Function at 0xafbf0d
Capabilities:
Check for vm using instruction vpcext
Contain obfuscated stackstrings
Reference the vmware io port

Disassembly:
push 0xf53d429
jmp 0xafbf2c
push ebp
mov ebp, 0x6d97c996
sub ebp, 0x67ff349b
jmp 0xafbe89
mov ebx, esp
add ebx, 4
sub ebx, 4
xchg dword [esp], ebx
pop esp
mov dword [esp], edx
jmp 0xafbf4c
push edi
mov edi, 0x75fe08b2
jmp 0xafbee2
push edi
jmp 0xafbe2d
or ebp, edi
pop edi
add ebp, 0x5f3c9331
shl ebp, 1
jmp 0xafbfa9
push ebp
mov ebp, esp
add ebp, 4
add ebp, 4
xchg dword [esp], ebp
mov esp, dword [esp]
pop dword [esp]
pop esp
push ebx
jmp 0xafbe54
mov dword [esp], edx
mov edx, 0x6196a3f9
shl edx, 6
xor edx, 0x6eb75ee7
xor edx, 0x688a51d2
mov edi, edx
pop edx
inc edi
jmp 0xafbf89
mov edx, 0x7f5f60a3
xor edx, 0x7f5f6259
sub eax, 0x7f97dffd
push edx
mov edx, 0x3f9f64a7
and edx, 0x7ab5b77e
shr edx, 2
jmp 0xafbf70
xor edx, 0x75fefe5a
sub edx, 0x79c1063
sub eax, edx
pop edx
sub eax, 0x5ff9c500
jmp 0xafbf98
neg edi
add edi, 0xe32dd173
add eax, edi
jmp 0xafbfc6
sub eax, edx
add eax, 0x5ff9c500
add eax, 0x73bfa6f0
jmp 0xafbeb4
xor ebp, 0xaa76605c
add esi, ebp
pop ebp
add esi, 4
xor esi, dword [esp]
xor dword [esp], esi
xor esi, dword [esp]
mov esp, dword [esp]
jmp 0xafbfda
pop edi
mov edx, dword [esp]
push esi
push edx
push esp
pop dword [esp]
add dword [esp], 4
pop esi
jmp 0xafbe43
push 0x90edeb5
mov dword [esp], eax
push esi
push ecx
jmp 0xafbff6
pop eax
mov edx, dword [esp]
add esp, 4
push ebp
jmp 0xafc11b
push 0x7355ceca
mov ecx, dword [esp]
jmp 0xafc003
add esp, 4
inc ecx
dec ecx
push esi
mov esi, 0x1f7cc50b
dec esi
jmp 0xafc01a
pop ecx
jmp 0xafc098
add esi, 0x1e3ae852
push edx
jmp 0xafc1d7
pop edi
jmp 0xafc1ef
push ebx
mov ebx, 1
sub edi, ebx
pop ebx
shl edi, 6
push eax
jmp 0xafc03e
mov eax, 0x75f71bbb
jmp 0xafc056
and esi, edi
pop edi
add esi, 0x9e9c5465
jmp 0xafc2a4
shl eax, 6
jmp 0xafc0c8
mov eax, 0x62cfa85d
push edi
mov edi, 0x73fe5c49
inc edi
jmp 0xafc02c
push ebx
mov dword [esp], 0x37f5e882
mov dword [esp], ebx
push edx
mov edx, 0x597db500
push edx
push 0x5fdf5aaa
pop edx
and edx, 0x7fdf5e40
xor edx, 0x555fcf27
jmp 0xafc12d
shr ecx, 8
shl ecx, 3
add ecx, 0x79fc417a
sub esp, 4
mov dword [esp], ecx
mov esi, dword [esp]
add esp, 4
pop ecx
add esi, 0xffffffff
xchg esi, edi
dec edi
xchg esi, edi
shl esi, 6
dec esi
push edx
mov edx, 0x3d6a303
jmp 0xafc16e
push edi
mov edi, 0x3fda3ba5
jmp 0xafc0d3
neg edi
neg edi
inc edi
sub edi, 0x7ff6de35
jmp 0xafc0f4
mov edx, 0xab6b4f00
sub edx, edi
pop edi
dec edx
xchg edx, eax
inc eax
xchg edx, eax
jmp 0xafc236
sub edi, 0x8292454c
inc edi
neg edi
jmp 0xafc182
push edx
xor dword [esp], 0x7f7bd97c
mov ebx, dword [esp]
add esp, 4
sub esp, 4
mov dword [esp], eax
jmp 0xafc05e
mov dword [esp], ecx
mov dword [esp], 0x26915d64
mov dword [esp], ecx
jmp 0xafc06f
mov ebx, edx
pop edx
sub ebx, 0x3f7c7bc7
add ebx, edx
add ebx, 0x3f7c7bc7
pop edx
xor dword [esp + 4], ebx
mov ebx, dword [esp]
add esp, 4
jmp 0xafc151
mov ecx, dword [esp]
add esp, 4
sub esp, 4
mov dword [esp], eax
jmp 0xafc1a6
mov dword [esp], eax
push dword [esp + 4]
jmp 0xafc179
sub esi, edx
pop edx
xor edx, esi
pop esi
jmp 0xafc2fd
pop eax
pop dword [esp]
jmp 0xafc1c9
not edi
add edi, 0xc2aee7da
sub eax, edi
pop edi
shr eax, 3
shl eax, 8
xor eax, 0xc2016b57
add edi, eax
pop eax
xor edi, 0x56d5c726
jmp 0xafc1bc
mov eax, esp
add eax, 4
push ebx
mov ebx, 4
sub eax, ebx
pop ebx
push ecx
jmp 0xafc162
xor edi, 0x4f516487
or eax, edi
jmp 0xafc026
pop esp
mov dword [esp], edx
mov edx, 0x7dff05ab
jmp 0xafc1e2
push edi
mov edi, 0x6b7e2c45
jmp 0xafc0e3
push ecx
mov ecx, 0x1a00bb84
sub edx, ecx
jmp 0xafc215
push edx
mov dword [esp], esi
mov dword [esp], ecx
mov ecx, 0
sub ecx, eax
xchg ecx, eax
mov ecx, dword [esp]
add esp, 4
jmp 0xafc209
add eax, 0xe37bc7fb
xor ebx, eax
jmp 0xafbfe9
pop ecx
xor ecx, edx
pop edx
sub esp, 4
mov dword [esp], esi
mov dword [esp], edx
push edi
mov edi, 0x7bfb3efc
xor dword [esp + 4], edi
pop edi
pop edx
jmp 0xafc250
and edx, 0x7dff220b
xor edx, 0x7b5e0df2
add edx, 0x294cc499
xor esi, edx
pop edx
jmp 0xafc281
push edi
mov dword [esp], eax
mov dword [esp], esi
push ecx
mov ecx, 0x7e6fc59b
neg ecx
sub ecx, 0x1f0fd65
jmp 0xafc26a
push ebp
mov dword [esp], ecx
not dword [esp]
pop ecx
sub esp, 4
mov dword [esp], ecx
sub dword [esp], 1
jmp 0xafc014
push 0x639e15e8
mov dword [esp], esi
inc dword [esp]
pop esi
push ebp
mov ebp, 0x71eda6e7
or esi, ebp
pop ebp
shr esi, 2
push edi
mov edi, 0x6feeb8d8
jmp 0xafc048
add ecx, esi
mov esi, dword [esp]
add esp, 4
mov esi, ecx
jmp 0xafc2b6
mov ecx, dword [esp]
add esp, 4
xor dword [esp + 4], esi
push dword [esp]
pop esi
jmp 0xafc2cc
add esp, 4
jmp 0xafc2d7
push dword [esp]
pop eax
add esp, 4
xor eax, 0x1edc5c07
push edx
mov dword [esp], ecx
mov dword [esp], 0x5ceb3101
mov dword [esp], edx
jmp 0xafc2f6
mov edx, ebx
jmp 0xafc102
jmp 0xafc60b
push ecx
push ebp
jmp 0xafc612
mov dword [esp], ebx
push eax
mov eax, 0x6938e34d
mov ebx, eax
pop eax
mov dword [esp + 4], ebx
pop ebx
mov dword [esp], edx
jmp 0xafc62b
push eax
sub dword [esp], 0x5d3f3e2c
pop edx
push ecx
mov ecx, 0x5d3f3e2c
add edx, 0x72f6ce3e
push ebp
mov ebp, 0x7fef318d
inc ebp
xor ebp, 0x3bc7b1f2
dec ebp
jmp 0xafc653
sub ebp, 0x182a45d5
sub edx, ebp
pop ebp
add edx, ecx
add edx, 0x2bfe3aa6
push edi
jmp 0xafc66a
mov edi, 0x77abdfca
shr edi, 3
push eax
mov eax, 0x7af600a4
push esi
mov esi, 0xe90b51a1
add eax, esi
pop esi
add edi, eax
pop eax
sub edx, edi
pop edi
pop ecx
push edx
sub dword [esp], 0x3ffbb553
jmp 0xafc695
push dword [esp]
pop eax
jmp 0xafc69e
push ebx
mov ebx, esp
jmp 0xafc6bb
sub dword [esp + 4], 0x32cba8d8
push edx
mov dword [esp], 0x1308b6b1
jmp 0xafc6fd
add ebx, 4
add ebx, 4
xchg dword [esp], ebx
mov esp, dword [esp]
add eax, 0x3ffbb553
mov edx, dword [esp]
add esp, 4
jmp 0xafc6dd
push esi
mov esi, esp
add esi, 4
sub esi, 4
xchg dword [esp], esi
mov esp, dword [esp]
mov dword [esp], ebx
sub esp, 4
mov dword [esp], edi
jmp 0xafc731
mov dword [esp], edi
mov edi, 0x12d7a232
add dword [esp + 8], edi
pop edi
pop edi
jmp 0xafc710
mov ebx, dword [esp]
push ebx
mov ebx, esp
add ebx, 4
push 0x48ada086
mov dword [esp], esi
mov esi, 4
add ebx, esi
pop esi
jmp 0xafc75f
mov edi, 0x6fbf605d
sub dword [esp + 4], 0x12d7a232
jmp 0xafc743
push ebx
mov ebx, 0x32cba8d8
jmp 0xafc74e
sub dword [esp + 8], 0x2aff45a9
add dword [esp + 8], ebx
jmp 0xafc77a
xchg dword [esp], ebx
mov esp, dword [esp]
push eax
mov eax, 0x6ffbbd3c
not eax
sub eax, 0x2044e266
add ebx, eax
pop eax
jmp 0xafc7a1
add dword [esp + 8], 0x2aff45a9
jmp 0xafc787
pop ebx
sub dword [esp + 4], 0x6ebe8716
sub dword [esp + 4], edi
add dword [esp + 4], 0x6ebe8716
jmp 0xafc6a6
call 0xafc7a6
push dword [esp]
push dword [esp]
pop eax
jmp 0xafc817
mov edx, 0x797fdac5
add eax, edx
pop edx
pop edx
xchg dword [esp], eax
pop esp
pop dword [esp]
mov esp, dword [esp]
push esi
mov esi, 0x7dbad551
push 0x24c04233
mov dword [esp], ecx
mov ecx, 0x6df6ecd1
add ecx, 0xffffffff
neg ecx
jmp 0xafc7f0
xor edx, edi
pop edi
and esi, edx
pop edx
jmp 0xafc887
shr ecx, 1
xchg ecx, eax
not eax
xchg ecx, eax
add ecx, 0x7ff924c4
xor ecx, 0x681d57e0
or esi, ecx
mov ecx, dword [esp]
push ecx
mov ecx, esp
jmp 0xafc849
sub esi, eax
jmp 0xafc834
push ebx
mov ebx, esp
jmp 0xafc869
neg edx
xor edx, 0x20020ab7
sub eax, 0x797fdac5
add eax, edx
push edx
jmp 0xafc7b2
pop eax
sub eax, 0x7ef6629b
sub eax, esi
add eax, 0x7ef6629b
mov esi, dword [esp]
jmp 0xafc8b1
add ecx, 4
add ecx, 4
xchg dword [esp], ecx
jmp 0xafc900
mov eax, 0x33eeea55
add eax, 0xd2195272
jmp 0xafc810
push edi
mov edi, 4
add ebx, edi
pop edi
add ebx, 4
xchg dword [esp], ebx
mov esp, dword [esp]
push edx
mov dword [esp], ebx
jmp 0xafc88d
push eax
jmp 0xafc85a
push eax
push esp
pop dword [esp]
add dword [esp], 4
pop ebx
add ebx, 4
add ebx, 4
push ebx
push dword [esp + 4]
mov ebx, dword [esp]
push eax
jmp 0xafc8dd
add esp, 4
jmp 0xafc969
sub edx, 1
push edi
mov edi, 0x78db88d8
jmp 0xafc7e5
add ebp, 0x41bb1347
mov edi, ebp
pop ebp
sub esi, edi
jmp 0xafc932
mov eax, esp
add eax, 4
sub esp, 4
mov dword [esp], edx
mov edx, 0x75677000
shr edx, 3
shl edx, 5
or edx, 0x5ff9b54d
jmp 0xafc81f
pop esp
push ebp
mov dword [esp], edi
push ebp
jmp 0xafc90b
mov ebp, 0x3ff5030a
sub ebp, 0x4fff7ebf
shl ebp, 3
and ebp, 0x3ace1161
jmp 0xafc8cd
xor edx, 0x3d77608e
shr edx, 5
jmp 0xafc95e
pop edi
shr esi, 3
shl esi, 8
push edx
mov edx, 0x7fba75cc
sub edx, 0x1ebbf5f1
add edx, 0x1e7e8ad1
push ebp
mov ebp, 0x7bf8e2e3
or edx, ebp
jmp 0xafc958
pop ebp
jmp 0xafc924
or edx, 0x77f39d0e
jmp 0xafc8bc
push edi
mov dword [esp], eax
mov eax, esp
push edi
mov edi, 0x6ff104c3
xor edi, 0x74562e5c
sub edi, 0x71ffbf88
and edi, 0x3a5e6128
jmp 0xafcadc
add eax, edi
pop edi
xchg dword [esp], eax
pop esp
jmp 0xafcbfb
mov eax, 4
add edx, eax
pop eax
add edx, 4
push edx
push dword [esp + 4]
pop edx
pop dword [esp]
mov esp, dword [esp]
jmp 0xafc9e5
pop eax
xor eax, 0x32b32b43
jmp 0xafc9fa
pop edx
push dword [esp]
pop edi
push eax
mov eax, esp
add eax, 4
add eax, 4
xor eax, dword [esp]
xor dword [esp], eax
xor eax, dword [esp]
pop esp
push dword [esp]
pop ebx
add esp, 4
jmp 0xafcb1a
push ebx
push ecx
mov dword [esp], edi
push ebp
mov ebp, 0x3dbf899f
mov edi, ebp
mov ebp, dword [esp]
jmp 0xafca26
pop ecx
push dword [esp]
pop edx
push edx
jmp 0xafca61
push 0x7f56ba7b
mov esi, dword [esp]
add esp, 4
shr esi, 1
sub esi, 0x7bcfe632
push edi
mov edi, 0x7f1f7350
xor esi, edi
jmp 0xafcb90
push ecx
mov ecx, esp
add ecx, 4
add ecx, 4
xchg dword [esp], ecx
pop esp
push ebx
push 0x5e94bcc4
mov ebx, dword [esp]
add esp, 4
sub dword [esp + 8], 0x7f47df01
add dword [esp + 8], ebx
add dword [esp + 8], 0x7f47df01
mov ebx, dword [esp]
jmp 0xafca9c
push esp
pop edx
push eax
jmp 0xafc998
mov dword [esp], eax
mov eax, 0x7a3d9a00
add dword [esp + 8], eax
mov eax, dword [esp]
add esp, 4
pop ebp
pop ecx
push ebp
mov ebp, 0x6ffa378
push ecx
mov ecx, 0x7dffc8a0
add ecx, 0xb0c3ee51
add ebp, ecx
pop ecx
sub ecx, ebp
pop ebp
pop edx
push esi
jmp 0xafcb9f
add esp, 4
sub dword [esp + 4], edi
jmp 0xafcaab
push edx
mov edx, 0x5e94bcc4
jmp 0xafcac3
push 0x18ec5ba8
mov dword [esp], eax
jmp 0xafcbe5
add dword [esp + 8], 0x12ecd2e3
sub dword [esp + 8], edx
sub dword [esp + 8], 0x12ecd2e3
jmp 0xafc9bf
sub edi, 0x280660fc
add eax, 0x7be79c06
add eax, edi
sub eax, 0x7be79c06
pop edi
sub eax, 4
xchg dword [esp], eax
mov esp, dword [esp]
mov dword [esp], edx
sub esp, 4
mov dword [esp], eax
mov edx, dword [esp]
add esp, 4
push ebx
mov dword [esp], ecx
mov ecx, edx
push ecx
xor dword [esp], 0x32b32b43
jmp 0xafc9b4
add ebx, 0x3dbf899f
sub esp, 4
mov dword [esp], edx
push edx
mov dword [esp], 0x5c243e73
mov dword [esp], ecx
jmp 0xafcb39
push edi
mov edi, 0x657742a1
sub dword [esp + 4], edi
pop edi
pop edx
add edx, 0x657742a1
jmp 0xafcb50
push edx
push 0x1f414341
mov dword [esp], esi
mov dword [esp], edi
mov dword [esp], 0x3ff1e077
mov dword [esp], ebp
push ebx
mov ebx, 0x76cf01e4
sub ebx, 0x3ffdf2cc
add ebx, 0xfef24b51
mov ebp, ebx
pop ebx
push eax
mov eax, 0x7a3d9a00
sub dword [esp + 8], eax
pop eax
add dword [esp + 4], ebp
push ebp
jmp 0xafca69
pop edi
add esi, 0x433bfba9
mov edi, esi
pop esi
jmp 0xafc98c
mov esi, esp
add esi, 4
sub esi, 4
xchg dword [esp], esi
pop esp
mov dword [esp], esi
push ebx
push edx
mov dword [esp], ecx
push ebp
mov ebp, edx
mov ecx, ebp
pop ebp
mov ebx, ecx
pop ecx
mov esi, ebx
pop ebx
push edi
mov dword [esp], esi
add dword [esp], 0x47ff6b01
pop edx
sub edx, 0x47ff6b01
push dword [esp]
mov esi, dword [esp]
add esp, 4
jmp 0xafcab6
push esp
pop eax
add eax, 4
push eax
mov dword [esp], edi
jmp 0xafcbf5
push esi
jmp 0xafca05
jmp fcn.00afceae