Function at 0x7a4f62
Capabilities:
Check for vm using instruction vpcext
Contain obfuscated stackstrings
Reference the vmware io port

Disassembly:
pop eax
sub eax, 0x155
jmp 0x79d1d3
mov eax, eax
call 0x79d1da
pop eax
sub eax, 0x138
jmp 0x79d509
mov eax, eax
call 0x79d510
pop eax
sub eax, 0x178
mov ecx, ebx
jmp 0x79d72b
jmp 0x79d813
mov ecx, 0x37d0
call 0x79d81d
pop eax
add eax, 0xe
mov dword [eax], ecx
jmp 0x79d82a
jmp 0x7a0fff
jmp 0x7a1408
mov eax, 0
test eax, eax
jne 0x7a1494
mov byte [ebp + 0x15d02051], 0x53
mov eax, 0x83d7652c
push eax
mov dword [esp], eax
push dword [ebp + 0x15d011f9]
call dword [ebp + 0x15d0330d]
mov ebx, eax
xchg ebx, eax
push eax
xchg ebx, eax
lea eax, [ebp + 0x15e640a0]
push eax
mov dword [esp], eax
lea eax, [ebp + 0x15e640d2]
push eax
mov dword [esp], eax
call ebx
pop ebx
push eax
mov dword [esp], ebx
lea eax, [ebp + 0x15e64116]
nop
push eax
nop
lea eax, [ebp + 0x15e640e0]
nop
push eax
nop
call ebx
pop ebx
push eax
mov dword [esp], ebx
lea eax, [ebp + 0x15e64134]
nop
push eax
nop
lea eax, [ebp + 0x15e640f5]
nop
push eax
nop
call ebx
pop ebx
lea eax, [ebp + 0x15e64166]
nop
push eax
nop
lea eax, [ebp + 0x15e64104]
push eax
mov dword [esp], eax
call ebx
cmp byte [ebp + 0x15e64198], 0
je 0x7a14d3
mov byte [ebp + 0x15d02051], 0x53
mov eax, 0x83d7652c
push eax
mov dword [esp], eax
push dword [ebp + 0x15d011f9]
call dword [ebp + 0x15d0330d]
mov ebx, eax
lea eax, [ebp + 0x15e641d8]
nop
push eax
nop
lea eax, [ebp + 0x15e64198]
nop
push eax
nop
call ebx
cmp dword [ebp + 0x15e6407a], 0
je 0x7a14ea
mov dword [ebp + 0x15d0357b], 1
mov byte [ebp + 0x15d02051], 0x47
mov eax, 0x906d6c8d
push eax
mov dword [esp], eax
push dword [ebp + 0x15d011f9]
call dword [ebp + 0x15d0330d]
call eax
mov edi, eax
cmp byte [edi], 0x22
jne 0x7a1535
inc edi
mov al, 0x22
scasb al, byte es:[edi]
jne 0x7a1516
cmp byte [edi], 0
je 0x7a18cd
inc edi
cmp byte [edi], 0
je 0x7a18cd
jmp 0x7a1553
cmp byte [edi], 0
je 0x7a18cd
cmp byte [edi], 0x20
jne 0x7a154d
inc edi
jmp 0x7a1553
inc edi
jmp 0x7a1535
cmp byte [edi], 0
jne 0x7a1561
jmp 0x7a18cd
cmp byte [edi], 0x20
jne 0x7a1570
inc edi
jmp 0x7a1561
cmp byte [edi], 0
jne 0x7a157e
jmp 0x7a18cd
call fcn.007a158d
jmp 0x7a1553
mov eax, 0
test eax, eax
je 0x7a18e4
mov dword [ebp + 0x15d03577], 0
cmp byte [ebp + 0x15e6409f], 0
je 0x7a18fb
mov dword [ebp + 0x15d0357b], 1
mov byte [ebp + 0x15d02051], 0x49
mov eax, 0x8c1529e9
nop
push eax
nop
push dword [ebp + 0x15d011f9]
call dword [ebp + 0x15d0330d]
mov dword [ebp + 0x15d0364f], eax
mov byte [ebp + 0x15d02051], 0xf
salc
arpl word [eax], ax
dec edx
not dword [eax - 0x7e]
mov esi, 0xf9b50ce1
adc eax, edx
adc eax, 0x6acc95ff
test byte [eax], al
mov dword [ebp + 0x15d01ca5], eax
cmp dword [ebp + 0x15d016e5], 0
je 0x7a19dd
mov byte [ebp + 0x15d02051], 0x47
mov eax, 0x83d0b5f3
nop
push eax
nop
push dword [ebp + 0x15d011f9]
call dword [ebp - 0x78729df3]
add bl, al
push 0x10
lea eax, [ebp + 0x15e643e0]
nop
push eax
nop
lea eax, [ebp + 0x15e643d8]
push eax
mov dword [esp], eax
call ebx
test eax, eax
je 0x7a19dd
lea eax, [ebp + 0x15e643e0]
push eax
mov dword [esp], eax
call fcn.007a1895
mov dword [ebp + 0x15d0354f], eax
push 4
push dword [ebp + 0x15d0354f]
call dword [ebp + 0x15d0364f]
test eax, eax
jne 0x7a19d3
dec edi
xor eax, 0x95ff15d0
dec edi
rcl byte ss:[0x850fc085]
and dword [eax], eax
add byte [eax], al
mov eax, dword [ebp - 0x402fcab1]
mov dl, 0xff
call [ebx]
jbe 0x7a1958
jl 0x7a19a0
jle 0x7a19c2
add byte [eax], al
invalid
mov dword [ebp + 0x15d0354f], 0
mov ecx, eax
jmp 0x7a2ae4
push esi
push esp
pop dword [esp]
jmp 0x7a39b1
push ecx
dec dword [esp]
pop ecx
xor ecx, 0xeb258444
add ebp, ecx
jmp 0x7a2cf7
pop edi
sub esp, 4
mov dword [esp], eax
mov eax, edi
jmp 0x7a32e5
pop ebx
xchg dword [esp], edi
jmp 0x7a410b
mov edx, 0x7b7356e0
or edx, 0x7fed56ad
not edx
neg edx
shl edx, 1
jmp 0x7a4378
push dword [esp]
pop ebx
push esi
mov esi, esp
add esi, 4
add esi, 4
xchg dword [esp], esi
pop esp
jmp 0x7a45c6
pop ebp
pop dword [esp]
pop esp
mov dword [esp], edx
jmp 0x7a5570
mov ecx, dword [esp]
push ecx
mov ecx, esp
jmp 0x7a36a0
add edx, 4
push ecx
mov ecx, 4
sub edx, ecx
pop ecx
xchg dword [esp], edx
pop esp
mov dword [esp], ebp
push esp
pop ebp
add ebp, 4
sub ebp, 4
push ebp
push dword [esp + 4]
pop ebp
pop dword [esp]
jmp 0x7a2eb5
sub esi, 0x4563b695
jmp 0x7a3647
xor ecx, ebx
pop ebx
jmp 0x7a5089
pop esp
mov dword [esp], ebx
mov ebx, 0x5eac2a09
jmp 0x7a3315
pop esp
mov dword [esp], ecx
jmp 0x7a6c71
push eax
jmp 0x7a529c
sub edi, 0x27be4f37
jmp 0x7a2bbd
add dword [esp + 4], 0x30ef2760
add dword [esp + 4], 0x26b203e7
sub dword [esp + 4], 0x56723f02
sub dword [esp + 4], ebx
add dword [esp + 4], 0x56723f02
sub dword [esp + 4], 0x26b203e7
sub dword [esp + 4], 0x30ef2760
pop ebx
jmp 0x7a46f5
add eax, esi
pop esi
mov ecx, dword [esp]
add esp, 4
add eax, 4
xchg dword [esp], eax
mov esp, dword [esp]
push ebp
mov dword [esp], ebx
jmp 0x7a3ef7
add ecx, 4
jmp 0x7a43bb
push ecx
mov ecx, 0x7ea72e24
dec ecx
push eax
mov eax, 0x5f147d36
or ecx, eax
jmp 0x7a7157
push 0x36db
jmp 0x7a6c0b
mov ebx, eax
pop eax
add eax, ebx
pop ebx
jmp 0x7a498d
pop esi
xchg dword [esp], eax
jmp 0x7a31e0
add dword [esp], 4
push dword [esp]
mov eax, dword [esp]
add esp, 4
push esi
mov esi, esp
add esi, 4
jmp 0x7a62b8
mov edi, ecx
jmp 0x7a62f7
push dword [esp]
mov eax, dword [esp]
jmp 0x7a47be
push esi
mov esi, 4
sub eax, esi
jmp 0x7a396c
mov edx, ebp
jmp 0x7a6b84
push ecx
jmp 0x7a40a5
sub esp, 4
mov dword [esp], esi
mov esi, esp
add esi, 4
jmp 0x7a68f8
push esp
pop ecx
add ecx, 4
push esi
mov esi, 4
sub ecx, 0x6afd0139
jmp 0x7a499a
mov esp, dword [esp]
xor esi, 0x2f2951ea
mov eax, esi
mov esi, dword [esp]
add esp, 4
cmp dword [ebp + 0x15d03527], 0
jne 0x7a4131
cmp dword [ebp + 0x15d0357b], 0
je 0x7a4142
push eax
push ebx
mov eax, eax
mov eax, 0
call dword [ebp + 0x15d01ae7]
pop ebx
pop eax
push 0x610d
mov dword [esp], edi
push esp
mov edi, dword [esp]
push edi
mov edi, esp
add edi, 4
add edi, 4
xchg dword [esp], edi
pop esp
push edx
mov edx, 4
add edi, edx
pop edx
jmp 0x7a4a36
add dword [esp], 0x477876e3
jmp 0x7a703d
pop esi
jmp 0x7a6e05
sub edx, 0xb98c8b7c
or ebp, edx
push dword [esp]
pop edx
add esp, 4
shl ebp, 6
jmp 0x7a5648
add ecx, 4
xchg dword [esp], ecx
pop esp
sub ebp, 4
push ebp
push dword [esp + 4]
jmp 0x7a2cd2
pop esi
jmp 0x7a6717
cmp dword [ebp + 0x15d03527], 0
jne 0x7a45d8
cmp dword [ebp + 0x15d0357b], 0
je 0x7a45e7
push eax
mov eax, eax
mov eax, 0
call dword [ebp + 0x15d03354]
pop eax
cmp dword [ebp + 0x15d0357b], 0
je 0x7a45fd
push eax
mov eax, 0
call dword [ebp + 0x15d01f13]
pop eax
sub esp, 4
mov dword [esp], ecx
jmp 0x7a4bb5
mov ecx, ebx
jmp 0x7a546e
push 0x1ea85adc
pop eax
sub eax, 0x1f7f13e8
xor eax, 0x8f11000f
sub esi, eax
pop eax
pop eax
push esi
push dword [esp + 4]
jmp 0x7a45c0
add edx, 4
jmp 0x7a4a41
push dword [esp]
mov eax, dword [esp]
add esp, 4
push edi
mov edi, esp
add edi, 4
add edi, 4
jmp 0x7a5b50
add esp, 4
add esp, 4
push 0x3644
mov dword [esp], eax
mov eax, esp
add eax, 4
add eax, 4
xor eax, dword [esp]
xor dword [esp], eax
xor eax, dword [esp]
pop esp
push ebx
mov ebx, 0xe8d3998
xor eax, ebx
mov ebx, dword [esp]
add esp, 4
jmp 0x7a2cb6
push esi
mov esi, 0x59556195
shl esi, 4
jmp 0x7a2e00
push ecx
mov dword [esp], eax
push dword [esp + 4]
jmp 0x7a41c8
sub ecx, esi
add ecx, 0x6afd0139
jmp 0x7a49a7
push dword [esp]
mov esi, dword [esp]
jmp 0x7a5ae1
sub edi, 4
xchg dword [esp], edi
jmp 0x7a6f6b
xchg dword [esp], edx
pop esp
push ebx
mov ebx, 0x4f4a214f
jmp 0x7a2ead
add dword [esp], 4
pop eax
jmp 0x7a6c5b
push edi
push eax
jmp 0x7a2b72
mov edx, 0x2d972e4f
jmp 0x7a4f5b
pop ecx
jmp 0x7a7032
xor dword [esp + 4], edx
mov edx, dword [esp]
push ebp
mov ebp, esp
add ebp, 4
add ebp, 4
xchg dword [esp], ebp
jmp 0x7a6ccd
mov esi, 0x4bd9513a
mov ebp, 0xb426aeca
add ebp, esi
jmp 0x7a417f
pop eax
mov edi, dword [esp]
add esp, 4
push ebx
mov dword [esp], edi
jmp 0x7a3a98
add esi, eax
push eax
jmp 0x7a4683
pop ebp
add ebp, 4
sub ebp, 4
xchg dword [esp], ebp
pop esp
mov dword [esp], edx
mov edx, esp
add edx, 4
add edx, 4
xchg dword [esp], edx
pop esp
cmp dword [ebp + 0x15d03527], 0
jne 0x7a5282
cmp dword [ebp + 0x15d0357b], 0
je 0x7a5291
push eax
mov eax, eax
mov eax, 0
call dword [ebp + 0x15d03016]
pop eax
sub esp, 4
mov dword [esp], eax
jmp 0x7a6864
xor dword [esp], 0x4f4a214f
mov ecx, dword [esp]
push edx
mov edx, esp
add edx, 4
jmp 0x7a46ea
mov ebp, dword [esp]
add esp, 4
push ebx
push 0x6c77
jmp 0x7a6e64
pop ebx
add eax, 0x459a2abb
add eax, ecx
push edi
mov edi, 0x459a2abb
sub eax, edi
pop edi
jmp 0x7a6945
sub esp, 4
mov dword [esp], ebp
mov dword [esp], eax
mov edx, dword [esp]
add esp, 4
sub esp, 4
mov dword [esp], ecx
mov dword [esp], edx
pop eax
pop edx
cmp dword [ebp + 0x15d03527], 0
jne 0x7a559f
cmp dword [ebp + 0x15d0357b], 0
je 0x7a55b4
push eax
mov eax, eax
mov eax, 0x43d
mov dword [ebp + 0x15d03338], eax
call dword [ebp + 0x15d0191f]
pop eax
push 0x717f
jmp 0x7a5ad6
push eax
jmp 0x7a6c1f
mov dword [esp], eax
push edx
mov edx, esp
jmp 0x7a2d9f
add esp, 4
push esi
mov esi, esp
add esi, 4
jmp 0x7a5ba1
xchg dword [esp], edi
pop esp
push esi
push edi
mov edi, 0x48e06c53
xor edi, 0x2574db7
shl edi, 2
sub edi, 0xcc305d87
push edi
xor dword [esp], 0x406d3be3
pop esi
xor esi, 0x406d3be3
jmp 0x7a5ffd
add esi, 4
xchg dword [esp], esi
pop esp
xchg dword [esp], ecx
pop esp
mov dword [esp], edx
sub esp, 4
mov dword [esp], eax
pop edx
mov ebx, edx
mov edx, dword [esp]
jmp 0x7a5cac
add esp, 4
mov eax, ebx
mov ebx, dword [esp]
push ebp
push esp
jmp 0x7a5250
pop edi
add eax, esi
pop esi
push ebx
mov ebx, eax
push 0x34e4
mov dword [esp], ebx
push eax
mov eax, esp
add eax, 4
jmp 0x7a3aaa
push esi
mov dword [esp], eax
push ebp
push 0xca4721c
pop ebp
shr ebp, 8
xor ebp, 0x61e4a2f8
jmp 0x7a692d
push eax
mov dword [esp], edi
push edx
jmp 0x7a4d12
xor esi, dword [esp]
pop esp
push dword [esp]
pop ebx
push eax
mov eax, esp
jmp 0x7a3714
add edi, ebx
jmp 0x7a32f3
pop dword [esp]
pop esp
mov dword [ebp + 0x15d03232], eax
mov dword [ebp + 0x15d01c61], 0
push ecx
mov dword [esp], ebp
push esp
pop ebp
push edx
mov dword [esp], ecx
mov ecx, 0x14d85bb5
sub ecx, 1
push ebp
mov ebp, 0x4422a8e
or ecx, ebp
pop ebp
not ecx
jmp 0x7a2b02
push dword [esp]
push dword [esp]
push dword [esp]
jmp 0x7a68fe
push eax
jmp 0x7a7114
pop eax
push edx
mov edx, esp
add edx, 4
add edx, 4
xchg dword [esp], edx
pop esp
push eax
mov eax, esp
push ecx
push ebx
mov ebx, 0x1642731e
xor ebx, 0x75180817
add ebx, 0x9ca584fb
jmp 0x7a4676
push edx
jmp 0x7a3bf3
pop ecx
jmp 0x7a3811
pop esp
mov dword [esp], edi
mov dword [esp], ecx
push eax
jmp 0x7a4d64
or esi, 0x4f1e3b95
dec esi
shr esi, 7
dec esi
add esi, 0xbb359793
add ebp, esi
pop esi
jmp 0x7a6f55
mov eax, edx
pop edx
pop ebp
not eax
add eax, 0x78e2273e
add eax, 0x716d5162
jmp 0x7a6bcc
push ebp
mov ebp, 0x22bc3a86
push edx
jmp 0x7a2c2c
add esp, 4
push dword [esp]
pop esi
sub esp, 4
mov dword [esp], edi
jmp 0x7a6df9
mov dword [esp], ebx
push eax
jmp 0x7a7194
mov eax, 0x45e2a74e
add ebp, eax
pop eax
sub eax, ebp
pop ebp
or eax, 0x9765ee0
jmp 0x7a6c4b
push eax
mov ebx, dword [esp]
add esp, 4
push 0x78d
mov dword [esp], ebx
mov eax, dword [esp]
jmp 0x7a3f80
sub eax, 0x8bf65fe3
add esi, 0x703846fb
jmp 0x7a515e
add eax, 4
sub eax, 4
push eax
push dword [esp + 4]
pop eax
pop dword [esp]
jmp 0x7a6a61
mov ecx, 0xe8d3998
xor dword [esp + 4], ecx
pop ecx
push dword [esp]
jmp 0x7a3a9f
pop esp
mov eax, dword [esp]
jmp 0x7a6cd6
add esp, 4
xor eax, 0x2d972e4f
jmp 0x7a6d5b
pop edi
mov ecx, dword [esp]
add esp, 4
push esi
push eax
push ecx
mov ecx, 0x2f2951ea
xor dword [esp + 4], ecx
mov ecx, dword [esp]
jmp 0x7a6bf6
mov edi, esp
push ebp
push eax
mov dword [esp], esi
jmp 0x7a4fdb
add edi, ebp
jmp 0x7a542e
mov dword [esp], ebp
push 0x51fd6330
pop ebp
xor ebp, 0x13c25a18
add ebp, 0xeb2f53
push ebx
jmp 0x7a6eec
mov dword [esp], esi
mov esi, 0x310a353b
not esi
jmp 0x7a6ad1
mov ebx, ebp
pop ebp
add edi, 0x27be4f37
jmp 0x7a64b7
pop esp
mov dword [esp], eax
sub esp, 4
mov dword [esp], eax
mov eax, 0x3776370b
xor dword [esp + 4], eax
push dword [esp]
mov eax, dword [esp]
push edi
mov edi, esp
add edi, 4
add edi, 4
xchg dword [esp], edi
pop esp
push ecx
mov ecx, esp
jmp 0x7a6fdf
add ecx, 4
jmp 0x7a6ff2
add ecx, 4
xchg dword [esp], ecx
pop esp
mov eax, dword [esp]
add esp, 4
push 0x6896
mov dword [esp], esi
mov esi, 0x25fe1012
inc esi
push ecx
mov ecx, 0x5cce0c8b
xor esi, ecx
pop ecx
push edi
mov edi, 0x4e462b93
xor esi, edi
pop edi
xor eax, esi
pop esi
push eax
sub esp, 4
push esp
pop dword [esp]
jmp 0x7a4acf
push esi
push edx
mov edx, ecx
push eax
push edx
jmp 0x7a4173
pop eax
sub eax, 0x477876e3
push ebp
mov dword [esp], eax
add dword [esp], 0x477544ec
pop esi
push ebx
mov dword [esp], ebp
mov ebp, 0x477544ec
sub esi, ebp
pop ebp
pop eax
mov edx, dword [esp]
add esp, 4
push esi
pop eax
pop esi
mov ecx, dword [esp]
add esp, 4
jmp 0x7a709b
cmp dword [ebp + 0x15d03527], 0
jne 0x7a70ad
cmp dword [ebp + 0x15d0357b], 0
je 0x7a70bc
push eax
mov eax, eax
mov eax, 0
call dword [ebp + 0x15d02cf8]
pop eax
push ebp
mov dword [esp], ebx
jmp 0x7a6c34
mov eax, 4
jmp 0x7a7149
add esi, eax
pop eax
xor esi, dword [esp]
xor dword [esp], esi
jmp 0x7a63ad
pop eax
xor ecx, 0x7fb77f33
sub eax, 0x4ff262bb
add eax, ecx
jmp 0x7a4946
push 0x2e0c5c56
pop eax
sub eax, 0x1e064b33
add eax, 0xeff9eee1
jmp 0x7a387a