Function at 0x5de75b
Capabilities:
Check for vm using instruction vpcext
Contain obfuscated stackstrings
Reference the vmware io port

Disassembly:
push dword [esp]
mov eax, dword [esp]
add esp, 4
push edx
mov dword [esp], eax
push esp
push dword [esp]
pop eax
sub esp, 4
jmp 0x5dde97
mov edi, esp
add edi, 4
add edi, 4
jmp 0x5dde87
push ebx
jmp 0x5ddedd
add esp, 4
sub eax, 0x4f1eca9b
sub eax, ebx
push ebp
push ecx
push 0x5dcf028a
pop ecx
not ecx
jmp 0x5dde40
push ecx
mov ecx, esp
add ecx, 4
add ecx, 4
xchg dword [esp], ecx
pop esp
xor ebx, ecx
jmp 0x5ddeb7
pop edi
jmp 0x5dde5b
sub ecx, 0x7dd7f104
xor ecx, 0x3e0128a0
mov ebp, ecx
pop ecx
dec ebp
xor ebp, 0x5bb6f452
jmp 0x5dde75
add eax, ebp
pop ebp
push dword [esp]
jmp 0x5dde90
push esp
pop edi
jmp 0x5dded2
mov ebx, dword [esp]
jmp 0x5dde20
shl ebp, 4
inc ebp
inc ebp
push edi
mov edi, 0xcfce3d87
sub ebp, edi
jmp 0x5dde3a
xchg dword [esp], edi
pop esp
jmp 0x5ddf6f
pop ebx
push edi
jmp 0x5dddf1
mov dword [esp], edi
jmp 0x5dde66
xchg ecx, esi
and ecx, 0x7ebebf32
shr ecx, 2
add ecx, 0xf1d450fc
add eax, ecx
jmp 0x5ddf24
mov ecx, dword [esp]
jmp 0x5dde07
add esp, 4
add esp, 4
push 0x2defd882
jmp 0x5dde6d
add edi, 4
jmp 0x5dde01
mov ebx, 0x6ee759af
push ebp
mov ebp, 0x77ff0a6b
or ebx, ebp
pop ebp
not ebx
sub ebx, 0x8000a40c
add edi, ebx
jmp 0x5ddefa
pop ebx
push edi
push dword [esp + 4]
pop edi
pop dword [esp]
pop esp
push ecx
mov ecx, 0x3defbbca
jmp 0x5ddf10
dec ecx
add ecx, 0x7bbf4121
xchg ecx, esi
add esi, 1
jmp 0x5dde9f
mov ecx, dword [esp]
add esp, 4
add eax, 4
xchg dword [esp], eax
mov esp, dword [esp]
sub esp, 4
mov dword [esp], ebx
jmp 0x5ddf46
sub esp, 4
mov dword [esp], ecx
push edi
push ecx
mov ecx, 0x7fdebce8
shl ecx, 3
add ecx, 0x2ef9f440
mov edi, ecx
pop ecx
mov ecx, edi
push dword [esp]
mov edi, dword [esp]
jmp 0x5ddebf
push 0x25c97efb
mov dword [esp], ecx
jmp 0x5de000
mov dword [esp], ecx
mov ecx, 0x7fbfb605
shl ecx, 7
sub ecx, 0xffffffff
not ecx
sub ecx, 0xb065bf1d
push esi
mov esi, ecx
mov ebp, esi
pop esi
mov ecx, dword [esp]
add esp, 4
push esi
push ecx
push eax
mov eax, 0x7e7b2039
xor eax, 0xd84757f
mov ecx, eax
pop eax
jmp 0x5de076
pop edx
add eax, edi
mov edi, dword [esp]
add esp, 4
push edi
mov edi, 0x37da5746
add edi, 0x697fc504
xor edi, 0xa15a1c4e
sub eax, edi
pop edi
push ecx
mov dword [esp], eax
push dword [esp + 4]
pop eax
pop dword [esp]
pop esp
mov dword [esp], edx
push dword [esp]
jmp 0x5ddff4
mov dword [esp], edx
jmp 0x5de199
pop edx
add esp, 4
jmp 0x5de251
mov dword [esp], edx
mov dword [esp], 0x3efaf0e6
shr dword [esp], 2
add dword [esp], 0x70204f93
add dword [esp], 0xf656e4eb
xchg dword [esp], ecx
not ecx
xchg dword [esp], ecx
add dword [esp], 0x7fb750a8
shl dword [esp], 8
jmp 0x5de0e9
push edx
push dword [esp + 4]
jmp 0x5de21c
mov eax, esp
sub esp, 4
mov dword [esp], edi
push eax
push 0x57bf5c54
pop eax
jmp 0x5de1e2
mov dword [esp], edx
mov edx, 0x7f6d30a0
or edx, 0x77de9d7e
not edx
inc edx
shr edx, 2
add edx, 0xdc6da919
add edi, edx
jmp 0x5ddfb6
mov esi, ecx
pop ecx
sub dword [esp + 8], esi
mov esi, dword [esp]
add esp, 4
jmp 0x5de0ce
push 0x7122e900
jmp 0x5de055
pop edx
push esi
push dword [esp + 4]
mov esi, dword [esp]
add esp, 4
pop dword [esp]
pop esp
sub esp, 4
mov dword [esp], eax
push edi
mov edi, 0x61de941c
mov eax, 0x7e21a7b7
xor eax, edi
pop edi
add ebx, 0x7db19b64
add ebx, eax
jmp 0x5de0f8
push dword [esp]
jmp 0x5de19f
sub dword [esp + 4], ebp
sub esp, 4
mov dword [esp], eax
mov eax, 0x73ff5546
add dword [esp + 8], eax
jmp 0x5de137
add dword [esp], 0xc312c798
mov dword [esp], eax
jmp 0x5de125
sub ebx, 0x7db19b64
mov eax, dword [esp]
add esp, 4
jmp 0x5de1be
pop ebp
jmp 0x5de160
mov ecx, 0x1fff33ab
add dword [esp + 4], 0x5efb8a86
sub dword [esp + 4], ecx
jmp 0x5de20e
push dword [esp]
push dword [esp]
pop eax
add esp, 4
jmp 0x5de175
pop eax
jmp 0x5de17d
add esp, 4
add edx, 4
jmp 0x5de158
push edx
mov edx, 4
add esi, edx
jmp 0x5de092
add edx, 4
jmp 0x5de034
shl dword [esp], 3
sub dword [esp], 0x8a1f3688
mov dword [esp], esi
mov esi, esp
jmp 0x5de232
sub esp, 4
jmp 0x5ddfec
mov ebp, dword [esp]
add esp, 4
push dword [esp]
pop ecx
add esp, 4
add ecx, 0x6fbf3e61
push eax
jmp 0x5de03e
push esp
jmp 0x5de1d4
pop ebx
push eax
mov dword [esp], 0x3bfb3d16
add dword [esp], 0x5bfdc3ec
push ebp
mov ebp, 0x76478337
or dword [esp + 4], ebp
jmp 0x5de109
push eax
mov dword [esp], ebp
mov dword [esp], ecx
push edx
mov dword [esp], ebp
sub esp, 4
jmp 0x5ddf7c
push dword [esp]
mov edx, dword [esp]
add esp, 4
jmp 0x5de13d
shl eax, 2
add eax, 0xcfff36ac
mov edi, eax
pop eax
push esi
mov esi, 0x6ffebad1
inc esi
add esi, 0xeebbcfc1
add edi, esi
push dword [esp]
pop esi
add esp, 4
push edi
xchg dword [esp], ecx
not ecx
jmp 0x5de23d
sub dword [esp + 4], 0x5efb8a86
pop ecx
jmp 0x5de0c6
pop edx
pop dword [esp]
pop esp
push edi
mov dword [esp], 0x25e5c91
mov dword [esp], ebx
push ecx
jmp 0x5de10f
add esi, 4
jmp 0x5de14b
xchg dword [esp], ecx
mov edi, dword [esp]
add esp, 4
shr edi, 5
jmp 0x5de088
jmp 0x5de659
push 0x126b0e24
jmp 0x5de6b3
sub ecx, 0x75f3f423
add ecx, eax
add ecx, 0x75f3f423
pop eax
xor esi, ecx
mov ecx, dword [esp]
add esp, 4
inc esi
push eax
mov eax, 0x3d4842fe
add esi, eax
pop eax
jmp 0x5de7fd
add eax, ecx
pop ecx
add eax, 4
jmp 0x5de740
not dword [esp]
inc dword [esp]
sub dword [esp], 0x3bfbe178
xor dword [esp], 0xad28619
mov dword [esp], esi
jmp 0x5de6ee
mov dword [esp], eax
push eax
mov dword [esp], 0x1cfddc1d
jmp 0x5de7d0
mov edx, 0x6bafc7e4
add ecx, edx
pop edx
push eax
push edi
mov edi, 0x7f0798ee
mov eax, edi
pop edi
jmp 0x5de76e
neg eax
add eax, 0x93800d72
jmp 0x5de663
add ecx, eax
pop eax
jmp 0x5de7ba
mov esi, 0x6f120215
jmp 0x5de709
add ebx, 4
sub ebx, 4
jmp 0x5de795
push 0xd77cfab
mov dword [esp], ecx
mov ecx, 0x5a62623c
sub ecx, 0x7d3d286d
jmp 0x5de721
shr ecx, 8
push eax
jmp 0x5de734
and eax, 0x5dfb31f0
jmp 0x5de775
mov eax, 0x57fd401f
neg eax
jmp 0x5de72a
xor eax, dword [esp]
xor dword [esp], eax
xor eax, dword [esp]
mov esp, dword [esp]
jmp 0x5de853
shr dword [esp], 3
add dword [esp], 0x46131983
and dword [esp], 0x7f9f96c2
jmp 0x5de7e6
pop ebx
jmp 0x5de6f8
or ecx, eax
jmp 0x5de7ef
or eax, 0x3effda0b
xor eax, 0xc1000414
jmp 0x5de6e6
pop ebp
sub esp, 4
mov dword [esp], esi
mov esi, ecx
jmp 0x5de815
xchg dword [esp], ebx
pop esp
mov dword [esp], eax
mov eax, esp
push ecx
mov ecx, 0x5effb6fa
push edx
jmp 0x5de6c3
add dword [esp], 0x3effa1e2
shl dword [esp], 1
jmp 0x5de751
or ecx, 0x4a6f7218
dec ecx
push eax
mov eax, 0x77ee9184
not eax
neg eax
jmp 0x5de7dc
or dword [esp], 0x5ffd02ca
jmp 0x5de7aa
or eax, 0x7f376910
jmp 0x5de6da
shl dword [esp], 8
jmp 0x5de697
pop eax
not ecx
xor ecx, 0x500105
jmp 0x5de68c
sub dword [esp + 4], esi
pop esi
mov eax, dword [esp]
add esp, 4
push edi
mov edi, 0x6eb5cc00
add eax, edi
jmp 0x5de82c
push ebp
mov ebp, esi
mov ebx, ebp
pop ebp
pop esi
push dword [esp]
mov ecx, dword [esp]
add esp, 4
push ebx
push esp
jmp 0x5de768
mov edi, dword [esp]
add esp, 4
sub esp, 4
jmp 0x5de83a
mov dword [esp], ecx
push ebx
sub dword [esp], 0x78ff78ae
pop ecx
push ebp
mov ebp, 0x78ff78ae
add ecx, ebp
jmp 0x5de784
call 0x5de858
push dword [esp]
mov eax, dword [esp]
push esi
push esp
pop esi
jmp 0x5de920
pop esp
jmp 0x5de86c
mov dword [esp], edi
push esp
mov edi, dword [esp]
add esp, 4
add edi, 4
add edi, 4
jmp 0x5de887
xor edi, dword [esp]
xor dword [esp], edi
xor edi, dword [esp]
pop esp
push 0xda9460c
mov dword [esp], ebp
push edx
mov edx, 0x39c
jmp 0x5de8a4
push ecx
mov dword [esp], edx
add dword [esp], 0x6bf9465d
push dword [esp]
pop ebp
add esp, 4
push ecx
mov dword [esp], esi
mov esi, 0x6b7d8f01
jmp 0x5de8c7
shr esi, 7
and esi, 0x677bc43b
neg esi
push edi
mov edi, 0x7fff98cc
sub esi, edi
jmp 0x5de8df
pop edi
push ebx
mov ebx, 0x1454e147
xor esi, ebx
pop ebx
jmp 0x5de933
add esp, 4
push edx
push ebx
mov ebx, 0x73ff241e
mov edx, ebx
pop ebx
push eax
mov eax, 0x4c405ee2
xor edx, eax
pop eax
add eax, edx
pop edx
sub eax, ebp
sub eax, 0x3fbf7afc
push dword [esp]
pop ebp
add esp, 4
jmp 0x5de9c2
push eax
mov eax, 0x7abf1267
xor eax, 0x7abf1263
add esi, eax
pop eax
jmp 0x5de952
sub ebp, 0x7f737056
sub ebp, esi
add ebp, 0x7f737056
mov esi, dword [esp]
add esp, 4
mov edx, dword [esp]
jmp 0x5de8ee
push edi
sub esp, 4
mov dword [esp], ebx
mov ebx, 0x7fdba881
jmp 0x5de966
push ecx
mov ecx, 0x561bf617
add ecx, 0x5a366fdc
xor ecx, 0x5f7f3b5f
shl ecx, 2
jmp 0x5de980
sub ecx, 0x3c91232d
mov edi, ecx
pop ecx
add edi, ebx
pop ebx
add esi, edi
push dword [esp]
pop edi
add esp, 4
xor esi, dword [esp]
xor dword [esp], esi
jmp 0x5de9a3
xor esi, dword [esp]
mov esp, dword [esp]
push edx
mov edx, esp
add edx, 4
sub edx, 4
jmp 0x5de9ba
xchg dword [esp], edx
jmp 0x5de866
push ecx
mov dword [esp], eax
push esi
jmp 0x5deb68
xor eax, edx
pop edx
sub esp, 4
mov dword [esp], ebx
jmp 0x5ded09
mov edi, 0x6abaeb54
sub dword [esp + 4], 0x7efca6d2
sub dword [esp + 4], edi
push ecx
mov ecx, 0x7efca6d2
add dword [esp + 8], ecx
pop ecx
mov edi, dword [esp]
push edx
mov edx, esp
add edx, 4
jmp 0x5deb00
pop eax
push eax
push esp
pop eax
add eax, 4
push ebp
mov ebp, 4
add eax, ebp
pop ebp
xchg dword [esp], eax
pop esp
jmp 0x5dec56
pop edi
mov ebx, dword [esp]
push 0xb7ac2ee
jmp 0x5deaf0
mov dword [esp], eax
mov eax, esp
jmp 0x5deb44
pop esp
jmp 0x5deb28
add edx, 4
xchg dword [esp], edx
jmp 0x5deafa
mov ebx, dword [esp]
push ecx
mov ecx, esp
push eax
jmp 0x5decb2
xchg dword [esp], eax
pop esp
jmp 0x5decf8
add eax, 4
add eax, 4
jmp 0x5deb3b
push ebx
push 0x4fef49f9
pop ebx
push edi
mov edi, ebx
mov esi, edi
jmp 0x5deae2
pop esp
push dword [esp]
jmp 0x5dea3c
sub ebx, 4
xchg dword [esp], ebx
jmp 0x5ded0f
mov edx, 0xb7872037
add eax, edx
mov edx, dword [esp]
add esp, 4
add ebx, eax
mov eax, dword [esp]
push ebx
mov ebx, esp
add ebx, 4
jmp 0x5deba1
add edx, 4
push eax
mov eax, 4
add edx, eax
pop eax
xchg dword [esp], edx
jmp 0x5deb98
sub esp, 4
mov dword [esp], edx
mov edx, 0x4fef49f9
jmp 0x5de9d6
mov eax, 0x179dbdf8
xor eax, 0x7f771f7c
sub eax, 0x425c7f96
shl eax, 3
inc eax
add eax, 0xcb8ee893
add ecx, eax
pop eax
add ecx, 4
xchg dword [esp], ecx
pop esp
push eax
mov eax, 0x7fbfa3fa
or eax, 0x7adf59c1
neg eax
xor eax, 0x3333cf18
push edx
jmp 0x5debba
xor dword [esp + 4], esi
jmp 0x5ded3f
push edx
jmp 0x5ded75
pop esp
jmp 0x5dea75
mov esi, dword [esp]
push edx
push esp
jmp 0x5ded49
pop edx
jmp 0x5dec12
mov dword [esp], 0x2a3631d2
mov dword [esp], edi
jmp 0x5de9f5