Function at 0x5d0d98
Capabilities:
Check for vm using instruction vpcext
Contain obfuscated stackstrings
Reference the vmware io port

Disassembly:
add esp, 4
pop ebx
sub edi, 0xc227cb95
add edx, 0x75fdf0d2
jmp 0x5d0d11
push edx
push edi
push ebx
mov ebx, 0x5f7fd1ac
inc ebx
add ebx, 0x7df529a
jmp 0x5d0cec
xor dword [esp], 0x5c7c0300
push dword [esp]
push dword [esp]
mov ecx, dword [esp]
jmp 0x5d0c25
xchg dword [esp], ebp
pop esp
sub esp, 4
mov dword [esp], ecx
jmp 0x5d0b4a
push ecx
mov ecx, ebx
push ecx
pop edi
mov ecx, dword [esp]
jmp 0x5d0b12
add eax, 0x3edf636d
jmp 0x5d0bc9
sub edi, eax
pop eax
jmp 0x5d0c45
push eax
mov dword [esp], 0x3ffec38d
pop ebx
jmp 0x5d0c50
mov eax, 0x37c7b718
or eax, 0x2afbe44e
jmp 0x5d0bbf
add esp, 4
push ebx
mov dword [esp], ebp
push esp
pop ebp
add ebp, 4
add ebp, 4
xchg dword [esp], ebp
jmp 0x5d0c69
add edi, 0x224d768b
jmp 0x5d0d77
xor ebx, 0x661ce18
jmp 0x5d0bb2
pop esp
sub esp, 4
mov dword [esp], edx
mov edx, esp
push edi
mov edi, 4
add edx, edi
pop edi
push eax
mov eax, 4
add edx, eax
pop eax
xchg dword [esp], edx
pop esp
push eax
mov eax, 0x5c7c0300
xor ecx, eax
mov eax, dword [esp]
sub esp, 4
mov dword [esp], ebp
push esp
pop ebp
add ebp, 4
add ebp, 4
push ebp
push dword [esp + 4]
pop ebp
pop dword [esp]
pop esp
jmp 0x5d0b36
add ebp, 4
jmp 0x5d0b92
neg ebx
dec ebx
shl ebx, 1
add ebx, 0xeacaef7
mov edi, ebx
pop ebx
shr edi, 5
dec edi
push esi
mov esi, 0x2f5f3a00
xor edi, esi
pop esi
shl edi, 5
push eax
jmp 0x5d0c04
add edx, 0x67d71f67
jmp 0x5d0d1c
add edx, edi
jmp 0x5d0da6
sub edx, edi
pop edi
sub edx, 0x75fdf0d2
pop edi
jmp 0x5d0e1c
sub dword [esp + 4], edi
push dword [esp]
pop edi
add esp, 4
mov edx, dword [esp]
add esp, 4
push eax
mov dword [esp], edi
push ebx
jmp 0x5d0bdf
push ebp
mov ebp, esp
add ebp, 4
jmp 0x5d0ce1
push edi
jmp 0x5d0db7
mov edi, 0x67d71f67
jmp 0x5d0d4f
jmp 0x5d11ec
push 0x6d3dfa43
mov dword [esp], ebx
mov dword [esp], 0x377f0e0e
jmp 0x5d1277
mov esp, dword [esp]
push ecx
mov ecx, edi
jmp 0x5d12fb
add dword [esp], 0x381a4a53
mov dword [esp], edi
push eax
mov edi, dword [esp]
push esi
mov esi, esp
add esi, 4
add esi, 4
push esi
mov dword [esp], 0x1dd62f3c
mov dword [esp], esi
push dword [esp + 4]
push dword [esp]
jmp 0x5d1306
mov ebp, esp
add ebp, 4
add ebp, 4
jmp 0x5d1264
shl ebx, 3
neg ebx
add ebx, 0x364d1f84
add edi, ebx
jmp 0x5d12c7
xchg dword [esp], ebp
pop esp
push ebx
push edx
mov edx, 0x59c18e21
mov ebx, edx
pop edx
jmp 0x5d12a6
not dword [esp]
xor dword [esp], 0x4f6df6eb
push edx
mov edx, 0x76794600
and dword [esp + 4], edx
jmp 0x5d12f5
mov edi, esp
add edi, 4
add edi, 4
xchg dword [esp], edi
jmp 0x5d1200
xor ebx, 0x77f7868e
jmp 0x5d12e8
add esp, 4
sub esp, 4
mov dword [esp], edi
push ebx
mov edi, dword [esp]
push edi
jmp 0x5d1290
pop ebx
push ebx
mov ebx, 4
sub edi, 0x7e77c8cd
add edi, ebx
add edi, 0x7e77c8cd
pop ebx
xchg dword [esp], edi
mov esp, dword [esp]
jmp 0x5d1361
push edx
mov edx, 0x7ffc011e
neg edx
jmp 0x5d1316
pop edx
jmp 0x5d120b
mov ebx, ecx
pop ecx
push dword [esp]
jmp 0x5d1350
pop esi
add esp, 4
pop dword [esp]
pop esp
push ebp
mov ebp, esp
jmp 0x5d1324
sub edx, 0x37045383
xor ebx, edx
pop edx
jmp 0x5d1252
add ebp, 4
push eax
mov eax, 4
sub ebp, eax
pop eax
xchg dword [esp], ebp
pop esp
mov dword [esp], edi
add dword [esp], 0x3ae7c42e
pop eax
sub eax, 0x3ae7c42e
push dword [esp]
pop edi
jmp 0x5d12b1
pop edi
sub esp, 4
mov dword [esp], edi
push esp
mov edi, dword [esp]
push ebp
jmp 0x5d123f
call 0x5d1366
push dword [esp]
push dword [esp]
mov eax, dword [esp]
jmp 0x5d1384
mov dword [esp], ebx
push ebp
mov ebp, 0x15dcbfbb
neg ebp
jmp 0x5d1416
add esp, 4
add esp, 4
push 0x4dc1c809
mov dword [esp], ecx
jmp 0x5d1509
sub eax, ebx
pop ebx
jmp 0x5d1548
sub eax, 0x73fbcc24
pop edi
shr eax, 4
xor eax, 0x7bfac0f0
push ebx
jmp 0x5d1454
not dword [esp]
pop ebp
push esi
mov esi, 0x35df9ac7
not esi
jmp 0x5d147d
add edi, 4
add edi, 4
jmp 0x5d1421
sub ebp, esi
pop esi
jmp 0x5d13dd
shr ebp, 2
push eax
mov eax, 0x7fdd3d4c
sub ebp, eax
pop eax
xor ebp, 0xeb51f94e
jmp 0x5d142d
mov edi, 0x6bbd4ba5
not edi
not edi
sub edi, 0x6fff75b4
not edi
inc edi
jmp 0x5d1442
sub ebx, 0x7effdb42
jmp 0x5d14dc
push ebx
mov ebx, 0x5f67c2da
jmp 0x5d1433
xchg dword [esp], edi
pop esp
xor ecx, dword [esp]
jmp 0x5d1520
push ebp
jmp 0x5d13b6
add ebx, 0x88b9706
xor ebp, ebx
pop ebx
push esi
jmp 0x5d146b
sub edi, 0xa49245d8
add eax, 0x73fbcc24
add eax, edi
jmp 0x5d13a2
mov ebx, 0x6e5e6aa5
jmp 0x5d145e
sub ebx, 0x7fe5eb5a
neg ebx
jmp 0x5d140b
mov esi, 0x7ff208db
neg esi
add esi, 0xb7ec9813
jmp 0x5d13d5
add esi, 0x35df9ac9
add ebp, esi
pop esi
push ecx
mov dword [esp], 0x17dff3c2
sub dword [esp], 0x7f7f7517
not dword [esp]
add dword [esp], 0x49e7d900
shr dword [esp], 5
or dword [esp], 0x7fbfab56
add dword [esp], 0x8040442a
sub dword [esp], 0x5f2e4673
sub dword [esp], ebp
add dword [esp], 0x5f2e4673
pop ebp
add ebp, 0x81362726
sub esp, 4
mov dword [esp], edi
mov edi, ebp
push edi
pop ebx
pop edi
mov ebp, dword [esp]
jmp 0x5d14fe
add ebx, 0xf47e7058
add eax, ebx
pop ebx
sub ecx, 0x75ffa33f
add ecx, eax
add ecx, 0x75ffa33f
mov eax, dword [esp]
push edi
mov edi, esp
jmp 0x5d13c7
add esp, 4
jmp 0x5d139a
mov ecx, esp
push eax
mov eax, 4
add ecx, eax
pop eax
push eax
mov eax, 0x2f7d379d
push eax
jmp 0x5d152c
xor dword [esp], ecx
xor ecx, dword [esp]
pop esp
jmp 0x5d1540
xchg dword [esp], edi
not edi
xchg dword [esp], edi
pop eax
sub esp, 4
mov dword [esp], edi
jmp 0x5d13f4
sub esp, 4
jmp 0x5d1374
push edx
mov edx, esp
push edi
push esi
mov dword [esp], 0x6efbbd25
pop edi
xchg edi, ebx
neg ebx
xchg edi, ebx
push edx
jmp 0x5d15f5
push 0x3992ca18
mov dword [esp], ecx
add dword [esp], 0x71eaf780
jmp 0x5d1792
push dword [esp]
pop edx
add esp, 4
push ecx
push esp
mov ecx, dword [esp]
add esp, 4
jmp 0x5d169b
mov dword [esp], esi
jmp 0x5d15e7
not edx
jmp 0x5d17f1
mov esi, 0x51ef55c9
xor esi, 0x28500b27
add eax, esi
pop esi
pop ebp
or edx, eax
pop eax
jmp 0x5d1591
push esi
jmp 0x5d1598
mov dword [esp], eax
mov eax, dword [esp]
push esi
push esi
mov dword [esp], ebx
mov ebx, esp
add ebx, 4
sub ebx, 4
push ebx
push dword [esp + 4]
pop ebx
jmp 0x5d1612
push esi
jmp 0x5d16f6
sub esp, 4
jmp 0x5d1686
push 0x3fe7a955
push dword [esp]
pop esi
jmp 0x5d160a
mov edx, 0x6efbbd29
add edi, edx
jmp 0x5d1601
pop edx
add edx, edi
pop edi
jmp 0x5d1729
push eax
mov eax, esp
jmp 0x5d162a
pop dword [esp]
mov esp, dword [esp]
mov dword [esp], esp
add dword [esp], 4
mov esi, dword [esp]
add esp, 4
jmp 0x5d1737
add eax, 4
jmp 0x5d1634
add eax, 4
xchg dword [esp], eax
pop esp
neg esi
add esi, 0xbbab3f72
mov ebp, esi
pop esi
xor dword [esp + 4], ebp
mov ebp, dword [esp]
add esp, 4
jmp 0x5d1575
xor edi, dword [esp]
xor dword [esp], edi
xor edi, dword [esp]
mov esp, dword [esp]
jmp 0x5d1561
mov esi, ecx
jmp 0x5d167e
sub ecx, edx
pop edx
push eax
mov dword [esp], edx
jmp 0x5d1701
pop ecx
add edi, esi
jmp 0x5d177f
mov dword [esp], ebx
push dword [esp]
push dword [esp]
pop ebx
add esp, 4
push edi
mov edi, esp
jmp 0x5d15d6
add ecx, 4
sub ecx, 4
xor ecx, dword [esp]
xor dword [esp], ecx
xor ecx, dword [esp]
pop esp
mov dword [esp], eax
push 0x32a32523
mov dword [esp], ebx
push 0x5c68d064
pop ebx
shr ebx, 8
add ebx, 0x6433fc87
not ebx
add ebx, 0xe053fb75
mov eax, ebx
pop ebx
xor edx, eax
pop eax
jmp 0x5d17ff
push dword [esp]
pop ebp
push eax
mov eax, esp
add eax, 4
add eax, 4
xchg dword [esp], eax
pop esp
jmp 0x5d165a
push ecx
push 0x46d4315e
jmp 0x5d1710
sub esp, 4
mov dword [esp], ebp
push ecx
jmp 0x5d1589
mov dword [esp], ebx
mov ebx, 4
mov ecx, ebx
push dword [esp]
pop ebx
add esp, 4
jmp 0x5d166b
sub edx, 4
xchg dword [esp], edx
mov esp, dword [esp]
jmp 0x5d15b5
add esi, 4
add esi, 4
xor esi, dword [esp]
xor dword [esp], esi
xor esi, dword [esp]
mov esp, dword [esp]
jmp 0x5d15dc
mov ecx, 0x7f9ff8b4
push ebx
mov ebx, ecx
mov edx, ebx
pop ebx
push dword [esp]
pop ecx
add esp, 4
push eax
push ebp
mov ebp, 0x437d7f17
mov eax, 0x8b39239f
sub eax, 0x79bf5eee
jmp 0x5d17ea
mov esi, dword [esp]
add esp, 4
push ebp
mov ebp, 4
add edi, ebp
jmp 0x5d16de
mov ecx, dword [esp]
push 0x77c71961
mov dword [esp], ebx
jmp 0x5d17a2
push ebp
mov dword [esp], esp
add dword [esp], 4
pop ebx
add ebx, 4
push edx
mov dword [esp], ecx
mov ecx, 0x6affeca8
or ecx, 0x5b7bacb6
sub ecx, 0x1ddf3433
jmp 0x5d17ce
neg ecx
inc ecx
xor ecx, 0xa1df4772
add ebx, ecx
jmp 0x5d17de
pop ecx
xchg dword [esp], ebx
pop esp
push edx
push ecx
jmp 0x5d1754
sub eax, ebp
jmp 0x5d15af
add edx, 0xffffffff
xor edx, 0xf1aaf4c2
jmp 0x5d1672
jmp 0x5d1b7b
push eax
push ebx
push eax
jmp 0x5d1b83
mov dword [esp], ecx
jmp 0x5d1c49
mov ecx, dword [esp]
add esp, 4
push edx
push esi
mov esi, 0x64e99a67
jmp 0x5d1bee
add ecx, 0x2a616363
mov ebx, ecx
jmp 0x5d1b8b
and ecx, edi
pop edi
sub esp, 4
mov dword [esp], eax
mov eax, 0x75deaa00
and ecx, eax
pop eax
jmp 0x5d1ba0
pop ecx
jmp 0x5d1c55
mov edx, esi
pop esi
sub edx, esi
pop esi
sub dword [esp + 8], edx
pop edx
sub dword [esp + 4], ebx
add dword [esp + 4], 0x7cfa3c10
mov ebx, dword [esp]
add esp, 4
jmp 0x5d1c12
push esi
push 0xe1e3d677
jmp 0x5d1c43
push 0x5cb00677
jmp 0x5d1ccc
jmp 0x5d1d19
mov edi, 0x1fff11e9
jmp 0x5d1bad
pop eax
push esi
push ebp
mov ebp, 0x57ba7093
jmp 0x5d1c6b
add ebx, 4
xchg dword [esp], ebx
pop esp
sub esp, 4
mov dword [esp], ebx
push dword [esp]
mov ebx, dword [esp]
push ecx
push esp
pop ecx
add ecx, 4
jmp 0x5d1cb5
pop esi
jmp 0x5d1bc9
push 0x7eb354e9
pop ecx
push edi
jmp 0x5d1c08
push esi
push dword [esp + 4]
mov esi, dword [esp]
add esp, 4
pop dword [esp]
mov esp, dword [esp]
jmp 0x5d1c03
xor ebp, 0x694913f0
mov esi, ebp
jmp 0x5d1c78
pop ebp
add eax, 0x7de65850
add eax, esi
sub eax, 0x7de65850
mov esi, dword [esp]
push ebx
mov ebx, esp
push edi
mov edi, 0x585f4e19
jmp 0x5d1c9e
add ebx, edi
pop edi
jmp 0x5d1c1f
and edi, 0x7793104e
add edi, 0x43ee38f2
add edi, 0x6bfec70a
jmp 0x5d1c96
add ecx, 4
xchg dword [esp], ecx
pop esp
push 0xeaa0268
mov dword [esp], esi
jmp 0x5d1bf9
mov dword [esp], esp
add dword [esp], 4
pop esi
push edi
mov edi, 4
add esi, 0x2dfac88e
add esi, 0x5fff62ab
add esi, edi
sub esi, 0x5fff62ab
push edx
mov edx, 0x2dfac88e
sub esi, edx
pop edx
pop edi
push ecx
jmp 0x5d1d01
mov ecx, 4
add esi, 0x2f3e4271
add esi, ecx
sub esi, 0x2f3e4271
jmp 0x5d1bc3
call 0x5d1d1e
push dword [esp]
mov eax, dword [esp]
add esp, 4
sub esp, 4
mov dword [esp], ecx
push esp
pop ecx
add ecx, 4
push ebp
push edx
jmp 0x5d1ebd