Function at 0x5d2dd3
Capabilities:
Check for vm using instruction vpcext

Disassembly:
jmp 0x585705
jmp 0x5c9865
jmp 0x578762
jmp 0x574f9f
push 0x52eb81b7
mov dword [esp], eax
push esp
pop eax
add eax, 4
sub eax, 4
xchg dword [esp], eax
mov esp, dword [esp]
mov dword [esp], ecx
add ecx, 0x3cbbd7fc
sub ecx, 0x7df98d15
add ecx, 0x5ff9b86a
add ecx, eax
push ebp
push 0x5ff9b86a
pop ebp
sub ecx, ebp
pop ebp
add ecx, 0x7df98d15
sub ecx, 0x3cbbd7fc
push dword [esp]
push dword [esp]
mov ecx, dword [esp]
add esp, 4
add esp, 4
add esp, 4
or eax, ecx
sub esp, 4
mov dword [esp], ebx
mov ebx, esp
add ebx, 4
push edx
mov edx, 4
sub ebx, edx
pop edx
xchg dword [esp], ebx
mov esp, dword [esp]
mov dword [esp], ecx
add ecx, 0x67df5c69
push edi
mov edi, 0x6fff2cc1
sub ecx, edi
pop edi
add ecx, eax
push edx
mov edx, 0x6fff2cc1
add ecx, edx
mov edx, dword [esp]
add esp, 4
sub ecx, 0x67df5c69
push dword [esp]
mov ecx, dword [esp]
add esp, 4
push eax
mov eax, esp
add eax, 4
add eax, 4
xchg dword [esp], eax
mov esp, dword [esp]
jmp 0x5a2a36
jmp 0x578c0d
jmp 0x5d0d78
jmp 0x51a820
adc al, 0x24
jmp 0x549a0b
add byte [eax], al
add byte [eax], al
add ah, al
cdq
test byte [eax], cl
into
shr dword [eax - 0x1c], 1
stosb byte es:[edi], al
jo 0x5372a8
sub al, 0x24
push ebx
mov ebx, 0x65e788b9
mov dword [esp + 4], ebx
pop ebx
mov dword [esp], eax
mov dword [esp], ecx
push ebx
mov dword [esp], eax
mov eax, 0x5fda3630
sub ecx, eax
mov eax, dword [esp]
add esp, 4
add ecx, eax
push ebx
mov ebx, 0x5fda3630
add ecx, ebx
pop ebx
push dword [esp]
mov ecx, dword [esp]
push edi
mov edi, esp
add edi, 4
add edi, 4
xchg dword [esp], edi
mov esp, dword [esp]
add esp, 4
push dword [0x4c57b8]
mov eax, dword [esp]
push edi
push esp
pop edi
add edi, 4
push ebp
mov ebp, 4
add edi, ebp
pop ebp
xchg dword [esp], edi
pop esp
jmp 0x5879b6
jmp 0x55d187
jmp 0x597136
jmp 0x53730e
jmp 0x58423d
jmp 0x514a53
push edi
mov edi, 0
push ecx
mov ecx, esp
add ecx, 4
sub ecx, 4
xchg dword [esp], ecx
pop esp
mov dword [esp], edi
mov eax, dword [esp]
add esp, 4
pop edi
jmp 0x523af5
jmp 0x50cac6
jmp 0x53ac07
jmp 0x5fba5a
jmp 0x5ac6fc
jmp 0x523afa
jmp 0x593ff7
jmp 0x57af00
jmp 0x53ca34
push ecx
mov dword [esp], 0x16fbee62
mov dword [esp], edx
push edi
mov edi, 0
mov dword [esp + 4], edi
pop edi
pop eax
jmp 0x57aefb
push edx
mov edx, esp
add edx, 4
sub edx, 4
xchg dword [esp], edx
pop esp
mov dword [esp], eax
mov eax, esp
add eax, 4
sub eax, 4
xchg dword [esp], eax
pop esp
mov dword [esp], esi
mov dword [esp], eax
push ebx
mov ebx, esp
push eax
mov eax, 0x7d79cf64
sub eax, 0x7d79cf60
add ebx, eax
pop eax
sub ebx, 4
push ebx
push dword [esp + 4]
pop ebx
pop dword [esp]
pop esp
mov dword [esp], ebx
pop eax
push dword [esp]
pop eax
push edi
mov edi, esp
add edi, 4
add edi, 4
push edi
push dword [esp + 4]
pop edi
pop dword [esp]
mov esp, dword [esp]
push dword [ebp - 4]
mov ecx, dword [esp]
sub esp, 4
mov dword [esp], esi
push esp
pop esi
add esi, 4
add esi, 4
xchg dword [esp], esi
pop esp
push ebp
mov ebp, esp
push esi
mov esi, 4
add ebp, esi
mov esi, dword [esp]
add esp, 4
sub ebp, 4
xchg dword [esp], ebp
mov esp, dword [esp]
mov dword [esp], edx
sub esp, 4
mov dword [esp], ecx
push dword [esp]
pop edx
push edi
mov edi, esp
add edi, 4
add edi, 4
xchg dword [esp], edi
pop esp
push dword [esp]
push dword [esp]
pop edx
add esp, 4
push esi
mov esi, esp
add esi, 4
add esi, 4
xchg dword [esp], esi
pop esp
jmp 0x516dc4
jmp 0x511e07
jmp 0x5f9c19
push edx
mov edx, esp
push esi
mov esi, 4
add edx, esi
mov esi, dword [esp]
add esp, 4
sub edx, 4
xchg dword [esp], edx
pop esp
mov dword [esp], edi
mov dword [esp], edx
sub esp, 4
mov dword [esp], ebx
mov dword [esp], ecx
push dword [esp]
pop edx
add esp, 4
mov edx, dword [esp]
push esi
mov esi, esp
add esi, 4
push edi
push 0x7ff7fe13
pop edi
dec edi
shr edi, 3
add edi, 0xf0010042
add esi, edi
pop edi
xchg dword [esp], esi
mov esp, dword [esp]
push dword [sym.imp.ADVAPI32.dll_RegSetValueExW]
push dword [esp]
pop ecx
push eax
mov eax, esp
add eax, 4
push edx
mov edx, 4
add eax, edx
pop edx
xchg dword [esp], eax
pop esp
jmp 0x5a5e70
push edi
push ecx
mov ecx, 0x17f12231
mov dword [esp + 4], ecx
pop ecx
mov dword [esp], ebx
mov ebx, 0x4b9c56
xor eax, ebx
mov ebx, dword [esp]
add esp, 4
push eax
push edx
mov edx, 0x37ccde63
mov dword [esp + 4], edx
mov edx, dword [esp]
push ecx
mov ecx, esp
add ecx, 4
add ecx, 4
xchg dword [esp], ecx
pop esp
mov dword [esp], ebx
push ebp
mov dword [esp], edi
mov dword [esp], ecx
push dword [esp]
pop ebx
add esp, 4
push dword [esp]
mov ebx, dword [esp]
push ebp
mov dword [esp], esi
mov esi, 0x52dedbca
push edx
push 0x5e2764df
pop edx
xor edx, 0x51f643c1
dec edx
and edx, 0x27992b0d
sub edx, 0x77fc4d87
add edx, 0xee20dadd
sub esi, 0x7f4efd7f
sub esi, edx
add esi, 0x7f4efd7f
pop edx
add esi, 0x2ad6d499
mov eax, esi
pop esi
jmp 0x584238
sub esp, 4
mov dword [esp], ecx
mov dword [esp], esi
mov dword [esp], 0
mov eax, dword [esp]
add esp, 4
jmp 0x549a06
jmp 0x515a75
jmp 0x574f95
rcl dword [ebp + 0x607c55cd], 0x13
jns 0x5d2d79
adc ecx, dword [edx + 0x45]
inc ebp
dec esi
jp 0x5d2d8d
add eax, edx
push eax
cmp byte [ebp + 0x27], ch
retf 0x1adf
sbb cl, byte [ebp - 0x5f]
pop dword [edi + 0x5b84490d]
xchg edx, eax
xor al, byte [ecx]
cmc
or bh, byte [edx + edi + 0x58bb87a2]
push cs
sbb byte [edi + esi*8 - 0x10746abb], bl
rcr dh, cl
fld qword [edi - 0x73a53d57]
cmp dh, ch
push 0x1b6109da
scasb al, byte es:[edi]
inc eax
jno 0x5d2d6a
or edi, dword [edi]
lodsb al, byte [esi]
sub eax, 0xf4ad9271
stosd dword es:[edi], eax
xchg esp, eax
sbb ebx, esp
pushfd
adc al, 0x3e
and al, 0xac
or eax, 0x3c521b3f
stosb byte es:[edi], al
sahf
pop esi
out 0x80, al
push ss
sar byte [ecx + 0x3c], cl
cmp byte es:[ebx], ah
imul ecx, dword [ebp - 0x7f], 0xfe59254b
insb byte es:[edi], dx
int3
and ebp, dword [ecx + 0x4d]
or dword [ebx + 0x25], 0xcc6cfe59
and eax, dword es:[ecx]
test byte [eax - 0x6f], ah
sub al, 0x1e
ja 0x5d2d61
cmp al, al
stosd dword es:[edi], eax
adc dword [edx - 0x45], esi
push ds
mov cl, ah
sbb al, 0x19
sbb byte [esi + eax], ch
sub bh, byte [ebx + 0x68]
and dword [ebx + 0x68f090a1], edx
mov edi, 0x45930ac4
in eax, 0x35
movsb byte es:[edi], byte [esi]
mov dword [0x5e8c40b8], ecx
jl 0x5d2deb
or esi, edx
pop ss
and al, 0x76
pushal
jne 0x5d2e70
xor cl, byte [eax]
mov ebp, 0x95aa467d
push eax
fld qword [ebp + 0x3a]
aaa
movsd dword es:[edi], dword [esi]
cmp eax, 0x58ae3263
pop esp
call 0x96015258
popfd
dec ebx
mov ecx, 0x3e8b4fb9
pop ebp
xchg ebp, eax
outsd dx, dword [esi]
je 0x5d2dc9
push edi
jge 0x5d2ea3
inc esp
xor eax, 0x1b8b3f8c
mov edx, 0x67cc7d86
pop ds
or eax, 0x64f5fb1e
inc esi
fcompi st(5)
out 0xc7, al
cld
sbb eax, 0x9cba2f1c
pop edx
pop es
lds esp, [esi - 0x2a79b0e5]
push ss
invalid
int1
enter 0x717c, 0x24
movsb byte es:[edi], byte [esi]
inc ecx
inc edx
push eax
mov dword [esp], 0
mov eax, dword [esp]
push edi
mov edi, esp
add edi, 4
add edi, 4
xor edi, dword [esp]
xor dword [esp], edi
xor edi, dword [esp]
pop esp
jmp 0x5d0d73
ret
push 0
push dword [esp]
pop eax
push edi
mov edi, esp
add edi, 4
push ebx
mov ebx, 0x3b5d0a94
xor ebx, 0x7f7da4c
sub ebx, 0x7dbf11d7
dec ebx
shr ebx, 3
xor ebx, 0x17dd77e4
add edi, ebx
pop ebx
xchg dword [esp], edi
pop esp
jmp 0x537309
push 0x7ccca6cd
mov dword [esp], ebp
mov ebp, 0
sub esp, 4
mov dword [esp], ebp
mov eax, dword [esp]
add esp, 4
pop ebp
jmp 0x5499f2