Function at 0x5d98a4
Capabilities:
Check for vm using instruction vpcext
Contain obfuscated stackstrings
Reference the vmware io port

Disassembly:
push dword [esp]
push dword [esp]
jmp 0x5d8ba4
xor dword [esp], esi
xor esi, dword [esp]
mov esp, dword [esp]
push edx
push 0x15c2626d
mov dword [esp], esp
add dword [esp], 4
pop edx
add edx, 4
sub edx, 4
push edx
push dword [esp + 4]
pop edx
jmp 0x5d8b08
mov dword [esp], ebp
jmp 0x5d8afd
xor ebx, 0xc20c097f
mov ebp, 0x8bfb2b83
sub ebp, ebx
mov ebx, dword [esp]
add esp, 4
jmp 0x5d8af4
xchg ebp, edx
not edx
jmp 0x5d8b10
push ebx
mov ebx, 0x79fa4e9b
jmp 0x5d8b4a
pop dword [esp]
jmp 0x5d8bb6
xchg ebp, edx
not ebp
dec ebp
shl ebp, 3
push eax
push edx
mov dword [esp], ecx
mov ecx, 0x75ff4bac
push ebx
mov ebx, 0xe500ae66
push ebx
mov eax, dword [esp]
push edi
push esp
pop edi
add edi, 4
add edi, 4
xchg dword [esp], edi
pop esp
pop ebx
add eax, ecx
pop ecx
xor ebp, eax
jmp 0x5d8b8f
add ebx, 0x7ff7d6f2
jmp 0x5d8adc
mov esi, dword [esp]
sub esp, 4
mov dword [esp], eax
mov eax, esp
add eax, 4
add eax, 4
xor eax, dword [esp]
xor dword [esp], eax
xor eax, dword [esp]
pop esp
add esi, 4
push ebx
push ecx
mov dword [esp], 4
pop ebx
add esi, ebx
pop ebx
xor esi, dword [esp]
jmp 0x5d8aa6
pop eax
add ebp, 0xdae7f46b
sub eax, ebp
push dword [esp]
pop ebp
add esp, 4
jmp 0x5d8bdb
pop eax
add esp, 4
sub esp, 4
mov dword [esp], esi
jmp 0x5d8bbc
pop esp
jmp 0x5d8ad4
push 0x79f89080
push ebx
push esp
pop dword [esp]
add dword [esp], 4
jmp 0x5d8bcf
pop dword [esp]
add dword [esp], 4
jmp 0x5d8b55
push ebx
mov dword [esp], edi
push 0x7ff8152d
mov dword [esp], eax
pop edi
sub esp, 4
mov dword [esp], edi
jmp 0x5d8c49
push eax
push esp
pop eax
push ebp
mov ebp, 0x7e3b4700
push esi
mov esi, 0xcb77b62
and esi, 0x6bf7ade4
jmp 0x5d8d5a
sub edx, 1
sub edx, 0x6fcc5964
sub edx, 0x807b4fdd
sub esp, 4
jmp 0x5d8e6f
mov ebp, 0x753d967d
jmp 0x5d8d62
pop edi
xchg dword [esp], ebx
pop esp
mov dword [esp], ecx
mov dword [esp], edi
mov dword [esp], edx
push eax
mov dword [esp], ecx
push esi
jmp 0x5d8ea7
mov eax, dword [esp]
jmp 0x5d8c51
add esp, 4
push dword [esp]
pop edi
push 0x64c36573
mov dword [esp], eax
push edx
mov edx, esp
jmp 0x5d8d17
push 0x56652e0a
mov dword [esp], edx
push 0x77ff8b65
pop edx
push ebp
mov ebp, 0x29ffe132
inc ebp
jmp 0x5d8c91
neg eax
sub eax, 0xd4fadc
jmp 0x5d8d95
not ebp
push edx
mov edx, 0x75e39371
dec edx
xor edx, 0x21ca28a
xor ebp, edx
pop edx
shr ebp, 2
or ebp, 0x35ebfe9b
sub ebp, 0x471ffd44
jmp 0x5d8dc8
sub eax, 0x36fe6ee7
jmp 0x5d8c85
push edx
mov dword [esp], eax
mov eax, 4
add ebx, 0x76fb661c
add ebx, eax
sub ebx, 0x76fb661c
mov eax, dword [esp]
add esp, 4
push edi
mov edi, 4
sub ebx, edi
jmp 0x5d8c31
push ebx
jmp 0x5d8eb1
mov eax, dword [esp]
add esp, 4
jmp 0x5d8d47
mov dword [esp], eax
mov eax, esp
push esi
mov dword [esp], 0x78f3cff2
mov dword [esp], esi
jmp 0x5d8c6b
add edx, 4
sub edx, 4
xchg dword [esp], edx
pop esp
push esp
pop dword [esp]
push edx
mov dword [esp], 0x2b575d8e
mov dword [esp], esi
mov esi, 4
add dword [esp + 4], esi
jmp 0x5d8d41
pop esi
jmp 0x5d8cf4
add eax, 4
push edi
mov edi, 4
add eax, edi
pop edi
jmp 0x5d8dd7
shl esi, 1
jmp 0x5d8de6
push esi
mov esi, 0x53f67960
xor ebp, esi
pop esi
dec ebp
xor ebp, 0x27c9019
sub esi, ebp
pop ebp
mov ecx, esi
jmp 0x5d8edf
push ecx
mov ecx, 0x2bf331e9
sub ecx, 0x17fdedbf
sub ecx, 0x13f54426
add eax, ecx
jmp 0x5d8da5
sub edx, eax
mov eax, dword [esp]
jmp 0x5d8d9f
push eax
jmp 0x5d8ed3
pop ecx
xchg dword [esp], eax
mov esp, dword [esp]
push ecx
push 0x2c59b046
mov dword [esp], edx
push 0x7bf75d11
pop edx
sub dword [esp + 4], edx
pop edx
push dword [esp]
jmp 0x5d8e2d
mov esi, ebp
pop ebp
add esi, edx
pop edx
xchg esi, ebp
not ebp
jmp 0x5d8e44
xchg dword [esp], eax
pop esp
jmp 0x5d8e0d
pop esi
jmp 0x5d8d7c
shr esi, 8
xor esi, 0x6fee7562
dec esi
sub esi, 0xf8ffa9be
sub ebp, esi
pop esi
or ebp, 0x7e3fbb68
shl ebp, 5
xor ebp, 0x57f3b688
jmp 0x5d8e33
push edx
mov dword [esp], edi
mov dword [esp], 0x66ff12e7
sub dword [esp], 0x1e0ce09f
mov dword [esp], edi
mov dword [esp], ebx
mov ebx, dword [esp]
jmp 0x5d8f0a
pop ecx
jmp 0x5d8bf3
neg ebp
add ebp, 0xb00c4b6c
add eax, ebp
pop ebp
push edi
jmp 0x5d8e53
xchg esi, ebp
sub esi, 0x912071fb
add eax, esi
jmp 0x5d8de0
mov dword [esp], edx
mov edx, 4
add eax, edx
pop edx
xchg dword [esp], eax
mov esp, dword [esp]
push edx
mov edx, 0x6c3f0653
jmp 0x5d8c0d
mov dword [esp], eax
jmp 0x5d8e77
mov eax, 0x6f6f0a87
sub ecx, eax
mov eax, dword [esp]
add esp, 4
add ecx, edx
jmp 0x5d8e8e
add ecx, 0x6f6f0a87
jmp 0x5d8e99
mov edx, dword [esp]
add esp, 4
push ebx
mov ebx, esp
jmp 0x5d8cc1
mov esi, 0x79f5fcc5
jmp 0x5d8cee
mov ebx, 0x77aea801
add esi, ebx
pop ebx
dec esi
xor esi, 0x5afea938
jmp 0x5d8ec5
neg esi
add esi, 1
push ebp
jmp 0x5d8c27
mov eax, esp
add eax, 4
jmp 0x5d8efe
pop esi
add dword [esp + 4], ecx
pop ecx
jmp 0x5d8eea
pop edx
push eax
mov eax, 0x7bb812c9
shr eax, 4
and eax, 0x3e3b45cd
jmp 0x5d8cb7
add eax, 4
xchg dword [esp], eax
pop esp
jmp 0x5d8f14
push 0x6bdf2692
jmp 0x5d8d02
jmp 0x5d92fc
push esi
mov dword [esp], eax
jmp 0x5d9333
push dword [esp]
pop eax
jmp 0x5d9371
mov dword [esp], ebp
mov dword [esp], edi
push ebx
mov dword [esp], eax
jmp 0x5d935f
push ecx
push esp
pop ecx
add ecx, 4
push ebx
mov ebx, 4
add ecx, ebx
jmp 0x5d9345
push 0x23a384f2
mov dword [esp], ecx
mov ecx, 0x75fc556f
jmp 0x5d9408
pop ebx
jmp 0x5d938d
add ecx, edx
push dword [esp]
pop edx
add esp, 4
add ecx, 4
xchg dword [esp], ecx
jmp 0x5d9369
push 0xc44bc46
jmp 0x5d93b7
mov esp, dword [esp]
jmp 0x5d93b2
sub esp, 4
mov dword [esp], eax
push esp
pop eax
add eax, 4
add eax, 4
xchg dword [esp], eax
mov esp, dword [esp]
push edi
jmp 0x5d930e
xchg dword [esp], ecx
mov esp, dword [esp]
push 0x463d1349
mov dword [esp], ecx
mov ecx, esp
push edx
push edi
mov edi, 0x6bfb5661
mov edx, edi
pop edi
sub edx, 0x6bfb565d
jmp 0x5d934b
jmp 0x5d9412
mov dword [esp], ebx
mov ebx, 0x6d260e26
mov eax, 0xad0d55a8
sub eax, ebx
push dword [esp]
pop ebx
add esp, 4
jmp 0x5d93d2
mov edi, eax
pop eax
dec edi
add edi, 0xffffffff
add edi, 0x36150def
xor eax, edi
pop edi
sub esp, 4
mov dword [esp], edx
jmp 0x5d93f0
mov dword [esp], ebx
push dword [esp]
push dword [esp]
push dword [esp]
pop ebx
add esp, 4
jmp 0x5d931d
xor dword [esp + 4], ecx
pop ecx
jmp 0x5d9305
call 0x5d9417
mov eax, dword [esp]
jmp 0x5d94da
push 0x5fffa787
pop eax
jmp 0x5d94aa
sub esp, 4
mov dword [esp], ecx
jmp 0x5d95b1
push dword [esp]
jmp 0x5d94bb
sub eax, edx
sub eax, 0x6bf7f2aa
jmp 0x5d94a2
push edx
mov edx, 0x4dff1aa1
xor esi, edx
jmp 0x5d9492
mov dword [esp], ebx
mov ebx, esp
push edi
mov edi, 4
add ebx, edi
push dword [esp]
mov edi, dword [esp]
add esp, 4
add esp, 4
push esi
push ecx
mov ecx, 0x75fb8453
mov esi, 0xa046f38
xor esi, ecx
pop ecx
xchg esi, edx
not edx
xchg esi, edx
jmp 0x5d944c
mov edx, dword [esp]
jmp 0x5d9543
add esp, 4
jmp 0x5d94d5
mov edx, dword [esp]
jmp 0x5d949a
or eax, 0x66be986b
sub eax, 0x7fffbd61
mov edx, eax
jmp 0x5d94e0
pop ebx
add esp, 4
pop dword [esp]
pop esp
push ecx
mov ecx, esp
add ecx, 4
push eax
jmp 0x5d95a1
jmp 0x5d95c8
push ebp
jmp 0x5d952f
mov eax, dword [esp]
add esp, 4
jmp 0x5d956a
mov ecx, 0x6fff7620
sub dword [esp + 4], ecx
pop ecx
pop eax
add eax, 0x6fff7620
push dword [esp]
pop ecx
add esp, 4
pop edi
push edi
mov edi, 0
sub edi, eax
push eax
push edi
pop eax
pop edi
mov edi, dword [esp]
add esp, 4
add eax, 0x4bb55ea0
not eax
add eax, 0xe1d015e0
sub ecx, eax
pop eax
jmp 0x5d942a
mov ebp, esp
add ebp, 4
sub ebp, 4
xchg dword [esp], ebp
pop esp
jmp 0x5d9459
push ecx
mov ecx, esp
add ecx, 4
add ecx, 4
xchg dword [esp], ecx
jmp 0x5d9574
pop esi
sub esp, 4
mov dword [esp], ebx
push dword [esp + 4]
jmp 0x5d9438
add eax, 0x6bf7f2aa
jmp 0x5d9440
pop esp
neg esi
add esi, 0xcdff0e39
add ebx, 0x56731971
sub ebx, 0x7b7f02b8
add ebx, esi
add ebx, 0x7b7f02b8
jmp 0x5d9596
sub ebx, 0x56731971
jmp 0x5d9557
push edi
mov edi, 0x69e548c5
push ecx
mov ecx, edi
push ecx
push ecx
jmp 0x5d94ee
push dword [esp + 4]
mov ecx, dword [esp]
add esp, 4
pop dword [esp]
pop esp
mov dword [esp], edx
push eax
jmp 0x5d941f
push ebx
push eax
jmp 0x5d972f
push eax
mov eax, 0x2fff0ac9
sub edx, eax
mov eax, dword [esp]
add esp, 4
add edx, 0x1f5b51da
xor edx, 0x4037991
add dword [esp + 4], 0x5f5d55c0
add dword [esp + 4], 0x2dff7eb0
add dword [esp + 4], edx
push ebx
jmp 0x5d9628
xchg dword [esp], ebx
pop esp
push eax
mov eax, esp
push ebx
mov ebx, 4
jmp 0x5d968d
mov ebx, 0x2dff7eb0
jmp 0x5d9632
sub dword [esp + 8], ebx
jmp 0x5d979d
pop edi
pop ebx
and edi, 0x7f6e0407
push eax
jmp 0x5d9755
dec eax
shl eax, 4
not eax
inc eax
push edi
mov edi, 0x7efec61b
shl edi, 5
add edi, 0x735fec16
push eax
mov eax, 0x3d380571
and edi, eax
pop eax
add edi, 0x7f133fc7
xor edi, 0xdda593a9
jmp 0x5d978c
push ebx
pop edi
pop ebx
neg ebx
push edi
sub esp, 4
mov dword [esp], edx
mov dword [esp], ebx
jmp 0x5d963b
sub eax, 0x7d5b3a14
add eax, ebx
add eax, 0x7d5b3a14
mov ebx, dword [esp]
add esp, 4
push ebp
mov ebp, 4
sub eax, ebp
pop ebp
xor eax, dword [esp]
xor dword [esp], eax
xor eax, dword [esp]
mov esp, dword [esp]
mov dword [esp], ebx
push esi
mov esi, 0x3bfb2452
add dword [esp + 4], esi
pop esi
pop ebx
push 0x2b622fa7
mov dword [esp], edi
push ebx
jmp 0x5d9866
sub ecx, edx
add ecx, 0x3fb59e0f
pop edx
xchg dword [esp], ecx
mov esp, dword [esp]
mov dword [esp], eax
push ecx
push edx
mov edx, 0x7ef5a245
jmp 0x5d973e
pop eax
xor edi, 0x39d92050
sub ebx, edi
pop edi
push ecx
mov ecx, esp
add ecx, 4
push edx
push esi
jmp 0x5d97bd
push ebp
mov dword [esp], ebx
mov ebx, esp
add ebx, 4
push edi
mov edi, 4
sub ebx, edi
pop edi
xor ebx, dword [esp]
xor dword [esp], ebx
xor ebx, dword [esp]
jmp 0x5d9761
push dword [esp]
pop ebx
add esp, 4
jmp 0x5d970c
sub dword [esp + 4], edx
jmp 0x5d984f
sub eax, 0xa0fc1fb7
add dword [esp + 4], eax
jmp 0x5d97f4
mov eax, 0x2bbf477b
and edi, eax
jmp 0x5d96f2
mov esp, dword [esp]
mov dword [esp], ebx
push eax
push 0x3dff2800
pop eax
and eax, 0x50efa1ea
jmp 0x5d9747
add eax, edi
pop edi
add edx, eax
pop eax
sub ecx, 0x3fb59e0f
jmp 0x5d96d4
mov esi, 0x3fff9bb6
mov edx, 0x9fff061e
jmp 0x5d97cc
sub edx, esi
pop esi
inc edx
not edx
push eax
mov eax, 0x7edef6c4
jmp 0x5d9649
pop eax
pop eax
sub esp, 4
mov dword [esp], edx
mov edx, 0x6ff30049
add eax, 0x777ff6f5
jmp 0x5d982b
mov ecx, dword [esp]
add esp, 4
add ecx, 0x7e5fd507
push dword [esp]
pop eax
add esp, 4
push eax
mov dword [esp], edx
push esi
mov dword [esp], ebx
jmp 0x5d9855
sub eax, edx
sub eax, 0x777ff6f5
mov edx, dword [esp]
add esp, 4
mov ebx, dword [esp]
push ebx
mov ebx, esp
add ebx, 4
add ebx, 4
jmp 0x5d9603
pop edx
jmp 0x5d9890
mov dword [esp], edx
mov edx, 0x7ae7dce0
push edx
not dword [esp]
jmp 0x5d98b9
push 0x6edeabd9
pop ebx
sub ebx, 0x5007a7f7
mov edi, ebx
pop ebx
xor edi, 0x7fdc9d05
push edx
mov edx, 0x373dfa54
add edx, 0xc0392d
sub edi, edx
pop edx
push edi
jmp 0x5d9679
pop eax
add eax, 0x7ef5a245
push eax
push ebx
mov ebx, 0x7e5fd507
sub dword [esp + 4], ebx
mov ebx, dword [esp]
push ebp
mov ebp, esp
add ebp, 4
add ebp, 4
xchg dword [esp], ebp
pop esp
jmp 0x5d980b
pop edx
shl edx, 7
jmp 0x5d95cf