Function at 0x7c8aeb
Capabilities:
Check for vm using instruction vpcext
Contain obfuscated stackstrings
Reference the vmware io port

Disassembly:
push dword [esp]
push dword [esp]
pop eax
sub esp, 4
jmp 0x7c6905
mov dword [esp], esi
push eax
mov eax, 0x79880aa4
shr eax, 4
add eax, 0x78645c67
jmp 0x7c6961
mov ecx, eax
mov eax, dword [esp]
add esp, 4
push ecx
not dword [esp]
pop ecx
sub ecx, 0x8012684d
add esi, ecx
pop ecx
add esi, 4
xchg dword [esp], esi
mov esp, dword [esp]
add esp, 4
push eax
mov eax, esp
add eax, 4
sub eax, 4
jmp 0x7c68e0
push 0x6ed33909
mov dword [esp], ecx
mov ecx, 0x7f5427f5
sub eax, ecx
pop ecx
mov ebp, dword [esp]
push ecx
mov ecx, esp
add ecx, 4
add ecx, 4
xchg dword [esp], ecx
jmp 0x7c686e
add edi, 4
jmp 0x7c68fc
pop esp
sub eax, edi
push ebx
mov ebx, 0x7fdf983c
jmp 0x7c68f1
xor esi, dword [esp]
xor dword [esp], esi
jmp 0x7c6887
xor esi, dword [esp]
jmp 0x7c6918
push eax
mov dword [esp], edi
mov edi, esp
add edi, 4
jmp 0x7c6863
mov esi, dword [esp]
push edx
mov edx, esp
add edx, 4
add edx, 4
xchg dword [esp], edx
pop esp
push ecx
push esi
mov dword [esp], eax
push edi
mov edi, 0x7fb6c5a2
shr edi, 8
xor edi, 0x5ffdf4cc
or edi, 0x3ab5a795
jmp 0x7c68d5
xor edi, 0x4bff3b4f
jmp 0x7c6924
xchg dword [esp], eax
pop esp
jmp 0x7c6930
mov eax, edi
pop edi
jmp 0x7c6802
add eax, ebx
pop ebx
mov edi, dword [esp]
jmp 0x7c688f
xchg dword [esp], edi
pop esp
jmp 0x7c6989
mov dword [esp], esi
mov esi, esp
add esi, 4
sub esi, 4
jmp 0x7c687c
mov esp, dword [esp]
mov dword [esp], esi
push esp
jmp 0x7c68a0
dec edi
add edi, 0x4ba4badd
jmp 0x7c68e9
mov dword [esp], edi
jmp 0x7c6938
mov edi, 0x6ffb8052
or edi, 0x5bfbddd0
add edi, 0x800425b4
push 0x658df034
mov dword [esp], ebp
jmp 0x7c6956
push ecx
push 0x26804b5a
jmp 0x7c67ec
mov esi, eax
pop eax
mov ecx, 0x2317a4c0
xor ecx, esi
pop esi
mov ebp, 0x2334e1ed
xor ebp, ecx
pop ecx
push ebx
mov ebx, 0x7f5427f5
add eax, ebx
jmp 0x7c6981
pop ebx
sub eax, ebp
jmp 0x7c6839
mov ecx, ebx
jmp 0x7c7a90
push esi
mov dword [esp], 0x50472017
mov dword [esp], esp
push ecx
mov ecx, 4
jmp 0x7c80e9
push edx
not dword [esp]
mov edx, dword [esp]
add esp, 4
xor edx, 0x7de78476
push eax
mov eax, 0x4af17bc1
xor eax, 0x7f7d8e00
jmp 0x7cc5d0
add ebx, esi
pop esi
push edi
mov edi, esp
add edi, 4
sub edi, 4
xchg dword [esp], edi
jmp 0x7c91d1
mov edx, dword [esp]
add esp, 4
push 0x51a03771
jmp 0x7c9185
add ebp, 4
xor ebp, dword [esp]
xor dword [esp], ebp
xor ebp, dword [esp]
pop esp
jmp 0x7c806b
add ebx, edx
jmp 0x7c819e
sub ebp, 4
xchg dword [esp], ebp
mov esp, dword [esp]
mov dword [esp], eax
sub dword [esp], 0x79fff087
push dword [esp]
push dword [esp]
pop edx
add esp, 4
push 0xc3bdabf
jmp 0x7cad6c
add edi, ecx
jmp 0x7caacc
sub esp, 4
mov dword [esp], ebp
push esp
pop ebp
add ebp, 4
sub ebp, 4
xchg dword [esp], ebp
mov esp, dword [esp]
mov dword [esp], eax
push esp
pop dword [esp]
add dword [esp], 4
mov edi, dword [esp]
push edx
mov edx, esp
jmp 0x7c8050
xchg dword [esp], edi
jmp 0x7ca36f
add edx, 4
add edx, 4
xchg dword [esp], edx
pop esp
add edi, 4
add edi, 4
jmp 0x7c8009
cmp dword [ebp + 0x122d2f9c], 0
jne 0x7c807d
cmp dword [ebp + 0x122d2e3c], 0
je 0x7c8092
push eax
mov eax, eax
mov eax, 0x43d
mov dword [ebp + 0x122d2b7e], eax
call dword [ebp + 0x122d3943]
pop eax
push eax
mov dword [esp], 0x7ff54fb0
dec dword [esp]
add dword [esp], 0xdec56951
mov dword [esp], edx
push ebx
mov ebx, esp
jmp 0x7c8292
sub dword [esp + 4], 0x6fbd2f90
sub dword [esp + 4], 0x773b860a
jmp 0x7c8a7b
pop edx
add dword [esp + 4], ebx
pop ebx
mov edi, dword [esp]
add esp, 4
push 0x335df77f
mov dword [esp], ecx
mov ecx, 0x6fe59793
shr ecx, 3
jmp 0x7caa53
sub edx, eax
pop eax
not edx
push ecx
mov ecx, 0x27b78b94
add edx, ecx
pop ecx
sub eax, edx
pop edx
push eax
jmp 0x7c9f4f
xor eax, edi
push dword [esp]
pop edi
add esp, 4
cmp dword [ebp + 0x122d2f9c], 0
jne 0x7c8213
cmp dword [ebp + 0x122d2e3c], 0
je 0x7c8228
push eax
mov eax, eax
mov eax, 0x7d0
mov dword [ebp + 0x122d2b7e], eax
call dword [ebp + 0x122d3943]
pop eax
push 0x420165e5
mov dword [esp], edi
mov dword [esp], 0x4779bf0a
xchg dword [esp], ebp
not ebp
xchg dword [esp], ebp
sub dword [esp], 0xffffffff
sub esp, 4
mov dword [esp], ebx
jmp 0x7ccd7d
add ebx, 4
sub ebx, 4
xor ebx, dword [esp]
xor dword [esp], ebx
xor ebx, dword [esp]
mov esp, dword [esp]
jmp 0x7cae84
xor ebx, 0x4251005
add ecx, ebx
jmp 0x7c8ce3
sub eax, 0x33c7917e
mov ecx, eax
pop eax
jmp 0x7c9f6d
add dword [esp + 4], ecx
add dword [esp + 4], 0x773b860a
add dword [esp + 4], 0x6fbd2f90
pop ecx
push dword [esp]
pop eax
sub esp, 4
mov dword [esp], ebx
push esp
pop ebx
add ebx, 4
push ebx
mov dword [esp], esi
push eax
mov dword [esp], 4
jmp 0x7c8b59
mov dword [esp], eax
push dword [esp]
pop eax
push ebp
mov ebp, esp
push ecx
mov ecx, 4
add ebp, ecx
pop ecx
jmp 0x7c7cdd
xor dword [esp + 4], ebp
mov ebp, dword [esp]
push ebp
mov ebp, esp
jmp 0x7c8fe9
sub esi, edi
jmp 0x7cd8f2
pop esi
jmp 0x7c7bcb
pop ebx
add ecx, 4
xor ecx, dword [esp]
jmp 0x7cbe1f
mov dword [esp], 0x7ace6870
xor dword [esp], 0x65fcf16d
mov dword [esp], esp
push ebp
mov ebp, 4
add dword [esp + 4], 0x57cf2fb7
add dword [esp + 4], ebp
jmp 0x7c929b
mov dword [esp], esi
jmp 0x7cac6b
add ebp, 4
add ebp, 4
xchg dword [esp], ebp
pop esp
sub dword [esp], 0x22731af5
mov dword [esp], eax
mov eax, dword [esp]
push ebp
mov dword [esp], eax
jmp 0x7cb8f1
mov ecx, dword [esp]
add esp, 4
add edi, 4
xchg dword [esp], edi
pop esp
push 0x29deadbb
mov dword [esp], edx
jmp 0x7ca46d
mov dword [esp], edx
jmp 0x7cadd4
pop esp
mov dword [esp], ebx
jmp 0x7c92a8
push ebp
mov ebp, 4
mov eax, ebp
pop ebp
sub esi, 0x76ef855b
sub esi, 0x3c7bcc24
sub esi, eax
add esi, 0x3c7bcc24
add esi, 0x76ef855b
jmp 0x7ca8cb
sub dword [esp + 4], 0x57cf2fb7
jmp 0x7c9c64
push dword [esp + 4]
mov ebx, dword [esp]
add esp, 4
pop dword [esp]
jmp 0x7cac2a
push ebx
push edx
mov edx, 0x7fefdbd6
mov ebx, 0xfb5f69f4
jmp 0x7c7d13
and esi, 0x5bcd31f1
xor esi, 0x65324301
not esi
not esi
jmp 0x7cab0f
cmp dword [ebp + 0x122d2f9c], 0
jne 0x7c9754
cmp dword [ebp + 0x122d2e3c], 0
je 0x7c9763
push eax
mov eax, eax
mov eax, 0
call dword [ebp + 0x122d2c34]
pop eax
cmp dword [ebp + 0x122d2e3c], 0
je 0x7c9779
push eax
mov eax, 0
call dword [ebp + 0x122d3c42]
pop eax
push esi
mov dword [esp], 0x7ce77f92
jmp 0x7ca75a
sub esp, 4
jmp 0x7c9ecc
add esp, 4
push ebx
mov ebx, 0x23be81af
push ebx
jmp 0x7ca048
mov dword [esp], eax
jmp 0x7cb543
mov ebp, dword [esp]
push edx
mov edx, esp
add edx, 4
add edx, 4
xchg dword [esp], edx
pop esp
mov ecx, dword [esp]
jmp 0x7c9972
mov dword [esp], ecx
jmp 0x7c8d44
mov dword [esp], eax
push 0x33c79181
pop eax
sub eax, 0xffffffff
jmp 0x7c8928
mov dword [esp], ecx
push esp
jmp 0x7ca190
add edi, ecx
jmp 0x7c9117
neg dword [esp]
pop ebx
neg ebx
dec ebx
shr ebx, 3
push 0x5819f488
mov dword [esp], esi
mov esi, 0x7f77ed00
shl esi, 1
jmp 0x7c956e
pop esi
sub esp, 4
mov dword [esp], ebp
push dword [esp + 4]
pop ebp
pop dword [esp]
mov esp, dword [esp]
push edi
mov edi, esp
push ecx
push 4
pop ecx
sub edi, 0x7e7b17c7
jmp 0x7c7f35
pop ecx
add ecx, 4
sub ecx, 4
push 0xeda4c39
mov dword [esp], ecx
push dword [esp + 4]
pop ecx
pop dword [esp]
pop esp
mov dword [esp], eax
mov dword [esp], 0x1ffa8fab
push edi
mov edi, 0x6fbfe0f2
add dword [esp + 4], edi
pop edi
push ebp
push edi
jmp 0x7cb557
pop esp
push 0x1a59b444
mov dword [esp], edx
push ebp
mov ebp, esp
push ecx
mov ecx, 4
add ebp, ecx
pop ecx
jmp 0x7c7d1a
push 0x78f7d596
pop edx
add edx, 0x74de97c9
jmp 0x7c7ac1
xor dword [esp], 0x387ed774
jmp 0x7cad9e
pop eax
xchg dword [esp], esi
jmp 0x7ccac6
push ebp
push ecx
mov ecx, 0x1dfffb00
mov ebp, ecx
pop ecx
and ecx, ebp
mov ebp, dword [esp]
add esp, 4
shr ecx, 8
add ecx, 0x761be7ae
push ecx
mov dword [esp], esi
mov esi, 0x525616a
add ecx, esi
pop esi
sub edi, ecx
pop ecx
push 0x57634632
jmp 0x7cbfd4
add edi, 0x7e7b17c7
pop ecx
jmp 0x7cc086
xor esi, 0x36e679d5
shr esi, 7
xor esi, 0x7cb70254
jmp 0x7cb803
mov esp, dword [esp]
mov dword [ebp + 0x122d3604], eax
mov dword [ebp + 0x122d377b], 0
push 0xa5d71ed
jmp 0x7c8e02
mov esi, esp
push edx
push 0x596fe1d2
jmp 0x7cb564
mov dword [esp], ebx
mov ebx, esp
add ebx, 4
add ebx, 4
xor ebx, dword [esp]
xor dword [esp], ebx
xor ebx, dword [esp]
pop esp
push esi
push edx
mov edx, 0x7c6d7295
add edx, 0xef65f36b
mov esi, edx
pop edx
not esi
shl esi, 4
jmp 0x7cb5cb
push 0x96075d1
mov dword [esp], edx
mov edx, 0x4457948d
xor dword [esp + 4], edx
jmp 0x7cc0a2
push ebx
push 0x5fd11f9b
jmp 0x7cb209
mov dword [esp], eax
jmp 0x7c7c5c
mov ecx, 4
sub edi, ecx
mov ecx, dword [esp]
push edi
mov dword [esp], ebp
jmp 0x7cc06b
pop ebx
add dword [esp + 4], 0x3f2faa61
sub dword [esp + 4], 0x3e76539f
add dword [esp + 4], ebx
add dword [esp + 4], 0x3e76539f
sub dword [esp + 4], 0x3f2faa61
pop ebx
mov eax, dword [esp]
add esp, 4
push ebx
sub esp, 4
mov dword [esp], eax
mov eax, 0x5fd11f9b
mov ebx, eax
pop eax
sub eax, ebx
jmp 0x7cb341
pop ebx
pop edx
push 0x6ce43063
jmp 0x7c9bca
or edx, eax
pop eax
jmp 0x7ccd1a
mov eax, dword [esp]
push ecx
jmp 0x7cb7ed
mov edi, 0xf041e55e
mov ebp, edi
pop edi
jmp 0x7c8afc
pop edx
xchg edx, esi
inc esi
jmp 0x7cbad3
shl esi, 4
not esi
shr esi, 6
sub esi, 0x894da77c
sub edx, 0x733bcf12
add edx, esi
add edx, 0x733bcf12
mov esi, dword [esp]
add esp, 4
jmp 0x7cb857
sub esp, 4
jmp 0x7c9d24
and ebx, esi
pop esi
jmp 0x7c8612
mov eax, edx
mov edx, dword [esp]
add esp, 4
cmp dword [ebp + 0x122d2f9c], 0
jne 0x7cb871
cmp dword [ebp + 0x122d2e3c], 0
je 0x7cb882
push eax
push ebx
mov eax, eax
mov eax, 0
call dword [ebp + 0x122d2c4c]
pop ebx
pop eax
sub esp, 4
mov dword [esp], edi
sub esp, 4
mov dword [esp], ebx
mov dword [esp], eax
jmp 0x7c92ba
mov eax, esp
add eax, 4
add eax, 4
xchg dword [esp], eax
mov esp, dword [esp]
cmp dword [ebp + 0x122d2f9c], 0
jne 0x7cb913
cmp dword [ebp + 0x122d2e3c], 0
je 0x7cb922
push eax
mov eax, eax
mov eax, 0
call dword [ebp + 0x122d286a]
pop eax
push 0xfa5d53f
mov dword [esp], esi
mov esi, esp
add esi, 4
push 0x1cff2fe1
jmp 0x7cca13
xor edx, esi
xor esi, edx
xor edx, esi
push eax
mov eax, 0x7fff48ff
inc eax
jmp 0x7cc07b
xor dword [esp], ecx
xor ecx, dword [esp]
pop esp
jmp 0x7c9742
mov dword [esp], esi
jmp 0x7cc9af
mov dword [esp], edi
pop eax
mov edi, dword [esp]
push 0x37e622dc
mov dword [esp], edi
mov edi, esp
add edi, 4
add edi, 4
xchg dword [esp], edi
pop esp
push 0x760aedd1
mov dword [esp], edx
sub esp, 4
mov dword [esp], eax
mov dword [esp], 0x6fbf53e0
and dword [esp], 0x7effbe3b
shr dword [esp], 1
jmp 0x7cc45b
mov ebp, esp
add ebp, 4
add ebp, 4
jmp 0x7ccbe9
dec eax
add eax, 0x6f62fc00
jmp 0x7cc9bb
push ecx
jmp 0x7cb055
pop edx
mov dword [esp], ebp
mov dword [esp], eax
push dword [esp]
pop eax
push edi
jmp 0x7c7f55
add dword [esp], 0x7f1a8864
push ebx
mov ebx, 0x56fb2c42
sub dword [esp + 4], ebx
pop ebx
jmp 0x7cc485
mov dword [esp], eax
sub esp, 4
mov dword [esp], edi
mov edi, 0x72fc7df6
push edx
mov edx, 0x71ff7ed4
add dword [esp + 8], edx
pop edx
sub dword [esp + 4], edi
sub dword [esp + 4], 0x71ff7ed4
jmp 0x7cc53c
mov edi, dword [esp]
add esp, 4
mov edx, dword [esp]
add esp, 4
add edx, 0x72fc7df6
mov eax, edx
push dword [esp]
jmp 0x7cc6a3
xor eax, 0x5fbd83b8
shl eax, 6
shr eax, 2
sub eax, 0xa3988469
jmp 0x7c81de
push dword [esp]
pop edx
add esp, 4
jmp 0x7cc84b
push edx
mov edx, esp
push ebp
mov ebp, 0x7f5b7e00
or ebp, 0x377a1341
xor ebp, 0x7f7b7f45
add edx, ebp
pop ebp
add edx, 4
xchg dword [esp], edx
pop esp
cmp dword [ebp + 0x122d2f9c], 0
jne 0x7cc87c
cmp dword [ebp + 0x122d2e3c], 0
je 0x7cc88b
push eax
mov eax, eax
mov eax, 0
call dword [ebp + 0x122d2b46]
pop eax
push eax
sub esp, 4
mov dword [esp], ecx
mov ecx, 0x376857e4
add dword [esp + 4], ecx
pop ecx
push dword [esp]
mov eax, dword [esp]
add esp, 4
push edi
push esp
pop edi
push ecx
jmp 0x7c9967
mov esi, 4
add ebp, esi
jmp 0x7ca07b
shr eax, 2
sub eax, 0xffffffff
add eax, 0x43653049
jmp 0x7cb3d6
mov dword [esp], eax
jmp 0x7c923b
mov esp, dword [esp]
mov dword [esp], eax
mov eax, dword [esp]
push 0x62fe46ab
mov dword [esp], ebp
push esp
pop ebp
push edx
mov edx, 4
jmp 0x7ccb87
add ebp, edx
pop edx
push 0x56cbff73
jmp 0x7cbeb8
xchg dword [esp], ebp
pop esp
xchg dword [esp], edi
mov esp, dword [esp]
mov dword [esp], eax
push ebx
push 0x729f70d6
pop ebx
xor dword [esp + 4], ebx
pop ebx
pop eax
push eax
mov dword [esp], esi
mov dword [esp], edi
push ebp
mov dword [esp], 0x729f70d6
pop edi
jmp 0x7c81f5
shl edx, 5
xor edx, 0xeffc3b64
add esi, edx
pop edx
push edi
push ecx
jmp 0x7cd8d5
mov ecx, 0x6f596c9e
mov edi, 0x6f596c9a
xor edi, ecx
jmp 0x7cd8e6
pop ecx
add esi, 0x69bd73e4
jmp 0x7c8b1c
sub esi, 0x69bd73e4
pop edi
xor esi, dword [esp]
jmp 0x7cd901
xor dword [esp], esi
xor esi, dword [esp]
mov esp, dword [esp]
jmp 0x7c8ae4