Function at 0xd0e89e
Capabilities:
Access peb ldr_data

Disassembly:
call fcn.00d0d83b
jmp 0xd0e41f
mov ah, 0x13
push dword [esp]
call fcn.00d0e409
push word [esp + 0x12]
pop si
mov bl, byte [esp + 9]
xchg byte [esp + 2], dh
xchg bp, di
mov dx, si
jmp 0xd0e477
mov eax, edi
mov ax, si
rdtsc
inc eax
mov ecx, dword [esp + 3]
lea esp, [esp + 0x20]
jmp 0xd0e48b
sub esp, 0x17
mov byte [esp + 0xd], cl
bswap eax
clc
and cl, 0x1b
xchg word [esp + 0x21], cx
jmp 0xd0e45e
bsr ax, ax
setp cl
mov al, byte [esp + 2]
shr dx, 7
push dword [esp + 2]
jmp 0xd0e968
lea edi, [eax + edi]
xchg byte [esp + 6], dl
call fcn.00d0e4da
mov bx, word [esp + 3]
lea esi, [ecx*4]
neg edx
push eax
pop word [esp + 0x15]
jmp 0xd0e564
push si
pop dword [esp + 0x17]
mov dword [esp + 0x13], esi
mov byte [esp + 0x13], bl
jmp 0xd0e5ce
mov bh, ch
push dword [esp + 0xa]
mov esi, 0x27307960
shl ch, 3
cld
sbb esi, esi
jmp 0xd0e54e
bswap eax
mov word [esp + 6], sp
rdtsc
mov bp, word [esp + 1]
not al
pop esi
jmp 0xd0e513
dec esi
cld
lea ecx, [ebx*4]
lea esi, [esi*4]
jmp 0xd0e5e4
lea ebp, [ebp*4]
btr eax, ebp
xchg dword [esp + 0x2f], eax
cpuid
push dword [esp + 0x19]
lea esp, [esp + 0x43]
jmp 0xd0e59a
mov bx, 0x3427
sub esp, 0x1e
mov ah, byte [esp + 0x2c]
bsr ax, si
stc
btc si, dx
jmp 0xd0e5b0
mov edx, dword [esp]
sub esp, 0x1c
lea eax, [esi*4]
mov bp, 0x9f10
lea esp, [esp + 0x1a]
bswap ebx
jmp 0xd0e7b9
xchg byte [esp + 0x14], al
rcr cx, 7
sub esp, 3
bswap esi
xchg ch, bl
xchg dword [esp + 7], ecx
jmp 0xd0e584
btr edi, ebx
setg bl
mov bh, 0xf1
stc
btr edi, ecx
cpuid
call fcn.00d0e63b
lea eax, [ebx + ebp]
add esp, 0
lea ebx, [edx*4]
dec edi
mov word [esp + 1], di
jmp 0xd0e775
stc
clc
mov bp, 0xfd55
lea eax, [ebp*4]
rdtsc
mov bh, cl
jmp 0xd0e655
pushfd
mov ebx, 0xd4bc693c
neg eax
mov dh, 0xbb
setb bh
dec bp
jmp 0xd0e6be
mov bl, dh
xchg word [esp], bx
mov ebp, dword [esp]
setle dh
mov bh, cl
mov ah, ch
jmp 0xd0e696
push word [esp + 7]
mov cl, byte [esp]
add esp, 1
lea ebp, [ebp*4]
setnp dh
cpuid
jmp 0xd0e73b
neg bh
xchg edi, ebp
mov dx, bp
shr di, 4
mov word [esp], dx
or ebx, ebp
jmp 0xd0e6ac
xchg ch, cl
push dword [esp]
cpuid
adc si, 0x853d
jmp 0xd0e724
mov word [esp], cx
xchg dword [esp], ebp
mov bh, 0xa4
lea ebp, [ebx + ebp]
xchg bp, bx
bsr esi, ebx
jmp 0xd0e6fa
mov bx, word [esp + 8]
mov byte [esp], dh
stc
xchg byte [esp + 2], dl
mov byte [esp + 5], dh
jmp 0xd0e752
add cl, byte [eax - 0x14fadb8c]
sbb esi, dword [edx - 0x72704353]
sbb al, 0x95
add byte [eax], al
add byte [eax], al
lea ebx, [edx*4]
add esp, 3
btr edi, ebx
rol cl, cl
cld
mov ebx, 0xc622bee3
jmp 0xd0e710
mov bx, word [esp]
lea esp, [esp + 6]
xchg dword [esp], edx
mov byte [esp + 1], cl
push word [esp]
xchg dword [esp], ebp
jmp 0xd0e792
mov di, 0x530c
mov al, byte [esp + 3]
mov byte [esp + 2], cl
mov ecx, 0x5895d5e7
sub eax, 0xa90368a5
mov al, dl
jmp 0xd0e6e7
rcr cx, 6
lea edx, reloc.KERNEL32.DLL_WriteFile
call 0xd0e7a2
add al, 0xf6
fldenv [esi + 0xf]
stosd dword es:[edi], eax
loop 0xd0e730
je 0xd0e7cf
add al, 0x8f
add al, 0x24
jmp 0xd0e8e2
bsf ebx, edx
mov bh, 0x16
pop bp
mov ebx, 0xf16ff717
rdtsc
rol cx, 0xe
jmp 0xd0e683
dec dword [ecx - reloc.KERNEL32.DLL_WriteFile]
inc ecx
add byte [eax], al
add byte [esi - 1], ah
invalid
invalid
je 0xd0e801
add dword [edi - reloc.KERNEL32.DLL_WriteFile], ecx
add al, 0x24
add ch, bl
int3
mov dword [esp + 5], edx
lea esp, [esp + 4]
call fcn.00d0e838
pop word [esp]
lea esp, [esp + 2]
mov dword [esp + 0x14], edi
lea esp, [esp + 0x14]
jmp 0xd0e8bd
mov eax, dword fs:[0x30]
mov eax, dword [eax + 0xc]
mov eax, dword [eax + 0x1c]
jmp 0xd0e916
sub esp, 0x1c
bsf si, dx
lea esp, [esp + 2]
lea esp, [esp + 0x20]
popal
pushal
jmp 0xd0e891
mov eax, dword [eax]
mov eax, dword [eax + 8]
push eax
jmp 0xd0d836
lea ebp, [ecx + ecx]
xchg bh, ch
xchg word [esp + 9], cx
clc
push dword [esp + 6]
push dword [esp + 0x10]
jmp 0xd0e60d