Function at 0x5a061b
Capabilities:
Check for vm using instruction vpcext
Reference the vmware io port

Disassembly:
pop esp
mov dword [esp], ecx
mov ecx, 0x5f6ba47f
or ecx, 0x5e7cc0a5
push edi
mov dword [esp], eax
jmp 0x5a1400
push esp
pop edx
jmp 0x59edd7
pop ebx
jmp 0x59eb13
sub eax, 0x1f536063
jmp 0x59ed12
push edi
jmp 0x5a0ed5
sub esp, 4
mov dword [esp], esi
mov esi, eax
jmp 0x59fa79
inc dword [esp]
xor dword [esp], 0x6ef73290
add dword [esp], 0x6a9fef9a
mov dword [esp], eax
push dword [esp]
push dword [esp]
pop eax
add esp, 4
push ebx
push esp
jmp 0x5a03e7
pop ebp
xchg ebx, ebp
jmp 0x59f15c
xor edi, 0xdae5b359
shr edi, 2
push ecx
mov ecx, 0x377cd52b
shr ecx, 1
jmp 0x5a2714
add esp, 4
add esp, 4
mov eax, dword [esp]
push edx
jmp 0x59e873
add esp, 4
jmp 0x5a1c9a
add esp, 4
jmp 0x59f13d
pop edx
push dword [esp]
mov esi, dword [esp]
jmp 0x59ed87
add esp, 4
push edi
jmp 0x5a0a89
add edx, 4
jmp 0x59f464
add esp, 4
push ebx
push edx
mov edx, 0x45f28a55
mov ebx, 0xba0d75af
add ebx, edx
pop edx
jmp 0x5a04a7
mov edx, esi
pop esi
jmp 0x5a3513
sub eax, edx
sub eax, 0x79fb0f48
push ecx
mov ecx, 0x3bce1159
add eax, ecx
mov ecx, dword [esp]
add esp, 4
pop edx
jmp 0x5a0f85
pop edx
jmp 0x59eef8
neg ecx
xor ecx, 0xf0697120
add eax, ecx
pop ecx
jmp 0x59fe09
push 0x598b4bd7
jmp 0x59f879
dec ebx
jmp 0x5a21a3
pop edx
jmp 0x5a311d
mov dword [esp], edx
jmp 0x5a17c0
add ecx, 0x7f8e8000
jmp 0x59f006
xchg dword [esp], edx
pop esp
push edx
mov dword [esp], 0x797faaf9
push ebx
mov dword [esp], ebp
mov ebp, 0x73945565
or dword [esp + 4], ebp
pop ebp
jmp 0x59eb41
xor dword [esp], esi
xor esi, dword [esp]
pop esp
mov dword [esp], ebx
pop eax
jmp 0x59e99b
add edx, 4
xchg dword [esp], edx
pop esp
xor eax, 0x7dffc2df
cmp dword [ebp + 0x122d2c43], 0
jne 0x59f482
cmp dword [ebp + 0x122d2b73], 0
je 0x59f497
push eax
mov eax, eax
mov eax, 0x7d0
mov dword [ebp + 0x122d24fb], eax
call dword [ebp + 0x122d2636]
pop eax
push 0x2144f5bb
mov dword [esp], eax
push dword [esp]
jmp 0x5a0438
add eax, ecx
mov ecx, dword [esp]
push edx
mov edx, esp
add edx, 4
add edx, 4
jmp 0x59f379
mov dword [esp], esi
push esp
jmp 0x5a0190
mov edx, dword [esp]
add esp, 4
push 0x7664a9a0
mov dword [esp], edx
jmp 0x5a2fe2
pop edx
add esp, 4
jmp 0x5a05dd
push esi
push eax
jmp 0x5a006c
xor esi, 0x7fdfe533
jmp 0x5a1ed4
add edi, eax
pop eax
add edi, 4
xchg dword [esp], edi
pop esp
jmp 0x5a25f0
sub ecx, 0xffffffff
jmp 0x59f36e
mov byte [ebp + 0x122d237f], 0x47
push 0x93c8f7c1
push dword [ebp + 0x122d1315]
call dword [ebp + 0x122d2325]
push 0x176ae2f9
mov dword [esp], ebp
jmp 0x59f366
sub esp, 4
jmp 0x5a0b08
mov dword [esp], edx
mov edx, 4
add edi, edx
push dword [esp]
jmp 0x59fa5e
pop esp
mov ebp, dword [esp]
add esp, 4
cmp dword [ebp + 0x122d2c43], 0
jne 0x59ffc6
cmp dword [ebp + 0x122d2b73], 0
je 0x59ffdb
push eax
mov eax, eax
mov eax, 0x7d1
mov dword [ebp + 0x122d24fb], eax
call dword [ebp + 0x122d2636]
pop eax
push 0x367356d7
mov dword [esp], eax
jmp 0x5a34ad
mov eax, 0x5cdf2120
add dword [esp + 4], eax
pop eax
jmp 0x5a0637
add ebp, 4
add ebp, 4
xchg dword [esp], ebp
pop esp
push eax
mov dword [esp], ecx
mov dword [esp], 0x13312910
jmp 0x5a0314
not dword [esp]
sub dword [esp], 0x6fba9220
push ecx
mov ecx, 0xffffffff
jmp 0x5a28a8
pop esi
jmp 0x59ea57
mov ecx, 0x6ff7f125
neg ecx
jmp 0x59fba1
mov edi, 0xd3581b3a
sub edi, ebx
pop ebx
jmp 0x5a0a47
mov dword [esp], edx
mov edx, 0x533d7e50
push edi
push ebx
mov ebx, 0x53fb3393
jmp 0x5a02f4
pop ebx
push edx
mov edx, 0x59ebc9e1
neg edx
xor edx, 0x7ef7edd2
push 0x7a88d17c
mov dword [esp], ebx
jmp 0x5a0fdc
pop eax
push eax
jmp 0x5a17de
mov edx, 0x737e8306
mov dword [esp + 4], edx
mov edx, dword [esp]
add esp, 4
push ecx
mov ecx, 0x1c9d02dc
and dword [esp + 4], ecx
pop ecx
not dword [esp]
jmp 0x5a13b7
sub eax, 0x6a8fe652
add eax, ebx
add eax, 0x6a8fe652
pop ebx
jmp 0x5a1d95
xchg dword [esp], edi
pop esp
cmp dword [ebp + 0x122d2c43], 0
jne 0x5a05f3
cmp dword [ebp + 0x122d2b73], 0
je 0x5a0602
push eax
mov eax, eax
mov eax, 0
call dword [ebp + 0x122d225b]
pop eax
push edx
mov dword [esp], 0x44e74e1e
mov dword [esp], eax
push ecx
mov ecx, 0x7affd2ae
add dword [esp + 4], ecx
pop ecx
mov eax, dword [esp]
push ebp
mov ebp, esp
jmp 0x5a00cd
push dword [esp]
pop eax
add esp, 4
push edx
jmp 0x5a1f1c
mov edx, 0x7dbe39b7
push ecx
mov dword [esp], eax
mov eax, 0x7efecfaf
inc eax
jmp 0x5a2795
shr edi, 3
push esi
mov esi, 0x719ef076
and edi, esi
pop esi
add edi, 0xee77ef94
add esi, edi
pop edi
sub esi, 4
xor esi, dword [esp]
jmp 0x59f398
xor eax, 0x423eb9db
and ebx, eax
pop eax
xor ebx, 0x6fff1c00
add ebx, 0x4560ad8f
mov esi, ebx
pop ebx
xor esi, eax
mov eax, dword [esp]
add esp, 4
add edx, 0x7ea3f9c2
sub edx, esi
sub edx, 0x7ea3f9c2
push dword [esp]
push dword [esp]
pop esi
jmp 0x5a12f2
push ecx
mov ecx, 0x579a9349
sub edi, ecx
jmp 0x5a0c6a
push esp
pop edi
add edi, 4
push ebx
push esp
pop ebx
add ebx, 4
sub ebx, 4
xchg dword [esp], ebx
mov esp, dword [esp]
jmp 0x59fe4c
mov dword [esp], edx
push esi
jmp 0x5a1480
push eax
mov eax, 0x717d0bbe
xor eax, 0x6cfd492d
neg eax
not eax
or eax, 0x1aef04a2
jmp 0x5a09dd
pop ecx
add edx, edi
mov edi, dword [esp]
push ebx
mov ebx, esp
jmp 0x5a0f39
mov dword [esp], edx
sub dword [esp], 0x7f9b48fc
pop dword [eax]
add dword [eax], 0x7f9b48fc
push dword [esp]
pop edx
push ebp
mov ebp, esp
add ebp, 4
push ebx
mov ebx, 4
add ebp, ebx
pop ebx
xchg dword [esp], ebp
pop esp
mov eax, dword [esp]
jmp 0x5a3adc
mov edi, 0x73bf683d
not edi
jmp 0x5a09bd
add ebx, 4
add ebx, 4
xchg dword [esp], ebx
pop esp
sub eax, 0x3bce1159
add eax, 0x79fb0f48
jmp 0x59ef85
sub esp, 4
mov dword [esp], eax
jmp 0x5a1832
mov ebx, 0x7dd76500
sub edx, ebx
mov ebx, dword [esp]
add esp, 4
add edx, 0x6f1e4a57
xor edx, 0xca2ac120
jmp 0x5a3404
pop esp
mov ebx, ebp
push dword [esp]
pop ebp
jmp 0x59ec95
mov dword [esp], ebp
mov ebp, eax
push esi
mov dword [esp], 0x3182066e
mov dword [esp], edx
push ebp
mov edx, dword [esp]
push edi
jmp 0x5a2f35
add esp, 4
push ebp
mov ebp, esp
add ebp, 4
add ebp, 4
xchg dword [esp], ebp
pop esp
xor edx, dword [esp]
jmp 0x5a1971
shr edx, 3
xor edx, 0x1adf6617
shr edx, 5
dec edx
neg edx
sub edx, 0xff76e370
add ebx, edx
pop edx
push esi
mov esi, 0x7f16d7df
push edi
push ecx
mov dword [esp], ebp
mov ebp, 0x75fe4f2a
mov edi, 0xb701616
xor edi, ebp
pop ebp
xor edi, 0x1fcbb79
jmp 0x5a351a
push 0x6f7e270e
mov dword [esp], edi
push 0x7637b384
pop edi
jmp 0x5a2a7b
mov dword [esp], esi
mov esi, 0x6dbf08cf
add ecx, 0x7df50123
sub ecx, 0x5dff44ed
add ecx, esi
add ecx, 0x5dff44ed
sub ecx, 0x7df50123
pop esi
neg ecx
xor ecx, 0x23ff8af0
xor ecx, 0x7e43c1c2
jmp 0x59f615
push eax
mov eax, 0x6fffcd36
add eax, 0x7bff468d
shl eax, 5
dec eax
sub eax, 0x1336c655
mov esi, eax
pop eax
jmp 0x59fb65
pop esp
push esi
mov esi, esp
add esi, 4
jmp 0x5a2195
mov edx, 0x31001e89
xor dword [esp + 4], edx
jmp 0x59f255
push esp
mov edx, dword [esp]
add esp, 4
add edx, 4
sub esp, 4
mov dword [esp], esi
push eax
mov eax, 0x77cf5df3
jmp 0x5a1e9a
push esp
mov eax, dword [esp]
jmp 0x59eeb7
push esi
jmp 0x5a1875
push eax
push esi
mov dword [esp], ecx
mov ecx, esp
add ecx, 4
sub ecx, 4
xchg dword [esp], ecx
pop esp
mov dword [esp], ebx
mov ebx, 0x6f57fb60
xor ebx, ebp
xor ebp, ebx
xor ebx, ebp
push ebp
not dword [esp]
jmp 0x59eb85
xor dword [esp], edx
jmp 0x5a1a25
mov edx, dword [esp]
add esp, 4
xor eax, dword [esp]
xor dword [esp], eax
xor eax, dword [esp]
mov esp, dword [esp]
push 0x7c76ff34
mov dword [esp], edx
mov dword [esp], 0x5cbb857b
push ebp
mov ebp, 0x23c46447
xor dword [esp + 4], ebp
pop ebp
add dword [esp], 0xffffffff
push edx
jmp 0x5a172b
xor edx, dword [esp]
mov esp, dword [esp]
mov dword [esp], eax
lea eax, [ebp + 0x124646ba]
push edx
sub esp, 4
mov dword [esp], edi
mov edi, 0x11ffa95d
sub edi, 0x556503c3
push 0x4df3275e
mov dword [esp], edi
inc dword [esp]
pop edi
jmp 0x59eb99
mov dword [esp], eax
mov eax, esp
jmp 0x5a349e
push 0x7dc3f461
mov dword [esp], edx
jmp 0x5a1a57
push eax
mov dword [esp], edx
mov edx, 0x7bedcd3c
add edx, 0x3f7f7ffa
push ebp
mov ebp, 0x3ff2f8f2
not ebp
sub ebp, 0x49fb9db
sub edx, ebp
pop ebp
add eax, edx
mov edx, dword [esp]
push ebx
jmp 0x5a1ddf
mov ebx, esp
add ebx, 4
add ebx, 4
xchg dword [esp], ebx
jmp 0x5a1661
push ebx
mov ebx, 0x7fbbacf8
jmp 0x5a0b8c
dec esi
push edx
jmp 0x5a0709
mov eax, 0x89158957
xor dword [esp + 4], eax
pop eax
mov dword [esp], eax
push 1
push 0
push 0
call dword [ebp + 0x122d25f1]
mov dword [ebp + 0x122d323f], eax
push 0xffffffffffffffff
push dword [ebp + 0x122d323f]
call dword [ebp + 0x122d32b4]
sub esp, 4
jmp 0x5a12a2
mov edx, 0x5cdf2120
add eax, 0x1f536063
jmp 0x5a2536
sub esi, 4
xchg dword [esp], esi
jmp 0x5a24b8
not ebx
push ecx
push 0x7ff595fc
pop ecx
shl ecx, 6
shr ecx, 2
inc ecx
sub ecx, 0x4e01273f
sub ebx, ecx
jmp 0x5a258b
mov dword [esp], esi
push edx
jmp 0x5a0485
pop esp
mov dword [esp], eax
push dword [esp + 4]
mov eax, dword [esp]
jmp 0x5a26e7
sub eax, edx
jmp 0x59e9ed
pop ecx
mov eax, ebx
pop ebx
mov esi, eax
pop eax
xor dword [esp + 4], esi
push dword [esp]
mov esi, dword [esp]
jmp 0x59ebcd
mov eax, edx
push dword [esp]
jmp 0x59f8c0
add esp, 4
jmp 0x5a2822
sub ecx, 0x55fe203d
shl ecx, 4
jmp 0x5a3a31
or eax, 0x7ffbe100
xor eax, 0xea49f235
add edx, eax
pop eax
jmp 0x5a350c
pop dword [esp]
mov esp, dword [esp]
jmp 0x5a2abe
add dword [esp + 4], ecx
pop ecx
jmp 0x5a365f
xor dword [esp + 4], edi
mov edi, dword [esp]
add esp, 4
push eax
jmp 0x5a1edb
push ebp
mov ebp, esp
add ebp, 4
push eax
mov eax, 4
jmp 0x5a30c2
mov byte [ebp + 0x122d237f], 0x53
push 0x99395f90
push dword [ebp + 0x122d1315]
call dword [ebp + 0x122d2325]
mov dword [ebp + 0x122d358d], eax
mov byte [ebp + 0x122d237f], 0x57
push 0x90045206
push dword [ebp + 0x122d1315]
call dword [ebp + 0x122d2325]
mov dword [ebp + 0x122d32b4], eax
mov byte [ebp + 0x122d237f], 0x43
push 0xbc907028
push dword [ebp + 0x122d1315]
call dword [ebp + 0x122d2325]
mov dword [ebp + 0x122d25f1], eax
mov byte [ebp + 0x122d237f], 0x4c
push 0xd9da1ce9
push dword [ebp + 0x122d1315]
call dword [ebp + 0x122d2325]
mov dword [ebp + 0x122d2414], eax
mov byte [ebp + 0x122d237f], 0x46
push 0xbade0614
push dword [ebp + 0x122d1315]
call dword [ebp + 0x122d2325]
mov dword [ebp + 0x122d2fc9], eax
mov byte [ebp + 0x122d237f], 0x44
push 0xbb738e55
push dword [ebp + 0x122d1315]
call dword [ebp + 0x122d2325]
mov dword [ebp + 0x122d1d34], eax
mov byte [ebp + 0x122d237f], 0x47
push 0x8a0fb5e2
push dword [ebp + 0x122d1315]
call dword [ebp + 0x122d2325]
mov dword [ebp + 0x122d2e57], eax
mov byte [ebp + 0x122d237f], 0x47
push 0x83d0b5f3
push dword [ebp + 0x122d1315]
call dword [ebp + 0x122d2325]
mov dword [ebp + 0x122d237a], eax
mov byte [ebp + 0x122d237f], 0x77
push 0xf397a8a3
push dword [ebp + 0x122d30b6]
call dword [ebp + 0x122d2325]
mov dword [ebp + 0x122d3237], eax
mov byte [ebp + 0x122d237f], 0x47
push 0x8728faf6
push dword [ebp + 0x122d1315]
call dword [ebp + 0x122d2325]
mov dword [ebp + 0x122d2ec0], eax
mov byte [ebp + 0x122d237f], 0x43
push 0xbc8e6efc
push dword [ebp + 0x122d1315]
call dword [ebp + 0x122d2325]
mov dword [ebp + 0x122d321c], eax
mov byte [ebp + 0x122d237f], 0x45
push 0x8e726969
push dword [ebp + 0x122d1315]
call dword [ebp + 0x122d2325]
mov dword [ebp + 0x122d2e69], eax
mov byte [ebp + 0x122d237f], 0x44
push 0xb8f2ec64
push dword [ebp + 0x122d1315]
call dword [ebp + 0x122d2325]
mov dword [ebp + 0x122d29ab], eax
push 0xcee4e7b8
push dword [ebp + 0x122d3280]
call dword [ebp + 0x122d2325]
mov dword [ebp + 0x122d2eb8], eax
mov byte [ebp + 0x122d237f], 0x43
push 0xc0764aa7
push dword [ebp + 0x122d1315]
call dword [ebp + 0x122d2325]
mov dword [ebp + 0x12458dae], eax
mov byte [ebp + 0x122d237f], 0x56
push 0xd41f6d39
push dword [ebp + 0x122d1315]
call dword [ebp + 0x122d2325]
mov dword [ebp + 0x122d2cd3], eax
mov byte [ebp + 0x122d237f], 0x53
push 0xfcb148d8
push dword [ebp + 0x122d1315]
call dword [ebp + 0x122d2325]
mov dword [ebp + 0x122d3311], eax
cmp byte [ebp + 0x12464269], 0
je 0x5a1f08
lea eax, [ebp + 0x1246424b]
push ecx
push esi
mov esi, 0x1be7dbe4
mov dword [esp + 4], esi
pop esi
mov dword [esp], ebp
mov dword [esp], 0x7febfbb3
shl dword [esp], 8
push 0x79524682
mov dword [esp], edi
mov edi, 0xd1d4070c
sub dword [esp + 4], 0x4bdfd885
sub dword [esp + 4], edi
add dword [esp + 4], 0x4bdfd885
pop edi
jmp 0x5a22c2
mov edi, esp
push eax
mov eax, 0x7b8d1a11
add eax, 0x6f9e6040
add eax, 0x57db4c85
add eax, 0xbcf9392e
jmp 0x59fb92
mov dword [esp], ecx
push esp
pop ecx
push eax
mov eax, 0x4ff6320d
shl eax, 1
shl eax, 6
shl eax, 2
xchg edi, eax
not edi
xchg edi, eax
xor eax, 0x139be5fb
sub ecx, 0x53bc2dd1
add ecx, eax
add ecx, 0x53bc2dd1
pop eax
jmp 0x5a30b7
add ecx, 4
xchg dword [esp], ecx
jmp 0x59ffaa
sub ebp, eax
jmp 0x5a3388
mov dword [esp], eax
mov dword [esp], 0x4edf7afb
xchg dword [esp], ebx
dec ebx
xchg dword [esp], ebx
jmp 0x5a013f
pop eax
xchg dword [esp], ebp
jmp 0x59e7e7
add ebx, 0x1f77b660
add ebx, edx
sub ebx, 0x1f77b660
pop edx
push esi
mov esi, 4
add ebx, esi
pop esi
xor ebx, dword [esp]
xor dword [esp], ebx
xor ebx, dword [esp]
pop esp
cmp dword [ebp + 0x122d2c43], 0
jne 0x5a3438
cmp dword [ebp + 0x122d2b73], 0
je 0x5a3449
push eax
push ebx
mov eax, eax
mov eax, 0
call dword [ebp + 0x122d1d4f]
pop ebx
pop eax
sub esp, 4
mov dword [esp], eax
push dword [esp]
mov eax, dword [esp]
jmp 0x59ec8a
push ecx
jmp 0x5a0269
push dword [esp]
pop eax
push ebx
mov ebx, esp
push edx
mov edx, 0x5fe7bd31
jmp 0x5a1324
xor esi, edx
jmp 0x59eff5
add eax, edx
jmp 0x5a1979
xor esi, edi
push dword [esp]
pop edi
add esp, 4
sub esp, 4
mov dword [esp], ebp
push edi
mov edi, 0x57f5c2ba
push esi
mov esi, 0x7fff77de
or esi, 0x7e7f0c8a
neg esi
sub esi, 0x5c77385b
jmp 0x5a3895
add dword [esp], 0x3dffdeab
add dword [esp], 0xec099c39
push ecx
mov ecx, 0x6ae84448
or dword [esp + 4], ecx
pop ecx
xor dword [esp], 0x57bfcbe9
mov dword [esp], eax
push dword [esp]
pop eax
jmp 0x5a391f
mov ebp, esi
pop esi
add ebp, edi
pop edi
and esi, ebp
pop ebp
sub esi, 0x64007c
jmp 0x5a39e6
add esp, 4
cmp dword [ebp + 0x122d2c43], 0
jne 0x5a3934
cmp dword [ebp + 0x122d2b73], 0
je 0x5a3943
push eax
mov eax, eax
mov eax, 0
call dword [ebp + 0x122d1ca4]
pop eax
push ebx
push ebp
push 0x2b98ba0b
mov dword [esp], ebx
push edi
mov dword [esp], eax
add dword [esp], 0x74af03a0
pop ebx
sub ebx, 0x74af03a0
mov ebp, ebx
push dword [esp]
pop ebx
push eax
push esp
pop eax
add eax, 4
add eax, 4
xchg dword [esp], eax
jmp 0x5a1120
add ebx, esi
push dword [esp]
pop esi
jmp 0x5a3a1d
add esp, 4
push ebx
push dword [esp + 4]
pop ebx
pop dword [esp]
mov esp, dword [esp]
jmp 0x59fc63
shr ecx, 8
neg ecx
xor ecx, 0x9ee8100e
add edi, ecx
push dword [esp]
pop ecx
add esp, 4
mov edx, edi
mov edi, dword [esp]
add esp, 4
push edx
neg dword [esp]
pop edx
inc edx
xor edx, 0x85144e68
push ebx
mov ebx, esp
add ebx, 4
jmp 0x5a3a6a
push eax
mov eax, 4
sub ebx, eax
pop eax
push ebx
push dword [esp + 4]
jmp 0x5a3a7d
pop ebx
pop dword [esp]
pop esp
jmp 0x5a0d64
sub esp, 4
mov dword [esp], esi
jmp 0x5a3b06
mov dword [esp], edi
jmp 0x5a3b0e
push esp
jmp 0x59ec01