Function at 0x7c81bf
Capabilities:
Check for vm using instruction vpcext
Reference the vmware io port

Disassembly:
push dword [esp]
jmp 0x7c77b8
xor ecx, dword [esp]
xor dword [esp], ecx
xor ecx, dword [esp]
mov esp, dword [esp]
jmp 0x7c77f6
inc ebp
shl ebp, 5
xor ebp, 0xc8b619d8
add eax, 0x5defb301
sub eax, ebp
sub eax, 0x5defb301
pop ebp
add eax, 0x6f5fdb61
jmp 0x7c777c
xor edi, 0xbc686d9d
mov eax, edi
pop edi
add dword [esp + 4], eax
mov eax, dword [esp]
add esp, 4
mov dword [esp], edx
push 0x2b9
push dword [esp]
pop edx
add esp, 4
jmp 0x7c7810
mov dword [esp], edx
jmp 0x7c7782
pop edx
jmp 0x7c7889
mov edx, 0x77cf66bf
jmp 0x7c778c
push esi
mov esi, 0x77cf66bb
xor edx, esi
pop esi
sub ecx, 0x3bf3b968
sub ecx, 0x7bbf3ac5
add ecx, edx
add ecx, 0x7bbf3ac5
add ecx, 0x3bf3b968
pop edx
add ecx, 4
jmp 0x7c771b
push dword [esp]
mov eax, dword [esp]
jmp 0x7c77d0
mov ebp, 0x3fe92f84
shr ebp, 1
jmp 0x7c786a
add esp, 4
jmp 0x7c77d8
push eax
mov dword [esp], ebx
mov dword [esp], edi
mov dword [esp], ecx
push esp
mov ecx, dword [esp]
add esp, 4
push ebp
mov dword [esp], 0x67269039
jmp 0x7c7774
add esp, 4
push edx
mov dword [esp], 0x75bbc8c4
inc dword [esp]
push eax
push edi
mov edi, 0x6f7bb62d
jmp 0x7c774d
sub eax, 0x6f5fdb61
add eax, 0x2edf44b8
sub eax, 0x3ed3c22c
sub eax, edx
jmp 0x7c7826
add eax, 0x3ed3c22c
jmp 0x7c7864
pop edi
inc eax
add eax, 0x6fd7cfa7
jmp 0x7c783c
sub eax, 0x3ffbdcd4
or eax, 0x19115040
and eax, 0x266dabb2
add eax, 0x177102ef
and ebp, eax
pop eax
add ebp, 0x426f4c75
add ebp, 0x7f337975
jmp 0x7c772c
push ebp
jmp 0x7c77c3
push eax
sub esp, 4
mov dword [esp], edi
mov edi, 0x73b76e3a
dec edi
neg edi
sub edi, 0xdeac26c
mov eax, edi
jmp 0x7c7830
mov ecx, ebx
push edi
mov edi, 0x7d5bd283
jmp 0x7c78c0
sub edi, 0x3fb867cd
sub edi, 0x7bdee65a
jmp 0x7c78ef
xor edi, 0x5af29cae
xor edi, 0x6dbf91df
push ebp
jmp 0x7c7a41
xor edx, ecx
jmp 0x7c7921
shl edi, 8
shr edi, 4
jmp 0x7c78a7
mov ebx, 0x1179ae16
add ecx, 0x3bfcd201
add ecx, ebx
push ebx
mov ebx, 0x3bfcd201
sub ecx, ebx
pop ebx
mov ebx, dword [esp]
add esp, 4
jmp 0x7c7990
add edi, ebp
add edi, 0x7bdee65a
push edx
mov edx, 0x7f2beb9f
jmp 0x7c7902
xor edx, 0x40938c52
jmp 0x7c790d
add edi, 0x1bff997e
add edi, edx
jmp 0x7c7931
mov esi, ebp
jmp 0x7c7a3b
pop ecx
or edi, edx
pop edx
push ecx
mov ecx, 0x7fd460e9
push ebx
jmp 0x7c78cb
sub edi, 0x1bff997e
pop edx
push dword [esp]
mov ebp, dword [esp]
add esp, 4
add esp, 4
jmp 0x7c79de
add ebx, edx
push ecx
mov ecx, 0x763fd3a5
add ebx, ecx
pop ecx
mov edx, dword [esp]
add esp, 4
sub ebx, 4
xchg dword [esp], ebx
mov esp, dword [esp]
jmp 0x7c79ef
pop ecx
shl edx, 8
sub edx, 0xf268b5e7
not edx
jmp 0x7c7a76
push ecx
mov ecx, 0x202e5b4
add edx, ecx
pop ecx
jmp 0x7c79bb
add ecx, 0x6e8fb6fb
xor edi, ecx
pop ecx
push ebx
mov ebx, edi
push ebx
jmp 0x7c79a2
pop eax
pop ebx
mov edi, dword [esp]
add esp, 4
push ebx
mov ebx, esp
push edx
mov edx, 0x5cdd9ac6
jmp 0x7c79f7
or ecx, edx
pop edx
xor ecx, 0x7fafb1e7
add ecx, 0xff1f9f7b
sub edx, 0x75ff5371
add edx, ecx
push esi
push ebp
mov ebp, 0x75ff5371
jmp 0x7c791a
push edx
push ecx
mov ecx, 0xffae068
mov edx, 0x68e67744
jmp 0x7c78b9
mov dword [esp], eax
jmp 0x7c7a98
and edx, 0x32bd45bf
and edx, 0x57fd9c41
xor edx, 0x2e7fb6ca
push ecx
jmp 0x7c7a0f
push edi
mov edi, 0x4affe0fc
mov ecx, edi
pop edi
xchg ecx, edi
not edi
jmp 0x7c7a21
xchg ecx, edi
or ecx, 0x1e9abce6
or ecx, 0x583e02c1
push edx
push esi
mov esi, 0x4fed4de8
jmp 0x7c7a4b
pop ebp
jmp 0x7c7a5d
mov ebp, 0x6be509dd
jmp 0x7c7896
mov edx, 0x3211efa4
xor edx, esi
jmp 0x7c7a57
pop esi
jmp 0x7c7982
sub edx, 0x7cbd4f02
add edx, esi
jmp 0x7c7a6a
add edx, 0x7cbd4f02
pop esi
jmp 0x7c7971
shl edx, 4
jmp 0x7c7a7e
and edx, 0x7f7f9300
shl edx, 7
add edx, 0xdc7f0004
sub ebx, 0x763fd3a5
jmp 0x7c794c
call 0x7c7a9d
push dword [esp]
push dword [esp]
pop edx
add esp, 4
jmp 0x7c7b80
push eax
push esi
mov esi, 0x6bbbbba0
and esi, 0x5c7131a6
neg esi
xor esi, 0xc8316dc2
mov eax, esi
pop esi
inc eax
jmp 0x7c7e2c
sub dword [esp], 0x443146
push ebx
mov ebx, 0x7f325e5c
and dword [esp + 4], ebx
pop ebx
push ecx
mov dword [esp], 0x4feda2ca
mov dword [esp], edx
mov edx, 0xc542c8f0
add dword [esp + 4], 0x7ff7e6f7
add dword [esp + 4], edx
sub dword [esp + 4], 0x7ff7e6f7
pop edx
pop esi
push 0x4ba28483
mov dword [esp], edx
mov edx, 0x7f3f0a9d
add ebx, 0x71903487
sub ebx, 0x6fbd03b5
sub ebx, edx
add ebx, 0x6fbd03b5
sub ebx, 0x71903487
jmp 0x7c7c42
dec edi
or edi, 0x76bfde4e
sub edi, 0xf82cb0b6
jmp 0x7c7c61
push ecx
jmp 0x7c7b86
mov dword [esp], ebx
push esp
push dword [esp]
pop ebx
push esi
mov esi, esp
push ebp
mov ebp, 4
add esi, ebp
pop ebp
add esi, 4
xchg dword [esp], esi
pop esp
push ebx
mov dword [esp], esi
mov dword [esp], edx
mov dword [esp], ecx
mov ecx, 0x7ddf5b85
jmp 0x7c7cb7
shl edi, 3
not edi
sub edi, 0x862ddc1e
sub edx, edi
jmp 0x7c7c2e
shl eax, 7
sub eax, 0x957bbf5b
mov edi, eax
jmp 0x7c7f21
neg ecx
push edi
push eax
mov eax, 0x3ffe6aee
mov edi, 0x6280ea80
jmp 0x7c7d65
and edx, 0x3ebfa0a6
shl edx, 8
xor edx, 0xcb5d8325
add eax, edx
jmp 0x7c7de6
pop edi
jmp 0x7c7c34
add edx, dword [esp]
push esi
mov esi, 0x7a953bb7
jmp 0x7c7d06
push dword [esp]
pop edx
push ecx
mov ecx, esp
jmp 0x7c7ebe
xchg dword [esp], ebx
pop esp
mov dword [esp], esi
mov dword [esp], 0x778ca900
jmp 0x7c7ce8
add esi, edi
push dword [esp]
pop edi
add esp, 4
add edx, esi
pop esi
add edx, 0x5ddddf5b
jmp 0x7c7cd7
xchg dword [esp], edi
pop esp
xor ebx, edx
mov edx, dword [esp]
push 0x45c1c30b
mov dword [esp], esi
mov esi, esp
sub esp, 4
mov dword [esp], eax
mov eax, 0x7fdfed99
neg eax
add eax, 0x61ff327a
push ecx
mov ecx, 0x1ffe5e25
and ecx, 0x73fec8cd
jmp 0x7c7c05
shr ecx, 1
jmp 0x7c7d46
add ebx, ecx
jmp 0x7c7eb6
push eax
mov dword [esp], 0x7f6e4fb3
not dword [esp]
push ebp
jmp 0x7c7fef
or dword [esp], 0x68ff3fbb
jmp 0x7c7af4
xchg dword [esp], ebp
pop esp
jmp 0x7c8336
shl esi, 5
not esi
push ecx
mov ecx, 0x77f4ad2d
sub ecx, 0x3ffe6000
xor ecx, 0x6bdfa0c0
xor ecx, 0x21b0650f
jmp 0x7c7f92
push ecx
push ebx
mov dword [esp], 0x71f7e522
pop ecx
sub ecx, 0x7df7f693
inc ecx
add ecx, 0xc001174
push ecx
pop edi
jmp 0x7c7f27
add ecx, 0xc1105242
push ecx
jmp 0x7c7ec9
push edi
jmp 0x7c7d90
add edx, ecx
mov ecx, dword [esp]
push edi
mov edi, esp
jmp 0x7c8045
xor edi, eax
pop eax
sub edi, 0xa360b54
sub ecx, edi
jmp 0x7c7edc
push esp
pop edi
push ebp
mov ebp, 4
add edi, ebp
pop ebp
push ebp
mov ebp, 4
jmp 0x7c7aaf
pop edi
push esi
mov esi, 0x57f7f6bd
jmp 0x7c7f46
mov ebx, esp
add ebx, 4
sub ebx, 4
jmp 0x7c7c4e
pop edx
jmp 0x7c80b3
xor eax, 0x28022caa
add edi, eax
pop eax
add edi, ebp
sub edi, 0x57fd8f09
pop ebp
push edi
push esp
pop edi
add edi, 4
sub edi, 4
xor edi, dword [esp]
xor dword [esp], edi
jmp 0x7c7e70
xor edi, dword [esp]
mov esp, dword [esp]
mov dword [esp], edi
push dword [esp + 4]
push dword [esp]
pop edi
add esp, 4
pop dword [esp]
mov esp, dword [esp]
sub esp, 4
mov dword [esp], edx
push ecx
mov ecx, 0x3dff4dd1
mov edx, 0x37cfa0f2
jmp 0x7c7d58
push dword [esp]
jmp 0x7c81b9
add ecx, 4
jmp 0x7c80db
mov ecx, 0x63f73a5b
shr ecx, 7
add ecx, 0x3bdfb196
jmp 0x7c7fc2
mov edi, dword [esp]
add esp, 4
dec ecx
sub ecx, 1
xor ecx, 0xf4d49edf
or eax, ecx
pop ecx
push eax
mov dword [esp], edi
jmp 0x7c8100
push dword [esp]
pop ebx
add esp, 4
jmp 0x7c7d52
push ebp
mov dword [esp], 0x76fffa63
push ebx
mov ebx, 0x3f5f6287
add dword [esp + 4], ebx
mov ebx, dword [esp]
sub esp, 4
jmp 0x7c82f4
pop eax
jmp 0x7c8181
pop ecx
add eax, edi
push dword [esp]
pop edi
add esp, 4
xor eax, dword [esp]
xor dword [esp], eax
xor eax, dword [esp]
mov esp, dword [esp]
sti
jmp 0x7c824b
add edx, esi
pop esi
add edx, ebp
jmp 0x7c80c0
pop ebp
mov dword [esp], eax
mov eax, esp
jmp 0x7c8056
sub esi, ecx
pop ecx
shl esi, 5
push 0x1f9d149
mov dword [esp], edi
mov edi, 0x7dbefe9d
shr edi, 7
add edi, 0x6ded75d5
jmp 0x7c7b63
sub ecx, 0xbcac4f85
add ebx, ecx
pop ecx
add ebx, ecx
sub ebx, 0x7ffb5085
mov ecx, dword [esp]
jmp 0x7c7ffd
sub edx, ecx
pop ecx
push edi
push eax
jmp 0x7c82cb
mov ebp, 0xf47247cb
xor dword [esp + 4], ebp
jmp 0x7c7f56
add esp, 4
push esi
mov esi, 0x2f7e7cb7
or esi, 0x4bbf7300
inc esi
shl esi, 8
add esi, 0x804804
add ebx, esi
pop esi
xor ebx, dword [esp]
xor dword [esp], ebx
xor ebx, dword [esp]
pop esp
sti
push ecx
push ebx
push 0x7f7fffba
pop ebx
jmp 0x7c8176
add esp, 4
xor edi, 0x5fb2a6f7
mov ecx, edi
pop edi
jmp 0x7c7cbf
add edi, 4
add edi, 4
jmp 0x7c7c7b
push ecx
mov dword [esp], ebp
mov ebp, 4
push ecx
push eax
push 0x7b3e8b45
pop eax
not eax
sub eax, 0x543d195
mov ecx, eax
jmp 0x7c8160
pop ebp
push edi
jmp 0x7c7d28
pop ecx
jmp 0x7c8396
sub edx, 0x57f7f6bd
mov ebp, dword [esp]
jmp 0x7c83c4
add ecx, 4
xchg dword [esp], ecx
pop esp
add ebx, esi
add ebx, 0x7f3f0a9d
pop esi
jmp 0x7c7f04
push ecx
mov ecx, 0x7cf7a2e2
neg ecx
jmp 0x7c81ea
mov edi, 0x7e7fb83c
neg edi
or edi, 0x5fbff141
and edi, 0x336b41a5
add edi, 0x556b97d1
jmp 0x7c8130
inc edi
jmp 0x7c8210
mov dword [esp], 0x7af5034a
mov dword [esp], ebx
mov ebx, 0x6f1e6af7
push ebx
jmp 0x7c82b4
mov eax, dword [esp]
add esp, 4
sub eax, ecx
pop ecx
add eax, ebp
push edx
mov edx, 0x6ff42529
jmp 0x7c7c18
sub ebx, 0x13f148ff
jmp 0x7c81f4
dec edi
jmp 0x7c8330
mov ecx, dword [esp]
add esp, 4
push ebp
mov ebp, esp
push ecx
push ebx
mov ebx, 0x7ecdbd90
mov ecx, 0x7ecdbd94
sub ecx, ebx
pop ebx
add ebp, ecx
jmp 0x7c80ba
neg ebx
and ebx, 0x7f1d826d
xor ebx, 0x624e6ed7
mov ecx, ebx
pop ebx
add ecx, 0xe77e70c9
jmp 0x7c7fe5
xor edi, 0x86e9058a
jmp 0x7c821b
sub eax, edi
mov edi, dword [esp]
add esp, 4
add esi, eax
jmp 0x7c8258
xor eax, eax
push dword [eax + edx]
push dword [esp]
jmp 0x7c7ef8
mov eax, dword [esp]
add esp, 4
add esi, 4
xor esi, dword [esp]
xor dword [esp], esi
xor esi, dword [esp]
pop esp
jmp 0x7c82a4
push ecx
push edi
push esi
jmp 0x7c814b
add dword [esp], 0x63b32a8d
pop edi
sub edi, 0x63b32a8d
mov ebx, dword [esp]
push ebp
jmp 0x7c831d
push 0x7fc3b60a
mov eax, dword [esp]
add esp, 4
push ebx
mov ebx, 0x479f6433
or eax, ebx
mov ebx, dword [esp]
add esp, 4
xor eax, 0x4ff64909
jmp 0x7c7be4
mov dword [esp], edx
jmp 0x7c8352
mov ebp, esp
add ebp, 4
add ebp, 4
jmp 0x7c7cfd
dec edi
jmp 0x7c7bd2
push esi
mov esi, 1
sub edi, 0x62f7e260
add edi, esi
add edi, 0x62f7e260
mov esi, dword [esp]
jmp 0x7c8031
mov edx, esp
push ebp
push 0x76c39dee
pop ebp
sub ebp, 0x7dfff741
push edi
mov edi, 0x53b6dc2a
not edi
push 0x29d9ed24
mov dword [esp], ebx
mov ebx, 0x74e20cdd
shl ebx, 4
shl ebx, 1
or ebx, 0x7bc1c1cb
xor ebx, 0x70c71a00
inc ebx
add ebx, 0xcdf483eb
sub edi, ebx
jmp 0x7c83b6
push 0x3fc22266
mov dword [esp], eax
mov eax, 0x3f5f7bd1
add eax, 0xc0a08433
add ebp, eax
pop eax
xchg dword [esp], ebp
pop esp
push esi
push ebx
jmp 0x7c7dc7
pop ebx
add edi, 0xa975c8ab
sub ebp, edi
jmp 0x7c7da6
add esp, 4
jmp 0x7c80f3