Function at 0x46765b
Capabilities:
Check for vm using instruction vpcext
Contain obfuscated stackstrings
Reference the vmware io port

Disassembly:
push dword [esp]
push dword [esp]
mov eax, dword [esp]
jmp 0x45d910
add esi, ecx
push 0x6b5c351e
mov dword [esp], eax
mov eax, 0x7f7f1508
inc eax
neg eax
and eax, 0x3bdf94bc
jmp 0x45d973
sub esi, eax
mov eax, dword [esp]
add esp, 4
pop ecx
xchg dword [esp], esi
mov esp, dword [esp]
sub esp, 4
mov dword [esp], edx
mov edx, 0x7bffd734
add edx, 0x7ef5527e
and edx, 0x7ff7fe41
jmp 0x45d9e4
add esp, 4
add esp, 4
push ebp
jmp 0x45d97b
pop esi
push 0
sub dword [esp], ecx
mov ecx, dword [esp]
add esp, 4
shr ecx, 4
shr ecx, 4
xor ecx, 0x5fbf8967
add ecx, 0xf366955c
sub edi, ecx
pop ecx
sub edi, 0xaa01aa04
mov ecx, edi
mov edi, dword [esp]
jmp 0x45d9f7
push eax
mov eax, 0x663f3610
add eax, 0x379f2193
shr eax, 3
xor eax, 0x6d568c28
add esi, eax
pop eax
jmp 0x45d8c6
mov edx, dword [esp]
jmp 0x45da67
not eax
push ebp
jmp 0x45d9b5
mov dword [esp], esi
push esp
pop esi
push ebp
mov ebp, 0x5ce56d5c
jmp 0x45d98b
xor ebp, 0x5ce56d58
add esi, 0x749ae2aa
add esi, ebp
sub esi, 0x749ae2aa
pop ebp
push 0x4bd0b700
mov dword [esp], eax
mov dword [esp], ecx
mov ecx, 4
jmp 0x45d950
mov ebp, 0x5b3bd53a
or ebp, 0x7ee593c0
xor ebp, 0x716d2ca0
neg ebp
and ebp, 0x63d3748a
shl ebp, 1
add ebp, 0xa16418fe
add eax, ebp
pop ebp
xor eax, 0x1d88e791
jmp 0x45d8e2
xor edx, 0x33d29500
push ecx
push edi
jmp 0x45d9f1
push ecx
jmp 0x45da05
add esp, 4
shr ecx, 6
shl ecx, 6
jmp 0x45da1b
mov ecx, 0x79fed2d5
mov edi, 0xfe7edfdb
jmp 0x45da14
add edi, ecx
jmp 0x45da41
neg ecx
add ecx, 1
add ecx, 1
xor ecx, 0xfafe4f87
or edx, ecx
mov ecx, dword [esp]
add esp, 4
xor edx, 0x7ffffec1
sub eax, edx
jmp 0x45d96b
mov ecx, dword [esp]
add esp, 4
push ecx
jmp 0x45da6f
pop eax
add esi, eax
pop eax
sub esi, 0xffffffff
shr esi, 5
sub esi, 0xabf9f265
mov ecx, esi
jmp 0x45d91c
add esp, 4
jmp 0x45da97
sub esp, 4
mov dword [esp], esi
push eax
mov eax, 0x7adbe6a3
jmp 0x45da80
sub eax, 0x10163b0b
push eax
mov eax, 0x1476e3f6
jmp 0x45da90
mov esi, eax
jmp 0x45da50
mov ecx, ebx
jmp 0x45dcac
jmp 0x45dd94
mov ecx, 0x37d0
call 0x45dd9e
pop eax
add eax, 0xe
mov dword [eax], ecx
jmp 0x45ddab
jmp 0x461580
jmp 0x462685
push edi
mov dword [esp], eax
mov eax, esp
jmp 0x466bc1
shl eax, 4
shr eax, 3
xor eax, 0x4ca4c35b
jmp 0x462a9d
pop ebp
add dword [esp + 4], eax
pop eax
mov eax, dword [esp]
add esp, 4
sub eax, 0x5fef3d45
push dword [esp]
pop ebp
add esp, 4
mov ebx, dword [esp]
add esp, 4
jmp 0x4656a5
mov esi, 0x7fe27c6f
sub dword [esp + 4], esi
jmp 0x462ddb
sub ebp, eax
mov eax, dword [esp]
add esp, 4
jmp 0x46425e
mov eax, 0x6dbf65a4
mov esi, eax
pop eax
jmp 0x464b52
add edx, 4
jmp 0x462d47
pop edi
add ecx, ebx
jmp 0x4679b3
pop edi
push ecx
jmp 0x465ac0
add edx, 4
xchg dword [esp], edx
jmp 0x4645f6
pop esi
inc dword [esp]
push ecx
jmp 0x463c97
push edx
mov edx, esp
add edx, 4
add edx, 4
jmp 0x464364
push eax
mov dword [esp], esi
jmp 0x462a1b
xchg dword [esp], eax
push 0x5618b5b0
mov dword [esp], edi
mov edi, 0x7df843c1
add dword [esp + 4], edi
mov edi, dword [esp]
add esp, 4
jmp 0x46339f
mov edi, 0x7f9b41e2
add edi, 0x9ff7f38
add edi, 1
or edi, 0x7ebb81ec
xor edi, 0xffbbc1fb
add ecx, edi
jmp 0x463560
mov edi, dword [esp]
add esp, 4
jmp 0x464a44
mov edx, 0x7edfb5e1
jmp 0x465988
push dword [esp]
pop ecx
add esp, 4
jmp 0x46764f
not edi
xor edi, 0xaa083fc9
jmp 0x4646de
add edx, 4
xchg dword [esp], edx
pop esp
push 0x2a476e1e
mov dword [esp], ebp
mov ebp, edx
jmp 0x4655d0
add esp, 4
push edx
jmp 0x4657f5
mov eax, esp
jmp 0x4666db
push edi
jmp 0x4634d3
mov ecx, 0xdcc6d09a
xor dword [esp + 4], ecx
pop ecx
sub dword [esp], 0xfe0e936b
mov dword [esp], esi
mov dword [esp], eax
push dword [esp]
mov eax, dword [esp]
add esp, 4
jmp 0x4631b8
add esp, 4
jmp 0x46554a
sub esp, 4
mov dword [esp], edx
push edi
push ecx
pop edi
mov edx, edi
mov edi, dword [esp]
jmp 0x466a4a
mov ecx, 4
jmp 0x464509
mov ebp, 0x37cb0149
push eax
push ecx
jmp 0x4641a0
add dword [esp + 4], esi
pop esi
push esi
push eax
jmp 0x462ada
mov ecx, 0x3ffe44c3
mov eax, 0x2811f2a2
xor eax, ecx
pop ecx
sub eax, 0x7ff5697b
sub eax, 0x6d7bd2ca
shr eax, 2
jmp 0x4627d7
or ebp, 0x5eaf7d57
add ebp, 0x813fbd4e
jmp 0x46496e
xchg dword [esp], edx
pop esp
cmp dword [ebp + 0x122d3920], 0
jne 0x46437a
cmp dword [ebp + 0x122d3a34], 0
je 0x464389
push eax
mov eax, eax
mov eax, 0
call dword [ebp + 0x122d34ae]
pop eax
push ebp
mov dword [esp], ecx
push eax
mov ecx, dword [esp]
push edx
jmp 0x46818f
mov dword [esp], eax
push dword [esp]
pop eax
jmp 0x4670ca
push esp
pop eax
add eax, 4
push ecx
mov ecx, esp
add ecx, 4
sub ecx, 4
xor ecx, dword [esp]
jmp 0x465c07
add ebp, ecx
pop ecx
xor ebp, dword [esp]
xor dword [esp], ebp
xor ebp, dword [esp]
mov esp, dword [esp]
cmp dword [ebp + 0x122d3920], 0
jne 0x46452a
cmp dword [ebp + 0x122d3a34], 0
je 0x46453b
push eax
push ebx
mov eax, eax
mov eax, 0
call dword [ebp + 0x122d1e53]
pop ebx
pop eax
sub esp, 4
mov dword [esp], eax
mov dword [esp], 0x29cf2a53
push edi
mov dword [esp], edx
mov edx, 0x257f5792
add dword [esp + 4], 0x5edb28f2
jmp 0x46808b
pop esp
push ecx
jmp 0x465721
mov ebp, dword [esp]
add esp, 4
mov ecx, dword [esp]
add esp, 4
push ecx
jmp 0x464bf4
mov ebx, edi
pop edi
add edx, ebx
pop ebx
add edx, 4
xchg dword [esp], edx
pop esp
push esi
jmp 0x466c9d
mov ecx, 0x7fbde3e0
sub dword [esp + 8], ecx
jmp 0x465280
mov dword [esp], esi
push edx
mov edx, 0x7bdb4262
mov esi, 0x26226d23
xor esi, edx
pop edx
jmp 0x46417d
push ecx
jmp 0x464754
push ebp
jmp 0x464b8a
add dword [esp + 4], 0x7fbde3e0
mov edx, dword [esp]
add esp, 4
pop eax
push 0xbc917bc
mov dword [esp], ebp
mov ebp, 0x5fbd86cd
add eax, ebp
jmp 0x4645fd
push ecx
jmp 0x464b90
or dword [esp + 4], esi
pop esi
sub dword [esp], 0x7f8e9540
push ebx
mov ebx, 0xa10e5b1e
jmp 0x4651ab
sub eax, edx
push edx
jmp 0x4635e1
pop eax
jmp 0x462874
mov dword [esp], 0x13164168
mov dword [esp], ebx
push edi
mov edi, 4
mov ebx, edi
jmp 0x462c9a
push eax
jmp 0x4644ee
xor ecx, ebp
pop ebp
jmp 0x463cf7
add dword [esp + 4], ebx
mov ebx, dword [esp]
add esp, 4
mov dword [esp], eax
push dword [esp]
pop eax
push ecx
push esp
pop ecx
add ecx, 4
jmp 0x465ba3
pop ecx
jmp 0x46684b
push eax
push dword [esp + 4]
pop eax
pop dword [esp]
mov esp, dword [esp]
mov dword [esp], eax
push dword [esp]
pop ecx
add esp, 4
jmp 0x4675c2
mov eax, ebp
jmp 0x466646
cmp dword [ebp + 0x122d3920], 0
jne 0x4656b7
cmp dword [ebp + 0x122d3a34], 0
je 0x4656cc
push eax
mov eax, eax
mov eax, 0x43d
mov dword [ebp + 0x122d33fd], eax
call dword [ebp + 0x122d1f19]
pop eax
push edi
jmp 0x465886
push edi
mov edi, esp
push edx
mov edx, 4
add edi, edx
pop edx
sub edi, 4
push edi
push dword [esp + 4]
pop edi
pop dword [esp]
mov esp, dword [esp]
mov dword [esp], edx
push 0x5fbd86cd
pop edx
jmp 0x4648c0
mov edx, 0x7fa27788
xor eax, edx
jmp 0x46819e
mov ebp, 0x7f1d65b6
add ebp, 0x80e29a4e
add ecx, ebp
pop ebp
xchg dword [esp], ecx
mov esp, dword [esp]
push dword [esp]
push dword [esp]
jmp 0x46654b
mov dword [esp], ecx
push ebp
mov dword [esp], 0x6fa3e621
mov dword [esp], eax
xor dword [esp], 0x63d7995b
push dword [esp]
mov ecx, dword [esp]
add esp, 4
add esp, 4
push ebp
mov ebp, 0x63d7995b
jmp 0x464da0
add eax, edx
jmp 0x466f88
push esp
pop ecx
add ecx, 4
push ebp
jmp 0x465801
add ecx, 4
xchg dword [esp], ecx
pop esp
push ebx
mov dword [esp], 0x7fea585a
neg dword [esp]
add dword [esp], 0x771afc25
jmp 0x467d0f
xor dword [esp], ecx
xor ecx, dword [esp]
mov esp, dword [esp]
jmp 0x465f76
mov dword [esp], edx
mov edx, 4
sub eax, 0x7edfb5e1
jmp 0x464b82
xor ecx, dword [esp]
pop esp
add esp, 4
cmp dword [ebp + 0x122d3920], 0
jne 0x46631b
cmp dword [ebp + 0x122d3a34], 0
je 0x46632a
push eax
mov eax, eax
mov eax, 0
call dword [ebp + 0x122d350e]
pop eax
cmp dword [ebp + 0x122d3a34], 0
je 0x466340
push eax
mov eax, 0
call dword [ebp + 0x122d2734]
pop eax
push esi
mov esi, esp
add esi, 4
sub esi, 4
xchg dword [esp], esi
pop esp
jmp 0x4643a4
pop eax
push 0x3af32fcd
mov dword [esp], eax
jmp 0x4638f2
pop ebp
mov edx, dword [esp]
add esp, 4
jmp 0x46363e
add eax, 4
add eax, 4
push edx
mov dword [esp], eax
push dword [esp + 4]
pop eax
pop dword [esp]
pop esp
add esp, 4
mov dword [ebp + 0x122d1f66], eax
mov dword [ebp + 0x122d344a], 0
push ecx
mov dword [esp], edx
mov dword [esp], ebx
mov ebx, eax
push esi
mov dword [esp], 0x5531e40d
mov dword [esp], ebp
push ebx
pop ebp
sub esp, 4
jmp 0x466cb9
sub dword [esp + 4], edx
jmp 0x464a1e
push edx
mov edx, esp
add edx, 4
jmp 0x463775
add eax, 4
sub eax, 4
xchg dword [esp], eax
mov esp, dword [esp]
mov dword [esp], esp
push edi
mov edi, 4
add dword [esp + 4], edi
push dword [esp]
jmp 0x462d40
mov esi, esp
add esi, 4
sub esi, 4
xor esi, dword [esp]
xor dword [esp], esi
xor esi, dword [esp]
mov esp, dword [esp]
jmp 0x467b4f
mov dword [esp], ebp
sub esp, 4
mov dword [esp], eax
push ebp
jmp 0x463f0f
pop edx
mov edx, dword [esp]
jmp 0x463cc9
sub esp, 4
mov dword [esp], ecx
push eax
mov dword [esp], 0x310caa8d
mov dword [esp], esp
add dword [esp], 4
jmp 0x4674d1
sub dword [esp], 0x29e7516e
push eax
push dword [esp + 4]
pop eax
pop dword [esp]
not eax
jmp 0x4634b4
mov ecx, dword [esp]
add esp, 4
push eax
mov eax, 4
sub ecx, 0x1ff5f031
add ecx, eax
add ecx, 0x1ff5f031
pop eax
sub ecx, 4
push ecx
push dword [esp + 4]
jmp 0x467574
mov ecx, dword [esp]
add esp, 4
pop dword [esp]
pop esp
mov dword [esp], edx
mov edx, esp
jmp 0x467b33
push ecx
xor dword [esp], 0x7fa27788
jmp 0x468196
push eax
push dword [esp]
mov eax, dword [esp]
push ecx
push esp
mov ecx, dword [esp]
push ebp
mov ebp, esp
push edx
mov edx, 0x7ae62760
add edx, 0x3fefd5f7
shl edx, 1
not edx
xor edx, 0x8a540555
add ebp, edx
mov edx, dword [esp]
add esp, 4
add ebp, 4
xchg dword [esp], ebp
mov esp, dword [esp]
jmp 0x463a08
mov ebx, dword [esp]
add esp, 4
xor ecx, dword [esp]
xor dword [esp], ecx
jmp 0x4662ff
push ebx
push esi
mov dword [esp], edi
mov edi, 0x7dd5442d
or edi, 0x75a3f093
dec edi
and edi, 0x57f7ca72
jmp 0x4636f3
mov dword [esp], edi
push 0x522ccdc
mov dword [esp], eax
pop edi
push 0x69026b
mov dword [esp], ecx
jmp 0x467b68
mov dword [esp], edi
pop eax
mov edi, dword [esp]
push ebp
push esp
jmp 0x467d91
sub dword [esp], 0x31f698f9
jmp 0x467f85
mov ebp, dword [esp]
add esp, 4
sub esp, 4
mov dword [esp], ecx
mov ecx, 0x6a3e76ab
and ecx, 0x51dfebe3
sub ecx, 0x37f5bd17
or ecx, 0x6ffbc753
sub ecx, 0x6ffbe7db
add ebp, ecx
jmp 0x467fc1
dec dword [esp]
xor dword [esp], 0xf247f5ba
sub dword [esp], 0x7e575803
not dword [esp]
jmp 0x467129
pop ecx
push ebp
jmp 0x468019
mov dword [esp], ecx
jmp 0x463d3a
add dword [esp + 4], edx
sub dword [esp + 4], 0x5edb28f2
jmp 0x46817c
pop edx
push 0x1d2b0c5c
jmp 0x468187
mov dword [esp], ebx
jmp 0x4647a4
mov edx, esp
jmp 0x462b47
mov eax, dword [esp]
jmp 0x4637de
pop edx
pop ecx
cmp dword [ebp + 0x122d3920], 0
jne 0x4681b2
cmp dword [ebp + 0x122d3a34], 0
je 0x4681c1
push eax
mov eax, eax
mov eax, 0
call dword [ebp + 0x122d3416]
pop eax
push ecx
push eax
pop ecx
push ecx
xor dword [esp], 0x64bfd671
jmp 0x4681d1