Function at 0x417b96
Capabilities:
Check for vm using instruction vpcext

Disassembly:
add byte [eax], al
add byte [eax], al
add byte [eax], al
add byte [eax], al
add byte [eax], al
add byte [eax], al
add byte [eax], al
add byte [eax], al
add byte [eax], al
add byte [eax], al
add byte [eax], al
add byte [eax], al
add byte [eax], al
add byte [eax], al
add byte [eax], al
add byte [eax], al
add byte [eax], al
add byte [eax], al
add byte [eax], al
add byte [eax], al
add byte [eax], al
add byte [eax], al
add byte [eax], al
add byte [eax], al
add byte [eax], al
add byte [eax], al
add byte [eax], al
add byte [eax], al
add byte [eax], al
add byte [eax], al
add byte [eax], al
add byte [eax], al
add byte [eax], al
add byte [eax], al
add byte [eax], al
add byte [eax], al
add byte [eax], al
add byte [eax], al
add byte [eax], al
add byte [eax], al
add byte [eax], al
add byte [eax], al
add byte [eax], al
add byte [eax], al
add byte [eax], al
add byte [eax], al
add byte [eax], al
add byte [eax], al
add byte [eax], al
add byte [eax], al
add byte [eax], al
add byte [eax], al
add byte [eax], al
add byte [esi + esi*4], bl
and byte [eax + ecx*2 + 0x49], dl
inc esp
cmp dh, byte [esi]
xor eax, 0x20303408
add byte [eax + 0x34], dh
xor dh, byte [edx]
inc esi
add byte [ecx], dh
xor esi, dword [edi]
xor dword [0x463541], ebp
inc esp
sub eax, 0x33384634
sub eax, 0x32460041
inc edx
sub eax, 0x38463932
add byte [edx], dh
inc esp
cmp byte [eax], dh
cmp byte [edi], dh
aaa
xor eax, 0x34313a00
xor ch, byte ss:[esi]
xor dword [eax], edi
add byte [edx], dh
xor al, 0x36
xor ebp, dword [esi]
xor dword [edx + esi], esp
xor eax, 0x34633234
cmp dword [ecx + 0x35], esp
add byte [ebp + 0x31], ah
popal
aaa
xor al, 0x63
arpl word [ebx], si
add byte [ecx], bh
xor dword [esi], esi
xor al, 0x37
aaa
xor al, byte fs:[eax]
cmp dword [ecx], edi
xor dword [ecx + 0x39], esp
popal
arpl word [eax + eax + 0x39], sp
aaa
xor al, 0x33
and byte ss:[eax], al
dec ebp
push ebx
inc edi
cmp ah, byte [ecx + 0x43]
jb 0x417cc4
add byte [eax + 0x53], bl
sub edx, dword [edx + 0x42]
imul ebp, dword ss:[esi], 0x34
jne 0x417d02
xor byte [ecx], dh
aaa
sub eax, 0x2d310030
xor dh, byte [ebx]
and byte [ecx], dh
cmp dword [edx], edi
add byte [edx], dh
xor al, 0x3a
xor byte [edi], dh
sub al, 0x37
xor al, byte [eax]
cmp dword [eax], esp
dec edi
push ebx
dec eax
dec ecx
and byte [eax + 0x21], dl
add byte [esi + 0x30323633], bh
or edx, eax
xor dword [ecx], esi
add byte [0x45423046], dh
sub eax, 0x30370039
xor byte [0x42433834], ch
add byte [0x46334138], ch
sub eax, 0x46334138
sub eax, 0x39003234
aaa
cmp dword [edi], esi
xor esi, dword [0x35144341]
xor eax, dword [eax + 0x67b53124]
inc edx
ja 0x417d96
add byte [edx], dh
dec esi
inc edi
xor dh, byte [ebx + eax*2 + 0x36]
dec esi
add byte [ebp + 0x39], dl
push edi
inc ecx
jns 0x417d83
ja 0x417d9d
add byte [ebp + esi + 0x2f], ah
inc ebp
js 0x417da6
pop edx
sub eax, dword [eax]
insd dword es:[edi], dx
dec esp
imul ecx, dword [edx + 0x54], 0x79
pop ecx
inc edi
adc dl, byte [eax - 0x59]
xor esi, dword gs:[edi]
mov esi, 0x30313365
add dword [ecx + 0x356655cd], edi
dec eax
xor eax, 0x76005867
cmp dword ss:[edi], ebp
inc esp
jo 0x417dd8
add byte [esi + 0x57], ah
aaa
push edx
push 0x37006872
pop eax
xor esi, dword [edi]
jno 0x417de9
push ebx
add byte [si + 0x76], al
dec ebx
je 0x417dcf
pop ecx
insb byte es:[edi], dx
push ecx
sbb eax, ebp
xor al, 0x32
push dword [eax + edi*8]
xor al, 0x49
pop edx
jae 0x417d88
inc esp
sub edx, dword [ecx + 0x66]
dec ebx
jp 0x417dd1
add byte [ebx + 0x51], ah
jne 0x417dde
insd dword es:[edi], dx
push 0x41
inc ecx
add byte [ecx + 0x4f], ah
push 0x33
aaa
xor esi, dword [edi]
push 0x72005544
pop ecx
inc edx
inc ebp
dec edi
arpl word gs:[ecx], di
jbe 0x417dff
insd dword es:[edi], dx
jp 0x417dea
push ebp
insb byte es:[edi], dx
push eax
cmp byte [edx + 0x79], 0x53
pop ecx
dec ecx
xor byte [eax], dh
jmp 0xff7583f7
je 0x417e4a
push edi
add byte [edx + 0x69], bl
dec ecx
xor byte [ecx], bh
dec ebx
push edi
add byte [eax], dh
dec ebx
dec ebx
xor dh, byte [ecx]
jbe 0x417e48
ja 0x417de5
xor al, 0x66
ja 0x417e61
arpl word [edx + 0x74], bp
push 0x74
insd dword es:[edi], dx
add byte [eax], dh
jno 0x417e27
ja 0x417e63
xor dl, byte [ecx + 0x41]
add byte [eax + 0x34], bh
jno 0x417e48
inc edx
jo 0x417e51
add byte [ecx + 0x4c], cl
insd dword es:[edi], dx
dec esi
imul ecx, dword [ebp + 0x31], 0x32
add byte [ebp + 0x61], dh
bound eax, qword [edi + 0x49]
inc esp
xor ch, byte [ecx]
bound esi, qword [esi]
arpl word [edx + 0x78], sp
xor ch, byte fs:[ebx]
insd dword es:[edi], dx
jne 0x417e53
cmp dword [edx], esi
jno 0x417e96
bound eax, qword [eax]
push esp
push edi
jns 0x417e8d
js 0x417e96
js 0x417e96
jb 0x417e61
add byte [0x774a4e54], dh
push 0x4e
inc esp
add byte [eax + 0x41], ch
inc edi
outsb dx, byte [esi]
arpl word [esi + 0x56], si
push esp
add byte [eax + 0x2f], ch
inc ebx
push 0x4d523573
add byte [edi + 0x64], ch
outsd dx, dword [esi]
dec ecx
dec ecx
bound ebx, qword [ecx + 0x37]
sub sp, word [eax + 0x35]
xor eax, 0x49674964
dec ecx
dec ecx
dec ecx
jg 0x417e7d
out 0x74, al
xor eax, 0x257f331e
cld
je 0x417ee1
jg 0x417ebe
pop ebx
test byte [esi + 0x535542], 0x6b
popal
insd dword es:[edi], dx
push esp
xor word [eax + eax + 0x77], bp
aaa
push 0x7768674f
push ebp
add byte [eax + 0x65], ch
jp 0x417eb7
jb 0x417ed3
cmp byte [edx], ah
arpl word [ebx + 0x62], dx
push ebx
insd dword es:[edi], dx
xor dword [ecx], esi
push edx
add byte [ebx], dh
jne 0x417ef2
xor esi, dword [ebp + 0x62]
jae 0x417f08
je 0x417eea
lahf
jg 0x417eb2
jg 0x417eb4
sub byte [ecx - 0x709f7081], 0x33
xor dword [eax - 0x5680fc58], eax
jno 0x417e52
inc esp
imul edi, dword [eax + 0x58], 0x75
push 0
insb byte es:[edi], dx
sub esi, dword [edx]
jb 0x417ee9
xor dh, byte [edx + 0x34]
xor al, 0x50
push eax
jb 0x417f1e
add byte [esi + 0x51], ah
add byte [esi + 0x51], ah
outsd dx, dword [esi]
dec edx
outsd dx, dword [esi]
outsb dx, byte [esi]
popal
inc ecx
add byte [edx + 0x42], ah
bound eax, qword [edx + 0x6d]
outsd dx, dword [esi]
push edx
popal
je 0x417f2b
sal byte [edi + 0x79], 0x59
dec edi
inc ebx
invalid
mov eax, dword [0x455600a9]
push edx
push ebx
add byte [esi + 0x38], al
inc ebp
cmp dword [ebp + 0x38], eax
xor byte [0x38343900], ch
inc esi
add byte [ecx], bh
xor al, 0x38