Function at 0x1320883
Capabilities:
Check for vm using instruction vpcext
Contain obfuscated stackstrings
Reference the vmware io port

Disassembly:
xor ebp, ecx
sub esp, 4
mov dword [esp], ecx
not dword [esp]
push dword [esp]
push dword [esp]
pop ecx
add esp, 4
push esi
mov esi, esp
jmp 0x13207e1
sub edx, 0x6a670656
add eax, edx
pop edx
push eax
jmp 0x1320838
xor ebp, 0x90503c5a
sub eax, 0x7faf1831
sub eax, ebp
jmp 0x13207ff
add esi, 4
add esi, 4
xchg dword [esp], esi
pop esp
jmp 0x1320831
pop eax
pop dword [esp]
jmp 0x1320823
add eax, 0x7faf1831
mov ebp, dword [esp]
add esp, 4
jmp 0x132091e
mov esp, dword [esp]
jmp 0x132082b
push ebp
jmp 0x1320841
xchg ebp, ecx
jmp 0x13207bf
push dword [esp + 4]
jmp 0x13207f6
push eax
mov eax, 0x6fafc17e
jmp 0x132087b
push esi
mov esi, eax
jmp 0x13208a4
push ebp
mov ebp, esp
add ebp, 4
add ebp, 4
xchg dword [esp], ebp
pop esp
push edx
mov edx, 0x7da3baa5
add edx, 0x17f53f00
jmp 0x1320917
mov ebp, esi
mov esi, dword [esp]
add esp, 4
pop eax
push 0x1798a669
jmp 0x13208c3
mov dword [esp], ecx
jmp 0x13208f3
mov ecx, 0x7b33cb9b
push ebx
mov ebx, 0x7b33cb9c
sub ecx, ebx
mov ebx, dword [esp]
add esp, 4
jmp 0x132090b
add ebp, ecx
pop ecx
xor ebp, ecx
xor ecx, ebp
jmp 0x1320790
not edx
jmp 0x13207b0
push eax
xor dword [esp], 0x77bfd722
pop eax
push ebp
mov dword [esp], edx
push ebx
jmp 0x132093c
sub edx, 0x8ec2783a
jmp 0x1320be5
push 0x26aef766
mov ebx, dword [esp]
push ecx
jmp 0x1320991
mov ebp, ecx
jmp 0x1320aa2
sub eax, edi
sub eax, 0x5fbfdf7c
jmp 0x1320b69
mov esp, dword [esp]
push edx
jmp 0x1320989
shr dword [esp], 3
jmp 0x1320ab1
pop eax
jmp 0x132097d
push dword [esp]
jmp 0x132096f
push eax
mov dword [esp], esi
mov dword [esp], ebx
jmp 0x1320ad2
push dword [esp]
jmp 0x13209f2
mov ecx, esp
jmp 0x1320a9c
push ebx
mov ebx, esp
add ebx, 4
push eax
mov eax, 4
sub ebx, 0x789ff623
add ebx, eax
push eax
mov eax, 0x3fc7c65d
shr eax, 4
jmp 0x13209bd
dec eax
inc eax
jmp 0x13209dc
push ecx
mov ecx, 0x6dfe7c94
dec ecx
xor ecx, 0x6d8e160c
sub ecx, 0x706a9b
jmp 0x132094a
push edx
mov edx, 0x6fed3983
not edx
sub edx, 0x35fe7a77
shl edx, 7
jmp 0x1320931
pop edx
push edi
mov dword [esp], 0x32007e82
mov dword [esp], esi
mov esi, esp
push edx
jmp 0x1320b5d
push eax
pop ebx
mov eax, dword [esp]
add esp, 4
push 0x50f04000
mov dword [esp], ecx
push dword [esp]
mov ecx, dword [esp]
push ebp
mov dword [esp], ebx
push esp
pop ebx
add ebx, 4
sub esp, 4
jmp 0x1320c2f
xor ebp, 0x2f677ef3
mov edx, ebp
pop ebp
add edx, 0x4ffef023
sub edx, 0x1bffbbe7
add edx, ebx
add edx, 0x1bffbbe7
push eax
mov eax, 0x4ffef023
sub edx, eax
pop eax
jmp 0x1320b8b
mov edx, 0x37edc52c
add dword [esp + 4], edx
mov edx, dword [esp]
add esp, 4
jmp 0x1320975
mov ebx, 0x5dc7ae6f
add ebx, 0x677dad7e
dec ebx
shl ebx, 5
not ebx
xor ebx, 0x391e8556
sub esi, 0x7fa76d5c
add esi, ebx
add esi, 0x7fa76d5c
jmp 0x1320abd
push ebp
jmp 0x13209c4
pop ecx
add ecx, ebp
pop ebp
add ecx, 4
jmp 0x1320b6f
sub dword [esp], 0x7fa711f9
jmp 0x1320c1c
pop ebx
xor edx, esi
pop esi
and edx, 0x58bfba30
jmp 0x1320b0f
push eax
jmp 0x1320b3e
mov ebx, esp
add ebx, 4
add ebx, 4
xchg dword [esp], ebx
mov esp, dword [esp]
push edi
mov edi, 0x37edc52c
push ebx
mov ebx, 0x7f73eba1
inc ebx
shr ebx, 3
neg ebx
dec ebx
xor ebx, 0xafae5df7
add eax, ebx
mov ebx, dword [esp]
add esp, 4
jmp 0x1320951
shr edx, 6
xor edx, 0x779de74a
xor eax, edx
pop edx
push eax
mov eax, esp
add eax, 4
sub eax, 4
xchg dword [esp], eax
pop esp
mov dword [esp], eax
sub esp, 4
mov dword [esp], ebx
push eax
mov dword [esp], edx
jmp 0x1320a5b
push edx
mov dword [esp], 0x30fbe400
shl dword [esp], 7
sub dword [esp], 0x25fb8871
add dword [esp], 0x73c5d148
jmp 0x1320966
push eax
push 0x37de8be5
pop eax
jmp 0x1320b93
pop edi
jmp 0x1320a06
xchg dword [esp], ecx
pop esp
push ebp
push 0x7b7d498d
pop ebp
sub ebp, 0x5fd70e91
add ebp, 0x63fd0b71
jmp 0x1320a30
mov ebx, dword [esp]
jmp 0x1320bfe
inc eax
add eax, 0x7cffdd9d
xor eax, 0xcba5213c
mov edx, eax
jmp 0x1320bab
pop eax
jmp 0x1320c9e
pop eax
push ebp
push eax
mov eax, 0x5d3f51f8
mov ebp, 0xad395119
sub ebp, eax
pop eax
and edx, ebp
pop ebp
shl edx, 1
add edx, 0x610d6fc2
sub esi, 0x27dc2f38
add esi, 0x757cae00
jmp 0x1320bd8
add esi, edx
sub esi, 0x757cae00
jmp 0x1320acc
xor eax, edx
mov edx, dword [esp]
add esp, 4
add ebx, 0x55574771
sub ebx, 0x2667226d
jmp 0x1320c8b
add esp, 4
push esi
mov esi, 0x2f75661f
sub esi, 1
and esi, 0x1fffbd29
push ebx
jmp 0x1320a72
shl dword [esp], 5
add dword [esp], 0xedcd4b18
pop eax
add esi, eax
jmp 0x1320c59
mov dword [esp], ecx
mov ecx, 0x7eb30718
or ecx, 0x1ff7bc4c
and ecx, 0x7e7dd05c
inc ecx
xor ecx, 0x7bff7510
dec ecx
sub ecx, 0x58ae548
add ebx, ecx
pop ecx
jmp 0x1320c67
mov eax, dword [esp]
add esp, 4
jmp 0x1320c70
xchg dword [esp], ebx
pop esp
jmp 0x1320998
pop edx
push edx
mov edx, 4
add esi, 0x6fdd4f00
add esi, edx
sub esi, 0x6fdd4f00
pop edx
jmp 0x1320caf
add ebx, eax
add ebx, 0x2667226d
sub ebx, 0x55574771
jmp 0x1320ba5
mov eax, dword [esp]
add esp, 4
xchg dword [esp], ebx
jmp 0x132095d
xchg dword [esp], esi
pop esp
jmp 0x1320cb8
jmp 0x1320ffe
push 0x4a706cd7
mov dword [esp], ebp
sub esp, 4
mov dword [esp], edi
push esi
mov esi, eax
mov edi, esi
pop esi
mov ebp, edi
mov edi, dword [esp]
push ecx
push 0x12c37f9e
mov dword [esp], esp
jmp 0x1321144
push ecx
mov ecx, 0x5693874e
jmp 0x1321104
mov ebx, 0x63d7b6b7
not ebx
add ebx, 0xdd4cc85d
jmp 0x1321161
add ecx, 0x7eff3400
add ecx, eax
sub ecx, 0x7eff3400
mov eax, dword [esp]
add esp, 4
push edi
push ebx
mov ebx, 0x14a72824
jmp 0x13210bb
mov esi, 0x1e7b0912
xor esi, 0x67fb7ecb
jmp 0x132108c
mov edx, esp
add edx, 4
add edx, 4
push edx
jmp 0x132110d
inc esi
xor esi, 0xf5667f
sub ecx, esi
pop esi
add ecx, eax
push ebx
jmp 0x1321033
sub edi, 0xa0ccbbbf
add ecx, edi
pop edi
add eax, ecx
pop ecx
add eax, 4
push eax
push dword [esp + 4]
mov eax, dword [esp]
push eax
jmp 0x13211d8
mov edi, 0x7c9ea8cc
sub edi, ebx
pop ebx
jmp 0x13210f3
sub eax, 1
shr eax, 1
add eax, 0x97d90269
jmp 0x1321045
shl eax, 7
or eax, 0x7b9f3d12
xor eax, 0xc044496f
push esi
jmp 0x1321068
pop eax
jmp 0x132117a
sub edi, 0x67f780a4
add ecx, edi
pop edi
xor ecx, dword [esp]
jmp 0x132113c
shl ecx, 2
push eax
jmp 0x13211c0
push dword [esp + 4]
pop edx
pop dword [esp]
mov esp, dword [esp]
pop dword [esp]
mov esp, dword [esp]
jmp 0x13211f2
sub edx, 0x75bf4d14
add edx, 0xea2b061d
sub eax, edx
pop edx
add eax, 0x2fbdfc3c
jmp 0x13210c8
xor dword [esp], ecx
jmp 0x1321191
add dword [esp], 4
pop ecx
push eax
push 0x1dfbe024
jmp 0x13210ed
mov dword [esp], eax
mov eax, esp
jmp 0x1321028
add ecx, ebx
pop ebx
pop eax
push edi
mov edi, 0x3fd6bdd2
add edi, 0x73fff21b
neg edi
neg edi
jmp 0x13211ca
push edx
mov edx, 0x7dbf650c
xor edx, 0x76ff4a2f
and edx, 0xdbe7864
jmp 0x1321123
xor ecx, dword [esp]
mov esp, dword [esp]
jmp 0x132119c
mov eax, ebp
mov ebp, dword [esp]
add esp, 4
sub esp, 4
mov dword [esp], ebx
jmp 0x13211b2
mov ebx, dword [esp]
sub esp, 4
jmp 0x1321157
mov eax, 0x7fad6fd1
jmp 0x13210da
sub edi, 0x7fbf6379
shr edi, 3
jmp 0x132109e
mov dword [esp], esi
mov esi, esp
add esi, 4
sub esi, 4
xchg dword [esp], esi
pop esp
mov dword [esp], edx
jmp 0x1321078
call 0x13211f7
push dword [esp]
jmp 0x1321255
mov esi, dword [esp]
add esp, 4
add ebp, 4
push eax
mov dword [esp], ebp
push dword [esp + 4]
pop ebp
pop dword [esp]
jmp 0x132126f
pop esp
mov dword [esp], ebp
push esp
mov ebp, dword [esp]
push edi
jmp 0x132128d
mov ecx, dword [esp]
add esp, 4
push ebp
push edi
jmp 0x132123d
mov edi, 0x717f7379
push edi
mov edi, 0xf0eb1f0b
mov ebp, edi
mov edi, dword [esp]
add esp, 4
jmp 0x132132e
pop eax
push 0x5335ce45
mov dword [esp], eax
mov dword [esp], ebp
push esp
jmp 0x1321267
mov ebp, dword [esp]
jmp 0x13212be
mov esp, dword [esp]
push ebp
push eax
mov eax, 0x3df39461
jmp 0x13212a0
pop esp
push esi
push ecx
mov ecx, 4
mov esi, ecx
jmp 0x1321310
mov edi, esp
add edi, 4
add edi, 4
xchg dword [esp], edi
jmp 0x132127e
mov ebp, 0x3df39787
sub ebp, eax
jmp 0x1321318
mov ebx, 0x7dd5687b
add ebx, 0x822a9789
sub ebp, ebx
jmp 0x13212d5
add esp, 4
add ebp, 4
push ebx
jmp 0x13212ac
xor ebp, dword [esp]
jmp 0x1321305
pop ebx
jmp 0x13212cd
mov dword [esp], 0x4d29020d
mov dword [esp], edx
mov edx, esp
add edx, 4
push ecx
mov ecx, 4
add edx, ecx
pop ecx
push edx
push dword [esp + 4]
pop edx
pop dword [esp]
pop esp
jmp 0x132134b
xor dword [esp], ebp
xor ebp, dword [esp]
jmp 0x132121f
pop ecx
add ebp, esi
jmp 0x13211ff
pop eax
add eax, 0x6f9b6c01
sub eax, ebp
push ecx
push ecx
mov dword [esp], 0x6f9b6c01
jmp 0x132122d
sub ebp, edi
pop edi
sub eax, ebp
mov ebp, dword [esp]
add esp, 4
sub eax, ecx
add eax, 0x7f6bab92
pop ecx
push dword [esp]
pop ebp
push ecx
jmp 0x13212db
push 0x192ce4e5
mov dword [esp], ecx
mov dword [esp], 0x6ff73506
inc dword [esp]
push edi
mov edi, 0x16fbe2ef
sub dword [esp + 4], edi
pop edi
add dword [esp], 0x6fc7ce8
shr dword [esp], 1
push edi
push ebp
mov ebp, 0x3bf28413
mov edi, ebp
pop ebp
add dword [esp + 4], edi
pop edi
mov dword [esp], ecx
jmp 0x1321511
pop ebp
jmp 0x13214c3
mov dword [esp], esi
jmp 0x132141b
push ebx
push 0x7bab0864
mov ebx, dword [esp]
add esp, 4
mov dword [esp + 4], ebx
pop ebx
jmp 0x13213ac
push ebx
push ecx
jmp 0x13214b5
mov ecx, 0x3ff68b43
sub dword [esp + 4], ecx
jmp 0x13214d8
pop ecx
push ebp
mov ebp, 0x7adfe0f6
xor ebp, 0x980c0d4
sub ecx, ebp
pop ebp
jmp 0x1321538
sub dword [esp], 0x77eacc28
jmp 0x13215b9
push ecx
mov ecx, esp
add ecx, 4
add ecx, 4
jmp 0x132159f
push eax
push 0x530ba5f3
mov dword [esp], ebp
mov ebp, 0x735f2022
sub dword [esp + 4], 0x7ccb25f8
add dword [esp + 4], ebp
add dword [esp + 4], 0x7ccb25f8
jmp 0x132138a
push ecx
jmp 0x13214f1
xor ecx, dword [esp]
xor dword [esp], ecx
xor ecx, dword [esp]
pop esp
push ecx
jmp 0x1321622
mov eax, dword [esp]
jmp 0x13215e7
add esp, 4
add eax, 0x77eacc28
push dword [esp]
pop ecx
jmp 0x13214fd
mov ecx, esp
add ecx, 4
sub ecx, 4
jmp 0x132163f
xchg dword [esp], ecx
pop esp
mov dword [esp], ebx
jmp 0x13213cc