Function at 0x10d8a94
Capabilities:
Check for vm using instruction vpcext
Reference the vmware io port

Disassembly:
jmp 0x10d3c08
pop edi
pop eax
jmp 0x10d3c21
jmp 0x10d3d13
mov eax, ecx
mov dword [ebp + 0x122d5d14], edx
mov eax, eax
cmc
cmp dword [ebp + 0x122d2e4d], 0
jne 0x10d3d30
cmp dword [ebp + 0x76162f21], 0x10
add dword [0xb8c08b50], edx
invalid
push eax
mov eax, eax
mov eax, 0x40f
mov dword [ebp + 0x122d2122], eax
call dword [ebp + 0x122d1fd2]
pop eax
mov cl, bh
jmp 0x10d3d5f
mov eax, eax
jmp 0x10d3e2b
jmp 0x10d43f9
mov byte [ebp + 0x122d1e4d], 0x52
mov eax, 0xade47b07
push eax
push dword [ebp + 0x122d1f17]
call dword [ebp + 0x122d3e00]
mov dword [ebp + 0x1245ae13], eax
mov byte [ebp + 0x122d1e4d], 0x52
mov eax, 0x902e00e5
push eax
push dword [ebp + 0x122d1f17]
call dword [ebp + 0x122d3e00]
mov dword [ebp + 0x1245ae0f], eax
mov byte [ebp + 0x122d1e4d], 0x52
mov eax, 0xb9bf1235
push eax
push dword [ebp + 0x122d1f17]
call dword [ebp + 0x122d3e00]
mov dword [ebp + 0x122d1e68], eax
mov byte [ebp + 0x122d1e4d], 0x52
mov eax, 0x98781034
push eax
push dword [ebp + 0x122d1f17]
call dword [ebp + 0x122d3e00]
mov dword [ebp + 0x122d1c31], eax
mov byte [ebp + 0x122d1e4d], 0x52
mov eax, 0xc005dbd4
push eax
push dword [ebp + 0x122d1f17]
call dword [ebp + 0x122d3e00]
mov dword [ebp + 0x122d2776], eax
lea eax, [ebp + 0x1245b126]
mov dword [ebp + 0x122d3e11], eax
lea eax, [ebp + 0x1245b37d]
mov dword [ebp + 0x122d1fd2], eax
lea eax, [ebp + 0x1245b0be]
mov dword [ebp + 0x122d2009], eax
lea eax, [ebp + 0x1245b175]
mov dword [ebp + 0x122d20f3], eax
lea eax, [ebp + 0x1245b1dd]
mov dword [ebp + 0x122d20ec], eax
lea eax, [ebp + 0x1245b245]
mov dword [ebp + 0x122d28b9], eax
lea eax, [ebp + 0x1245b03c]
mov dword [ebp + 0x122d1f1e], eax
lea eax, [ebp + 0x1245b2ad]
mov dword [ebp + 0x122d1dfc], eax
lea eax, [ebp + 0x1245b315]
mov dword [ebp + 0x122d2106], eax
lea eax, [ebp + 0x1245b056]
mov dword [ebp + 0x122d1e28], eax
jmp 0x10d471f
jmp 0x10d4807
mov ecx, 0x37d0
call 0x10d4811
pop eax
add eax, 0xe
mov dword [eax], ecx
jmp 0x10d481e
jmp 0x10d7ff3
push ecx
mov ecx, 0x765da871
push esi
mov esi, 0x5cffbfd7
mov eax, 0x7dda9bc0
shl eax, 8
inc eax
add eax, 0x1815c3d9
add eax, esi
pop esi
dec eax
neg eax
push esi
jmp 0x10d80d6
mov dword [esp], eax
mov eax, 0x45cc6749
add ebx, eax
pop eax
jmp 0x10d8115
mov ecx, 0x77df5380
mov ebp, 0xd4bb4650
sub ebp, ecx
pop ecx
push edx
mov edx, 0x7e773582
jmp 0x10d8041
sub ebp, edx
pop edx
sub ebp, 0x2efff51e
xor ebp, 0xaf64c834
mov edx, ebp
pop ebp
add ecx, 0x7467ae00
sub ecx, edx
sub ecx, 0x7467ae00
pop edx
xor ecx, dword [esp]
xor dword [esp], ecx
xor ecx, dword [esp]
mov esp, dword [esp]
jmp 0x10d8073
mov dword [esp], eax
jmp 0x10d81bc
mov ecx, 0x7b1f1a52
shl ecx, 1
sub esp, 4
mov dword [esp], ecx
not dword [esp]
jmp 0x10d8091
pop ecx
push eax
mov eax, 0x5bf70343
dec eax
push ebp
push edi
mov edi, 0x3ff7c631
mov ebp, edi
pop edi
jmp 0x10d810b
and eax, ebp
pop ebp
xor eax, 0x3c37a750
sub eax, 0x23fe2dc8
sub ecx, eax
pop eax
add edi, ecx
pop ecx
add eax, edi
mov edi, dword [esp]
add esp, 4
xor eax, ecx
jmp 0x10d8138
mov dword [esp], ebp
push esp
pop dword [esp]
jmp 0x10d815a
mov dword [esp], edi
mov edi, 0x76ff0e59
not edi
shl edi, 7
push ebx
mov ebx, 0x33664089
jmp 0x10d80fb
pop ecx
xchg dword [esp], eax
pop esp
push edx
push ebp
push ecx
jmp 0x10d8029
shr ebx, 3
neg ebx
sub esp, 4
jmp 0x10d8019
push 0
jmp 0x10d814b
xor edi, ebx
jmp 0x10d811c
push dword [esp]
pop ebx
add esp, 4
jmp 0x10d812b
or edi, 0x77fdca78
dec edi
push ecx
jmp 0x10d807b
pop ecx
push 0x4de1fa14
mov dword [esp], ecx
push 0x2c88577e
jmp 0x10d80ca
sub dword [esp], ebp
pop ebp
add ebp, 0xbf872573
jmp 0x10d80a8
add dword [esp], 4
pop ecx
push edx
mov edx, 0xffec3b3
push edx
not dword [esp]
pop edx
or edx, 0x5ce7d1a8
add edx, 0x67d5e9b4
add edx, 0x9b421864
jmp 0x10d8181
sub ecx, 0x16ffad9a
add ecx, edx
add ecx, 0x16ffad9a
mov edx, dword [esp]
push eax
mov eax, esp
add eax, 4
jmp 0x10d819f
push ecx
mov ecx, 0x57e62312
jmp 0x10d81b1
add eax, ecx
jmp 0x10d80ee
sub ecx, 0x57e6230e
jmp 0x10d81aa
call 0x10d81c1
push dword [esp]
jmp 0x10d8413
xchg edi, ebp
not ebp
xchg edi, ebp
inc edi
jmp 0x10d81e1
push ecx
push 0x3fed4bb1
pop ecx
jmp 0x10d83d6
and edi, 0x3fff9978
neg edi
xor edi, 0xb0b6767a
or ebx, edi
pop edi
jmp 0x10d8356
mov dword [esp], ecx
push edx
mov edx, 0x45b7d897
jmp 0x10d873e
add esi, 0x2dfd4eed
add esi, edx
sub esi, 0x2dfd4eed
pop edx
push edx
mov edx, 0x64280c92
push ebx
push 0x2cf8765c
pop ebx
sub esi, ebx
mov ebx, dword [esp]
jmp 0x10d875a
mov edi, 0xffffffff
jmp 0x10d8475
push dword [esp + 4]
mov esi, dword [esp]
add esp, 4
jmp 0x10d876d
mov eax, 0x7b7fbdf8
add eax, 0xffb35fb
inc eax
jmp 0x10d8b7b
push edx
mov dword [esp], 0x6710faca
mov dword [esp], ebx
mov ebx, 0x7f7e500b
xor ebx, 0x7c7c578e
shl ebx, 7
or ebx, 0xbf397d2
neg ebx
push ebx
not dword [esp]
pop ebx
push edi
jmp 0x10d81d5
mov dword [esp], 0x3fa1890e
push ecx
jmp 0x10d8b19
mov eax, ecx
pop ecx
neg eax
xchg ebp, eax
inc ebp
jmp 0x10d851f
add eax, dword [esp]
add eax, 0x756a5112
jmp 0x10d86be
push dword [esp + 4]
push dword [esp]
pop esi
push edi
jmp 0x10d8665
dec ebx
sub ebx, 0x7fffde79
add edx, ebx
pop ebx
xchg dword [esp], edx
pop esp
jmp 0x10d8aab
sub ecx, 4
xchg dword [esp], ecx
pop esp
mov dword [esp], edi
jmp 0x10d898c
mov ebp, 0x7dfb1500
add edi, 0x7b7f42ac
add edi, ebp
jmp 0x10d86de
add ecx, 0xffffffff
jmp 0x10d8558
sub edi, ebx
pop ebx
sub edi, 0x5e551185
push esi
jmp 0x10d847c
push dword [esp]
pop eax
jmp 0x10d84b6
sub esp, 4
mov dword [esp], esi
push edi
mov edi, 0x3e9f3c3c
dec edi
jmp 0x10d88fa
sub edx, edi
jmp 0x10d864e
mov esi, 0xdcde890
xor edi, esi
pop esi
push edi
jmp 0x10d8876
push edx
mov dword [esp], 0x7bd16469
mov dword [esp], eax
jmp 0x10d8793
mov dword [esp], edx
jmp 0x10d82ad
pop eax
push edx
mov edx, 0x6f9e2a16
xor dword [esp + 4], edx
pop edx
push esi
mov dword [esp], ecx
mov dword [esp], ebx
jmp 0x10d86a1
xchg ebp, eax
xor eax, 0x7ffeb894
push edx
mov edx, 0x3fde2571
sub eax, edx
pop edx
sub eax, 0x7f7f74e9
add eax, 0xc16f822e
add esi, 0x5d6a0416
add esi, eax
sub esi, 0x5d6a0416
pop eax
push edi
mov edi, 4
add esi, edi
pop edi
xor esi, dword [esp]
jmp 0x10d8815
and ecx, 0x6ff90f0a
inc ecx
sub ecx, 0x3db40e69
mov edi, ecx
mov ecx, dword [esp]
add esp, 4
xor ebx, edi
pop edi
push eax
mov eax, 0x72ddde46
sub eax, 0x4fc791ae
or eax, 0xd67023f
sub eax, 0xc844f6b1
jmp 0x10d8852
mov eax, dword [esp]
add esp, 4
xor dword [esp + 4], ebx
pop ebx
jmp 0x10d8aee
mov dword [esp], 0x5cf7d800
add dword [esp], 0xb8e7a07a
mov dword [esp], ebx
push eax
mov eax, 0x6f7f41e9
shl eax, 1
or eax, 0x1fefc3d0
xor eax, 0x3df4408a
dec eax
shr eax, 1
xor eax, 0x6dab4ff
and eax, 0x57fb5b6a
inc eax
xor eax, 0x57db5145
push eax
mov ebx, dword [esp]
jmp 0x10d88b8
pop edi
shr edx, 6
jmp 0x10d8902
push esp
mov edx, dword [esp]
add esp, 4
push ebp
push esi
jmp 0x10d8a4e
push esp
jmp 0x10d8846
add esi, edi
pop edi
mov edx, dword [esp]
add esp, 4
sub eax, esi
pop esi
jmp 0x10d832e
sub esp, 4
mov dword [esp], eax
push esp
pop dword [esp]
add dword [esp], 4
mov esi, dword [esp]
add esp, 4
jmp 0x10d87f4
mov ebx, 0x3f1df515
and ebx, 0x7f7be171
add ebx, 0xffffffff
not ebx
jmp 0x10d8891
add eax, 0x7df0adc0
push esi
mov esi, esp
jmp 0x10d87e9
push 0x3bfe1c6c
mov dword [esp], edi
jmp 0x10d822b
sub edi, 0x7b7f42ac
jmp 0x10d8775
add esp, 4
push ebx
mov ebx, esp
add ebx, 4
push eax
jmp 0x10d8279
xor dword [esp], eax
xor eax, dword [esp]
jmp 0x10d874b
sub edx, 0xc7c8793a
mov ecx, edx
jmp 0x10d880f
pop esp
push esi
push esp
pop esi
push eax
push 0x39e0c34a
jmp 0x10d81f7
add esp, 4
sub esi, edx
push edi
mov edi, 0x7edf98c5
dec edi
neg edi
jmp 0x10d8a7a
pop dword [esp]
jmp 0x10d8981
pop ebp
mov edx, dword [esp]
push edx
mov edx, esp
add edx, 4
push ebx
jmp 0x10d8a59
sub esp, 4
mov dword [esp], esi
jmp 0x10d8341
mov eax, esp
add eax, 4
add eax, 4
xor eax, dword [esp]
jmp 0x10d8733
mov esp, dword [esp]
mov dword [esp], ecx
jmp 0x10d82f2
push ebx
mov ebx, 0x55797755
mov edx, ebx
pop ebx
push ebx
push ecx
mov ecx, 0x17bafb30
mov ebx, 0x2c456291
xor ebx, ecx
pop ecx
jmp 0x10d8b73
add edi, 4
xchg dword [esp], edi
mov esp, dword [esp]
pop dword [esp]
mov esp, dword [esp]
jmp 0x10d8979
push ebp
mov ebp, 4
jmp 0x10d8802
push edi
mov edi, 4
add esi, edi
pop edi
jmp 0x10d88ea
add esi, ebp
mov ebp, dword [esp]
add esp, 4
jmp 0x10d88f2
pop edx
jmp 0x10d82ff
xor dword [esp], esi
xor esi, dword [esp]
mov esp, dword [esp]
sti
push edi
mov dword [esp], edx
push eax
mov eax, 0x75fa0eec
je 0x10d8823
or eax, dword [ecx]
outsd dx, dword [esi]
neg eax
add eax, 0xff968164
mov edx, eax
pop eax
add edx, 0x63f42d48
sub eax, edx
pop edx
jmp 0x10d844f
pop edi
add edi, 4
jmp 0x10d87d5
mov edx, eax
mov eax, dword [esp]
push esi
mov esi, esp
add esi, 4
add esi, 4
push esi
jmp 0x10d8252
mov ebx, 0x5dff7751
jmp 0x10d83de
sub dword [esp], 0x1ed202dd
pop esi
add esi, 0x1ed202dd
jmp 0x10d89e0
not ebx
push eax
mov eax, 0xedee8e16
sub ebx, 0x5db910a5
sub ebx, 0x6dfd92ee
add ebx, eax
add ebx, 0x6dfd92ee
add ebx, 0x5db910a5
jmp 0x10d85c5
add esp, 4
pop eax
push ecx
mov ecx, esp
add ecx, 4
jmp 0x10d83b2
add esi, 4
jmp 0x10d8a8d
sub esi, 4
jmp 0x10d8788
shr edi, 2
jmp 0x10d8919
add edx, 0x7fdedebf
sub edx, 0x4be55f0b
sub edi, 0x7dfb1500
jmp 0x10d8a00
push ebx
jmp 0x10d886c
sub ebp, edi
pop edi
jmp fcn.010d828f
mov eax, 0x7d37d731
jmp 0x10d8b6a
mov dword [esp], esi
jmp 0x10d867f
pop esp
xor edx, ebx
mov ebx, dword [esp]
jmp 0x10d8ba1
mov edi, 0x77ebb8f9
jmp 0x10d8a14
xchg edx, ebx
push ebx
not dword [esp]
pop ebx
xchg edx, ebx
jmp 0x10d86cb
pop edi
push edx
mov edx, 0x7af3aefc
jmp 0x10d8205
sub edi, 0x45bfa606
add edi, edx
add edi, 0x45bfa606
push ebp
jmp 0x10d83c4
sub ebp, edi
pop edi
add ebp, ebx
push esi
mov esi, 0x77ebb8f9
add ebp, 0x51ae7e1e
add ebp, esi
sub ebp, 0x51ae7e1e
mov esi, dword [esp]
add esp, 4
pop ebx
xor ebp, dword [esp]
xor dword [esp], ebp
xor ebp, dword [esp]
mov esp, dword [esp]
sub esp, 4
mov dword [esp], edx
jmp 0x10d87b8
mov esi, 4
push esi
jmp 0x10d8bb5
mov ebx, 0x7bbbdc7e
push edi
mov edi, 0x6dff6646
shl edi, 6
jmp 0x10d81c9
inc edi
inc edi
add edi, 0x7f7f836d
sub edi, 0xd3a7744f
jmp 0x10d866b
xchg dword [esp], esi
mov esp, dword [esp]
sti
push ebp
mov ebp, esp
add ebp, 4
sub ebp, 4
xor ebp, dword [esp]
jmp 0x10d8ab1
push ebp
jmp 0x10d84c6
xor dword [esp], ebp
xor ebp, dword [esp]
jmp 0x10d87ad
push dword [esp]
push dword [esp]
mov ecx, dword [esp]
add esp, 4
sub esp, 4
mov dword [esp], ecx
push esp
pop ecx
add ecx, 4
add ecx, 4
xchg dword [esp], ecx
jmp 0x10d8b59
mov dword [esp], 0x737b51e2
xor dword [esp], 0x79cbc433
add dword [esp], 0x5bcf782f
mov dword [esp], eax
jmp 0x10d896f
pop esp
push 0x2234670e
mov dword [esp], ebx
mov dword [esp], edx
jmp 0x10d8657
xor dword [esp + 4], eax
jmp 0x10d84ce
xor edx, ebx
pop ebx
jmp 0x10d8996
add eax, 0x74850c10
sub ebx, eax
pop eax
xchg dword [esp], ebx
pop esp
mov dword [esp], ecx
mov dword [esp], 0x3df3cf88
add dword [esp], 0x30696468
mov dword [esp], ebx
push ebp
jmp 0x10d8c6a
push esi
mov esi, esp
add esi, 4
add esi, 4
jmp 0x10d8c44
sub dword [esp], 0x7e7a060b
mov ebp, dword [esp]
add esp, 4
add ebp, 0x7e7a060b
pop esi
add edx, ebp
pop ebp
add edx, 4
push ecx
mov dword [esp], edx
push dword [esp + 4]
pop edx
pop dword [esp]
mov esp, dword [esp]
push dword [eax]
mov edi, dword [esp]
sub esp, 4
mov dword [esp], ebp
mov ebp, esp
add ebp, 4
push edx
jmp 0x10d85f4
xchg dword [esp], esi
pop esp
shr edx, 3
or edx, 0x29fb9b2b
shr edx, 6
add edx, 0x2f4ca13f
xor edi, edx
jmp 0x10d8c61
push dword [esp]
pop edx
jmp 0x10d871e
mov ebp, 0x7e7eff4a
push edi
push ecx
mov ecx, 0x6f3f0c40
jmp 0x10d8c83
mov edi, ecx
pop ecx
jmp 0x10d891f