Function at 0x5ced6f
Capabilities:
Check for vm using instruction vpcext
Reference the vmware io port

Disassembly:
push dword [esp]
mov esi, dword [esp]
jmp 0x5ceebe
add esi, 1
add esi, 0x837b5a6a
jmp 0x5ced56
add eax, ebx
sub eax, 0x7bd75dc9
pop ebx
mov ebp, dword [esp]
add esp, 4
xchg dword [esp], eax
pop esp
jmp 0x5cf000
mov edx, eax
push dword [esp]
pop eax
sub esp, 4
mov dword [esp], eax
mov eax, esp
add eax, 4
push edx
mov edx, 4
add eax, edx
pop edx
xchg dword [esp], eax
pop esp
push 0x7fc37c57
jmp 0x5cef6e
mov eax, 0x6ff61bd3
not eax
add eax, 0x77ffd98d
jmp 0x5cf786
push ebp
mov dword [esp], 0x7d2a3f66
jmp 0x5cee07
xor ebp, 0x7864b54c
add ecx, ebp
pop ebp
pop ebp
jmp 0x5cf686
push esi
push edx
mov edx, 0x7d3eda21
jmp 0x5cee45
mov ebp, dword [esp]
add esp, 4
sub dword [esp + 4], edi
mov edi, dword [esp]
push ebp
mov ebp, esp
jmp 0x5cf217
xor dword [esp], 0x623d6d54
jmp 0x5ced83
push edi
mov dword [esp], eax
mov eax, 0x75ff759c
add dword [esp + 4], eax
pop eax
not dword [esp]
push edi
push edx
mov edx, 0x4bbf5184
jmp 0x5cf419
add dword [esp], 0x1a59e0cf
mov dword [esp], edx
mov dword [esp], eax
mov dword [esp], 0x72a04f6f
mov dword [esp], ecx
mov dword [esp], edx
jmp 0x5cf60c
add esp, 4
xor ebp, ebx
jmp 0x5cf20b
xor edx, 0x4da22715
mov edi, edx
pop edx
and dword [esp + 4], edi
mov edi, dword [esp]
add esp, 4
or dword [esp], 0x67ff6a67
shl dword [esp], 3
sub dword [esp], 0x6ca2ec9f
mov dword [esp], edi
push ebp
jmp 0x5ced3a
pop edx
jmp 0x5cee8f
push 0x3c2fefb
jmp 0x5cf1c3
pop ebp
mov edi, ebp
pop ebp
push esi
mov esi, 0x28f5a97b
inc esi
add esi, 0x6ef63deb
neg esi
shr esi, 4
neg esi
add esi, 0x727c0d62
sub edx, 0x53db6ae9
sub edx, esi
jmp 0x5cf2bd
shr eax, 4
push ebx
mov ebx, 0x2b8fe225
add eax, ebx
pop ebx
add edx, eax
jmp 0x5cf12b
xor dword [esp + 4], edx
jmp 0x5cefe8
push edi
mov edi, 0x6bfacbd9
add edx, edi
pop edi
mov edi, dword [esp]
add esp, 4
push edi
mov dword [esp], 0x395e0526
jmp 0x5cf2e9
push esi
push ebp
push eax
mov dword [esp], 0x5fe58018
pop ebp
sub ebp, 0x5f6faaac
push edx
mov edx, 0x7cea2c5b
xor ebp, edx
pop edx
mov esi, ebp
pop ebp
jmp 0x5ceece
shr edi, 5
push 0x7e03a288
jmp 0x5cf4f9
mov dword [esp], ebx
push ecx
mov ecx, 0x67fe09ee
push ecx
push 0x5bfd6ba5
pop ecx
dec ecx
and ecx, 0x7aab2734
or ecx, 0x6b7f4e95
jmp 0x5cf6e9
add esp, 4
push ecx
mov dword [esp], esi
push esp
jmp 0x5cf070
neg esi
push edx
mov edx, 0x37395e13
and esi, edx
pop edx
add esi, 0x47f42dcb
not esi
jmp 0x5cecd4
add ecx, 4
add ecx, 4
xchg dword [esp], ecx
mov esp, dword [esp]
push 0x73f9be40
mov dword [esp], ebp
mov ebp, esp
push ebp
mov dword [esp], edx
mov edx, 4
add ebp, edx
pop edx
jmp 0x5cefa4
push esp
pop eax
add eax, 4
add eax, 4
xchg dword [esp], eax
pop esp
jmp 0x5cf2ab
push edx
jmp 0x5cef38
mov dword [esp], ecx
push 0x3fdcc5db
jmp 0x5cf4a3
mov dword [esp], eax
mov eax, 0x7bef0fa5
inc eax
sub eax, 0xfc79a7c0
xor eax, 0x39bb118e
add eax, 0xffffffff
jmp 0x5cee32
push esi
mov esi, 0x6193d90c
add ebp, esi
pop esi
xor edx, ebp
pop ebp
push esi
jmp 0x5cf515
xor ecx, esi
jmp 0x5cef8a
mov dword [esp], ebp
push edx
mov dword [esp], 0x7bcf8e1a
mov ebp, dword [esp]
push esi
mov esi, esp
add esi, 4
jmp 0x5cefef
mov esi, dword [esp]
add esp, 4
xor ecx, 0x6cb7e739
shl ecx, 1
push eax
mov eax, 0x7fff3e34
jmp 0x5cf0bc
add ebp, 4
xor ebp, dword [esp]
xor dword [esp], ebp
xor ebp, dword [esp]
pop esp
push ebx
push edx
push ebx
push 0x6cfa079f
pop ebx
xor ebx, 0x12433828
mov edx, ebx
pop ebx
push ebp
jmp 0x5cf0d9
inc ecx
dec ecx
shl ecx, 1
xor ecx, 0xdfff6de6
push ecx
pop edx
pop ecx
sub esi, 0x6fffeab6
add esi, 0x17db0b4b
jmp 0x5cf3ce
pop edx
pop ecx
jmp 0x5cf090
add esi, 4
xchg dword [esp], esi
jmp 0x5cf1a1
push eax
jmp 0x5cef10
sti
xor ecx, ecx
push dword [ecx + esi]
jmp 0x5cf711
push edx
mov edx, 0x3be34994
push ecx
mov dword [esp], edx
mov edx, 0x5fdf017b
sub edx, 0x7ffcdbbf
add edx, 0x6abfe9fb
push ebp
mov ebp, 0x339dd18d
jmp 0x5cf389
shl eax, 7
shl eax, 1
sub eax, 0x61020648
mov ebp, eax
mov eax, dword [esp]
jmp 0x5cedbf
mov dword [esp], ecx
push edi
mov edi, 0x7fd7d9b5
mov ecx, edi
pop edi
sub ecx, 0x37e83909
add edx, ecx
pop ecx
xor edx, 0x7b5cdafc
jmp 0x5cf614
add eax, edx
mov edx, dword [esp]
jmp 0x5cf3c5
push dword [esp]
pop esi
add esp, 4
sub esp, 4
jmp 0x5cf33d
or edx, edi
pop edi
add edx, 1
jmp 0x5cf61f
xor ecx, 0x7d3eda21
push dword [esp]
pop esi
add esp, 4
push esi
mov esi, 0x7fff1bf2
jmp 0x5cef67
sub ecx, eax
pop eax
sub esp, 4
mov dword [esp], esi
jmp 0x5cf155
add eax, 0x7feeca52
push 0x22ade682
mov dword [esp], ecx
mov ecx, 0x6df5f299
jmp 0x5cf1f1
push ebx
jmp 0x5cf113
mov dword [esp], esi
mov esi, 0x6675ba
mov ebx, esi
mov esi, dword [esp]
add esp, 4
jmp 0x5cf529
not eax
sub eax, 0x45fe6f5e
shl eax, 4
xor eax, 0xa468f75b
add esi, 0x6f7f1d00
sub esi, eax
sub esi, 0x6f7f1d00
jmp 0x5cf6b5
mov ebx, 0x3bfb4622
sub ecx, ebx
pop ebx
push edi
mov edi, 0x7efda707
add ecx, edi
pop edi
sub ecx, edi
jmp 0x5cf2d8
mov eax, dword [esp]
push edi
mov edi, esp
add edi, 4
add edi, 4
xchg dword [esp], edi
pop esp
mov ebx, dword [esp]
jmp 0x5ceffa
pop edx
xor ebx, edx
pop edx
push eax
mov eax, 0x7fbf5000
jmp 0x5cf031
mov dword [esp], 0x28be896
mov dword [esp], ebx
mov dword [esp], eax
push esi
mov esi, esp
add esi, 4
sub esi, 4
xchg dword [esp], esi
pop esp
mov dword [esp], edi
mov edi, 0x6ef789cd
mov dword [esp + 4], edi
pop edi
push edi
mov edi, 0x7d97e152
push edi
mov edi, 0x7abeab3
add dword [esp + 8], edi
pop edi
sub dword [esp + 4], edi
sub dword [esp + 4], 0x7abeab3
jmp 0x5cf25b
pop esp
mov eax, 0xbeeecce6
push 0x6918ea08
mov dword [esp], ecx
mov ecx, 0x3fcfb55d
neg ecx
dec ecx
sub ecx, 0x6b5dc7e5
push edi
jmp 0x5cf308
mov dword [esp], esi
mov dword [esp], 0x577f1065
jmp 0x5cf27d
sub edx, 0x67de579f
jmp 0x5cee4e
pop eax
sub esi, ecx
jmp 0x5cf590
mov dword [esp], eax
mov dword [esp], ebp
push ebx
jmp 0x5cf00b
and eax, ecx
pop ecx
and eax, 0x7fdfa498
push eax
push esi
pop eax
pop esi
not esi
xchg esi, eax
inc eax
add eax, 0xc2fb6bf1
jmp 0x5cf0ab
pop ebx
sub ecx, 0x3f9fc0f3
jmp 0x5cf2d1
add ebp, 4
jmp 0x5cf24c
push edi
mov edi, 0x5a8dae77
sub edi, 0x33a46e75
jmp 0x5cf5b2
mov edx, 4
sub eax, 0x1deb5463
add eax, edx
add eax, 0x1deb5463
mov edx, dword [esp]
jmp 0x5cf42a
add ebp, 4
xchg dword [esp], ebp
pop esp
jmp 0x5cf3f9
mov edi, dword [esp]
add esp, 4
sub dword [esp], 0xbea6a690
jmp 0x5cf270
mov dword [esp], eax
mov eax, 0x384364e7
jmp 0x5cecff
and dword [esp], 0x4fff87d7
not dword [esp]
or dword [esp], 0x7ff6167d
xor dword [esp], 0x88cddb98
or dword [esp], 0x5bb5d7f1
sub dword [esp], 0x66bf5ab9
neg dword [esp]
jmp 0x5cf222
sub esp, 4
mov dword [esp], eax
mov dword [esp], 0x1ff6bd14
jmp 0x5ced77
add edx, 0x53db6ae9
pop esi
add edx, 0x67de579f
add edx, edi
jmp 0x5cf1d2
add ecx, ebp
jmp 0x5cf642
sub ecx, 0x7efda707
add ecx, 0x3bfb4622
jmp 0x5cf312
push ebp
push 0x61ea416e
pop ebp
xor dword [esp + 4], ebp
pop ebp
or dword [esp], 0x5fbe54ef
add dword [esp], 1
jmp 0x5cf3e5
mov edi, 0x77fc2475
jmp 0x5cf365
push dword [esp]
pop edi
push 0x36e0d9c0
mov dword [esp], ebx
mov ebx, esp
add ebx, 4
push ebp
mov ebp, 4
add ebx, ebp
pop ebp
xchg dword [esp], ebx
mov esp, dword [esp]
sub esp, 4
jmp 0x5cf1e5
mov dword [esp], ebp
mov ebp, 0x7e9f468e
xchg ebp, edi
not edi
push ebp
push edi
pop ebp
jmp 0x5cf47a
mov ecx, 0x7fdff635
add ecx, 0x5ff53cca
add ecx, 1
push ebp
jmp 0x5cf62c
sub ecx, edi
pop edi
dec ecx
xor ecx, 0xa760f7a5
add eax, ecx
pop ecx
add eax, ebp
push 0x249499fe
mov dword [esp], ebp
push 0x2d09b060
mov dword [esp], eax
jmp 0x5cf3a3
and ebp, 0x7dbf8946
and ebp, 0x5fd75089
dec ebp
and ebp, 0x7ffecf3c
neg ebp
jmp 0x5cef55
mov eax, 0x76ff774f
push ebx
mov ebx, 0x4f87996d
sub eax, ebx
pop ebx
add eax, 0x1b7f933c
shl eax, 3
sub eax, 0x9c04df0e
mov ebp, eax
jmp 0x5cf44f
add esp, 4
push esi
jmp 0x5cee9c
add esi, edx
sub esi, 0x17db0b4b
add esi, 0x6fffeab6
pop edx
xchg dword [esp], esi
jmp 0x5cf569
sub dword [esp], 0x23858899
mov dword [esp], eax
push 0x2e0678b0
jmp 0x5cef2b
neg dword [esp]
xor dword [esp], 0x3984332f
shr dword [esp], 1
push eax
push dword [esp + 4]
pop eax
pop dword [esp]
inc eax
xchg dword [esp], eax
jmp 0x5ceda0
xor edx, 0x69f72ff7
and edx, 0x67f68b3a
jmp 0x5cedc9
add esp, 4
push eax
mov dword [esp], ebp
mov ebp, 4
sub eax, 0x69dfdeb1
sub eax, 0x737b220e
add eax, ebp
push 0x1fc17020
mov dword [esp], edx
jmp 0x5cf6d8
push 0x37036308
jmp 0x5cf698
pop edi
push edx
push 0x7e9f4693
pop edx
add ebp, edx
mov edx, dword [esp]
add esp, 4
add esi, ebp
pop ebp
push edx
push ecx
mov ecx, 0x6fffb6f1
jmp 0x5cefc9
add eax, 0x7fbdd7b9
jmp 0x5cf0f1
pop ecx
add ecx, 0x7af46a2f
sub ecx, 0x3bd19076
jmp 0x5cf4b5
mov eax, ecx
push dword [esp]
pop ecx
push ebp
push esp
pop ebp
push 0x2217b872
mov dword [esp], eax
mov eax, 4
add ebp, eax
pop eax
add ebp, 4
xchg dword [esp], ebp
pop esp
push ebx
mov ebx, 0x51cf4546
xor eax, ebx
mov ebx, dword [esp]
push eax
push esp
pop eax
add eax, 4
add eax, 4
xchg dword [esp], eax
mov esp, dword [esp]
jmp 0x5cf561
mov dword [esp], ecx
mov ecx, 0x4cfe2e
sub edi, 0x783c165e
add edi, ecx
add edi, 0x783c165e
pop ecx
jmp 0x5cf0d3
mov esi, 0x61f83d94
jmp 0x5cf51f
add edx, esi
pop esi
mov ebx, edx
jmp 0x5cf146
sub ebx, 0xeb54d74
add ebx, edx
add ebx, 0xeb54d74
pop edx
or ebx, 0x5fffc48e
xor ebx, 0x4b24d694
push eax
jmp 0x5ced29
sub edx, eax
pop eax
jmp 0x5cedfd
pop esp
sti
add esi, 0x6bfb9e0b
push ecx
push ebx
mov dword [esp], edi
mov dword [esp], 0x7fffdd52
jmp 0x5cf582
pop ecx
push eax
mov eax, 0x3efc38a6
sub esi, eax
jmp 0x5cf1dd
push eax
mov eax, 0x7def20b5
xor eax, 0x43131813
jmp 0x5cf5be
push edi
push edx
mov edx, 0x13fb393e
shl edx, 5
sub esp, 4
jmp 0x5cf046
and edi, 0x7e390e32
push ebp
jmp 0x5cf5e3
add esi, eax
pop eax
pop ecx
add esi, 0x7cff0795
add esi, 0x7b7e34bc
add esi, dword [esp]
sub esi, 0x7b7e34bc
sub esi, 0x7cff0795
push ecx
jmp 0x5cf351
push ebx
mov dword [esp], 0x1de0e8e
pop ebp
xor edi, ebp
jmp 0x5ced62
and ecx, ebp
pop ebp
sub ecx, 0xdfd545ae
add esi, ecx
mov ecx, dword [esp]
add esp, 4
jmp 0x5cf45c
pop dword [esi + ecx]
jmp 0x5cf5a0
push edi
mov edi, 0x5fbbbaf4
jmp 0x5cf085
sub edx, 0xa9dd054e
mov edi, edx
jmp 0x5cedf7
mov ebp, 0x3f8fd85c
or ebp, 0x57eff44e
sub ebp, 0xfff09513
jmp 0x5cf5f3
push ebp
mov ebp, 0x2dbf7ffd
add ebp, 0x7f5b0a82
shl ebp, 8
xor ebp, 0x7cbf32e7
add ebp, 0x33e13707
or ebp, 0x3f6194d7
sub ebp, 0x6267f727
and ebp, 0x7eee17d2
shr ebp, 5
inc ebp
push edx
mov edx, 0x47fb7533
jmp 0x5cf67e
or ebp, edx
pop edx
jmp 0x5ced47
cmp ecx, 0xffff8e48
jne 0x5cf003
sti
jmp 0x5cee6d
mov dword [esp], eax
push ebp
push 0x4e8e8ef4
pop ebp
xor ebp, 0x31d22276
mov eax, ebp
pop ebp
add eax, 0x3dedd5d1
jmp 0x5cf499
mov eax, dword [esp]
jmp 0x5cf6bd
add esp, 4
push 0x7346b4a2
mov dword [esp], eax
mov eax, esp
sub esp, 4
mov dword [esp], edx
jmp 0x5cf233
mov edx, 0x7afaeebe
inc edx
sub edx, 0x77fccb1
jmp 0x5cf066
xor ecx, 0xaa22872a
mov ebx, ecx
jmp 0x5cf6f6
pop ecx
jmp 0x5cf6fc
sub ebx, ecx
mov ecx, dword [esp]
add esp, 4
add eax, 0x7bd75dc9
jmp 0x5cece5
push dword [esp]
push dword [esp]
mov edx, dword [esp]
add esp, 4
push esi
jmp 0x5cf72a
sub edx, ebx
jmp 0x5cef25
mov esi, esp
jmp 0x5cf731
add esi, 4
sub esi, 4
xchg dword [esp], esi
pop esp
mov dword [esp], ecx
jmp 0x5cf749
push 0x23d4448f
jmp 0x5cf753
mov dword [esp], esp
push 0x3cd92651
jmp 0x5cf760
mov dword [esp], edx
mov edx, 4
sub dword [esp + 4], 0x7bb3bf1a
add dword [esp + 4], edx
push ecx
mov ecx, 0x7bb3bf1a
add dword [esp + 8], ecx
pop ecx
pop edx
pop ecx
jmp 0x5ceee6
inc eax
sub eax, 1
sub eax, 0x6dff909e
sub eax, 0x6a0d6390
sub edx, eax
pop eax
jmp 0x5cf723