Function at 0x10d8311
Capabilities:
Check for vm using instruction vpcext
Reference the vmware io port

Disassembly:
mov ebp, 0x602c82b6
mov ecx, ebp
pop ebp
mov dword [esp + 4], ecx
mov ecx, dword [esp]
add esp, 4
mov dword [esp], ecx
jmp 0x10d85bb
mov ecx, esp
add ecx, 4
add ecx, 4
xchg dword [esp], ecx
pop esp
pop esi
jmp 0x10d8d32
pop esp
jmp 0x10d86d8
xor ebp, 0x18c18a1e
mov ebx, ebp
pop ebp
xor ebx, 0x39b641b1
push ecx
mov dword [esp], edx
mov edx, 0xe09dbcf0
push edx
jmp 0x10d8394
push ecx
mov ecx, 0x7f4f0c0f
add ecx, 0xb2b9d18c
mov edx, ecx
pop ecx
mov ecx, edx
mov edx, dword [esp]
jmp 0x10d83ed
sub ecx, ebx
push dword [esp]
pop ebx
push ebp
mov ebp, esp
add ebp, 4
push ebx
mov ebx, 4
jmp 0x10d848a
pop edi
xchg dword [esp], ebp
jmp 0x10d8289
pop esp
jmp 0x10d8635
mov ebp, esp
jmp 0x10d841c
mov dword [esp], ebx
mov dword [esp], ebp
mov ebp, esp
push ebx
mov ebx, 0x6aeede5a
xor ebx, 0x76f3336d
shl ebx, 8
jmp 0x10d8d03
xchg dword [esp], edi
pop esp
sub esp, 4
jmp 0x10d8938
mov dword [esp], esi
mov esi, 0x7fb59d1f
add esi, 0xbf439625
sub ebx, esi
mov esi, dword [esp]
jmp 0x10d8461
push ebp
jmp 0x10d8235
add esp, 4
xor ebx, ecx
mov ecx, dword [esp]
jmp 0x10d8496
sub eax, edx
pop edx
sub eax, ecx
push ecx
mov ecx, 0xe7ccadc
add eax, ecx
pop ecx
push dword [esp]
jmp 0x10d84aa
add ebp, 4
sub esp, 4
mov dword [esp], edi
mov edi, 0x7ffcd035
shr edi, 7
sub edi, 0x7ef7c100
shl edi, 8
shr edi, 6
xor edi, 0x3f8f7bf4
sub edi, 0x3faf9970
add ebp, edi
jmp 0x10d8325
add esp, 4
jmp 0x10d895a
xor dword [esp], 0x326a6d86
jmp 0x10d870a
add ebp, ebx
pop ebx
xchg dword [esp], ebp
pop esp
jmp 0x10d8ce6
push esi
mov esi, esp
add esi, 4
push ebx
mov ebx, 4
jmp 0x10d8a6c
pop ecx
push eax
push 0x50572993
jmp 0x10d89a4
xor edi, 0x7df7c37f
add eax, edi
pop edi
sub eax, 4
xchg dword [esp], eax
jmp 0x10d8c8b
mov ecx, dword [esp]
add esp, 4
sub esp, 4
mov dword [esp], ebp
push esi
mov esi, 0x2ff7c5eb
mov ebp, esi
pop esi
or esi, ebp
pop ebp
jmp 0x10d85d8
add esp, 4
push ebx
mov ebx, 0x7fff6f00
mov eax, 0x2aeafef0
xor eax, ebx
mov ebx, dword [esp]
add esp, 4
xor eax, ecx
mov ecx, dword [esp]
push eax
mov eax, esp
add eax, 4
add eax, 4
jmp 0x10d8889
mov ecx, 0x5cce3a3d
jmp 0x10d88ca
or esi, 0xadfd7e1
xor esi, 0x7e42fb47
sub esi, 0x24cd4417
mov ecx, esi
mov esi, dword [esp]
jmp 0x10d858d
mov edx, 0x556972b0
xor edx, eax
push dword [esp]
pop eax
push edi
push esp
pop edi
add edi, 4
jmp 0x10d892d
push dword [esp]
jmp 0x10d8ae6
push ecx
jmp 0x10d86e9
mov ecx, 0x7843877d
xor ecx, 0x41a4c908
add edx, ecx
mov ecx, dword [esp]
push ecx
jmp 0x10d8264
mov dword [esp], edi
pop dword [eax]
push ebp
jmp 0x10d8cfd
mov dword [esp], eax
jmp 0x10d87a5
and dword [esp], 0x7ffeeebe
jmp 0x10d8469
push ecx
push esi
push ecx
jmp 0x10d89f4
xchg dword [esp], eax
jmp 0x10d833b
push ebx
mov ebx, 0x6fffdc87
add ecx, ebx
pop ebx
not ecx
inc ecx
push ebp
mov ebp, 0xccce16c8
add ecx, ebp
pop ebp
push edx
mov edx, 0xe7ccadc
jmp 0x10d83fd
push edx
jmp 0x10d82d9
add edi, 4
jmp 0x10d8385
mov dword [esp], esi
push edx
mov dword [esp], 0x57f77cd1
mov esi, dword [esp]
push ebx
mov ebx, esp
add ebx, 4
push eax
mov eax, 4
jmp 0x10d8bfd
add ebx, edx
add ebx, 0x3ef93344
mov edx, dword [esp]
add esp, 4
xor edi, ebx
jmp 0x10d86b6
mov dword [esp], esp
add dword [esp], 4
mov eax, dword [esp]
add esp, 4
add eax, 4
add eax, 4
xor eax, dword [esp]
xor dword [esp], eax
xor eax, dword [esp]
pop esp
sub ecx, 1
jne 0x10d8be1
sti
sub esp, 4
mov dword [esp], ebx
push 0x2bf7dcf0
jmp 0x10d8c7b
xor ebx, ecx
pop ecx
jmp 0x10d830b
mov ecx, 0x3b770466
mov esi, ecx
jmp 0x10d84fc
add esi, ebx
pop ebx
xor esi, dword [esp]
xor dword [esp], esi
jmp 0x10d8abc
xor esi, dword [esp]
mov esp, dword [esp]
mov eax, ebx
pop ebx
push ebp
mov dword [esp], 0x7be10a8e
dec dword [esp]
or dword [esp], 0x37fa9c59
and dword [esp], 0x7b7e4364
inc dword [esp]
jmp 0x10d8712
mov ebx, dword [esp]
jmp 0x10d8b36
add esp, 4
add esp, 4
push eax
mov eax, esp
push edi
mov edi, 0x1df7120f
and edi, 0x67ea81a9
or edi, 0x7d77c373
jmp 0x10d84e6
add ebx, 0x67ff18e1
add ebx, eax
sub ebx, 0x67ff18e1
mov eax, dword [esp]
jmp 0x10d8c13
add esp, 4
push ebx
push dword [esp + 4]
pop ebx
pop dword [esp]
pop esp
xor esi, 0x7bcb1fbb
push esi
sub dword [esp], 0x39e74e75
push dword [esp]
push dword [esp]
pop edx
add esp, 4
push ebp
jmp 0x10d834f
push dword [esp]
jmp 0x10d8cbb
pop esp
mov dword [esp], ecx
mov ecx, esp
jmp 0x10d8c96
push ebx
push ecx
mov ecx, 0x37e60bf6
mov ebx, 0x37e60bfa
sub ebx, ecx
pop ecx
add ecx, ebx
pop ebx
push ebx
push ecx
mov ecx, 0x571e8a02
mov ebx, 0xd68e8818
sub ebx, ecx
jmp 0x10d8cc2
pop ebx
push edx
jmp 0x10d8369
pop ecx
push edx
mov edx, 0x7ffe9c18
xor ebx, edx
pop edx
or ebx, 0x7bf60ca1
sub ebx, 0x3ff1255e
not ebx
inc ebx
push ecx
mov ecx, 0xc3f9b6ab
jmp 0x10d89ec
push eax
mov dword [esp], ecx
push dword [esp + 4]
pop ecx
pop dword [esp]
mov esp, dword [esp]
mov dword [esp], ebx
jmp 0x10d86ff
push ecx
jmp 0x10d83ac
inc ebx
dec ebx
or ebx, 0x7dde6f2a
sub ebx, 0x7dff7f26
add ebp, ebx
pop ebx
push ebx
mov ebx, 4
add ebp, ebx
pop ebx
xchg dword [esp], ebp
pop esp
sub esp, 4
mov dword [esp], ebx
mov dword [esp], ecx
jmp 0x10d8927
jmp 0x10d904f
mov eax, 0
cmp byte [ebp + 0x1245fddf], 0
je 0x10d9093
mov byte [ebp + 0x122d1e4d], 0x53
mov eax, 0x83d7652c
push eax
mov dword [esp], eax
push dword [ebp + 0x122d0af5]
call dword [ebp + 0x122d3e00]
mov ebx, eax
lea eax, [ebp + 0x1245fe1f]
nop
push eax
nop
lea eax, [ebp + 0x1245fddf]
nop
push eax
nop
call ebx
cmp dword [ebp + 0x1245fdad], 0
je 0x10d90aa
mov dword [ebp + 0x122d2f21], 1
mov byte [ebp + 0x122d1e4d], 0x47
mov eax, 0x906d6c8d
nop
push eax
nop
push dword [ebp + 0x122d0af5]
call dword [ebp + 0x122d3e00]
call eax
mov edi, eax
cmp byte [edi], 0x22
jne 0x10d90f4
inc edi
mov al, 0x22
scasb al, byte es:[edi]
jne 0x10d90d5
cmp byte [edi], 0
je 0x10d94b4
inc edi
cmp byte [edi], 0
je 0x10d94b4
jmp 0x10d9112
cmp byte [edi], 0
je 0x10d94b4
cmp byte [edi], 0x20
jne 0x10d910c
inc edi
jmp 0x10d9112
inc edi
jmp 0x10d90f4
cmp byte [edi], 0
jne 0x10d9120
jmp 0x10d94b4
cmp byte [edi], 0x20
jne 0x10d912f
inc edi
jmp 0x10d9120
cmp byte [edi], 0
jne 0x10d913d
jmp 0x10d94b4
call fcn.010d914c
jmp 0x10d9112
mov eax, 0
test eax, eax
je 0x10d94cb
mov dword [ebp + 0x122d2ea5], 0
cmp byte [ebp + 0x1245fdd2], 0
je 0x10d94e2
mov dword [ebp + 0x122d2f21], 1
mov byte [ebp + 0x122d1e4d], 0x49
mov eax, 0x8c1529e9
nop
push eax
nop
push dword [ebp + 0x122d0af5]
call dword [ebp + 0x122d3e00]
mov dword [ebp + 0x122d2ffd], eax
mov byte [ebp + 0x122d1e4d], 0x49
mov eax, 0xf74ad7ca
push eax
mov dword [esp], eax
push dword [ebp + 0x122d0af5]
call dword [ebp + 0x122d3e00]
mov dword [ebp + 0x122d28c0], eax
cmp dword [ebp + 0x122d0769], 0
je 0x10d95c4
mov byte [ebp + 0x122d1e4d], 0x47
mov eax, 0x83d0b5f3
nop
push eax
nop
push dword [ebp + 0x122d0af5]
call dword [ebp + 0x122d3e00]
mov ebx, eax
push 0x10
lea eax, [ebp + 0x12460027]
push eax
mov dword [esp], eax
lea eax, [ebp + 0x1246001f]
nop
push eax
nop
call ebx
test eax, eax
je 0x10d95c4
lea eax, [ebp + 0x12460027]
push eax
mov dword [esp], eax
call fcn.010d947d
mov dword [ebp + 0x122d2f79], eax
push 4
push dword [ebp + 0x122d2f79]
call dword [ebp + 0x122d2ffd]
test eax, eax
jne 0x10d95ba
mov eax, dword [ebp + 0x122d2f79]
cmp dword [eax], 0x9a761b13
je 0x10d95b5
mov dword [ebp + 0x122d2f79], 0
jmp 0x10d95c4
mov dword [ebp + 0x122d2f79], 0
mov ecx, eax
jmp 0x10d95cc
jmp 0x10db42f
mov ecx, ebx
jmp 0x10dc536
sub esp, 4
mov dword [esp], esi
mov dword [esp], 0x2ffa6d2f
push esp
pop dword [esp]
push ecx
mov ecx, 4
jmp 0x10dc8f6
mov dword [esp], ebp
push esp
pop ebp
add ebp, 4
sub ebp, 4
xchg dword [esp], ebp
jmp 0x10dd120
sub dword [esp + 4], 0x779e6e00
add dword [esp + 4], ecx
add dword [esp + 4], 0x779e6e00
pop ecx
mov eax, dword [esp]
push edi
push 0x112aeebe
mov dword [esp], esp
add dword [esp], 4
mov edi, dword [esp]
add esp, 4
add edi, 4
push ebp
mov dword [esp], ecx
push 0x20cee1c
mov dword [esp], eax
mov dword [esp], esi
push 0x7bf763a3
jmp 0x10de54a
mov dword [esp], 0x56640acf
mov dword [esp], edi
push ebx
mov ebx, eax
push ebx
push edi
jmp 0x10e0412
add esp, 4
mov edi, dword [esp]
push eax
mov eax, esp
add eax, 4
add eax, 4
jmp 0x10dee95
pop edi
add dword [esp + 4], edi
jmp 0x10e02f9
and edi, edx
pop edx
inc edi
or edi, 0x3da2bd48
push ebx
mov ebx, 0x5fdb3444
add edi, ebx
jmp 0x10dd36d
mov dword [esp], eax
sub esp, 4
mov dword [esp], esp
add dword [esp], 4
mov eax, dword [esp]
add esp, 4
jmp 0x10dd1a1
add edi, ebx
jmp 0x10dd609
mov esp, dword [esp]
mov dword [esp], ecx
push eax
push dword [esp]
push dword [esp]
pop ecx
jmp 0x10e01cc
push ebx
mov ebx, 4
jmp 0x10de7ab
push eax
pop edi
push 0x3841e9d7
mov dword [esp], ebp
mov dword [esp], edi
push dword [esp]
push dword [esp]
pop ebx
jmp 0x10de9e4
mov edx, 0x76af425e
mov edi, 0x9506fea
xor edi, edx
jmp 0x10e0245
pop ebx
sub edi, 0x778a9937
jmp 0x10e068c
add edi, 0x1f3a6567
pop ebx
add edi, 0x3fda59bf
jmp 0x10deef3
mov ebx, edx
jmp 0x10de9c5
mov dword [esp], 0x7827ad25
jmp 0x10e0d6b
mov ebx, 0x79870903
not ebx
push 0x7dc822cc
mov dword [esp], edx
mov edx, 0x5f3d2c0d
inc edx
sub edx, 0x13f7afd0
sub ebx, edx
jmp 0x10dfc7f
shl dword [esp], 6
add dword [esp], 0x6228f2a0
mov dword [esp], eax
mov eax, esp
add eax, 4
add eax, 4
xchg dword [esp], eax
jmp 0x10e0c00
mov esi, dword [esp]
add esp, 4
inc esi
shl esi, 5
sub esi, 0x76dd6d86
not esi
and esi, 0x7fde4e1a
add esi, 0xe829ea01
mov ecx, 0x5ffa3205
xor ecx, esi
pop esi
add edi, ecx
pop ecx
xchg dword [esp], edi
pop esp
mov dword [ebp + 0x122d2a43], eax
mov dword [ebp + 0x122d1f0e], 0
push esi
mov dword [esp], ebx
sub esp, 4
mov dword [esp], edi
jmp 0x10dd25f
mov ebp, 4
jmp 0x10e1541
mov dword [esp], edx
push edi
jmp 0x10df029
add eax, ebx
pop ebx
add eax, 4
xor eax, dword [esp]
xor dword [esp], eax
xor eax, dword [esp]
jmp 0x10dee18
mov edx, dword [esp]
sub esp, 4
mov dword [esp], edx
mov edx, esp
push ebp
jmp 0x10de65c
mov dword [esp], ecx
mov dword [esp], eax
mov eax, dword [esp]
jmp 0x10ded0c
add esp, 4
push edi
push esp
pop edi
add edi, 4
add edi, 4
xchg dword [esp], edi
jmp 0x10dfa7e
push 0x48c54b3e
mov dword [esp], edx
mov dword [esp], ebp
push esi
mov dword [esp], esp
push edi
push 4
jmp 0x10dcb43
pop esp
mov eax, ecx
pop ecx
push ecx
jmp 0x10dca8d
xchg dword [esp], eax
pop esp
cmp dword [ebp + 0x122d2e4d], 0
jne 0x10deeab
cmp dword [ebp + 0x122d2f21], 0
je 0x10deeba
push eax
mov eax, eax
mov eax, 0
call dword [ebp + 0x122d28b9]
pop eax
cmp dword [ebp + 0x122d2f21], 0
je 0x10deed0
push eax
mov eax, 0
call dword [ebp + 0x122d1f1e]
pop eax
push ecx
mov dword [esp], eax
mov eax, esp
add eax, 4
jmp 0x10df518
add edi, 0x7eeebc12
sub edi, 0xcfd2d2cf
sub eax, edi
mov edi, dword [esp]
jmp 0x10dcaf8
mov edi, 0x590dbac4
mov dword [esp + 4], edi
mov edi, dword [esp]
add esp, 4
mov dword [esp], ecx
mov dword [esp], eax
push esi
jmp 0x10ddba2
push edi
mov edi, 4
push edi
jmp 0x10dfcfe
add dword [esp + 4], edi
pop edi
pop edi
jmp 0x10e07da
pop esp
pop edi
mov eax, ebx
jmp 0x10e06cd
pop edx
sub edi, 0x1f3a6567
jmp 0x10dcd9e
push edx
jmp 0x10dd352
add esp, 4
push 0x562dd243
jmp 0x10dcbd4
pop edx
push edx
mov edx, 0x4d49e2ef
push edi
jmp 0x10e041c
pop edi
pop ebp
push eax
mov eax, 0x7fb9d7e9
inc eax
push edx
mov edx, 0x8046281a
add eax, edx
jmp 0x10e0dfd
mov edi, 0x4ff7a547
jmp 0x10df733
push edx
push 0x7bdd2413
pop edx
xor edx, 0x24a67f47
mov edi, edx
pop edx
not edi
add edi, 0x7eba29ff
shr edi, 2
sub edi, 0xaa513e37
sub edx, edi
pop edi
neg edx
add edx, 0x577f120c
add edx, 0xcef298b0
jmp 0x10dcb9e
add eax, edi
pop edi
sub eax, edi
sub eax, 0x27f75856
pop edi
xchg dword [esp], eax
pop esp
mov dword [esp], eax
push dword [esp]
pop eax
push 0x6a5d755f
mov dword [esp], eax
mov dword [esp], 0x7ff3d51f
sub dword [esp], 0x5ef5ba20
shr dword [esp], 8
jmp 0x10de4b4
push dword [esp]
pop ebx
push eax
push esp
pop eax
add eax, 4
push ebx
mov ebx, 4
add eax, ebx
pop ebx
xchg dword [esp], eax
mov esp, dword [esp]
cmp dword [ebp + 0x122d2e4d], 0
jne 0x10e06fa
cmp dword [ebp + 0x122d2f21], 0
je 0x10e070f
push eax
mov eax, eax
mov eax, 0x43d
mov dword [ebp + 0x122d1c47], eax
call dword [ebp + 0x122d2106]
pop eax
push edx
jmp 0x10e1765
push ebp
mov ebp, 0x4ff7a547
sub edi, 0x7eff53d9
jmp 0x10e1730
mov esp, dword [esp]
push eax
jmp 0x10de6c7
xor edx, dword [esp]
xor dword [esp], edx
xor edx, dword [esp]
pop esp
jmp 0x10e191b
mov dword [esp], ebx
push eax
mov dword [esp], edx
mov edx, 0x7faf60aa
jmp 0x10dd86e
pop edx
add ebp, eax
pop eax
push ecx
mov ecx, 0x7d7f77be
or ecx, 0x7ffb44a1
inc ecx
jmp 0x10e0e5f
add edx, ebp
pop ebp
add edx, 4
jmp 0x10e0c0f
sub edi, ebp
add edi, 0x7eff53d9
mov ebp, dword [esp]
add esp, 4
pop ebx
push edi
add dword [esp], 0x66f5fa00
jmp 0x10e17ea
mov dword [esp], ecx
mov dword [esp], esi
jmp 0x10dc6c0
mov eax, dword [esp]
add esp, 4
push edi
mov edi, 0x54f330f1
jmp 0x10e1912
shl edi, 6
push ebx
jmp 0x10de003
xor dword [esp + 4], ebx
pop ebx
mov eax, dword [esp]
add esp, 4
jmp 0x10e196a
push ebp
push esi
mov esi, 0x6ae737cb
mov ebp, 0x14c828df
add ebp, esi
pop esi
xor eax, ebp
pop ebp
cmp dword [ebp + 0x122d2e4d], 0
jne 0x10e198e
cmp dword [ebp + 0x122d2f21], 0
je 0x10e199f
push eax
push ebx
mov eax, eax
mov eax, 0
call dword [ebp + 0x122d20f3]
pop ebx
pop eax
push edx
jmp 0x10e1a32
mov dword [esp], 0x68a72936
jmp 0x10de9d6