esp + 0x18], ah
mov byte [esp + 0x23], bl
jmp 0x67c904
pop word [esp + 0x19]
push word [esp + 4]
mov word [esp + 0x18], di
mov dword [esp + 5], esi
mov byte [esp + 2], bh
mov dword [esp + 0xc], edi
pop word [esp + 7]
mov dword [esp + 0x18], ecx
push edx
jmp 0x67c7ff
call 0x67c870
push ebx
popal
outsb dx, byte gs:[esi]
imul ebp, dword [bp + 0x65], 0x69685320
insb byte es:[edi], dx
outsb dx, byte gs:[esi]
and byte [esi + 0x32], dh
xor byte cs:[esi], ch
cmp byte [esi], ch
xor byte [eax], al
lea esp, [esp + 4]
push ebx
lea esp, [esp + 2]
push word [esp]
pushfd
push word [esp + 5]
push eax
mov byte [esp + 6], dl
mov byte [esp + 9], dh
lea esp, [esp + 0xd]
mov byte [esp], ah
lea esp, [esp]
lea esp, [esp + 1]
push eax
pushal
jmp 0x67c7cc
mov word [esp], ax
push word [esp]
push word [esp + 3]
mov word [esp + 1], bp
mov word [esp + 3], dx
pushfd
pop dword [esp]
jmp 0x67c9c8
pop word [esp + 0x18]
pop dword [esp + 0xa]
mov dword [esp + 0x40], esp
pushfd
pop word [esp]
lea esp, [esp]
jmp 0x67c8b6
lea esp, [esp + 0x23]
push word [esp + 1]
push dword [esp + 1]
lea esp, [esp + 1]
mov dword [esp + 0x1c], edx
pushal
push esi
mov word [esp + 0xe], bx
mov byte [esp + 3], cl
pop word [esp + 0x1a]
push dword [esp + 0x11]
mov dword [esp + 9], ebx
pop word [esp + 0x1e]
lea esp, [esp + 0x13]
lea esp, [esp + 1]
mov dword [esp + 0x28], ebx
pushal
mov word [esp + 0x10], bp
push word [esp + 0x18]
jmp 0x67c8e0
pop dword [esp + 0x14]
mov byte [esp + 8], cl
push ecx
pop word [esp + 0x17]
push word [esp + 0xa]
mov word [esp + 0x1c], cx
mov dword [esp + 0x60], esi
push di
lea esp, [esp + 1]
lea esp, [esp]
push edx
pushfd
pushal
jmp 0x67ca7f
lea esp, [esp + 0x15]
lea esp, [esp + 7]
lea esp, [esp]
mov word [esp], ax
pop word [esp]
pushal
push word [esp + 7]
jmp 0x67c96b
mov word [esp + 3], dx
lea esp, [esp + 2]
mov dword [esp + 0x40], ebp
pushal
jmp 0x67c9a2
movzx ebx, word [eax + 0x3c]
add ebx, eax
cmp word [ebx], 0x4550
je 0x675b9a
jne 0x67ca4c
rcl dword [edx - 0x40], 0xa7
push edx
mov ebx, 0xd6af464
cld
pop ebx
mul dword [esi - 0xc]
xchg ebx, eax
outsb dx, byte [esi]
lahf
out 0xb0, al
shr eax, 1
add byte [eax], al
add byte [eax], al
call 0x67ca26
pop eax
xor ax, ax
cmp word [eax], 0x5a4d
jmp 0x67ca4a
mov eax, dword [eax + 0xc]
mov eax, dword [eax + 0x1c]
mov eax, dword [eax]
mov eax, dword [eax + 8]
push eax
jmp 0x67ca21
je 0x67c9f9
sub eax, 0x10000
jmp 0x67ca2a
mov dword [esp + 0x12], ebx
push esp
push di
push dword [esp + 8]
pop word [esp + 2]
push dword [esp + 0x23]
push dword [esp + 0xe]
lea esp, [esp + 1]
mov dword [esp + 0x94], edi
lea esp, [esp + 0x94]
mov eax, dword fs:[0x30]
jmp 0x67ca3c