Function at 0x402914
Capabilities:
Check for vm using instruction vpcext

Disassembly:
push 0x40d4e4
call sub.MSVBVM60.DLL_ThunRTMain
add byte [eax], al
add byte [eax], al
add byte [eax], al
xor byte [eax], al
add byte [eax], al
inc eax
add byte [eax], al
add byte [eax], al
add byte [eax], al
add ah, dh
inc esi
add edx, dword [ebx]
push ds
sub byte [ecx - 0x6e], al
mov esp, 0x44056f6f
aam 0x6c
add byte [eax], al
add byte [eax], al
add byte [eax], al
add dword [eax], eax
add byte [eax], al
add byte [eax], al
add byte [eax], al
add byte [eax], al
dec ebx
imul ebp, dword [esi + 0x6f], 0x486c617a
insb byte es:[edi], dx
jo 0x4029c1
jb 0x40295e
add byte [eax], al
add byte [eax], al
add byte [eax], al
dec esp
xor dword [eax], eax
or al, 0xe1
sbb dword [edx], ebp
sal dword [ebx - 0x6bbb0576], 0x1e
rol dword [0x6bc7a393], cl
outsb dx, byte [esi]
jle 0x4029c7
aaa
salc
and byte [ecx], cl
inc ebx
mov dl, 4
xor bl, byte [ebp - 0x5f04ddfc]
cmp cl, byte [edi - 0x53]
xor ebx, dword [ecx - 0x48ee309a]
or al, 0
stosb byte es:[edi], al
add byte [eax - 0x2d], ah
xchg ebx, eax
add byte [eax], al
add byte [eax], al
add byte [eax], al
add byte [eax], al
add byte [eax], al
add byte [eax], al
add byte [eax], al
add byte [eax], al
add byte [eax], al
add byte [eax], al
add byte [eax], al
add byte [eax], al
add byte [eax], al
add byte [eax], al
add byte [eax], al
add byte [eax], al
add byte [eax], al
add byte [eax], al
xchg dword [edx - 0x70c20000], ebp
add byte [eax], al
add byte [eax], cl
pop dword ds:[eax]
add byte [eax], al
or byte [eax], al
imul si, word [edx + 0x73], 0x7274
add byte [esi + 0x69], ah
jb 0x402a3f
je 0x402a40
jne 0x402a3e
add byte [0x57001601], cl
insb byte es:[edi], dx
arpl word [edi + 0x6d], bp
and byte gs:[ebx + 0x69], cl
outsb dx, byte [esi]
outsd dx, dword [esi]
jp 0x402a44
insb byte es:[edi], dx
and byte [eax + 0x65], cl
insb byte es:[edi], dx
jo 0x402a4f
jb 0x4029ec
sbb dword [ecx], eax
add byte [edx], al
and dword [eax], edi
or al, byte [eax]
add byte [esp + esi*2], ch
add byte [eax], dh
or al, byte [eax]
add byte [edi + 0x49], al
inc esi
cmp byte [ecx], bh
popal
add esi, eax
add bh, dh
add byte [eax], al
adc byte [ecx], cl
push edx
adc byte [ecx], cl
push ecx
wbinvd
push ecx
wbinvd
dec esi
adc byte [edx], cl
push esp
adc byte [edx], cl
push ebx
adc byte [edx], cl
push ecx
push cs
or dword [eax + 0xe], ecx
or dword [esi + ecx + 9], ecx
dec ebx
invalid
or eax, 0xa0d4a0a
dec ecx
or cl, byte [edx + 0xd]
or cl, byte [ecx + 0xc]
or al, byte [esi + 0xe]
dec edx
or eax, 0xa0c490a
or al, 0xa
inc esi
push cs
or eax, 0x450b0c59
or eax, 0xe0d5a0e
pop ecx
or eax, 0xd0c580d
pop edx
or eax, 0xd0d590e
pop eax
or al, 0xd
push ebx
or eax, 0xe0d570d
push esi
push cs
push cs
pop edx
or eax, 0xe0e550d
pop ecx
or ecx, dword [ebx]
inc esp
or ecx, dword [ebx]
inc ebx
or dword [ebx], ecx
inc eax
or dword [ebx], ecx
aas
or al, 0xe
push edx
or al, 0xe
push ecx
push cs
adc byte [edx + ecx + 0xb], bl
inc ecx
or cl, byte [ebx]
or cl, byte ds:[ebx]
cmp eax, 0xa500d0a
push cs
push eax
or cl, byte [esi]
dec edi
or cl, byte [0x550f0b4f]
or ecx, dword [esi]
push ebx
or cl, byte [0x4c0e0a4d]
or byte [ebx], cl
cmp eax, 0x83a0b08
or edi, dword [ecx]
or al, 0xf
push ebp
or dword [esi], ecx
dec esi
or dword [esi], ecx
dec esp
or byte [0x52100a44], cl
pop es
or edi, dword [ecx]
or edx, dword [eax]
push esi
pop es
or esi, dword [edi]
or byte [esi + edi], cl
or al, 0x12
pop eax
or cl, byte [edi]
dec ebx
pop es
or eax, 0x490f0841
push es
or esi, dword [0x94e1009]
cmovge eax, dword [0x10073b0b]
dec esp
push es
or eax, 0x360b0542
pop es
cmovp eax, dword [0xe07350b]
inc edi
pop es
cmovne eax, dword [esi]
or eax, 0x4910083c
pop es
or eax, 0x3a0c0439
add al, 0xc
cmp dword [0xd05400d], eax
aas
add al, 0xb
xor dword [edx + ecx], eax
das
push es
cmovae eax, dword [edx + ecx]
sub eax, 0x5410e06
or al, 0x37
push es
push cs
cmp eax, 0x4320b05
cmovb eax, dword [esi + ecx]
cmp eax, 0x4300b03
or eax, 0x440f053c
add eax, 0xe054310
add al, 0xc
xor al, byte [esp + ecx]
xor dword [esi], eax
adc byte [ebp + 6], al
invalid