Function at 0x5f4d72
Capabilities:
Check for vm using instruction vpcext
Reference the vmware io port

Disassembly:
pop dword [esp]
pop esp
mov dword [esp], edi
jmp 0x5f21cd
push 0
jmp 0x5f4f7b
mov dword [esp], ebx
mov dword [esp], eax
push dword [esp]
pop eax
push edi
jmp 0x5f3250
shl ebx, 6
jmp 0x5f504c
mov dword [eax], edx
jmp 0x5f2676
push ebx
mov ebx, 0x2ff73aee
jmp 0x5f2b67
pop ebx
sub eax, 0x3d3b9610
add eax, edi
push ecx
mov ecx, 0x5f3e5887
jmp 0x5f68c6
mov eax, 1
sub dword [esp + 4], eax
pop eax
jmp 0x5f26e7
mov ebx, 0x5f3b06fc
or dword [esp + 4], ebx
pop ebx
add dword [esp], 0x7fbe6c68
push eax
mov eax, 0x6079fdb9
jmp 0x5f358f
push ecx
mov ecx, 4
add ebp, ecx
pop ecx
sub ebp, 4
push ebp
push dword [esp + 4]
pop ebp
jmp 0x5f1dfa
not eax
shr eax, 4
or eax, 0x7bff6334
jmp 0x5f58a3
pop edx
jmp 0x5f2aff
inc dword [esp]
push eax
mov eax, 0x307459d7
sub dword [esp + 4], eax
pop eax
xchg dword [esp], eax
jmp 0x5f646e
pop ecx
jmp 0x5f6a28
mov edx, 0x7ad7eb72
xor dword [esp + 4], edx
jmp 0x5f6206
neg edx
push ebx
push esi
jmp 0x5f4416
xchg dword [esp], eax
mov esp, dword [esp]
push edi
mov edi, 0x7d568900
sub edi, 0xffffffff
push ebx
mov ebx, 1
sub edi, ebx
pop ebx
and edi, 0x546d18f6
jmp 0x5f2b2c
sub edx, 0x27afff16
jmp 0x5f2e1f
push dword [esp]
push dword [esp]
pop eax
push 0x1732ed51
mov dword [esp], edi
mov edi, esp
push ebx
jmp 0x5f32e8
push ebx
push 0x20f89222
jmp 0x5f3ee4
mov edi, ebx
pop ebx
mov dword [esp + 4], edi
mov edi, dword [esp]
push ebx
push esp
mov ebx, dword [esp]
add esp, 4
push edx
mov edx, 0x776766e0
inc edx
neg edx
and edx, 0x3ef71e3d
xor edx, 0x8901819
add ebx, edx
pop edx
add ebx, 4
xchg dword [esp], ebx
jmp 0x5f5a33
xor ebx, 0x1030410b
or ecx, ebx
jmp 0x5f2d73
xor dword [esp], 0x33171428
mov dword [esp], eax
lea eax, [ebp + 0x12456caa]
push edx
push ebx
mov ebx, 0x23ffdb69
and ebx, 0x3fff6079
xor ebx, 0x67f7cc47
shr ebx, 3
add ebx, 0x3feffd78
sub ebx, 0xa83d3ca
mov edx, ebx
pop ebx
push ecx
mov dword [esp], ebp
jmp 0x5f3052
pop ebx
not ecx
add ecx, 0xf3de59af
and eax, ecx
pop ecx
inc eax
jmp 0x5f32bc
not edx
xor edx, 0x68c58946
sub esi, edx
pop edx
or ecx, esi
pop esi
push ebx
mov ebx, 0x7fef8a77
jmp 0x5f2c81
add edx, 0x55f72f07
jmp 0x5f5989
mov ebp, 0x7ffddada
add ebp, 0x3ddf8d4c
xor ebp, 0x3ffbdd91
push esi
mov esi, 0x5fdd5ea1
dec esi
xor esi, 0x371f39ec
jmp 0x5f42ed
mov dword [esp], 0x7fde9d94
add dword [esp], 0x5e7eaf4c
sub dword [esp], 0x7df17a4c
add dword [esp], 0x1bdcf323
dec dword [esp]
sub dword [esp], 0x76cc6c64
sub dword [esp], 0xb57d599c
not dword [esp]
jmp 0x5f4c10
push esp
jmp 0x5f3f54
push edi
jmp 0x5f37af
pop eax
neg eax
jmp 0x5f4f30
cmp bx, 0x1f
jne 0x5f65cc
jmp 0x5f635f
push eax
push 0x77ffe16a
jmp 0x5f4320
mov ecx, 0x7013e547
jmp 0x5f3823
push eax
mov eax, esp
jmp 0x5f654e
mov eax, dword [esp]
jmp 0x5f72cf
add esi, 0x3b6cb3ea
jmp 0x5f35de
add dword [esp + 4], eax
mov eax, dword [esp]
add esp, 4
push ecx
jmp 0x5f3cc4
add esi, 0x5097c1a
mov ebx, esi
pop esi
jmp 0x5f63eb
mov esi, esp
push edi
mov edi, 0x7fffd560
inc edi
neg edi
neg edi
add edi, 0x7efb5861
sub edi, 0xfefb2dbe
add esi, edi
pop edi
add esi, 4
push esi
push dword [esp + 4]
jmp 0x5f505b
mov edi, 0x73de6935
xor eax, edi
pop edi
add ebx, eax
pop eax
sub ebx, 4
xchg dword [esp], ebx
mov esp, dword [esp]
jmp 0x5f1fb8
sub ebp, edx
jmp 0x5f7110
xor ecx, eax
jmp 0x5f61f7
pop eax
add eax, 4
sub eax, 4
xchg dword [esp], eax
mov esp, dword [esp]
mov dword [esp], eax
push dword [esp]
pop eax
push eax
jmp 0x5f54b2
mov eax, 0x4fdf7ff0
jmp 0x5f2667
sub eax, 0x5fffd24f
pop ecx
mov edi, dword [esp]
add esp, 4
push ecx
mov ecx, 4
add eax, ecx
pop ecx
jmp 0x5f6b44
lea eax, [ebp + 0x1245bfb2]
push ebp
push 0x5a627b42
jmp 0x5f5b3d
mov ecx, 0x346335f9
jmp 0x5f522d
push ecx
jmp 0x5f5180
mov dword [esp], esi
push ecx
mov ecx, 0x3ee2824a
mov esi, ecx
pop ecx
mov ebx, esi
mov esi, dword [esp]
add esp, 4
jmp 0x5f1fde
pop edi
jmp 0x5f4072
add edi, 4
push esi
mov esi, 4
add edi, esi
pop esi
jmp 0x5f46b7
mov edi, eax
jmp 0x5f41ab
dec ebx
xor ebx, 0x7fd34836
sub ebx, 0x848a56cc
add esi, ebx
pop ebx
add esi, 0xb387ff6
mov ebx, esi
jmp 0x5f4bbf
pop eax
sub edi, ebx
jmp 0x5f22e1
pop esi
jmp 0x5f6751
and esi, 0x7f7f2063
jmp 0x5f514d
pop eax
add eax, 0x5ec9206c
neg eax
neg eax
jmp 0x5f499d
pop ecx
push dword [esp]
pop eax
jmp 0x5f49de
mov esi, 0x7f1e5592
shr esi, 1
not esi
jmp 0x5f460e
push ebx
push edi
mov edi, 0x3ffbea2f
mov ebx, edi
jmp 0x5f6ede
push edi
push dword [esp + 4]
pop edi
pop dword [esp]
mov esp, dword [esp]
mov byte [ebp + 0x122d2813], 0x53
push 0x99395f90
push dword [ebp + 0x122d0ea1]
call dword [ebp + 0x122d1e0d]
mov dword [ebp + 0x122d35d1], eax
mov byte [ebp + 0x122d2813], 0x57
push 0x90045206
push dword [ebp + 0x122d0ea1]
call dword [ebp + 0x122d1e0d]
mov dword [ebp + 0x122d1def], eax
mov byte [ebp + 0x122d2813], 0x43
push 0xbc907028
push dword [ebp + 0x122d0ea1]
call dword [ebp + 0x122d1e0d]
mov dword [ebp + 0x122d36c3], eax
mov byte [ebp + 0x122d2813], 0x4c
push 0xd9da1ce9
push dword [ebp + 0x122d0ea1]
call dword [ebp + 0x122d1e0d]
mov dword [ebp + 0x122d3103], eax
mov byte [ebp + 0x122d2813], 0x46
push 0xbade0614
push dword [ebp + 0x122d0ea1]
call dword [ebp + 0x122d1e0d]
mov dword [ebp + 0x122d3814], eax
mov byte [ebp + 0x122d2813], 0x44
push 0xbb738e55
push dword [ebp + 0x122d0ea1]
call dword [ebp + 0x122d1e0d]
mov dword [ebp + 0x122d1e62], eax
mov byte [ebp + 0x122d2813], 0x47
push 0x8a0fb5e2
push dword [ebp + 0x122d0ea1]
call dword [ebp + 0x122d1e0d]
mov dword [ebp + 0x122d2d5d], eax
mov byte [ebp + 0x122d2813], 0x47
push 0x83d0b5f3
push dword [ebp + 0x122d0ea1]
call dword [ebp + 0x122d1e0d]
mov dword [ebp + 0x122d29f8], eax
mov byte [ebp + 0x122d2813], 0x77
push 0xf397a8a3
push dword [ebp + 0x122d2a1e]
call dword [ebp + 0x122d1e0d]
mov dword [ebp + 0x122d1d8d], eax
mov byte [ebp + 0x122d2813], 0x47
push 0x8728faf6
push dword [ebp + 0x122d0ea1]
call dword [ebp + 0x122d1e0d]
mov dword [ebp + 0x122d33ea], eax
mov byte [ebp + 0x122d2813], 0x43
push 0xbc8e6efc
push dword [ebp + 0x122d0ea1]
call dword [ebp + 0x122d1e0d]
mov dword [ebp + 0x122d386b], eax
mov byte [ebp + 0x122d2813], 0x45
push 0x8e726969
push dword [ebp + 0x122d0ea1]
call dword [ebp + 0x122d1e0d]
mov dword [ebp + 0x122d2a7e], eax
mov byte [ebp + 0x122d2813], 0x44
push 0xb8f2ec64
push dword [ebp + 0x122d0ea1]
call dword [ebp + 0x122d1e0d]
mov dword [ebp + 0x122d3670], eax
push 0xcee4e7b8
push dword [ebp + 0x122d2779]
call dword [ebp + 0x122d1e0d]
mov dword [ebp + 0x122d1d9a], eax
mov byte [ebp + 0x122d2813], 0x43
push 0xc0764aa7
push dword [ebp + 0x122d0ea1]
call dword [ebp + 0x122d1e0d]
mov dword [ebp + 0x122d56c0], eax
mov byte [ebp + 0x122d2813], 0x56
push 0xd41f6d39
push dword [ebp + 0x122d0ea1]
call dword [ebp + 0x122d1e0d]
mov dword [ebp + 0x122d2aed], eax
mov byte [ebp + 0x122d2813], 0x53
push 0xfcb148d8
push dword [ebp + 0x122d0ea1]
call dword [ebp + 0x122d1e0d]
mov dword [ebp + 0x122d25d0], eax
cmp byte [ebp + 0x12456859], 0
je 0x5f4f97
lea eax, [ebp + 0x1245683b]
push edx
mov dword [esp], edi
mov edi, esp
push ebx
mov ebx, 0x3dedeb78
shl ebx, 3
xor ebx, 0x2bf95041
dec ebx
shr ebx, 6
sub ebx, 0x312582a
add edi, ebx
pop ebx
push ebx
mov ebx, 4
sub edi, ebx
pop ebx
xchg dword [esp], edi
pop esp
mov dword [esp], eax
mov dword [esp], 0x7ff6e50a
xor dword [esp], 0x5ae79308
xor dword [esp], 0x10b52881
mov dword [esp], edx
mov dword [esp], 0x3f460f0f
push edx
jmp 0x5f6095
add eax, 0xa9364e1a
mov ebx, eax
pop eax
sub ebx, 0x7fff4fec
add edi, 0x73dc7300
jmp 0x5f4aa2
push ebx
push esp
mov ebx, dword [esp]
add esp, 4
add ebx, 4
push 0x4537537d
mov dword [esp], ecx
mov ecx, 0x7b5316e1
add ecx, 0x84ace923
jmp 0x5f5467
add edi, ebx
jmp 0x5f5765
pop esi
jmp 0x5f303b
push eax
sub esp, 4
mov dword [esp], edx
push ecx
mov ecx, 0x56ffc941
mov edx, ecx
pop ecx
add edx, 0x28d677e0
mov eax, edx
mov edx, dword [esp]
add esp, 4
xor dword [esp + 4], eax
pop eax
sub dword [esp], 0x6fdbb1d6
jmp 0x5f4c42
push ebx
mov ebx, 0x4a6e5af3
add dword [esp + 4], ebx
pop ebx
push eax
jmp 0x5f2575
push 0x2952a461
mov dword [esp], eax
inc dword [esp]
jmp 0x5f32c2
mov byte [ebp + 0x122d2813], 0x47
push 0xe3e45b86
push dword [ebp + 0x122d0ea1]
call dword [ebp + 0x122d1e0d]
push ebx
mov dword [esp], 0x6ffd5121
push eax
push dword [esp + 4]
mov eax, dword [esp]
jmp 0x5f5de2
mov edx, 0x3f1d24a7
shr edx, 1
jmp 0x5f2a1f
push ebp
mov ebp, esp
add ebp, 4
jmp 0x5f58db
push 4
pop eax
add edi, eax
pop eax
push edi
push dword [esp + 4]
jmp 0x5f6301
neg eax
sub eax, 0xe24a128
mov edi, eax
pop eax
jmp 0x5f68d2
push 0
call dword [ebp + 0x122d36c3]
mov dword [ebp + 0x122d2a18], eax
push 0xffffffffffffffff
push dword [ebp + 0x122d2a18]
call dword [ebp + 0x122d1def]
push ebx
mov dword [esp], 0x270b838a
mov dword [esp], eax
push ecx
push esi
mov esi, 0x7feccc61
mov ecx, esi
mov esi, dword [esp]
push esi
jmp 0x5f3611
dec ebx
push edi
push ebx
mov ebx, 1
mov edi, ebx
jmp 0x5f5b35
push dword [esp]
pop esi
add esp, 4
pop dword [esp]
jmp 0x5f5ebc
push ebx
mov ebx, 4
jmp 0x5f6135
add esi, 0x4c8e49f6
xor ebp, esi
pop esi
add edx, 0x7efcc831
sub edx, ebp
sub edx, 0x7efcc831
mov ebp, dword [esp]
push esi
mov esi, esp
push ebx
mov ebx, 4
add esi, ebx
pop ebx
jmp 0x5f534c
mov ecx, esp
add ecx, 4
add ecx, 4
xchg dword [esp], ecx
pop esp
mov byte [ebp + 0x122d2813], 0x47
push 0x93c8f7c1
push dword [ebp + 0x122d0ea1]
call dword [ebp + 0x122d1e0d]
push esi
mov dword [esp], 0x3f99fb00
mov dword [esp], edi
mov dword [esp], eax
mov dword [esp], esi
mov dword [esp], 0x6b126349
mov dword [esp], ebp
push ebp
mov ebp, esp
jmp 0x5f25b6
sub dword [esp + 4], ecx
mov ecx, dword [esp]
add esp, 4
mov dword [esp], eax
jmp 0x5f611c
pop edi
dec ebx
add ebx, 0x401291a5
add edi, ebx
mov ebx, dword [esp]
add esp, 4
jmp 0x5f5c27
xor ecx, 0x62c5cdca
add eax, 0x5fffd24f
add eax, ecx
jmp 0x5f38fe
add esi, 4
xor esi, dword [esp]
xor dword [esp], esi
jmp 0x5f5eb3
add ebx, ecx
pop ecx
xchg dword [esp], ebx
mov esp, dword [esp]
xor eax, 0x7feccc61
cmp dword [ebp + 0x122d2d29], 0
jne 0x5f5487
cmp dword [ebp + 0x122d2d99], 0
je 0x5f549c
push eax
mov eax, eax
mov eax, 0x7d1
mov dword [ebp + 0x122d2e89], eax
call dword [ebp + 0x122d369c]
pop eax
sub esp, 4
mov dword [esp], eax
push ecx
mov dword [esp], 0x5fa1f7cd
mov dword [esp], edx
jmp 0x5f2957
push esp
jmp 0x5f597f
sub edi, 0x73dc7300
pop ebx
add edi, 4
xchg dword [esp], edi
jmp 0x5f5a71
push ecx
sub esp, 4
mov dword [esp], eax
mov eax, 0xf68baaa
jmp 0x5f331f
add ebp, 4
xchg dword [esp], ebp
pop esp
add ecx, 4
push ecx
push dword [esp + 4]
pop ecx
pop dword [esp]
mov esp, dword [esp]
push eax
push esp
jmp 0x5f3866
pop eax
push edx
mov dword [esp], edi
jmp 0x5f599d
add edx, ebx
sub edx, 0x55f72f07
pop ebx
jmp 0x5f218e
push ebx
push 0x79498742
jmp 0x5f653a
pop esp
jmp 0x5f2d27
pop esp
push edi
push ebx
jmp 0x5f5c34
pop ebx
sub ebx, edi
jmp 0x5f5242
mov dword [esp], ecx
push 0x57f10a73
mov dword [esp], edi
mov dword [esp], esi
jmp 0x5f71dd
sub eax, edi
jmp 0x5f5c3b
mov ebx, esp
jmp 0x5f5c49
push dword [esp]
pop edi
add esp, 4
push ecx
push esp
jmp 0x5f6c04
add ebx, 4
sub ebx, 4
xchg dword [esp], ebx
pop esp
mov dword [esp], esp
add dword [esp], 4
mov edi, dword [esp]
push ecx
mov ecx, esp
add ecx, 4
add ecx, 4
xchg dword [esp], ecx
mov esp, dword [esp]
jmp 0x5f508f
add esp, 4
pop dword [esp]
jmp 0x5f6734
xor esi, dword [esp]
pop esp
jmp 0x5f2982
pop esp
xor dword [esp + 4], ecx
jmp 0x5f440c
mov dword [esp], 0x1ecfe471
mov dword [esp], ebx
jmp 0x5f2584
push 1
jmp 0x5f1e1b
add edi, ebx
pop ebx
push eax
jmp 0x5f4ebe
pop eax
push esi
mov esi, 0x677f96d0
neg esi
push edx
jmp 0x5f4d0c
push dword [esp]
pop edx
push edi
mov edi, esp
add edi, 4
push ebp
mov ebp, 4
sub edi, 0x6dbdccbd
jmp 0x5f62a4
add edi, ebp
jmp 0x5f65fb
pop edi
pop dword [esp]
pop esp
lea esi, [ebp + 0x12456caa]
push 0x3f756a3b
mov dword [esp], edx
mov dword [esp], edi
jmp 0x5f31f6
push ecx
mov dword [esp], edi
mov edi, esp
add edi, 4
sub edi, 4
xchg dword [esp], edi
mov esp, dword [esp]
mov dword [esp], eax
push ecx
push esp
pop ecx
add ecx, 4
sub ecx, 4
jmp 0x5f6680
push edx
mov edx, 0x7e7fd976
dec edx
push ebp
mov ebp, 0x4e8ca813
sub edx, ebp
pop ebp
add ecx, 0x65ebe0f6
jmp 0x5f6fa2
not eax
xchg dword [esp], eax
push ecx
mov ecx, 0x3dfb4071
xor dword [esp + 4], ecx
pop ecx
inc dword [esp]
xor dword [esp], 0xc5f5eab7
mov dword [esp], ecx
mov dword [esp], esi
call eax
lea eax, [ebp + 0x12456caa]
mov dword [ebp + 0x122d33c0], eax
cmp dword [eax + 4], 5
jne 0x5f64cb
cmp dword [eax + 8], 2
jne 0x5f64cb
cmp byte [eax + 0x14], 0
jne 0x5f64cb
mov byte [ebp + 0x12456880], 0
mov dword [ebp + 0x122d118d], 0
cmp dword [eax + 4], 6
jb 0x5f64df
mov dword [ebp + 0x122d2ca5], 1
cmp dword [ebp + 0x122d12a1], 0
jne 0x5f6510
cmp dword [ebp + 0x122d2ca5], 0
jne 0x5f6510
cmp dword [ebp + 0x122d0e51], 0
je 0x5f6510
mov dword [ebp + 0x122d12cd], 0
mov bx, ds
test bl, 4
je 0x5f635f
mov bx, ds
jmp 0x5f32ca
pop ebx
push eax
mov eax, 0x39e5411e
jmp 0x5f6a80
add eax, 4
sub eax, 4
xchg dword [esp], eax
pop esp
mov dword [esp], ebx
push esi
push 0x7fbf89d0
jmp 0x5f69b8
mov eax, dword [ebp + 0x12456d3e]
mov dword [ebp + 0x122d2c19], eax
mov dword [ebp + 0x122d0fc9], 0
cmp dword [ebp + 0x12456d3e], 0
je 0x5f4cd0
jmp 0x5f3ba6
add edi, 0x6dbdccbd
pop ebp
push 0x5a182fe3
jmp 0x5f6de9
xchg dword [esp], ecx
pop esp
mov dword [esp], esi
mov dword [esp], ebp
push edi
jmp 0x5f6830
not eax
xchg dword [esp], eax
push ecx
mov ecx, 0x7efc4943
xchg ecx, esi
push esi
not dword [esp]
jmp 0x5f4229
sub esp, 4
mov dword [esp], eax
mov eax, 0x39fe6eaa
xor eax, 0x7ffc7ac7
jmp 0x5f4cb1
inc ecx
or ecx, 0x5fec4b52
jmp 0x5f5308
mov ebp, edi
pop edi
xor dword [esp + 4], ebp
mov ebp, dword [esp]
add esp, 4
pop eax
push ebx
mov dword [esp], 0x5322c7b9
mov dword [esp], ebp
mov ebp, 0x37dd7346
xor eax, ebp
mov ebp, dword [esp]
add esp, 4
cmp dword [ebp + 0x122d2d29], 0
jne 0x5f690d
pop esi
shl esi, 8
jmp 0x5f346f
add esp, 4
jmp 0x5f3329
dec eax
xor eax, 0x40acc65b
jmp 0x5f413a
xchg dword [esp], eax
mov esp, dword [esp]
jmp 0x5f6bd2
cmp dword [ebp + 0x122d2d29], 0
jne 0x5f6be4
cmp dword [ebp + 0x122d2d99], 0
je 0x5f6bf3
push eax
mov eax, eax
mov eax, 0
call dword [ebp + 0x122d2802]
pop eax
push eax
add dword [esp], 0x4cf72c22
mov eax, dword [esp]
push eax
jmp 0x5f6e3f
push dword [esp]
jmp 0x5f287f
mov dword [esp], edi
push dword [esp + 4]
pop edi
pop dword [esp]
pop esp
pop eax
push edx
mov edx, esp
add edx, 4
sub edx, 4
xchg dword [esp], edx
jmp 0x5f6e2b
pop esp
mov dword [esp], edx
push 0x7ad7eb72
mov edx, dword [esp]
add esp, 4
jmp 0x5f737e
push esp
pop eax
add eax, 4
jmp 0x5f6f6f
pop edi
neg ebx
jmp 0x5f4172
add eax, 4
jmp 0x5f29e3
add ecx, edx
sub ecx, 0x65ebe0f6
pop edx
add ecx, ebx
sub esp, 4
mov dword [esp], edi
push ebp
mov ebp, 0x7fffb20f
neg ebp
push edx
mov edx, 0x500d1c8f
jmp 0x5f37cb
pop edx
mov edi, ebp
mov ebp, dword [esp]
add esp, 4
sub ecx, edi
pop edi
pop ebx
sub ecx, 4
xchg dword [esp], ecx
pop esp
mov dword [esp], eax
jmp 0x5f3424
push edi
mov edi, 0x2feaf986
mov esi, 0x3b1009f9
add esi, edi
jmp 0x5f7677
add esp, 4
cmp dword [ebp + 0x122d2d29], 0
jne 0x5f72e7
cmp dword [ebp + 0x122d2d99], 0
je 0x5f72fc
push eax
mov eax, eax
mov eax, 0x7d0
mov dword [ebp + 0x122d2e89], eax
call dword [ebp + 0x122d369c]
pop eax
push ebx
mov ebx, esp
push eax
jmp 0x5f38dd
xor eax, edx
jmp 0x5f7396
push dword [esp]
pop edx
jmp 0x5f3e80