Function at 0xf2d9dd
Capabilities:
Contain obfuscated stackstrings
Reference the vmware io port

Disassembly:
push dword [esp]
push dword [esp]
jmp 0xf2d9d9
mov ebp, 4
add eax, ebp
pop ebp
xchg dword [esp], eax
jmp 0xf2da3a
pop eax
add esp, 4
push ebp
mov ebp, esp
jmp 0xf2da11
mov edi, 0x3f7eff6e
jmp 0xf2da40
jmp 0xf2db5e
add edx, 0xf77ae7af
sub ebp, edx
pop edx
add ebp, edi
add ebp, 0x67cf87d9
mov edi, dword [esp]
push eax
mov eax, esp
push ebx
jmp 0xf2da90
sub esp, 4
mov dword [esp], edi
mov edi, 4
push edx
mov edx, 0x307fc3b3
add edx, 0x3fd4dc76
inc edx
inc edx
dec edx
jmp 0xf2d9f4
pop ebp
push edi
jmp 0xf2d9e5
pop esp
jmp 0xf2dab7
add ebx, edi
pop edi
or ebx, 0x77f5fb47
jmp 0xf2da84
sub eax, 0x5d1ef5b7
add eax, 0x73dfad96
sub eax, ebx
sub eax, 0x73dfad96
sub esp, 4
jmp 0xf2db09
push 0x6cfe47ef
push dword [esp]
pop edx
add esp, 4
add edx, 0x8767b2b
mov esi, edx
pop edx
jmp 0xf2db40
dec ebx
xor ebx, 0xf7ffffc2
jmp 0xf2daa7
mov ebx, 0x73fed57a
jmp 0xf2da9a
push ebp
mov ebp, 0x7fbd70d6
and ebx, ebp
jmp 0xf2da33
add eax, ebx
pop ebx
push 0xc7fcb94
mov dword [esp], ebp
jmp 0xf2d9c9
add ebp, 4
push ecx
mov dword [esp], 0x428be540
mov dword [esp], ecx
mov dword [esp], ebp
push dword [esp + 4]
pop ebp
pop dword [esp]
pop esp
jmp 0xf2dad6
push edi
mov edi, esp
push ebx
jmp 0xf2dadf
mov ebx, 4
add edi, ebx
pop ebx
sub edi, 4
xchg dword [esp], edi
pop esp
mov dword [esp], ebx
push 0x763d2cac
mov ebx, dword [esp]
add esp, 4
push esi
push edx
jmp 0xf2da6a
mov dword [esp], edx
mov edx, 0x5d1ef5b7
sub eax, 0x3ffd5707
sub eax, 0x2fb57ec0
add eax, edx
push ebp
mov ebp, 0x2fb57ec0
add eax, ebp
pop ebp
add eax, 0x3ffd5707
mov edx, dword [esp]
add esp, 4
push ebx
mov ebx, 0x75dde2c1
add eax, ebx
pop ebx
pop ebx
jmp 0xf2d9ef
and ebx, esi
pop esi
jmp 0xf2db48
and ebx, 0x4b3e2661
sub ebx, 0x4033fcbb
sub eax, 0x75dde2c1
jmp 0xf2da4e
push esi
push esp
jmp 0xf2dcec
pop dword [esp]
jmp 0xf2dd1f
pop ebx
push 0x63c25601
mov dword [esp], eax
push dword [esp + 4]
pop eax
pop dword [esp]
pop esp
jmp 0xf2deb8
mov dword [esp], eax
mov eax, 0x6ee73cb6
push ebp
mov ebp, 0x73bf9fc1
jmp 0xf2dbf8
push 0x7ec96167
jmp 0xf2dc06
pop ebp
jmp 0xf2de99
sub ecx, 0x7fbfb7ea
add ecx, eax
push 0x427629e8
mov dword [esp], ebx
mov ebx, 0x7fbfb7ea
add ecx, ebx
pop ebx
jmp 0xf2dc59
mov dword [esp], 0x7f57ba85
add dword [esp], 0xe5a7f342
inc dword [esp]
neg dword [esp]
inc dword [esp]
not dword [esp]
shl dword [esp], 4
xor dword [esp], 0x3804a8d7
jmp 0xf2dc11
push ecx
not dword [esp]
pop ecx
jmp 0xf2dca4
add ebp, 0x991a75bb
xor eax, ebp
pop ebp
jmp 0xf2dba7
mov dword [esp], eax
mov eax, esp
push ecx
jmp 0xf2dc3b
neg dword [esp]
neg dword [esp]
push edx
mov edx, 0x6f673a00
or dword [esp + 4], edx
pop edx
jmp 0xf2dcd5
pop edx
push ecx
mov ecx, 0x4b2fe813
push ebp
jmp 0xf2de68
pop esp
push ecx
jmp 0xf2dbc4
mov ecx, 4
add eax, ecx
pop ecx
push ebx
mov ebx, 4
add eax, ebx
jmp 0xf2db6d
xchg dword [esp], ebp
pop esp
jmp 0xf2dd11
pop eax
push esi
mov dword [esp], 0x75df3200
push ecx
push 0x53b711e1
mov ecx, dword [esp]
push edx
mov edx, esp
jmp 0xf2dda7
pop edi
sub edx, 0x6fe79dc2
add edx, ecx
add edx, 0x6fe79dc2
pop ecx
push 0x24fb2129
mov dword [esp], ebp
mov ebp, 4
add edx, ebp
mov ebp, dword [esp]
add esp, 4
xchg dword [esp], edx
pop esp
jmp 0xf2dcb5
push edi
mov edi, 0x7ff6e3c7
sub edi, 0x1fffc0dc
jmp 0xf2dd88
push ecx
push edx
mov edx, 0x623d29ca
jmp 0xf2de20
add dword [esp + 4], ecx
mov ecx, dword [esp]
push eax
mov eax, esp
add eax, 4
jmp 0xf2dd9c
and dword [esp], 0x37f50507
shl dword [esp], 8
xor dword [esp], 0xc1c5b822
jmp 0xf2db84
mov esi, dword [esp]
push ecx
push esp
pop ecx
add ecx, 4
add ecx, 4
push ecx
push dword [esp + 4]
mov ecx, dword [esp]
add esp, 4
jmp 0xf2db65
shr edx, 3
or edx, 0x7d4f6533
jmp 0xf2dd6f
mov esp, dword [esp]
add esi, 4
push edx
jmp 0xf2dd2e
mov edx, 0x77f39201
push ebp
mov ebp, 0xffffffff
add edx, ebp
mov ebp, dword [esp]
push ebp
mov ebp, esp
add ebp, 4
push ecx
mov ecx, 4
add ebp, ecx
pop ecx
jmp 0xf2dc50
or ecx, 0x7eee4e10
sub ecx, 0x396f22a9
shl ecx, 7
add ecx, 0x6ff5661c
jmp 0xf2dbee
push esi
mov esi, 0x7fff776f
sub edx, esi
jmp 0xf2dd7c
pop esi
sub esi, 0x6cfff861
jmp 0xf2ddb9
add edi, 0x3fff8ccb
dec edi
sub edi, 0x701af094
add ecx, edi
jmp 0xf2dc73
add eax, 4
xchg dword [esp], eax
jmp 0xf2de42
add edx, 4
add edx, 4
xchg dword [esp], edx
pop esp
jmp 0xf2dcc1
add esi, 0x6cfd66b6
sub esi, edx
push edi
mov edi, 0x7dbed3f7
or edi, 0x3d271187
dec edi
and edi, 0x39db5718
shl edi, 3
dec edi
sub edi, 0x5fdd31c9
sub esi, edi
pop edi
add esi, 0x6cfff861
jmp 0xf2ddec
pop edx
xchg dword [esp], esi
pop esp
mov dword [esp], eax
pop eax
sub esp, 4
mov dword [esp], ebp
mov ebp, ebx
push eax
mov eax, ebp
push eax
mov ebx, dword [esp]
add esp, 4
pop eax
push dword [esp]
mov ebp, dword [esp]
add esp, 4
sub esp, 4
mov dword [esp], edx
push esp
jmp 0xf2dc27
sub dword [esp + 4], edx
pop edx
mov ecx, dword [esp]
push esi
mov dword [esp], edx
mov edx, esp
add edx, 4
push ecx
mov ecx, 0x663f6388
shl ecx, 1
jmp 0xf2de74
mov esp, dword [esp]
push ecx
mov ecx, 0x7eeff239
add dword [esp + 4], ecx
jmp 0xf2de54
pop ecx
add dword [esp], 0x6b8dfdb
mov dword [esp], edx
push dword [esp]
pop edx
jmp 0xf2db97
mov ebp, 0x5bff9f51
add ecx, ebp
jmp 0xf2dba1
and ecx, 0x6f77426f
neg ecx
xor ecx, 0x37f6b7b2
or ecx, 0x4ebc9600
add ecx, 0x31006052
add edx, ecx
push dword [esp]
pop ecx
jmp 0xf2dea7
add ecx, 0x7d3ecd52
shr ecx, 4
jmp 0xf2dd55
add esp, 4
push edx
push dword [esp + 4]
pop edx
pop dword [esp]
jmp 0xf2dc34
jmp 0xf2e291
push ecx
mov dword [esp], edx
mov edx, eax
push edx
pop eax
push dword [esp]
mov edx, dword [esp]
push eax
mov eax, esp
add eax, 4
add eax, 4
xchg dword [esp], eax
pop esp
push esi
jmp 0xf2e2f2
add esp, 4
jmp 0xf2e411
neg edi
xor edi, 0x4fdf2127
sub edi, 0x5fff2fea
sub edi, 0xbfb860ab
jmp 0xf2e2da
mov edx, edi
pop edi
jmp 0xf2e31b
mov eax, 0x6efc0a2a
push ecx
mov ecx, 0x7e76ffcf
jmp 0xf2e378
push 0x2c8cade2
mov dword [esp], esp
add dword [esp], 4
mov esi, dword [esp]
add esp, 4
jmp 0xf2e32c
pop ebx
sub ebx, 0x7fba43ea
push dword [esp]
jmp 0xf2e3bb
dec edx
sub edx, 0x6ffb4a6f
add esi, edx
mov edx, dword [esp]
jmp 0xf2e352
push edx
push edi
mov edi, 0x7fd215f4
dec edi
and edi, 0x3fbf4fd6
jmp 0xf2e2c1
push esp
pop edi
add edi, 4
add edi, 4
jmp 0xf2e35b
add esp, 4
push ebp
jmp 0xf2e36f
xchg dword [esp], edi
pop esp
add esp, 4
push ecx
mov ecx, 0x73ef1397
not ecx
jmp 0xf2e3da
mov dword [esp], edi
push eax
jmp 0xf2e2e2
xor eax, ecx
pop ecx
sub eax, 0x7ff676fe
xor eax, 0x90947ee3
mov edi, eax
pop eax
add esi, edi
pop edi
xor esi, dword [esp]
xor dword [esp], esi
xor esi, dword [esp]
mov esp, dword [esp]
push 0x230e19c8
mov dword [esp], eax
push ebx
jmp 0xf2e3c1
add ecx, 0x632ade95
sub eax, ecx
pop ecx
push eax
add dword [esp], 0x7fba43ea
jmp 0xf2e30c
pop eax
jmp 0xf2e2b6
mov dword [esp], 0x86c231d
mov dword [esp], ebx
push edi
mov edi, 0x673b6af5
add dword [esp + 4], edi
jmp 0xf2e3e5
and ecx, 0x66b79f74
jmp 0xf2e3a5
push dword [esp]
pop edi
add esp, 4
push dword [esp]
push dword [esp]
jmp 0xf2e3fa
mov eax, dword [esp]
add esp, 4
sub esp, 4
mov dword [esp], edi
jmp 0xf2e33f
call 0xf2e416
push dword [esp]
pop eax
push eax
mov dword [esp], ecx
mov dword [esp], edx
jmp 0xf2e4ba
pop ecx
push esi
push 0x5f18e789
mov dword [esp], eax
jmp 0xf2e44c
push ebp
mov dword [esp], edx
push 4
pop edx
add ecx, edx
pop edx
jmp 0xf2e506
jmp 0xf2e550
mov esi, dword [esp]
add esp, 4
pop eax
not eax
xor esi, eax
xor eax, esi
xor esi, eax
push ecx
jmp 0xf2e486
pop edx
sub eax, esi
mov esi, dword [esp]
add esp, 4
jmp 0xf2e447
xor esi, ecx
xor ecx, esi
xor esi, ecx
add ecx, 0xffffffff
push esi
push ecx
pop esi
jmp 0xf2e426
mov dword [esp], ebp
mov ebp, 0x7feb7d9c
or esi, ebp
jmp 0xf2e49d
pop edi
xor esi, edx
jmp 0xf2e461
pop ebp
push ecx
mov ecx, 0x7babf873
or esi, ecx
pop ecx
shr esi, 2
or esi, 0x75bdc9e2
push 0x402d27d5
jmp 0xf2e53a
push eax
jmp 0xf2e4cb
pop esp
push 0x126131a4
jmp 0xf2e4f6
push esi
mov esi, 0x29f156fa
jmp 0xf2e4ef
mov eax, esp
add eax, 4
add eax, 4
xchg dword [esp], eax
jmp 0xf2e4c0
pop ecx
push eax
jmp 0xf2e4d6
mov eax, esi
jmp 0xf2e514
mov dword [esp], edi
mov edi, 4
add ecx, edi
pop edi
jmp 0xf2e435
xor ecx, dword [esp]
xor dword [esp], ecx
xor ecx, dword [esp]
jmp 0xf2e52b
pop esi
mov dword [esp + 4], eax
mov eax, dword [esp]
add esp, 4
mov dword [esp], ecx
push esp
push dword [esp]
jmp 0xf2e4e8
pop esp
push edi
mov dword [esp], esi
mov esi, 0x5deece7a
jmp 0xf2e472
mov dword [esp], edx
push 0x46ff3b4a
pop edx
push edi
mov edi, 0x3900c644
xor edx, edi
jmp 0xf2e495
push edx
sub esp, 4
mov dword [esp], eax
push edx
push edi
push 0x526e0cb0
jmp 0xf2e78c
mov ebp, 0x3effd753
jmp 0xf2e665
pop esi
sub dword [esp + 4], ecx
mov ecx, dword [esp]
jmp 0xf2e6cc
add ebx, 0x7fdf0b88
pop edx
push esi
mov dword [esp], ecx
sub esp, 4
mov dword [esp], ebp
push 0x460a065a
mov dword [esp], eax
mov eax, 0x6f41f5f2
jmp 0xf2e61b
xor esi, edx
not edx
jmp 0xf2e748
add esp, 4
push eax
mov eax, 0x4df8834b
push ebx
mov ebx, 0x7b4cdbc4
shl ebx, 6
or ebx, 0x4b7b3a73
add ebx, 0x5b3b8b50
shl ebx, 1
and ebx, 0x7dbe1c26
sub ebx, 0xfdb63679
or eax, ebx
pop ebx
push esi
mov esi, 0x10085cdc
jmp 0xf2e614
xor eax, esi
jmp 0xf2e6ba
sub esp, 4
mov dword [esp], esi
pop ecx
jmp 0xf2e57a
sub eax, ebp
pop ebp
xchg edi, eax
pop eax
or edi, 0x7ef9fb30
sub edi, 0x7f02705f
mov edx, edi
mov edi, dword [esp]
add esp, 4
xor dword [esp + 4], edx
pop edx
push dword [esp]
pop edx
jmp 0xf2e5c4
pop esi
xor edx, eax
pop eax
sub esp, 4
mov dword [esp], edx
mov eax, dword [esp]
jmp 0xf2e6e5
add esp, 4
mov ebx, dword [esp]
push ebx
mov ebx, esp
push eax
jmp 0xf2e755
add esp, 4
pop edx
push 0x66d1f703
mov dword [esp], ebx
push edx
mov dword [esp], ecx
push esi
jmp 0xf2e733
or edi, 0x1bff8930
push eax
mov eax, 0
jmp 0xf2e7b7
push 0x7ff54474
pop esi
sub esi, 1
shl esi, 6
xor esi, edx
xor edx, esi
jmp 0xf2e5bb
xchg esi, edx
add esi, 0x7cc8f606
jmp 0xf2e659
mov eax, 0x6cfbe893
add eax, 0x49bbb35d
and eax, 0x7dfebde0
or eax, 0x3ff55415
jmp 0xf2e7a8
mov dword [esp], ebp
jmp 0xf2e7e3
shr eax, 6
xor eax, 0xffdf73
add ebx, eax
jmp 0xf2e82b
add eax, 0x3effd753
sub eax, edi
push ebp
jmp 0xf2e570
push ecx
mov dword [esp], 0x3fbed084
pop ebp
add ebp, 0x67fb5aa9
add ebp, 0xd8342b71
mov edi, ebp
pop ebp
jmp 0xf2e6fe
mov edx, 0x7eb48308
or edx, 0x5f7f2ed2
xchg edx, esi
neg esi
xor edx, esi
xor esi, edx
xor edx, esi
neg edx
xor edx, 0x75636664
shl edx, 8
push eax
mov eax, 0x75ef6d91
jmp 0xf2e841
pop eax
jmp 0xf2e831
add ebx, 4
xchg dword [esp], ebx
pop esp
push edx
jmp 0xf2e800
add eax, 0x6cbeadb4
add edx, eax
pop eax
sub ebx, 0x7fdf0b88
add ebx, edx
jmp 0xf2e598