Function at 0x105871a
Capabilities:
Check for vm using instruction vpcext
Encode data using xor

Disassembly:
push dword [esp]
push dword [esp]
jmp 0x10585d7
push eax
jmp 0x105848b
mov dword [esp], ecx
push esp
pop ecx
add ecx, 4
push edx
jmp 0x10586d2
mov edx, 0x57eb77da
sub edx, 0x17b469b6
add edx, 0x33a713b3
sub edi, edx
pop edx
add edi, 0x6fcf132e
add edi, dword [esp]
sub edi, 0x6fcf132e
sub esp, 4
jmp 0x1058b41
mov eax, 0x273f129b
jmp 0x10583c7
shl edx, 1
dec edx
inc edx
jmp 0x10581f3
add dword [esp], 4
pop dword [esp]
add dword [esp], 4
pop ecx
jmp 0x10582ac
pop ebx
sub ebx, 0x2b3f14a7
sub ebx, ebp
add ebx, 0x2b3f14a7
mov ebp, dword [esp]
add esp, 4
sub ebx, ebp
push eax
mov eax, 0x7ff747b1
add ebx, eax
pop eax
push dword [esp]
pop ebp
add esp, 4
jmp 0x1058a45
add esi, 4
xchg dword [esp], esi
pop esp
xchg dword [esp], eax
mov esp, dword [esp]
sti
jmp 0x10583a2
sub ecx, 0x21fdf142
sub ecx, eax
push ebx
mov ebx, 0x7f77ec2b
push edi
mov dword [esp], eax
mov eax, 0x74bed79a
or ebx, eax
jmp 0x10588dc
push ebx
jmp 0x10583b6
push edx
mov edx, 4
add ebp, edx
pop edx
jmp 0x1058565
add esp, 4
push 0x7a7d8523
jmp 0x10580e3
push 0x1f78a403
mov dword [esp], esi
push 0x2ff6180a
pop esi
xchg esi, edx
not edx
xchg esi, edx
xor esi, 0x7df3fd96
xor esi, 0x7f67643e
jmp 0x1058470
shl edx, 7
push ebx
jmp 0x1058a75
sub edi, 0x748fe5f0
pop ecx
push edx
mov edx, 4
add edi, edx
pop edx
xchg dword [esp], edi
pop esp
add eax, 4
push ebx
jmp 0x1058270
sub edi, ebp
jmp 0x105840d
add esp, 4
push eax
mov eax, 0xcdca3c6a
sub ebp, eax
pop eax
jmp 0x105821b
mov esp, dword [esp]
mov dword [esp], edx
jmp 0x1058a69
mov esp, dword [esp]
push dword [edi]
push dword [esp]
pop ecx
jmp 0x105868a
sub ecx, esi
jmp 0x1058493
push ebx
mov ebx, esp
push eax
jmp 0x10583d3
push esp
jmp 0x10587ff
mov ebx, 4
jmp 0x10587e2
mov dword [esp], ebp
jmp 0x1058434
mov dword [esp], ebp
mov ebp, 0x7f7e9eb5
or ebp, 0x7eb62a25
push 0x1e0baedb
mov dword [esp], ecx
push edx
mov edx, 0x7fcd271f
jmp 0x1058975
pop esi
sub dword [esp], esi
jmp 0x10588e3
add ecx, 4
push eax
mov eax, 0x6b0bb111
push ebx
mov ebx, 0x5399c12c
and ebx, 0x6ef18d64
jmp 0x1058637
pop ecx
add ecx, 0x467b6f00
sub ecx, 0x3cbd34ad
jmp 0x105818c
shr edi, 6
sub edi, 0xb78ec495
sub eax, edi
jmp 0x105860c
push ebx
mov dword [esp], 0x4effcea6
pop ecx
xor ecx, 0x55804927
mov edi, ecx
pop ecx
add edi, 0x3ecd9ba9
sub edi, 0xdcd29e2c
jmp 0x1058484
mov edx, esp
add edx, 4
push eax
jmp 0x1058a3b
pop ebx
push edi
mov edi, 0x6d6bb846
sub dword [esp + 4], edi
pop edi
jmp 0x1058bc6
mov dword [esp], esi
mov esi, 0x17d6
mov dword [esp + 4], esi
mov esi, dword [esp]
jmp 0x1058446
push ebx
mov ebx, esp
add ebx, 4
sub ebx, 4
xchg dword [esp], ebx
pop esp
jmp 0x1058617
pop esi
push edx
jmp 0x10580f4
pop eax
xor esi, ebx
mov ebx, dword [esp]
add esp, 4
push edx
push ebp
push 0x4e971fe1
jmp 0x1058701
push dword [esp]
pop esi
add esp, 4
push 0x4bc60b3c
mov dword [esp], ebx
mov ebx, 0x3dffda9f
add ebp, 0x7d7bd146
add ebp, ebx
sub ebp, 0x7d7bd146
mov ebx, dword [esp]
jmp 0x1058222
sub esp, 4
mov dword [esp], ebx
push 0x1904df93
mov dword [esp], edi
push esp
jmp 0x1058a18
mov dword [esp], ebp
mov ebp, 0x3f7e3df6
or esi, ebp
pop ebp
push ecx
jmp 0x105853c
mov ebx, 0x2b55b0c1
sub ebx, eax
jmp 0x1058360
mov eax, 0x7eff4e03
add eax, 0x7cdf9f06
dec eax
not eax
jmp 0x10586f7
mov dword [esp], ecx
push esi
mov dword [esp], edx
push ecx
push esp
pop ecx
add ecx, 4
push eax
mov eax, 0x7affb365
add eax, 0x85004c9f
jmp 0x10585ec
mov esp, dword [esp]
jmp 0x105832d
pop ebp
sub eax, 1
jne 0x1058244
sti
jmp 0x1058341
sub ecx, 0x7daf6cc1
pop eax
xor ecx, dword [esp]
xor dword [esp], ecx
xor ecx, dword [esp]
pop esp
sti
jmp 0x10587ab
mov ebp, 0x57ff39ae
push ebx
mov ebx, 0x28087e1f
xor ebp, ebx
jmp 0x1058144
push edx
push esp
pop edx
push 0x645b6a56
mov dword [esp], ebx
mov ebx, 0x7eeff107
neg ebx
jmp 0x10585a4
push ecx
jmp 0x10582eb
sub esi, 0x4627a5d6
push ebx
push eax
jmp 0x105811f
neg esi
push 0
add dword [esp], 0x579d747a
push esi
jmp 0x1058a5b
add ecx, edi
jmp 0x105861f
mov ebx, dword [esp]
jmp 0x1058b6a
pop esi
add ecx, ebx
add ecx, 0x477e2a43
pop ebx
or dword [esp + 4], ecx
pop ecx
push edi
mov edi, 0x2a7cbde2
add dword [esp + 4], 0x6aff2deb
add dword [esp + 4], edi
sub dword [esp + 4], 0x6aff2deb
pop edi
push esi
mov esi, 0xdcbb497b
sub dword [esp + 4], 0x5fffa399
add dword [esp + 4], esi
push eax
mov eax, 0x5fffa399
add dword [esp + 8], eax
jmp 0x10587a4
shl ecx, 1
dec ecx
push eax
mov eax, 0x778e89f6
push ecx
mov ecx, 0x6399d3be
add eax, ecx
pop ecx
and eax, 0x333423d4
push edi
mov edi, 0x1b32f822
shr edi, 2
or edi, 0x7ff19352
add edi, 0x3b52cefb
neg edi
jmp 0x10582db
mov eax, 0x5fe1a781
push 0x386025a7
mov dword [esp], edi
mov edi, 0xa01e5883
add eax, edi
push dword [esp]
pop edi
add esp, 4
jmp 0x10580dd
push 0x2f5c41c9
jmp 0x10583e5
mov ecx, 0x7f3f175d
shl ecx, 7
xor ecx, 0xd315c461
add esi, ecx
pop ecx
sub ecx, 0x7d7a84fe
add ecx, esi
push ecx
mov dword [esp], 0x7f6d629b
mov dword [esp], edi
jmp 0x105845d
push esi
mov esi, 4
add ebp, esi
pop esi
xor ebp, dword [esp]
xor dword [esp], ebp
xor ebp, dword [esp]
mov esp, dword [esp]
sub dword [esp + 4], eax
sub dword [esp + 4], 0x28d63876
mov eax, dword [esp]
add esp, 4
pop dword [edi]
add dword [edi], 0x7de57007
push ebp
push 0x38fb5532
pop ebp
inc ebp
jmp 0x10581ce
xchg ebx, edi
push edi
not dword [esp]
jmp 0x10586ed
push esi
mov esi, 0x6af78e9a
sub edi, esi
pop esi
jmp 0x1058359
push dword [esp]
pop edi
add esp, 4
add esp, 4
jmp 0x1058532
sub ecx, eax
pop eax
xchg dword [esp], ecx
pop esp
mov dword [esp], esp
jmp 0x1058133
xchg dword [esp], ecx
pop esp
push esi
mov esi, 4
add eax, esi
jmp 0x1058830
pop edi
sub ecx, eax
pop eax
mov eax, ecx
jmp 0x10582c9
mov dword [esp], edx
jmp 0x10589eb
mov edi, dword [esp]
add esp, 4
mov esi, dword [esp]
add esp, 4
push eax
push ecx
mov ecx, 0x7fffd36b
jmp 0x10584de
or ebx, 0x63b677fc
or ebx, 0x7ffbfb2a
dec ebx
xor ebx, 0x14f44ef0
sub eax, ebx
pop ebx
add ecx, 0x7daf6cc1
add ecx, eax
jmp 0x105841d
add edx, ebx
mov ebx, dword [esp]
add esp, 4
add edx, 4
xor edx, dword [esp]
xor dword [esp], edx
xor edx, dword [esp]
pop esp
mov eax, dword [esp]
push 0x65a93620
mov dword [esp], ecx
push esp
mov ecx, dword [esp]
add esp, 4
push edx
jmp 0x1058697
push ecx
mov dword [esp], 0x597814c1
jmp 0x105881b
push ebp
mov ebp, 0x31bc7834
mov edx, ebp
pop ebp
shl edx, 1
dec edx
add edx, 0x154f13bb
xor edx, 0x78c80426
sub ecx, 0x7eff876b
add ecx, 0x3b7163af
add ecx, edx
sub ecx, 0x3b7163af
add ecx, 0x7eff876b
mov edx, dword [esp]
jmp 0x1058261
mov dword [esp], ebx
mov dword [esp], eax
jmp 0x105898b
xchg ebx, edx
not edx
xchg ebx, edx
jmp 0x1058b0b
pop edi
xor ebx, edi
xor edi, ebx
jmp 0x10587bc
or eax, 0x7a4f7416
jmp 0x10588ae
pop ebp
jmp 0x10587d7
add dword [esp + 8], ebx
mov ebx, dword [esp]
push ebp
mov ebp, esp
jmp 0x10581b0
sub ecx, eax
pop eax
push 0xc866d06
mov dword [esp], edx
mov edx, 0x3bbf550c
add ecx, edx
pop edx
sub ecx, 0x7fee9827
add ecx, esi
add ecx, 0x7fee9827
sub ecx, 0x3bbf550c
add ecx, 0x7f3f9c87
add ecx, 0x7fffaab3
pop esi
sub esp, 4
mov dword [esp], ebx
mov dword [esp], 0x77d58bf3
add dword [esp], 0x7ef46961
and dword [esp], 0x7d43437e
inc dword [esp]
push 0x4fd36523
mov dword [esp], ecx
push ebx
mov ebx, 0x7defc0f6
mov ecx, 0xba1008d2
push esi
mov esi, 0x477e2a43
jmp 0x105824f
mov ebx, 0x7dfc7ec6
push edx
mov edx, 0x7bddec79
not edx
jmp 0x1058ac8
pop eax
pop esi
jmp 0x105894c
push esi
push esi
mov dword [esp], 0x7ddf4d81
pop esi
neg esi
jmp 0x1058463
xor ebx, edi
not ebx
sub ebx, 0x7f9c5ecd
or ebx, 0x5ffe8be9
sub ebx, 0x5fffbbe9
jmp 0x105865a
or ebp, 0x1dfd6cb8
jmp 0x1058925
add eax, ebx
pop ebx
jmp 0x105884f
mov edx, 0x7ffbde96
xor edx, 0x5fdff68b
push 0x10f7b592
jmp 0x1058944
pop edi
push ecx
push ecx
mov dword [esp], 0x64801001
mov dword [esp], edx
mov dword [esp], esi
mov esi, 0x77f336fc
push eax
push ebp
jmp 0x1058872
mov dword [esp], eax
push esp
mov eax, dword [esp]
push edi
jmp 0x105826a
mov ebx, dword [esp]
jmp 0x1058ab6
mov esi, dword [esp]
push esi
mov esi, esp
push edx
mov edx, 4
add esi, edx
pop edx
jmp 0x1058176
mov eax, dword [esp]
add esp, 4
jmp 0x1058939
xchg dword [esp], eax
mov esp, dword [esp]
sub esp, 4
mov dword [esp], ebx
push ebp
mov dword [esp], 0x6fff662e
mov ebx, dword [esp]
add esp, 4
push ecx
jmp 0x1058969
mov ebp, 0x3f9f479a
or ebp, 0x7f65c57a
xor ebp, 0x68fe1129
inc ebp
xor ebp, 0x60f2e02c
mov eax, ebp
pop ebp
mov ecx, eax
pop eax
xor ecx, esi
pop esi
add edi, 0x748fe5f0
add edi, ecx
jmp 0x10581fc
add eax, 0x8190890d
add ebx, eax
pop eax
add ebx, 4
push ebx
push dword [esp + 4]
jmp 0x10588cb
pop ebx
pop dword [esp]
mov esp, dword [esp]
push 0x24832712
jmp 0x1058282
pop eax
push edx
jmp 0x10587ea
sub dword [esp], 0x167eb45c
sub dword [esp], 0x579d747a
mov esi, dword [esp]
add esp, 4
xor esi, 0x845272c1
add ebp, 0x6f75d2b1
add ebp, esi
sub ebp, 0x6f75d2b1
jmp 0x1058378
neg eax
inc eax
or eax, 0x7bbb6899
sub eax, 0xffbfee9b
add ecx, eax
pop eax
jmp 0x10585fb
xor ebp, 0x3508f163
mov edx, ebp
pop ebp
add edi, 0x66b2c5a0
jmp 0x10589bc
mov esi, dword [esp]
add esp, 4
jmp 0x1058722
mov dword [esp], ebx
jmp 0x1058792
sub dword [esp], 0x3efd3300
push 0x4157e193
mov dword [esp], ebx
mov ebx, 0x3b7a6338
or dword [esp + 4], ebx
jmp 0x105831c
mov dword [esp], 0x316dd6f1
jmp 0x10589dd
mov ecx, 0x3399ae
xor ecx, edx
pop edx
xor ebp, ecx
pop ecx
add ecx, ebp
pop ebp
xchg dword [esp], ecx
jmp 0x1058241
mov eax, 0x3a8c6a50
shl eax, 2
sub eax, 0xea31a93c
add ecx, eax
pop eax
xchg dword [esp], ecx
pop esp
add ecx, 0x6fdf77a4
push ecx
mov ecx, esp
add ecx, 4
sub ecx, 4
xchg dword [esp], ecx
jmp 0x1058236
add edi, edx
sub edi, 0x66b2c5a0
pop edx
push esi
mov esi, 0x6f2ff50e
inc esi
sub esi, 0x7e6f9d26
sub esi, 0x72c6f3f4
jmp 0x1058aaf
mov dword [esp], ebp
mov ebp, 0x4df1f854
push esi
jmp 0x105827a
mov dword [esp], esi
push 0x739755f0
mov esi, dword [esp]
add esp, 4
push 0xc40d459c
pop ecx
push ebp
mov ebp, 0x7fffaab3
sub ecx, 0x7fb5ca50
sub ecx, ebp
add ecx, 0x7fb5ca50
jmp 0x1058ac1
pop edi
push ebx
mov ebx, 4
add edi, ebx
pop ebx
sub edi, 4
jmp 0x1058a2d
xor edi, dword [esp]
xor dword [esp], edi
xor edi, dword [esp]
jmp 0x1058405
mov eax, 0x7cfb56f1
jmp 0x1058b16
sub ecx, 0x5d9e64b5
add ecx, ebx
add ecx, 0x5d9e64b5
push dword [esp]
jmp 0x1058a8e
mov esi, 0x167eb45c
add dword [esp + 4], esi
jmp 0x10582a3
mov ebx, 0x8280ef07
xor edx, ebx
pop ebx
mov eax, edx
pop edx
push edi
mov dword [esp], ebx
mov ebx, 0x28d63876
jmp 0x1058713
pop ebx
add esp, 4
push eax
mov dword [esp], esi
push ebx
mov ebx, 0x6e6eba54
mov esi, ebx
mov ebx, dword [esp]
add esp, 4
push esi
push ebx
pop esi
jmp 0x1058828
sub edi, esi
jmp 0x1058afd
add esp, 4
jmp 0x10586dd
pop ebp
push eax
jmp 0x1058af0
sub edx, 0x7cef2a07
or edx, 0x7db6e082
sub edx, 0xb3e2cca6
sub ebx, edx
pop edx
sub edx, ebx
pop ebx
or ebx, edx
pop edx
not ebx
and ebx, 0x2ba30002
jmp 0x1058ba2
push esi
mov esi, 0x7dbc8678
not esi
jmp 0x1058b96
pop esi
add edi, esi
add edi, 0x7df963f5
jmp 0x10585af
xor esi, ebx
xor ebx, esi
xor esi, ebx
jmp 0x10581aa
sub eax, 0x7cfb56ed
sub edx, eax
pop eax
xchg dword [esp], edx
pop esp
mov dword [esp], ecx
push 0x2772ac31
mov dword [esp], edx
mov dword [esp], eax
push edx
mov edx, 0x37ff659b
or edx, 0x5fec6584
jmp 0x1058129
mov dword [esp], ebp
mov ebp, 0x7df7a4c1
xor ebp, 0xe298516
add edi, ebp
pop ebp
sub edi, 0x3fef928f
push eax
mov eax, esp
sub esp, 4
mov dword [esp], ebx
push eax
jmp 0x1058512
add esp, 4
mov eax, dword [esp]
add esp, 4
add eax, ebx
mov ebx, dword [esp]
push 0x3c6173f0
mov dword [esp], ecx
mov ecx, esp
add ecx, 4
push eax
mov eax, 0x33731962
jmp 0x1058910
add esi, 0xfcfc2300
push esi
jmp 0x1058844
add ebx, 0x21fdf142
add ecx, ebx
pop ebx
add ecx, 0x3cbd34ad
sub ecx, 0x467b6f00
mov eax, dword [esp]
add esp, 4
push ecx
mov dword [esp], edx
jmp 0x105830e
push dword [esp]
pop edx
add esp, 4
push ecx
jmp 0x1058bd6
push ebx
mov dword [esp], 0x7f9fdfb6
push dword [esp]
mov ecx, dword [esp]
jmp 0x10581be