Function at 0x10a3be0
Capabilities:
Check for vm using instruction vpcext
Contain obfuscated stackstrings
Reference the vmware io port

Disassembly:
pop eax
add eax, 0xe
mov dword [eax], ecx
jmp 0x109a801
jmp 0x109dfd6
jmp 0x109f0db
push edi
push esp
mov edi, dword [esp]
jmp 0x109fe61
push dword [esp]
pop ebx
add esp, 4
xor esi, dword [esp]
xor dword [esp], esi
xor esi, dword [esp]
mov esp, dword [esp]
cmp dword [ebp + 0x122d39b8], 0
jne 0x109f1cc
cmp dword [ebp + 0x122d3a34], 0
je 0x109f1e1
push eax
mov eax, eax
mov eax, 0x43d
mov dword [ebp + 0x122d26b8], eax
call dword [ebp + 0x122d26bd]
pop eax
push edx
mov dword [esp], ecx
mov dword [esp], eax
push dword [esp]
mov eax, dword [esp]
add esp, 4
sub esp, 4
mov dword [esp], ebp
mov ebp, esp
push edi
jmp 0x10a343d
add ecx, 0x37fdb2fa
sub ecx, edi
sub ecx, 0x37fdb2fa
mov edi, dword [esp]
add esp, 4
jmp 0x109f451
mov esp, dword [esp]
mov dword [esp], ebx
push edi
mov dword [esp], esp
jmp 0x109ffea
inc ecx
xor ecx, 0x5f676234
xchg ecx, ebx
jmp 0x10a1c89
push ebp
jmp 0x10a112e
pop esp
push edx
push ebx
mov ebx, 0x7b37ceba
shl ebx, 2
jmp 0x10a1780
mov dword [esp], ebp
jmp 0x10a3bcc
push ebx
mov ebx, esp
jmp 0x10a062e
push dword [esp]
jmp 0x10a0b96
add esi, eax
jmp 0x10a2ec6
mov eax, dword [esp]
push esi
push esp
mov esi, dword [esp]
jmp 0x10a06fc
xor edx, 0x3bb14740
and edx, 0x1aef0757
jmp 0x10a136c
xor dword [esp], ebp
xor ebp, dword [esp]
pop esp
jmp 0x10a0a9b
xchg dword [esp], ecx
pop esp
pop eax
mov dword [ebp + 0x1244791b], eax
mov dword [ebp + 0x122d26b2], 0
push eax
jmp 0x109f982
pop ecx
push ecx
mov ecx, 0x7fffa068
jmp 0x109ff45
push ebx
mov ebx, 0x73fea245
xor ebx, 0x2f69517e
jmp 0x10a22c7
add esp, 4
push 0x45bf1652
mov dword [esp], eax
push ecx
mov ecx, 0x3dd321a1
jmp 0x10a18d4
push ebx
jmp 0x10a11cc
push esp
pop ebp
add ebp, 4
sub ebp, 4
xor ebp, dword [esp]
xor dword [esp], ebp
xor ebp, dword [esp]
mov esp, dword [esp]
jmp 0x10a058f
add dword [esp], 4
pop dword [esp]
push edx
mov edx, 4
add dword [esp + 4], edx
jmp 0x10a2599
add eax, esi
pop esi
jmp 0x10a043d
pop esp
jmp 0x10a0168
add edx, 0xf22454f1
jmp 0x10a3552
pop eax
sub edx, 0x779f1805
xor edx, 0xfa532fff
sub ebp, edx
pop edx
push ebp
jmp 0x10a1f95
pop eax
add esp, 4
add esp, 4
sub esp, 4
mov dword [esp], ebx
push esp
mov ebx, dword [esp]
add esp, 4
add ebx, 4
jmp 0x10a1087
pop eax
jmp 0x10a1cfb
mov dword [esp], eax
mov eax, dword [esp]
push 0x58e971eb
jmp 0x10a07cb
sub edi, 4
xor edi, dword [esp]
xor dword [esp], edi
xor edi, dword [esp]
jmp 0x109f2fa
pop ebx
xor eax, edx
push dword [esp]
mov edx, dword [esp]
push ebp
mov ebp, esp
push esi
mov esi, 4
add ebp, esi
jmp 0x10a0866
xchg dword [esp], eax
pop esp
jmp 0x10a0fd3
mov edi, 0x3fc961ab
jmp 0x10a385b
xor ebx, dword [esp]
xor dword [esp], ebx
xor ebx, dword [esp]
mov esp, dword [esp]
mov dword [esp], eax
jmp 0x10a0e41
mov dword [esp], edi
mov edi, 4
mov eax, edi
push dword [esp]
pop edi
jmp 0x10a405e
mov esi, dword [esp]
add esp, 4
jmp 0x10a2ebb
add ebx, 4
push eax
mov eax, 0x7bf72d3
add eax, 0xf8408d31
add ebx, eax
pop eax
jmp 0x10a1a66
add esp, 4
push ebp
mov ebp, 4
add esi, ebp
pop ebp
push ebx
sub esp, 4
mov dword [esp], esi
mov dword [esp], 0x7e764c2b
shl dword [esp], 1
shl dword [esp], 5
and dword [esp], 0x2d1fd672
add dword [esp], 0xf2ecfdc4
mov ebx, dword [esp]
add esp, 4
push ebx
mov ebx, 0x5f3fddd4
sub esi, ebx
pop ebx
sub esi, 0x7bf6af6a
add esi, ebx
add esi, 0x7bf6af6a
push eax
mov eax, 0x5f3fddd4
jmp 0x109f949
mov dword [esp], esi
jmp 0x10a0cc1
pop esi
add ebp, 4
xor ebp, dword [esp]
jmp 0x109fc34
add esp, 4
cmp dword [ebp + 0x122d39b8], 0
jne 0x10a0ab0
cmp dword [ebp + 0x122d3a34], 0
je 0x10a0abf
push eax
mov eax, eax
mov eax, 0
call dword [ebp + 0x122d23c9]
pop eax
push ebp
mov dword [esp], ecx
mov ecx, esp
add ecx, 4
sub ecx, 4
xchg dword [esp], ecx
jmp 0x10a34af
push 0x2d0735d2
mov dword [esp], esi
push edi
mov dword [esp], ebp
push 0x1f9ef521
pop ebp
jmp 0x10a0c58
pop ebp
add esp, 4
mov eax, dword [esp]
sub esp, 4
mov dword [esp], ecx
mov ecx, esp
add ecx, 4
add ecx, 4
jmp 0x10a0e49
xor dword [esp + 4], ebp
jmp 0x109f8fc
push ebp
mov dword [esp], 0x16ff28a2
push esp
pop dword [esp]
add dword [esp], 4
push dword [esp]
jmp 0x10a2982
push dword [esp]
jmp 0x10a2548
xchg dword [esp], ecx
mov esp, dword [esp]
jmp 0x109f45f
mov edx, esp
add edx, 4
sub edx, 4
xchg dword [esp], edx
mov esp, dword [esp]
mov dword [esp], ebx
push dword [esp + 4]
pop ebx
pop dword [esp]
mov esp, dword [esp]
sub esp, 4
mov dword [esp], edi
mov edi, esp
jmp 0x10a241f
pop edi
sub eax, 0x5ee474ee
jmp 0x10a2f50
xchg dword [esp], ecx
mov esp, dword [esp]
push eax
mov eax, 4
add esi, eax
pop eax
jmp 0x10a281b
xor edi, 0x6a5ee48f
and edi, 0x2f8fae0a
add edi, 0xf5f15804
add ebx, edi
pop edi
sub ebx, 4
jmp 0x10a0563
push edi
mov edi, 4
add ebx, edi
pop edi
push eax
mov dword [esp], edx
jmp 0x10a0f3c
mov ebx, 4
add dword [esp + 4], ebx
pop ebx
mov esi, dword [esp]
add esp, 4
add esi, 4
sub esi, 4
push esi
push dword [esp + 4]
pop esi
pop dword [esp]
mov esp, dword [esp]
mov dword [esp], eax
push dword [esp]
pop eax
jmp 0x10a3805
push ebx
mov ebx, 0x35f7c14a
mov ebp, ebx
jmp 0x10a15a8
mov ebx, 0x7cff7694
and ecx, ebx
pop ebx
sub ecx, 1
sub ecx, 1
jmp 0x10a1f43
push 0x1faacf78
mov dword [esp], ebx
jmp 0x10a243e
add edi, 0x7c8f6a45
shr edi, 7
sub edi, 0x99ba1b7a
jmp 0x109f25d
pop ebx
or ebp, 0x69c3ba0a
neg ebp
add ebp, 1
add ebp, 0x9d96f06a
xor eax, ebp
jmp 0x10a1a9c
push edi
mov edi, 0x7e91ee31
shr edi, 6
jmp 0x10a1896
push edx
jmp 0x10a27e7
or edi, 0x2f756e11
jmp 0x10a3091
shr ecx, 3
shl ecx, 1
jmp 0x10a24f7
xchg dword [esp], ebx
pop esp
jmp 0x10a0351
pop ebp
pop esi
cmp dword [ebp + 0x122d39b8], 0
jne 0x10a1ab0
cmp dword [ebp + 0x122d3a34], 0
je 0x10a1abf
push eax
mov eax, eax
mov eax, 0
call dword [ebp + 0x122d2788]
pop eax
cmp dword [ebp + 0x122d3a34], 0
je 0x10a1ad5
push eax
mov eax, 0
call dword [ebp + 0x122d2130]
pop eax
push edx
jmp 0x10a0341
add ebp, esi
add ebp, 0x7ff5cdf9
pop esi
add ebp, 4
xor ebp, dword [esp]
xor dword [esp], ebp
xor ebp, dword [esp]
pop esp
cmp dword [ebp + 0x122d39b8], 0
jne 0x10a1c68
cmp dword [ebp + 0x122d3a34], 0
je 0x10a1c79
push eax
push ebx
mov eax, eax
mov eax, 0
call dword [ebp + 0x124461f8]
pop ebx
pop eax
push ecx
mov dword [esp], 0xb5b85af
mov dword [esp], eax
jmp 0x10a440d
not ebx
xor ecx, ebx
xor ebx, ecx
jmp 0x10a23f5
add ecx, 0x7d6a2fb6
jmp 0x10a2742
push dword [esp + 4]
pop ebp
pop dword [esp]
mov esp, dword [esp]
jmp 0x109f8a1
push 0x482399d8
mov dword [esp], ebx
mov ecx, dword [esp]
jmp 0x10a29a1
shl esi, 2
sub esi, 0x22fee076
sub esi, 0x7f462260
jmp 0x10a1874
xor ecx, ebx
jmp 0x10a2587
add edi, 4
sub edi, 4
xchg dword [esp], edi
jmp 0x10a2e06
mov ebx, 0x24e6c8e4
xor edx, ebx
jmp 0x10a03b9
not ecx
shl ecx, 1
jmp 0x10a35fd
mov eax, dword [esp]
add esp, 4
add esp, 4
jmp 0x10a459d
sub ecx, 0x3e9274d8
jmp 0x10a2cda
mov edx, dword [esp]
push ecx
mov ecx, esp
add ecx, 4
push edx
mov edx, 4
add ecx, edx
jmp 0x10a3763
mov edi, dword [esp]
push eax
mov eax, esp
add eax, 4
push esi
jmp 0x10a3081
mov eax, dword [esp]
push edi
push esp
jmp 0x10a2900
pop ecx
add edi, eax
mov eax, dword [esp]
jmp 0x109f8f4
xor ecx, 0xfa694fb0
sub eax, ecx
mov ecx, dword [esp]
add esp, 4
xchg dword [esp], eax
mov esp, dword [esp]
mov dword [esp], eax
mov eax, dword [esp]
add esp, 4
cmp dword [ebp + 0x122d39b8], 0
jne 0x10a2777
cmp dword [ebp + 0x122d3a34], 0
je 0x10a2786
push eax
mov eax, eax
mov eax, 0
call dword [ebp + 0x122d227c]
pop eax
push edi
mov dword [esp], eax
sub dword [esp], 0x4dff8ee2
jmp 0x10a2645
mov edx, 0x29de8d62
xor esi, edx
pop edx
sub ebp, 0x7ff5cdf9
jmp 0x10a1c3d
add esi, 4
xchg dword [esp], esi
pop esp
push 0x6151dd37
mov dword [esp], ebp
mov ebp, esp
add ebp, 4
sub esp, 4
jmp 0x10a2991
pop edi
add edi, 4
add edi, 4
xchg dword [esp], edi
jmp 0x109f891
pop esi
push ecx
mov ecx, esp
push esi
mov esi, 4
jmp 0x10a2c81
mov dword [esp], edx
jmp 0x10a3382
add esp, 4
pop ebx
shr ecx, 4
push edi
jmp 0x10a0446
pop eax
add ebp, 4
xor ebp, dword [esp]
jmp 0x10a41a7
push ecx
jmp 0x109fe2e
sub ecx, 0x77ff21d3
jmp 0x10a2c94
add ecx, esi
add ecx, 0x77ff21d3
pop esi
push edi
mov edi, 4
add ecx, edi
jmp 0x10a25b9
add eax, ecx
jmp 0x109fd0f
pop esp
mov dword [esp], eax
jmp 0x10a2ecc
add esp, 4
jmp 0x10a0b16
pop eax
jmp 0x109f1a4
push eax
mov dword [esp], 0x7517ef3e
mov dword [esp], ebp
jmp 0x10a32d6
add eax, edx
push ebx
mov ebx, 0x7bdd01d9
neg ebx
shr ebx, 3
add ebx, 0x4e60152a
add eax, ebx
pop ebx
add eax, 0x6768a68e
mov edx, dword [esp]
jmp 0x10a37f2
mov esi, 0x7f6fd246
sub esi, 0x7f6fd242
jmp 0x10a000b
add edi, 0x3efc8f50
add ebx, edi
jmp 0x10a3ed3
mov ebp, 0x3e47ceb6
xor dword [esp + 4], ebp
mov ebp, dword [esp]
add esp, 4
mov eax, dword [esp]
add esp, 4
push edx
mov edx, 0x7f7e8ae4
push eax
mov eax, 0x54afabf6
inc eax
xor eax, 0x7fb76500
inc eax
shr eax, 6
add eax, 0x6f02c393
or edx, eax
pop eax
push 0
sub dword [esp], edx
pop edx
jmp 0x109fb75
push eax
mov eax, 0x71f24800
push ecx
mov ecx, eax
mov edx, ecx
pop ecx
jmp 0x10a01bd
mov dword [esp], eax
push ebp
jmp 0x109ffae
pop esp
jmp 0x10a3af7
push edi
mov edi, 0x6768a68e
sub eax, edi
jmp 0x10a0fb0
xor ecx, 0xe1166f2a
mov eax, ecx
jmp 0x10a2677
add eax, edi
pop edi
sub eax, 4
push eax
push dword [esp + 4]
jmp 0x10a02ad
pop edx
jmp 0x109fc9a
add esp, 4
push esi
sub esp, 4
mov dword [esp], esp
push ebx
jmp 0x10a10f7
push eax
mov eax, esp
push edi
mov edi, 4
jmp 0x10a3674
dec edi
jmp 0x10a13f5
mov dword [esp], ebx
push ebx
mov dword [esp], 0x3c58413a
mov dword [esp], ebp
mov dword [esp], esp
push eax
mov eax, 4
add dword [esp + 4], eax
mov eax, dword [esp]
add esp, 4
mov ebx, dword [esp]
push edi
mov edi, esp
add edi, 4
add edi, 4
xchg dword [esp], edi
pop esp
push edi
mov edi, 0x3ffd985d
or edi, 0x40e37a61
and edi, 0x1fbfa273
jmp 0x10a3ecc
push 0x61f8b4fa
mov dword [esp], eax
mov ebp, dword [esp]
add esp, 4
mov eax, ebp
push dword [esp]
pop ebp
push ebp
mov ebp, esp
push esi
jmp 0x10a3bf8
mov esi, 0x7b18ec3d
add esi, 0x37eff7d2
jmp 0x10a22d7
not edi
jmp 0x10a106a
pop edi
push ebx
sub dword [esp], 0x7fce1d63
jmp 0x10a3f8a
pop edx
add edx, 0x7fce1d63
push dword [esp]
pop ebx
push eax
mov eax, esp
push ecx
mov ecx, 0x37ff068d
push 0
sub dword [esp], ecx
pop ecx
neg ecx
shl ecx, 2
and ecx, 0x7fa2e16a
sub ecx, 0x6f7f8db4
add ecx, 0xfdf8d98
add eax, ecx
pop ecx
add eax, 4
xchg dword [esp], eax
jmp 0x10a00f9
add esp, 4
add ebp, eax
jmp 0x10a2b87
xor dword [esp], ebp
xor ebp, dword [esp]
mov esp, dword [esp]
push ebp
mov dword [esp], esi
jmp 0x10a4350
push eax
push dword [esp]
jmp 0x10a05a8
push dword [esp]
push dword [esp]
push dword [esp]
jmp 0x10a0203
push eax
mov eax, esp
jmp 0x10a2c6c