Function at 0xea5d38
Capabilities:
Check for vm using instruction vpcext
Reference the vmware io port

Disassembly:
pop edi
add eax, 4
jmp 0xea8e34
xor ebx, edx
jmp 0xea7817
xor dword [esp], ecx
xor ecx, dword [esp]
pop esp
push edx
mov dword [esp], ecx
mov dword [esp], eax
push 0x5f1dd30b
jmp 0xea7670
sub dword [esp + 4], eax
jmp 0xea5456
sub esi, 0x6fa27f49
pop eax
add eax, 0x3ff97e0d
add eax, esi
sub eax, 0x3ff97e0d
pop esi
cmp dword [ebp + 0x122d2fea], 0
jne 0xea5432
cmp dword [ebp + 0x122d2ec6], 0
je 0xea5441
push eax
mov eax, eax
mov eax, 0
call dword [ebp + 0x122d3dac]
pop eax
sub esp, 4
mov dword [esp], ecx
mov dword [esp], 0x154cdde3
mov dword [esp], esi
jmp 0xea819a
pop eax
push dword [esp]
pop eax
jmp 0xea8192
push eax
mov dword [esp], esi
jmp 0xea9475
push ebp
mov ebp, esp
jmp 0xea6c1a
push dword [esp]
mov eax, dword [esp]
push eax
mov eax, esp
add eax, 4
add eax, 4
xchg dword [esp], eax
pop esp
push ebx
mov dword [esp], ecx
mov ecx, esp
add ecx, 4
add ecx, 4
xchg dword [esp], ecx
pop esp
jmp 0xea715b
dec edi
add edi, 0x5e4064a2
jmp 0xeaa079
pop esp
push eax
mov eax, esp
add eax, 4
sub eax, 4
xchg dword [esp], eax
pop esp
mov dword [esp], eax
jmp 0xea646c
shr eax, 5
neg eax
jmp 0xea9b96
add esi, edx
push edi
mov edi, 0x7edf932a
shr edi, 8
jmp 0xea5ec0
mov edi, 1
sub esi, edi
pop edi
or esi, 0xf5ff005
dec esi
add esi, 1
jmp 0xea7120
push eax
mov eax, 0x1ddf8969
jmp 0xea4ef0
inc eax
jmp 0xea604a
add ecx, 4
xor ecx, dword [esp]
jmp 0xea4c5b
shr ecx, 3
sub ecx, 0x90f5cda7
mov ebp, ecx
jmp 0xea7c8f
xchg dword [esp], edx
pop esp
add ecx, 4
jmp 0xea6760
add ebp, 4
jmp 0xea7a6a
mov ebp, 0x7a769142
add ebp, 0x11f93b1f
add ebp, 0x2deff46c
xor ebp, 0xd3a0de17
sub edx, ebp
pop ebp
shr edx, 7
and edx, 0x49b5a884
add edx, 0x5daf124f
sub ebx, edx
pop edx
sub ebx, 0x5ff839d1
push edx
mov edx, 0x5c9a456d
jmp 0xea49e1
sub edx, 0x5c0e4547
sub esi, 0x5ebf4434
jmp 0xea61d3
add esi, 0x6bed2886
jmp 0xea9424
push ecx
push ebp
push esi
mov esi, 0x5cb36b1f
mov ebp, esi
pop esi
mov ecx, ebp
pop ebp
xor eax, ecx
pop ecx
cmp dword [ebp + 0x122d2fea], 0
jne 0xea717e
cmp dword [ebp + 0x122d2ec6], 0
je 0xea718d
push eax
mov eax, eax
mov eax, 0
call dword [ebp + 0x122d2d85]
pop eax
push 0x3c943bb3
mov dword [esp], ebp
push edi
jmp 0xea791d
mov dword [esp], ebx
push esi
mov esi, 0x768fef66
mov ebx, esi
pop esi
shr ebx, 5
push 0x41628459
mov dword [esp], edx
mov edx, 0x51ee9a2b
or edx, 0x7fff9c8b
inc edx
push ebp
jmp 0xea6fbe
sub esp, 4
mov dword [esp], ebx
jmp 0xea7f5f
pop edx
add ebx, 0x76b55a3c
sub ebx, 0x337566d7
xor dword [esp + 4], ebx
pop ebx
jmp 0xea5e8e
mov edi, eax
push edi
jmp 0xea7a22
pop ebp
pop edi
push 0x1ab6238a
mov dword [esp], edi
push ecx
mov ecx, ebp
mov edi, ecx
jmp 0xea7dd1
sub ebp, 4
xchg dword [esp], ebp
pop esp
mov dword [esp], ecx
mov ecx, 0x5f6e15c1
jmp 0xea6976
pop ecx
sub dword [esp + 4], ebp
mov ebp, dword [esp]
add esp, 4
push dword [esp]
pop eax
push eax
mov eax, esp
jmp 0xea80d1
pop ecx
jmp 0xea8264
mov ebx, 4
sub esi, ebx
pop ebx
xchg dword [esp], esi
pop esp
mov dword [esp], eax
push dword [esp]
pop eax
push ecx
push esp
mov ecx, dword [esp]
push edx
mov edx, esp
add edx, 4
jmp 0xea8764
add eax, 4
add eax, 4
xchg dword [esp], eax
pop esp
push ebp
mov dword [esp], ecx
mov dword [esp], ebp
push 0x7af7f511
pop ebp
add eax, ebp
mov ebp, dword [esp]
push eax
mov eax, esp
push edi
mov edi, 0x7ff61d35
shr edi, 5
jmp 0xea8734
add esp, 4
jmp 0xea9252
push esp
pop esi
push edx
jmp 0xea9dbb
mov eax, edi
mov edi, dword [esp]
jmp fcn.00ea70e3
sub edi, 0x75ae89aa
xor edi, 0x8e51273b
add eax, edi
jmp 0xea499d
add edx, 4
jmp 0xea6b47
xchg dword [esp], eax
jmp 0xea5ee6
pop esi
push edi
mov edi, 1
add eax, edi
jmp 0xea99cb
push edx
mov dword [esp], 0x4c3bfe72
mov dword [esp], esi
mov esi, 0x6fe6ffe1
push edi
jmp 0xea628c
push eax
jmp 0xea5896
mov esi, 0x74a75f46
mov eax, esi
jmp 0xea8ffa
mov edi, dword [esp]
add esp, 4
add eax, 0x76bc267d
jmp 0xea659a
add eax, 0xc568bb30
add esi, 0x6fa27f49
sub esi, eax
jmp 0xea540c
pop edi
mov edx, dword [esp]
add esp, 4
jmp 0xea7766
mov edx, 0x77d4b186
shl edx, 2
add edx, 0x7cbb7f33
jmp 0xea7023
add esi, edi
jmp 0xea9d1c