Function at 0x5de47b
Capabilities:
Check for vm using instruction vpcext
Contain obfuscated stackstrings
Reference the vmware io port

Disassembly:
push dword [esp]
jmp 0x5de400
add eax, 0x39413935
jmp 0x5de43f
pop eax
push 0x71c23300
mov dword [esp], eax
jmp 0x5de59c
push eax
mov eax, 0x3fc7f400
mov edi, eax
mov eax, dword [esp]
add esp, 4
jmp 0x5de47a
sub esi, 0x88430433
sub eax, esi
pop esi
or eax, 0x7eae416e
xor eax, 0x7fae756b
add ecx, eax
pop eax
jmp 0x5de4ae
sub ebp, 0x5f6f2560
add ebp, 0x6ffff932
sub ebp, eax
sub ebp, 0x6ffff932
push esi
mov dword [esp], eax
mov eax, 0x5f6f2560
jmp 0x5de461
sub ebp, 0x7d146441
add ebp, 0x4de60ece
add ebp, eax
sub ebp, 0x4de60ece
jmp 0x5de4d0
push eax
mov eax, 0xc0380c04
add edi, 0x6fc67873
add edi, eax
sub edi, 0x6fc67873
jmp 0x5de493
pop eax
add eax, 0x6fd7b937
add eax, edi
sub eax, 0x6fd7b937
pop edi
push eax
push dword [esp + 4]
mov eax, dword [esp]
jmp 0x5de4e4
add ecx, 4
xchg dword [esp], ecx
pop esp
push edi
mov edi, 4
jmp 0x5de4ef
pop edi
push edi
jmp 0x5de40e
push edi
jmp 0x5de515
push ebx
mov ebx, 0x7fffa2ad
add ebx, 0xfd14c194
add ebp, ebx
pop ebx
jmp 0x5de53e
add esp, 4
pop dword [esp]
jmp 0x5de4f6
add eax, edi
jmp 0x5de4c3
pop esp
push esi
push eax
mov eax, 0x32e3968f
mov esi, eax
pop eax
dec esi
add esi, 1
not esi
and esi, 0x7fd7cf92
jmp 0x5de4ca
mov dword [esp], ebp
mov ebp, 0x6f6a85c2
shr ebp, 1
add ebp, 0x6597eeed
dec ebp
push eax
mov eax, 0x3ffa3a0d
sub eax, 0x7d7f02af
not eax
xor eax, 0x7fffa6f3
jmp 0x5de3f6
pop eax
pop eax
sub ebp, 0x7d57d500
push esi
mov esi, 0x5ec1b1e2
add esi, 0x3bdd1629
inc esi
not esi
add esi, 0x7ff607d0
push esi
dec dword [esp]
pop esi
xor esi, 0x2ef03d13
xor ebp, esi
pop esi
xor esi, ebp
jmp 0x5de570
pop ebp
sub esi, 0x228bfbb4
sub eax, 0x7effb808
sub eax, esi
push 0x3b5b03cb
mov dword [esp], esi
mov esi, 0x7effb808
add eax, esi
pop esi
mov esi, dword [esp]
add esp, 4
jmp 0x5de5d5
push 0x13899075
push esp
pop dword [esp]
add dword [esp], 4
mov eax, dword [esp]
push ecx
mov ecx, esp
push eax
mov eax, 0x7ddfe0a5
shl eax, 2
push esi
mov esi, 0x77af4884
sub esi, 0x77fdbca2
sub esi, 0x277d3a00
and esi, 0x7f7bfa8
jmp 0x5de424
sub esp, 4
mov dword [esp], edx
push eax
jmp 0x5de714
mov dword [esp], 0x57a0270f
jmp 0x5de82b
push ebx
mov dword [esp], eax
mov eax, esp
add eax, 4
add eax, 4
xchg dword [esp], eax
pop esp
jmp 0x5de736
add esp, 4
push dword [esp]
push dword [esp]
push dword [esp]
pop edx
push ecx
mov ecx, esp
push ebp
mov ebp, 0x7f2bbeef
or ebp, 0x5f9cfc8a
jmp 0x5de783
push 0x7ae0c76b
pop edi
sub edx, edi
push dword [esp]
pop edi
add esp, 4
jmp 0x5de842
add dword [esp + 4], ecx
push eax
mov eax, 0x7bae8eb8
jmp 0x5de758
neg eax
add eax, 0x5f6d88d6
add eax, 0x1f03bb6e
add ebp, eax
mov eax, dword [esp]
add esp, 4
xchg dword [esp], ebp
pop esp
sub esp, 4
mov dword [esp], esi
mov dword [esp], ebp
push ecx
mov dword [esp], esp
push ebp
push ebx
mov ebx, 0x7def6c91
and ebx, 0x6f57ac61
and ebx, 0x73f730d8
jmp 0x5de6e2
sub esp, 4
mov dword [esp], eax
mov eax, 0x7ff74e40
and eax, 0x7e79d569
jmp 0x5de64d
add ecx, 4
xchg dword [esp], ecx
mov esp, dword [esp]
add ebp, 4
push esi
mov esi, 4
sub ebp, esi
pop esi
xor ebp, dword [esp]
xor dword [esp], ebp
xor ebp, dword [esp]
mov esp, dword [esp]
jmp 0x5de7e7
mov ecx, 0x6e7f674f
add dword [esp + 8], ecx
pop ecx
sub dword [esp + 4], 0x7bae8eb8
jmp 0x5de63e
dec ebx
sub ebx, 0x61471ffb
mov ebp, ebx
pop ebx
add dword [esp + 4], ebp
pop ebp
push dword [esp]
pop ebp
push ecx
mov ecx, esp
jmp 0x5de7c7
xchg dword [esp], esi
pop esp
push esi
mov dword [esp], edi
jmp 0x5de62a
sub dword [esp + 8], eax
pop eax
jmp 0x5de805
mov edx, dword [esp]
add esp, 4
sub esp, 4
mov dword [esp], edx
jmp 0x5de7d2
push ebx
xor dword [esp], 0x4fff4337
push dword [esp]
pop edi
jmp 0x5de5f0
push ebx
mov ebx, 0x4fff4337
xor edi, ebx
pop ebx
push edi
mov ebx, dword [esp]
push edx
mov dword [esp], eax
mov eax, esp
add eax, 4
add eax, 4
jmp 0x5de768
add dword [esp + 8], eax
pop eax
push eax
mov eax, 0x6e7f674f
jmp 0x5de70a
xor eax, dword [esp]
xor dword [esp], eax
xor eax, dword [esp]
pop esp
mov edi, dword [esp]
push ebp
mov ebp, esp
add ebp, 4
jmp 0x5de68d
inc ebp
not ebp
add ebp, 0x7fbffef5
add ecx, ebp
pop ebp
push eax
mov dword [esp], edx
mov edx, 4
add ecx, edx
pop edx
xchg dword [esp], ecx
mov esp, dword [esp]
push edx
mov edx, esp
add edx, 4
add edx, 4
xchg dword [esp], edx
pop esp
add esp, 4
push 0x2a42aee2
mov dword [esp], edx
mov dword [esp], edi
jmp 0x5de725
add ecx, 4
jmp 0x5de6a2
push dword [esp]
jmp 0x5de825
push 0x4e02ac80
mov dword [esp], ecx
jmp 0x5de6cb
mov dword [esp], ecx
push dword [esp]
push dword [esp]
pop ecx
add esp, 4
jmp 0x5de7fc
add esp, 4
push eax
jmp 0x5de81d
pop ecx
mov edx, dword [esp]
push esi
mov esi, esp
add esi, 4
add esi, 4
jmp 0x5de6fd
mov dword [esp], ebp
jmp 0x5de5e4
pop eax
jmp 0x5de609
mov dword [esp], edx
sub esp, 4
mov dword [esp], ecx
push edx
mov edx, 0x7ae0c76b
mov ecx, edx
pop edx
jmp 0x5de7da
jmp 0x5dec49
push 0x5ecca010
mov dword [esp], eax
push eax
mov eax, 0x3f9de63c
mov dword [esp + 4], eax
pop eax
xor dword [esp], 0x4fef2d85
xor dword [esp], 0x7f37db53
inc dword [esp]
shl dword [esp], 7
or dword [esp], 0x3ff320e6
sub dword [esp], 0x5fa9d59f
mov dword [esp], eax
push dword [esp]
mov eax, dword [esp]
push edx
jmp 0x5ded20
add esp, 4
push esi
jmp 0x5dec9a
push edi
jmp 0x5decf5
add dword [esp + 8], ebx
pop ebx
jmp 0x5decc9
push edx
mov dword [esp], 0x7e2f3fb4
shl dword [esp], 3
jmp 0x5ded68
push 0x1356fb74
mov dword [esp], ebx
push eax
jmp 0x5ded16
push eax
push 0x7effd5b8
pop eax
add dword [esp + 8], eax
pop eax
jmp 0x5ded26
mov esi, 0x56cb8466
shl esi, 5
or esi, 0x1ffd9b4a
not esi
xor esi, 0x77d472f
jmp 0x5deda5
mov edi, 0x365a9059
mov esi, 0xad5a67d3
sub esi, edi
pop edi
sub ebx, 0x432be5d6
sub ebx, esi
add ebx, 0x432be5d6
pop esi
jmp 0x5ded77
mov eax, 0x76ffd77a
jmp 0x5ded2f
push esp
jmp 0x5ded87
pop eax
mov ebx, dword [esp]
jmp 0x5dec8e
push ebp
mov dword [esp], ebx
mov dword [esp], edx
mov edx, 0x7effd5b8
sub dword [esp + 8], edx
push dword [esp]
mov edx, dword [esp]
jmp 0x5ded50
push esi
jmp 0x5decda
add esp, 4
add esp, 4
push eax
mov eax, 0x277f271a
sub dword [esp + 8], eax
jmp 0x5ded7c
dec dword [esp]
xor dword [esp], 0x8f041b3c
jmp 0x5dedad
jmp 0x5dede2
pop eax
add dword [esp + 4], eax
push ebx
jmp 0x5ded4a
pop edx
add edx, 4
add edx, 4
xchg dword [esp], edx
pop esp
push 0x4526c185
mov dword [esp], eax
mov eax, esp
push ebp
jmp 0x5decaa
mov ebx, esi
pop esi
jmp 0x5deca0
pop ebp
jmp 0x5dedb3
shr ebp, 4
not ebp
not ebp
shr ebp, 2
sub ebp, 0x1f9f796
add eax, 0x3b7e9554
add eax, ebp
push ecx
mov ecx, 0x3b7e9554
sub eax, ecx
pop ecx
pop ebp
add eax, 4
xchg dword [esp], eax
mov esp, dword [esp]
jmp 0x5decbb
call 0x5dede7
push dword [esp]
jmp 0x5deeb9
mov ecx, esi
mov ebx, ecx
pop ecx
jmp 0x5dee03
mov edx, ebp
mov ebp, dword [esp]
jmp 0x5dee4c
mov esi, dword [esp]
sub esp, 4
mov dword [esp], esi
push esp
pop esi
add esi, 4
add esi, 4
xchg dword [esp], esi
pop esp
add ebx, 1
xor ebx, 0x7fe1058f
jmp 0x5dee9e
push esi
mov dword [esp], ebp
mov ebp, esp
add ebp, 4
add ebp, 4
xchg dword [esp], ebp
jmp 0x5dee46
pop esp
jmp 0x5deed0
add esp, 4
mov esi, 0x91a489
xor esi, edx
pop edx
push ecx
jmp 0x5dedef
xor edx, 0x7fdbb9f6
add edx, 0x3fc1a1c4
dec edx
neg edx
xor edx, 0xbf70bf0c
and ebp, edx
pop edx
sub ebp, 0xfbda6659
jmp 0x5dedf9
add esp, 4
add eax, 4
add eax, 4
push eax
push dword [esp + 4]
mov eax, dword [esp]
jmp 0x5dee2c
shr ebx, 5
xor ebx, 0x728b
sub eax, 0x487f2f9a
sub eax, ebx
add eax, 0x487f2f9a
pop ebx
jmp 0x5def2c
mov eax, dword [esp]
push eax
push ebp
mov dword [esp], esp
add dword [esp], 4
mov eax, dword [esp]
jmp 0x5dee83
pop dword [esp]
mov esp, dword [esp]
push ebp
mov dword [esp], edi
mov dword [esp], 0x3f5ffbb3
mov dword [esp], edx
mov dword [esp], esi
mov dword [esp], eax
push esp
pop eax
add eax, 4
add eax, 4
xchg dword [esp], eax
mov esp, dword [esp]
push esi
mov dword [esp], ebx
push edi
mov dword [esp], 0x720e98b6
mov dword [esp], edx
mov dword [esp], esi
push esi
mov dword [esp], edx
push ebp
push ebp
mov dword [esp], 0x7bdf0669
mov ebp, dword [esp]
add esp, 4
push edx
mov edx, 0x7fef3100
jmp 0x5dee60
push eax
sub dword [esp], 0x738f2cdd
push dword [esp]
pop eax
push 0x52e7befa
mov dword [esp], ecx
jmp 0x5defde
push dword [esp + 4]
pop edx
pop dword [esp]
mov esp, dword [esp]
pop edx
pop edi
xor ecx, dword [esp]
xor dword [esp], ecx
xor ecx, dword [esp]
mov esp, dword [esp]
push 0x4bd74a72
mov dword [esp], edi
jmp 0x5defd3
pop eax
jmp 0x5df0f8
mov esp, dword [esp]
jmp 0x5df14b
mov eax, 4
sub edx, 0x6fe36b9a
add edx, eax
jmp 0x5df132
xchg dword [esp], edx
pop esp
push ebp
mov dword [esp], esi
jmp 0x5df0cc
sub ecx, 0x71a72934
jmp 0x5def64
mov dword [esp], edx
push esp
pop edx
push eax
jmp 0x5def8d
mov dword [esp], ebx
push esp
pop ebx
push eax
jmp 0x5defe9
push ecx
mov ecx, 4
jmp 0x5df058
xchg dword [esp], ecx
pop esp
add ebx, 4
xor ebx, dword [esp]
xor dword [esp], ebx
xor ebx, dword [esp]
mov esp, dword [esp]
push edx
mov edx, 0x6eef3512
push ecx
mov ecx, 0x49ff7cb
sub edx, 0x6d5c71e5
jmp 0x5df0bf
push edx
jmp 0x5def45
mov ecx, dword [esp]
add esp, 4
add eax, edx
pop edx
push edi
mov dword [esp], 0x59950525
mov dword [esp], ebx
push dword [esp]
mov ebx, dword [esp]
push edx
mov edx, esp
add edx, 4
add edx, 4
jmp 0x5def9f
push ecx
pop eax
pop ecx
sub ebx, 0x79b7fde5
add ebx, eax
push ebp
mov ebp, 0x1cf7cfc0
or ebp, 0x2bb0e5cd
neg ebp
add ebp, 0x4fc74293
xor ebp, 0x3dedd305
dec ebp
xor ebp, 0x4b957c27
add ebx, ebp
pop ebp
jmp 0x5df0ab
xchg dword [esp], ebp
pop esp
push ebx
mov ebx, 0x775e4cd2
jmp 0x5df1aa
push edx
mov edx, 0x72c94593
xor dword [esp + 4], edx
pop edx
jmp 0x5df112
mov eax, dword [esp]
push ecx
mov ecx, esp
add ecx, 4
add ecx, 4
jmp 0x5deff4
add edx, ecx
add edx, 0x6d5c71e5
jmp 0x5df027
push esp
push dword [esp]
pop esi
sub esp, 4
mov dword [esp], ebp
mov ebp, esp
add ebp, 4
push eax
mov eax, 4
add ebp, 0x33fde33f
add ebp, eax
sub ebp, 0x33fde33f
jmp 0x5def7f
xchg dword [esp], ebp
mov esp, dword [esp]
add esi, 4
push edx
mov edx, 4
add esi, edx
pop edx
jmp 0x5df13d
mov dword [esp], ecx
push dword [esp]
pop ecx
push ecx
push esp
jmp 0x5df1be
mov edx, 0x46d9efdc
add ecx, 0x71a72934
sub ecx, edx
jmp 0x5defac
add edx, 0x6fe36b9a
jmp 0x5df199
xor esi, dword [esp]
xor dword [esp], esi
xor esi, dword [esp]
jmp 0x5def85
push ecx
mov dword [esp], 0x79ba869a
mov dword [esp], edx
jmp 0x5df15b
mov dword [esp], 0x6def4c31
sub dword [esp], 0x6bef0efa
not dword [esp]
jmp 0x5df171
and dword [esp], 0x55fef75f
add dword [esp], 0xe8c0ad32
push esi
jmp 0x5df185
mov esi, 0x7a78e7af
jmp 0x5df18f
xor dword [esp + 4], esi
pop esi
jmp 0x5df09b
mov eax, dword [esp]
push ebp
mov ebp, esp
add ebp, 4
jmp 0x5df1b8
add ebx, 0x88a1b332
sub edx, ebx
pop ebx
jmp 0x5df021
push ecx
jmp 0x5df1e1
pop ecx
add ecx, 4
push ecx
mov dword [esp], edi
mov edi, 4
add ecx, 0x46d9efdc
add ecx, edi
jmp 0x5df1db
push edx
jmp 0x5df120
mov ecx, 4
add ebp, ecx
pop ecx
jmp 0x5df08c