Function at 0x7c9501
Capabilities:
Check for vm using instruction vpcext
Contain obfuscated stackstrings
Reference the vmware io port

Disassembly:
mov eax, dword [esp]
push esi
jmp 0x7c8a84
mov esp, dword [esp]
sub esp, 4
mov dword [esp], ebp
mov dword [esp], ebx
jmp 0x7c8b6f
not esi
jmp 0x7c8b82
xor dword [esp], esi
jmp 0x7c8a3b
mov esp, dword [esp]
mov dword [esp], ebx
sub esp, 4
mov dword [esp], ebx
jmp 0x7c8a70
pop ebx
shr ebx, 8
xor ebx, 0xe087d6
push ecx
mov ecx, 0x67f7ea22
xor ecx, 0x57dab291
jmp 0x7c8a56
shr ecx, 4
add ecx, 0x77fd11a2
sub eax, ecx
pop ecx
push edi
mov edi, 0x73cffc78
add eax, edi
pop edi
jmp 0x7c8b29
mov dword [esp], 0x3e501272
jmp 0x7c8b23
xor esi, dword [esp]
jmp 0x7c8a1f
push esp
pop esi
add esi, 4
push ecx
mov ecx, 0x6fe7180c
shr ecx, 5
neg ecx
not ecx
shl ecx, 2
jmp 0x7c8acb
mov edi, 0xffffffff
sub ebx, edi
pop edi
add ebx, 0xffffffff
sub esp, 4
mov dword [esp], ebx
push esi
push dword [esp + 4]
mov esi, dword [esp]
add esp, 4
pop dword [esp]
jmp 0x7c8a18
xor ecx, 0xdfce2f8
jmp 0x7c8b7b
mov ebx, esp
add ebx, 4
add ebx, 4
xchg dword [esp], ebx
pop esp
push esi
push edi
mov edi, 0x7cff1dc3
shl edi, 8
sub edi, 0x1d4c9794
shl edi, 6
xor edi, 0x744adb04
jmp 0x7c8b06
mov esi, edi
pop edi
add ebx, 0x6dff85cd
add ebx, esi
sub ebx, 0x6dff85cd
pop esi
add ebx, 4
xchg dword [esp], ebx
jmp 0x7c8a04
push esp
jmp 0x7c8b51
add eax, 0x7ffb318d
sub eax, ebx
sub eax, 0x7ffb318d
push edx
mov edx, 0x73cffc78
sub eax, edx
pop edx
add eax, 0x7affe72d
mov ebx, dword [esp]
add esp, 4
jmp 0x7c8b98
pop dword [esp]
push esi
mov esi, 4
add dword [esp + 4], esi
pop esi
mov ebx, dword [esp]
push 0x5e49b904
mov dword [esp], ebx
jmp 0x7c8ad6
push 0x1f7a9b58
pop ebx
push edi
jmp 0x7c8aa1
sub esi, ecx
jmp 0x7c8b8a
xor dword [esp], esi
jmp 0x7c8a7c
pop ecx
jmp 0x7c8b90
xchg dword [esp], esi
jmp 0x7c8a27
push ebp
jmp 0x7c8b9e
mov dword [esp], eax
push dword [esp]
push dword [esp]
pop eax
jmp 0x7c8c64
push ebx
mov ebx, ecx
mov ebp, ebx
pop ebx
mov ebx, ebp
pop ebp
push edi
mov edi, ebx
push edi
pop edx
mov edi, dword [esp]
add esp, 4
mov ebx, dword [esp]
sub esp, 4
mov dword [esp], eax
sub esp, 4
mov dword [esp], esp
add dword [esp], 4
pop eax
add eax, 4
jmp 0x7c8d07
add edx, 4
xchg dword [esp], edx
pop esp
push 0x38244a08
mov dword [esp], edx
jmp 0x7c8d3d
mov eax, dword [esp]
add esp, 4
push ebx
mov ebx, esp
push ebx
mov dword [esp], edx
mov edx, 4
add ebx, edx
mov edx, dword [esp]
add esp, 4
push edi
mov edi, 4
jmp 0x7c8dc0
pop eax
push eax
mov eax, 4
add edx, eax
pop eax
push edx
jmp 0x7c8cdc
mov ebx, 0x66fa8dda
shr ebx, 3
shr ebx, 5
sub ebx, 0x66fa89
sub eax, 0x634da4b5
add eax, ebx
add eax, 0x634da4b5
mov ebx, dword [esp]
add esp, 4
push eax
push dword [esp + 4]
pop eax
pop dword [esp]
pop esp
pop ecx
jmp 0x7c8e0f
push edx
mov edx, esp
jmp 0x7c8d32
sub esp, 4
mov dword [esp], ebx
push 0x2a4295bb
mov dword [esp], ecx
jmp 0x7c8d2a
push edx
mov edx, esp
push ecx
mov dword [esp], eax
jmp 0x7c8c8b
mov eax, 4
add edx, eax
jmp 0x7c8c21
mov ebp, 4
add edx, ebp
pop ebp
push eax
mov eax, 0x1fed2067
or eax, 0x293e8319
push edi
jmp 0x7c8cb8
mov dword [esp], ebp
jmp 0x7c8c97
mov edi, 0x3fffa37b
xor eax, edi
mov edi, dword [esp]
add esp, 4
add edx, 0x293f55d9
add edx, eax
sub edx, 0x293f55d9
pop eax
xor edx, dword [esp]
jmp 0x7c8d77
push dword [esp + 4]
jmp 0x7c8ce5
pop edx
pop dword [esp]
pop esp
push eax
push edx
mov edx, 0x7df653e5
sub dword [esp + 4], edx
jmp 0x7c8cfa
pop edx
pop ebx
add ebx, 0x7df653e5
jmp 0x7c8bf9
push ebx
jmp 0x7c8c31
mov ecx, esp
add ecx, 4
push esi
push 4
pop esi
add ecx, esi
pop esi
xor ecx, dword [esp]
xor dword [esp], ecx
jmp 0x7c8d5e
mov dword [esp], ebp
jmp 0x7c8bad
add edx, 4
jmp 0x7c8be5
push esp
pop edx
push eax
mov eax, esp
add eax, 4
sub eax, 4
xor eax, dword [esp]
jmp 0x7c8d52
xor dword [esp], eax
xor eax, dword [esp]
pop esp
jmp 0x7c8cb0
xor ecx, dword [esp]
pop esp
push ecx
push edx
sub dword [esp], 0x7df78035
pop ecx
add ecx, 0x7df78035
jmp 0x7c8c6c
xor dword [esp], edx
xor edx, dword [esp]
mov esp, dword [esp]
sub esp, 4
mov dword [esp], eax
push eax
mov dword [esp], edi
mov edi, ebx
push edi
mov dword [esp], 0x33d2aeab
mov dword [esp], ebp
mov dword [esp], edi
mov eax, dword [esp]
sub esp, 4
mov dword [esp], edi
mov edi, esp
add edi, 4
add edi, 4
xchg dword [esp], edi
pop esp
mov edi, dword [esp]
jmp 0x7c8c7f
add ebx, 0x6fff7261
jmp 0x7c8dcb
sub ebx, 0x73fe06ff
jmp 0x7c8dd6
sub ebx, edi
add ebx, 0x73fe06ff
sub ebx, 0x6fff7261
mov edi, dword [esp]
add esp, 4
push ebx
push dword [esp + 4]
pop ebx
pop dword [esp]
pop esp
mov dword [esp], ecx
push dword [esp]
push dword [esp]
mov ecx, dword [esp]
add esp, 4
add esp, 4
push ecx
jmp 0x7c8d0d
jmp 0x7c9283
push 0x5f155681
jmp 0x7c92a8
add esp, 4
push ebp
jmp 0x7c9323
pop edx
add edx, 4
sub edx, 4
jmp 0x7c932d
mov dword [esp], eax
push edi
mov edi, 0x79bbe941
xor dword [esp + 4], edi
pop edi
mov eax, dword [esp]
push ebx
mov dword [esp], 0x78f09dc4
mov dword [esp], edx
mov edx, esp
add edx, 4
add edx, 4
xor edx, dword [esp]
xor dword [esp], edx
xor edx, dword [esp]
jmp 0x7c92e9
add dword [esp], 4
jmp 0x7c9299
pop esp
push edx
push edx
jmp 0x7c93e6
add dword [esp + 4], 0x646737f7
sub dword [esp + 4], ebp
sub dword [esp + 4], 0x646737f7
sub dword [esp + 4], 0x6d7ad360
jmp 0x7c9343
xor ebp, dword [esp]
pop esp
mov dword [esp], ebx
push 0x4405d300
jmp 0x7c93a3
push 0x27fd71a5
jmp 0x7c937a
push edx
push dword [esp + 4]
mov edx, dword [esp]
add esp, 4
pop dword [esp]
mov esp, dword [esp]
jmp 0x7c9358
mov ebp, dword [esp]
add esp, 4
push dword [esp]
mov ebx, dword [esp]
add esp, 4
push esi
jmp 0x7c93b8
mov dword [esp], esi
mov esi, 0x613aa9b3
shr esi, 4
sub esi, 0x2d3f223d
xor esi, 0xa16f611f
xor eax, esi
push dword [esp]
pop esi
jmp 0x7c928d
mov dword [esp], eax
mov dword [esp], 0x35969bd0
mov dword [esp], esp
add dword [esp], 4
pop ebp
add ebp, 4
sub ebp, 4
xor ebp, dword [esp]
xor dword [esp], ebp
jmp 0x7c9312
mov dword [esp], ebp
mov ebp, 0x2fdf5c73
add dword [esp + 4], 0x6d7ad360
jmp 0x7c92f1
mov dword [esp], edx
mov edx, esp
add edx, 4
jmp 0x7c93c8
add edx, 4
xor edx, dword [esp]
xor dword [esp], edx
xor edx, dword [esp]
pop esp
push ebp
mov ebp, 0x2fdf5c73
add ebx, ebp
pop ebp
jmp 0x7c93ef
push esp
pop dword [esp]
jmp 0x7c92dd
call 0x7c93f4
push dword [esp]
push dword [esp]
pop eax
push ebp
mov dword [esp], esi
mov dword [esp], eax
jmp 0x7c9407
mov eax, esp
push 0xfcd8f54
mov dword [esp], ecx
mov ecx, 0x7bbf3260
jmp 0x7c94e2
pop edx
add edx, 4
add edx, 4
jmp 0x7c94f7
push esp
pop edi
add edi, 4
sub edi, 4
xchg dword [esp], edi
pop esp
mov dword [esp], edx
push esp
mov edx, dword [esp]
push edi
mov edi, esp
add edi, 4
add edi, 4
jmp 0x7c9534
mov dword [esp], edi
jmp 0x7c945c
mov edi, 0x6fd56ae1
shl edi, 3
shl edi, 5
xor edi, 0x774e9895
shr edi, 3
xor edi, 0x69fb8099
sub ebp, edi
pop edi
add ebp, edx
add ebp, 0x7dbf0fab
pop edx
xchg dword [esp], ebp
pop esp
push eax
mov eax, ebx
mov ecx, eax
pop eax
mov ebx, dword [esp]
push edx
push esp
jmp 0x7c941b
pop esp
push edi
jmp 0x7c942d
push edx
push dword [esp + 4]
jmp 0x7c94a7
mov edx, dword [esp]
add esp, 4
pop dword [esp]
mov esp, dword [esp]
push edi
mov dword [esp], ecx
push ebx
push ecx
mov dword [esp], 0x34e
mov ebx, dword [esp]
push 0x657b4f83
mov dword [esp], ebp
mov ebp, esp
add ebp, 4
push edx
mov edx, 4
push esi
jmp 0x7c9454
add ecx, 0x579b2223
add ecx, 0x2ca5ab81
add eax, ecx
pop ecx
push ebx
jmp 0x7c951e
xchg dword [esp], edx
pop esp
sub eax, ecx
push dword [esp]
pop ecx
push ebp
mov ebp, esp
add ebp, 4
add ebp, 4
xor ebp, dword [esp]
xor dword [esp], ebp
xor ebp, dword [esp]
jmp 0x7c952e
mov ebx, 4
add eax, ebx
pop ebx
xchg dword [esp], eax
jmp 0x7c9496
pop esp
jmp 0x7c9550
xchg dword [esp], edi
pop esp
jmp 0x7c953d
add edx, 4
jmp 0x7c9548
add edx, 4
jmp 0x7c949d
push eax
push 0x6c2cc0ae
jmp 0x7c95b1
sub eax, esi
add eax, 0x7cbb6620
jmp 0x7c9567
mov esi, dword [esp]
add esp, 4
xor dword [esp + 4], eax
push dword [esp]
pop eax
add esp, 4
pop edx
push ecx
mov dword [esp], eax
mov eax, 0x5c9f1ce7
xor edx, eax
mov eax, dword [esp]
add esp, 4
jmp 0x7c9634
add esp, 4
push esi
mov esi, 0x3cfdf805
xor eax, esi
mov esi, dword [esp]
add esp, 4
push edi
mov edi, ebx
jmp 0x7c9639
mov dword [esp], eax
mov eax, esp
jmp 0x7c963f
mov ecx, dword [esp]
jmp 0x7c95c3
add esp, 4
push dword [esp]
pop edi
push ecx
mov dword [esp], 0x4fdbd41e
add dword [esp], 0xd8c4bd83
mov dword [esp], edx
push esp
jmp 0x7c96df
mov ebp, 0x2cf64f6f
sub ebx, ebp
pop ebp
sub ebx, ebp
jmp 0x7c978d
sub edi, 0xe25c692a
jmp 0x7c964a
sub esi, eax
sub esi, 0x7f9c4608
jmp 0x7c97f3
add dword [esp], 0x17f7fdd2
push dword [esp]
pop ebx
add esp, 4
jmp 0x7c96ae
shr ebp, 5
inc ebp
add ebp, 0xffcf822b
push edi
mov edi, 0x5e3378c3
jmp 0x7c95f4
jmp 0x7c9805
push edi
jmp 0x7c960c
push esi
mov esi, 4
jmp 0x7c9690
sub edx, edi
pop edi
add edx, ebp
add edx, 0x7bd70f99
pop ebp
add edx, 4
xor edx, dword [esp]
xor dword [esp], edx
xor edx, dword [esp]
pop esp
push 0x24aa8e00
mov dword [esp], esi
push esp
pop esi
add esi, 4
sub esi, 4
xor esi, dword [esp]
xor dword [esp], esi
xor esi, dword [esp]
mov esp, dword [esp]
mov dword [esp], ebp
mov dword [esp], ebx
jmp 0x7c96f1
add eax, esi
pop esi
sub eax, 4
push 0x5cb3f7b8
jmp 0x7c973b
xor ebp, 0x4826f903
mov esi, ebp
pop ebp
jmp 0x7c971e
push eax
mov dword [esp], ecx
push eax
mov eax, 0x37fb80d0
shr eax, 4
shr eax, 5
shl eax, 1
and eax, 0x4cf90ed0
add eax, 0x17c6f352
jmp 0x7c9729
shr ebp, 6
or ebp, 0x33d3186a
inc ebp
jmp 0x7c96a0
pop edx
push ebp
mov ebp, 0x7ffcde2f
sub ebp, 0x79ed2326
jmp 0x7c961f
push ecx
add dword [esp], 0x7bf3280d
pop ebx
push edx
mov dword [esp], ebp
mov ebp, 0x7877b547
shr ebp, 2
dec ebp
jmp 0x7c970c
xor ebp, 0x65eec55d
add ebx, 0x1efb385d
push ebp
jmp 0x7c95e5
push eax
mov eax, 0x47009d69
jmp 0x7c9762
mov ecx, eax
mov eax, dword [esp]
add esp, 4
sub ebx, ecx
jmp 0x7c95bb
mov dword [esp], eax
jmp 0x7c9743
push dword [esp + 4]
pop eax
pop dword [esp]
mov esp, dword [esp]
mov dword [esp], edx
push edi
mov dword [esp], esi
push ebp
mov ebp, 0x3ddeece1
not ebp
jmp 0x7c96d0
mov edx, eax
mov eax, dword [esp]
add esp, 4
xor edx, esi
mov esi, dword [esp]
add esp, 4
jmp 0x7c977a
xor dword [esp + 4], edx
push dword [esp]
pop edx
add esp, 4
mov eax, dword [esp]
jmp 0x7c9595
add ebx, 0x2cf64f6f
push edi
mov edi, 0x1efb385d
sub ebx, edi
pop edi
push dword [esp]
pop ebp
add esp, 4
mov ecx, ebx
push dword [esp]
pop ebx
add esp, 4
push esi
mov dword [esp], edx
jmp 0x7c97e6
push eax
mov dword [esp], esi
push eax
push 0x7fedc512
pop eax
mov esi, 0xffe1aa00
add esi, 0x7f9c4608
jmp 0x7c95ff
add esp, 4
mov eax, 0xdc9301d5
push ebp
push 0x7cbb6620
jmp 0x7c97fc
push 0x3bdc7f41
mov dword [esp], eax
jmp 0x7c97b8
push dword [esp]
pop eax
jmp 0x7c97d3
pop ebp
sub eax, ebp
pop ebp
jmp 0x7c955b
jmp 0x7c9bfb
push edx
mov dword [esp], 0x2e957bc4
mov dword [esp], edx
mov edx, esp
jmp 0x7c9c47
sub ebx, 0x743a98f0
jmp 0x7c9c57
mov ecx, esp
jmp 0x7c9c6a
push dword [esp]
pop eax
push eax
mov dword [esp], ecx
jmp 0x7c9c25
sub esp, 4
mov dword [esp], ecx
jmp 0x7c9c2c
add edx, 4
jmp 0x7c9cb2
add ecx, ebx
jmp 0x7c9cc5
push edi
mov edi, 4
sub ecx, 0x7b153a10
sub ecx, 0x3fffd169
add ecx, edi
add ecx, 0x3fffd169
push edx
mov dword [esp], 0x6f2fae00
mov dword [esp], ebp
mov dword [esp], ebx
mov ebx, 0x75ef4fd4
neg ebx
inc ebx
shl ebx, 8
neg ebx
jmp 0x7c9c0d
sub edx, 4
xchg dword [esp], edx
mov esp, dword [esp]
mov dword [esp], ecx
mov ecx, eax
jmp 0x7c9c39