Function at 0xb7ec14
Capabilities:
Check for vm using instruction vpcext
Reference the vmware io port

Disassembly:
push dword [esp]
mov eax, dword [esp]
push eax
jmp 0xb7dc74
not dword [esp]
pop ecx
push eax
mov eax, 0x7fb3667a
inc eax
neg eax
sub eax, 0xdf6e086
add ecx, eax
mov eax, dword [esp]
add esp, 4
add eax, 0x7ff7ef16
sub eax, ecx
sub eax, 0x7ff7ef16
jmp 0xb7dc57
pop esp
push eax
sub esp, 4
jmp 0xb7dc1f
dec ebp
add ebp, 0x7dbf5927
xor ebp, 0xffb32ca5
sub ebp, 0x16485e9a
sub eax, ebp
jmp 0xb7dcd5
push esp
pop dword [esp]
sub esp, 4
mov dword [esp], edx
mov edx, 4
add dword [esp + 4], edx
pop edx
pop eax
push esi
mov esi, 4
add eax, esi
pop esi
jmp 0xb7dcc3
sub ecx, edi
pop edi
pop edx
sub ecx, 0xffffffff
not ecx
sub ecx, 0x7ae34a50
push ecx
jmp 0xb7dbd0
mov ecx, dword [esp]
jmp 0xb7dcf0
push eax
pop ebx
pop eax
neg ebx
shl ebx, 6
push eax
mov eax, 0x557a1085
add ebx, eax
jmp 0xb7dd47
mov eax, esp
add eax, 4
add eax, 4
xchg dword [esp], eax
jmp 0xb7dbfb
pop ebx
xor eax, dword [esp]
xor dword [esp], eax
xor eax, dword [esp]
mov esp, dword [esp]
sub esp, 4
mov dword [esp], ecx
mov ecx, 0x7e7ae9e5
push eax
mov dword [esp], 0x71966667
mov dword [esp], edx
jmp 0xb7dcb9
add eax, esi
pop esi
jmp 0xb7dc86
mov edx, 0x7af3aab2
jmp 0xb7dd27
push 0x1cf9f9d3
mov dword [esp], ebx
mov ebx, 4
jmp 0xb7dd06
pop ebp
add eax, ebx
jmp 0xb7dcf8
add ecx, 0x7dff6e37
sub ecx, edx
push edi
mov edi, 0x7dff6e37
jmp 0xb7dc42
add esp, 4
jmp 0xb7dd71
sub esp, 4
mov dword [esp], esi
jmp 0xb7dd1d
push ebp
mov ebp, 0x7f7fea13
xor ebp, 0x79efd836
and ebp, 0x5df70494
jmp 0xb7dc05
mov esi, 0x67b416f5
jmp 0xb7dcb1
push ebx
push eax
jmp 0xb7dd2e
mov eax, 0x737f2633
xor eax, 0x6f7b3332
xor eax, 0x7f3ba29a
add eax, 0x14857a12
jmp 0xb7dc5f
pop eax
and ebx, 0x37dcd142
push 0x52a98657
mov dword [esp], esi
mov esi, 0x1bf11fe9
add ebx, esi
pop esi
or edx, ebx
mov ebx, dword [esp]
add esp, 4
xor edx, 0x144c41e1
jmp 0xb7dcdd
mov ecx, ebx
jmp 0xb7e090
mov eax, 0
cmp byte [ebp + 0x12454e20], 0
je 0xb7e0d4
mov byte [ebp + 0x122d1c71], 0x53
mov eax, 0x83d7652c
nop
push eax
nop
push dword [ebp + 0x122d14c9]
call dword [ebp + 0x122d2b7b]
mov ebx, eax
lea eax, [ebp + 0x12454e60]
nop
push eax
nop
lea eax, [ebp + 0x12454e20]
push eax
mov dword [esp], eax
call ebx
cmp dword [ebp + 0x12454dee], 0
je 0xb7e0eb
mov dword [ebp + 0x122d39b7], 1
mov byte [ebp + 0x122d1c71], 0x47
mov eax, 0x906d6c8d
nop
push eax
nop
push dword [ebp + 0x122d14c9]
call dword [ebp + 0x122d2b7b]
call eax
mov edi, eax
cmp byte [edi], 0x22
jne 0xb7e135
inc edi
mov al, 0x22
scasb al, byte es:[edi]
jne 0xb7e116
cmp byte [edi], 0
je 0xb7e4f6
inc edi
cmp byte [edi], 0
je 0xb7e4f6
jmp 0xb7e153
cmp byte [edi], 0
je 0xb7e4f6
cmp byte [edi], 0x20
jne 0xb7e14d
inc edi
jmp 0xb7e153
inc edi
jmp 0xb7e135
cmp byte [edi], 0
jne 0xb7e161
jmp 0xb7e4f6
cmp byte [edi], 0x20
jne 0xb7e170
inc edi
jmp 0xb7e161
cmp byte [edi], 0
jne 0xb7e17e
jmp 0xb7e4f6
call fcn.00b7e18d
jmp 0xb7e153
mov eax, 0
test eax, eax
je 0xb7e50d
mov dword [ebp + 0x122d3b23], 0
cmp byte [ebp + 0x12454e13], 0
je 0xb7e524
mov dword [ebp + 0x122d39b7], 1
mov byte [ebp + 0x122d1c71], 0x49
mov eax, 0x8c1529e9
push eax
mov dword [esp], eax
push dword [ebp + 0x122d14c9]
call dword [ebp + 0x122d2b7b]
mov dword [ebp + 0x122d3c8f], eax
mov byte [ebp + 0x122d1c71], 0x49
mov eax, 0xf74ad7ca
push eax
mov dword [esp], eax
push dword [ebp + 0x122d14c9]
call dword [ebp + 0x122d2b7b]
mov dword [ebp + 0x122d3530], eax
cmp dword [ebp + 0x122d16ad], 0
je 0xb7e606
mov byte [ebp + 0x122d1c71], 0x47
mov eax, 0x83d0b5f3
push eax
mov dword [esp], eax
push dword [ebp + 0x122d14c9]
call dword [ebp + 0x122d2b7b]
mov ebx, eax
push 0x10
lea eax, [ebp + 0x12455068]
nop
push eax
nop
lea eax, [ebp + 0x12455060]
nop
push eax
nop
call ebx
test eax, eax
je 0xb7e606
lea eax, [ebp + 0x12455068]
nop
push eax
nop
call fcn.00b7e4be
mov dword [ebp + 0x122d3a87], eax
push 4
push dword [ebp + 0x122d3a87]
call dword [ebp + 0x122d3c8f]
test eax, eax
jne 0xb7e5fc
mov eax, dword [ebp + 0x122d3a87]
cmp dword [eax], 0x9a761b13
je 0xb7e5f7
mov dword [ebp + 0x122d3a87], 0
jmp 0xb7e606
mov dword [ebp + 0x122d3a87], 0
mov ecx, eax
push 0x69cf
mov eax, dword [esp]
sub esp, 4
mov dword [esp], esi
push ebp
push esp
pop ebp
add ebp, 4
sub ebp, 4
xchg dword [esp], ebp
pop esp
mov dword [esp], esp
jmp 0xb7e75d
mov dword [esp], ecx
jmp 0xb7e781
add esi, ecx
pop ecx
add esi, ecx
jmp 0xb7e679
jmp 0xb7e7be
add dword [esp], 0x1a0835a1
mov dword [esp], edi
mov dword [esp], 0xb34d86b
mov dword [esp], edx
mov dword [esp], 0x7de79277
add dword [esp], 0x20f478a
add dword [esp], 1
push ebx
mov ebx, 0x6f73940d
jmp 0xb7e754
sub esi, 0x7fbbfb49
jmp 0xb7e684
sub esi, 0x7cbeacd7
pop ecx
push ebp
mov ebp, 0xff6b1dd
jmp 0xb7e704
shl esi, 1
add esi, 0xbb8289c6
and ecx, esi
pop esi
add ecx, 0xf7bffe7c
push ebp
mov ebp, 0x7cbeacd7
add esi, ebp
jmp 0xb7e6c0
push ebx
mov ebx, 0x25bfe9c3
jmp 0xb7e7a3
pop ebp
push ecx
mov ecx, 0x7fabbb60
jmp 0xb7e6cc
push ebx
mov ebx, 0x7f662200
and ecx, ebx
pop ebx
push ebx
mov ebx, 0x3deda764
sub ebx, 0xbe1e771d
or ecx, ebx
mov ebx, dword [esp]
jmp 0xb7e6eb
add esp, 4
shr ecx, 4
jmp 0xb7e6f9
add ecx, 0x77bd0825
jmp 0xb7e636
and ebp, 0x5afa5b8f
add ebp, 0x7e7e695c
sub ebp, 0x89707ae5
add esi, ebp
pop ebp
xchg dword [esp], esi
mov esp, dword [esp]
push esi
mov dword [esp], 0x1dbb9eaf
not dword [esp]
jmp 0xb7e72f
neg dword [esp]
add dword [esp], 1
dec dword [esp]
jmp 0xb7e645
add esp, 4
push esi
mov esi, 0x35efba86
xor dword [esp + 4], esi
pop esi
jmp 0xb7e6b5
or dword [esp + 4], ebx
jmp 0xb7e76d
add dword [esp], 4
pop esi
sub esp, 4
jmp 0xb7e62e
pop ebx
push eax
mov eax, 0xf7fbfa62
add dword [esp + 4], eax
push dword [esp]
pop eax
jmp 0xb7e73e
mov ecx, 0x77af7431
neg ecx
neg ecx
neg ecx
push esi
mov esi, 0x5ccf4ef1
sub esi, 0x62b55bd9
xor esi, 0x1bff86f1
jmp 0xb7e696
xor dword [esp + 4], ebx
pop ebx
sub dword [esp], 1
xor dword [esp], 0x7506d8d3
mov dword [esp], eax
jmp 0xb7e640
call 0xb7e7c3
push dword [esp]
mov edx, dword [esp]
jmp 0xb7e8c0
xor ebx, dword [esp]
mov esp, dword [esp]
push eax
push ebx
jmp 0xb7ed06
sub edx, 0x6fe32733
sub edx, esi
push eax
mov eax, 0x1fbc1b5c
not eax
shr eax, 1
xor eax, 0x5a9938b0
add eax, 0x452a5c52
add edx, eax
pop eax
pop esi
jmp 0xb7ef6e
xor eax, esi
pop esi
sub eax, 0x3fff7939
sub eax, ebx
jmp 0xb7eb6d
xor edi, ebp
pop ebp
neg edi
add edi, 0xda40ddac
add esi, edi
mov edi, dword [esp]
add esp, 4
add eax, esi
push dword [esp]
pop esi
push 0x216ad884
mov dword [esp], ebp
mov ebp, esp
add ebp, 4
jmp 0xb7ef81
sub esp, 4
jmp 0xb7e9b7
sub esp, 4
mov dword [esp], eax
push 0x1dbfbda5
jmp 0xb7e960
inc ebp
jmp 0xb7eade
push ebx
mov ebx, 0x6efff046
shl ebx, 8
jmp 0xb7ed75
pop eax
push ebp
jmp 0xb7e96d
push eax
jmp 0xb7f3bc
mov dword [esp], ecx
mov ecx, 0x76cf65cb
jmp 0xb7ef94
mov dword [esp], ebx
mov ebx, esp
jmp 0xb7eabe
mov dword [esp], edx
mov edx, esp
push ebp
mov ebp, 0x7b36b887
shr ebp, 5
jmp 0xb7ecc2
mov dword [esp], ecx
jmp 0xb7ea33
push edi
mov dword [esp], esp
add dword [esp], 4
mov ecx, dword [esp]
add esp, 4
push esi
mov esi, 4
add ecx, esi
pop esi
push edx
mov edx, 4
jmp 0xb7eca6
sub esi, 0x59fbd886
push edi
mov edi, 0x3f3ba390
jmp 0xb7f352
add ebx, 4
add ebx, 4
push ebx
push dword [esp + 4]
jmp 0xb7ec65
xor ebp, 0x67fb1742
sub ebp, 0x610401b2
add edx, ebp
pop ebp
push eax
push ecx
push 0x71dfb516
mov ecx, dword [esp]
sub esp, 4
jmp 0xb7ed8e
push ebx
mov ebx, 0x3fff7939
add eax, ebx
pop ebx
push dword [esp]
jmp 0xb7ec13
pop ebx
push ebp
mov ebp, esp
push esi
mov dword [esp], eax
mov eax, 0x6ff859ee
shr eax, 3
add eax, 0xf200f4c7
jmp 0xb7f271
mov ebp, edx
jmp 0xb7f201
pop ebx
pop dword [esp]
mov esp, dword [esp]
jmp 0xb7ed6f
push ebp
mov ebp, 0x36ebbd45
shr ebp, 7
push ebx
mov ebx, 0xa0b659fe
add ebp, 0x7ffeac79
add ebp, 0x1fd97aea
sub ebp, ebx
jmp 0xb7f24a
sub ecx, 0x49ff9784
add ecx, edx
add ecx, 0x49ff9784
jmp 0xb7f07f
sub ebp, 0x7edf4ca1
sub ebp, 0x7dfb5230
jmp 0xb7e8ec
pop eax
add dword [esp + 4], edi
pop edi
shr dword [esp], 3
xor dword [esp], 0x24fb1523
add dword [esp], 0x55cb6116
pop ecx
push ecx
jmp 0xb7ee4d
mov ebx, 0x79bd8389
push esi
mov esi, 0x3fda8e89
mov eax, 0xb4f32000
jmp 0xb7e862
inc edi
push ebp
mov ebp, 0x5ffbc3c2
jmp 0xb7e88f
push ebx
jmp 0xb7ea0a
xor ebx, esi
jmp 0xb7f401
mov dword [esp], ebx
mov ebx, esp
add ebx, 4
add ebx, 4
xchg dword [esp], ebx
mov esp, dword [esp]
shl ecx, 2
neg ecx
add ecx, 0xc77ed45c
mov eax, ecx
push dword [esp]
pop ecx
add esp, 4
add edx, eax
pop eax
jmp 0xb7ee62
push esi
push ecx
mov dword [esp], 0x3f6ff2fe
pop esi
add ebp, esi
jmp 0xb7f207
mov esi, ecx
mov ecx, dword [esp]
add esp, 4
sub esi, 0x5faac0a2
jmp 0xb7ea89
add esp, 4
xor edi, ebp
pop ebp
inc edi
add edi, 0x5cc66664
push esi
push eax
jmp 0xb7f29f
pop edx
shr edi, 4
dec edi
push edi
not dword [esp]
pop edi
jmp 0xb7ec71
mov edi, 0xb822ebb6
add edi, eax
jmp 0xb7ecd3
not dword [esp]
push dword [esp]
pop ecx
add esp, 4
xchg ecx, ebx
not ebx
push ecx
push ebx
jmp 0xb7eeb7
xor edx, dword [esp]
jmp 0xb7eefe
pop ecx
push dword [esp]
jmp 0xb7f005
xor dword [esp], edx
xor edx, dword [esp]
mov esp, dword [esp]
push esi
mov esi, 0x7ebaa26a
jmp 0xb7e83c
mov ecx, 4
add ebx, ecx
pop ecx
xor ebx, dword [esp]
xor dword [esp], ebx
jmp 0xb7e81d
add edx, dword [esp]
jmp 0xb7e8d9
add ebp, 4
xchg dword [esp], ebp
pop esp
xor eax, 0x11bdb219
add edx, eax
jmp 0xb7efe1
not ecx
sub ecx, 0x15f7684b
jmp 0xb7f04f
pop eax
push edx
mov edx, esp
add edx, 4
add edx, 4
push edx
push dword [esp + 4]
pop edx
jmp 0xb7f2ee
pop eax
push ebp
jmp 0xb7ea2b
pop ebx
push ebx
mov ebx, esp
add ebx, 4
jmp 0xb7f3c6
add eax, ecx
pop ecx
neg eax
jmp 0xb7f117
mov edx, dword [esp]
push edi
jmp 0xb7f152
push esi
jmp 0xb7f1c2
mov ebp, 0x7efe50e9
dec ebp
not ebp
shr ebp, 1
xor ebp, 0x2d5ccb83
sub esi, ebp
pop ebp
jmp 0xb7f1ae
mov edi, esp
push ebp
mov ebp, 0x3f6ff2fa
push edx
mov edx, 0
sub edx, ebp
jmp 0xb7ec4c
add edi, 0x6f75dde5
add edi, 0x7d5f2234
sub edi, esi
sub edi, 0x7d5f2234
sub edi, 0x6f75dde5
mov esi, dword [esp]
add esp, 4
push dword [edx]
push dword [esp]
pop ecx
push 0xb6c1fea
jmp 0xb7f339
shl esi, 8
add esi, 0x4de4d09b
jmp 0xb7f17b
mov esi, 0x2f75ed18
push 0x78135066
jmp 0xb7f1df
mov dword [esp], edi
mov edi, 0x7ffb60af
xor edi, 0x29b669af
jmp 0xb7ed63
push dword [esp]
pop edi
add esp, 4
push dword [esp]
jmp 0xb7efb7
pop edx
jmp 0xb7edc1
pop esi
jmp 0xb7f20d
sub edi, 0x3ffda800
add edi, ebp
add edi, 0x3ffda800
pop ebp
push edx
mov edx, 4
add edi, edx
pop edx
xchg dword [esp], edi
mov esp, dword [esp]
xor ecx, dword [esp]
xor dword [esp], ecx
xor ecx, dword [esp]
mov esp, dword [esp]
sti
push edx
mov edx, 0x7a5392b9
mov edi, 0x5604e28
add edi, edx
jmp 0xb7ee29
sub ebp, 0x1fd97aea
sub ebp, 0x7ffeac79
push dword [esp]
mov ebx, dword [esp]
add esp, 4
jmp 0xb7ee12
add ebp, eax
pop eax
add ebp, 4
xchg dword [esp], ebp
pop esp
add ecx, 0x20f3c9b1
add ecx, 0x4fe88b64
add ecx, eax
sub ecx, 0x4fe88b64
push edi
mov edi, 0x20f3c9b1
sub ecx, edi
jmp 0xb7f1f2
push 0x33cd9efa
jmp 0xb7f2ca
pop eax
not eax
sub eax, 1
xor eax, 0x7b2f086d
xor eax, 0xf87027d5
mov esi, eax
jmp 0xb7f30e
pop dword [esp]
mov esp, dword [esp]
push eax
mov eax, esp
add eax, 4
sub eax, 4
xchg dword [esp], eax
pop esp
mov dword [esp], edx
push ecx
jmp 0xb7f316
mov eax, dword [esp]
jmp 0xb7f32a
push eax
mov dword [esp], 0x79e656f1
add dword [esp], 0x4fd3a5d3
jmp 0xb7f3a9
add esp, 4
not esi
not esi
not esi
push ebp
jmp 0xb7f11d
mov dword [esp], ebx
push esp
mov ebx, dword [esp]
add esp, 4
push esi
push ecx
mov ecx, 0x7fffde00
jmp 0xb7edd2
or edi, 0x4ea44baf
not edi
sub edi, 0x1fafd334
add edi, 0x7f8f235f
xor edi, 0xdff21de4
sub esi, edi
pop edi
sub esp, 4
mov dword [esp], ebx
jmp 0xb7f37d
push 0x7bff2e6e
pop ebx
or esi, ebx
mov ebx, dword [esp]
add esp, 4
sub esi, 0xffffef6b
sub ebx, 0x5cda9a3c
add ebx, esi
push ebp
mov ebp, 0x5cda9a3c
add ebx, ebp
pop ebp
pop esi
push ecx
jmp 0xb7ef12
xchg dword [esp], esi
jmp 0xb7f3b1
not esi
xchg dword [esp], esi
push edi
jmp 0xb7e967
mov eax, 0x7fdd1028
jmp 0xb7ee41
add ebx, 4
xchg dword [esp], ebx
pop esp
sub ecx, 0x7ac0482b
push ecx
jmp 0xb7f3dc
pop edx
pop ecx
xor ecx, edx
jmp 0xb7f3e5
mov edx, dword [esp]
push ebp
mov ebp, esp
add ebp, 4
add ebp, 4
xchg dword [esp], ebp
pop esp
push esi
jmp 0xb7e952