Function at 0x5f5a41
Capabilities:
Check for vm using instruction vpcext
Reference the vmware io port

Disassembly:
cmp eax, 0x98
jae 0x5f4922
lea eax, [ebp + 0x10082090]
call eax
jmp 0x5f6569
mov esi, 0x7f7d09c0
jmp 0x5f3276
mov edx, 0xcd8abc00
jmp 0x5f3c77
pop edx
pop dword [esp]
pop esp
jmp 0x5f62e6
sub ecx, 0xdae62d94
or edx, ecx
pop ecx
add edx, 0xf51d3b2e
push edx
sub dword [esp], 0x7e53494f
pop ebx
add ebx, 0x7e53494f
jmp 0x5f70c3
xchg dword [esp], ecx
jmp 0x5f4d46
add esp, 4
jmp 0x5f4701
xor esi, 0x18a83381
sub ecx, esi
pop esi
sub ecx, 0xa7dd7ac9
sub ebx, ecx
jmp 0x5f87bb
mov esi, 4
push eax
mov eax, 0x78fa0de9
inc eax
push ebp
mov ebp, 0x59978f00
and ebp, 0x2fad4287
jmp 0x5f5fb2
mov edx, 0x6dfee107
shr edx, 6
push eax
push esi
push ebp
jmp 0x5f67c4
mov ecx, 0x3add843c
push edx
mov edx, 1
sub ecx, edx
jmp 0x5f69aa
push ebp
push dword [esp + 4]
pop ebp
pop dword [esp]
jmp 0x5f4452
cmp dword [ebp + 0x122d04d1], 0
jne 0x5f3a0c
push eax
sgdt [esp - 2]
pop eax
shr eax, 0x18
cmp eax, 0xff
jne 0x5f3a0c
mov dword [ebp + 0x122d3e1d], 1
push ebp
push ebp
mov dword [esp], esp
push esi
push eax
push 0x35ff1e8a
mov eax, dword [esp]
add esp, 4
sub eax, 0x35ff1e86
mov esi, eax
mov eax, dword [esp]
add esp, 4
add dword [esp + 4], esi
jmp 0x5f4815
push edi
mov dword [esp], esp
add dword [esp], 4
mov edi, dword [esp]
jmp 0x5f5552
mov ecx, esp
add ecx, 4
jmp 0x5f3da3
add edi, 0xdce4bb4e
sub ebx, edi
pop edi
jmp 0x5f636b
mov edi, 0x5b71136d
add edi, 1
jmp 0x5f5969
add dword [esp], 4
jmp 0x5f3fae
sub edx, esi
mov esi, dword [esp]
add esp, 4
xor ebp, edx
pop edx
jmp 0x5f7ec9
add esp, 4
add ebx, edx
push dword [esp]
pop edx
push ebp
push esp
pop ebp
add ebp, 4
jmp 0x5f3fd7
push ecx
mov ecx, 0x3ff4ae4e
mov esi, 0x514319f3
xor esi, ecx
jmp 0x5f7530
add ecx, 4
xchg dword [esp], ecx
jmp 0x5f557c
push dword [esp]
mov ebx, dword [esp]
add esp, 4
sub esp, 4
mov dword [esp], edi
push esp
pop edi
push esi
mov esi, 4
add edi, esi
jmp 0x5f602e
pop ebx
add ebx, 4
jmp 0x5f6639
push eax
push ecx
mov ecx, 0x5fc73a9a
mov eax, ecx
pop ecx
add eax, 0x1ff6e0c7
or eax, 0x6efd86bc
neg eax
add eax, 0x7fffa001
jmp 0x5f4478
pop esp
pop ebx
push edx
mov edx, 0x7ddd65d3
xor ebx, edx
mov edx, dword [esp]
add esp, 4
push ebx
lea ebx, [ebp + 0x122d1345]
mov eax, dword [ebx]
mov dword [ebx], eax
mov eax, dword [ebx + 0x50]
mov dword [ebx + 0x50], eax
lea ebx, [ebp + 0x12467bf6]
mov eax, dword [ebx]
mov dword [ebx], eax
pop ebx
push 0
lea eax, [ebp + 0x12467bf6]
sub esp, 4
mov dword [esp], edi
push esp
push dword [esp]
pop edi
push edi
jmp 0x5f865b
sub edi, 0x7b297c8b
mov eax, dword [esp]
add esp, 4
sub edi, 0x2e7f810a
add edi, esi
jmp 0x5f74cd
mov esp, dword [esp]
jmp 0x5f5c16
add ebp, eax
mov eax, dword [esp]
add esp, 4
xchg dword [esp], ebp
pop esp
sub ebx, 2
xor ebx, dword [esp]
xor dword [esp], ebx
xor ebx, dword [esp]
mov esp, dword [esp]
mov word [esp], ax
sldt word [esp]
mov ax, word [esp]
push 0x1c2483bc
mov dword [esp], edi
push 0xe9e334
mov dword [esp], esp
add dword [esp], 4
pop edi
sub esp, 4
mov dword [esp], edx
mov edx, 0x37f26141
jmp 0x5f6397
pop ebx
dec dword [esp]
add dword [esp], 0x3d4f4d04
neg dword [esp]
add dword [esp], 0xd1987206
mov dword [esp], ebx
call dword [ebp + 0x122d1e20]
call dword [ebp + 0x122d1caa]
push dword [ebp + 0x12467c5d]
call dword [ebp + 0x1245ed53]
lea eax, [ebp + 0x122d1345]
push dword [eax + 0x18]
mov eax, dword [esp]
sub esp, 4
mov dword [esp], edi
mov edi, esp
push 0x5f0f1c34
mov dword [esp], ecx
mov ecx, 0x17bf301f
not ecx
neg ecx
push ebx
mov ebx, 0x7ffe31b9
sub ecx, 0x6ed3d2ac
sub ecx, ebx
add ecx, 0x6ed3d2ac
push dword [esp]
pop ebx
jmp 0x5f667d
sub esp, 4
mov dword [esp], ecx
jmp 0x5f652e
xor ebx, dword [esp]
xor dword [esp], ebx
xor ebx, dword [esp]
mov esp, dword [esp]
cmp dword [ebp + 0x122d3b71], 0
jne 0x5f471f
cmp dword [ebp + 0x122d3e3d], 0
je 0x5f4734
push eax
mov esi, dword [esp]
jmp 0x5f59af
pop edi
sub ebp, 4
jmp 0x5f398f
push eax
push dword [esp]
pop eax
jmp 0x5f45c6
xchg dword [esp], edi
jmp 0x5f538b
push ebx
mov dword [esp], eax
mov eax, 0x7ebf64f4
or eax, 0x5fff864b
add eax, 0x80001905
sub edx, 0x3b8e7e30
add edx, eax
add edx, 0x3b8e7e30
jmp 0x5f572b
add esp, 4
sub ecx, 0x7f7ffef3
add edi, ecx
pop ecx
add edi, 4
xchg dword [esp], edi
mov esp, dword [esp]
mov dword [ebp + 0x122d200c], 0
cmp dword [ebp + 0x122d3ca5], 0
je 0x5f3247
cmp eax, 0x8c
jae 0x5f4922
jmp 0x5f3252
lea eax, [ebp + 0x122d1345]
push ebx
mov dword [esp], 0x5448f68a
mov dword [esp], edi
jmp 0x5f3a74
or esi, edx
jmp 0x5f5020
mov eax, 0x5c8cb741
push esi
mov esi, 0xc953f5a
jmp 0x5f64eb
mov ebx, 0x575b1300
shr ebx, 5
jmp 0x5f5eee
pop esp
jmp 0x5f5186
lea eax, [ebp + 0x124690df]
push ecx
push esp
jmp 0x5f55d2
pop edx
sub esp, 4
mov dword [esp], edi
mov edi, 0x77bf1510
sub esi, edi
push dword [esp]
pop edi
jmp 0x5f808f
cmp dword [ebp + 0x122d3b71], 0
jne 0x5f5198
cmp dword [ebp + 0x122d3e3d], 0
je 0x5f51ad
push eax
mov eax, eax
mov eax, 0x7dd
mov dword [ebp + 0x122d39fe], eax
call dword [ebp + 0x122d346d]
pop eax
push 0x6443fe7c
mov dword [esp], edi
jmp 0x5f5e1b
pop esp
pop dword [esp]
pop esp
cmp eax, 0
jbe 0x5f635b
cmp dword [ebp + 0x122d04d1], 1
jne 0x5f635b
mov dword [ebp + 0x122d3e1d], 1
jmp 0x5f5b0c
add ebp, 0x3ebf1626
jmp 0x5f4905
add esp, 4
jmp 0x5f7d43
pop esp
add esp, 4
sub esp, 4
mov dword [esp], edx
mov edx, esp
push esi
push 4
pop esi
add edx, 0x7ebf6483
add edx, esi
sub edx, 0x7ebf6483
pop esi
jmp 0x5f493c
mov ecx, dword [esp]
add esp, 4
push edx
mov edx, 4
add ecx, edx
push dword [esp]
pop edx
add esp, 4
jmp 0x5f7501
push ecx
jmp 0x5f37f0
mov eax, dword [esp]
add esp, 4
xchg dword [esp], edx
jmp 0x5f60b3
xor edi, dword [esp]
xor dword [esp], edi
jmp 0x5f7978
push ebp
mov ebp, 0x6fba1cc6
not ebp
shl ebp, 4
neg ebp
xor ebp, 0xf81b1ab8
sub esi, ebp
jmp 0x5f8121
pop ecx
add edi, esi
add edi, 0x75dea39e
jmp 0x5f742e
mov esi, dword [esp]
push esi
mov esi, esp
add esi, 4
add esi, 4
xchg dword [esp], esi
pop esp
sub ecx, 0x667f056f
add ecx, eax
add ecx, 0x667f056f
mov eax, dword [esp]
add esp, 4
pop edi
jmp 0x5f33ab
pop esp
sub edx, 0xeebed163
add edi, 0x7fbb7e41
jmp 0x5f5fa3
sub edi, 0x7c8d125a
sub edi, 0x6ffb2112
inc edi
sub esp, 4
mov dword [esp], edi
not dword [esp]
pop edi
add edi, 0xe4a027df
add edi, 0x7f2ecdb5
xor edi, 0x7e11ce3f
push edx
jmp 0x5f369b
add esp, 4
jmp 0x5f5c34
add edx, 4
xchg dword [esp], edx
mov esp, dword [esp]
jmp 0x5f5005
pop eax
push ebp
mov ebp, esp
add ebp, 4
push edx
sub esp, 4
mov dword [esp], ecx
mov ecx, 0x7dfbd9f6
mov edx, 0x7dfbd9f2
xor edx, ecx
pop ecx
add ebp, edx
mov edx, dword [esp]
add esp, 4
xor ebp, dword [esp]
xor dword [esp], ebp
xor ebp, dword [esp]
pop esp
push edx
mov edx, esp
add edx, 4
jmp 0x5f59f7
pop dword fs:[0]
add esp, 4
cmp dword [ebp + 0x122d3e1d], 0
jne 0x5f39e0
cmp dword [ebp + 0x122d04d1], 1
jne 0x5f39e0
push 0x3a2b65fe
mov dword [esp], ebx
push esp
mov ebx, dword [esp]
push edi
jmp 0x5f75b2
push dword [esp]
jmp 0x5f866f
pop ebp
sub esp, 4
mov dword [esp], ebp
mov dword [esp], edi
push 4
pop edi
sub ebp, 0x3ebf1626
add ebp, edi
jmp 0x5f545d
xchg dword [esp], eax
pop ecx
not ecx
and ecx, 0x1df7a175
push esi
mov esi, 0x7938229e
xor ecx, esi
pop esi
sub edi, ecx
jmp 0x5f583f
mov dword [esp], 0x7cb89f5e
or dword [esp], 0x3f7e54ef
shl dword [esp], 5
sub dword [esp], 0x3f3e99a4
sub dword [esp], 0x6bda6107
neg dword [esp]
add dword [esp], 0xa0ba72d8
mov dword [esp], ebx
mov dword [esp], 0x1fcaf9c8
add dword [esp], 0x7fa1687d
shr dword [esp], 5
sub dword [esp], 0x7bf717bf
jmp 0x5f72ab
add ebx, 0xfd45276c
jmp 0x5f6793
xchg dword [esp], esi
push esi
not dword [esp]
pop esi
xchg dword [esp], esi
pop ebp
sub ebp, 0x70612351
jmp 0x5f6f2c
sub edi, edx
jmp 0x5f7600
and ebp, 0x5ff3e600
jmp 0x5f86ee
pop esi
add edi, 4
jmp 0x5f492c
mov dword [esp], ebx
push 0x64efb070
jmp 0x5f8722
pop esp
push ecx
mov ecx, esp
push ebx
mov ebx, 4
add ecx, ebx
pop ebx
sub esp, 4
jmp 0x5f639d
pop ecx
sub edi, 0x6f39016a
pop esi
jmp 0x5f6a55
mov edx, 4
add ebx, 0x277fe3ed
sub ebx, 0x32642f5d
sub ebx, edx
add ebx, 0x32642f5d
sub ebx, 0x277fe3ed
mov edx, dword [esp]
add esp, 4
jmp 0x5f8982
mov dword [esp], edx
mov dword [esp], 0x7d8f8100
add dword [esp], 0x55cdc62a
push ebx
mov ebx, 0x7e37d841
sub dword [esp + 4], 0x7dfddfbf
sub dword [esp + 4], ebx
jmp 0x5f6a48
lea eax, [ebp + 0x124690f7]
push 0x1a46ef5e
jmp 0x5f6a66
push edx
mov edx, 0x5ef11710
sub ebx, 0x79afa81c
sub ebx, edx
add ebx, 0x79afa81c
mov edx, dword [esp]
add esp, 4
mov ecx, dword [esp]
add esp, 4
push edx
jmp 0x5f6146
push edi
jmp 0x5f84f3
mov dword [esp], esi
jmp 0x5f3cba
mov dword [esp], eax
push edx
mov edx, 0x7ddd65d3
xor dword [esp + 4], edx
push dword [esp]
pop edx
sub esp, 4
mov dword [esp], ebx
mov dword [esp], edi
mov edi, esp
add edi, 4
push eax
mov dword [esp], esi
mov esi, 4
push ecx
jmp 0x5f68b2
sub eax, esi
jmp 0x5f584d
push esp
mov ecx, dword [esp]
add esp, 4
push ebx
jmp 0x5f4c8c
lea eax, [ebp + 0x10081b76]
call eax
push esi
mov dword [esp], eax
push dword [esp]
pop eax
jmp 0x5f854a
sub esp, 4
jmp 0x5f69f5
add esp, 4
push 0x2d3db422
mov dword [esp], eax
mov eax, 0x7f67fc4f
add ecx, eax
pop eax
push ebx
push 0x5ff57af2
pop ebx
sub ebx, 0x76f1f860
push ebx
jmp 0x5f6e0b
cmp dword [ebp + 0x1246816e], 0
je 0x5f8446
jmp 0x5f5b02
add ecx, ebx
mov ebx, dword [esp]
add esp, 4
push eax
mov dword [esp], edi
mov edi, 4
sub ecx, 0x4ff777e7
sub ecx, 0x75bf3c45
jmp 0x5f6d60
mov ebp, 0x4967f900
mov esi, ebp
pop ebp
jmp 0x5f8ec1
mov eax, dword [esp]
push edi
mov edi, esp
add edi, 4
add edi, 4
xchg dword [esp], edi
jmp 0x5f5957
mov ecx, 0x79ddddb3
shl ecx, 6
shl ecx, 1
push ecx
xchg dword [esp], eax
not eax
jmp 0x5f5d90
pop edx
jmp 0x5f3320
mov dword [esp], edx
mov edx, 4
add ebx, 0x6ccda8fe
add ebx, 0x17fff48a
add ebx, edx
jmp 0x5f7e04
add dword [esp + 4], 0x7dfddfbf
jmp 0x5f44ca
add edi, 4
xor edi, dword [esp]
xor dword [esp], edi
xor edi, dword [esp]
jmp 0x5f6c8e
mov dword [esp], ebx
push esp
pop ebx
jmp 0x5f71de
mov esp, dword [esp]
add edi, 4
sub edi, 4
xor edi, dword [esp]
xor dword [esp], edi
xor edi, dword [esp]
mov esp, dword [esp]
mov dword [esp], eax
push 0x60
jmp 0x5f4bb0
add ecx, 0x3fff5c37
add ecx, edi
sub ecx, 0x3fff5c37
add ecx, 0x75bf3c45
push eax
jmp 0x5f4c63
dec dword [esp]
pop ebx
jmp 0x5f732c
xor esi, ebp
pop ebp
push edx
mov edx, 0x65a4bc00
shl edx, 8
xor edx, 0xffe5291d
jmp 0x5f4c16
push ebp
mov ebp, esp
add ebp, 4
jmp 0x5f73c6
pop edx
jmp 0x5f7119
xor ebx, 0x73f99bbe
sub ebx, 0x6e4a19f
add edx, ebx
push dword [esp]
pop ebx
add esp, 4
sub edx, 4
push edx
push dword [esp + 4]
jmp 0x5f32d3
push 0x4f45dd30
mov dword [esp], ecx
mov ecx, 4
add ebx, 0x5ef11710
push esi
mov dword [esp], ecx
mov ecx, 0x3afe4a1a
jmp 0x5f8882
sub dword [esp], 0x4754d13f
mov dword [esp], eax
jmp 0x5f7313
push dword [esp]
push dword [esp]
jmp 0x5f5a40
push 0x13a92059
mov dword [esp], edx
push esi
jmp 0x5f326c
shr ebx, 3
inc ebx
sub ebx, 0x9da88bf2
jmp 0x5f8196
push ecx
mov ecx, 4
add ebp, ecx
pop ecx
xchg dword [esp], ebp
jmp 0x5f78d1
pop esi
jmp 0x5f843e
push ecx
mov ecx, 0x7ef18075
shl ecx, 8
add ecx, 0x5fff6181
shr ecx, 2
push edx
mov edx, 0x3a2074aa
xor ecx, edx
pop edx
add edi, ecx
jmp 0x5f6106
push edx
mov edx, 4
sub ecx, 0x5fe7bbc2
sub ecx, edx
push ebp
jmp 0x5f7f98
pop ecx
push ebp
mov ebp, 0x6fff7f36
sub esp, 4
mov dword [esp], ebp
jmp 0x5f5f20
mov edi, esp
add edi, 4
add edi, 4
xchg dword [esp], edi
pop esp
push edx
push 0xcdc43b3
mov dword [esp], ebp
push ebx
jmp 0x5f8d24
sub edi, 0x7fbb7e41
pop edx
mov dword [esp + 4], edi
jmp 0x5f81dc
pop esi
xor ecx, dword [esp]
xor dword [esp], ecx
xor ecx, dword [esp]
pop esp
mov dword [esp], eax
push edi
mov edi, esp
add edi, 4
sub edi, 4
xchg dword [esp], edi
pop esp
mov dword [esp], ecx
mov dword [esp], ebp
jmp 0x5f6456
pop esp
jmp 0x5f5766
xor edi, dword [esp]
mov esp, dword [esp]
cmp dword [ebp + 0x122d3b71], 0
jne 0x5f7990
cmp dword [ebp + 0x122d3e3d], 0
je 0x5f79a5
push eax
mov eax, eax
mov eax, 0x7d9
mov dword [ebp + 0x122d39fe], eax
call dword [ebp + 0x122d346d]
pop eax
push 0x4c429b01
mov dword [esp], edi
push esp
pop edi
add edi, 4
jmp 0x5f85d6
push ecx
mov ecx, 4
add edi, 0x76951625
add edi, ecx
sub edi, 0x76951625
pop ecx
push eax
mov dword [esp], esi
jmp 0x5f35f0
sub ebx, 0x17fff48a
push ecx
push 0x7b7f5977
pop ecx
not ecx
push esi
jmp 0x5f8744
add ecx, 0x6f7fb8b4
add ecx, ebp
push eax
mov eax, 0x6f7fb8b4
sub ecx, eax
pop eax
pop ebp
mov edx, dword [esp]
add esp, 4
push ecx
push dword [esp + 4]
jmp 0x5f7fcd
mov ebp, 0x11ea0981
inc ebp
jmp 0x5f731e
mov ecx, dword [esp]
add esp, 4
pop dword [esp]
pop esp
mov dword [esp], eax
push dword fs:[0]
mov dword fs:[0], esp
cmp dword [ebp + 0x122d01cd], 0
je 0x5f6756
cmp dword [ebp + 0x122d04d1], 1
jne 0x5f6756
cmp byte [ebp + 0x124680ac], 0
jne 0x5f6756
jmp 0x5f5b02
push edx
mov edx, esp
add edx, 4
add edx, 4
xchg dword [esp], edx
pop esp
add esi, 0xffffffff
jmp 0x5f57a3
pop ebp
sub ecx, esi
jmp 0x5f76dd
mov edx, dword [esp]
add esp, 4
push 0x48a3731d
mov dword [esp], ebx
push edx
push 0x7feffecf
pop edx
jmp 0x5f5695
or ecx, ebx
push dword [esp]
mov ebx, dword [esp]
add esp, 4
jmp 0x5f4a5b
mov edi, dword [esp]
add esp, 4
push ebp
mov dword [esp], edx
push esp
jmp 0x5f8129
mov eax, edx
pop edx
add eax, 0x9e1e396b
sub edi, eax
pop eax
jmp 0x5f88d0
xchg dword [esp], edi
jmp 0x5f406b
mov eax, 0x564d5868
mov ecx, 0x14
mov dx, 0x5658
in eax, dx
pop dword fs:[0]
push 0x7d801230
jmp 0x5f85bd
mov edi, 0x46b992bd
sub edi, 1
jmp 0x5f6768
push ebp
mov dword [esp], 0x84d53b7
mov dword [esp], ecx
jmp 0x5f6067
mov dword [esp], edx
mov dword [esp], ecx
mov dword [esp], ebx
mov ebx, esp
push eax
mov eax, 4
add ebx, eax
pop eax
jmp 0x5f87c4
sub edi, 4
xchg dword [esp], edi
pop esp
mov dword [esp], eax
push dword [esp]
push dword [esp]
mov eax, dword [esp]
push ecx
jmp 0x5f3a97
mov edi, esp
push esi
push 4
pop esi
push eax
mov eax, 0x6f39016a
jmp 0x5f88ac
pop edi
add esp, 4
push 0x38d7a369
mov dword [esp], edx
mov dword [esp], ebx
push dword [esp + 4]
jmp 0x5f3f8d
shr ebp, 8
and ebp, 0x5dff71db
xor ebp, 0x3ecb7a4a
xor eax, ebp
pop ebp
push edx
mov edx, 0
sub edx, eax
jmp 0x5f8225
mov dword [esp], esp
jmp 0x5f3bbd
mov esi, 0x777db140
jmp 0x5f346d
pop ecx
mov edx, dword [esp]
jmp 0x5f33d3
push edi
mov edi, 4
sub ebx, 0x7efd2437
add ebx, 0x1a2de792
add ebx, edi
sub ebx, 0x1a2de792
add ebx, 0x7efd2437
jmp 0x5f5b81
add ebx, ecx
pop ecx
add ebx, 0x7fd54661
jmp 0x5f88f0
add edi, 0x7b297c8b
add edi, eax
jmp 0x5f40d7
sub edi, 0x5dee3bac
sub edi, esi
push edi
mov dword [esp], eax
mov eax, 0x5dee3bac
add edi, eax
pop eax
add edi, 0x57e5c2c9
pop esi
jmp 0x5f895f
add ebx, ecx
sub ebx, 0x7fd54661
push edi
mov edi, 0x5e198ecc
jmp 0x5f3ac3
xor edi, dword [esp]
xor dword [esp], edi
xor edi, dword [esp]
mov esp, dword [esp]
mov dword [esp], eax
push 0
push 0
push eax
mov dword [esp], 0x14b74d2f
mov dword [esp], edi
jmp 0x5f8c9c
xchg dword [esp], ebx
pop esp
mov dword [esp], eax
push dword fs:[0]
mov dword fs:[0], esp
xor ebx, ebx
xor eax, eax
inc eax
invalid
mov dword [esp], ebp
mov dword [esp], ecx
push 0x4e57bc6e
jmp 0x5f8ddd
mov dword [esp], 0x3def9fe6
pop ebp
add ebp, 0x7c6fa8b7
shr ebp, 7
add ebp, 0xfe8b4173
mov edx, ebp
mov ebp, dword [esp]
jmp 0x5f3c8a
mov dword [esp], edi
jmp 0x5f3ad9
mov eax, 0x34988ff6
xor eax, esi
jmp 0x5f8ee8
pop esi
sub eax, 0x600dd68
add edx, eax
jmp 0x5f67e9