Function at 0x14b336a
Capabilities:
Check for vm using instruction vpcext
Contain obfuscated stackstrings
Reference the vmware io port

Disassembly:
mov eax, dword [esp]
push edi
jmp 0x14b2774
add esp, 4
add eax, 4
push eax
jmp 0x14b26a6
add esi, 0xbbd3b964
mov eax, esi
pop esi
mov dword [esp + 4], eax
pop eax
mov dword [esp], edx
push 0x6ffd7c96
jmp 0x14b2687
mov esi, eax
pop eax
push ebx
mov ebx, 0x3f0faca3
xor ebx, 0x7f20b8cc
sub ebx, 1
add ebx, 0x3caccf53
and esi, ebx
pop ebx
add esi, 0x7e67e152
sub esi, 0x7d71c0c5
jmp 0x14b26b0
xor esi, ebx
pop ebx
push ebx
mov ebx, 0x7fffd1e5
add eax, ebx
pop ebx
add eax, esi
sub eax, 0x7fffd1e5
jmp 0x14b26c7
mov edx, dword [esp]
push ebx
mov ebx, esp
add ebx, 4
add ebx, 4
jmp 0x14b26eb
or esi, 0x5fe1403c
jmp 0x14b270b
push dword [esp + 4]
pop eax
jmp 0x14b26d8
sub esi, 1
and esi, 0x7da37cda
push eax
mov dword [esp], ebx
mov ebx, 0x7502008c
jmp 0x14b266f
push dword [esp]
mov esi, dword [esp]
add esp, 4
jmp 0x14b2617
pop dword [esp]
mov esp, dword [esp]
push edx
mov dword [esp], 0x7cc04a0e
jmp 0x14b26f4
xchg dword [esp], ebx
pop esp
jmp 0x14b2725
mov dword [esp], edi
push 0x197ab864
mov dword [esp], ebp
push eax
push esi
mov esi, 0x2fbfe2d1
jmp 0x14b269b
sub esi, 0x40bfd1f8
jmp 0x14b2716
neg esi
sub esi, 0x5ffe4ca1
not esi
jmp 0x14b2625
mov edi, 0x824c1b
xor edi, edx
mov edx, dword [esp]
add esp, 4
inc edi
push 0x1911e477
mov dword [esp], eax
mov eax, 0x7ff99b5d
add eax, 0x3eee853c
push esi
mov dword [esp], edi
mov edi, 0x7ebf815b
inc edi
push edx
mov edx, 0xd0a96d2e
add edi, edx
pop edx
sub eax, edi
pop edi
xor edi, eax
pop eax
sub eax, edi
push dword [esp]
jmp 0x14b276b
pop edi
add esp, 4
jmp 0x14b2795
mov dword [esp], eax
push 0x2b7ff80c
mov dword [esp], esp
add dword [esp], 4
pop eax
push esi
push eax
jmp 0x14b278b
mov eax, 0x7717e435
jmp 0x14b2640
sub esp, 4
mov dword [esp], edi
jmp 0x14b291e
mov edi, 0x3f9f0b11
push ebp
mov dword [esp], ecx
mov ecx, 0x6f2ff494
jmp 0x14b27f0
add dword [esp + 4], eax
mov eax, dword [esp]
jmp 0x14b295f
pop dword [esp]
pop esp
mov dword [esp], edx
mov edx, eax
push ebp
mov dword [esp], 0x67f2cea1
mov dword [esp], ecx
push 0x1e76e4a4
mov dword [esp], esi
jmp 0x14b2917
mov dword [esp], ecx
mov ecx, 0x5ff1be36
xor edx, ecx
pop ecx
jmp 0x14b2ae4
or ecx, 0x726f36f7
push edx
jmp 0x14b283d
or dword [esp], 0x7ff72754
shr dword [esp], 7
add dword [esp], 0x7e1c7424
push esi
push ebp
mov ebp, 0x36fc0727
jmp 0x14b297e
mov dword [esp], ebx
pop ebx
push esi
mov dword [esp], 0x9d11a51
mov dword [esp], edx
mov dword [esp], ecx
push edx
push esi
mov esi, 0x7bb7764a
mov dword [esp + 4], esi
pop esi
jmp 0x14b2880
mov edx, 0x7ffb6166
xor ecx, edx
jmp 0x14b29c9
xor esi, 0x6546f2b1
mov eax, esi
mov esi, dword [esp]
jmp 0x14b2875
sub esi, 4
xchg dword [esp], esi
jmp 0x14b2995
pop edx
push dword [esp]
pop ecx
add esp, 4
pop edx
jmp 0x14b2a77
add esp, 4
jmp 0x14b27b3
or dword [esp], 0x2561294f
shl dword [esp], 5
xor dword [esp], 0x77b2d554
and dword [esp], 0x5fbe7ce5
jmp 0x14b289e
shr dword [esp], 3
xor dword [esp], 0x78118c97
mov dword [esp], esi
mov esi, esp
add esi, 4
jmp 0x14b2859
shl ecx, 4
and ecx, 0x79ff7756
push edx
mov edx, 0xe006c82
xor ecx, edx
pop edx
sub edi, 0x7ff5563f
sub edi, ecx
add edi, 0x7ff5563f
jmp 0x14b29f9
add esp, 4
add dword [esp + 4], 0x6bbe0d32
add dword [esp + 4], esi
push ebx
mov ebx, 0x6bbe0d32
sub dword [esp + 8], ebx
pop ebx
pop esi
pop ecx
sub ecx, 0x3cf7c3d1
push edx
xor dword [esp], 0x5ff1be36
push dword [esp]
push dword [esp]
pop edx
jmp 0x14b2944
mov esi, edx
jmp 0x14b2952
push esp
pop edi
add edi, 4
sub esp, 4
mov dword [esp], ebx
mov ebx, 4
sub edi, ebx
pop ebx
push esi
mov dword [esp], edi
push dword [esp + 4]
jmp 0x14b294c
add esp, 4
jmp 0x14b2959
pop edi
jmp 0x14b27bf
push esi
pop ecx
jmp 0x14b29e4
push esi
jmp 0x14b29a4
add esp, 4
jmp 0x14b281a
push eax
push ecx
mov dword [esp], 0x128895d0
mov dword [esp], esi
push 0x5fdf1597
pop esi
jmp 0x14b2abe
mov esi, ebp
pop ebp
sub esi, 0x36fc0726
sub dword [esp + 4], esi
pop esi
shl dword [esp], 1
jmp 0x14b2967
mov esp, dword [esp]
mov dword [esp], esi
push ebp
mov dword [esp], edx
jmp 0x14b29ef
mov esi, esp
push edi
jmp 0x14b27a0
add edx, 0xb87e4f89
xor edi, edx
pop edx
add esi, edi
pop edi
add esi, 4
xchg dword [esp], esi
mov esp, dword [esp]
jmp 0x14b29da
mov edx, dword [esp]
add esp, 4
xor ecx, 0x7fffcad3
jmp 0x14b28b9
push 0x89bcc98
jmp 0x14b27e0
pop esi
push eax
mov dword [esp], edx
push ecx
jmp 0x14b2a93
push 0x2df5bca4
jmp 0x14b2a0d
pop ecx
push edx
mov edx, 0x5f7f2fd9
add edx, 0x6f56a7fb
not edx
jmp 0x14b2a21
mov edx, dword [esp]
add esp, 4
push ebp
mov ebp, 0
jmp 0x14b2a66
sub edx, 0x6be79677
shr edx, 6
or edx, 0x7feff3dc
sub edx, 0x33018303
and edx, 0x7fff1c91
push edx
not dword [esp]
pop edx
push ebx
jmp 0x14b2a47
mov ebx, 0x3df68edc
or ebx, 0x367e2588
sub ebx, 0x49043ab
xor edx, ebx
pop ebx
and edx, 0x5feb97a2
jmp 0x14b29ac
sub ebp, edx
mov edx, ebp
pop ebp
xor edx, 0xeefd808d
push edi
jmp 0x14b2ad2
sub esp, 4
mov dword [esp], ebx
push edi
mov edi, 0x7ce01181
mov dword [esp + 4], edi
pop edi
mov dword [esp], eax
mov dword [esp], edx
jmp 0x14b2a9b
pop edx
mov eax, edx
jmp 0x14b2867
mov dword [esp], 0x3c0f561f
jmp 0x14b2aa7
neg dword [esp]
dec dword [esp]
jmp 0x14b2ab2
sub dword [esp], 0x4fef9d8d
jmp 0x14b27fc
xor esi, 0x1e2f14f2
add esi, 0x7de93f06
shr esi, 1
jmp 0x14b2849
mov edi, edx
jmp 0x14b2ad9
mov esi, edi
pop edi
mov edx, dword [esp]
jmp 0x14b28de
jmp 0x14b2ea8
sub esp, 4
jmp 0x14b2ef8
mov esp, dword [esp]
sub esp, 4
jmp 0x14b2f25
push esi
push dword [esp + 4]
pop esi
pop dword [esp]
pop esp
mov dword [esp], edi
mov edi, esp
jmp 0x14b2f14
xchg dword [esp], edi
jmp 0x14b2f7b
add esp, 4
pop ebp
push ebx
mov ebx, 4
add edx, ebx
pop ebx
push edx
push dword [esp + 4]
pop edx
pop dword [esp]
jmp 0x14b2eb0
mov dword [esp], eax
push dword [esp]
pop eax
push edx
push esp
mov edx, dword [esp]
jmp 0x14b2f09
add esp, 4
jmp 0x14b2f8c
push edx
mov edx, 4
add edi, edx
pop edx
add edi, 4
jmp 0x14b2ed2
mov dword [esp], ebx
push ecx
mov ecx, 0x726b9b4a
add dword [esp + 4], 0x3ffda991
push 0x4a8f1808
mov dword [esp], esi
push 0x79ff47d1
pop esi
sub dword [esp + 8], esi
pop esi
sub dword [esp + 4], ecx
add dword [esp + 4], 0x79ff47d1
push edi
mov edi, 0x56f86b61
xor edi, 0x6905c2f0
sub dword [esp + 8], edi
pop edi
mov ecx, dword [esp]
push edx
mov dword [esp], 0x1c8dd423
mov dword [esp], esi
mov esi, esp
jmp 0x14b301d
pop esp
jmp 0x14b2f81
add ebx, 0x726b9b4a
jmp 0x14b3046
push 0xdd2a898
mov dword [esp], ebp
mov ebp, 4
sub esp, 4
mov dword [esp], esi
push eax
mov eax, 0x7fa8664e
inc eax
and eax, 0x5cff798e
and eax, 0x651f3ba4
neg eax
not eax
sub eax, 0xcb51f20e
jmp 0x14b2fc1
mov esi, eax
pop eax
shl esi, 4
jmp 0x14b2fcc
and esi, 0x76e7255e
xor esi, 0x7ff0732e
sub esi, 0x298bbec
add edx, esi
pop esi
add edx, ebp
push esi
mov esi, 0x7febd8d7
push eax
mov dword [esp], edx
mov edx, 0x4f0966f3
xor esi, edx
pop edx
xor esi, 0x1eb59bfe
xor esi, 0x7dfe6efa
jmp 0x14b3006
neg esi
xor esi, 0xd6af0e72
sub edx, esi
jmp 0x14b3015
mov esi, dword [esp]
jmp 0x14b2eda
add esi, 4
add esi, 4
xchg dword [esp], esi
pop esp
mov ebx, dword [esp]
jmp 0x14b3032
push esi
mov esi, esp
add esi, 4
sub esi, 4
jmp 0x14b2ebe
call 0x14b304b
mov eax, dword [esp]
push eax
mov eax, esp
push esi
mov dword [esp], ebp
mov dword [esp], 0x3fdf81cb
or dword [esp], 0x7feb6935
xor dword [esp], 0x41086a77
mov dword [esp], esi
push edx
push 0x75bb4268
pop edx
neg edx
jmp 0x14b30e4
pop edx
push edi
jmp 0x14b3130
pop edx
pop ebx
xor edx, 0x8a44bd93
mov esi, edx
jmp 0x14b307b
sub esi, ebx
sub esi, 0x7f475212
pop ebx
jmp 0x14b30b0
add eax, ebx
pop ebx
pop esi
sub eax, ebp
add eax, 0x6dc7b824
pop ebp
jmp 0x14b3215
not esi
shr esi, 6
and esi, 0x4dfe1877
or esi, 0x7fff5022
push edx
mov edx, 0x1238e057
jmp 0x14b3119
mov esi, eax
mov edx, esi
pop esi
pop eax
sub eax, edx
mov edx, dword [esp]
add esp, 4
sub eax, 0x7b7ba50d
jmp 0x14b310d
xchg edx, ebx
dec ebx
push edx
push ebx
jmp 0x14b3082
push esi
mov dword [esp], edx
mov edx, 0x47fc9751
xor edx, 0x799ef921
jmp 0x14b31f5
push ebx
mov ebx, 0x69f5c0ea
jmp 0x14b31e2
sub eax, esi
add eax, 0x7b7ba50d
jmp 0x14b31d7
xor esi, edx
pop edx
push edx
push eax
mov eax, 0x75b72b10
push 0x14cd2305
mov dword [esp], esi
jmp 0x14b30cc
mov edi, 0x7fdfc815
not edi
jmp 0x14b313c
sub edi, 0x36fe9c8a
shr edi, 6
jmp 0x14b314a
sub edi, 0xc326b8be
add eax, edi
pop edi
sub eax, 0x7f3e35ec
add eax, esi
push ecx
mov ecx, 0x5fdf1450
not ecx
not ecx
dec ecx
xor ecx, 0x20e121a3
add eax, ecx
pop ecx
sub eax, 0x3dfdcdaf
pop esi
push ebx
mov dword [esp], ebp
push eax
push esi
mov esi, 0x7cd9bbf0
mov eax, esi
pop esi
mov ebp, 0x7cd9bbf4
xor ebp, eax
pop eax
add eax, ebp
mov ebp, dword [esp]
add esp, 4
jmp 0x14b31c7
push edi
mov edi, 0x6bcf9594
sub esp, 4
mov dword [esp], esi
mov esi, 0x7fae6200
sub esi, 0x13decf7c
sub edi, esi
pop esi
mov ebp, edi
pop edi
sub esp, 4
mov dword [esp], esi
mov esi, 0x6ebbda70
jmp 0x14b3102
xor eax, dword [esp]
xor dword [esp], eax
xor eax, dword [esp]
pop esp
push ebp
jmp 0x14b3197
push ebx
mov ebx, 0x75b72b10
jmp 0x14b309f
neg ebx
sub ebx, 0x73e14800
xor ebx, 0x6effb48a
jmp 0x14b30ee
xor edx, 0x29de094
and ebx, edx
pop edx
or ebx, 0x1f6fb3cf
sub ebx, 0xe1303c7b
add esi, 0x7f475212
jmp 0x14b3091
sub esp, 4
mov dword [esp], edx
mov dword [esp], eax
push esp
pop eax
push esi
mov dword [esp], ebp
push edx
jmp 0x14b3256
xchg dword [esp], edx
pop esp
mov ebx, dword [esp]
push ecx
mov ecx, esp
add ecx, 4
add ecx, 4
xor ecx, dword [esp]
xor dword [esp], ecx
jmp 0x14b32ff
push ebx
mov ebx, 0xeef0049
jmp 0x14b32e8
add edi, 4
jmp 0x14b338f
mov edx, esp
jmp 0x14b33bb
mov ecx, 4
add edx, ecx
pop ecx
add edx, 4
jmp 0x14b322d
pop eax
add esp, 4
jmp 0x14b32da
sub esp, 4
mov dword [esp], eax
mov dword [esp], ebx
jmp 0x14b3356
inc ebx
xor ebx, 0x35103cfa
mov edx, ebx
jmp 0x14b3332
xor ecx, dword [esp]
pop esp
add ebx, 0xfdd22a4
push eax
sub esp, 4
mov dword [esp], ecx
push dword [esp]
push dword [esp]
jmp 0x14b33d4
pop ebx
push eax
mov eax, edx
mov ebp, eax
pop eax
pop edx
xor ebp, eax
xor eax, ebp
xor ebp, eax
not eax
xchg ebp, eax
xor ebp, 0x4963cd8c
push esi
mov esi, 0xffffffff
add ebp, esi
jmp 0x14b3423
sub esp, 4
mov dword [esp], esi
push ecx
mov ecx, 0x2fbf609b
mov esi, ecx
push dword [esp]
mov ecx, dword [esp]
push ebp
mov ebp, esp
add ebp, 4
add ebp, 4
jmp 0x14b346c
push ebp
jmp 0x14b3395
mov ebp, 4
add edi, ebp
pop ebp
push edi
push dword [esp + 4]
pop edi
jmp 0x14b33a8
pop dword [esp]
pop esp
add esp, 4
push ebp
mov dword [esp], eax
jmp 0x14b33ee
push ecx
jmp 0x14b32a9
pop eax
jmp 0x14b3450
sub eax, 4
xchg dword [esp], eax
mov esp, dword [esp]
mov dword [esp], eax
push dword [esp]
jmp 0x14b32d1
add dword [esp], 0x7edd20c0
pop ecx
push ebx
push eax
mov dword [esp], 0x5babaf5c
push edx
jmp 0x14b3436
add dword [esp + 4], 0x39bff326
sub dword [esp + 4], esi
sub dword [esp + 4], 0x39bff326
push dword [esp]
pop esi
push edx
jmp 0x14b32a2
pop esi
sub ebp, 0x8d630ebe
sub eax, 0x3f73ff30
add eax, ebp
jmp 0x14b34a0
push esi
mov dword [esp], edi
mov edi, esp
jmp 0x14b3297
xchg dword [esp], ebp
pop esp
push eax
jmp 0x14b34b0
add eax, 0x3f73ff30
mov ebp, dword [esp]
add esp, 4
jmp 0x14b33da
mov eax, esp
add eax, 4
add eax, 4
xchg dword [esp], eax
pop esp
inc esi
xor esi, 0x20624238
jmp 0x14b3405