Function at 0x8a4de8
Capabilities:
Check for vm using instruction vpcext
Contain obfuscated stackstrings
Reference the vmware io port

Disassembly:
sub edx, 0x21427167
jmp 0x8a475b
pop eax
jmp 0x8a4fdd
mov dword [esp], esi
jmp 0x8a4af7
mov dword [esp], edx
push 4
mov edx, dword [esp]
add esp, 4
jmp 0x8a4803
add ecx, 0x1c0a618e
add ecx, edi
sub esp, 4
mov dword [esp], eax
mov eax, 0x1c0a618e
sub ecx, 0x536f6ddb
jmp 0x8a48f3
pop edi
add edi, 0x27b83cda
and edi, 0x62070e6b
jmp 0x8a500c
push 0x6eb4
mov dword [esp], edx
push 0x74994a8e
mov edx, dword [esp]
add esp, 4
jmp 0x8a4f1b
push esi
mov esi, 0x2091e96
shl esi, 1
neg esi
add esi, 0x2def55b3
sub edi, esi
mov esi, dword [esp]
add esp, 4
jmp 0x8a4908
push dword [esp]
pop ecx
push ecx
jmp 0x8a47b2
push 0x781d
mov dword [esp], ebx
jmp 0x8a4be8
mov ecx, esp
push ebx
mov ebx, 0x3e081b5a
add ebx, 0x2f753c5a
dec ebx
shl ebx, 6
jmp 0x8a4604
add edx, 0x62b01daf
pop ebx
push eax
push edx
push esi
push 0x58bb5884
pop esi
mov edx, esi
pop esi
push ebx
mov ebx, 0x19a41886
sub edx, ebx
jmp 0x8a47a6
add ebx, 0x37be2b43
jmp 0x8a4b8b
not dword [esp]
pop ecx
inc ecx
jmp 0x8a4700
mov ecx, eax
mov eax, dword [esp]
add esp, 4
jmp 0x8a47a1
pop edi
add edx, 0x3ccf73ed
add edx, 0x705f029b
add edx, 0x5431153a
inc edx
add edx, 0x13fa3ecd
jmp 0x8a4e03
mov edx, dword [esp]
add esp, 4
jmp 0x8a470b
pop eax
add ecx, edx
sub ecx, 0x57880298
pop edx
pop eax
jmp 0x8a4695
mov esi, ebx
pop ebx
inc esi
push ebx
mov ebx, 0xd14e16c0
sub esi, ebx
pop ebx
mov edi, esi
mov esi, dword [esp]
add esp, 4
add ecx, 0x4cda5ba1
jmp 0x8a4536
sub ecx, 0x4cda5ba1
pop edi
push 0x3215
mov dword [esp], edx
jmp 0x8a4dcd
pop ebp
add edi, 0x1ed924fe
sub edi, ebx
push ebp
mov ebp, 0x7b5a13af
shl ebp, 7
sub ebp, 0x72f558c4
inc ebp
jmp 0x8a4920
mov eax, esi
pop esi
pop edx
sub esp, 4
mov dword [esp], eax
mov dword [esp], ecx
push 0x37243cc2
jmp 0x8a4e2b
pop esi
add ecx, eax
jmp 0x8a4662
sub edx, 0x5fa22d32
push ecx
mov dword [esp], esi
jmp 0x8a4cdb
push ebp
mov ebp, 0x19b0637f
jmp 0x8a47cd
add ecx, 0x6c6002cc
jmp 0x8a48b6
and eax, 0x273665f5
dec eax
push ecx
jmp 0x8a4575
add edi, 0x4bdb23db
push dword [esp]
mov ecx, dword [esp]
add esp, 4
push edx
mov edx, esp
push ecx
mov ecx, 0x3e70ea9
shl ecx, 7
and ecx, 0x72484ee8
add ecx, 0x4fa1631f
not ecx
inc ecx
push edx
push ecx
mov ecx, 0x3cc47094
mov edx, 0x1159281d
xor edx, 0x95841f12
add edx, ecx
pop ecx
jmp 0x8a4f0d
add edx, ecx
add edx, 0x21427167
jmp 0x8a4ab4
add esp, 4
xor eax, dword [esp]
xor dword [esp], eax
xor eax, dword [esp]
mov esp, dword [esp]
push dword [edi]
push dword [esp]
jmp 0x8a45aa
add esp, 4
push eax
push edi
jmp 0x8a4b44
jmp 0x8a504d
pop ebx
jmp 0x8a4efc
pop eax
jmp 0x8a4d6b
push esp
pop ecx
add ecx, 4
jmp 0x8a4a35
sub edi, 0x36af7090
mov edx, dword [esp]
jmp 0x8a4b0b
add ecx, ebp
pop ebp
sub ecx, eax
sub ecx, 0x19b0637f
push dword [esp]
mov eax, dword [esp]
push esi
mov esi, esp
add esi, 4
add esi, 4
jmp 0x8a4853
add ecx, 0x489a7a2e
add ecx, 0x18395722
jmp 0x8a49f0
sub ecx, 0x1b3e0671
add ecx, edx
add ecx, 0x1b3e0671
mov edx, dword [esp]
jmp 0x8a4c8e
shl ecx, 4
not ecx
xor ecx, 0xcb05de00
mov ebx, ecx
mov ecx, dword [esp]
add esp, 4
mov esi, ebx
pop ebx
sub edx, esi
pop esi
push edx
xchg dword [esp], eax
not eax
jmp 0x8a48c3
xor eax, 0x48161ef7
mov edi, dword [esp]
sub esp, 4
mov dword [esp], ecx
jmp 0x8a45cd
xchg dword [esp], esi
pop esp
sub esp, 4
mov dword [esp], edx
mov edx, esp
push esi
mov esi, 4
add edx, esi
pop esi
add edx, 4
jmp 0x8a4997
sub edi, 0x4bdb23db
sub edi, ecx
jmp 0x8a4717
xchg dword [esp], eax
pop edx
push 0x75ad
mov dword [esp], eax
mov dword [esp], ebx
push ebp
mov ebp, 0x9301ce1
sub ebp, 0x1947157d
mov ebx, ebp
jmp 0x8a494b
mov eax, dword [esp]
add esp, 4
jmp 0x8a4840
sub ecx, eax
push edx
mov edx, 0x13e32a83
jmp 0x8a4df6
pop edx
sub esi, ebx
jmp 0x8a4eec
add edi, ebp
add edi, 0x29dd1887
mov ebp, dword [esp]
add esp, 4
add eax, edi
mov edi, dword [esp]
jmp 0x8a477e
add ebp, 0xe4c4a641
sub edi, ebp
pop ebp
sub edi, 0x7c36160c
add edi, 0x47d323e3
sub edi, 0x9e62cfc
mov ebx, dword [esp]
push eax
push esp
pop eax
add eax, 4
jmp 0x8a4b65
mov ebp, dword [esp]
add esp, 4
sub edx, 0x62b01daf
sub edx, 0x44381645
add edx, ebx
add edx, 0x44381645
jmp 0x8a45e4
xor eax, 0x2fa65e39
xor ecx, eax
mov eax, dword [esp]
jmp 0x8a4797
xchg dword [esp], edx
mov esp, dword [esp]
push eax
mov eax, esp
add eax, 4
sub eax, 4
xchg dword [esp], eax
pop esp
mov dword [esp], edi
push 0x1820
mov dword [esp], esi
push ebx
push 0x6db30cac
pop ebx
inc ebx
xor ebx, 0x7d6965d4
jmp 0x8a4672
pop edx
jmp 0x8a5023
push 0x2ffc1321
jmp 0x8a4563
sub ecx, eax
sub ecx, 0x18395722
sub ecx, 0x489a7a2e
push 0x2c65
jmp 0x8a44f3
add esi, 0x3fbb459f
sub esi, 0x3d8908a2
pop eax
mov ecx, esi
mov esi, dword [esp]
add esp, 4
push 0x35163826
mov edx, dword [esp]
add esp, 4
add edx, 0xffffffff
shr edx, 1
jmp 0x8a46e6
push 0x7fde
mov dword [esp], ecx
jmp 0x8a4520
add edi, 0x4ae43617
add edi, esi
sub edi, 0x4ae43617
mov esi, dword [esp]
jmp 0x8a4e5d
mov dword [esp], esp
add dword [esp], 4
pop edi
add edi, 4
push edx
jmp 0x8a4caa
push edx
jmp 0x8a4f99
sub edx, 0x67d5337e
mov ecx, dword [esp]
add esp, 4
push ecx
mov dword [esp], eax
mov eax, 4
sub edx, 0x454c4d36
add edx, eax
add edx, 0x454c4d36
pop eax
push edx
push dword [esp + 4]
pop edx
pop dword [esp]
pop esp
sub esp, 4
jmp 0x8a4c30
mov dword [esp], ebp
mov ebp, ecx
mov eax, ebp
pop ebp
push dword [esp]
pop ecx
add esp, 4
jmp 0x8a4e92
add esp, 4
push ebp
mov ebp, 0x7c36160c
add edi, ebp
jmp 0x8a46a9
sub eax, 1
jne 0x8a478d
sti
jmp 0x8a4c0f
push 0x375f375b
mov edi, dword [esp]
add esp, 4
sub edi, 0xf8d80129
push edi
xor dword [esp], 0x48161ef7
jmp 0x8a48e5
add eax, 4
xchg dword [esp], eax
pop esp
jmp 0x8a4b32
mov esi, 0x1a365ec4
neg esi
xor esi, 0xe5c9a138
jmp 0x8a4a68
sub ebx, 0x2390c1b1
dec ebx
neg ebx
or ebx, 0x8130744
neg ebx
jmp 0x8a4bf6
push ebx
mov ebx, 0x13837c94
add ebx, 0x14056efe
xor ebx, 0x15ee9a10
xor ecx, ebx
pop ebx
sub ecx, 0xe617c666
sub eax, ecx
mov ecx, dword [esp]
add esp, 4
jmp 0x8a4619
mov dword [esp], ebp
push eax
mov eax, 0x6530588
jmp 0x8a4c26
shl ebx, 8
xor ebx, 0x80501104
add ecx, ebx
pop ebx
jmp 0x8a4c66
push ebx
mov dword [esp], esi
mov esi, 0x402d010a
sub esi, 0xd69bb9a5
sub esi, 1
jmp 0x8a45c0
or eax, 0x2eab0649
jmp 0x8a4cb2
mov dword [esp], ebx
push esi
mov dword [esp], ebp
mov ebp, 0x681e1094
shl ebp, 5
sub ebp, 0x3c2127f
mov ebx, ebp
pop ebp
add edi, 0x9e62cfc
push edx
mov edx, esp
add edx, 4
sub edx, 4
xchg dword [esp], edx
pop esp
mov dword [esp], esi
jmp 0x8a5038
add ecx, 4
xchg dword [esp], ecx
jmp 0x8a4c88
pop esp
jmp 0x8a46f5
add esp, 4
xchg dword [esp], ecx
pop esp
push edi
push 0x15ae
jmp 0x8a4a7e
mov dword [esp], esi
jmp 0x8a4b73
push ebp
mov ebp, 0xf405bd3
xor ebp, 0xb6a8905
sub eax, ebp
pop ebp
mov ebp, eax
jmp 0x8a47ac
push 0x5c8c
mov dword [esp], ebx
push ecx
mov ecx, 0x21cb05de
shl ecx, 4
jmp 0x8a4819
pop edx
add edx, 0x67d5337e
jmp 0x8a44e2
and esi, ebp
mov ebp, dword [esp]
push ebx
mov ebx, esp
add ebx, 4
push ebx
mov dword [esp], ebp
mov ebp, 4
add ebx, ebp
pop ebp
xor ebx, dword [esp]
xor dword [esp], ebx
xor ebx, dword [esp]
pop esp
push eax
mov eax, 0x1c7be7a0
add esi, 0x3d8908a2
jmp 0x8a4daf
push ebx
mov ebx, 0xbe47f52
and ebx, 0x84a6034
and ebx, 0x13706907
push edx
mov edx, 0x7b237f8f
inc edx
jmp 0x8a4e10
mov dword [esp], ecx
pop dword [edi]
jmp 0x8a4f86
add edi, 0x448b526a
mov ecx, dword [esp]
push ebp
mov ebp, esp
add ebp, 4
jmp 0x8a4a95
push ebp
mov ebp, 0x7644702d
or edx, ebp
jmp 0x8a4e86
mov ebp, edx
pop edx
mov edi, 0xb2f9d528
jmp 0x8a458d
add edx, 0x5c427188
shr edx, 1
sub edx, 0x3ed200d
xor edx, 0x58bf3de0
add ebx, edx
jmp 0x8a4900
mov ecx, dword [esp]
add esp, 4
push edi
mov edi, 0x61d0d62
xor edi, 0x60d57016
shl edi, 4
add edi, 0xa1397d3
add ecx, edi
pop edi
push ebp
mov ebp, 0x4c4e1e6b
xor ecx, ebp
pop ebp
jmp 0x8a4ef4
add esp, 4
xchg dword [esp], edi
pop esp
push eax
jmp 0x8a4e6d
push edx
mov edx, 0x1a0d4c70
push edx
xor dword [esp], 0x4ab50b60
pop eax
xor eax, 0x4ab50b60
jmp 0x8a4651
pop ebp
add edx, 1
jmp 0x8a4eba
neg eax
jmp 0x8a496d
sub edx, 0x3b65525c
dec edx
not edx
inc edx
add edx, 0x8ff1962e
push eax
push esi
push 0x3b7e38a5
pop esi
neg esi
sub esi, 0x6cf9c4c3
jmp 0x8a4f14
pop ebx
add esi, eax
jmp 0x8a4a08
add ecx, 1
jmp 0x8a4bbd
push edi
mov edi, 0x19aced1c
add edx, 0x19073d42
jmp 0x8a4fa5
add ecx, edx
jmp 0x8a4cf1
mov eax, esi
jmp 0x8a46de
xor edx, 0x66c6b3f
shr edx, 3
jmp 0x8a5019
push 0x5d0a
mov dword [esp], ecx
mov ecx, 0x6c6002c9
push ecx
jmp 0x8a460f
mov edx, 4
add ebp, edx
jmp 0x8a4fb7
add edx, edi
sub edx, 0x19073d42
pop edi
push esi
push edi
mov edi, edx
jmp 0x8a4fd5
pop edx
xor ebp, dword [esp]
xor dword [esp], ebp
xor ebp, dword [esp]
pop esp
xchg dword [esp], edi
mov esp, dword [esp]
push 0x1b81
push dword [esp]
jmp 0x8a44ed
mov esi, edi
pop edi
jmp 0x8a46c7
push 0x1e0b
mov dword [esp], edi
mov dword [esp], eax
push esp
mov eax, dword [esp]
add esp, 4
add eax, 4
push edi
jmp 0x8a4ffa
push 0x5877
mov dword [esp], ebp
push edi
mov dword [esp], edx
push edi
jmp 0x8a49d0
xor edi, 0x75a86e27
mov edx, edi
jmp 0x8a4629
xchg edx, eax
not eax
push edx
push eax
jmp 0x8a49ca
push dword [esp]
pop eax
add esp, 4
xor edx, 0xf1a15bc9
mov ecx, edx
pop edx
jmp 0x8a47f2
mov dword [esp], edx
mov edx, 0x47d323e3
add edi, 0x36af7090
sub edi, edx
jmp 0x8a47bf
jmp 0x8a535e
cmp byte [ebp + 0xac510ee], 0
je 0x8a539d
mov byte [ebp + 0xab02489], 0x53
mov eax, 0x83d7652c
push eax
mov dword [esp], eax
push dword [ebp + 0xab00bd5]
call dword [ebp + 0xab025f8]
mov ebx, eax
lea eax, [ebp + 0xac5112e]
nop
push eax
nop
lea eax, [ebp + 0xac510ee]
nop
push eax
nop
call ebx
cmp dword [ebp + 0xac510c8], 0
je 0x8a53b4
mov dword [ebp + 0xab03b24], 1
mov byte [ebp + 0xab02489], 0x47
mov eax, 0x906d6c8d
nop
push eax
nop
push dword [ebp + 0xab00bd5]
call dword [ebp + 0xab025f8]
call eax
mov edi, eax
cmp byte [edi], 0x22
jne 0x8a53fe
inc edi
mov al, 0x22
scasb al, byte es:[edi]
jne 0x8a53df
cmp byte [edi], 0
je 0x8a5795
inc edi
cmp byte [edi], 0
je 0x8a5795
jmp 0x8a541c
cmp byte [edi], 0
je 0x8a5795
cmp byte [edi], 0x20
jne 0xa74a5416
mov esp, 0x600
add byte [edi - 0x17], al
loop 0x8a5419
invalid
invalid
cmp byte [edi], 0
jne 0x8a542a
jmp 0x8a5795
cmp byte [edi], 0x20
jne 0x8a5439
inc edi
jmp 0x8a542a
cmp byte [edi], 0
jne 0x8a5447
jmp 0x8a5795
call 0x8a5456
jmp 0x8a541c
mov eax, 0
test eax, eax
je 0x8a57ac
mov dword [ebp + 0xab03a8c], 0
cmp byte [ebp + 0xac510ed], 0
je 0x8a57c3
mov dword [ebp + 0xab03b24], 1
mov byte [ebp + 0xab02489], 0x49
mov eax, 0x8c1529e9
push eax
mov dword [esp], eax
push dword [ebp + 0xab00bd5]
call dword [ebp + 0xab025f8]
mov dword [ebp + 0xab0395c], eax
cmp dword [ebp + 0xab015fd], 0
je 0x8a5884
mov byte [ebp + 0xab02489], 0x47
mov eax, 0x83d0b5f3
push eax
mov dword [esp], eax
push dword [ebp + 0xab00bd5]
call dword [ebp + 0xab025f8]
mov ebx, eax
push 0x10
lea eax, [ebp + 0xac51336]
nop
push eax
nop
lea eax, [ebp + 0xac5132e]
push eax
mov dword [esp], eax
call ebx
test eax, eax
je 0x8a5884
lea eax, [ebp + 0xac51336]
nop
push eax
nop
call fcn.008a575e
mov dword [ebp + 0xab039f8], eax
push 4
push dword [ebp + 0xab039f8]
call dword [ebp + 0xab0395c]
test eax, eax
jne 0x8a587a
mov eax, dword [ebp + 0xab039f8]
cmp dword [eax], 0x9a761b13
je 0x8a5875
mov dword [ebp + 0xab039f8], 0
jmp 0x8a5884
mov dword [ebp + 0xab039f8], 0
mov ecx, eax
jmp 0x8a588c
jmp 0x8a5e8b
mov ecx, ebx
jmp 0x8a60a0
jmp 0x8a6188
mov ecx, 0x37d0
call 0x8a6192
pop eax
add eax, 0xe
mov dword [eax], ecx
jmp 0x8a619f
jmp 0x8a9974
jmp 0x8aaa75
push ecx
push esp
pop ecx
add ecx, 4
jmp 0x8af217
push ebp
mov ebp, 4
sub ecx, ebp
mov ebp, dword [esp]
add esp, 4
xor ecx, dword [esp]
xor dword [esp], ecx
jmp 0x8acf7d