Function at 0x7d553f
Capabilities:
Check for vm using instruction vpcext
Contain obfuscated stackstrings
Reference the vmware io port

Disassembly:
pop eax
add eax, 0xe
mov dword [eax], ecx
jmp 0x7d0c33
jmp 0x7d4408
jmp 0x7d550d
push ebp
mov dword [esp], esp
jmp 0x7d5c85
sub dword [esp + 4], edi
mov edi, dword [esp]
push ebp
mov ebp, esp
add ebp, 4
add ebp, 4
xchg dword [esp], ebp
jmp 0x7d5ffe
pop eax
jmp 0x7d6b44
push dword [esp]
pop esi
push ebx
mov ebx, esp
push ecx
mov ecx, 4
jmp 0x7d6f0f
pop ebp
inc edx
sub edx, 0x7ee3ff58
push esi
push edi
mov dword [esp], edx
mov edx, 0x6fd33002
push eax
push 0x6f7f7a42
pop eax
xor eax, 0x75b38861
xor eax, 0xd4da8c7a
jmp 0x7d6ad8
pop eax
push edi
mov edi, esp
jmp 0x7d6c0d
push eax
mov eax, 4
add dword [esp + 4], eax
pop eax
jmp 0x7d8e6e
push edi
jmp 0x7d7809
mov esi, esp
add esi, 4
add esi, 4
xchg dword [esp], esi
jmp 0x7d61b1
mov dword [esp], ebx
push esp
mov ebx, dword [esp]
add esp, 4
push edx
jmp 0x7d5f47
mov edi, esp
add edi, 4
add edi, 4
xchg dword [esp], edi
pop esp
sub esp, 4
mov dword [esp], ebx
push edx
mov edx, 0x775b2fc7
push ebx
push esi
mov esi, 0x7ffccc6e
mov ebx, 0x2ffcf72d
not ebx
sub ebx, 0x5fd92e3e
shl ebx, 8
xor ebx, 0x53de8a65
jmp 0x7d64d2
pop esp
add eax, 0x77bb05c5
push ebp
mov dword [esp], 0x530c8a29
jmp 0x7d5ee8
mov edx, esp
jmp 0x7d66eb
not ecx
jmp 0x7d5f64
add esp, 4
push esi
push ebp
push 0x66eee1b2
pop ebp
jmp 0x7db0b0
push edx
push 0x6eb9718
mov dword [esp], ebp
push ebx
jmp 0x7d5d5e
xor edi, 0x4628992a
mov edx, edi
pop edi
jmp 0x7d7e12
mov dword [esp], 0x17fb3a70
jmp 0x7d6b5b
pop esp
mov dword [esp], ebp
push eax
mov dword [esp], 0x2edf399f
pop ebp
sub ebp, 1
xor ebp, 0x59643c5b
jmp 0x7da18b
mov dword [esp], eax
push esi
mov esi, 0x49ee0341
xor dword [esp + 4], esi
push dword [esp]
pop esi
push ecx
mov dword [esp], eax
push 0x42d2dd78
mov dword [esp], esp
add dword [esp], 4
pop eax
push 0x63149185
mov dword [esp], esi
jmp 0x7d978e
mov edx, 4
add ebx, edx
pop edx
jmp 0x7d715c
inc ecx
push edx
mov edx, 0x5fb7f8e7
xor edx, 0x7fde418d
add edx, 0x596d702a
jmp 0x7d682d
mov esp, dword [esp]
push dword [esp]
pop eax
jmp 0x7d651b
mov esp, dword [esp]
mov dword [ebp + 0x122d2ef9], eax
mov dword [ebp + 0x122d347b], 0
sub esp, 4
mov dword [esp], edi
jmp 0x7d6677
add ebx, 0x77e56c9b
pop ebp
jmp 0x7d8c57
add ebx, 0x69ed0f6
sub ebx, esi
jmp 0x7d7931
push edi
jmp 0x7d5954
or esi, 0x7fdeffa0
sub esi, 0x1ebb365e
push ebx
push eax
push 0x4ddc3e57
pop eax
and eax, 0x1fef1623
jmp 0x7d9594
mov dword [esp], eax
sub dword [esp], 0x6ce9cb28
pop eax
push 0x321bde93
jmp 0x7d86a2
push esi
push edi
mov dword [esp], ebp
mov ebp, 0x7fffbc18
push ebp
xor dword [esp], 0x7c34e0b5
mov esi, dword [esp]
add esp, 4
xor esi, 0x7c34e0b5
pop ebp
neg esi
shl esi, 4
jmp 0x7d65a7
mov edi, ebp
jmp 0x7da97d
xor eax, 0x7ebfcfd8
add edi, eax
jmp 0x7d8a03
xor ecx, edx
pop edx
add ebx, ecx
pop ecx
add ebx, edx
sub ebx, 0x363786f7
pop edx
xchg dword [esp], ebx
pop esp
push edi
jmp 0x7da31e
push edi
jmp 0x7db423
push ecx
jmp 0x7d738f
push eax
jmp 0x7d91a7
sub esi, edx
pop edx
sub esi, 0x2bcd7dd3
add edx, esi
pop esi
add esi, edx
pop edx
sub esi, 4
jmp 0x7dadb2
dec dword [esp]
not dword [esp]
jmp 0x7d839f
add edi, 4
add edi, 4
xchg dword [esp], edi
pop esp
push esi
jmp 0x7d5881
mov esi, ebp
pop ebp
add eax, esi
pop esi
cmp dword [ebp + 0x122d2c33], 0
jne 0x7d6ca3
cmp dword [ebp + 0x122d2c9f], 0
je 0x7d6cb2
push eax
mov eax, eax
mov eax, 0
call dword [ebp + 0x122d1d6d]
pop eax
push 0x4d7dd7
mov dword [esp], ecx
push esi
mov dword [esp], ecx
push esp
pop dword [esp]
jmp 0x7d575f
sub ecx, 4
xchg dword [esp], ecx
pop esp
mov dword [esp], eax
pop esi
mov eax, esi
push dword [esp]
pop esi
add esp, 4
push eax
mov dword [esp], 0x11a6ee84
mov dword [esp], edx
mov dword [esp], 0x3fff2bf9
sub dword [esp], 0x82f9944
jmp 0x7d74c1
add ebx, ecx
pop ecx
add ebx, 4
xchg dword [esp], ebx
mov esp, dword [esp]
jmp 0x7d7821
mov dword [esp], ecx
mov dword [esp], ebp
mov dword [esp], 0x4e6195cc
mov dword [esp], eax
add dword [esp], 0x5ddb0422
push dword [esp]
pop eax
jmp 0x7d7536
mov dword [esp], edi
xor dword [esp], 0x3f6f9507
pop eax
push eax
jmp 0x7d7887
push ebp
jmp 0x7d8a7c
add esp, 4
push dword [esp]
push dword [esp]
jmp 0x7d5756
mov dword [esp], edx
jmp 0x7d5869
and dword [esp], 0x7be77d95
xor dword [esp], 0x4d28dd14
push edi
mov edi, 0x19080317
xor dword [esp + 4], edi
jmp 0x7d9a7d
push 0x7ff51a73
pop edx
add edx, 0xf807f2b7
mov ebx, edx
pop edx
push eax
mov eax, ebx
push ebp
mov ebp, eax
jmp 0x7d676e
push edx
jmp 0x7d5a13
push 0x7f5f7423
pop edi
jmp 0x7d5c9b
push dword [esp]
pop eax
push eax
mov dword [esp], edi
push esp
pop edi
push eax
mov eax, 0x7ebfcfdc
jmp 0x7d67e9
mov dword [esp], ebx
push edx
mov dword [esp], ecx
jmp 0x7d7b25
pop esi
xor edx, ebx
jmp 0x7d900a
mov ecx, 0x3f6f9507
mov ebx, ecx
pop ecx
xor eax, ebx
push dword [esp]
pop ebx
add esp, 4
pop edi
cmp dword [ebp + 0x122d2c33], 0
jne 0x7d7b4c
cmp dword [ebp + 0x122d2c9f], 0
je 0x7d7b5d
push eax
push ebx
mov eax, eax
mov eax, 0
call dword [ebp + 0x122d2f53]
pop ebx
pop eax
sub esp, 4
mov dword [esp], esi
push esp
mov esi, dword [esp]
push ebx
mov ebx, esp
add ebx, 4
add ebx, 4
xchg dword [esp], ebx
pop esp
push edx
mov edx, 0x6c7cd8b3
or edx, 0x5fff11d8
not edx
sub edx, 0x7bff4ec7
jmp 0x7d8d55
sub ecx, 0x7d71ad1f
jmp 0x7d9f6e
and ebp, 0x377f4b63
push ecx
jmp 0x7d82bf
mov ebp, dword [esp]
add esp, 4
jmp 0x7db24a
mov dword [esp], ecx
push esp
jmp 0x7da0d7
mov ecx, 0x7bef1c8a
xor ecx, 0x72ffdd12
inc ecx
inc ecx
jmp 0x7d9938
pop ebx
push ecx
mov ecx, eax
jmp 0x7d87f9
add dword [esp], 0x567aa679
pop ebp
shl ebp, 2
sub ebp, 0x74f688ba
shl ebp, 0x6e
mov cs, word [eax + 0x141c9d00]
pop ecx
xor ebp, ecx
pop ecx
push eax
mov eax, ebp
mov edx, eax
pop eax
mov ebp, dword [esp]
push ebx
mov ebx, esp
add ebx, 4
add ebx, 4
jmp 0x7d8dd5
push esp
jmp 0x7d8929
shl ebp, 3
not ebp
or ebp, 0x1fef7848
xor ebp, 0x6121c86e
add edx, ebp
pop ebp
sub edx, 0x5ee6c0d4
push ecx
mov ecx, 0x74616b78
jmp 0x7db495
sub ebx, ebp
pop ebp
add ecx, ebx
pop ebx
sub ecx, 4
xchg dword [esp], ecx
mov esp, dword [esp]
mov dword [esp], esi
jmp 0x7db4a9
mov dword [esp], ecx
push edi
mov edi, 0x7fff4800
sub esp, 4
mov dword [esp], edi
pop ecx
pop edi
shr ecx, 2
push ebp
mov ebp, 0x4ce9f928
add ecx, 0x3e36d6fe
jmp 0x7d9015
push ecx
add dword [esp], 0x4fb7e71e
pop eax
push esi
mov esi, 0x4fb7e71e
sub eax, esi
jmp 0x7da3f8
pop ecx
add ecx, 4
sub ecx, 4
xchg dword [esp], ecx
jmp 0x7d5d6a
pop eax
jmp 0x7d90ed
mov ebp, 0x7feedc20
push ecx
mov ecx, 0x7f2bd664
add ecx, 0xd0c3b594
sub ebp, ecx
pop ecx
shl ebp, 2
shr ebp, 6
shl ebp, 6
xor ebp, 0xbffd4084
sub ebx, 0x77e56c9b
add ebx, ebp
jmp 0x7d63f1
xchg dword [esp], ebx
pop esp
cmp dword [ebp + 0x122d2c33], 0
jne 0x7d8c6d
cmp dword [ebp + 0x122d2c9f], 0
je 0x7d8c82
push eax
mov eax, eax
mov eax, 0x7d0
mov dword [ebp + 0x122d3407], eax
call dword [ebp + 0x122d3418]
pop eax
push edi
jmp 0x7d6ffb
mov dword [esp], esi
mov esi, 4
add edx, esi
pop esi
jmp 0x7dab51
add ebp, 0x77f1d400
jmp 0x7d7db6
push ebx
mov ebx, 0x6bef051e
xor ebx, 0xcec0d6c9
sub edx, ebx
pop ebx
push ebp
mov ebp, 0x12bf2db1
xor edx, ebp
jmp 0x7d56ed
xchg dword [esp], ebx
pop esp
add dword [esp + 4], edx
mov edx, dword [esp]
jmp 0x7d737e
push dword [esp]
pop ecx
add esp, 4
push ebx
push edx
push 0x5fdfde96
pop edx
xor edx, 0x7f3b3d06
jmp 0x7dad65
pop ebx
sub esp, 4
mov dword [esp], ebp
push 0x71a2262e
mov dword [esp], esp
add dword [esp], 4
pop ebp
add ebp, 4
jmp 0x7d9506
pop ebx
mov ebx, edx
pop edx
add eax, ebx
jmp 0x7d8f4f
push edi
push ecx
mov ecx, 0x2eff09aa
add ecx, 0x7dfe5fe1
not ecx
and ecx, 0x7c2d68c6
sub ecx, 0xd006f940
mov edi, ecx
jmp 0x7d9ca0
add edi, 4
xchg dword [esp], edi
jmp 0x7d59a2
sub dword [esp], 0x4ffd994b
pop esi
jmp 0x7d9ff7
sub esp, 4
mov dword [esp], edi
mov edi, 4
sub ebp, edi
pop edi
xchg dword [esp], ebp
pop esp
mov dword [esp], edi
push eax
sub dword [esp], 0x7bfccd26
pop edi
jmp 0x7d9998
sub eax, 0x7eff0e56
add eax, 0xd256c199
jmp 0x7d98bd
mov dword [esp], ecx
mov ecx, 0x43df159b
sub dword [esp + 8], ecx
mov ecx, dword [esp]
add esp, 4
jmp 0x7da3b2
mov esi, 4
jmp 0x7d9e3d
add dword [esp + 4], 0x35978921
sub esp, 4
jmp 0x7d973f
mov ebx, eax
pop eax
xor esi, ebx
pop ebx
add edx, esi
pop esi
add edx, 4
xor edx, dword [esp]
xor dword [esp], edx
xor edx, dword [esp]
mov esp, dword [esp]
jmp 0x7d69ac
push ebx
mov ebx, 0x7c13ba2f
xor ebx, 0x7d2b4da7
jmp 0x7da045
add edi, 0x7bfccd26
push esi
mov dword [esp], 0x17f60340
inc dword [esp]
shl dword [esp], 4
neg dword [esp]
xchg dword [esp], eax
not eax
xchg dword [esp], eax
add dword [esp], 0x8e3e435c
jmp 0x7d70cf
pop edi
mov dword [esp], eax
push dword [esp]
pop eax
push edi
mov dword [esp], esi
jmp 0x7d5941
pop ecx
shl edi, 8
dec edi
or edi, 0x7f93b122
xor edi, 0x82e61ee0
add ecx, edi
pop edi
add ecx, ebp
jmp 0x7d7ba4
sub eax, 0x5989a793
add eax, esi
add eax, 0x5989a793
pop esi
add eax, 4
xchg dword [esp], eax
mov esp, dword [esp]
push dword [esp]
jmp 0x7da85f
sub ecx, 0x3e36d6fe
jmp 0x7d8184
add esi, 0x4ffd994b
jmp 0x7d563e
shl ebx, 4
sub ebx, 0xffffffff
neg ebx
sub ebx, 0x9fb020fb
add ecx, ebx
pop ebx
xor ebp, ecx
pop ecx
add eax, ebp
pop ebp
jmp 0x7dac8b
pop ecx
jmp 0x7db3fe
mov esi, ebp
pop ebp
sub dword [esp + 4], esi
jmp 0x7d5644
sub edx, 4
xchg dword [esp], edx
pop esp
mov dword [esp], eax
push ecx
push edx
mov edx, 0x7f5d5135
mov ecx, 0xc04e27ff
add ecx, edx
pop edx
add dword [esp + 4], 0x43df159b
sub dword [esp + 4], 0x35978921
sub dword [esp + 4], ecx
jmp 0x7d9869
push esi
mov esi, 0x5cff0026
sub dword [esp + 4], esi
pop esi
mov eax, dword [esp]
push ebx
mov ebx, esp
add ebx, 4
add ebx, 4
xchg dword [esp], ebx
pop esp
add eax, 0x5cff0026
push dword [esp]
pop edi
add esp, 4
push edx
push 0x3109f1fd
mov dword [esp], esp
jmp 0x7da39c
add dword [esp], 4
pop edx
add edx, 4
jmp 0x7da218
push dword [esp]
pop ecx
push edx
mov edx, esp
sub esp, 4
jmp 0x7d8c96
pop esi
push dword [esp]
push dword [esp]
jmp 0x7db3ea
mov eax, dword [esp]
add esp, 4
add esp, 4
sub esp, 4
mov dword [esp], esi
mov esi, 0x7f7f71e4
sub esi, 0x35916ea3
xor eax, esi
mov esi, dword [esp]
add esp, 4
cmp dword [ebp + 0x122d2c33], 0
jne 0x7da89c
cmp dword [ebp + 0x122d2c9f], 0
je 0x7da8ab
push eax
mov eax, eax
mov eax, 0
call dword [ebp + 0x122d390d]
pop eax
cmp dword [ebp + 0x122d2c9f], 0
je 0x7da8c1
push eax
mov eax, 0
call dword [ebp + 0x122d2f58]
pop eax
push eax
sub esp, 4
mov dword [esp], edi
push ebx
push 0xdd69601
mov dword [esp], edx
jmp 0x7d74de
pop ebp
pop eax
pop ebx
jmp 0x7d5538
add edx, 4
xchg dword [esp], edx
pop esp
mov eax, dword [esp]
jmp 0x7d5ac1
mov ecx, dword [esp]
add esp, 4
cmp dword [ebp + 0x122d2c33], 0
jne 0x7daca3
cmp dword [ebp + 0x122d2c9f], 0
je 0x7dacb8
push eax
mov eax, eax
mov eax, 0x43d
mov dword [ebp + 0x122d3407], eax
call dword [ebp + 0x122d3418]
pop eax
push eax
push esi
sub esp, 4
mov dword [esp], ecx
jmp 0x7d843b
shl edx, 1
sub edx, 0xa19f0e1
mov ebx, edx
pop edx
push ebp
mov ebp, 0x37afd63b
jmp 0x7d85a2
push ecx
mov dword [esp], esi
push dword [esp + 4]
jmp 0x7db079
pop esi
pop dword [esp]
pop esp
mov dword [esp], ebx
push eax
xor dword [esp], 0x3fff0f39
mov ebx, dword [esp]
add esp, 4
xor ebx, 0x3fff0f39
mov eax, ebx
jmp 0x7d82d1
inc ebp
or ebp, 0x73ffefba
sub ebp, 0x5fb35121
xor ebp, 0x27e7e7ae
jmp 0x7d6c8b
sub eax, 0x73f8621d
add eax, ecx
push ebp
mov ebp, 0x76b7968f
jmp 0x7d8d1f
push 0x5d1da75e
mov dword [esp], edi
push edx
mov edx, 0x7fffe2d2
mov edi, edx
pop edx
jmp 0x7db409
pop ecx
add esp, 4
push ebx
mov dword [esp], edi
mov dword [esp], 0x1582068b
jmp 0x7d8268
add ecx, 4
jmp 0x7db3d4
and edi, 0x679f0dd2
add edi, 0x7da106c1
push edx
mov edx, 0xe5400797
xor edi, edx
pop edx
jmp 0x7d699f
mov edi, 0x5aa60d49
add ecx, edi
pop edi
add ecx, edi
sub ecx, 0x5aa60d49
pop edi
xor ecx, dword [esp]
xor dword [esp], ecx
xor ecx, dword [esp]
mov esp, dword [esp]
cmp dword [ebp + 0x122d2c33], 0
jne 0x7db452
cmp dword [ebp + 0x122d2c9f], 0
je 0x7db461
push eax
mov eax, eax
mov eax, 0
call dword [ebp + 0x122d2eee]
pop eax
push 0x330c4e6b
mov dword [esp], edi
push eax
push dword [esp]
mov edi, dword [esp]
add esp, 4
push ebx
mov ebx, esp
add ebx, 4
push edx
mov edx, 0x1ff7f0b9
neg edx
push ebp
mov ebp, 0x7dfe16fb
shl ebp, 6
jmp 0x7d84e3
xchg ecx, eax
not eax
push ecx
push eax
pop ecx
pop eax
neg ecx
add ecx, 0x3bbde524
jmp 0x7d5a1a
push ecx
jmp 0x7db4af
mov ecx, esp
add ecx, 4
jmp 0x7d6e9e