Function at 0x8432a4
Capabilities:
Check for vm using instruction vpcext
Contain obfuscated stackstrings
Reference the vmware io port

Disassembly:
pop eax
add eax, 0xe
mov dword [eax], ecx
jmp 0x83a3f4
jmp 0x83dbc9
jmp 0x83ecca
push ecx
mov ecx, esp
jmp 0x8426ee
mov dword [esp], ecx
push esi
push ebx
mov ebx, 0x13e96048
jmp 0x83f341
push edx
mov edx, 0x67a414c
sub edx, 0x7b946067
jmp 0x83ff24
xchg dword [esp], edx
pop esp
mov dword [esp], ecx
push ebp
mov dword [esp], esp
add dword [esp], 4
jmp 0x83fa9c
add dword [esp + 4], 0x48c51c78
add dword [esp + 4], 0x10d604d5
add dword [esp + 4], ebp
sub dword [esp + 4], 0x10d604d5
sub dword [esp + 4], 0x48c51c78
pop ebp
jmp 0x840e94
mov dword [esp], eax
jmp 0x840c22
pop esi
jmp 0x841bc5
mov ebp, 0xe2e692d
shr ebp, 6
and ebp, 0x77585e99
jmp 0x83f8a8
mov dword [esp], ecx
mov ecx, esi
push edx
mov edx, ecx
mov ebp, edx
pop edx
mov ecx, dword [esp]
jmp 0x8415a7
or edx, ecx
jmp 0x840782
push edx
push esi
mov esi, 0x3ab94bae
and esi, 0x742645a0
jmp 0x842c3e
mov eax, esi
push dword [esp]
pop esi
push ebp
mov ebp, esp
add ebp, 4
add ebp, 4
xchg dword [esp], ebp
jmp 0x83fd90
add ebx, 0x71c364b4
shr ebx, 3
neg ebx
add ebx, 0x2df8b9c4
jmp 0x83fecd
add esi, edi
jmp GetSysColorBrush
sub eax, edx
sub eax, 0x3a516336
pop edx
mov ebp, eax
mov eax, dword [esp]
add esp, 4
jmp 0x83ee33
pop esp
pop eax
push ebx
mov dword [esp], ecx
mov ecx, 0x1d1e34
shl ecx, 6
sub ecx, 0xffffffff
shr ecx, 8
shl ecx, 7
or ecx, 0x34c0571e
add ecx, 0x3b4a20f
add eax, ecx
pop ecx
cmp dword [ebp + 0x1adc3606], 0
jne 0x83f4d6
cmp dword [ebp + 0x1adc374a], 0
je 0x83f4e5
push eax
mov eax, eax
mov eax, 0
call dword [ebp + 0x1adc2d6d]
pop eax
push eax
mov dword [esp], ebp
mov dword [esp], eax
jmp 0x83f522
mov dword [esp], ecx
mov dword [esp], ebx
push ebp
jmp 0x840336
push esp
pop edx
add edx, 4
sub edx, 4
push edx
push dword [esp + 4]
pop edx
pop dword [esp]
pop esp
jmp 0x83ed51
xchg dword [esp], esi
jmp 0x83f49b
push edx
pop ebx
mov edx, dword [esp]
jmp 0x8432f3
not edx
not edx
shl edx, 6
sub edx, 0xd98e1ebc
add ecx, edx
mov edx, dword [esp]
add esp, 4
add ecx, 4
xchg dword [esp], ecx
jmp 0x83f941
inc ebp
dec ebp
sub ebp, 0xf818bff7
mov edx, ebp
mov ebp, dword [esp]
add esp, 4
xor dword [esp + 4], edx
pop edx
push dword [esp]
pop eax
add esp, 4
jmp PostQuitMessage
mov esp, dword [esp]
cmp dword [ebp + 0x1adc3606], 0
jne 0x83f956
cmp dword [ebp + 0x1adc374a], 0
je 0x83f96b
push eax
mov eax, eax
mov eax, 0x43d
mov dword [ebp + 0x1adc29c5], eax
call dword [ebp + 0x1adc2fea]
pop eax
sub esp, 4
mov dword [esp], edx
mov edx, esp
add edx, 4
sub edx, 4
jmp 0x83ee1c
push esp
pop dword [esp]
push 0x775b
mov dword [esp], ebp
push eax
jmp 0x84318b
push ebp
jmp 0x84113e
mov ecx, dword [esp]
add esp, 4
push edx
mov edx, 4
jmp BeginPaint
mov edi, 1
jmp 0x83f367
pop esp
jmp 0x840bd2
mov dword [esp], esi
push esi
jmp 0x83ef56
shl ecx, 6
add ecx, 0x167848ab
jmp 0x83f0f5
mov esi, ebx
pop ebx
jmp 0x8411d5
shr edx, 4
xor edx, 0x8ae5e0a
add eax, edx
pop edx
xchg dword [esp], eax
jmp 0x841cc0
add ecx, 4
xchg dword [esp], ecx
mov esp, dword [esp]
push esi
mov dword [esp], ecx
mov ecx, esp
push edx
mov edx, 0x3b66387b
jmp RegOpenKeyExW
inc esi
jmp VirtualAlloc
mov dword [esp], eax
push dword [esp]
mov ebx, dword [esp]
add esp, 4
add esp, 4
sub esp, 4
mov dword [esp], esi
push eax
mov dword [esp], ebx
pop esi
jmp lstrcpynW
add edi, 4
sub edi, 4
push edi
push dword [esp + 4]
pop edi
pop dword [esp]
jmp 0x841847
mov dword [esp], esi
mov esi, 4
sub ecx, esi
jmp 0x841738
mov eax, dword [esp]
push ecx
push esp
pop ecx
push edx
mov edx, 0x67bd0864
sub edx, 1
sub esp, 4
mov dword [esp], ebx
mov ebx, 0x9d70c2c
jmp SetScrollInfo
sub ebx, 0xca69a840
jmp GetParent
mov ecx, dword [esp]
jmp SetFocus
push eax
mov eax, 0x38ec0466
sub dword [esp + 8], eax
pop eax
push dword [esp]
pop eax
push ecx
mov ecx, esp
push ebp
mov ebp, 4
add ecx, ebp
pop ebp
add ecx, 4
xchg dword [esp], ecx
pop esp
push dword [esp]
push dword [esp]
pop eax
add esp, 4
add esp, 4
jmp RegisterClassW
push PostQuitMessage
mov dword [esp], ebp
mov dword [esp], ecx
mov dword [esp], edx
push ecx
mov ecx, 0x37ca33e4
add ecx, 0xffffffff
push eax
mov eax, 0x69f771b8
jmp 0x840e39
mov ebx, 0xdf14374
xor esi, ebx
pop ebx
jmp 0x83fa2e
dec esi
sub esi, 0x6cdf6f73
jmp 0x8421f6
pop esi
push 0x298b
mov dword [esp], ebx
jmp 0x8409dc
mov edi, ebp
pop ebp
sub eax, 0x5f745f33
sub eax, 0x5b0c65ef
add eax, edi
add eax, 0x5b0c65ef
add eax, 0x5f745f33
jmp 0x84171f
mov edi, dword [esp]
add esp, 4
jmp 0x84024f
add esi, ebx
pop ebx
add esi, 4
jmp GetWindow
push dword [esp]
mov ebx, dword [esp]
add esp, 4
add esp, 4
sub esp, 4
mov dword [esp], eax
jmp GetMenuStringW
push edx
push ebp
jmp GetMenuStringW
xor dword [esp], 0x5ed37f16
pop esi
xor esi, 0x5ed37f16
push esi
push eax
push esi
jmp 0x842e32
xor dword [esp], ebx
jmp GetClassLongW
dec edi
add edi, 0x2417009f
shl edi, 8
add edi, 0x69b0e304
add eax, edi
pop edi
xchg dword [esp], eax
mov esp, dword [esp]
push dword [esp]
jmp EndMenu
push edx
mov edx, 0x59c21ad2
xor eax, edx
pop edx
xor ecx, eax
pop eax
push ebx
push ebp
mov ebp, ecx
mov ebx, ebp
pop ebp
mov edx, ebx
pop ebx
mov ecx, dword [esp]
jmp 0x8410c3
mov eax, dword [esp]
xor dword [edi], 0x9495
mov dword [ebp + 0x1adc306d], eax
mov dword [ebp + 0x1adc28e1], 0
push DrawIconEx
mov dword [esp], eax
push dword [esp]
jmp DrawIcon
add ebx, 4
add ebx, 4
xor ebx, dword [esp]
jmp 0x840d7d
add esp, 4
push ebx
jmp 0x842707
add ecx, edx
mov edx, dword [esp]
add esp, 4
jmp DocumentPropertiesW
sub ecx, 4
xchg dword [esp], ecx
jmp 0x8411cf
push edi
mov edi, esp
add edi, 4
add edi, 4
xchg dword [esp], edi
pop esp
xor eax, edx
mov edx, dword [esp]
add esp, 4
cmp dword [ebp + 0x1adc3606], 0
jne 0x8410ed
cmp dword [ebp + 0x1adc374a], 0
je 0x8410fc
push eax
mov eax, eax
mov eax, StretchDIBits
call dword [ebp - 0x734a7fb7]
add byte [ecx + 0x4ec], al
add byte [ecx - 0x76acdbf4], cl
add al, 0x24
sub esp, 4
mov dword [esp], ecx
push ebx
mov dword [esp], eax
pop ecx
push edx
jmp StartPage
mov ebp, 0x48e61d80
add esi, ebp
pop ebp
sub esp, 4
jmp SetViewportOrgEx
pop esp
jmp 0x83f986
sub dword [esp + 4], 0x224c561c
add dword [esp + 4], 0x27076dcd
sub dword [esp + 4], esi
sub dword [esp + 4], 0x27076dcd
add dword [esp + 4], 0x224c561c
push dword [esp]
pop esi
add esp, 4
mov eax, dword [esp]
add esp, 4
push edi
push ebp
mov ebp, 0x3033cc5
jmp SelectObject
push esi
mov esi, esp
add esi, 4
jmp 0x8422fb
inc ebp
add ebp, 0x53345e20
xor ebp, 0x4b74bbc3
jmp ExtTextOutW
mov dword [esp], ecx
jmp ShowOwnedPopups
push ebx
push esp
pop ebx
add ebx, 4
add ebx, 4
xchg dword [esp], ebx
pop esp
push dword [esp]
jmp 0x83ef94
shl ebx, 8
add ebx, 0x77d81287
sub ebx, 0xb6a146e6
add edx, ebx
mov ebx, dword [esp]
add esp, 4
add ecx, 0x2e477605
add ecx, edx
sub ecx, 0x2e477605
pop edx
jmp RegQueryValueExW
sub eax, 0x479d0cf0
mov esi, dword [esp]
jmp 0x8430fd
pop edi
pop ecx
push 0x1d0
mov dword [esp], esi
jmp 0x841be0
pop esi
push ecx
push dword [esp + 4]
pop ecx
pop dword [esp]
mov esp, dword [esp]
mov dword [esp], eax
push dword [esp]
mov eax, dword [esp]
add esp, 4
push edi
mov edi, esp
add edi, 4
add edi, 4
xchg dword [esp], edi
pop esp
push edi
mov edi, esp
jmp 0x84042b
shl esi, 4
xor esi, 0x36ba8b8
mov edx, esi
pop esi
add eax, 0x3a516336
jmp TryEnterCriticalSection
pop esp
mov dword [esp], eax
sub esp, 4
jmp ResetEvent
mov edi, 0x38bb3895
xor eax, edi
pop edi
cmp dword [ebp + 0x1adc3606], 0
jne 0x84186d
cmp dword [ebp + 0x1adc374a], 0
je 0x84187c
push eax
mov eax, eax
mov eax, 0
call dword [ebp + 0x1adc1b9c]
pop eax
cmp dword [ebp + 0x1adc374a], 0
je 0x841892
push eax
mov eax, 0
call dword [ebp + 0x1adc31a7]
pop eax
push 0x4df
jmp LockResource
push eax
push 0x35de
mov dword [esp], esi
mov esi, 0x4e536a60
jmp 0x8431eb
add esp, 4
pop eax
push ebx
push edx
mov edx, 0x1c1a27d5
push edx
push ebx
pop edx
pop ebx
xor ebx, ecx
xor ecx, ebx
xor ebx, ecx
jmp 0x8431fd
mov dword [esp], eax
jmp 0x841d0a
pop esp
push 0x6fe7
mov dword [esp], eax
push edi
push edx
mov edx, 0x2c37d23
jmp 0x8429d1
sub dword [esp], 0x15b1299f
pop eax
push ebp
push 0x5ddb
mov dword [esp], esi
mov esi, 0x7d8b612a
shr esi, 1
push 0
jmp RegCreateKeyExW
push eax
mov eax, 0x564e4bc6
and eax, 0x13a64811
sub eax, 1
shl eax, 2
push edi
mov edi, 0x44ab55a0
jmp 0x842079
sub dword [esp], esi
jmp 0x840ae2
add dword [esp + 4], eax
jmp RegisterWindowMessageW
add edi, 0x77d86e2a
sub edi, 0x638a9f72
or eax, edi
jmp 0x842ce2
push ebx
mov ebx, 0x69c5534f
or ebx, 0x3ff67da5
shl ebx, 2
shl ebx, 5
dec ebx
jmp ImageList_ReplaceIcon
and esi, 0x4a9928a8
xor esi, 0x4f0c24d8
mov eax, esi
pop esi
push edx
mov edx, 0x38ec0466
jmp EnumPrintersW
push eax
jmp DocumentPropertiesW
mov dword [esp], ebp
push eax
mov dword [esp], esi
jmp 0x842759
sub esi, 4
xchg dword [esp], esi
pop esp
mov dword [esp], eax
mov eax, esp
jmp 0x84292f
add ecx, 4
jmp 0x8410b8
mov ebx, 0x70fd79be
xor ebx, 0xd29a34c0
sub edx, ebx
pop ebx
jmp 0x843002
mov esi, 0x62c2409e
jmp 0x8428bc
neg esi
not esi
push edx
mov edx, 0x2d994981
sub edx, 0x51127bd6
xor edx, 0xf681c5a3
sub esi, edx
pop edx
mov ebp, esi
mov esi, dword [esp]
add esp, 4
xor dword [esp + 4], ebp
mov ebp, dword [esp]
jmp 0x8413f3
add eax, 4
push edi
mov edi, 0x6e1167d7
xor edi, 0x2b6e29a8
jmp EnumChildWindows
xor ebx, 0x31d65f3b
jmp 0x840758
add edx, 0x1a581a7c
and edx, 0x6a1662e6
neg edx
shl edx, 5
sub edx, 0x285112cc
sub edx, 0x6b2a2674
add edx, 0x3b8211f0
push ecx
mov ecx, 0x2d2b00fa
jmp 0x842cb6
pop eax
add esp, 4
push 0x6e1e
mov dword [esp], edi
jmp 0x841853
or esi, 0x4d12148f
jmp 0x8431e5
xor edx, ecx
pop ecx
push ecx
mov ecx, 0x591a67ee
jmp 0x83feb1
xchg dword [esp], ebp
pop esp
mov ebx, dword [esp]
add esp, 4
add edx, 0x6bbe4cc6
jmp 0x83f82f
pop edi
xor eax, 0x58f93ff8
add ecx, eax
pop eax
add ecx, 4
xchg dword [esp], ecx
jmp 0x842f32
mov esi, 0x2a99167b
shl esi, 4
jmp 0x8409e9
sub dword [esp + 4], 0x7ba2332d
jmp 0x843044
pop esp
sub esp, 4
mov dword [esp], ebp
mov ebp, 0x7ba2332d
add dword [esp + 8], ebp
pop ebp
add dword [esp + 4], ecx
jmp 0x842f0d
push edx
pop edi
jmp 0x8432cf
pop ecx
mov eax, dword [esp]
push ebx
mov ebx, esp
jmp 0x840f3f
add dword [esp + 8], edx
pop edx
jmp 0x841fcc
add esp, 4
jmp 0x84189c
push 0x123a69b2
jmp 0x843195
mov eax, dword [esp]
add esp, 4
and eax, 0x37cf34a8
push ebx
mov dword [esp], edx
mov edx, 0x41bb2cf4
sub eax, edx
pop edx
jmp 0x83f17a
push edi
jmp 0x83fd29
add esi, 0x150ba90
xor dword [esp + 4], esi
mov esi, dword [esp]
jmp 0x841a74
not ecx
xchg ebx, ecx
sub esp, 4
jmp 0x843277
mov dword [esp], edx
push ebx
jmp 0x8432a1
mov edx, dword [esp]
push ebp
mov ebp, esp
push esi
mov esi, 4
add ebp, esi
jmp 0x8432c6
pop esi
add ebp, 4
jmp 0x842ccd
pop edx
sub dword [esp + 4], edi
push dword [esp]
mov edi, dword [esp]
add esp, 4
sub esp, 4
mov dword [esp], esi
mov esi, esp
jmp 0x8420ed
add esp, 4
xor eax, ebx
mov ebx, dword [esp]
add esp, 4
cmp dword [ebp + 0x1adc3606], 0
jne 0x843313
cmp dword [ebp + 0x1adc374a], 0
je 0x843324
push eax
push ebx
mov eax, eax
mov eax, 0
call dword [ebp + 0x1adc3138]
pop ebx
pop eax
push eax
jmp 0x843353
push ecx
push 0x10a06195
push dword [esp]
pop ecx
push ecx
mov ecx, esp
jmp 0x841ef5
xor ebx, dword [esp]
pop esp
push ebx
mov ebx, 0x10a06195
jmp 0x843374
sub eax, ebx
push dword [esp]
pop ebx
push eax
mov eax, esp
add eax, 4
jmp 0x83ed60