Function at 0x107ce86
Capabilities:
Check for vm using instruction vpcext
Contain obfuscated stackstrings
Reference the vmware io port

Disassembly:
push dword [esp]
mov eax, dword [esp]
add esp, 4
push eax
jmp 0x1077ca8
pop esp
mov dword [esp], edi
mov edi, esp
push edx
jmp 0x1077c98
dec eax
xchg esi, eax
and esi, 0x5d5d0798
dec esi
sub esi, 0x3fff2687
sub esi, 0x1d4ddb84
add ebx, esi
pop esi
xchg dword [esp], ebx
pop esp
xchg dword [esp], edi
pop esp
jmp 0x1077e17
mov esi, 0xda8c231
sub eax, esi
jmp 0x1077c92
sub eax, 4
xchg dword [esp], eax
jmp 0x1077c4a
pop esi
jmp 0x1077d97
mov edx, 0x7f6e1d7
push ecx
mov ecx, 0x6f5df7d6
jmp 0x1077d02
mov dword [esp], 0x51c4cd18
mov dword [esp], eax
mov dword [esp], 0x7c0df331
jmp 0x1077cdb
add eax, 4
jmp 0x1077c87
add dword [esp], 0x8a1157bb
mov dword [esp], ecx
mov ecx, esp
push ebx
push eax
jmp 0x1077d80
neg dword [esp]
xor dword [esp], 0xec8d8b67
shl dword [esp], 2
sub dword [esp], 0x3b43a930
xor dword [esp], 0x397f097a
inc dword [esp]
dec dword [esp]
jmp 0x1077cc8
inc ecx
dec ecx
and ecx, 0x67fbb310
and ecx, 0x3ff79d2e
add ecx, 0x56a1bc29
xor edx, ecx
pop ecx
shl edx, 1
dec edx
inc edx
sub edx, 0xf40b59f8
add edi, edx
pop edx
push ebx
mov ebx, 4
add edi, ebx
jmp 0x1077d63
add edx, eax
pop eax
add edx, 0x1890d7d5
mov ebx, edx
pop edx
shr ebx, 2
sub ebx, 0xe88aa4a0
sub ecx, ebx
pop ebx
add ecx, ebx
push eax
jmp 0x1077dcd
sub dword [esp], 0xf4ca13e9
mov dword [esp], edx
jmp 0x1077de3
push dword [esp]
pop ebx
push ebx
mov ebx, esp
add ebx, 4
push esi
jmp 0x1077d76
mov esi, 0x5feffa14
jmp 0x1077dc7
push edi
mov dword [esp], 0x76e709f4
pop eax
shr eax, 2
and eax, 0x6faaf7b5
push esi
jmp 0x1077c7b
mov ebx, eax
pop eax
push ebx
push edx
mov edx, 0x37b5c7e7
inc edx
push eax
mov eax, 0x1fb909ae
jmp 0x1077d34
push eax
mov eax, esp
jmp 0x1077cbe
xchg dword [esp], ecx
pop esp
push ebx
jmp 0x1077e08
add ecx, 4
jmp 0x1077db5
xchg esi, eax
jmp 0x1077c56
mov eax, 0x337545ba
add ecx, eax
mov eax, dword [esp]
add esp, 4
pop ebx
jmp 0x1077dbf
mov edx, 0x34c
sub eax, edx
push dword [esp]
mov edx, dword [esp]
push edi
mov edi, esp
add edi, 4
add edi, 4
xchg dword [esp], edi
pop esp
jmp 0x1077dad
mov dword [esp], 0x6bd774fa
inc dword [esp]
jmp 0x1077d54
mov ecx, ebx
jmp 0x1078f1e
push esp
jmp 0x107bba4
add dword [esp], 4
pop ebp
add ebp, 4
add ebp, 4
xchg dword [esp], ebp
pop esp
add esp, 4
cmp dword [ebp + 0x122d2f90], 0
jne 0x1079117
cmp dword [ebp + 0x122d2dbc], 0
je 0x107912c
push eax
mov eax, eax
mov eax, 0x43d
mov dword [ebp + 0x122d30d3], eax
call dword [ebp + 0x122d25dd]
pop eax
push 0x18d79958
mov dword [esp], edi
mov dword [esp], esi
mov dword [esp], eax
mov eax, dword [esp]
jmp 0x107cc95
push eax
mov eax, esp
add eax, 4
add eax, 4
xchg dword [esp], eax
pop esp
push ebp
push eax
mov eax, 4
mov ebp, eax
jmp 0x1079c20
mov dword [esp], esp
add dword [esp], 4
push dword [esp]
jmp 0x107baf0
pop esp
push eax
mov eax, esp
jmp 0x107aac8
add edi, 4
add edi, 4
xor edi, dword [esp]
xor dword [esp], edi
jmp 0x107a7fd
pop eax
push ebp
mov ebp, esp
add ebp, 4
sub ebp, 4
xchg dword [esp], ebp
pop esp
mov dword [esp], ebx
mov ebx, esp
add ebx, 4
add ebx, 4
xor ebx, dword [esp]
xor dword [esp], ebx
xor ebx, dword [esp]
pop esp
add esp, 4
push edx
mov edx, esp
add edx, 4
sub edx, 4
xchg dword [esp], edx
jmp 0x107b546
xor edi, 0x7d01b505
mov ebp, edi
pop edi
jmp 0x107c1c7
xchg dword [esp], edx
pop esp
jmp 0x107a8d0
pop eax
add ecx, ebp
mov ebp, dword [esp]
add esp, 4
xchg dword [esp], ecx
mov esp, dword [esp]
cmp dword [ebp + 0x122d2f90], 0
jne 0x1079c44
cmp dword [ebp + 0x122d2dbc], 0
je 0x1079c53
push eax
mov eax, eax
mov eax, 0
call dword [ebp + 0x122d3359]
pop eax
cmp dword [ebp + 0x122d2dbc], 0
je 0x1079c69
push eax
mov eax, 0
call dword [ebp + 0x122d27d2]
pop eax
push 0x532ab5d3
mov dword [esp], eax
jmp 0x107e68d
mov dword [esp], eax
push dword [esp]
push dword [esp]
jmp 0x10795a0
add ecx, 0x7ebb9b78
add ecx, 0x7bd79725
mov eax, dword [esp]
jmp 0x107921a
pop dword [esp]
pop esp
sub esp, 4
mov dword [esp], edx
mov dword [esp], esi
mov dword [esp], eax
push dword [esp]
push dword [esp]
mov eax, dword [esp]
jmp 0x107ce11
pop eax
sub esp, 4
mov dword [esp], esi
jmp 0x107a650
pop edi
add esp, 4
mov eax, edi
push dword [esp]
push dword [esp]
pop edi
push ebp
push ecx
mov dword [esp], esp
jmp 0x10790e7
pop esp
mov dword [esp], edi
push 0x4f1ebab5
jmp 0x1079277
push esp
pop esi
jmp 0x107b0be
mov dword [esp], esi
mov esi, 0x8c10c18d
xor ecx, esi
pop esi
jmp 0x107b6e6
mov dword [esp], 0x7f4a9185
dec dword [esp]
jmp 0x107ebcf
xor edi, dword [esp]
pop esp
push eax
mov eax, esp
add eax, 4
push ecx
mov ecx, 0x7e4d04b7
sub ecx, 0x7e4d04b3
jmp 0x107bceb
sub ebp, 0x2f38ab
add edx, ebp
mov ebp, dword [esp]
push ecx
mov ecx, esp
add ecx, 4
add ecx, 4
xchg dword [esp], ecx
pop esp
add edx, 4
jmp 0x107c388
or eax, 0x7ef7b719
add eax, 0xd5c02584
mov edx, eax
jmp 0x107b204
push eax
push dword [esp + 4]
pop eax
jmp 0x107cdb0
push ebx
mov ebx, 4
add eax, ebx
mov ebx, dword [esp]
add esp, 4
sub eax, 4
push eax
jmp 0x107c40c
mov edi, 0x7ff9d062
shr edi, 7
jmp 0x10799cd
add esi, 4
add esi, 4
xchg dword [esp], esi
jmp 0x10792d4
pop edx
push ebp
push edi
jmp 0x107ae38
add esp, 4
add ebp, ebx
pop ebx
push 0x54317c2
jmp 0x107b403
pop eax
and edx, 0x4f7214fe
xor edx, 0x45320438
add esi, edx
pop edx
xor esi, dword [esp]
xor dword [esp], esi
xor esi, dword [esp]
pop esp
push eax
jmp 0x107e478
push eax
push ebx
mov ebx, 4
mov eax, ebx
pop ebx
mov ebx, eax
mov eax, dword [esp]
jmp 0x107b1f1
sub esp, 4
mov dword [esp], eax
mov eax, 0x7efb42f2
add eax, 0x3afede81
shl eax, 1
push edi
mov edi, 0x7bff21a8
sub eax, edi
pop edi
shl eax, 6
sub esp, 4
mov dword [esp], edx
mov edx, 0xfd484f84
xor eax, edx
pop edx
push esi
jmp 0x107e497
mov dword [esp], edi
jmp 0x107c04d
pop esp
mov dword [esp], eax
jmp 0x107dd5a
sub esi, 0x2e07f4ae
sub esi, ecx
add esi, 0x2e07f4ae
jmp 0x107b9c9
push 0x5d449591
mov dword [esp], ecx
mov ecx, esp
jmp 0x107b366
pop ecx
shr esi, 7
sub esi, 0x3da71777
shr esi, 1
xor esi, 0x612f6959
add ecx, esi
pop esi
push edx
push ecx
push 0x7fbdb565
pop ecx
xor ecx, 0x7fbdb561
jmp 0x107c800
pop edi
add esp, 4
jmp 0x1079465
push dword [esp]
push dword [esp]
pop eax
push ecx
push esp
pop ecx
add ecx, 4
jmp 0x107bea6
push edx
mov edx, 0x7d5f1452
add ebx, edx
pop edx
mov eax, ebx
pop ebx
cmp dword [ebp + 0x122d2f90], 0
jne 0x107bca8
cmp dword [ebp + 0x122d2dbc], 0
je 0x107bcb7
push eax
mov eax, eax
mov eax, 0
call dword [ebp + 0x122d3999]
pop eax
push ebx
mov dword [esp], edi
mov dword [esp], esi
push esp
pop esi
jmp 0x107c476
sub eax, ecx
pop ecx
jmp 0x107c22b
sub esi, 0x6fdf9a55
add esi, 0xb867095c
sub edx, esi
pop esi
sub edx, 0x7fef4b45
add edx, eax
push eax
mov eax, 0x53eb3f61
or eax, 0x7b85639f
sub eax, 0x6bd7d8b0
sub eax, 0x6efaf1f7
jmp 0x107e189
add ecx, 4
push ecx
push dword [esp + 4]
pop ecx
jmp 0x107c587
mov dword [esp], edi
mov edi, 0x67f5a897
add ecx, edi
pop edi
mov edx, dword [esp]
jmp 0x107d806
mov edi, 4
jmp 0x107d2ac
push esi
mov dword [esp], ebp
mov dword [esp], edx
mov edx, 0x73fd09e1
inc edx
or edx, 0x7be5b1ee
add edx, 0x6aef85cb
xor edx, 0x77069b38
add edx, 0xebe36975
sub ebp, edx
push dword [esp]
pop edx
push edx
mov edx, esp
add edx, 4
add edx, 4
jmp 0x1079a04
push eax
push dword [esp + 4]
pop eax
jmp 0x107ce74
pop eax
add edx, 0x69fd45c7
jmp 0x107eaf9
add ecx, eax
jmp 0x107a13e
sub esp, 4
mov dword [esp], edx
push dword [esp + 4]
jmp 0x107c6b8
push dword [esp + 4]
pop eax
pop dword [esp]
jmp 0x107a637
add esi, 4
sub esp, 4
jmp 0x107c6e2
pop dword [esp]
pop esp
push eax
mov dword [esp], ecx
mov dword [esp], edx
mov edx, esp
push edx
mov dword [esp], eax
push edx
mov dword [esp], 4
mov eax, dword [esp]
jmp 0x107c6da
push dword [esp]
jmp 0x107a475
mov edx, dword [esp]
add esp, 4
jmp 0x107a15a
add esp, 4
jmp 0x107c8db
mov dword [esp], ecx
push ecx
mov ecx, esp
add ecx, 4
jmp 0x107e700
dec ebx
xor ebx, 0x7c9b8751
add ebx, 0x4ccc85d6
sub ecx, ebx
pop ebx
add ecx, edx
push 0x7280a892
jmp 0x107c025
mov edx, ecx
pop ecx
push ebx
mov ebx, 0xf7cc4e6
shr ebx, 3
add ebx, 0x65c30cf5
jmp 0x107c742
push edi
mov edi, 0xb2211ab3
mov esi, edi
pop edi
sub esi, 0x3ff30d5f
jmp 0x107eba5
push esi
mov esi, 0x7e731924
jmp 0x107cbe5
inc dword [esp]
add dword [esp], 0x5f1a06ef
mov dword [esp], ecx
mov ecx, 0x4be75900
xor eax, ecx
mov ecx, dword [esp]
push eax
mov eax, esp
add eax, 4
add eax, 4
xchg dword [esp], eax
pop esp
jmp 0x107dc27
shl esi, 7
jmp 0x107d397
push ecx
mov ecx, esp
push esi
mov esi, 0x7ef350bb
push ecx
mov ecx, 0x59cf9981
dec ecx
or ecx, 0x5eafc46c
shl ecx, 7
push 0x73e2a2d8
jmp 0x107a76c
add eax, 4
jmp 0x107a9db
pop dword [esp]
pop esp
add esi, 4
jmp 0x107d5ed
add esp, 4
add esp, 4
push eax
mov dword [esp], 0x6c2746b8
mov dword [esp], ebp
push esp
pop ebp
sub esp, 4
mov dword [esp], ebx
jmp 0x107b32a
pop dword [esp]
mov esp, dword [esp]
mov dword [esp], ebx
push eax
push esi
push 0x7d5f1452
pop esi
push ebx
push ebp
mov ebp, esp
jmp 0x107df89
add ebp, edi
pop edi
xchg dword [esp], ebp
pop esp
cmp dword [ebp + 0x122d2f90], 0
jne 0x107d2c5
cmp dword [ebp + 0x122d2dbc], 0
je 0x107d2d6
push eax
push ebx
mov eax, eax
mov eax, 0
call dword [ebp + 0x122d38f2]
pop ebx
pop eax
push eax
mov eax, esp
add eax, 4
sub eax, 4
push eax
push dword [esp + 4]
mov eax, dword [esp]
add esp, 4
jmp 0x107da7b
shr esi, 7
sub esi, 0x7fed41c9
jmp 0x107d844
push edx
jmp 0x107e300
add esp, 4
push ecx
push dword [esp + 4]
pop ecx
jmp 0x107e589
shl esi, 6
jmp 0x107bdfc
pop dword [esp]
mov esp, dword [esp]
mov dword [esp], eax
push dword [esp]
push dword [esp]
pop eax
add esp, 4
push 0x481a7110
mov dword [esp], eax
mov dword [esp], esi
push esp
mov esi, dword [esp]
push eax
mov eax, esp
add eax, 4
jmp 0x107ccf8
sub dword [esp], 1
xor dword [esp], 0x35b9e45a
sub dword [esp], 0x59789bee
mov dword [esp], ebx
mov dword [esp], 0x28a6ae81
mov dword [esp], eax
jmp 0x107c5a8
cmp dword [ebp + 0x122d2f90], 0
jne 0x107dc39
cmp dword [ebp + 0x122d2dbc], 0
je 0x107dc48
push eax
mov eax, eax
mov eax, 0
call dword [ebp + 0x122d3597]
pop eax
push edx
jmp 0x107df0a
push esp
jmp 0x107b0d2
xor dword [esp], 0x75e52acf
push dword [esp]
push dword [esp]
mov eax, dword [esp]
jmp 0x107e853
mov dword [esp], eax
push dword [esp]
push dword [esp]
jmp 0x107a20c
add ebp, 4
sub ebp, 4
xchg dword [esp], ebp
pop esp
jmp 0x107e0c6
mov dword [esp], edx
mov edx, 0x3f579a61
mov ebx, edx
mov edx, dword [esp]
add esp, 4
add dword [esp + 8], 0x6df24088
add dword [esp + 8], ebx
push eax
mov eax, 0x6df24088
jmp 0x107e64c
xor eax, 0xdef3fe1d
jmp 0x107e48a
push eax
push 0x3fff89a0
pop eax
jmp 0x107a925
push esi
push 0x4c5bdec9
jmp 0x107eb2b
add edx, eax
jmp 0x107c292
mov esi, 0x7bd79725
sub ecx, esi
pop esi
sub ecx, 0x7ebb9b78
jmp 0x107c2eb
pop dword [esp]
mov esp, dword [esp]
sub esp, 4
mov dword [esp], eax
push dword [esp]
pop eax
jmp 0x107b967
sub dword [esp + 0xc], eax
mov eax, dword [esp]
add esp, 4
pop ebx
sub dword [esp + 4], esi
sub dword [esp + 4], 0x3f579a61
pop esi
mov ebx, dword [esp]
add esp, 4
jmp 0x107bc8a
push dword [esp]
pop eax
push edx
jmp 0x107dcfb
sub ecx, 4
xchg dword [esp], ecx
pop esp
mov dword [esp], esi
mov esi, 4
mov ecx, esi
pop esi
sub esi, ecx
jmp 0x107e836
pop ecx
xchg dword [esp], esi
mov esp, dword [esp]
jmp 0x1079dae
pop ebx
pop eax
xor dword [esp + 4], esi
pop esi
pop eax
push ebx
mov ebx, esp
add ebx, 4
sub ebx, 4
xchg dword [esp], ebx
mov esp, dword [esp]
mov dword [esp], ebx
jmp 0x107a7c4
pop eax
add edx, 4
xchg dword [esp], edx
pop esp
jmp 0x107eb39
mov dword [esp], eax
push 0x6639c1b3
pop eax
jmp 0x107c830
mov dword [ebp + 0x122d3bcd], eax
mov dword [ebp + 0x122d2c5a], 0
push edx
mov dword [esp], eax
mov dword [esp], edi
push ebx
jmp 0x107eb7a
mov dword [esp], 0x4a6fb1f8
jmp 0x107daf2
sub esi, eax
push ebx
mov ebx, 0x3ff30d5f
push edi
mov edi, 0x5fe98af6
add esi, 0x78aff8b4
sub esi, edi
sub esi, 0x78aff8b4
pop edi
add esi, ebx
add esi, 0x5fe98af6
jmp 0x107e96f
shl dword [esp], 1
jmp 0x107ca53