Function at 0x5f57ab
Capabilities:
Check for vm using instruction vpcext
Contain obfuscated stackstrings
Reference the vmware io port

Disassembly:
push dword [esp]
pop eax
push 0x6f944817
mov dword [esp], ecx
push eax
mov dword [esp], esp
push edi
push 0x6181c779
mov dword [esp], ebp
push 0x27bb914b
pop ebp
not ebp
sub ebp, 0x1d3f5651
jmp 0x5f0d62
mov ecx, dword [esp]
push eax
mov eax, esp
add eax, 4
push 0x488d1e45
mov dword [esp], ecx
mov ecx, 0x1b72ad8a
add ecx, 0x7df78863
shl ecx, 3
inc ecx
push 0x31757460
mov dword [esp], eax
mov eax, 0xcb51af65
sub ecx, eax
pop eax
add eax, ecx
pop ecx
xchg dword [esp], eax
mov esp, dword [esp]
jmp 0x5f0c80
mov ebx, 4
mov eax, ebx
pop ebx
add ecx, eax
jmp 0x5f0c2d
mov edi, ebp
jmp 0x5f0c42
pop eax
add ecx, 4
xor ecx, dword [esp]
xor dword [esp], ecx
xor ecx, dword [esp]
mov esp, dword [esp]
jmp 0x5f0c61
pop ebp
add dword [esp + 4], edi
pop edi
jmp 0x5f0bd7
mov edi, 0x7ff17f13
inc edi
or edi, 0x7c7e29f4
shl edi, 8
jmp 0x5f0cba
push ebp
push esi
push 0x587162f7
jmp 0x5f0cfe
xor ebp, 0x37fa002d
xor ebp, 0xf2231865
add edx, ebp
jmp 0x5f0cc9
push eax
push ebx
jmp 0x5f0c17
push ebx
push ecx
mov dword [esp], 0x2bb30670
mov ebx, dword [esp]
add esp, 4
and ebx, 0x7dfad360
sub ebx, 0x7af7ae45
add ebx, 0xb8e4414f
mov edx, ebx
pop ebx
push ebp
jmp 0x5f0d0f
pop ebp
jmp 0x5f0d78
neg edi
sub edi, 0x90c0c113
and edx, edi
jmp 0x5f0d29
pop ebp
jmp 0x5f0ccf
mov ebp, edx
push dword [esp]
pop edx
add esp, 4
xor ebp, esi
pop esi
and ebp, 0x397f46fc
shl ebp, 5
dec ebp
not ebp
add ebp, 0x2ce88301
sub eax, 0x7f6e1cdd
sub eax, ebp
add eax, 0x7f6e1cdd
jmp 0x5f0cb4
mov dword [esp], eax
mov eax, 0x1b77a635
mov esi, eax
pop eax
push edx
jmp 0x5f0c87
mov ebp, 0x56bd0545
xor ebp, 0x734be092
add ebp, 0x111e8729
add edx, ebp
pop ebp
push edi
jmp 0x5f0c4d
pop edi
sub edx, 0x76fbbefa
push ebp
mov ebp, 1
add edx, ebp
pop ebp
add edx, 0x3eff689f
add edx, 0x5cc5abeb
push ebp
mov ebp, 0x6e7f3921
and ebp, 0x57d7888d
and ebp, 0x5fd9840c
xor ebp, 0x7a9b7371
jmp 0x5f0c6d
add ebp, 0x7fff9181
jmp 0x5f0d6d
xor ebp, 0x3b04a9e0
jmp 0x5f0c26
mov ecx, ebx
jmp 0x5f1e7f
push ecx
jmp 0x5f7009
sub dword [esp + 4], ecx
jmp 0x5f5e4d
mov dword [esp], edi
sub esp, 4
mov dword [esp], eax
sub dword [esp], 0x7fd15b76
mov edi, dword [esp]
add esp, 4
jmp 0x5f66c6
push ebx
mov dword [esp], 0x78ff9fe8
jmp 0x5f3f00
pop ebp
add dword [esp + 4], ecx
add dword [esp + 4], 0x567b1f4c
mov ecx, dword [esp]
jmp 0x5f70e5
mov dword [esp], eax
jmp 0x5f4853
push ebx
push ebp
mov dword [esp], edi
mov edi, 0x77fb7f82
mov ebx, 0x480cc5f0
xor ebx, edi
pop edi
xor dword [esp + 4], ebx
mov ebx, dword [esp]
add esp, 4
jmp 0x5f3ee1
add ecx, 4
xor ecx, dword [esp]
jmp 0x5f5091
not dword [esp]
pop edx
jmp 0x5f68bf
mov eax, dword [esp]
add esp, 4
push esi
mov esi, esp
add esi, 4
add esi, 4
xchg dword [esp], esi
jmp 0x5f5470
add eax, edx
sub eax, 0x7cbebafc
add eax, 0x7ef4aac0
sub eax, 0x6bafbc00
mov edx, dword [esp]
jmp 0x5f4160
neg edx
not edx
inc edx
xor edx, 0x13aaecf
jmp 0x5f3c30
mov esi, esp
add esi, 4
add esi, 4
xchg dword [esp], esi
pop esp
pop dword [esp]
jmp 0x5f62de
add esi, edi
jmp 0x5f501b
add esp, 4
push esi
mov dword [esp], edi
push ebx
mov dword [esp], ebp
mov ebp, 0x7fa78e0e
mov edi, ebp
pop ebp
xchg edi, eax
push eax
push ebx
mov dword [esp], edx
pop eax
pop edx
jmp 0x5f34cf
push ebx
mov ebx, 0x2ae522f8
sub edx, ebx
pop ebx
pop eax
and edx, 0x7c7a4100
push ecx
mov ecx, 0x7bfdbd84
dec ecx
shl ecx, 1
push ebp
mov ebp, 0x3eff3622
jmp 0x5f4357
pop dword [esp]
push eax
mov eax, 4
add dword [esp + 4], eax
pop eax
pop dword [esp]
push ecx
push 0x57bac880
jmp 0x5f637b
push ebp
mov dword [esp], ecx
push esp
pop ecx
add ecx, 4
sub ecx, 4
push ecx
push dword [esp + 4]
mov ecx, dword [esp]
push esi
jmp 0x5f2a90
xor dword [esp], esi
xor esi, dword [esp]
pop esp
push ebx
pop eax
mov ebx, dword [esp]
add esp, 4
jmp 0x5f6e28
push edx
mov dword [esp], eax
mov eax, esp
push edi
jmp 0x5f576a
push eax
mov dword [esp], edx
jmp 0x5f25b8
mov ebp, 0x7f8f302a
add dword [esp + 4], 0x47cfa1cb
sub dword [esp + 4], ebp
sub dword [esp + 4], 0x47cfa1cb
mov ebp, dword [esp]
add esp, 4
jmp 0x5f569d
pop eax
add ecx, 0xc8711eec
xor eax, ecx
mov ecx, dword [esp]
add esp, 4
cmp dword [ebp + 0x122d2dd8], 0
jne 0x5f3596
cmp dword [ebp + 0x122d2d0c], 0
je 0x5f35a5
push eax
mov eax, eax
mov eax, 0
call dword [ebp + 0x122d1ed5]
pop eax
push ebx
mov dword [esp], 0x5f758a00
inc dword [esp]
shr dword [esp], 4
inc dword [esp]
shr dword [esp], 5
xor dword [esp], 0x29738ca8
mov dword [esp], ebp
mov dword [esp], 0x1d675fa0
jmp 0x5f2441
sub edx, 0x7bff80ff
shr edx, 6
xor edx, 0x7edf0955
neg edx
inc edx
add edx, 0xfcb91557
add eax, 0x6bafbc00
sub eax, 0x7ef4aac0
add eax, 0x7cbebafc
jmp 0x5f2911
pop eax
push esi
push edi
jmp 0x5f4b65
add esi, edx
mov edx, dword [esp]
push edx
jmp 0x5f6da6
add edx, 4
xchg dword [esp], edx
pop esp
add esi, 4
xor esi, dword [esp]
jmp 0x5f334f
push ebp
mov ebp, 0x7df69985
xor dword [esp + 4], ebp
jmp 0x5f5def
pop eax
push edx
jmp 0x5f58ba
push edx
mov edx, 0x34398adf
add dword [esp + 4], 0x17f7afbe
jmp 0x5f5b7e
mov eax, dword [esp]
add esp, 4
push edx
mov edx, 0x7ed98800
add dword [esp + 8], edx
pop edx
jmp 0x5f4ccf
add esp, 4
cmp dword [ebp + 0x122d2dd8], 0
jne 0x5f4178
cmp dword [ebp + 0x122d2d0c], 0
je 0x5f4187
push eax
mov eax, eax
mov eax, 0
call dword [ebp + 0x122d2ee7]
pop eax
cmp dword [ebp + 0x122d2d0c], 0
je 0x5f419d
push eax
mov eax, 0
call dword [ebp + 0x122d2032]
pop eax
push eax
push ecx
mov ecx, 0x55ff43ba
jmp 0x5f1f10
pop eax
add dword [esp + 4], ebx
pop ebx
push dword [esp]
mov eax, dword [esp]
push edx
mov edx, esp
jmp 0x5f4db8
mov dword [esp], eax
mov eax, 4
add esi, eax
mov eax, dword [esp]
add esp, 4
jmp 0x5f52cc
add ecx, 0x2fbaef46
jmp 0x5f7b25
pop esp
jmp 0x5f6744
xor ecx, dword [esp]
xor dword [esp], ecx
xor ecx, dword [esp]
mov esp, dword [esp]
mov dword [ebp + 0x122d209d], eax
mov dword [ebp + 0x122d33fd], 0
push eax
push ebx
mov dword [esp], 0x39b82d0c
mov dword [esp], ebx
mov dword [esp], edx
jmp 0x5f720d
push esi
mov esi, 0x73ff9008
sub ecx, esi
pop esi
push esi
mov esi, 0x5ef59fa7
xor esi, 0xf4343a21
sub ecx, esi
pop esi
sub edx, 0x3f5f43b4
sub edx, ecx
add edx, 0x3f5f43b4
jmp 0x5f4b52
push ebx
mov ebx, 4
add edx, ebx
pop ebx
add edx, 4
xor edx, dword [esp]
xor dword [esp], edx
xor edx, dword [esp]
pop esp
add ecx, 4
jmp 0x5f2593
push dword [esp]
pop ebp
add esp, 4
push edi
mov edi, eax
push edx
mov dword [esp], 0x39fd433a
mov dword [esp], esi
push esp
pop esi
jmp 0x5f5fd3
xor eax, edx
pop edx
cmp dword [ebp + 0x122d2dd8], 0
jne 0x5f4804
cmp dword [ebp + 0x122d2d0c], 0
je 0x5f4815
push eax
push ebx
mov eax, eax
mov eax, 0
call dword [ebp + 0x122d2678]
pop ebx
pop eax
push 0x32d1c4da
mov dword [esp], ebp
jmp 0x5f5597
push ebx
push eax
mov eax, 0x769e8a48
sub eax, 0xecd7b4c
mov ebx, eax
jmp 0x5f4202
push edx
mov dword [esp], ebp
push esp
jmp 0x5f2df1
pop ecx
jmp 0x5f47ef
mov edi, 0x7dff0b03
mov esi, 0xf960252e
sub esi, 0x3afff362
jmp 0x5f2d6c
add dword [esp + 4], edx
sub dword [esp + 4], 0x7ed98800
push ecx
mov ecx, 0x7dcb414f
add dword [esp + 8], 0x25fbe5ff
add dword [esp + 8], ecx
push ebx
mov ebx, 0x25fbe5ff
sub dword [esp + 0xc], ebx
pop ebx
pop ecx
pop edx
jmp 0x5f38e6
add edx, 4
add edx, 4
xchg dword [esp], edx
pop esp
push esi
mov esi, esp
sub esp, 4
jmp 0x5f4262
add esi, 0x3afff362
pop edi
and esi, 0x3ffbff28
add esi, 0x3b6f3f4a
shl esi, 7
add esi, 0xeee609d5
sub eax, esi
pop esi
cmp dword [ebp + 0x122d2dd8], 0
jne 0x5f504c
cmp dword [ebp + 0x122d2d0c], 0
je 0x5f5061
push eax
mov eax, eax
mov eax, 0x43d
mov dword [ebp + 0x122d201b], eax
call dword [ebp + 0x122d3408]
pop eax
push 0x5b8c82c3
jmp 0x5f6834
xor dword [esp], ecx
xor ecx, dword [esp]
mov esp, dword [esp]
jmp 0x5f5526
add esi, 4
xchg dword [esp], esi
mov esp, dword [esp]
push ecx
mov ecx, 0x67d10efc
sub eax, 0x7dde5a01
sub eax, ecx
jmp 0x5f56ec
shl dword [esp], 8
push esi
push 0xd11c3bb1
pop esi
push ebp
mov ebp, 0x7edfa601
add dword [esp + 8], ebp
pop ebp
sub dword [esp + 4], esi
sub dword [esp + 4], 0x7edfa601
jmp 0x5f7783
pop esp
add esp, 4
push ebx
mov ebx, esp
add ebx, 4
jmp 0x5f5ac3
push esi
mov dword [esp], 0x7df389c9
xor dword [esp], 0x1fb13333
mov dword [esp], eax
push ebp
jmp 0x5f3505
mov ebp, eax
jmp 0x5f22eb
push dword [esp]
push dword [esp]
jmp 0x5f27a1
add eax, 0x7dde5a01
jmp 0x5f5eba
push esi
mov esi, 0x78532099
not esi
add esi, 0x3ffb658f
dec esi
push edx
mov edx, 0x7f3d0711
xor edx, 0x5c5a80a2
add edx, 0x90eda21d
add esi, edx
pop edx
mov edi, esi
pop esi
add edi, 0x84029140
add eax, edi
mov edi, dword [esp]
add esp, 4
add eax, 4
xchg dword [esp], eax
pop esp
push ebp
mov ebp, esp
add ebp, 4
add ebp, 4
xchg dword [esp], ebp
jmp 0x5f691b
push ecx
mov dword [esp], 0x7dcb414f
mov eax, dword [esp]
push ecx
mov ecx, esp
add ecx, 4
add ecx, 4
xchg dword [esp], ecx
pop esp
sub dword [esp + 8], eax
jmp 0x5f4049
push eax
push eax
mov dword [esp], 0x67ff456d
shl dword [esp], 1
shr dword [esp], 6
shl dword [esp], 6
inc dword [esp]
sub dword [esp], 0x893ff325
pop eax
shr eax, 5
xor eax, 0x7bfdf25a
not eax
xor eax, 0xed8c354b
jmp 0x5f5da7
sub ebx, 4
xchg dword [esp], ebx
pop esp
mov dword [esp], edx
mov edx, 0x79ba9fd6
jmp 0x5f368a
add dword [esp + 4], 0x3ffed44a
sub dword [esp + 4], edx
sub dword [esp + 4], 0x3ffed44a
sub dword [esp + 4], 0x17f7afbe
pop edx
mov dword [esp], edx
push ebp
mov edx, dword [esp]
add esp, 4
push edx
jmp 0x5f3e85
push ecx
jmp 0x5f7a9f
push dword [esp]
pop ebp
add esp, 4
pop eax
xor eax, 0x7df69985
push dword [esp]
mov edx, dword [esp]
add esp, 4
add esp, 4
jmp 0x5f475f
mov ecx, dword [esp]
add esp, 4
jmp 0x5f668d
mov ecx, dword [esp]
add esp, 4
jmp 0x5f32b5
push edx
mov edx, 4
add esi, edx
pop edx
sub esi, 4
xchg dword [esp], esi
jmp 0x5f443e
mov esp, dword [esp]
jmp 0x5f209c
mov dword [esp], esi
jmp 0x5f6ed7
push eax
jmp 0x5f57de
mov eax, dword [esp]
jmp 0x5f2d8d
sub esp, 4
mov dword [esp], ebx
jmp 0x5f6d02
mov dword [esp], edi
pop eax
push dword [esp]
push dword [esp]
pop edi
jmp 0x5f34c3
mov dword [esp], esi
mov dword [esp], ebp
mov dword [esp], esi
mov dword [esp], ecx
mov dword [esp], eax
push dword [esp]
mov eax, dword [esp]
add esp, 4
jmp 0x5f7460
xchg edx, eax
jmp 0x5f6ac1
pop esp
cmp dword [ebp + 0x122d2dd8], 0
jne 0x5f692e
cmp dword [ebp + 0x122d2d0c], 0
je 0x5f693d
push eax
mov eax, eax
mov eax, 0
call dword [ebp + 0x122d33a8]
pop eax
push esi
mov dword [esp], 0x3eba2d9f
mov dword [esp], ebx
push 0x4c37dc40
mov dword [esp], eax
push dword [esp]
pop ebx
push esi
mov esi, esp
push edx
mov edx, 0x7eb651f7
push eax
push ebx
mov ebx, 0x6bfac386
sub ebx, 0xec22f103
jmp 0x5f6996
mov eax, ebx
pop ebx
inc eax
shr eax, 2
and eax, 0x56ff0bea
push edx
mov edx, 0x7beb1f84
sub edx, 0x73f756d1
jmp 0x5f6b35
push edi
push eax
pop edi
pop eax
push edx
mov edx, 0x691eb0a0
xor edx, 0xbcb86169
add edi, edx
mov edx, dword [esp]
add esp, 4
add eax, 0x37e7f838
add eax, edi
sub eax, 0x37e7f838
mov edi, dword [esp]
push ecx
jmp 0x5f79d6
or edx, 0x3f7ddd15
add edx, 0x59797fbd
sub eax, edx
push dword [esp]
pop edx
add esp, 4
sub edx, eax
pop eax
jmp 0x5f2968
sub eax, 0x1dc752a1
sub eax, 0xd1922d9c
sub ecx, eax
jmp 0x5f3572
mov edx, esp
add edx, 4
jmp 0x5f3e30
push ebp
mov dword [esp], 0x66f86865
jmp 0x5f53ca
push 0x71fd8194
pop esi
add esi, 0x7fdba7e2
inc esi
shr esi, 4
xor esi, 0xf1d9293
mov ecx, esi
pop esi
push ebp
mov ebp, 0x567b1f4c
sub dword [esp + 8], ebp
jmp 0x5f23e0
mov dword [esp], eax
jmp 0x5f4ae4
add esp, 4
push dword [esp]
mov eax, dword [esp]
add esp, 4
push ecx
mov ecx, esp
jmp 0x5f7161
add ecx, 4
add ecx, 4
jmp 0x5f445e
mov edx, 0x541dbed5
jmp 0x5f65c6
push 0x11dfe533
pop eax
shl eax, 7
jmp 0x5f7bd3
push 0x5140dca1
mov dword [esp], ecx
push esp
push dword [esp]
mov ecx, dword [esp]
add esp, 4
jmp 0x5f75c2
push edx
jmp 0x5f78fd
pop esi
mov dword [esp], eax
push eax
mov eax, esp
add eax, 4
sub eax, 4
xchg dword [esp], eax
pop esp
jmp 0x5f7ba3
sub esp, 4
mov dword [esp], ecx
mov ecx, 0x78602831
add ecx, 0x7e7f6f26
push eax
jmp 0x5f7402
mov dword [esp], eax
jmp 0x5f2505
mov edx, esp
jmp 0x5f472a
mov ecx, esp
add ecx, 4
add ecx, 4
xchg dword [esp], ecx
jmp 0x5f79f9
pop esp
jmp 0x5f7a47
push esi
jmp 0x5f78cc
mov dword [esp], eax
add dword [esp], 0x2ae522f8
pop edx
jmp 0x5f2dc1
sub ecx, ebp
jmp 0x5f7b7b
sub ecx, 0x2fbaef46
pop ebp
neg ecx
jmp 0x5f465d
mov dword [esp], ebx
mov ebx, 0x3ff7b500
xor dword [esp + 4], ebx
pop ebx
mov eax, dword [esp]
push edi
push esp
pop edi
add edi, 4
jmp 0x5f7bc1
add edi, 4
xor edi, dword [esp]
xor dword [esp], edi
xor edi, dword [esp]
pop esp
jmp 0x5f784a
inc eax
and eax, 0x7ebfe3b6
jmp 0x5f6d26