Function at 0xf46187
Capabilities:
Check for vm using instruction vpcext
Contain obfuscated stackstrings
Reference the vmware io port

Disassembly:
mov eax, dword [esp]
jmp 0xf4598f
pop edx
shr ebx, 5
jmp 0xf4599c
add esi, edx
add esi, 0x7cff9dff
jmp 0xf45984
not dword [esp]
pop edx
add edx, 0xd94f604d
sub esi, 0x7cff9dff
jmp 0xf45914
mov edx, 0x7b7796e0
mov ebp, edx
pop edx
or ebp, 0x7ffaa01e
jmp 0xf45949
dec ebp
sub ebp, 0x7fffb6f9
add ecx, ebp
pop ebp
xchg dword [esp], ecx
pop esp
sub eax, ebx
mov ebx, dword [esp]
push ebx
mov ebx, esp
jmp 0xf459d0
sub esi, 4
xchg dword [esp], esi
pop esp
mov dword [esp], eax
push dword [esp + 4]
pop eax
pop dword [esp]
jmp 0xf4597e
pop esp
jmp 0xf45a26
mov edx, dword [esp]
add esp, 4
jmp 0xf45964
push ecx
mov dword [esp], 0x15513179
jmp 0xf45a7b
neg ebx
push ebp
push 0x7dfdf99a
pop ebp
sub ebx, ebp
pop ebp
push esi
mov esi, 0x5d7544aa
and ebx, esi
pop esi
shl ebx, 4
xor ebx, 0x9330b3b4
sub ebx, 0x49db423d
add ebx, edi
add ebx, 0x49db423d
mov edi, dword [esp]
jmp 0xf45a0d
add ebx, 4
add ebx, 4
xchg dword [esp], ebx
pop esp
jmp 0xf45a5f
push edx
push 0x7fffae82
pop edx
shr edx, 8
sub esp, 4
mov dword [esp], ebp
mov ebp, 0x4c274605
inc ebp
sub ebp, 0xf0683f55
sub edx, ebp
pop ebp
inc edx
push edi
mov edi, 0x7d8f98b6
jmp 0xf45aa3
push 0x239b5068
mov dword [esp], ecx
mov ecx, esp
add ecx, 4
push ecx
mov dword [esp], ebp
jmp 0xf45a59
push 0x27e014c3
mov dword [esp], ebx
sub esp, 4
mov dword [esp], edi
mov edi, 0x7ccf4f60
push edx
push 0x4faf0ce9
pop edx
push edi
mov edi, 0x3fdf8f4e
not edi
push edx
mov edx, 0xbeee354
sub edi, edx
pop edx
jmp 0xf45a64
push edx
jmp 0xf45936
jmp 0xf45ac1
dec edi
add edi, 0xaa4d9de1
or edx, edi
pop edi
add edx, 0xafec3ad3
mov ebx, edx
jmp 0xf4590b
mov dword [esp], eax
push esp
pop eax
add eax, 4
sub esp, 4
mov dword [esp], edi
mov edi, 4
jmp 0xf45a98
add eax, edi
pop edi
push esi
mov esi, esp
jmp 0xf459e2
xor edx, edi
pop edi
push edx
mov edx, esp
add edx, 4
sub edx, 4
xchg dword [esp], edx
pop esp
mov dword [esp], edx
jmp 0xf45921
push 0x4f5f7f35
mov dword [esp], esi
jmp 0xf45c95
add esp, 4
push edi
mov edi, esp
add edi, 4
jmp 0xf45ae2
add edi, 4
xchg dword [esp], edi
pop esp
jmp 0xf45b7e
sub dword [esp + 4], 0x3ff3e988
add dword [esp + 4], eax
push edx
mov edx, 0x3ff3e988
add dword [esp + 8], edx
pop edx
mov eax, dword [esp]
add esp, 4
sub esp, 4
mov dword [esp], ecx
push eax
jmp 0xf45cc2
mov ecx, 0x76a7e8f2
mov ebp, 0xe5245a11
add ebp, ecx
pop ecx
not ebp
shl ebp, 4
push eax
mov eax, 0x7eefa8bc
shl eax, 5
shr eax, 8
not eax
neg eax
push eax
not dword [esp]
mov eax, dword [esp]
jmp 0xf45c3f
shr ecx, 5
add ecx, 0x695766d8
sub dword [esp + 8], ecx
mov ecx, dword [esp]
add esp, 4
mov esi, dword [esp]
add esp, 4
jmp 0xf45cd1
pop ecx
xchg dword [esp], ebx
pop esp
push eax
mov eax, 4
add edi, eax
jmp 0xf45c01
add esp, 4
push ebx
push eax
mov eax, 0x777b34df
add dword [esp + 4], eax
pop eax
push dword [esp]
mov ebx, dword [esp]
add esp, 4
push edi
mov edi, esp
push ebp
mov dword [esp], eax
mov dword [esp], ecx
push ebp
mov ebp, 0x4db72f00
add ebp, 0x2dc30673
mov ecx, ebp
pop ebp
and ecx, 0x67f16276
sub ecx, 0x6370206e
add edi, ecx
mov ecx, dword [esp]
push ebx
mov ebx, esp
add ebx, 4
push ecx
mov ecx, 0x3fff4e09
xor ecx, 0x7f3b718a
shl ecx, 8
add ecx, 0x733741ae
sub ecx, 0x3776c4aa
add ebx, ecx
jmp 0xf45b6c
add esp, 4
or edx, 0x75dfcda5
dec edx
inc edx
or edx, 0x7effdf79
jmp 0xf45cf5
push dword [esp]
mov eax, dword [esp]
add esp, 4
add esp, 4
push edi
push dword [esp + 4]
mov edi, dword [esp]
add esp, 4
pop dword [esp]
mov esp, dword [esp]
jmp 0xf45ca7
push edx
push eax
mov eax, 0x1ff23f89
mov edx, 0x96549810
sub edx, eax
jmp 0xf45c8d
add esp, 4
sub eax, 0x806752a6
add ebp, eax
pop eax
shl ebp, 8
shr ebp, 8
jmp 0xf45c2c
push ebx
mov ebx, esp
add ebx, 4
add ebx, 4
xor ebx, dword [esp]
xor dword [esp], ebx
jmp 0xf45d25
add esp, 4
sub dword [esp + 4], ecx
mov ecx, dword [esp]
add esp, 4
mov dword [esp], eax
push dword [esp]
push dword [esp]
mov eax, dword [esp]
jmp 0xf45ace
mov eax, dword [esp]
jmp 0xf45beb
mov dword [esp], 0x6da7708e
push eax
mov eax, 0x7fef35a3
jmp 0xf45aee
sub ebx, 0x777b34df
push 0x6991642
mov dword [esp], ebp
push eax
mov dword [esp], 0x6d119858
jmp 0xf45ce1
mov eax, 0x7f3f5680
add eax, 0x7f45a8b3
jmp 0xf45d70
pop edx
push ebp
sub esp, 4
mov dword [esp], ecx
jmp 0xf45b1a
mov dword [esp], ecx
push dword [esp]
push dword [esp]
pop ebp
push ecx
mov dword [esp], ebp
push esp
jmp 0xf45d82
or edx, 0x6fff2392
add edx, 0xef094b53
jmp 0xf45d06
xor ebp, edx
pop edx
add edx, 0x176197d3
add edx, ebp
sub edx, 0x176197d3
mov ebp, dword [esp]
add esp, 4
jmp 0xf45d9a
xor ebx, dword [esp]
mov esp, dword [esp]
push ebp
push dword [esp]
pop ecx
add esp, 4
mov ebp, dword [esp]
add esp, 4
push edx
push esi
mov esi, 0x6fffc353
add dword [esp + 4], 0x6aeecb18
sub dword [esp + 4], 0x7bf945ab
sub dword [esp + 4], esi
add dword [esp + 4], 0x7bf945ab
push ecx
mov ecx, 0x32fc8d20
and ecx, 0x37efca13
jmp 0xf45b48
shl eax, 3
add eax, 0xc75fca08
mov ecx, eax
mov eax, dword [esp]
jmp 0xf45c6f
pop ebp
add ebp, 4
add ebp, 4
xchg dword [esp], ebp
mov esp, dword [esp]
jmp 0xf45c58
jmp 0xf4617a
sub esp, 4
mov dword [esp], eax
push dword [esp]
pop eax
push ebp
mov ebp, esp
push eax
push edx
jmp 0xf462c9
push ebx
mov ebx, 0x1e34f7ee
inc ebx
add ebx, 1
xor ebx, 0x66cbe8c2
sub ebx, 0xffffffff
and ebx, 0x7e33af27
xor ebx, 0x6c40580
or edx, ebx
jmp 0xf4623e
push dword [esp + 4]
pop ebx
pop dword [esp]
pop esp
push edx
jmp 0xf461cc
mov dword [esp], eax
jmp 0xf461d4
push ebx
mov ebx, 0x3dfb8c65
mov eax, 0x3dfb8c69
jmp 0xf46203
add edx, 4
push esi
mov esi, 0x2ee770b2
not esi
push ebp
jmp 0xf46295
dec dword [esp]
pop edx
neg edx
jmp 0xf46191
sub eax, 0x3bf6ba70
sub eax, ebx
add eax, 0x3bf6ba70
push dword [esp]
pop ebx
add esp, 4
add ebp, eax
pop eax
xchg dword [esp], ebp
mov esp, dword [esp]
push ecx
mov dword [esp], ebx
sub esp, 4
mov dword [esp], esi
mov esi, 0x5bea3f59
add dword [esp + 4], esi
pop esi
push dword [esp]
jmp 0xf46289
pop ebx
and edx, 0x67735fc0
jmp 0xf4624a
add edx, 0xf576f399
sub ebx, edx
mov edx, dword [esp]
add esp, 4
jmp 0xf462e4
pop edx
add eax, 0x2f9e1dbd
add eax, 0xb37414f4
add ebp, eax
push dword [esp]
pop eax
push edi
mov dword [esp], ebx
mov ebx, esp
add ebx, 4
add ebx, 4
push ebx
jmp 0xf461bd
pop ebx
add esp, 4
push edx
mov edx, esp
jmp 0xf461e4
mov ebp, 0x7751c999
sub ebp, 0xa6393a50
sub esi, ebp
pop ebp
sub edx, esi
pop esi
xchg dword [esp], edx
pop esp
mov dword [esp], edx
sub esp, 4
mov dword [esp], eax
mov eax, 0x33bf1422
mov edx, eax
mov eax, dword [esp]
add esp, 4
push edx
jmp 0xf461f8
mov edx, 0x4fb29b64
mov eax, 0x6ca068b7
sub eax, 0x6dffcec6
sub eax, edx
add eax, 0x6dffcec6
jmp 0xf46260
call 0xf462e9
push dword [esp]
pop eax
push ebp
mov ebp, esp
jmp 0xf46320
xor ebx, 0x38ed27fa
neg ebx
add ebx, 0x3b69afb4
add ebx, 0x527da71e
sub eax, 0x55489329
jmp 0xf46341
push 0x56178661
mov dword [esp], esi
jmp 0xf4641f
sub esp, 4
mov dword [esp], edx
mov edx, 0x533f7b57
xor edx, 0x7f6d9bc8
xchg edx, edi
not edi
xor edx, edi
xor edi, edx
jmp 0xf463c6
sub eax, ebx
add eax, 0x55489329
pop ebx
push ecx
mov ecx, 0x7deeda51
sub eax, ecx
mov ecx, dword [esp]
jmp 0xf46359
push eax
push esp
pop eax
add eax, 4
add eax, 4
xchg dword [esp], eax
pop esp
jmp 0xf463b0
sub ebp, 0x3b9ecf34
dec ebp
sub esp, 4
mov dword [esp], eax
mov eax, 0x7b3d30f4
sub eax, 0x76dc9eaf
sub ebp, eax
pop eax
add eax, 0x7deeda51
push ecx
mov ecx, 0x6d9aede2
push ecx
not dword [esp]
pop ecx
add ecx, 0x7ec75e1e
add ecx, 0x275f3d31
xor ecx, 0x7f40aaf8
add eax, ecx
jmp 0xf463b6
pop ebp
jmp 0xf464a7
pop ecx
sub eax, 0x77f7aab2
sub eax, 0x21ffea52
jmp 0xf463ef
xor edx, edi
push ecx
mov ecx, 0
jmp 0xf463d3
add ecx, 0x13f7b334
sub ecx, edx
sub ecx, 0x13f7b334
mov edx, ecx
pop ecx
sub edx, 0x2c52e09c
jmp 0xf46313
sub eax, ebp
push edi
mov edi, 0x21ffea52
add eax, edi
pop edi
jmp 0xf4645e
add ebp, edx
sub ebp, 0x4fefd2b1
sub ebp, 0x747f593a
push dword [esp]
pop edx
add esp, 4
jmp 0xf4649a
inc esi
jmp 0xf4646e
mov esi, 0x747f593a
add ebp, esi
pop esi
push esi
mov esi, 0x3fb7b228
jmp 0xf46419
pop ebp
add esp, 4
jmp 0xf4636d
pop ecx
xor ebp, dword [esp]
xor dword [esp], ebp
xor ebp, dword [esp]
mov esp, dword [esp]
sub esp, 4
mov dword [esp], ebp
push 0x3fff6444
push dword [esp]
jmp 0xf46432
add eax, 0x77f7aab2
push ebx
mov ebx, 0x7ef168c4
jmp 0xf462f5
sub esi, 0x7daf1d51
push eax
mov eax, 0x3ff78ce1
jmp 0xf4647f
xor esi, eax
pop eax
jmp 0xf46487
add esi, 0x51f0ba78
add ebp, esi
jmp 0xf46494
pop esi
jmp 0xf463ff
push ecx
mov ecx, 4
add ebp, ecx
jmp 0xf4643e
push 0x516ca46c
mov dword [esp], eax
push eax
mov eax, 0x7efdb3b7
add dword [esp + 4], eax
jmp 0xf465bf
mov dword [esp], esp
add dword [esp], 4
push dword [esp]
jmp 0xf4663f
pop esi
jmp 0xf464e2
push edx
mov edx, 0x7f9f1155
push ebp
jmp 0xf46541
push esi
push eax
mov dword [esp], 0x6e3dafbd
jmp 0xf4656a
mov eax, esp
add eax, 4
add eax, 4
xchg dword [esp], eax
pop esp
jmp 0xf465a0
xor ebx, dword [esp]
pop esp
mov dword [esp], ecx
mov dword [esp], eax
jmp 0xf466f3
pop ebx
add edx, 0x4bc0fefe
add ecx, 0x1c3921f8
sub ecx, edx
jmp 0xf4662e
push ebx
mov ebx, 0xb3dfde87
xor ecx, ebx
pop ebx
push ecx
mov esi, dword [esp]
add esp, 4
mov ecx, dword [esp]
add esp, 4
jmp 0xf4669b
push eax
mov eax, 0x2f15e841
mov ebp, 0x99e9f2c3
jmp 0xf46601
pop edx
mov edx, ecx
push dword [esp]
push dword [esp]
pop ecx
add esp, 4
jmp 0xf4665f
and edx, ebx
jmp 0xf46512
mov dword [esp], ecx
push dword [esp]
pop esi
push eax
sub esp, 4
jmp 0xf464be
inc esi
shl esi, 8
push ebp
mov ebp, 0x17c9e112
xor esi, ebp
pop ebp
shr esi, 8
sub esi, 0x811e8799
sub eax, esi
push dword [esp]
mov esi, dword [esp]
jmp 0xf466c8
push 0x3f297
mov dword [esp], ecx
push edx
jmp 0xf46725
mov ecx, 0x7ffb530b
not ecx
push ecx
inc dword [esp]
pop ecx
jmp 0xf46526
pop eax
mov eax, dword [esp]
add esp, 4
push esi
sub esp, 4
mov dword [esp], ecx
jmp 0xf465ae
sub dword [esp + 4], 0x5ffd5f81
add dword [esp + 4], eax
add dword [esp + 4], 0x5ffd5f81
jmp 0xf46714
sub ebp, eax
pop eax
add ebx, ebp
pop ebp
sub ebx, 0x6fabe179
sub ebx, esi
jmp 0xf46672
sub ebp, eax
pop eax
dec ebp
add ebp, 1
neg ebp
neg ebp
neg ebp
add ebp, 0xe2b3ec30
and edx, ebp
pop ebp
add edx, 0x3bcf67c1
push ebx
mov ebx, 0x7f76310f
xor ebx, 0x8a9733
jmp 0xf46563
sub ecx, 0x1c3921f8
jmp 0xf46551
pop ecx
jmp 0xf464d6
pop eax
push ecx
mov ecx, esp
add ecx, 4
add ecx, 4
xchg dword [esp], ecx
jmp 0xf46667
mov dword [esp], ecx
jmp 0xf466fd
add esp, 4
jmp 0xf467b2
pop esp
add eax, 4
jmp 0xf46683
add ebx, 0x6fabe179
push eax
mov eax, 0x7e778f92
jmp 0xf467a3
push ebp
mov ebp, 4
add eax, ebp
pop ebp
xchg dword [esp], eax
pop esp
sub esp, 4
jmp 0xf46657
push edx
mov edx, 0x7fcf7fc2
jmp 0xf466a6
sub esi, 0x2fd35d42
sub esi, edx
add esi, 0x2fd35d42
mov edx, dword [esp]
add esp, 4
jmp 0xf4657d
not ebx
dec ebx
dec ebx
jmp 0xf46738
add esp, 4
add esp, 4
push 0x4dbfdd5c
mov dword [esp], ebx
push ebx
mov ebx, esp
push esi
mov esi, 4
add ebx, esi
pop esi
sub ebx, 4
xor ebx, dword [esp]
xor dword [esp], ebx
jmp 0xf46503
mov eax, 0x7ffd5a4c
jmp 0xf465d5
mov dword [esp], 0x75e7e425
mov dword [esp], ebp
mov dword [esp], esi
pop ecx
mov esi, dword [esp]
push eax
jmp 0xf464f0
push dword [esp]
pop eax
add esp, 4
pop ebx
push esi
jmp 0xf46751
push 0x2e22f1c2
mov dword [esp], ebp
push ebx
mov ebx, 0x5ffff3c9
jmp 0xf466bf
neg ebx
push ecx
mov ecx, 0x2e778ebb
add ecx, 0xf0b59c7b
add ebx, ecx
pop ecx
mov ebp, ebx
pop ebx
jmp 0xf46788
mov esi, 0x7ffd5a4c
push ebp
jmp 0xf4675c
mov ebp, 0xb7e19a3
xor ebp, 0x5f7586d4
sub ebp, 0x5f758961
push ecx
push 0x7fca5c17
pop ecx
add ebp, ecx
mov ecx, dword [esp]
add esp, 4
dec ebp
push eax
mov eax, 0xf5e8e29a
jmp 0xf465ee
sub dword [esp + 4], 0x7ebff4f4
add dword [esp + 4], ebp
push ebx
mov ebx, 0x7ebff4f4
add dword [esp + 8], ebx
jmp 0xf467ab
sub ebx, eax
pop eax
jmp 0xf464d0
pop ebx
pop ebp
jmp 0xf46639
jmp 0xf46bc5
push edi
jmp 0xf46bd8
mov edi, esp
add edi, 4
push eax
mov eax, 4
sub edi, eax
pop eax
xchg dword [esp], edi
pop esp
mov dword [esp], ecx
mov dword [esp], 0x727e9100
sub dword [esp], 1
jmp 0xf46c09