Function at 0x1000d6af
Capabilities:
Contain obfuscated stackstrings
Encode data using xor

Disassembly:
push ebx
mov ebx, esp
sub esp, 8
and esp, 0xfffffff8
add esp, 4
push ebp
mov ebp, dword [ebx + 4]
mov dword [esp + 4], ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x100a910f
mov eax, dword fs:[0]
push eax
push ebx
sub esp, 0xc0
mov eax, dword [0x100c90c0]
xor eax, ebp
mov dword [ebp - 0x14], eax
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov edx, ecx
mov dword [ebp - 0x98], edx
mov edi, dword [edx + 8]
mov eax, dword [edx + 0x14]
mov ecx, dword [edx + 0x10]
sub eax, ecx
lea esi, [edi + 1]
cmp esi, eax
jbe 0x1000d1ef
xor al, al
jmp 0x1000d1f2
mov al, byte [ecx + edi]
movzx eax, al
add eax, 0xffffff5d
mov dword [edx + 8], esi
cmp eax, 9
ja case.0x1000d206.164
jmp dword [eax*4 + 0x1000dc34]
xorps xmm0, xmm0
mov dword [ebp - 0x1c], 0
movups xmmword [ebp - 0x2c], xmm0
mov dword [ebp - 0x18], 0xf
mov byte [ebp - 0x2c], 0
lea eax, [ebp - 0x2c]
mov dword [ebp - 4], 0
push eax
mov ecx, edx
call fcn.10010160
cmp dword [ebp - 0x18], 0xf
lea esi, [ebp - 0x2c]
push 1
cmova esi, dword [ebp - 0x2c]
mov ch, 0xd
push 0
mov al, 0x62
mov byte [ebp - 0x57], 0
mov ah, 0x63
mov byte [ebp - 0x5c], ch
xor al, ch
mov byte [ebp - 0x57], 0
xor ah, ch
mov byte [ebp - 0x5b], al
push 0
mov byte [ebp - 0x58], ah
mov cl, 0x7d
push esi
lea eax, [ebp - 0x5b]
mov dl, 0x68
push eax
xor cl, ch
xor dl, ch
push 0
mov byte [ebp - 0x5a], cl
mov byte [ebp - 0x59], dl
call dword [sym.imp.SHELL32.dll_ShellExecuteA]
mov ecx, dword [ebp - 0x18]
cmp ecx, 0xf
jbe case.0x1000d206.164
mov edx, dword [ebp - 0x2c]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x1000db9c
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x1000dc1f
jmp 0x1000db9c
mov ecx, edx
call fcn.10010220
jmp case.0x1000d206.164
mov edi, dword [0x100ce4f4]
test edi, edi
je case.0x1000d206.164
lea eax, [esi + 1]
mov dword [ebp - 0x4c], eax
mov eax, dword [edx + 0x14]
sub eax, ecx
cmp dword [ebp - 0x4c], eax
jbe 0x1000d2f0
mov ecx, dword [ebp - 0x4c]
xor al, al
mov dword [edx + 8], ecx
mov byte [edi + 2], al
jmp case.0x1000d206.164
mov al, byte [esi + ecx]
mov ecx, dword [ebp - 0x4c]
mov dword [edx + 8], ecx
mov byte [edi + 2], al
jmp case.0x1000d206.164
mov edi, dword [0x100ce4f4]
test edi, edi
je case.0x1000d206.164
lea eax, [esi + 1]
mov dword [ebp - 0x4c], eax
mov eax, dword [edx + 0x14]
sub eax, ecx
cmp dword [ebp - 0x4c], eax
jbe 0x1000d32f
mov ecx, dword [ebp - 0x4c]
xor al, al
mov dword [edx + 8], ecx
mov byte [edi + 3], al
jmp case.0x1000d206.164
mov al, byte [esi + ecx]
mov ecx, dword [ebp - 0x4c]
mov dword [edx + 8], ecx
mov byte [edi + 3], al
jmp case.0x1000d206.164
mov edi, dword [0x100ce4f4]
test edi, edi
je case.0x1000d206.164
lea eax, [esi + 1]
mov dword [ebp - 0x4c], eax
mov eax, dword [edx + 0x14]
sub eax, ecx
cmp dword [ebp - 0x4c], eax
jbe 0x1000d36e
mov ecx, dword [ebp - 0x4c]
xor al, al
mov dword [edx + 8], ecx
mov byte [edi + 1], al
jmp case.0x1000d206.164
mov al, byte [esi + ecx]
mov ecx, dword [ebp - 0x4c]
mov dword [edx + 8], ecx
mov byte [edi + 1], al
jmp case.0x1000d206.164
xorps xmm0, xmm0
mov dword [ebp - 0x1c], 0
mov edi, 0xf
movups xmmword [ebp - 0x2c], xmm0
mov dword [ebp - 0x18], edi
mov byte [ebp - 0x2c], 0
lea eax, [esi + 2]
mov dword [ebp - 4], 1
mov dword [ebp - 0x4c], eax
mov eax, dword [edx + 0x14]
sub eax, ecx
cmp dword [ebp - 0x4c], eax
jbe 0x1000d3bb
mov eax, dword [ebp - 0x4c]
mov dword [edx + 8], eax
jmp 0x1000d679
movzx ecx, word [esi + ecx]
lea eax, [esi + 2]
mov esi, 0x3e8
mov dword [edx + 8], eax
mov eax, ecx
cmp cx, si
jbe 0x1000d3d6
mov dword [ebp - 0x64], esi
jmp 0x1000d3e4
mov dword [ebp - 0x64], ecx
xor ecx, ecx
cmp cx, ax
jae 0x1000d679
mov dword [ebp - 0x60], 0
nop dword [eax + eax]
mov edi, dword [edx + 8]
mov eax, dword [edx + 0x14]
mov ecx, dword [edx + 0x10]
sub eax, ecx
lea esi, [edi + 2]
cmp esi, eax
jbe 0x1000d406
xor edi, edi
jmp 0x1000d40a
movzx edi, word [ecx + edi]
movzx eax, di
mov dword [ebp - 0x94], eax
lea eax, [esi + 1]
mov dword [ebp - 0x50], eax
mov dword [edx + 8], esi
mov eax, dword [edx + 0x14]
sub eax, ecx
cmp dword [ebp - 0x50], eax
jbe 0x1000d42c
mov byte [ebp - 0x45], 0
jmp 0x1000d432
mov al, byte [ecx + esi]
mov byte [ebp - 0x45], al
mov eax, dword [ebp - 0x50]
mov ecx, edx
mov dword [edx + 8], eax
lea eax, [ebp - 0x2c]
push eax
call fcn.10010160
mov ecx, eax
mov eax, dword [ecx + 8]
mov edx, dword [ecx + 0x10]
mov dword [ebp - 0x50], eax
lea esi, [eax + 1]
mov eax, dword [ecx + 0x14]
sub eax, edx
cmp esi, eax
jbe 0x1000d463
mov byte [ebp - 0x90], 0
jmp 0x1000d46f
mov eax, dword [ebp - 0x50]
mov al, byte [edx + eax]
mov byte [ebp - 0x90], al
mov dword [ecx + 8], esi
inc esi
mov eax, dword [ecx + 0x14]
sub eax, edx
cmp esi, eax
jbe 0x1000d482
mov byte [ebp - 0x4c], 0
jmp 0x1000d48c
mov eax, dword [ebp - 0x50]
mov al, byte [eax + edx + 1]
mov byte [ebp - 0x4c], al
lea eax, [esi + 1]
mov dword [ecx + 8], esi
mov dword [ebp - 0x50], eax
mov eax, dword [ecx + 0x14]
sub eax, edx
cmp dword [ebp - 0x50], eax
jbe 0x1000d4a5
mov byte [ebp - 0x68], 0
jmp 0x1000d4ab
mov al, byte [esi + edx]
mov byte [ebp - 0x68], al
mov eax, dword [ebp - 0x50]
mov dword [ecx + 8], eax
mov eax, dword [ebp - 0x94]
movzx esi, ax
mov edx, esi
call fcn.1000dde0
cmp byte [ebp - 0x45], 1
jne 0x1000d5be
test eax, eax
jne 0x1000d65f
push 0x1c
call fcn.100859a3
mov esi, eax
add esp, 4
mov dword [ebp - 0xb4], esi
push dword [ebp - 0x68]
mov edi, dword [ebp - 0x90]
lea eax, [ebp - 0x2c]
push dword [ebp - 0x4c]
mov byte [ebp - 4], 2
push edi
sub esp, 0x18
mov ecx, esp
push eax
call fcn.10005d20
mov ecx, esi
call fcn.10010080
push 0x1c
mov dword [ebp - 0x50], eax
mov byte [ebp - 4], 1
call fcn.100859a3
mov esi, eax
add esp, 4
mov dword [ebp - 0xb8], esi
push dword [ebp - 0x68]
lea eax, [ebp - 0x2c]
mov byte [ebp - 4], 3
push dword [ebp - 0x4c]
push edi
sub esp, 0x18
mov ecx, esp
push eax
call fcn.10005d20
mov ecx, esi
call fcn.10010080
push eax
mov eax, dword [ebp - 0x94]
movzx edx, ax
mov byte [ebp - 4], 1
call fcn.1000deb0
test al, al
jne 0x1000d65f
mov esi, dword [ebp - 0x50]
test esi, esi
je 0x1000d65f
mov ecx, dword [esi + 0x14]
cmp ecx, 0xf
jbe 0x1000d59d
mov eax, dword [esi]
inc ecx
cmp ecx, 0x1000
jb 0x1000d593
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x1000dc24
mov eax, edx
push ecx
push eax
call fcn.100859f6
add esp, 8
push 0x1c
push esi
mov dword [esi + 0x10], 0
mov dword [esi + 0x14], 0xf
mov byte [esi], 0
call fcn.100859f6
add esp, 8
jmp 0x1000d65f
test eax, eax
je 0x1000d65f
mov dword [eax + 0x10], 0
mov ecx, eax
cmp dword [eax + 0x14], 0xf
jbe 0x1000d5d7
mov ecx, dword [eax]
mov byte [ecx], 0
mov edx, esi
mov ecx, 0x100ce930
mov word [eax + 0x18], 0xffff
mov byte [eax + 0x1a], 0xff
call fcn.1000dc90
test di, di
jle 0x1000d65f
mov ecx, 0xd78c98
call fcn.1001cb40
mov esi, eax
test esi, esi
je 0x1000d65f
push 4
push esi
call dword [sym.imp.KERNEL32.dll_IsBadReadPtr]
test eax, eax
jne 0x1000d65f
mov edx, dword [0x100bd690]
mov ecx, esi
push 1
movsx eax, di
push eax
call edx
mov esi, eax
test esi, esi
je 0x1000d65f
push 4
push esi
call dword [sym.imp.KERNEL32.dll_IsBadReadPtr]
test eax, eax
jne 0x1000d65f
cmp dword [esi + 0x760], eax
je 0x1000d65f
mov ecx, dword [esi + 0x3a8]
mov dword [esi + 0x760], eax
test ecx, ecx
je 0x1000d65f
mov eax, dword [ecx]
push 1
mov eax, dword [eax]
call eax
mov dword [esi + 0x3a8], 0
mov eax, dword [ebp - 0x60]
mov edx, dword [ebp - 0x98]
inc eax
mov dword [ebp - 0x60], eax
cmp ax, word [ebp - 0x64]
jb 0x1000d3f0
mov edi, dword [ebp - 0x18]
cmp edi, 0xf
jbe case.0x1000d206.164
mov edx, dword [ebp - 0x2c]
lea ecx, [edi + 1]
mov eax, edx
cmp ecx, 0x1000
jb 0x1000db9c
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x1000dc24
jmp 0x1000db9c
xorps xmm0, xmm0
mov dword [ebp - 0x30], 0xf
movups xmmword [ebp - 0x44], xmm0
mov dword [ebp - 4], 4
movups xmmword [ebp - 0x2c], xmm0
mov dword [ebp - 0x18], 0xf
mov byte [ebp - 4], 5
lea edi, [esi + 1]
mov byte [edx + 4], 0
mov eax, dword [edx + 0x14]
sub eax, ecx
mov dword [ebp - 0x34], 0
mov byte [ebp - 0x44], 0
mov dword [ebp - 0x1c], 0
mov byte [ebp - 0x2c], 0
cmp edi, eax
jbe 0x1000d6fd
xor al, al
jmp 0x1000d700
mov al, byte [esi + ecx]
mov byte [ebp - 0x45], al
mov ecx, edx
lea eax, [ebp - 0x44]
mov dword [edx + 8], edi
push eax
call fcn.10010160
mov ecx, eax
mov edi, dword [ecx + 8]
mov eax, dword [ecx + 0x14]
mov esi, dword [ecx + 0x10]
sub eax, esi
lea edx, [edi + 4]
cmp edx, eax
jbe 0x1000d729
xor edi, edi
jmp 0x1000d72c
mov edi, dword [esi + edi]
mov dword [ecx + 8], edx
cmp dword [ebp - 0x34], 0
mov dword [ebp - 0x64], edi
je 0x1000dbc4
test edi, edi
jle 0x1000dbc4
mov esi, dword [0x100bd5ac]
mov eax, 0x10624dd3
mul edi
mov ecx, 0xd78ae8
shr edx, 6
imul eax, edx, 0x3e8
push eax
call fcn.1001cb40
mov ecx, eax
call esi
mov dword [ebp - 0x60], eax
test eax, eax
je 0x1000dbc4
mov cl, byte [eax + 4]
mov eax, 0x12e0be83
mul edi
mov byte [ebp - 0x51], cl
sub edi, edx
shr edi, 1
add edi, edx
shr edi, 0x1d
cmp edi, 4
jae 0x1000dbc4
cmp cl, 0x2d
jae 0x1000dbc4
push 4
push 0xd78af0
call dword [sym.imp.KERNEL32.dll_IsBadReadPtr]
test eax, eax
jne 0x1000dbc4
movzx ecx, byte [ebp - 0x51]
mov eax, 0x10624dd3
mul dword [ebp - 0x64]
mov ecx, dword [ecx*4 + 0xd78af0]
mov esi, dword [0x100bd5b0]
shr edx, 6
sub edi, edx
imul eax, edi, 0x3e8
add eax, dword [ebp - 0x64]
push eax
call esi
mov esi, eax
test esi, esi
je 0x1000dbc4
mov al, byte [ebp - 0x45]
cmp al, 1
jne 0x1000d9b6
mov edx, dword [ebp - 0x60]
lea ecx, [ebp - 0xd0]
push esi
call fcn.10013250
add esp, 4
mov ecx, eax
mov byte [ebp - 4], 6
cmp dword [ecx + 0x14], 0xf
jbe 0x1000d810
mov ecx, dword [ecx]
cmp dword [ebp - 0x30], 0xf
lea eax, [ebp - 0x44]
movaps xmm0, xmmword [0x100bf8a0]
cmova eax, dword [ebp - 0x44]
push ecx
movups xmmword [ebp - 0x8c], xmm0
xor ecx, ecx
mov byte [ebp - 0x6c], 0
movaps xmm0, xmmword [0x100c0080]
push eax
movups xmmword [ebp - 0x7c], xmm0
nop dword [eax]
mov al, byte [ebp - 0x8c]
xor byte [ebp + ecx - 0x8b], al
inc ecx
cmp ecx, 0x1f
jb 0x1000d840
sub esp, 0x18
mov byte [ebp - 0x6c], 0
mov edx, esp
lea ecx, [ebp - 0x8b]
xorps xmm0, xmm0
lea edi, [ecx + 1]
movups xmmword [edx], xmm0
mov dword [edx + 0x10], 0
mov dword [edx + 0x14], 0
nop dword [eax]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x1000d880
sub ecx, edi
lea eax, [ebp - 0x8b]
push ecx
push eax
mov ecx, edx
call fcn.10002620
lea eax, [ebp - 0xb0]
push eax
call fcn.10005dd0
add esp, 0x24
lea ecx, [ebp - 0x2c]
push eax
call fcn.100082d0
mov ecx, dword [ebp - 0x9c]
cmp ecx, 0xf
jbe 0x1000d8ea
mov edx, dword [ebp - 0xb0]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x1000d8e0
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x1000dc29
push ecx
push edx
call fcn.100859f6
add esp, 8
mov byte [ebp - 4], 5
mov ecx, dword [ebp - 0xbc]
mov dword [ebp - 0xa0], 0
mov dword [ebp - 0x9c], 0xf
mov byte [ebp - 0xb0], 0
cmp ecx, 0xf
jbe 0x1000d943
mov edx, dword [ebp - 0xd0]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x1000d939
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x1000dc29
push ecx
push edx
call fcn.100859f6
add esp, 8
movzx eax, byte [esi + 0x4c]
dec eax
cmp eax, 0xb
ja case.0x1000d94d.10
jmp dword [eax*4 + 0x1000dc5c]
mov eax, 0xff8080ff
jmp 0x1000db28
mov eax, 0xffffff00
jmp 0x1000db28
mov eax, 0xff80ff00
jmp 0x1000db28
mov eax, 0xffdcc77c
jmp 0x1000db28
mov eax, 0xffc87cc7
jmp 0x1000db28
mov eax, 0xff19ffff
jmp 0x1000db28
mov eax, 0xff00ffcc
jmp 0x1000db28
mov eax, 0xffff83a6
jmp 0x1000db28
mov eax, 0xffffad4d
jmp 0x1000db28
or eax, 0xffffffff
jmp 0x1000db28
test al, al
jne 0x1000dbc4
mov edx, dword [ebp - 0x60]
lea ecx, [ebp - 0xd0]
push esi
call fcn.10013250
add esp, 4
mov ecx, eax
mov byte [ebp - 4], 7
cmp dword [ecx + 0x14], 0xf
jbe 0x1000d9de
mov ecx, dword [ecx]
cmp dword [ebp - 0x30], 0xf
lea eax, [ebp - 0x44]
movaps xmm0, xmmword [0x100bf720]
cmova eax, dword [ebp - 0x44]
push ecx
push eax
movups xmmword [ebp - 0x8c], xmm0
mov dword [ebp - 0x7c], 0x2b2e7b34
xor ecx, ecx
mov dword [ebp - 0x78], 0x3f3a293c
mov dword [ebp - 0x74], 0x287e7b3e
mov word [ebp - 0x70], 0x75
nop word [eax + eax]
mov al, byte [ebp - 0x8c]
xor byte [ebp + ecx - 0x8b], al
inc ecx
cmp ecx, 0x1c
jb 0x1000da20
sub esp, 0x18
mov byte [ebp - 0x6f], 0
mov edx, esp
lea ecx, [ebp - 0x8b]
xorps xmm0, xmm0
lea esi, [ecx + 1]
movups xmmword [edx], xmm0
mov dword [edx + 0x10], 0
mov dword [edx + 0x14], 0
nop dword [eax]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x1000da60
sub ecx, esi
lea eax, [ebp - 0x8b]
push ecx
push eax
mov ecx, edx
call fcn.10002620
lea eax, [ebp - 0xb0]
push eax
call fcn.10005dd0
add esp, 0x24
lea ecx, [ebp - 0x2c]
push eax
call fcn.100082d0
mov ecx, dword [ebp - 0x9c]
cmp ecx, 0xf
jbe 0x1000daca
mov edx, dword [ebp - 0xb0]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x1000dac0
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x1000dc2e
push ecx
push edx
call fcn.100859f6
add esp, 8
mov byte [ebp - 4], 5
mov ecx, dword [ebp - 0xbc]
mov dword [ebp - 0xa0], 0
mov dword [ebp - 0x9c], 0xf
mov byte [ebp - 0xb0], 0
cmp ecx, 0xf
jbe 0x1000db23
mov edx, dword [ebp - 0xd0]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x1000db19
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x1000dc2e
push ecx
push edx
call fcn.100859f6
add esp, 8
mov eax, 0xffff0000
cmp dword [ebp - 0x1c], 0
je 0x1000dbc4
push 3
push 1
push eax
lea ecx, [ebp - 0x2c]
call fcn.10036da0
mov ecx, dword [ebp - 0x18]
add esp, 0xc
cmp ecx, 0xf
jbe 0x1000db76
mov edx, dword [ebp - 0x2c]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x1000db6c
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x1000dc1a
push ecx
push edx
call fcn.100859f6
add esp, 8
mov ecx, dword [ebp - 0x30]
cmp ecx, 0xf
jbe case.0x1000d206.164
mov edx, dword [ebp - 0x44]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x1000db9c
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x1000dc1a
push ecx
push edx
call fcn.100859f6
add esp, 8
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
mov ecx, dword [ebp - 0x14]
xor ecx, ebp
call fcn.10085995
mov esp, ebp
pop ebp
mov esp, ebx
pop ebx
ret
mov ecx, dword [ebp - 0x18]
cmp ecx, 0xf
jbe 0x1000dbf4
mov edx, dword [ebp - 0x2c]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x1000dbea
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x1000dc1a
push ecx
push edx
call fcn.100859f6
add esp, 8
mov ecx, dword [ebp - 0x30]
cmp ecx, 0xf
jbe case.0x1000d206.164
stosb byte es:[edi], al
mov edx, dword [ebp - 0x44]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x1000db9c
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
jbe 0x1000db9c
call fcn.1008ac0f
call fcn.1008ac0f
call fcn.1008ac0f
out 0xcf, al
pop es
add al, ch
loope 0x1000dbfb
call fcn.1008ac0f
pop es
add al, ch
fmul st(7), st(0)
pop es
add byte [eax + case.0x1000d206.163], dl
cmpsb byte [esi], byte es:[edi]
call fcn.1008ac0f
nop
or eax, 0xa61000d2
fild dword [eax]
adc byte [esi - 0x49efff25], ah
rol byte [eax], cl
adc dl, al
rol byte [eax], cl
adc byte [ecx], al
rol dword [eax], cl
adc byte [eax - 0x2d], al
add byte [eax], dl
jg 0x1000dc25
add byte [eax], dl
cmpsb byte [esi], byte es:[edi]
fild dword [eax]
adc byte [edi + 0x541000d6], ch
fld dword [eax]
adc byte [esi - 0x27], bl
add byte [eax], dl
push 0x721000d9
fld dword [eax]
adc byte [ecx + ebx*8], bh
adc byte [esi + 0x7c1000d9], al
fld dword [eax]
adc byte [eax - 0x6fefff27], dl
fld dword [eax]
adc byte [esi - 0x65efff27], ch
fld dword [eax]
adc byte [ecx + ebx*8 - 0x3333f000], ah
int3