Function at 0x12295b4
Capabilities:
Contain obfuscated stackstrings
Reference the vmware io port

Disassembly:
push dword [esp]
mov eax, dword [esp]
push eax
mov dword [esp], edx
push esp
pop edx
push ecx
mov ecx, 0x5a5ff74a
sub ecx, 0x366f1286
add ecx, 0x3ccbe3bf
shl ecx, 1
and ecx, 0x7ec15530
not ecx
sub esp, 4
mov dword [esp], edx
mov edx, 0x40411105
add ecx, edx
jmp 0x1228c52
mov edx, 0x5d7dc497
jmp 0x1228db0
pop esp
push edx
push esp
pop edx
push eax
mov eax, 0xf77ca03
sub eax, 0xf77c9ff
add edx, eax
mov eax, dword [esp]
add esp, 4
jmp 0x1228cb7
pop edx
add edx, ecx
push dword [esp]
pop ecx
add esp, 4
add edx, 4
jmp 0x1228c82
mov ecx, dword [esp]
push eax
mov eax, esp
jmp 0x1228c6f
add eax, 4
add eax, 4
xchg dword [esp], eax
pop esp
jmp 0x1228c9a
xchg dword [esp], edx
jmp 0x1228c36
shr ecx, 5
push esi
mov esi, 0x5ffc93d1
not esi
jmp 0x1228ca5
jmp 0x1228dde
dec eax
jmp 0x1228cd7
xor esi, 0x3fe59c94
jmp 0x1228cee
mov ebp, esp
jmp 0x1228d75
push eax
mov eax, 0x747d5695
sub eax, 0x6ffddd72
sub eax, 0x7afc1c8d
jmp 0x1228d08
xor ecx, 0x6ff647f
jmp 0x1228d0e
shr eax, 6
jmp 0x1228d39
sub esi, 0xf099978e
add ecx, esi
pop esi
dec ecx
jmp 0x1228d96
push eax
mov eax, 0x57b7276f
xor eax, 0x779ff267
jmp 0x1228cfe
shl eax, 7
inc eax
dec eax
jmp 0x1228d56
dec eax
jmp 0x1228c9f
sub ecx, 0x7d9f16c5
sub ecx, 0x7d85fd5f
jmp 0x1228d25
dec ecx
jmp 0x1228ccc
push ebx
mov ebx, 0x1cfe596f
add ecx, ebx
pop ebx
and ecx, 0x7fbf4e00
jmp 0x1228c8a
push ebx
mov ebx, 0xfdd9f292
add eax, ebx
pop ebx
add edx, eax
pop eax
push 0xce792ee
mov dword [esp], edx
push dword [esp + 4]
jmp 0x1228d68
or eax, 0x6fff9fa0
xor eax, 0xcb8305
and esi, eax
pop eax
jmp 0x1228cdf
pop edx
pop dword [esp]
mov esp, dword [esp]
push ebp
jmp 0x1228cb0
add ebp, 4
sub ebp, 4
xchg dword [esp], ebp
pop esp
mov dword [esp], ecx
mov ecx, 0x7ffb7abd
not ecx
not ecx
jmp 0x1228d1f
shr ecx, 5
jmp 0x1228d9e
and ecx, 0x37da4198
push ebx
mov ebx, 0xffffffff
push edx
jmp 0x1228c2c
add ecx, 0x37fe7417
sub ecx, edx
sub ecx, 0x37fe7417
push dword [esp]
pop edx
add esp, 4
sub ecx, ebx
add ecx, 0x5d7dc497
pop ebx
sub ecx, 0x15a3e95
sub eax, ecx
jmp 0x1228c64
push edx
mov edx, eax
push ebx
push 0x1e3bcbe8
jmp 0x122904b
sub dword [esp + 4], ebp
add dword [esp + 4], 0x6b7ebcce
pop ebp
jmp 0x1228e4a
push edi
mov edi, esp
add edi, 4
add edi, 4
xchg dword [esp], edi
pop esp
jmp 0x1228e9f
dec ebp
shl ebp, 1
sub ebp, 0x4a689277
jmp 0x1228e56
pop esi
xchg dword [esp], edi
mov esp, dword [esp]
pop edx
push eax
mov dword [esp], 0x11261d3a
mov dword [esp], esi
mov dword [esp], ebx
push edx
mov edx, 0x4faf8a00
add dword [esp + 4], edx
mov edx, dword [esp]
jmp 0x1228dfe
pop ebx
sub esp, 4
mov dword [esp], ecx
jmp 0x1228e5d
xor esi, ebp
jmp 0x1228e6e
push ebp
mov ebp, 0x5d3122f7
shl ebp, 4
not ebp
inc ebp
jmp 0x1228fe9
pop ebp
push edi
mov edi, 0x47fdcece
sub edx, edi
pop edi
sub edx, 0x77fe41ab
add edx, esi
add edx, 0x77fe41ab
push ebx
mov dword [esp], ecx
mov ecx, 0x47fdcece
add edx, ecx
mov ecx, dword [esp]
add esp, 4
jmp 0x12290fa
push dword [esp]
pop ebx
jmp 0x1228ee3
mov eax, esp
add eax, 4
add eax, 4
xor eax, dword [esp]
xor dword [esp], eax
xor eax, dword [esp]
pop esp
push edi
mov dword [esp], edx
mov edx, 0x7d6d9334
shr edx, 8
shl edx, 3
add edx, 0x4bc41d68
jmp 0x1228f13
xchg esi, ebp
add esi, 0x17f72354
jmp 0x12290df
push eax
jmp 0x1228ea8
shl edi, 3
shr edi, 5
or edi, 0x577da026
sub edi, 0x3af72f2d
push edx
mov edx, 0x31fc0863
xor edi, edx
pop edx
mov esi, edi
jmp 0x1228f77
mov ecx, dword [esp]
jmp 0x1229030
sub ebx, 0x3fa5b247
sub ebx, edx
add ebx, 0x3fa5b247
mov edx, dword [esp]
push eax
push esp
pop eax
add eax, 4
push edi
mov edi, 0x3fad3fa5
jmp 0x1228f6c
mov esi, ecx
push esi
push edi
push eax
push 0x4eba51e9
mov dword [esp], edx
mov dword [esp], 0x7bd3ef57
jmp 0x12290b4
xor eax, 0x42826a0b
mov esi, eax
pop eax
sub esi, edx
pop edx
dec esi
sub esp, 4
mov dword [esp], edi
mov edi, 0x7eef556a
jmp 0x12290d5
push eax
mov eax, 0x778e5200
jmp 0x1228fc9
pop edi
mov ecx, 0xac80f72c
sub ecx, esi
pop esi
add ecx, 0x5f5f5870
shr ecx, 2
shl ecx, 8
not ecx
or ecx, 0x6b67ccf3
jmp 0x122910d
neg edx
xor edx, 0x1fff7678
and edx, 0x7c5f84ab
shr edx, 1
inc edx
sub edx, 0xd639ff7a
sub esp, 4
mov dword [esp], eax
mov eax, 0x6b7e4f47
sub eax, 0x7efd49e1
jmp 0x1229097
add eax, 0xb86f4cc3
xor edi, eax
pop eax
and edi, 0x7dcd2941
add edi, 0xefbfdec4
jmp 0x122903b
not ebp
jmp 0x1228ed6
push edx
mov edx, 0xe497663
add ebp, edx
pop edx
mov ecx, ebp
pop ebp
neg ecx
shr ecx, 2
xor ecx, 0x168f386e
add ebx, ecx
pop ecx
mov eax, ebx
mov ebx, dword [esp]
push edi
push esp
mov edi, dword [esp]
add esp, 4
add edi, 4
push esi
mov esi, 0x3ff4c6a0
or esi, 0x79cf7d92
neg esi
xchg esi, ecx
not ecx
jmp 0x12290bd
add esp, 4
jmp 0x122907c
add eax, edi
pop edi
jmp 0x1229043
xchg dword [esp], eax
jmp 0x1229061
mov dword [esp], edx
push ebp
mov ebp, 0x27bd162d
sub dword [esp + 4], 0x6b7ebcce
jmp 0x1228dec
mov esp, dword [esp]
jmp 0x1229069
push esi
jmp 0x1228f37
mov edi, eax
pop eax
sub dword [esp + 4], edi
pop edi
jmp 0x1228f0b
add ecx, 0x27ffb57d
push dword [esp]
mov esi, dword [esp]
add esp, 4
add esp, 4
push edx
jmp 0x12290a4
shr eax, 5
sub eax, 0x31fbb437
jmp 0x1228f50
push ebp
mov ebp, 0x4eef36d8
sub dword [esp + 4], ebp
pop ebp
jmp 0x1229123
pop eax
dec eax
inc eax
inc eax
jmp 0x12290ce
xchg esi, ecx
jmp 0x122912f
mov edx, 0x7f67c255
jmp 0x122911b
push ecx
push ebp
jmp 0x1229100
and esi, edi
mov edi, dword [esp]
jmp 0x12290f0
or esi, 0x5bbf27e3
push ebp
mov ebp, 0x7fdc49d2
jmp 0x1228e13
add esp, 4
xchg esi, ebp
jmp 0x1228fe2
pop esi
jmp 0x1229199
mov ebp, esp
push eax
mov eax, 0x5fffffab
jmp 0x122914f
sub ecx, 0x13c393da
xor eax, ecx
pop ecx
jmp 0x122906f
sub edi, edx
pop edx
jmp 0x1228e22
mov edx, dword [esp]
add esp, 4
push esi
jmp 0x1229187
sub esi, 0x7fffffad
add edi, 0x7f67c255
add edi, 0x7fed2b59
add edi, esi
sub edi, 0x7fed2b59
push edx
jmp 0x12290c4
or eax, 0x6fffd5ec
jmp 0x1229159
or eax, 0x74df3ed2
sub eax, 0x7ffffffb
add ebp, eax
pop eax
sub ebp, 4
push ebp
push dword [esp + 4]
pop ebp
pop dword [esp]
pop esp
mov dword [esp], esi
push edi
mov edi, 0x7dee4b96
shl edi, 4
jmp 0x1228ee9
push 0x64d336a1
mov dword [esp], edx
mov edx, 0xdd3a22c
jmp 0x1228f99
jmp 0x122955e
push 0x5f12697d
jmp 0x1229571
pop ebx
pop dword [esp]
jmp 0x12296a3
mov dword [esp], ebp
mov dword [esp], edx
jmp 0x122959c
xor ecx, 0x6c82026a
not ecx
or ecx, 0x5e3e2dae
xor ecx, 0x43772da3
or ecx, 0x7633b400
push ebp
jmp 0x12295c2
push ecx
push eax
jmp 0x1229657
mov ecx, 0x7ef2c05b
mov ebx, ecx
pop ecx
xor dword [esp + 4], ebx
pop ebx
push dword [esp]
pop ebx
push ebp
mov ebp, esp
add ebp, 4
jmp 0x1229612
mov ebp, 0x7d6bcccd
push esi
mov esi, 0x7be82a17
xor ebp, esi
pop esi
sub ebp, 0x6ed9843d
and ebp, 0x7abb08da
neg ebp
xor ebp, 0x9222f356
jmp 0x12295e9
sub ecx, 0x5c5b348c
add ecx, ebp
add ecx, 0x5c5b348c
pop ebp
xor ebx, ecx
mov ecx, dword [esp]
push ebx
mov ebx, esp
add ebx, 4
add ebx, 4
xchg dword [esp], ebx
pop esp
jmp 0x12296d9
push edx
mov edx, 4
add ebp, edx
pop edx
xchg dword [esp], ebp
pop esp
push ecx
mov ecx, 0x2f6ff417
add ecx, 0x67fe5770
add ecx, 0x2fff1004
and ecx, 0x7f66495f
jmp 0x122957c
sub esp, 4
mov dword [esp], eax
mov dword [esp], ebx
jmp 0x12296ab
push ebx
push dword [esp + 4]
jmp 0x1229568
pop ecx
mov edx, ecx
pop ecx
jmp 0x1229660
push 0x4a3a9dcf
mov dword [esp], edx
pop eax
push dword [esp]
pop edx
push 0x127fac04
mov dword [esp], ebx
mov ebx, esp
push ebp
mov ebp, 4
add ebx, ebp
mov ebp, dword [esp]
add esp, 4
push edi
mov dword [esp], 0x42ebc4f0
mov dword [esp], ebp
mov dword [esp], edx
mov dword [esp], ecx
mov ecx, 4
add ebx, ecx
pop ecx
jmp 0x122964d
mov esp, dword [esp]
jmp 0x122963c
push esi
mov dword [esp], ebx
mov ebx, esp
jmp 0x12296b6
add ebx, 4
sub ebx, 4
xchg dword [esp], ebx
jmp 0x12296ca
pop esp
mov dword [esp], ebx
jmp 0x12296d3
push ecx
jmp 0x12295a3
call 0x12296de
mov eax, dword [esp]
sub esp, 4
mov dword [esp], edx
mov dword [esp], eax
mov dword [esp], edx
mov dword [esp], ebx
push esp
mov ebx, dword [esp]
add esp, 4
add ebx, 4
push 0x76bd5bbb
mov dword [esp], ecx
jmp 0x1229713
push edx
jmp 0x122978c
mov ecx, 4
push edx
jmp 0x122971e
mov edx, 0x5ef66a84
xor edx, 0x31893c30
dec edx
jmp 0x122972f
sub edx, 0x3fef26b2
and edx, 0x2f63d385
sub edx, 0x7ef3b6f1
shr edx, 5
push edi
jmp 0x122984e
and edi, 0x5fff82ad
sub edi, 0x3ba5284c
and edi, 0x768f0a00
sub edi, 0xaccb2fa0
mov ecx, edi
pop edi
add eax, 0x6bebe185
add eax, ecx
sub eax, 0x6bebe185
push dword [esp]
pop ecx
push ecx
mov ecx, esp
add ecx, 4
add ecx, 4
xchg dword [esp], ecx
jmp 0x1229825
mov edx, 0x4a4b9d00
jmp 0x1229796
not edx
jmp 0x1229858
add ebp, 4
sub ebp, 4
xchg dword [esp], ebp
pop esp
mov dword [esp], edx
push ebp
push 0x7bd23e87
pop ebp
add ebp, 0x842dc46b
mov edx, ebp
pop ebp
sub esp, 4
mov dword [esp], ecx
push 0x253e63bb
mov dword [esp], edi
mov edi, 0x5dfbb09f
jmp 0x122970d
xor edx, edi
pop edi
add ebx, edx
pop edx
sub ebx, 0x699a45ef
add ebx, ecx
add ebx, 0x699a45ef
sub ebx, 0x1fffb40f
mov ecx, dword [esp]
push ebp
mov ebp, esp
jmp 0x122986f
push ecx
mov dword [esp], ebx
jmp 0x122988c
xchg dword [esp], ebp
jmp 0x1229886
xor edi, 0x1dfb7938
add edi, 0x7b07ecb3
xor edi, 0xf76c250b
jmp 0x12297d8
pop esp
sub eax, edx
push ebp
mov ebp, 0x7539d860
sub eax, ebp
pop ebp
push dword [esp]
mov edx, dword [esp]
add esp, 4
push edx
mov edx, esp
add edx, 4
add edx, 4
jmp 0x122987d
mov edi, 0x6ff77e21
jmp 0x122980e
shl edx, 3
push eax
mov eax, 0x6dfff905
not eax
add eax, 0x9ba39cab
sub edx, eax
jmp 0x122989f
add ebp, 4
add ebp, 4
jmp 0x1229806
xchg dword [esp], edx
pop esp
jmp 0x12298b2
pop esp
jmp 0x12297fd
push dword [esp + 4]
pop ebx
pop dword [esp]
mov esp, dword [esp]
push ebp
mov ebp, esp
jmp 0x122979d
pop eax
jmp 0x12298a5
add edi, edx
jmp 0x12298ac
pop edx
jmp 0x122974a
sub esp, 4
jmp 0x12298e4
mov dword [esp], ebx
mov dword [esp], 0x7efdba0d
neg dword [esp]
jmp 0x12299e7
xchg dword [esp], eax
pop esp
xor dword [esp + 4], eax
pop eax
sub dword [esp], 1
jmp 0x122995e
shl dword [esp], 7
jmp 0x1229b30
pop ecx
sub esp, 4
mov dword [esp], edx
mov edx, 0x77dd0af6
add dword [esp + 4], edx
pop edx
sub esp, 4
mov dword [esp], eax
push edi
mov edi, 0x5edc42bf
push 0xde705c88
pop eax
add eax, edi
mov edi, dword [esp]
push eax
jmp 0x1229bc2
push ecx
push edx
mov edx, 0x7f7a2e4e
xor edx, 0x7cf61e7b
not edx
push eax
mov eax, 0x3baf3679
or edx, eax
pop eax
jmp 0x1229b6d
add edx, 0x6df37b53
mov ecx, edx
pop edx
add dword [esp + 4], ecx
jmp 0x1229a3f
mov eax, esp
add eax, 4
add eax, 4
jmp 0x12298f6