Function at 0xa3c936
Capabilities:
Check for vm using instruction vpcext
Contain obfuscated stackstrings
Reference the vmware io port

Disassembly:
push dword [esp + 4]
jmp 0xa3c89f
push dword [esp]
jmp 0xa3c927
pop edi
sub dword [esp + 4], edx
pop edx
mov dword [esp], ecx
mov dword [esp], edi
push edx
mov edx, 0x797ff694
push edx
jmp 0xa3c96a
push eax
mov eax, 0x6f5b8a89
xor eax, 0xe5c1c97
sub eax, 0xf30e470f
jmp 0xa3c992
add ebx, 0x2ff58524
jmp 0xa3c951
push ebx
jmp 0xa3c90c
add esp, 4
push ecx
mov ecx, esp
add ecx, 4
add ecx, 4
xchg dword [esp], ecx
jmp 0xa3c95d
sub dword [esp], 0x7aad4b50
mov ebx, dword [esp]
add esp, 4
sub esp, 4
mov dword [esp], edi
jmp 0xa3c9d1
pop eax
add esp, 4
pop dword [esp]
mov esp, dword [esp]
jmp 0xa3cb83
push ebp
mov ebp, esp
add ebp, 4
push esi
mov esi, 4
add ebp, esi
pop esi
xchg dword [esp], ebp
pop esp
jmp 0xa3c8ec
sub ebx, 0x51bf9e1c
push ecx
jmp 0xa3c8cc
pop esp
push esi
mov esi, 0x7fdf9fec
push edi
jmp 0xa3ca2a
sub dword [esp], 0x3aae53e2
pop edi
push eax
mov eax, 0x3aae53e2
add edi, eax
pop eax
push dword [esp]
pop edx
add esp, 4
xor ecx, edi
mov edi, dword [esp]
add esp, 4
jmp 0xa3c9db
mov ecx, eax
pop eax
add ecx, 0x9fd27b0
sub ebx, ecx
pop ecx
push 0x4bae9c1c
mov dword [esp], edx
mov edx, 0x66cfbd77
add ebx, edx
pop edx
mov edi, dword [esp]
push eax
mov eax, esp
jmp 0xa3ca4f
mov edi, 0x7aad4b50
jmp 0xa3ca0b
sub esp, 4
mov dword [esp], ebx
mov dword [esp], 0x3d7636c5
mov dword [esp], edi
mov edi, edx
mov edx, edi
push dword [esp]
mov edi, dword [esp]
add esp, 4
push eax
push esp
push dword [esp]
mov eax, dword [esp]
jmp 0xa3c8f2
pop ecx
jmp 0xa3cad7
sub ebx, 0x66cfbd77
add ebx, 0x77f676bf
add ebx, 0x51bf9e1c
sub ebx, 0x2ff58524
add ebx, edi
jmp 0xa3c8e1
mov edi, 0x6f3e3481
xor esi, edi
pop edi
and esi, 0x66640806
sub esi, 0x55fe086a
sub esi, 0x69bfec27
push eax
mov eax, 0x40a21377
jmp 0xa3cab1
push eax
mov eax, esp
add eax, 4
sub eax, 4
xchg dword [esp], eax
pop esp
mov dword [esp], ebx
push 4
pop ebx
add eax, ebx
pop ebx
push ecx
mov ecx, 4
add eax, ecx
pop ecx
xor eax, dword [esp]
xor dword [esp], eax
jmp 0xa3ca8b
xor eax, dword [esp]
pop esp
sub esp, 4
mov dword [esp], ecx
mov dword [esp], edi
mov dword [esp], ecx
push ebp
mov ebp, 0x797ff694
xor dword [esp + 4], ebp
pop ebp
push dword [esp]
jmp 0xa3ca05
xor esi, eax
pop eax
add eax, esi
pop esi
add eax, 4
push eax
jmp 0xa3c896
add esp, 4
jmp 0xa3cb13
push eax
jmp 0xa3cb48
mov dword [esp], 0x5f7314e7
push edx
push edi
mov edi, 0x7fef85cf
xor edi, 0x5d87e7dd
mov edx, edi
jmp 0xa3c8b4
jmp 0xa3cf02
push ebx
mov ebx, eax
jmp 0xa3cff9
push ecx
push 0x7fe7e605
mov ecx, dword [esp]
add esp, 4
jmp 0xa3cf90
pop ebx
jmp 0xa3cff2
push 0x3fbf6322
pop ebx
add ebx, 0xc0409ce2
mov eax, ebx
jmp 0xa3cf1b
mov dword [esp], ecx
mov ecx, esp
add ecx, 4
push eax
jmp 0xa3d0a5
pop eax
xchg dword [esp], ecx
pop esp
jmp 0xa3d0ab
dec eax
jmp 0xa3d005
add edx, 4
add edx, 4
xchg dword [esp], edx
pop esp
add eax, 0x6eff86a1
add eax, ebx
jmp 0xa3d00f
push esi
mov dword [esp], edx
mov edx, 0xfce47b57
add ebx, edx
push dword [esp]
mov edx, dword [esp]
jmp 0xa3d041
sub dword [esp + 4], ebp
jmp 0xa3cfda
push ebp
mov ebp, 0xffa28742
add ecx, ebp
pop ebp
mov ebp, ecx
mov ecx, dword [esp]
add esp, 4
neg ebp
inc ebp
push esi
mov esi, 0x3ed97dc9
and ebp, esi
pop esi
neg ebp
neg ebp
xor ebp, 0x6b094ec1
jmp 0xa3cf87
mov dword [esp], ebx
mov ebx, 0x5de6ee01
shr ebx, 7
shl ebx, 1
not ebx
inc ebx
push edx
push eax
push 0x5a7e2357
pop eax
jmp 0xa3cf4f
pop ebp
jmp 0xa3d03b
push 0x24c77c16
mov dword [esp], ebx
mov ebx, 0x6e73e2f2
jmp 0xa3cf71
add ecx, eax
jmp 0xa3cf45
sub esp, 4
mov dword [esp], ebx
push ebp
jmp 0xa3cf0a
and eax, 0x7deb0ba8
jmp 0xa3d065
sub eax, 0x6eff86a1
pop ebx
mov ebx, dword [esp]
add esp, 4
sub esp, 4
mov dword [esp], ebp
push 0x4c61cccb
mov dword [esp], edx
mov edx, ebx
push edx
xor dword [esp], 0x6fb648a6
jmp 0xa3d059
pop eax
jmp 0xa3cfe0
add esp, 4
push edx
mov edx, esp
jmp 0xa3cf55
pop edx
xor ebp, ebx
pop ebx
pop edx
jmp 0xa3d074
pop ebp
sub esp, 4
jmp 0xa3cfbc
sub eax, 0xc997e75e
mov edx, eax
pop eax
sub ebx, edx
jmp 0xa3d04f
push ebp
sub dword [esp], 0x1d552880
push dword [esp]
jmp 0xa3d084
pop ebx
add esp, 4
jmp 0xa3d08d
add ebx, 0x1d552880
push dword [esp]
mov ebp, dword [esp]
add esp, 4
push edi
mov dword [esp], ebp
jmp 0xa3cf34
push ebx
jmp 0xa3cf21
call 0xa3d0b0
push dword [esp]
push dword [esp]
pop eax
add esp, 4
jmp 0xa3d0dc
push ebx
push esi
sub dword [esp], 0x27f70524
jmp 0xa3d0cd
pop ebx
push edx
mov edx, 0x27f70524
add ebx, edx
pop edx
jmp 0xa3d111
push ebp
mov dword [esp], ebx
jmp 0xa3d181
add esi, 4
add esi, 4
jmp 0xa3d123
add ecx, 0xb07f3181
add edx, ecx
pop ecx
pop ecx
mov edi, edx
pop edx
sub eax, edi
push dword [esp]
pop edi
add esp, 4
jmp 0xa3d206
push ebp
mov ebp, ebx
mov edx, ebp
pop ebp
push dword [esp]
pop ebx
push esi
mov esi, esp
jmp 0xa3d0e5
xchg dword [esp], esi
pop esp
pop esi
add ebx, edx
pop edx
add ebx, 4
xor ebx, dword [esp]
xor dword [esp], ebx
xor ebx, dword [esp]
jmp 0xa3d13c
mov esp, dword [esp]
push esi
mov esi, esp
jmp 0xa3d1d6
mov dword [esp], edi
mov dword [esp], esi
push ebx
mov ebx, 0x79f14aa4
dec ebx
jmp 0xa3d1a9
xchg dword [esp], esi
pop esp
mov dword [esp], eax
mov dword [esp], 0x44f7f805
mov dword [esp], edi
sub esp, 4
mov dword [esp], edx
push ecx
jmp 0xa3d1ea
mov dword [esp], ebp
jmp 0xa3d1b5
mov ebx, esp
push edx
push ecx
jmp 0xa3d147
sub edx, esi
sub edx, 0x7af77064
pop esi
sub edx, ecx
push 0x216683a1
mov dword [esp], ecx
mov ecx, 0x72ffcda0
neg ecx
jmp 0xa3d0f6
dec ebx
sub ebx, 0x79f14a9e
jmp 0xa3d1ce
mov dword [esp], ecx
mov ecx, 0x3fdffaee
push esi
mov esi, 0x3d7f63e1
add edx, 0x7af77064
jmp 0xa3d18a
mov esi, ebx
pop ebx
jmp 0xa3d0bf
add esi, 4
push ecx
mov ecx, 4
sub esi, ecx
pop ecx
jmp 0xa3d159
mov dword [esp], 0x7fbffbe5
mov edx, dword [esp]
add esp, 4
shr edx, 1
neg edx
neg edx
sub esp, 4
jmp 0xa3d179