Function at 0x7dc2e3
Capabilities:
Check for vm using instruction vpcext
Contain obfuscated stackstrings
Reference the vmware io port

Disassembly:
push dword [esp]
pop eax
push esi
mov dword [esp], edx
push esp
pop edx
push edi
mov dword [esp], ebx
jmp 0x7db6f6
sub edx, 0x3ce556fa
push dword [esp]
pop ebx
add esp, 4
add edx, 4
xor edx, dword [esp]
xor dword [esp], edx
xor edx, dword [esp]
jmp 0x7db68b
push edi
pop ebx
pop edi
jmp 0x7db6ff
sub ecx, 1
inc ecx
push ebp
mov ebp, 0x5f7d324d
jmp 0x7db666
sub ecx, ebp
push dword [esp]
pop ebp
add esp, 4
not ecx
push ebp
mov ebp, 0x2c478200
or ebp, 0x6d9feb05
add ebp, 0x72a247d2
jmp 0x7db693
mov esp, dword [esp]
jmp 0x7db6c1
sub ecx, 0x67ee66ba
add ecx, ebp
jmp 0x7db70a
xor edi, edx
pop edx
jmp 0x7db64c
sub esi, 0xffffffff
sub esi, 0x4271ab63
jmp 0x7db6eb
push 0x7beeb5c4
pop edi
jmp 0x7db74f
sub esp, 4
mov dword [esp], edx
push esi
mov dword [esp], ecx
mov ecx, 0x3fff61fe
jmp 0x7db654
not edx
xor edx, 0x4bf64427
sub edx, 0x8d770d84
jmp 0x7db6a0
sub edx, 0x3eef2ee6
jmp 0x7db73a
push ecx
mov dword [esp], edi
jmp 0x7db6b6
push esi
mov esi, 0x7f57025c
jmp 0x7db6a8
push edi
mov edi, 0x6bff0826
xor edi, ebp
xor ebp, edi
xor edi, ebp
not ebp
xchg edi, ebp
shr edi, 7
push ecx
mov ecx, 0x99399b35
add edi, 0x7efcf67e
sub edi, ecx
sub edi, 0x7efcf67e
pop ecx
add ecx, edi
pop edi
jmp 0x7db78b
add edx, esi
add edx, 0x3eef2ee6
mov esi, dword [esp]
add esp, 4
add edx, ebx
jmp 0x7db62e
shl edi, 6
shr edi, 7
neg edi
push edx
mov edx, 0x3f760946
jmp 0x7db6d8
sub eax, 0x7f7f2966
sub eax, edx
add eax, 0x7f7f2966
mov edx, dword [esp]
sub esp, 4
mov dword [esp], eax
mov eax, esp
add eax, 4
add eax, 4
jmp 0x7db7a1
pop ebp
mov edx, ecx
jmp 0x7db793
mov ecx, dword [esp]
add esp, 4
jmp 0x7db762
xchg dword [esp], eax
pop esp
jmp 0x7db7aa
jmp 0x7db7af
push 0x7cd486bb
mov dword [esp], eax
mov eax, dword [esp]
push ebx
mov dword [esp], 0x4450a4bf
mov dword [esp], edx
jmp 0x7db843
neg dword [esp]
sub dword [esp], 0xd8617d21
and dword [esp], 0x75999af8
inc dword [esp]
push ecx
mov ecx, 0x33bcc803
sub dword [esp + 4], ecx
pop ecx
mov dword [esp], edx
mov edi, dword [esp]
add esp, 4
jmp 0x7dba69
pop ebx
xor edx, dword [esp]
xor dword [esp], edx
xor edx, dword [esp]
pop esp
jmp 0x7dba74
mov dword [esp], ebp
mov ebp, 0x5fdfb300
jmp 0x7db895
push 0x745ed557
mov dword [esp], ebx
mov dword [esp], edx
mov edx, esp
add edx, 4
push ebx
mov ebx, 4
jmp 0x7db9e4
xor edx, dword [esp]
xor dword [esp], edx
xor edx, dword [esp]
jmp 0x7db85d
mov edx, esp
push 0x7397c74a
mov dword [esp], edi
sub esp, 4
mov dword [esp], esi
push 0x3b509246
jmp 0x7db86e
mov esp, dword [esp]
push 0x4c9f6e00
mov dword [esp], edx
push esp
jmp 0x7db9eb
mov dword [esp], ebp
mov dword [esp], eax
jmp 0x7db879
mov dword [esp], 0x2efabf27
pop esi
shr esi, 7
and esi, 0x7e7e70fe
xchg esi, edx
neg edx
xchg esi, edx
jmp 0x7db8fd
add ebp, 0x3feb910e
sub ebp, 0x6830cc74
add edx, ebp
mov ebp, dword [esp]
add esp, 4
sub edx, 0x7ff6585b
add edx, edi
push ecx
push ebx
push 0x5f9b1234
pop ebx
or ebx, 0x19d66141
sub ebx, 0xdfe1e20a
mov ecx, ebx
pop ebx
shr ecx, 5
add ecx, 0x37bfe0d9
dec ecx
sub ecx, 0xbbc97508
add edx, ecx
pop ecx
sub edx, 0x379a779a
pop edi
sub edx, 4
xchg dword [esp], edx
jmp 0x7db9f1
push 0x255d8b3f
mov dword [esp], edx
jmp 0x7db955
push ebx
mov ebx, 0x6dfb0a50
not ebx
xor ebx, 0x7a735001
sub ebx, 0x33bf7cce
sub ebx, 0xb45bb85e
add esi, ebx
pop ebx
mov edi, esi
mov esi, dword [esp]
add esp, 4
sub edx, 0x6d5eaaf7
add edx, edi
add edx, 0x6d5eaaf7
mov edi, dword [esp]
add esp, 4
add edx, 4
xor edx, dword [esp]
xor dword [esp], edx
xor edx, dword [esp]
mov esp, dword [esp]
push 0x24ff0700
mov dword [esp], ecx
jmp 0x7db8f0
push ebx
jmp 0x7db970
push esi
mov dword [esp], edx
push ebp
jmp 0x7db983
add esi, 4
xchg dword [esp], esi
jmp 0x7db9a5
sub dword [esp], 0x6fffaa9c
pop edx
add edx, 0x6fffaa9c
jmp 0x7db95b
mov ebp, 0x3efbb8a2
xor dword [esp + 4], ebp
pop ebp
pop ecx
xor ecx, 0x3efbb8a2
mov edx, dword [esp]
push esi
mov esi, esp
add esi, 4
jmp 0x7db965
pop esp
sub esp, 4
mov dword [esp], ecx
mov ebx, dword [esp]
add esp, 4
push dword [esp]
pop ecx
push edx
push 0x7d1f6d8d
mov dword [esp], esp
add dword [esp], 4
pop edx
add edx, 4
add edx, 4
jmp 0x7db835
pop edx
mov edi, dword [esp]
jmp 0x7db817
add edx, ebx
jmp 0x7db7fa
pop edx
jmp 0x7dba3c
mov esp, dword [esp]
mov dword [esp], edi
mov dword [esp], ecx
mov ecx, dword [esp]
push edx
mov edx, esp
add edx, 4
add edx, 4
xchg dword [esp], edx
mov esp, dword [esp]
push ecx
mov dword [esp], edi
push edi
mov dword [esp], 0x7bfb7b64
shr dword [esp], 4
shr dword [esp], 2
add dword [esp], 0x4abba776
mov dword [esp], edx
mov dword [esp], 0x79f53f6c
jmp 0x7dba56
push eax
mov dword [esp], 0x6919f61
mov dword [esp], edi
mov edi, 4
push 0x31654055
jmp 0x7db80a
xor dword [esp], 0x7fdf0bac
sub dword [esp], 0x5677968b
jmp 0x7db7ca
sub esp, 4
mov dword [esp], edi
jmp 0x7db9db
jmp 0x7dbe14
push edx
push 0x2b729b47
mov dword [esp], esp
jmp 0x7dbebe
neg esi
jmp 0x7dbf0e
mov ebx, ecx
mov ecx, dword [esp]
jmp 0x7dbf97
mov edx, dword [esp]
add esp, 4
add edx, 4
sub edx, 4
xchg dword [esp], edx
pop esp
mov dword [esp], eax
xor dword [esp], 0x3ff5f1b8
push dword [esp]
mov eax, dword [esp]
jmp 0x7dbeb2
add esi, 0x7fffdd00
jmp 0x7dbe9c
sub esp, 4
mov dword [esp], edx
mov edx, 0x45db3cbf
sub ecx, edx
pop edx
add ebx, 0x5625427b
add ebx, ecx
sub ebx, 0x5625427b
push dword [esp]
pop ecx
add esp, 4
jmp 0x7dbfc9
mov ecx, edx
pop edx
jmp 0x7dbe69
add esi, 1
jmp 0x7dbf2a
pop esp
xor eax, 0x3ff5f1b8
jmp 0x7dbf91
add esp, 4
push eax
jmp 0x7dbeca
add dword [esp], 4
jmp 0x7dbe33
mov dword [esp], ecx
push esp
jmp 0x7dbf02
sub esp, 4
mov dword [esp], ebx
push eax
mov dword [esp], 0x32621e8b
mov dword [esp], esi
push edx
mov edx, 0x7fe330e5
mov esi, edx
pop edx
push ecx
push 0x7fbf84e6
pop ecx
sub ecx, 0x76df2e77
jmp 0x7dbf19
pop ecx
jmp 0x7dbf08
push esi
jmp 0x7dbf20
xor esi, 0x7d7b96c5
jmp 0x7dbe5e
not ecx
jmp 0x7dbf85
mov esi, 0x7e9d7691
jmp 0x7dbe22
sub esi, 0x7c18fca7
add ecx, 0x26dd7100
push edi
mov edi, 0x74fdb3ab
shl edi, 3
push ebp
mov ebp, 0xffffffff
add edi, ebp
pop ebp
shl edi, 1
jmp 0x7dbf50
shl edi, 8
sub edi, 0x6c5b7599
sub ecx, edi
pop edi
sub ecx, 0x7e16d8c5
add ecx, esi
add ecx, 0x7e16d8c5
add ecx, 0x6edf3867
sub ecx, 0x26dd7100
pop esi
add ecx, 4
xchg dword [esp], ecx
jmp 0x7dbea7
inc ecx
xor ecx, 0x420d01f1
jmp 0x7dbe29
push ebx
jmp 0x7dbed3
add esp, 4
sub ebx, esi
pop esi
sub dword [esp + 4], ebx
pop ebx
pop ebx
push eax
mov dword [esp], edx
mov dword [esp], ecx
push edx
mov edx, 0x3ffd4ce1
jmp 0x7dbfb8
shr edx, 3
shl edx, 3
add edx, 0x3b0d675a
jmp 0x7dbe94
call 0x7dbfce
mov eax, dword [esp]
sub esp, 4
mov dword [esp], ecx
jmp 0x7dbffb
mov dword [esp], ecx
jmp 0x7dc024
pop edx
jmp 0x7dc009
mov edx, 0x7ff69ce3
xor dword [esp + 4], edx
jmp 0x7dbfe7
sub esp, 4
mov dword [esp], eax
mov dword [esp], esp
jmp 0x7dc047
pop ecx
push esi
mov esi, 0x7ff69ce3
xor ecx, esi
jmp 0x7dc017
pop esi
push dword [esp]
pop eax
add esp, 4
jmp 0x7dc06c
push 0xd1e57ff
mov dword [esp], eax
jmp 0x7dc031
sub esp, 4
mov dword [esp], edx
mov edx, 0x7ffea2f3
sub edx, 0xffffffff
jmp 0x7dc08a
add dword [esp], 4
mov ecx, dword [esp]
push 0x73375fe0
mov dword [esp], edx
sub esp, 4
push esp
pop dword [esp]
add dword [esp], 4
jmp 0x7dc084
sub eax, ecx
jmp 0x7dc0d8
xor edx, 0x7ab9dfa2
xor edx, 0x3d3957bb
jmp 0x7dc0d1
pop edx
jmp 0x7dc0c0
sub edx, 0x2ff1110
mov eax, edx
mov edx, dword [esp]
add esp, 4
push edx
mov edx, 0x3b7f06be
jmp 0x7dc073
xchg dword [esp], edx
mov esp, dword [esp]
push ebx
mov dword [esp], esi
push ebp
mov dword [esp], 4
mov esi, dword [esp]
add esp, 4
jmp 0x7dc110
add edx, 4
add edx, 4
jmp 0x7dc0a3
sub eax, edx
jmp 0x7dc0ec
push dword [esp]
mov ecx, dword [esp]
add esp, 4
push ecx
push esp
pop ecx
jmp 0x7dc0fb
pop edx
push eax
push 0x10a70208
mov dword [esp], edx
jmp 0x7dbfed
add ecx, 4
add ecx, 4
xchg dword [esp], ecx
pop esp
jmp 0x7dc149
add ecx, esi
pop esi
jmp 0x7dc118
add ecx, 4
xor ecx, dword [esp]
jmp 0x7dc126
xor dword [esp], ecx
jmp 0x7dc12e
xor ecx, dword [esp]
jmp 0x7dc141
sub esp, 4
jmp 0x7dbfdf
mov esp, dword [esp]
jmp 0x7dc136
push eax
mov eax, esp
add eax, 4
sub eax, 4
jmp 0x7dc1af
push ecx
jmp 0x7dc22f
add esi, eax
pop eax
add ebp, esi
pop esi
xor ecx, ebp
push dword [esp]
pop ebp
push eax
push esp
jmp 0x7dc206
mov dword [esp], edx
jmp 0x7dc261
xchg dword [esp], eax
pop esp
jmp 0x7dc1a7
push eax
mov eax, 0x84ff53fd
jmp 0x7dc194
add dword [esp + 4], eax
push dword [esp]
pop eax
push edx
mov edx, esp
jmp 0x7dc18e
mov dword [esp], 0x53db9ae8
jmp 0x7dc1fe
mov dword [esp], ebx
jmp 0x7dc332
mov ecx, esp
jmp 0x7dc236
add ecx, 4
sub ecx, 4
xchg dword [esp], ecx
pop esp
mov dword [esp], esi
mov esi, 0x6bf10e40
sub esp, 4
mov dword [esp], ecx
mov ecx, 0x6fcbe3f2
jmp 0x7dc2bd
sub esp, 4
mov dword [esp], ecx
mov ecx, esp
add ecx, 4
sub ecx, 4
xchg dword [esp], ecx
pop esp
mov dword [esp], esi
push eax
sub dword [esp], 0x3fef5cd0
pop esi
add esi, 0x3fef5cd0
push 0x26906a6f
mov dword [esp], esi
push eax
mov eax, 0x7bd7eb5a
sub dword [esp + 4], eax
pop eax
pop edx
add edx, 0x7bd7eb5a
mov esi, dword [esp]
jmp 0x7dc2c5
mov ecx, dword [esp]
push edx
mov dword [esp], edi
push esp
jmp 0x7dc3e4
and esi, ecx
pop ecx
jmp 0x7dc349
add esp, 4
mov eax, edx
push dword [esp]
pop edx
push edi
mov edi, esp
add edi, 4
push ecx
mov ecx, 4
add edi, ecx
push dword [esp]
pop ecx
push ebp
mov ebp, esp
add ebp, 4
add ebp, 4
xchg dword [esp], ebp
jmp 0x7dc2f7
pop esp
xchg dword [esp], edi
mov esp, dword [esp]
sub esp, 4
mov dword [esp], ebx
jmp 0x7dc1d3
mov dword [esp], ebp
jmp 0x7dc311
sub esp, 4
mov dword [esp], edx
mov edx, 0x3ff54283
xor edx, 0x5ecc7c97
shr edx, 5
add edx, 0x913533cc
mov ebp, edx
jmp 0x7dc355
push 0x5d31dd2c
mov dword [esp], eax
jmp 0x7dc33f
mov eax, 0x5fa36c96
jmp 0x7dc1c3
neg esi
push 0x24197989
jmp 0x7dc309
pop edx
jmp 0x7dc381
sub ebx, 0x5fa36c96
push ecx
mov dword [esp], edx
jmp 0x7dc3b3
sub esi, ebp
pop ebp
add edx, esi
pop esi
add edx, 4
xchg dword [esp], edx
pop esp
mov ebx, dword [esp]
push ebp
mov ebp, esp
add ebp, 4
add ebp, 4
xchg dword [esp], ebp
pop esp
jmp 0x7dc372
mov edx, esp
add edx, 4
sub edx, 4
jmp 0x7dc3c3
xchg dword [esp], edx
pop esp
mov dword [esp], ecx
push edi
jmp 0x7dc3d0
mov edi, 0x7ef729b2
jmp 0x7dc3da
xor dword [esp + 4], edi
pop edi
jmp 0x7dc2b0
pop edi
add edi, 4
add edi, 4
xchg dword [esp], edi
mov esp, dword [esp]
push ecx
mov dword [esp], 0x7bf637c0
mov dword [esp], ebp
mov ebp, 0x73f7bdb6
push esi
mov esi, 0x79ffe800
inc esi
dec esi
push esi
not dword [esp]
pop esi
jmp 0x7dc1b8