Function at 0x5a2009
Capabilities:
Check for vm using instruction vpcext
Contain obfuscated stackstrings
Reference the vmware io port

Disassembly:
pop esp
jmp 0x5a071d
push esi
push esp
jmp 0x59fa95
cmp dword [ebp + 0x122d2c43], 0
jne 0x59f2a6
cmp dword [ebp + 0x122d2b73], 0
je 0x59f2b5
push eax
mov eax, eax
mov eax, 0
call dword [ebp + 0x122d1ce9]
pop eax
cmp dword [ebp + 0x122d2b73], 0
je 0x59f2cb
push eax
mov eax, 0
call dword [ebp + 0x122d1d29]
pop eax
push edi
mov edi, esp
jmp 0x5a05a1
add esi, edx
mov edx, dword [esp]
add esp, 4
push edi
mov edi, 4
add esi, edi
mov edi, dword [esp]
add esp, 4
xchg dword [esp], esi
mov esp, dword [esp]
cmp dword [ebp + 0x122d2c43], 0
jne 0x59f304
cmp dword [ebp + 0x122d2b73], 0
je 0x59f319
push eax
mov eax, eax
mov eax, 0x43d
mov dword [ebp + 0x122d24fb], eax
call dword [ebp + 0x122d2636]
pop eax
push esi
mov esi, eax
push 0x5ce17056
mov dword [esp], ecx
push ebx
jmp 0x5a0946
push esi
mov esi, 0x77f2cb21
sub edi, esi
mov esi, dword [esp]
add esp, 4
add edi, ebp
jmp 0x5a19e5
pop esi
push edx
mov edx, 4
jmp 0x59f2d3
push edx
push esi
mov esi, 0x5e7d7ced
and esi, 0x6bbf999b
add esi, 0x34925ba8
mov edx, esi
pop esi
or edx, 0x1ffc0b07
shr edx, 4
shr edx, 4
add edx, 0x35fd6d85
or edx, 0x739d2c73
add edx, 0x8802928d
add edi, edx
pop edx
jmp 0x5a2a4b
xor edi, dword [esp]
pop esp
jmp 0x5a1a8b
mov dword [esp], edi
mov dword [esp], 0x2beb4e73
shl dword [esp], 8
sub dword [esp], 0x368a30a2
neg dword [esp]
inc dword [esp]
sub dword [esp], 0x2e7dfbc1
add dword [esp], 0x5ef81ff5
shl dword [esp], 7
xor dword [esp], 0x85354788
mov dword [esp], ebp
push edx
pop ebp
jmp 0x5a0eee
mov ebx, esi
mov ecx, ebx
pop ebx
push ecx
pop eax
mov ecx, dword [esp]
add esp, 4
push dword [esp]
mov esi, dword [esp]
push edi
mov edi, esp
add edi, 4
push ebx
mov ebx, esp
add ebx, 4
sub ebx, 4
xchg dword [esp], ebx
pop esp
mov dword [esp], ebp
push 4
pop ebp
jmp 0x59f93e
mov eax, ebp
pop ebp
mov edx, dword [esp]
jmp 0x59edf4
add esp, 4
jmp 0x5a1770
xor edi, dword [esp]
xor dword [esp], edi
jmp 0x5a0623
add edi, 0x77f2cb21
push dword [esp]
pop ebp
jmp 0x5a1319
add esp, 4
jmp 0x5a2262
push ebp
mov ebp, esp
add ebp, 4
add ebp, 4
xchg dword [esp], ebp
pop esp
mov dword [ebp + 0x122d32af], eax
mov dword [ebp + 0x122d1ea9], 0
sub esp, 4
mov dword [esp], edx
push eax
xor dword [esp], 0x5bbcf863
pop edx
xor edx, 0x5bbcf863
push edi
mov edi, esp
add edi, 4
push edx
mov edx, 4
jmp 0x5a2214
sub edi, edx
pop edx
xchg dword [esp], edi
jmp 0x59e89e
push 0x6697e6a5
mov dword [esp], ebx
sub esp, 4
mov dword [esp], esi
jmp 0x5a27b5
sub edx, 4
xchg dword [esp], edx
mov esp, dword [esp]
mov dword [esp], ebp
push ebx
mov ebx, eax
push ecx
mov ecx, ebx
mov ebp, ecx
pop ecx
mov ebx, dword [esp]
push ecx
mov ecx, esp
add ecx, 4
add ecx, 4
xchg dword [esp], ecx
pop esp
mov esi, ebp
pop ebp
push eax
jmp 0x5a2929
push edx
push esp
jmp 0x5a27d8
pop edx
add edx, 4
jmp 0x5a2675
mov eax, esi
mov ebx, eax
pop eax
push dword [esp]
pop esi
push eax
mov eax, esp
jmp 0x5a293a
add eax, 4
push esi
mov esi, 4
add eax, esi
pop esi
xchg dword [esp], eax
pop esp
mov eax, ebx
mov ebx, dword [esp]
push esi
jmp 0x5a2a2b
mov esi, esp
add esi, 4
add esi, 4
xchg dword [esp], esi
pop esp
jmp 0x59f294
push eax
mov eax, 4
sub edi, eax
pop eax
xchg dword [esp], edi
pop esp
mov dword [esp], eax
push ecx
mov ecx, 0x6f7d5900
sub dword [esp + 4], ecx
pop ecx
jmp 0x5a2a8e
pop eax
jmp fcn.005a2aa2