Function at 0xb28d27
Capabilities:
Check for vm using instruction vpcext
Reference the vmware io port

Disassembly:
push dword [esp]
pop esi
jmp 0xb286f9
push edx
mov edx, esp
jmp 0xb2885b
mov dword [esp], edx
jmp 0xb28f84
xchg dword [esp], ebx
pop esp
push dword [esp]
pop edi
push ecx
push esp
jmp 0xb2876e
add ebx, 0x2dd39711
jmp 0xb28910
sub edi, 4
jmp 0xb28753
mov esi, 0x9004a582
add esi, 0x27af08ea
jmp 0xb28787
mov dword [esp], edx
mov edx, 4
jmp 0xb2914b
add esp, 4
add esi, dword [esp]
jmp 0xb28be9
xchg dword [esp], edi
pop esp
mov dword [esp], edi
push esi
push esp
pop dword [esp]
push eax
mov eax, 4
add dword [esp + 4], eax
jmp 0xb28e64
pop ecx
jmp 0xb28dbe
mov dword [esp], ebx
mov ebx, 0x1476e5ad
push edi
mov edi, 0x61e3fcca
jmp 0xb287a1
add esi, ecx
push eax
mov eax, 0x7dce501f
dec eax
not eax
sub eax, 0x7ddb6d3a
xor eax, 0x23f94a4d
jmp 0xb287fa
add ebx, edi
mov edi, dword [esp]
add esp, 4
jmp 0xb287d0
pop ebx
sub esp, 4
mov dword [esp], ecx
push eax
mov eax, 0x5d9f41bd
mov ecx, 0x279d1046
xor ecx, eax
pop eax
add edi, ecx
jmp 0xb28aa1
shl ebx, 4
add ebx, 0x3877aca1
inc ebx
push edx
jmp 0xb28add
add edi, 0x7e763aa4
jmp 0xb287b1
xchg dword [esp], ecx
pop esp
push esi
mov esi, 0x6ff7af2c
jmp 0xb28b25
sub esi, eax
pop eax
mov ecx, dword [esp]
add esp, 4
jmp 0xb28db3
push esp
pop eax
add eax, 4
add eax, 4
push ecx
mov dword [esp], eax
push dword [esp + 4]
pop eax
pop dword [esp]
pop esp
push 0x3fb65e28
mov dword [esp], ebx
mov ebx, 0xffffffff
sub esp, 4
mov dword [esp], edi
mov dword [esp], 0x21d1063e
jmp 0xb28bf4
push esp
pop edi
push edx
mov edx, 4
jmp 0xb28885
mov edi, esp
add edi, 4
jmp 0xb28fe9
push ebx
mov ebx, 0x4fd94952
jmp 0xb28b0b
neg ebx
shl ebx, 6
jmp 0xb28bcd
xchg dword [esp], edx
jmp 0xb2889a
push dword [esp + 4]
mov ecx, dword [esp]
push esi
jmp 0xb28701
add edi, edx
pop edx
jmp 0xb28acc
mov edx, 0x4ffd20c0
inc edx
not edx
jmp 0xb28953
pop esp
pop dword [esp]
jmp 0xb28e10
mov dword [esp], eax
mov dword [esp], esi
mov dword [esp], edx
mov dword [esp], ebx
pop dword [esi + edi]
push 0x4160120a
jmp 0xb29174
sub eax, 0x7d5597be
add edi, 0x67cf5923
sub edi, eax
push ebx
push edx
mov edx, 0x7f77af96
mov ebx, 0xe877f59a
add ebx, edx
pop edx
push esi
mov esi, 0x20fc13
xor ebx, esi
pop esi
sub edi, ebx
pop ebx
pop eax
push eax
mov eax, 0x7badfd54
xor edi, eax
push dword [esp]
jmp 0xb28d12
sub eax, 0x20342c95
mov esi, eax
pop eax
jmp 0xb28d24
add ecx, 4
add ecx, 4
jmp 0xb2897f
push dword [esp]
pop esi
push ebx
push 0x11bfa65a
mov dword [esp], esp
add dword [esp], 4
pop ebx
sub esp, 4
mov dword [esp], ebp
jmp 0xb28d3f
add edi, 4
xchg dword [esp], edi
pop esp
xor ebx, ebp
mov ebp, dword [esp]
sub esp, 4
mov dword [esp], edi
mov edi, esp
push ecx
jmp 0xb28f57
inc edx
not edx
add edx, 1
shl edx, 6
jmp 0xb28b36
xor eax, 0x4a75433e
xor edx, eax
pop eax
jmp 0xb28fc4
xchg dword [esp], ecx
pop esp
add edi, 4
xchg dword [esp], edi
pop esp
jmp 0xb29015
push edx
push dword [esp + 4]
mov edx, dword [esp]
jmp 0xb289cd
push dword [esp]
jmp 0xb28ae8
and eax, 0x6bff3e12
inc eax
neg eax
jmp 0xb288bc
add edi, 0x5959d5da
push edx
mov edx, edi
mov ebx, edx
push dword [esp]
pop edx
jmp 0xb28b8c
xchg dword [esp], ebx
jmp 0xb28a04
add esp, 4
pop dword [esp]
mov esp, dword [esp]
sti
sub esi, 0x77c96427
push 0x26b2118e
mov dword [esp], ebx
mov ebx, 0x5fcf8c68
shl ebx, 2
or ebx, 0x7fe7a510
push edi
push edx
mov edx, 0x61a05425
mov edi, edx
jmp 0xb28f97
pop esp
mov dword [esp], ebx
mov ebx, 0x1dfc620b
push ebx
pop ebp
push dword [esp]
pop ebx
push edi
push esp
pop edi
sub esp, 4
jmp 0xb28bb5
xor ebx, 0x2340ed3
mov eax, ebx
pop ebx
sub ecx, eax
pop eax
add edi, ecx
pop ecx
jmp 0xb28933
pop edx
push eax
mov dword [esp], edi
push dword [esp + 4]
push dword [esp]
mov edi, dword [esp]
push ebx
mov ebx, esp
push edx
mov edx, 0x755e9a86
add edx, 0x8aa1657e
add ebx, edx
pop edx
add ebx, 4
xchg dword [esp], ebx
pop esp
add esp, 4
pop dword [esp]
mov esp, dword [esp]
jmp 0xb288a3
pop edi
pop ebx
push ebx
mov ebx, edi
jmp 0xb29129
mov dword [esp], esi
jmp 0xb29180
add ebx, 0x5fff662a
inc ebx
jmp 0xb28a89
not ebx
shl ebx, 3
xor ebx, 0x2f8e7837
sub edi, 0x7e763aa4
add edi, ebx
jmp 0xb287e0
pop ecx
sub edi, esi
sub edi, 0x7a0251fb
jmp 0xb28c45
mov ecx, esp
add ecx, 4
sub ecx, 4
xchg dword [esp], ecx
pop esp
mov dword [esp], edi
sub esp, 4
jmp 0xb28774
push edx
mov edx, 0x3ff9ad58
and edx, 0x7e68a1d0
jmp 0xb28bc2
mov edx, 0x7bed0b65
push eax
jmp 0xb28ddb
pop eax
push eax
push esp
pop eax
push ebp
mov ebp, 4
add eax, ebp
pop ebp
add eax, 4
xchg dword [esp], eax
pop esp
push edx
mov edx, eax
mov ebx, edx
push dword [esp]
jmp 0xb28dec
or ebx, 0x3fd209e1
jmp 0xb28866
mov edi, 0x7f6fdf31
sub esi, edi
mov edi, dword [esp]
jmp 0xb28748
push eax
mov eax, 0x7ede435a
or esi, eax
pop eax
shr esi, 2
jmp 0xb28edc
xor edx, 0x6fff89c9
jmp 0xb28b60
mov dword [esp], eax
push 0x6fdf222c
mov eax, dword [esp]
add esp, 4
add eax, 0x6fecb13a
jmp 0xb28b59
not eax
jmp 0xb288f5
xor edx, 0xe5489c2d
add esi, 0x772b7d22
add esi, edx
sub esi, 0x772b7d22
mov edx, dword [esp]
add esp, 4
sub esi, ebx
sub esi, 0x75ff25a4
pop ebx
push esi
mov dword [esp], edi
jmp 0xb28b16
push ebx
mov ebx, esp
add ebx, 4
jmp 0xb28e08
mov edx, 0x7fa5cc5b
xor ebx, edx
pop edx
sub ebx, 0x7fdc282d
add edi, 0x77fb1bad
sub edi, ebx
jmp 0xb2905f
mov dword [esp], ecx
mov ecx, 0x7dd7dc32
jmp 0xb2906b
add edx, 0xc1975eb4
jmp 0xb28cbc
shl ebx, 5
add ebx, 0x7cf7e847
xor ebx, 0xa2a85043
sub edx, 0x6d7fb33f
add edx, ebx
jmp 0xb28d6f
add esi, 0x7f6fdf31
jmp 0xb28cc9
mov dword [esp], ebp
mov ebp, 0x379af3ca
xor ebp, 0x486dcf16
sub edi, 0x3be72aeb
add edi, ebp
add edi, 0x3be72aeb
pop ebp
add edi, 0x5f31ddc7
sub edi, 0x3ed9b574
add edi, ebx
add edi, 0x3ed9b574
push 0x3f2c5a49
mov dword [esp], edx
jmp 0xb28e4b
or edx, 0x79d6cdc4
not edx
sub edx, 0x37f3ea04
jmp 0xb28cf5
sub edi, 0x6fab7897
mov esi, dword [esp]
push eax
jmp 0xb28808
mov dword [esp], esi
push 0x62db4a
mov dword [esp], ecx
mov ecx, 0x17ffbdb3
shl ecx, 4
xor ecx, 0x7ffbdb34
mov esi, ecx
pop ecx
add ecx, esi
pop esi
push eax
mov dword [esp], 0xd1ad69f
jmp 0xb28e35
push esi
mov esi, 0x7d973135
shr esi, 8
not esi
xor esi, 0x7f7f686b
xor esi, 0xef08cb84
add ecx, esi
pop esi
sub ecx, 0x815ef9d6
mov edi, ecx
pop ecx
dec edi
dec edi
or edi, 0x7faecfc2
shr edi, 6
push esi
mov esi, 0x4f7cb8e4
sub edi, esi
pop esi
jmp 0xb290ae
add edi, 0x77ba3001
sub edi, edx
jmp 0xb290e7
push eax
mov eax, 0x775fd2d9
push edx
mov edx, 0x6900b352
xor eax, edx
pop edx
add esi, eax
pop eax
add esi, 0x77c96427
sub esp, 4
mov dword [esp], ecx
mov ecx, esp
sub esp, 4
mov dword [esp], esi
push ebp
jmp 0xb28da7
push esi
mov esi, 0x5bbf48b9
jmp 0xb28eff
pop eax
add esp, 4
sub edi, 0x7f9d787b
jmp 0xb289b1
add ecx, esi
pop esi
push ebp
mov ebp, esp
add ebp, 4
sub ebp, 4
xchg dword [esp], ebp
pop esp
jmp 0xb28c54
mov ebp, 0x75cfc3a3
not ebp
inc ebp
push edi
mov edi, 0x67f164fd
or ebp, edi
pop edi
push ebx
mov ebx, 0
jmp 0xb29122
mov dword [esp], esi
push edi
mov dword [esp], 0x7feb2b17
mov esi, dword [esp]
push eax
jmp 0xb28e85
push eax
mov eax, 0x6fd6edd9
jmp 0xb28dfd
xchg ecx, esi
push esi
mov dword [esp], edi
mov edi, 0x57fe73ba
shl edi, 6
xor edi, 0x9e2ddba
add ecx, edi
pop edi
add edx, ecx
push dword [esp]
mov ecx, dword [esp]
add esp, 4
add esp, 4
jmp 0xb2898f
mov dword [esp], 0x247a003
jmp 0xb28b41
push ebx
mov ebx, 0x57fbf9c0
jmp 0xb28a7d
add ecx, 4
add ecx, 4
xor ecx, dword [esp]
xor dword [esp], ecx
xor ecx, dword [esp]
pop esp
push 0x14b25b73
jmp 0xb28fd9
mov eax, 0x4ee7e2ed
inc eax
dec eax
sub eax, 0xffffffff
jmp 0xb28972
shr eax, 1
shl eax, 1
jmp 0xb29079
add ebx, 4
jmp 0xb28709
pop esp
push ebp
mov dword [esp], edx
mov dword [esp], 0
mov edi, dword [esp]
push edi
push esp
mov edi, dword [esp]
add esp, 4
add edi, 4
jmp 0xb28723
mov dword [esp], ecx
jmp 0xb28878
mov dword [esp], ebx
mov ebx, 0x5f54364f
not ebx
dec ebx
sub esp, 4
mov dword [esp], edx
jmp 0xb28b9a
pop eax
push dword [esp]
push dword [esp]
jmp 0xb28e70
pop edi
add esp, 4
push ecx
mov ecx, esp
add ecx, 4
add ecx, 4
jmp 0xb287eb
mov eax, esp
add eax, 4
push edx
push eax
mov eax, 0x1dfec300
shl eax, 4
push ebp
mov ebp, 1
add eax, ebp
pop ebp
sub eax, 0xdfec2ffd
mov edx, eax
mov eax, dword [esp]
add esp, 4
add eax, 0x7e808dbc
sub eax, 0x2655fd70
add eax, edx
add eax, 0x2655fd70
push ecx
mov ecx, 0x377df001
not ecx
shl ecx, 5
add ecx, 0x6e3e8dfc
sub eax, ecx
pop ecx
mov edx, dword [esp]
jmp 0xb290f2
add esi, 0x65b9c614
add esi, 0x7a463e11
jmp 0xb28f46
mov eax, dword [esp]
add esp, 4
push esi
mov dword [esp], edx
mov dword [esp], edi
jmp 0xb28841
xor esi, 0x207c2239
add edx, esi
pop esi
xor edx, 0xc9d09079
mov ebp, edx
pop edx
add edx, ebp
pop ebp
push eax
mov eax, 0x7fb777df
not eax
xor eax, 0x257ffe5a
add eax, 0xcab885d8
neg eax
shr eax, 3
shr eax, 2
not eax
add eax, 0x4808022
sub edx, 0x5dfe1a00
add edx, 0x3eaf9e00
jmp 0xb29032
add edi, esi
pop esi
add edi, 4
xchg dword [esp], edi
jmp 0xb28fb4
mov ecx, 4
add edi, 0x3ee27fb0
add edi, ecx
sub edi, 0x3ee27fb0
jmp 0xb28fa9
push eax
mov dword [esp], 0x6effc222
pop ecx
or ecx, 0x79b77071
dec ecx
jmp 0xb28c80
push esp
pop edx
add edx, 4
add edx, 4
jmp 0xb28870
pop edx
sub ebx, edi
mov edi, dword [esp]
add esp, 4
push edx
jmp 0xb2888d
mov ecx, dword [esp]
push ecx
mov ecx, esp
jmp 0xb28902
pop esp
push dword [esi + edi]
push dword [esp]
mov ebx, dword [esp]
push edi
jmp 0xb2884e
xor ebx, edx
push dword [esp]
pop edx
add esp, 4
add ebx, 0x82b5c91b
push ebx
jmp 0xb28a6b
mov dword [esp], eax
push 0x6553d53d
mov dword [esp], ecx
jmp 0xb29022
add edi, 4
xchg dword [esp], edi
pop esp
push eax
mov dword [esp], 0x7f266c27
mov dword [esp], edx
push esp
pop edx
push ebp
push edx
push eax
mov eax, 0x7bdf43f3
mov edx, 0xa71e04d
xor edx, eax
pop eax
jmp 0xb28c32
push esi
mov esi, 0x445d2700
push edi
push ecx
jmp 0xb28f6f
push edi
mov edi, 0xec0aa68
mov dword [esp + 4], edi
pop edi
jmp 0xb2899c
add edx, eax
sub edx, 0x3eaf9e00
add edx, 0x5dfe1a00
pop eax
push edx
push dword [esp + 4]
pop edx
pop dword [esp]
mov esp, dword [esp]
push ebp
push ebx
mov ebx, esp
add ebx, 4
sub ebx, 4
jmp 0xb289c5
sub edi, 0x77fb1bad
pop ebx
jmp 0xb290c3
push eax
push ebx
push 0x7fe3d2fe
pop ebx
dec ebx
jmp 0xb28a1e
sub eax, 0x2573a99
add edx, eax
pop eax
pop ebx
sub esp, 4
jmp 0xb2908d
mov dword [esp], eax
mov dword [esp], ecx
push edi
mov edi, 0x7ebf3d00
mov ecx, edi
pop edi
push ebp
mov ebp, 0x77bef635
add ecx, ebp
pop ebp
xchg ecx, esi
not esi
jmp 0xb28d7a
sub edi, 0x84aeab4a
sub ebx, edi
jmp 0xb290bb
pop edi
sub ebx, esi
jmp 0xb28718
sub edi, 0x7ff73cdc
push dword [esp]
pop ebx
add esp, 4
cmp edi, 0xffff9998
jne 0xb28fb5
sti
push 0x5d9a1197
jmp 0xb28d5b
sub edi, 0x77ba3001
jmp 0xb28a32
add esp, 4
xor eax, dword [esp]
xor dword [esp], eax
xor eax, dword [esp]
mov esp, dword [esp]
push ecx
mov ecx, 0xc8d3c0a
sub esi, ecx
pop ecx
sub esp, 4
jmp 0xb28a75
mov dword [esp], ecx
mov ecx, 0x6ffb5a81
jmp 0xb2872b
sub ebx, ebp
jmp 0xb29134
mov eax, ebx
pop ebx
pop edi
xor ebx, eax
jmp 0xb28eed
mov ebp, ebx
pop ebx
xor ebp, 0x100e8307
add ebx, ebp
pop ebp
sub esp, 4
jmp 0xb2873b
add ebx, edx
pop edx
xchg dword [esp], ebx
pop esp
push ecx
push ebx
jmp 0xb29159
mov ebx, 0x23646208
mov dword [esp + 4], ebx
mov ebx, dword [esp]
add esp, 4
mov dword [esp], eax
push ecx
jmp 0xb28aaf
mov dword [esp], eax
mov dword [esp], esi
push edi
jmp 0xb29115
mov ecx, dword [esp]
add esp, 4
pop esi
push edi
mov edi, 0x76bfd637
sub edi, 1
push esi
mov dword [esp], eax
mov eax, 0x3eebb499
jmp 0xb289a4