Function at 0x247fd0
Capabilities:
Check for vm using instruction vpcext
Contain obfuscated stackstrings
Reference the vmware io port

Disassembly:
push dword [esp]
pop eax
push esi
sub esp, 4
mov dword [esp], edx
mov dword [esp], 0x7823bd71
mov dword [esp], esp
add dword [esp], 4
mov esi, dword [esp]
add esp, 4
add esi, 4
push edx
mov edx, 0x7f6edf01
shr edx, 7
add edx, 0x7eff5799
shr edx, 7
and edx, 0x6c3f7100
push ebp
mov ebp, 0x6fe9f613
or ebp, 0x237ee8e0
dec ebp
dec ebp
xor ebp, 0x109254ab
or edx, ebp
pop ebp
push eax
mov eax, 0x7f7ffa56
sub edx, eax
pop eax
jmp 0x247f75
add esp, 4
push edx
mov edx, 0x20780d4
xor ebp, edx
mov edx, dword [esp]
jmp 0x247f96
push ecx
mov ecx, 0x2ffb7fb9
jmp 0x24809c
add esi, 0x7517a100
add esi, edx
jmp 0x247f8a
add esp, 4
jmp 0x2480a6
sub esi, 0x7517a100
pop edx
jmp 0x247fb6
add esp, 4
jmp 0x247fa9
mov ecx, dword [esp]
jmp 0x247f82
sub ecx, 0x7f6d2da5
sub ecx, ebp
jmp 0x247fe8
sub esp, 4
mov dword [esp], eax
mov dword [esp], 0x162b1e06
mov dword [esp], esi
push dword [esp + 4]
mov esi, dword [esp]
push ebp
mov ebp, esp
jmp 0x247ff3
mov ebp, dword [esp]
add esp, 4
sub eax, ecx
jmp 0x247fa1
add ecx, 0x7f6d2da5
jmp 0x247fd8
add ebp, 4
add ebp, 4
xchg dword [esp], ebp
mov esp, dword [esp]
pop dword [esp]
pop esp
sub esp, 4
mov dword [esp], ecx
sub esp, 4
mov dword [esp], eax
push ecx
mov ecx, 0x5bfc8140
mov eax, ecx
pop ecx
mov ecx, 0x20be4c52
add ecx, eax
pop eax
jmp 0x248056
sub ecx, edx
pop edx
not ecx
push ebp
mov ebp, 0x1eeb1074
add ebp, 0x20d3a6b7
or ebp, 0x7de94436
and ebp, 0x7fafbee7
push esi
mov esi, 0x7ddf5b58
xor esi, 0x57a7e10f
jmp 0x24808d
sub ecx, 0xffffffff
neg ecx
push ecx
mov ecx, esp
add ecx, 4
sub ecx, 4
xchg dword [esp], ecx
pop esp
mov dword [esp], edx
jmp 0x248079
mov edx, 0x7fdd186d
inc edx
sub edx, 1
xor edx, 0x292a1368
jmp 0x248028
dec esi
xor esi, 0x57855b36
sub ebp, esi
pop esi
jmp 0x247f6a
sub ebp, ecx
mov ecx, dword [esp]
jmp 0x247f54
sub esp, 4
mov dword [esp], esi
jmp 0x2480be
add esi, 0x8ba6d353
add eax, esi
jmp 0x248137
mov dword [esp], 0x28ef3584
mov dword [esp], eax
sub esp, 4
mov dword [esp], ecx
mov ecx, 0x7dd78d4c
jmp 0x248101
add esi, 4
add esi, 4
xchg dword [esp], esi
pop esp
sub esp, 4
jmp 0x24821b
mov dword [esp], eax
mov dword [esp], esi
mov dword [esp], ecx
jmp 0x24812c
add dword [esp + 4], ecx
pop ecx
push dword [esp]
jmp 0x2481a5
mov dword [esp], edi
jmp 0x248197
xchg dword [esp], eax
pop esp
jmp 0x24816b
add edi, esi
sub edi, 0x13fd1417
jmp 0x248309
push dword [esp]
push dword [esp]
jmp 0x248204
pop esi
push 0x490771b9
mov dword [esp], ecx
push edi
mov edi, 0x7de75ff9
shl edi, 6
shl edi, 7
xor edi, 0xebff2004
mov ecx, edi
pop edi
sub eax, ecx
mov ecx, dword [esp]
add esp, 4
xchg dword [esp], eax
mov esp, dword [esp]
jmp 0x2480f3
push edx
push eax
jmp 0x248172
mov eax, 0x395175d7
shr eax, 1
push 0
sub dword [esp], eax
mov eax, dword [esp]
add esp, 4
xor eax, 0x7b77541c
or eax, 0x6fd45f87
jmp 0x2481e5
push eax
mov eax, esp
push ecx
mov ecx, 4
jmp 0x2482a0
mov eax, dword [esp]
add esp, 4
push esi
jmp 0x2481b4
mov dword [esp], eax
mov eax, esp
add eax, 4
jmp 0x2481c3
add eax, 4
jmp 0x248116
pop edx
add dword [esp + 4], 0x77ff2262
sub dword [esp + 4], ecx
sub dword [esp + 4], 0x77ff2262
jmp 0x2481ef
sub eax, 0xffffffff
jmp 0x248270
pop ecx
mov dword [esp], edx
push dword [esp]
mov esi, dword [esp]
add esp, 4
add esp, 4
jmp 0x2482c7
mov ecx, dword [esp]
add esp, 4
add esp, 4
push esi
mov esi, esp
jmp 0x2480d8
mov dword [esp], ebx
mov dword [esp], ebp
mov dword [esp], esi
push esi
mov dword [esp], edi
mov dword [esp], 0x73756913
sub dword [esp], 0x5fff8510
push ecx
sub esp, 4
mov dword [esp], edx
mov edx, 0xb93b07bc
mov ecx, edx
jmp 0x2481cb
sub eax, ebp
pop ebp
add eax, 0x7fdb13d1
jmp 0x248281
sub eax, 0x7fdb13d1
add eax, 0x7f1251d3
sub eax, edx
push ebp
mov ebp, 0x7f1251d3
jmp 0x24824c
sub eax, 0x821cd244
push ebx
mov ebx, eax
mov edx, ebx
pop ebx
pop eax
jmp 0x248259
pop edx
push ebx
push edi
push ebx
mov ebx, 0x7bf740c1
mov edi, ebx
pop ebx
xor dword [esp + 4], edi
pop edi
mov ebx, dword [esp]
sub esp, 4
jmp 0x24810e
add eax, ecx
pop ecx
sub eax, 4
xchg dword [esp], eax
pop esp
mov dword [esp], esp
add dword [esp], 4
mov edi, dword [esp]
add esp, 4
push eax
mov eax, 4
add edi, eax
jmp 0x2482e6
push 0x6b0ebc32
mov dword [esp], esi
push ecx
mov ecx, 0x3fdcb1a4
xor dword [esp + 4], ecx
pop ecx
pop edx
xor edx, 0x3fdcb1a4
jmp 0x248347
pop eax
sub esp, 4
mov dword [esp], esi
push ebp
mov ebp, 0x758b8340
mov esi, 0x8a747cc4
add esi, ebp
pop ebp
add edi, 0x13fd1417
jmp 0x24811f
pop esi
xor edi, dword [esp]
xor dword [esp], edi
xor edi, dword [esp]
mov esp, dword [esp]
push ecx
mov dword [esp], ebp
mov ebp, 0x7bf740c1
xor ebx, ebp
jmp 0x248326
pop ebp
push ebx
mov dword [esp], 0x46855c3e
mov dword [esp], ebp
mov dword [esp], eax
mov eax, esp
push esi
jmp 0x24833d
mov esi, 0x74592cb1
jmp 0x2480b1
mov esi, dword [esp]
add esp, 4
jmp 0x248352
jmp 0x248737
push edi
jmp 0x24873d
mov dword [esp], eax
mov eax, esp
push edx
mov edx, 0x5f3eeee5
inc edx
shr edx, 1
jmp 0x24878c
add ebp, 0x5fd7f023
xor ebp, 0xb831a6b6
mov edi, ebp
pop ebp
add ecx, edi
jmp 0x248896
and ebp, ecx
jmp 0x2488bd
or ecx, 0x3b7bdff9
inc ecx
xor ecx, 0x7f9b45ed
or ecx, 0x5fd3a7b1
xor ecx, 0xa24b7a
jmp 0x248767
sub edx, 0x2f9f776f
add eax, edx
pop edx
push esi
mov esi, 0x7fbd7391
add esi, 0x80428c73
sub eax, esi
pop esi
xchg dword [esp], eax
pop esp
mov dword [esp], eax
jmp 0x2488ae
mov dword [esp], esi
mov esi, esp
push eax
mov dword [esp], 0x3bc576d0
neg dword [esp]
xor dword [esp], 0x7f7e82bf
xor dword [esp], 0xb0cd2677
jmp 0x24885a
mov dword [esp], ebx
mov ebx, dword [esp]
push 0x22b2121
mov dword [esp], ebx
mov ebx, esp
push edi
jmp 0x248812
add esi, ecx
jmp 0x2487f8
shr ecx, 1
jmp 0x248888
sub esi, 0x6fafc1da
pop ecx
jmp 0x248804
add esi, 4
xor esi, dword [esp]
xor dword [esp], esi
jmp 0x248870
mov edi, 4
jmp 0x24881c
add ebx, edi
pop edi
push ecx
mov ecx, 0x7ea77387
push ebp
mov ebp, 0x5ff6b228
xor ebp, 0x7d7c0cde
inc ebp
xor ebp, 0x58fe393b
add ebp, 0x3d777a82
add ebp, 0xc6dbc218
and ecx, ebp
pop ebp
inc ecx
shr ecx, 8
jmp 0x2487f0
mov ecx, 0x57ef5cae
jmp 0x2488d5
mov dword [esp], edi
mov dword [esp], ecx
mov ecx, 4
add esi, 0x6fafc1da
jmp 0x2487e9
xor esi, dword [esp]
mov esp, dword [esp]
sub eax, 0x775f93c0
push edi
mov dword [esp], 0x6d87831a
jmp 0x2487d3
push edi
push ebp
mov ebp, 0x17e6d551
neg ebp
jmp 0x248751
pop edi
push edx
mov edx, 0x7bf759f0
sub ebx, edx
pop edx
jmp 0x2488a5
add ebx, ecx
push ebp
push ecx
jmp 0x248850
add dword [esp], 0x775f93c0
push dword [esp]
jmp 0x2488f4
pop ecx
neg ebp
sub ebp, 0x25b31210
add ebx, ebp
pop ebp
pop ecx
xchg dword [esp], ebx
mov esp, dword [esp]
jmp 0x248907
xor ecx, 0x9b083ff
mov ebp, ecx
pop ecx
jmp 0x2488e3
and ebp, 0x5ff5bf2a
push ecx
mov ecx, 0x5e4fc260
jmp 0x24876e
pop eax
push 0x56b1195d
jmp 0x2488ff
mov dword [esp], ecx
jmp 0x2487b0
call 0x24890c
push dword [esp]
mov eax, dword [esp]
push eax
mov eax, esp
add eax, 4
jmp 0x248960
sub ebx, 0xffffffff
jmp 0x248a16
pop ebx
sub esp, 4
mov dword [esp], eax
mov eax, esp
push ecx
mov ecx, 0x3bba46dc
and ecx, 0x3bff4fbb
add ecx, 0x79f3c32b
inc ecx
jmp 0x2489f1
add esp, 4
jmp 0x248b13
pop ebp
push ecx
jmp 0x2489a7
push ebx
push eax
mov eax, esp
add eax, 4
sub eax, 4
xchg dword [esp], eax
jmp 0x248993
sub edi, edx
add edi, 0x76cfdf3b
pop edx
push esi
mov esi, 0x6f6ab2e2
jmp 0x248ab6
xor ebx, 0x757d491c
jmp 0x248a0b
pop esp
mov dword [esp], ecx
jmp 0x2489b1
pop esi
add eax, ebx
push dword [esp]
jmp 0x24892a
mov dword [esp], eax
mov eax, esp
jmp 0x2489c0
mov ecx, 0x7dbfcfe7
mov ebx, 0xf59e902c
jmp 0x2489c6
push ebx
jmp 0x2489d4
sub ebx, ecx
pop ecx
or ebx, 0x7ebbd6ce
jmp 0x2489fc
mov ebx, 0x7fffb421
sub ebx, 0x632f48f2
jmp 0x248988
neg ecx
add ecx, 0x35b29493
jmp 0x248a4a
sub ecx, 0x7ffb7535
jmp 0x2489e4
dec ebx
push edi
mov edi, 0x27fd7ff5
or ebx, edi
pop edi
jmp 0x24891f
add ebx, 0x599b09d1
jmp 0x248a26
not ebx
push esi
push 0x80000005
pop esi
add ebx, esi
jmp 0x24899c
or ebx, 0x79ff2263
xor ebx, 0xfbff2e63
add eax, ebx
jmp 0x248a96
sub eax, ecx
pop ecx
push edi
mov edi, 0x6ffd6840
add eax, edi
pop edi
jmp 0x248b0b
add eax, ecx
pop ecx
add eax, 4
xchg dword [esp], eax
mov esp, dword [esp]
push eax
push dword [esp + 4]
pop eax
pop dword [esp]
mov esp, dword [esp]
add esp, 4
sub esp, 4
mov dword [esp], edi
push ebp
push 0x7fb78f1a
pop ebp
shr ebp, 3
xchg ebp, ecx
not ecx
jmp 0x248a86
xchg ebp, ecx
inc ebp
sub ebp, 0x90c9ded3
mov edi, ebp
jmp 0x248959
pop ebx
jmp 0x248a9c
sub eax, 4
xchg dword [esp], eax
pop esp
mov dword [esp], edx
mov edx, 0x5f3f2c19
sub edi, 0x76cfdf3b
jmp 0x248974
add esi, 0x75b989aa
jmp 0x248ac1
and esi, 0x1dfa472c
sub esi, 0x95229bcc
sub eax, esi
jmp 0x248ad4
pop esi
push 0x4b0ad2b3
mov dword [esp], ebp
mov ebp, 0x7f3f4820
shl ebp, 2
shl ebp, 6
sub ebp, 0x3e7172c3
not ebp
jmp 0x248af5
xor ebp, 0x80904767
add eax, ebp
pop ebp
sub eax, edi
push ecx
mov ecx, 0x7fb915a5
jmp 0x248a39
mov edi, dword [esp]
jmp 0x24894e
push esi
mov dword [esp], edi
jmp 0x248cd5
add esp, 4
jmp 0x248b5b
mov dword [esp], edi
jmp 0x248d9e
mov edx, esp
jmp 0x248bbd
add edx, 4
push 0x6478e6fa
mov dword [esp], ecx
mov ecx, 4
add edx, ecx
pop ecx
jmp 0x248d96
add esp, 4
sub dword [esp + 4], ebp
jmp 0x248c86
push dword [esp]
pop esi
jmp 0x248be4
pop esp
mov dword [esp], edx
jmp 0x248c6c
mov edx, eax
jmp 0x248d64
pop ebp
mov dword [esp], esi
push dword [esp]
pop ebx
jmp 0x248b29
xor edi, dword [esp]
xor dword [esp], edi
xor edi, dword [esp]
pop esp
mov eax, edi
push dword [esp]
pop edi
push eax
mov dword [esp], 0x1c91efb7
mov dword [esp], edx
jmp 0x248b54
push edi
mov dword [esp], eax
mov eax, esp
add eax, 4
sub eax, 4
xchg dword [esp], eax
jmp 0x248c11
push edi
mov edi, esp
jmp 0x248d85
mov edi, edx
push dword [esp]
pop edx
jmp 0x248ceb
push dword [esp + 4]
pop edx
pop dword [esp]
pop esp
jmp 0x248db0
add edi, 4
add edi, 4
jmp 0x248ca9
sub esp, 4
jmp 0x248b41
mov dword [esp], edx
jmp 0x248d77
push esi
sub esp, 4
mov dword [esp], ebx
pop esi
push edx
mov dword [esp], 0x2d630282
mov dword [esp], eax
mov dword [esp], 0x7cf7d7ac
jmp 0x248dd2
neg dword [esp]
not dword [esp]
dec dword [esp]
add dword [esp], 0x7feda8d4
push ecx
mov ecx, 0x36d77aae
and dword [esp + 4], ecx
mov ecx, dword [esp]
push edi
mov edi, esp
add edi, 4
add edi, 4
xchg dword [esp], edi
pop esp
push 0x2d2b72ee
mov dword [esp], ebp
push esi
mov esi, 0xf85405d
mov ebp, esi
jmp 0x248c08