Function at 0x6d62b6
Capabilities:
Check for vm using instruction vpcext
Contain obfuscated stackstrings
Reference the vmware io port

Disassembly:
push dword [esp]
pop eax
push edi
mov dword [esp], edx
mov edx, esp
add edx, 4
jmp 0x6d2684
add esi, 0x3ff6f643
jmp 0x6d25a8
add edi, 1
push ebx
push edi
mov edi, 0x3ffdb7fc
jmp 0x6d26ae
shr edi, 7
shl edi, 3
xor edi, 0x7cc61d98
mov eax, edi
pop edi
jmp 0x6d26f8
sub eax, ebx
mov ebx, dword [esp]
add esp, 4
sub eax, 0x3de687da
sub eax, 0x7faf294d
add eax, 0x6febb48a
add eax, 0x7fff89d7
mov ebp, dword [esp]
jmp 0x6d2664
add esi, 0xbc00ed81
xor eax, esi
pop esi
add eax, 0x379cce72
and edi, eax
pop eax
xor edi, 0x37e38402
add edx, edi
mov edi, dword [esp]
add esp, 4
xchg dword [esp], edx
pop esp
push ebp
push eax
sub esp, 4
mov dword [esp], ebp
mov ebp, 0x573d0325
add ebp, 0xe8b62266
jmp 0x6d270d
pop edx
jmp 0x6d266f
add ecx, 0xffff9632
add eax, 0xfb907de
sub eax, ecx
sub eax, 0xfb907de
pop ecx
sub esp, 4
mov dword [esp], ecx
push 0x3ddc5a1e
pop ecx
shr ecx, 1
neg ecx
xor ecx, 0x8efa667b
sub eax, ecx
jmp 0x6d261d
mov ecx, dword [esp]
add esp, 4
add eax, 0x7faf294d
add eax, 0x3de687da
add eax, 0x77f295b
sub eax, ebp
push ebx
mov ebx, 0x77f295b
jmp 0x6d2581
pop edx
add edx, 0x7b542e2e
xor edx, 0x6df73216
and edx, 0x373f949b
sub edx, 0x742fb6d2
mov ebp, edx
jmp 0x6d25e3
jmp 0x6d271b
add esp, 4
jmp 0x6d265f
sub ebp, 0x53bf6190
add ebp, eax
add ebp, 0x53bf6190
pop eax
push ecx
jmp 0x6d26e8
push edi
mov edi, 0x7ff18701
jmp 0x6d255e
push eax
push edi
push ebp
mov ebp, 0x3e50c200
mov edi, ebp
pop ebp
not edi
sub edi, 0x7fbf8c07
jmp 0x6d26dd
mov eax, esp
jmp 0x6d26b9
mov ebx, edi
mov edi, dword [esp]
push eax
jmp 0x6d26a7
add eax, 4
add eax, 4
xor eax, dword [esp]
xor dword [esp], eax
xor eax, dword [esp]
mov esp, dword [esp]
sub edi, ebx
mov ebx, dword [esp]
add esp, 4
jmp 0x6d268f
xor edi, 0x767758fc
jmp 0x6d256d
mov ecx, 0x7b9fe201
or ecx, 0x7eff33a4
jmp 0x6d25e9
inc eax
push eax
mov dword [esp], esi
mov esi, 0x3c0a8136
xor esi, 0x7fffe067
jmp 0x6d2553
mov eax, ebp
pop ebp
push edx
push 0x1e77befc
jmp 0x6d263f
mov ecx, ebx
jmp 0x6d3822
push edx
push edx
mov edx, 0x696bb4fe
mov dword [esp + 4], edx
pop edx
jmp 0x6d59d3
mov esi, 4
jmp 0x6d52b8
mov dword [esp], edi
mov dword [esp], ecx
mov ecx, 0x4f23614e
xor esi, ecx
pop ecx
push esi
pop edx
mov esi, dword [esp]
add esp, 4
xor eax, edx
mov edx, dword [esp]
push edx
mov edx, esp
add edx, 4
add edx, 4
xchg dword [esp], edx
mov esp, dword [esp]
jmp 0x6d6f64
push edx
jmp 0x6d6dc5
mov edi, 4
jmp 0x6d58a2
pop edx
jmp 0x6d5130
add edi, edx
pop edx
push edx
push ebp
push ebx
mov ebx, 0x5fc780b7
xor ebx, 0x66d7c494
jmp 0x6d4d60
mov ebp, eax
pop eax
xor edx, ebp
pop ebp
mov ecx, edx
jmp 0x6d3cad
mov esi, esp
add esi, 4
add esi, 4
xchg dword [esp], esi
pop esp
cmp dword [ebp + 0x122d2be9], 0
jne 0x6d3f0c
cmp dword [ebp + 0x122d2d79], 0
je 0x6d3f21
push eax
mov eax, eax
mov eax, 0x43d
mov dword [ebp + 0x122d1ff3], eax
call dword [ebp + 0x122d1dad]
pop eax
sub esp, 4
mov dword [esp], edi
jmp 0x6d4e78
add edx, 0x7fbe07b8
neg edx
jmp 0x6d5ec9
add esi, 4
add esi, 4
xchg dword [esp], esi
jmp 0x6d5ca5
sub edx, 0x3ff5b474
mov eax, dword [esp]
add esp, 4
xor edx, dword [esp]
jmp 0x6d4b11
mov eax, dword [esp]
push edx
push esp
pop edx
add edx, 4
push ebp
jmp 0x6d7c0c
xchg dword [esp], edx
mov esp, dword [esp]
pop esi
push ebx
mov ebx, 0x7fff477b
or ebx, 0x7fdec24a
inc ebx
sub ebx, 0x796f6989
or ebx, 0x7e76c793
sub ebx, 0x7ef6dfef
add esi, ebx
pop ebx
sub esp, 4
mov dword [esp], ecx
mov ecx, 4
add esi, ecx
pop ecx
jmp 0x6d7d63
mov dword [esp], edx
mov edx, esp
add edx, 4
push eax
mov eax, 4
add edx, 0x3ff5b474
add edx, eax
jmp 0x6d40c2
push edx
push 0x69b10d36
mov dword [esp], edi
push esp
pop dword [esp]
add dword [esp], 4
push dword [esp]
mov edx, dword [esp]
add esp, 4
add esp, 4
add edx, 4
push esi
jmp 0x6d3898
pop eax
jmp 0x6d5633
sub esp, 4
mov dword [esp], eax
mov edx, dword [esp]
sub esp, 4
jmp 0x6d4448
xor edi, 0xfff3940
push eax
mov dword [esp], edx
jmp 0x6d6469
pop ebp
add ebp, 4
push ecx
mov ecx, 0x6eff85f0
add ecx, 0x79be7db8
jmp 0x6d87d0
xor ecx, dword [esp]
xor dword [esp], ecx
xor ecx, dword [esp]
jmp 0x6d7f14
xchg dword [esp], edx
pop esp
cmp dword [ebp + 0x122d2be9], 0
jne 0x6d4ac9
cmp dword [ebp + 0x122d2d79], 0
je 0x6d4ad8
push eax
mov eax, eax
mov eax, 0
call dword [ebp + 0x122d1ca6]
pop eax
push eax
jmp 0x6d79d7
xor dword [esp], edx
xor edx, dword [esp]
pop esp
push edi
mov edi, esp
add edi, 4
sub edi, 4
xor edi, dword [esp]
xor dword [esp], edi
xor edi, dword [esp]
pop esp
mov dword [esp], edx
mov eax, dword [esp]
add esp, 4
jmp 0x6d536c
push edi
jmp 0x6d7aad
add esp, 4
jmp 0x6d45a6
add ebp, 0x27bf3a8f
jmp 0x6d8477
push eax
xor dword [esp], 0xfff3940
mov edi, dword [esp]
jmp 0x6d4d75
push eax
mov eax, 0x77b5f199
add dword [esp + 8], eax
pop eax
sub dword [esp + 4], 0x5d395f3b
add dword [esp + 4], 0x6a34a65b
add dword [esp + 4], ecx
jmp 0x6d529c
inc edi
inc edi
jmp 0x6d5d0e
sub dword [esp + 4], 0x6a34a65b
jmp 0x6d641f
add edx, esi
pop esi
xor edx, dword [esp]
xor dword [esp], edx
xor edx, dword [esp]
mov esp, dword [esp]
push edx
jmp 0x6d453a
mov edx, dword [esp]
jmp 0x6d5895
sub dword [esp + 4], 0x1fbd6ce3
push dword [esp]
pop ecx
push edx
mov edx, esp
add edx, 4
add edx, 4
jmp 0x6d42a5
mov ebx, dword [esp]
push 0x2ed4c570
mov dword [esp], esi
jmp 0x6d3eeb
xchg dword [esp], ebp
mov esp, dword [esp]
mov dword [esp], eax
mov dword [esp], ebx
jmp 0x6d7030
mov esi, 0x3bdfcaf1
inc esi
shr esi, 5
sub esi, 0x5fbdd580
or esi, 0x7bfb9d94
xor esi, 0x77df1ee8
sub esi, 0x4d3f988f
sub ebx, esi
pop esi
push ebx
xor dword [esp], 0x1eff9fea
pop ecx
push ebx
mov ebx, 0x2f57de0f
or ebx, 0x6df66327
push eax
mov eax, 0x3dfd2ef1
add ebx, 0x7aff7a6c
sub ebx, eax
sub ebx, 0x7aff7a6c
pop eax
add ebx, 0xed04cfac
xor ecx, ebx
pop ebx
pop ebx
add dword [esp + 4], 0x2dff5e21
sub dword [esp + 4], ecx
sub dword [esp + 4], 0x2dff5e21
jmp 0x6d62ad
xor ebp, dword [esp]
xor dword [esp], ebp
xor ebp, dword [esp]
pop esp
mov dword [esp], esi
sub esp, 4
mov dword [esp], eax
jmp 0x6d8a72
push esi
push esp
mov esi, dword [esp]
add esp, 4
jmp 0x6d4086
add edx, edi
pop edi
xor edx, dword [esp]
jmp 0x6d635c
pop ecx
push edi
jmp 0x6d3bb3
mov dword [esp], 0xd8ad186
mov dword [esp], edx
jmp 0x6d6126
mov dword [esp], esp
jmp 0x6d6b0b
add dword [esp], 1
xor dword [esp], 0xad78d86
shr dword [esp], 2
jmp 0x6d7171
mov esp, dword [esp]
jmp 0x6d5d75
and edi, 0x63b9ffc7
xor edi, 0x69df5c24
xor esi, edi
jmp 0x6d6035
cmp dword [ebp + 0x122d2be9], 0
jne 0x6d5d87
cmp dword [ebp + 0x122d2d79], 0
je 0x6d5d96
push eax
mov eax, eax
mov eax, 0
call dword [ebp + 0x122d1c2c]
pop eax
push edx
jmp 0x6d69ba
shl edx, 3
xor edx, 0x843471c4
sub ebp, edx
pop edx
jmp 0x6d5672
not dword [esp]
jmp 0x6d5c1c
pop edi
push 0xd5bb1e
mov dword [esp], esi
pop eax
mov esi, dword [esp]
push eax
mov dword [esp], edx
mov edx, esp
add edx, 4
add edx, 4
jmp 0x6d4ab3
mov edi, 0x1ff79c9c
add edi, 0x7e6bf37a
jmp 0x6d5258
push 0x2fbb6a10
mov edx, dword [esp]
add esp, 4
jmp 0x6d3fa8
push dword [esp]
mov ecx, dword [esp]
add esp, 4
push ebp
mov ebp, esp
push eax
mov eax, 4
add ebp, eax
pop eax
add ebp, 4
jmp 0x6d7f1f
xor dword [esp], edx
xor edx, dword [esp]
pop esp
pop edi
push ecx
push eax
mov dword [esp], esp
add dword [esp], 4
pop ecx
add ecx, 4
sub esp, 4
mov dword [esp], edi
push ecx
push edi
push 0x7f971872
pop edi
push 0x1cce76bd
mov dword [esp], ecx
mov ecx, 0x6d537123
and edi, ecx
pop ecx
xor edi, 0x7f77557d
xor edi, 0x65bba28d
jmp 0x6d72e7
add dword [esp + 4], 0x5d395f3b
push ebx
push edx
jmp 0x6d6601
mov dword [esp], 0x6ebf2fbe
neg dword [esp]
not dword [esp]
sub dword [esp], 0x7f7b2033
inc dword [esp]
add dword [esp], 0x4d1b71ee
jmp 0x6d5fbf
mov edx, 0x15f1b5a9
jmp 0x6d71d9
mov edx, esp
add edx, 4
sub edx, 4
jmp 0x6d3ba5
sub esp, 4
mov dword [esp], ecx
push edx
mov edx, 0x2fd97fff
sub edx, 0x78bb124b
shr edx, 2
push 0x774d6895
mov dword [esp], ebp
jmp 0x6d6ffd
xor dword [esp], 0x3d5d7efb
pop eax
push edx
push esi
push ebp
mov dword [esp], 0x727e1fb5
pop esi
sub esp, 4
jmp 0x6d3aa1
push dword [esp + 4]
mov edx, dword [esp]
add esp, 4
pop dword [esp]
mov esp, dword [esp]
mov dword [esp], eax
mov eax, dword [esp]
jmp 0x6d6e2d
push edi
push esp
pop edi
push edx
mov edx, 4
jmp 0x6d3d4f
sub esp, 4
mov dword [esp], eax
mov dword [esp], 0x51f56711
mov dword [esp], eax
push edi
mov dword [esp], edx
mov dword [esp], 0x1cf3b7c2
mov dword [esp], ebx
push ecx
push esp
pop ecx
add ecx, 4
sub ecx, 4
xor ecx, dword [esp]
xor dword [esp], ecx
xor ecx, dword [esp]
pop esp
mov dword [esp], ecx
push ecx
mov dword [esp], 0x6ff238a9
pop ecx
mov ebx, ecx
pop ecx
push eax
mov eax, 0x7c7d2b66
add dword [esp + 8], eax
pop eax
sub dword [esp + 4], 0x7fa7dbfc
add dword [esp + 4], ebx
add dword [esp + 4], 0x7fa7dbfc
sub dword [esp + 4], 0x7c7d2b66
mov ebx, dword [esp]
add esp, 4
pop eax
push edx
mov edx, 0x6ff238a9
sub eax, edx
pop edx
jmp 0x6d76f1
push eax
mov eax, 0x7a2d8d24
dec eax
not eax
and eax, 0x6eadf2e2
sub eax, 0x1fdfdbb5
and eax, 0x1b972fe1
xor eax, 0x2d479c68
jmp 0x6d3d65
sub esp, 4
mov dword [esp], eax
push dword [esp]
mov ebx, dword [esp]
add esp, 4
add esp, 4
push ebx
jmp 0x6d4534
sub esp, 4
mov dword [esp], esp
push ecx
mov ecx, 4
push edx
mov edx, 0x1fbd6ce3
add dword [esp + 8], edx
pop edx
add dword [esp + 4], ecx
jmp 0x6d55d2
shl dword [esp], 8
jmp 0x6d74c2
add edx, 0x67adf661
sub edx, 0x67ef7668
sub edx, 0x9dfa4409
jmp 0x6d73dc
mov ecx, edi
pop edi
push edx
push edi
mov edi, 0x77dfe7d6
mov edx, edi
pop edi
mov edi, edx
pop edx
xor edi, ecx
push dword [esp]
mov ecx, dword [esp]
push edx
mov edx, esp
add edx, 4
add edx, 4
xchg dword [esp], edx
pop esp
jmp 0x6d7561
mov ebx, edx
pop edx
sub dword [esp + 8], ebx
pop ebx
mov ecx, dword [esp]
add esp, 4
push dword [esp]
mov eax, dword [esp]
add esp, 4
add esp, 4
mov dword [ebp + 0x122d3886], eax
mov dword [ebp + 0x122d1e22], 0
push ebp
push esp
pop ebp
add ebp, 4
jmp 0x6d767d
or dword [esp], 0x3b5dde17
sub dword [esp], 0x480b432d
jmp 0x6d7611
pop ebx
mov edx, ebp
pop ebp
add edi, edx
mov edx, dword [esp]
add esp, 4
xor edi, dword [esp]
xor dword [esp], edi
xor edi, dword [esp]
pop esp
sub esp, 4
mov dword [esp], ebp
push esp
jmp 0x6d479a
add esp, 4
sub ecx, 0x3fa9f9f5
sub ecx, edi
add ecx, 0x3fa9f9f5
pop edi
jmp 0x6d48f1
not dword [esp]
jmp 0x6d7683
push eax
jmp 0x6d58d3
sub esp, 4
mov dword [esp], ebp
jmp 0x6d7aef
cmp dword [ebp + 0x122d2be9], 0
jne 0x6d7703
cmp dword [ebp + 0x122d2d79], 0
je 0x6d7714
push eax
push ebx
mov eax, eax
mov eax, 0
call dword [ebp + 0x122d3a42]
pop ebx
pop eax
push 0x3502cd87
jmp 0x6d85ed
push dword [esp]
push dword [esp]
mov eax, dword [esp]
jmp 0x6d852d
mov edi, 0x7df7b3ed
not edi
push edx
mov edx, 0x1f7bf7b1
or edi, edx
pop edx
or edi, 0x7bf74995
sub edi, 0xf8082f6c
and ebx, edi
pop edi
neg ebx
shr ebx, 7
push edi
jmp 0x6d81fd
mov ebp, 0xb3806f1d
xor dword [esp + 4], ebp
pop ebp
jmp 0x6d7bb8
mov dword [esp], edi
mov eax, dword [esp]
push edx
mov edx, esp
jmp 0x6d7c28
mov ebp, 0x2fb79f6d
neg ebp
inc ebp
xor ebp, 0xd0486090
add edx, ebp
pop ebp
xchg dword [esp], edx
mov esp, dword [esp]
jmp 0x6d44a4
push ecx
mov ecx, 4
add edx, ecx
jmp 0x6d58ad
xchg dword [esp], esi
mov esp, dword [esp]
add esp, 4
sub esp, 4
mov dword [esp], eax
push ecx
push ebx
push 0x5bec06fe
jmp 0x6d82e9
mov esp, dword [esp]
mov dword [esp], eax
jmp 0x6d7f56
pop eax
cmp dword [ebp + 0x122d2be9], 0
jne 0x6d7f69
cmp dword [ebp + 0x122d2d79], 0
je 0x6d7f78
push eax
mov eax, eax
mov eax, 0
call dword [ebp + 0x122d33ec]
pop eax
cmp dword [ebp + 0x122d2d79], 0
je 0x6d7f8e
push eax
mov eax, 0
call dword [ebp + 0x122d1dd1]
pop eax
push edi
jmp 0x6d8432
mov edi, 0x767fbb04
inc edi
not edi
jmp 0x6d829c
shr edi, 2
xor edi, 0x239dce45
sub ebx, 0x6bff40b4
sub ebx, edi
add ebx, 0x6bff40b4
mov edi, dword [esp]
add esp, 4
mov ebp, ebx
jmp 0x6d7500
pop ebx
add ebx, 0x3dd74f3c
push esi
jmp 0x6d5719
mov dword [esp], ebx
mov dword [esp], ebp
push esp
mov ebp, dword [esp]
add esp, 4
add ebp, 4
push ecx
mov ecx, 4
sub ebp, 0x27bf3a8f
sub ebp, ecx
jmp 0x6d4e6d
pop ecx
xchg dword [esp], ebp
pop esp
mov dword [esp], eax
jmp 0x6d6b4a
add esp, 4
push esi
jmp 0x6d7145
mov dword [esp], eax
jmp 0x6d8703
push dword [esp]
jmp 0x6d41bd
not ecx
shl ecx, 5
push ebx
mov ebx, 0x7a1e1d52
shl ebx, 8
sub ebx, 0x7ef78081
jmp 0x6d89b4
xor ebx, 0x88e5a45b
add ecx, ebx
pop ebx
sub ebp, ecx
mov ecx, dword [esp]
jmp 0x6d8a6a
add esp, 4
jmp 0x6d57a4
push ecx
mov dword [esp], eax
jmp 0x6d8b04
add esp, 4
jmp 0x6d8b21
mov eax, 0x6bfecc24
xor dword [esp + 4], eax
mov eax, dword [esp]
jmp 0x6d8aa6
pop esi
push edi
jmp 0x6d6056