Function at 0xcd0047
Capabilities:
Check for vm using instruction vpcext
Reference the vmware io port

Disassembly:
pop eax
add eax, 0xe
mov dword [eax], ecx
jmp 0xccc5ea
jmp 0xccfdbf
push 0x7636575f
jmp 0xccfe29
mov esi, eax
pop eax
jmp 0xccfe18
add dword [esp], 0xffffffff
add dword [esp], 0xdbd00061
shl dword [esp], 4
push eax
mov eax, 0x12817401
sub dword [esp + 4], eax
pop eax
mov dword [esp], edx
mov dword [esp], ecx
mov dword [esp], eax
jmp 0xccfedb
sub ecx, 0xde45a66c
mov eax, ecx
pop ecx
xor eax, esi
push dword [esp]
pop esi
add esp, 4
push edi
mov dword [esp], 0x6f79e091
jmp 0xccfea5
push ecx
mov ecx, 0x37fa1ded
xor ecx, 0x6be759c5
jmp 0xccfdf9
mov dword [esp], ebx
jmp 0xccfe31
mov dword [esp], 0x4eff4ad2
xchg dword [esp], edi
not edi
xchg dword [esp], edi
push eax
mov eax, 0x7139dda3
or dword [esp + 4], eax
push dword [esp]
pop eax
add esp, 4
sub dword [esp], 0xa780ee54
mov dword [esp], esi
push 0x42bae7f7
mov dword [esp], eax
push edx
mov dword [esp], 0x63fd669f
push dword [esp]
pop eax
push ecx
mov ecx, esp
add ecx, 4
add ecx, 4
xchg dword [esp], ecx
pop esp
push ebp
mov dword [esp], edi
mov edi, 0x5ebf142f
shl edi, 2
xor edi, 0x5df29000
add edi, 0x38f060db
add eax, edi
pop edi
dec eax
xor eax, 0xbe2b78da
jmp 0xccfdc9
xor dword [esp], 0x48424fbb
mov dword [esp], edx
mov dword [esp], 0x33b8780e
sub esp, 4
mov dword [esp], ebx
mov dword [esp], ecx
push ebx
push eax
mov eax, 0x484f1f2f
mov ebx, eax
pop eax
push ebx
jmp 0xccfecf
pop ecx
pop ebx
xor dword [esp + 4], ecx
pop ecx
jmp 0xccfdd1
call 0xccfee0
push dword [esp]
push dword [esp]
jmp 0xcd0041
mov edi, 0x29bc23c5
add ebx, 0x7d76bdbd
sub ebx, edi
sub ebx, 0x7d76bdbd
jmp 0xcd0981
add edi, 0xb3c5f270
sub ebx, edi
pop edi
mov ecx, dword [esp]
jmp 0xcd038b
push esi
mov esi, 0x7b7d1a51
add esi, 0x7ff78149
or esi, 0x7bd7323c
add esi, 0xf4ea0758
xor edi, esi
pop esi
jmp 0xccff34
add edx, edi
pop edi
inc edx
xor edx, 0x12b048e2
jmp 0xcd0532
dec eax
push ebp
push ecx
mov ecx, 0x7b2f462f
not ecx
or ecx, 0x7f538fe3
neg ecx
add ecx, 0x6ee780c1
inc ecx
xor ecx, 0x30bcc77e
mov ebp, ecx
pop ecx
jmp 0xcd03c5
add edx, 4
xchg dword [esp], edx
pop esp
push eax
mov eax, 0x7feec169
sub eax, 0x3bf10d0a
shr eax, 2
push edi
mov edi, 0x7fffe7af
sub edi, 0x3fee977a
add edi, 0x5efb0cc9
inc edi
neg edi
add edi, 0xddec4743
add eax, edi
pop edi
push edi
mov edi, 0x7ff777a9
shl edi, 7
shr edi, 1
shl edi, 4
neg edi
push ecx
mov dword [esp], ebx
mov ebx, 0x32ed208f
push esi
mov esi, 0x193b7d68
add ebx, esi
pop esi
sub edi, ebx
pop ebx
jmp 0xcd0578
mov ecx, 4
jmp 0xcd0144
mov dword [esp], ecx
push 0x31391385
mov dword [esp], edx
push esi
push 0x3edf11ee
pop esi
shr esi, 2
jmp 0xcd09f2
xor dword [esp], esi
xor esi, dword [esp]
mov esp, dword [esp]
push 0x2b3646c1
mov dword [esp], ebx
mov ebx, esp
sub esp, 4
mov dword [esp], edi
jmp 0xcd0835
mov ebx, 0x77ff8e4d
jmp 0xcd03cd
push dword [esp]
mov esi, dword [esp]
push ebp
mov ebp, esp
add ebp, 4
add ebp, 4
xchg dword [esp], ebp
pop esp
add esp, 4
push eax
mov eax, esp
push esi
sub esp, 4
mov dword [esp], ebp
mov ebp, 4
mov esi, ebp
pop ebp
add eax, esi
jmp 0xcd0155
xor edx, eax
push dword [esp]
pop eax
push ebp
mov ebp, esp
add ebp, 4
push edx
jmp 0xcd04ff
sub esp, 4
mov dword [esp], edi
jmp 0xcd04b7
xor ebp, 0x6e2d3e57
jmp 0xcd02f2
not eax
dec eax
sub eax, 0xb282f8f8
mov esi, eax
jmp 0xcd0604
add esp, 4
push esi
jmp 0xcd074b
mov eax, ecx
pop ecx
jmp 0xcd02df
pop esp
mov dword [esp], ecx
push ebp
mov ebp, 0x6fffade1
push 0x542e075e
mov dword [esp], ebp
add dword [esp], 0x71f79779
pop ecx
sub ecx, 0x71f79779
pop ebp
not ecx
sub ecx, 0xff95541
not ecx
push edi
mov edi, 0xdec97349
add ecx, edi
pop edi
add edx, 0x7b77af7c
add edx, ecx
sub edx, 0x7b77af7c
push dword [esp]
mov ecx, dword [esp]
jmp 0xcd00e6
sub eax, 0x3ff75a63
add eax, ecx
add eax, 0x3ff75a63
jmp 0xcd04f3
mov esi, dword [esp]
jmp 0xcd05ee
mov dword [esp], eax
push ecx
push esp
pop dword [esp]
push ebp
mov ebp, 4
add dword [esp + 4], ebp
pop ebp
pop eax
sub esp, 4
mov dword [esp], esi
mov esi, 0x63cf6800
shr esi, 1
push edi
push edx
mov edx, 0x68ffc29a
dec edx
add edx, 0x7ff57086
jmp 0xcd03ba
mov esp, dword [esp]
push edi
jmp 0xcd08ab
mov edx, esp
add edx, 4
add edx, 4
jmp 0xcd0333
xor edi, 0x7efea54e
shl edi, 4
push esi
mov esi, 0x33eeee56
add esi, 0x30be3c9b
add edi, esi
jmp 0xcd0527
xor ebp, dword [esp]
xor dword [esp], ebp
xor ebp, dword [esp]
jmp 0xcd049e
add esi, 4
xchg dword [esp], esi
pop esp
sub esi, 0x5d9da17f
sub esi, edi
add esi, 0x5d9da17f
jmp 0xcd0620
xor dword [esp], 0x2b83d41f
or dword [esp], 0x7dde2951
dec dword [esp]
xor dword [esp], 0x7c08b1ab
mov dword [esp], ebx
push ecx
push ebx
mov ebx, 0x7af754c6
push esi
push 0x6392f2d8
jmp 0xcd030d
push esi
push dword [esp + 4]
jmp 0xcd03fe
add edi, 0x7ee73635
and edi, 0x757e44f6
and edi, 0x5cc88624
add edi, 0x77770bbd
jmp 0xccff03
mov dword [esp], ecx
mov ecx, 4
add eax, ecx
pop ecx
jmp 0xcd0485
sub eax, 0x7ffe74da
shr eax, 8
jmp 0xccff43
xor edi, ebp
pop ebp
jmp 0xccff14
xor ebx, esi
xor esi, ebx
push 0xc353144
mov dword [esp], edx
mov edx, esp
jmp 0xcd0871
mov dword [esp], eax
mov eax, 0x1fbf9138
jmp 0xcd00d7
pop ecx
jmp 0xcd0201
xor edx, dword [esp]
jmp 0xcd048d
add ebx, 0x6c06fb52
add eax, ebx
pop ebx
sub eax, edi
push edx
jmp 0xcd070c
push ebx
sub esp, 4
mov dword [esp], esi
jmp 0xcd0428
add esp, 4
jmp 0xcd0950
add edx, 0x5cf23627
jmp 0xcd0bb8
sub eax, ebp
pop ebp
jmp 0xcd069a
sub esi, ebx
mov ebx, dword [esp]
jmp 0xcd0519
pop esi
pop dword [esp]
mov esp, dword [esp]
push ebx
push 0x580285a4
push esp
pop dword [esp]
add dword [esp], 4
push dword [esp]
pop ebx
push esi
mov esi, esp
add esi, 4
jmp 0xcd0700
push 0x641f772b
mov dword [esp], ecx
push edi
mov edi, 0x73127596
or edi, 0x7bffa970
sub edi, 0xfc2d0b35
mov ecx, edi
pop edi
mov esi, ecx
pop ecx
jmp 0xcd0a30
sub esp, 4
mov dword [esp], esi
mov dword [esp], edx
mov dword [esp], eax
mov eax, 4
sub ebp, eax
mov eax, dword [esp]
add esp, 4
jmp 0xcd021d
xchg dword [esp], eax
jmp 0xcd01a8
xor dword [esp], edx
xor edx, dword [esp]
mov esp, dword [esp]
push dword [esp]
jmp 0xcd0691
mov esp, dword [esp]
mov dword [esp], edi
push 1
mov edi, dword [esp]
jmp 0xcd06bf
pop edi
jmp 0xcd0ae5
push eax
mov eax, 0x7d5fce10
sub esp, 4
mov dword [esp], ecx
mov ecx, 0xccdd304f
push esi
mov esi, ecx
mov edi, esi
mov esi, dword [esp]
add esp, 4
mov ecx, dword [esp]
add esp, 4
add edi, 0x7f8400b4
sub edi, eax
sub edi, 0x7f8400b4
pop eax
jmp 0xcd09fd
pop ecx
xchg dword [esp], eax
mov esp, dword [esp]
jmp 0xcd0642
mov edx, 0x6f5f928e
or edx, 0x5fef13a1
inc edx
push edx
mov dword [esp], ebx
mov ebx, 0x2e7d68e2
jmp 0xcd05cb
add esp, 4
mov ecx, dword [esp]
push ebx
mov ebx, esp
jmp 0xcd07d5
pop esi
xor edx, edi
mov edi, dword [esp]
jmp 0xcd06e8
add esi, edx
push dword [esp]
pop edx
add esp, 4
jmp 0xcd0717
mov dword [esp], eax
mov dword [esp], ecx
push esi
mov esi, 1
mov ecx, esi
pop esi
push ecx
mov ecx, 0x7ddbd200
jmp 0xcd0851
xor esi, 0x786c4c54
mov edx, esi
pop esi
mov ecx, edx
pop edx
or edi, ecx
jmp 0xcd031a
push ebx
mov ebx, 0x3fcbc2a5
shr ebx, 3
shr ebx, 3
shl ebx, 4
jmp 0xcd036b
add edi, ebx
push eax
mov eax, 0x7fdaa5d8
add eax, 0x50ef0
sub edi, eax
pop eax
push dword [esp]
pop ebx
add esp, 4
push edi
push dword [esp + 4]
jmp 0xcd0b1d
add eax, 4
add eax, 4
jmp 0xcd06f3
or edx, ebx
pop ebx
sub edx, 0x4ee738db
jmp 0xcd075b
pop esp
jmp 0xcd0543
add esp, 4
push ecx
jmp 0xccfff5
mov ecx, 4
jmp 0xcd0860
pop eax
shr esi, 7
not esi
neg esi
and esi, 0x6bf9d176
add esi, 0xffffffff
sub esi, 0x9e71ca63
jmp 0xcd08ee
pop edi
jmp 0xcd07ce
push eax
mov dword [esp], 0x6beda453
not dword [esp]
sub dword [esp], 0x7cd213f2
mov dword [esp], edx
mov edx, esp
add edx, 4
jmp 0xccff8f
pop esp
mov dword [esp], edx
pop dword [esi]
push 0x1287ee11
mov dword [esp], esi
mov dword [esp], ebx
mov dword [esp], ebp
mov ebp, esp
push edx
mov edx, 4
add ebp, edx
push dword [esp]
pop edx
add esp, 4
jmp 0xcd0467
mov ecx, dword [esp]
push eax
jmp 0xcd09a1
add eax, 0x5eb70b49
add ebp, eax
pop eax
xchg dword [esp], ebp
mov esp, dword [esp]
push edx
push esp
pop edx
push esi
mov esi, 4
add edx, esi
pop esi
push ebp
mov ebp, 4
jmp 0xcd06c7
push esi
mov esi, esp
jmp 0xcd0768
sub edx, ebp
pop ebp
push 0x62449c1b
mov dword [esp], edx
push dword [esp + 4]
pop edx
pop dword [esp]
pop esp
mov dword [esp], eax
mov eax, 0x6136d3bf
jmp 0xcd0092
sub esp, 4
jmp 0xcd0722
xchg dword [esp], eax
pop esp
add eax, esi
pop esi
push edi
jmp 0xcd02cf
add esi, 4
xchg dword [esp], esi
pop esp
jmp 0xcd00a7
mov edx, 0x7fcfe23c
dec edx
jmp 0xcd08a3
add esi, 4
xor esi, dword [esp]
jmp 0xcd0019
mov dword [esp], ebp
mov ebp, esp
add ebp, 4
push eax
push ecx
mov ecx, 0x37ffebc7
sub ecx, 0xc0050915
jmp 0xcd00ef
mov esi, esp
add esi, 4
add esi, 4
jmp 0xcd0272
push ebx
mov ebx, 0x3118c313
sub edx, ebx
jmp 0xcd077b
add esi, 4
jmp 0xcd022b
pop ebx
push esi
push edi
jmp 0xcd07f0
xor esi, ebx
jmp 0xcd02fa
push ecx
jmp 0xcd0a72
add esp, 4
jmp 0xcd0a22
mov edi, 0x55fbf5ef
jmp 0xcd07fa
push ebp
mov ebp, edi
mov esi, ebp
pop ebp
pop edi
sub ebp, esi
pop esi
add ebp, edx
add ebp, 0x55fbf5ef
pop edx
push ebp
push dword [esp + 4]
pop ebp
pop dword [esp]
pop esp
push ecx
mov dword [esp], eax
mov dword [esp], ebx
sub esp, 4
mov dword [esp], esp
add dword [esp], 4
pop ebx
push ecx
jmp 0xcd05fa
mov edi, 4
add ebx, edi
pop edi
add ebx, 4
jmp 0xcd0848
xchg dword [esp], ebx
pop esp
jmp 0xcd0915
add ebx, ecx
pop ecx
push eax
mov eax, 4
sub ebx, eax
pop eax
jmp 0xcd08be
add edx, 4
sub edx, 4
xchg dword [esp], edx
pop esp
mov dword [esp], ecx
mov dword [esp], 0x261bdbb0
mov dword [esp], ebp
mov dword [esp], ecx
push 1
jmp 0xcd09dc
shl edx, 3
jmp 0xcd08c6
mov dword [esp], 0x57fdbed8
or dword [esp], 0x7dff9fa5
jmp 0xcd0245
xchg dword [esp], ebx
jmp 0xcd00f7
and edx, 0x77b70dc2
inc edx
shl edx, 2
xor edx, 0xa325ecf6
sub eax, edx
mov edx, dword [esp]
add esp, 4
jmp 0xcd08e6
mov edi, dword [esp]
jmp 0xcd07db
add ebx, 0x3efe43a6
add ebx, esi
sub ebx, 0x3efe43a6
pop esi
shl ebx, 1
xor ebx, 0x6ffe71a4
not ebx
push 0x6ae79216
mov dword [esp], edi
jmp 0xccfeeb
push dword [esi]
mov edx, dword [esp]
push ebx
mov dword [esp], eax
mov dword [esp], edi
mov edi, esp
push ecx
mov ecx, 4
add edi, ecx
pop ecx
jmp 0xcd037c
sub esp, 4
mov dword [esp], esi
push ebx
pop esi
mov ebx, dword [esp]
add esp, 4
push ecx
mov ecx, 0xffffffff
push ecx
mov ecx, 0x77ff8e4d
add esi, ecx
pop ecx
add esi, 0x7eff9ca7
add esi, 0x7fef8900
jmp 0xcd0a4a
pop edi
mov ecx, ebx
pop ebx
mov dword [esp + 4], ecx
push dword [esp]
pop ecx
push ebp
mov dword [esp], edx
jmp 0xcd01b1
mov dword [esp], 0x52afe191
mov dword [esp], esi
mov esi, esp
push edx
push 0x3b3e8ec9
pop edx
push edi
mov edi, 0x7a5b3e74
inc edi
neg edi
neg edi
push ebp
mov ebp, 0x1f93b1d5
sub ebp, 0x4ff9cd32
shr ebp, 2
jmp 0xcd00cc
mov ecx, dword [esp]
add esp, 4
add ebx, 0x7f7d0251
sub ebx, ecx
jmp 0xcd0af6
and esi, 0x178f5c00
jmp 0xcd0565
shl edi, 4
sub edi, 0xffffffff
neg edi
add edi, 0xf7d623f5
add ebx, edi
push dword [esp]
jmp 0xcd04b1
sub esi, 0x53f1518f
add esi, eax
push ebx
jmp 0xcd0aa8
push 0x802d0d43
pop ebx
add ebx, esi
push dword [esp]
pop esi
add esp, 4
add edi, 0x7fdfb4c8
jmp 0xcd058c
add esi, ecx
sub esi, 0x7fef8900
push edi
mov dword [esp], edx
sub esp, 4
mov dword [esp], ebp
mov ebp, 0x7eff9ca7
mov edx, ebp
pop ebp
sub esi, edx
mov edx, dword [esp]
add esp, 4
push ebx
jmp 0xcd0037
mov ecx, 4
add ebx, ecx
push dword [esp]
pop ecx
add esp, 4
push eax
mov eax, 4
add ebx, eax
pop eax
xchg dword [esp], ebx
mov esp, dword [esp]
push 0x5d7821bc
mov dword [esp], ecx
mov ecx, esp
add ecx, 4
push esi
jmp 0xcd0b07
mov ebx, 0x7a6ada22
not ebx
shl ebx, 1
add ebx, 0x48c705d5
add esi, ebx
pop ebx
pop eax
add esi, 0x6ded750c
add esi, dword [esp]
sub esi, 0x6ded750c
sub esi, 0x79e69952
push 0xbc481c9
mov dword [esp], ebx
mov dword [esp], 0x25380ffc
jmp 0xcd015d
add esp, 4
sub ebx, 4
xchg dword [esp], ebx
jmp 0xcd0664
sub esp, 4
mov dword [esp], edi
push 0x5d7c773f
pop edi
jmp 0xcd027c
mov esi, 4
sub ecx, esi
pop esi
xchg dword [esp], ecx
jmp 0xcd05d9
mov edi, dword [esp]
add esp, 4
pop dword [esp]
pop esp
push 0x5ad0a6a9
mov dword [esp], edi
jmp 0xcd0b37
sub esp, 4
mov dword [esp], edx
mov edx, 0x66edd851
jmp 0xcd0ba7
mov edi, edx
mov edx, dword [esp]
add esp, 4
push ebx
jmp 0xccffff
add edx, 0x53ff7087
not edx
add edx, 0xf936b8eb
mov edi, 0xfafa1c3
add edi, edx
pop edx
jmp 0xcd0bd3
push edx
mov edx, 0x376e0c20
add edx, 0x27aabf04
add edi, edx
pop edx
add esi, edi
mov edi, dword [esp]
push eax
push esp
pop eax
jmp 0xcd05bc