Function at 0x7de2ec
Capabilities:
Check for vm using instruction vpcext
Contain obfuscated stackstrings
Reference the vmware io port

Disassembly:
mov eax, dword [esp]
push esi
push esi
mov dword [esp], esp
add dword [esp], 4
jmp 0x7de2cb
push dword [esp]
push dword [esp]
jmp 0x7de40f
mov ecx, 0x39fe9081
xor ebp, ecx
pop ecx
mov eax, ebp
push dword [esp]
mov ebp, dword [esp]
add esp, 4
push ebp
mov ebp, esp
add ebp, 4
add ebp, 4
xchg dword [esp], ebp
jmp 0x7de3ba
or eax, 0x3b17477d
or eax, 0x7fb91b02
add eax, 0x7eb3b69f
xor eax, 0xfeb3161f
sub edx, eax
jmp 0x7de461
add esi, ecx
pop ecx
jmp 0x7de370
push esi
jmp 0x7de39d
xor edi, eax
pop eax
xchg edi, eax
jmp 0x7de43b
add esp, 4
push edi
mov edi, 0x7fff9f00
xor edi, 0x241d4a
inc edi
push esi
jmp 0x7de3cc
push ecx
mov ecx, 0x53c5b91b
or ecx, 0x3a82902a
inc ecx
and ecx, 0x63b31407
xor ecx, 0x3eed1562
dec ecx
add ecx, 0xd9087ce
jmp 0x7de31e
xor esi, 0xc6318596
sub edi, esi
pop esi
add edi, 0x7b65c4b3
xor edi, 0x6bbfdcc9
push eax
mov eax, 0x2fbda4f8
add eax, 0x81829c7b
jmp 0x7de32c
mov esp, dword [esp]
jmp 0x7de3e4
mov dword [esp], edx
mov edx, esp
add edx, 4
add edx, 4
xchg dword [esp], edx
pop esp
add esi, 4
jmp 0x7de459
pop esp
pop edx
mov esi, 0xa1206af9
add esi, eax
pop eax
sub eax, esi
pop esi
jmp 0x7de47c
mov esi, 0x6d033b2d
shr esi, 6
shl esi, 2
sub esi, 0x3f9fe9b3
not esi
jmp 0x7de34b
push edi
mov edi, esp
add edi, 4
jmp 0x7de3f2
sub edi, 4
xchg dword [esp], edi
pop esp
mov dword [esp], esi
push 0x3ee90afa
mov dword [esp], eax
push edx
mov edx, 0x777e35b3
jmp 0x7de481
pop esi
add esp, 4
jmp 0x7de335
xor ebx, 0x9567d3d5
xor edx, ebx
pop ebx
sub esp, 4
mov dword [esp], ebp
push edx
xor dword [esp], 0x39fe9081
pop ebp
jmp 0x7de476
not eax
xchg edi, eax
dec edi
xor edi, 0x75fe1c6e
shl edi, 1
dec edi
sub edi, 0x8b7ffce1
add esi, edi
mov edi, dword [esp]
jmp 0x7de326
xchg dword [esp], esi
jmp 0x7de395
pop eax
push ebx
mov ebx, 0x5b6db934
sub ebx, 0x74e74631
shl ebx, 7
jmp 0x7de41b
push ecx
jmp 0x7de2d6
jmp 0x7de497
push edx
not dword [esp]
pop edx
push ebx
mov dword [esp], edi
mov dword [esp], eax
mov eax, 0x27fd5e19
jmp 0x7de303
push eax
xor dword [esp], 0x5cf49f5a
pop eax
sub esp, 4
mov dword [esp], ecx
jmp 0x7de505
mov dword [esp], esi
mov esi, 0x77dd0125
add esi, 0x7ffff71b
shr esi, 7
jmp 0x7de5c0
sub dword [esp + 4], edx
add dword [esp + 4], 0x3fb8f286
pop edx
jmp 0x7de6c8
xchg dword [esp], eax
jmp 0x7de576
mov edi, 0x10427302
xor dword [esp + 4], edi
push dword [esp]
pop edi
add esp, 4
mov dword [esp], ecx
jmp 0x7de50b
sub ebp, 0x2cfca147
mov ecx, ebp
pop ebp
shl ecx, 1
push eax
jmp 0x7de6df
push ebp
jmp 0x7de693
mov ebp, dword [esp]
add esp, 4
sub esp, 4
mov dword [esp], ebp
add dword [esp], 0x7763dc83
pop ecx
sub ecx, 0x7763dc83
pop ebp
push 0x3810c600
mov dword [esp], ecx
push edx
push ecx
sub esp, 4
mov dword [esp], edi
push eax
push 0x7ffa0d6a
pop eax
not eax
xor eax, 0xf96c63c6
mov edi, eax
pop eax
and edi, 0x3acfaba0
not edi
sub edi, 0xb44cea82
mov ecx, edi
pop edi
mov edx, ecx
jmp 0x7de587
pop edi
jmp 0x7de74c
shr ebp, 8
jmp 0x7de58d
not eax
xchg dword [esp], eax
pop ecx
push edx
mov edx, 0x43e3e177
jmp 0x7de5f3
pop ecx
jmp 0x7de607
add ebp, 0x7e76751e
and ebp, 0x75ef5db0
or ebp, 0x3efef91a
sub ebp, 0x3f195e01
add ecx, ebp
pop ebp
add ecx, 0x7f7fc8d3
add ecx, edx
sub ecx, 0x7f7fc8d3
push 0x2adecb3e
jmp 0x7de4ab
not esi
shr esi, 8
not esi
sub esi, 0xbf1b5080
sub ecx, esi
pop esi
mov edx, dword [esp]
add esp, 4
xor eax, ecx
mov ecx, dword [esp]
add esp, 4
sub esp, 4
mov dword [esp], ecx
push ebx
jmp 0x7de62e
sub edx, 0x86ffd32c
push ebp
mov ebp, 0x62ff437a
add ebp, 1
jmp 0x7de56e
mov dword [esp + 4], edx
mov edx, dword [esp]
add esp, 4
mov dword [esp], ecx
push 0x6453d1b8
mov dword [esp], edx
push edi
mov edi, 0x6dec75e1
xor dword [esp + 4], edi
jmp 0x7de661
push edx
mov edx, 0x7fad8e9c
sub dword [esp + 4], 0x3fb8f286
jmp 0x7de4c1
mov ebp, esp
add ebp, 4
add ebp, 4
xchg dword [esp], ebp
pop esp
push esi
mov dword [esp], ebp
push 0x7a74cc12
mov dword [esp], edi
jmp 0x7de736
pop edi
pop ecx
xor ecx, 0x6dec75e1
mov edx, ecx
push dword [esp]
pop ecx
push ebx
push esp
pop ebx
add ebx, 4
push 0x104ad71a
mov dword [esp], eax
jmp 0x7de69f
mov eax, dword [esp]
add esp, 4
jmp 0x7de755
mov ebp, 0x54ff7895
neg ebp
jmp 0x7de794
mov eax, 4
add ebx, eax
pop eax
xor ebx, dword [esp]
xor dword [esp], ebx
xor ebx, dword [esp]
pop esp
jmp 0x7de7bc
push dword [esp]
mov ecx, dword [esp]
add esp, 4
push ebp
jmp 0x7de641
pop ecx
push eax
push 0x64598fb8
mov dword [esp], edi
push eax
mov eax, 0x7f7a75ee
mov edi, eax
jmp 0x7de700
mov eax, 0x7fff4fd3
xor ecx, eax
pop eax
neg ecx
shl ecx, 4
push ecx
mov ecx, esp
add ecx, 4
sub ecx, 4
jmp 0x7de7a6
mov eax, dword [esp]
push eax
mov eax, esp
add eax, 4
add eax, 4
xchg dword [esp], eax
mov esp, dword [esp]
mov eax, edi
pop edi
xchg edi, eax
dec edi
xor eax, edi
xor edi, eax
xor eax, edi
neg eax
add eax, 0x5f473bc4
shl eax, 8
push edi
mov edi, 0xb2e7b79c
add eax, edi
jmp 0x7de568
mov dword [esp], ecx
mov dword [esp], 0x77ff3101
shl dword [esp], 1
dec dword [esp]
jmp 0x7de75d
add ecx, eax
pop eax
push esi
jmp 0x7de7b2
not dword [esp]
jmp 0x7de78e
dec dword [esp]
sub dword [esp], 0xb08f334a
sub esp, 4
mov dword [esp], eax
mov eax, 0x6fff4942
sub dword [esp + 4], 0x5df7b700
add dword [esp + 4], eax
add dword [esp + 4], 0x5df7b700
jmp 0x7de685
push eax
jmp 0x7de79e
shl ebp, 3
neg ebp
jmp 0x7de4f3
mov dword [esp], edi
jmp 0x7de4db
xchg dword [esp], ecx
pop esp
mov dword [esp], ecx
jmp 0x7de4d3
mov esi, ecx
mov ebx, esi
pop esi
jmp 0x7de6b6
jmp 0x7deb9e
sub esp, 4
mov dword [esp], edi
push eax
push ecx
mov ecx, 0x72ff9b2d
sub dword [esp + 4], ecx
pop ecx
mov edi, dword [esp]
jmp 0x7dec17
add esp, 4
jmp 0x7dec35
mov edx, dword [esp]
add esp, 4
push eax
mov dword [esp], ecx
mov ecx, 4
jmp 0x7debec
push ebp
mov ebp, esi
mov ecx, ebp
pop ebp
push ecx
pop ebx
pop ecx
push dword [esp]
pop esi
jmp 0x7debbb
add edx, ecx
pop ecx
add edx, 4
xchg dword [esp], edx
pop esp
push dword [esp]
jmp 0x7dec53
not ecx
jmp 0x7dec6e
sub ecx, 4
xchg dword [esp], ecx
pop esp
mov dword [esp], ecx
jmp 0x7debda
add esp, 4
push 0x19ff7fc
mov dword [esp], ebx
mov ebx, 0x72ff9b2d
add edi, ebx
pop ebx
jmp 0x7dec3a
pop ecx
jmp 0x7dec80
jmp 0x7ded2e
push eax
mov dword [esp], edx
mov edx, edi
mov eax, edx
mov edx, dword [esp]
push 0x39a19d7e
mov dword [esp], edx
push esp
jmp 0x7debc3
pop edi
push ebp
mov ebp, esp
add ebp, 4
add ebp, 4
push ebp
push dword [esp + 4]
pop ebp
pop dword [esp]
jmp 0x7deca2
sub ecx, 0x28822ed9
jmp 0x7dec79
mov edx, ecx
jmp 0x7dec2f
push ebp
mov ebp, 0x4ebaf27a
sub edx, ebp
pop ebp
jmp 0x7dec8e
and edx, 0x7f23b8d5
shr edx, 7
sub edx, 0x1005fd
jmp 0x7deca8
pop esp
jmp 0x7dece9
add ecx, edx
jmp 0x7ded06
mov esp, dword [esp]
mov dword [esp], ebp
mov ebp, 0x3ebe8a86
inc ebp
shl ebp, 3
shl ebp, 3
add ebp, 0x8f5a0aae
add dword [esp + 4], 0x7efc9519
add dword [esp + 4], ebp
sub dword [esp + 4], 0x7efc9519
pop ebp
pop esi
sub esi, 0x3efcac6e
push ecx
jmp 0x7ded1a
push esi
sub esp, 4
mov dword [esp], ebx
jmp 0x7decf8
push ecx
mov ecx, esp
add ecx, 4
jmp 0x7ded0c
pop edx
jmp 0x7dec08
sub ecx, 4
xchg dword [esp], ecx
jmp 0x7decaf
mov ecx, esp
push edx
push ecx
mov ecx, 0x6e6f8921
or ecx, 0x5ff61909
jmp 0x7dec01
call 0x7ded33
push dword [esp]
mov eax, dword [esp]
push eax
jmp 0x7ded3f
mov eax, esp
add eax, 4
jmp 0x7dee43
pop esi
add eax, ebx
sub eax, 0x7af8ddec
mov ebx, dword [esp]
push ebx
mov ebx, esp
add ebx, 4
add ebx, 4
xchg dword [esp], ebx
pop esp
xchg dword [esp], eax
pop esp
push ebx
push 0x5368ec25
mov dword [esp], ebp
jmp 0x7dee89
xor ebp, eax
xor eax, ebp
sub esp, 4
mov dword [esp], ebp
not dword [esp]
pop ebp
xchg ebp, eax
add eax, 0x5a25e8cd
or ecx, eax
mov eax, dword [esp]
add esp, 4
push 0x597a5181
jmp 0x7dedbe
pop dword [esp]
add dword [esp], 4
pop ebx
add ebx, 4
push ecx
push edx
push 0x3dc71771
jmp 0x7dee8f
mov dword [esp], ebp
mov ebp, 0x3fb78f81
not ebp
inc ebp
xor ebp, 0x9fb7abcd
sub ecx, ebp
pop ebp
mov edi, ecx
pop ecx
sub eax, 0x67efeaf6
jmp 0x7dee5b
and ecx, 0x48f9f602
push eax
mov eax, 0x1fe99b38
jmp 0x7dee51
mov ebx, 4
push esi
mov esi, 0x7bff15c0
not esi
dec esi
xor esi, 0x5fff657b
sub esi, 0x7ff77ba5
and esi, 0x57bf2c0e
add esi, 0x26f0ddec
add eax, esi
jmp 0x7ded4b
neg edx
xchg edx, eax
not eax
jmp 0x7dee27
xchg edx, eax
sub edx, 0x71747975
add edx, 0x7f5d9a81
add edx, 0xb8048c7b
add eax, edx
pop edx
pop edi
jmp 0x7deeda
sub eax, 4
xchg dword [esp], eax
pop esp
jmp 0x7dee74
shl eax, 6
xor eax, ebp
jmp 0x7ded7b
sub eax, 0x63e6f2b2
sub eax, edi
add eax, 0x63e6f2b2
push edx
mov edx, 0x5dfdc28f
not edx
jmp 0x7dee1d
mov dword [esp], eax
mov eax, esp
add eax, 4
sub esp, 4
mov dword [esp], ebx
jmp 0x7dedf0
push esp
jmp 0x7deda1
pop edx
jmp 0x7dee95
add edx, 0xc238e893
mov ecx, edx
pop edx
add ebx, ecx
jmp 0x7deea5
pop ecx
xor ebx, dword [esp]
xor dword [esp], ebx
xor ebx, dword [esp]
pop esp
push edi
push ecx
push 0x2c4f31f1
mov dword [esp], edx
mov dword [esp], 0x5becde86
push dword [esp]
pop ecx
push ebx
mov ebx, esp
add ebx, 4
add ebx, 4
xchg dword [esp], ebx
pop esp
jmp 0x7deddf
sub esp, 4
mov dword [esp], eax
jmp 0x7df0fe
push edx
mov edx, 0x7d520d90
jmp 0x7deff6
add esp, 4
push ecx
mov ecx, 0x5f7f7afd
shl ecx, 3
and ecx, 0x7efedf01
and ecx, 0x555f34a2
jmp 0x7def69
pop ebx
jmp 0x7df038
pop ebp
push ebx
jmp 0x7df130
push eax
push esp
mov eax, dword [esp]
jmp 0x7def01
pop ebx
sub ebp, ebx
add ebp, 0x473f2e1d
jmp 0x7def21
pop edi
add esi, 0x77b55488
add esi, edx
sub esi, 0x77b55488
pop edx
add esi, 4
xchg dword [esp], esi
jmp 0x7df02f
add ebx, 0x518bc704
sub ebp, ebx
jmp 0x7def40
add eax, edx
pop edx
mov esi, dword [esp]
push ecx
mov ecx, esp
jmp 0x7df146
add eax, 4
push esi
mov esi, 0x67f0672f
add esi, 0x39d78a27
add esi, 0x5e380eae
jmp 0x7df1e0
mov esp, dword [esp]
push ebp
jmp 0x7df1ca
push ebp
push dword [esp + 4]
jmp 0x7df060
add dword [esp], 4
pop ebp
add ebp, 4
push ebx
mov ebx, 0x4ddb0b81
jmp 0x7df1eb
pop ebp
pop dword [esp]
pop esp
mov dword [esp], ebx
push dword [esp]
pop ebx
jmp 0x7def36
sub esp, 4
mov dword [esp], esi
mov esi, esp
push edx
push edi
mov edi, 4
mov edx, edi
jmp 0x7def4e
push dword [esp]
push dword [esp]
pop eax
push ebp
mov dword [esp], eax
mov eax, esp
jmp 0x7df013
mov ebx, 0x36f39420
sub ebx, 0x2ca6fb3a
add ebx, 1
jmp 0x7df15f
add ecx, 4
add ecx, 4
xchg dword [esp], ecx
pop esp
xchg dword [esp], eax
pop esp
jmp 0x7df080
neg ebx
jmp 0x7def79
xor esi, 0x7fd413b8
xor esi, 0x7eff97ee
xor esi, 0x33951701
sub eax, esi
jmp 0x7df1d8
sub esp, 4
mov dword [esp], esp
jmp 0x7df04a
pop esi
add eax, esi
jmp 0x7deeeb
push esi
mov esi, 0x4fec9ec7
jmp 0x7df171
push ecx
push ebp
mov ebp, 0x7c9ea066
mov ecx, ebp
pop ebp
shr ecx, 7
and ecx, 0x5ffb1f1a
or ecx, 0x75d7f318
xor ecx, 0xefa4a4f
xor ebx, ecx
jmp 0x7df223
mov ebp, 0xeb710ef3
sub ebx, ebp
jmp 0x7def27
pop ecx
or ebx, 0x7ff75de6
add ebx, 0x6b710f01
push ebp
jmp 0x7df211