Function at 0x5dfc17
Capabilities:
Check for vm using instruction vpcext
Contain obfuscated stackstrings
Reference the vmware io port

Disassembly:
push dword [esp]
jmp 0x5dceb6
add esi, 0x3d0c92da
add esi, 0x7fffb5e2
add esi, ebp
sub esi, 0x7fffb5e2
sub esi, 0x3d0c92da
mov ebp, dword [esp]
add esp, 4
add esi, 4
xor esi, dword [esp]
xor dword [esp], esi
xor esi, dword [esp]
pop esp
push 0x713ebe96
jmp 0x5dcee5
mov eax, dword [esp]
add esp, 4
push esi
push ebx
mov ebx, esp
add ebx, 4
push esi
push ebx
mov ebx, 0x6fbf46ed
neg ebx
dec ebx
jmp 0x5dcf03
mov esi, dword [esp]
jmp 0x5dcf67
not esi
dec esi
jmp 0x5dcf29
mov dword [esp], esi
push eax
push ebx
push 0x55eb6721
pop ebx
and ebx, 0x4fffa150
or ebx, 0x6efc9d5f
not ebx
jmp 0x5dcf7c
inc ebx
xor ebx, 0x625e9fff
add ebx, 0xde1d918
mov esi, ebx
pop ebx
sub ebx, esi
mov esi, dword [esp]
add esp, 4
push ebx
push dword [esp + 4]
pop ebx
pop dword [esp]
jmp 0x5dcf98
sub esi, 0x7fbec28e
add esi, 0xbb5c63a6
add ebp, esi
mov esi, dword [esp]
add esp, 4
xchg dword [esp], ebp
pop esp
mov eax, dword [esp]
add esp, 4
add eax, 0x5ff7a62a
sub eax, esi
jmp 0x5dcf56
sub eax, 0x5ff7a62a
push dword [esp]
pop esi
add esp, 4
jmp 0x5dcfe0
add esp, 4
push ebp
push edi
mov edi, 4
mov ebp, edi
pop edi
jmp 0x5dce79
add ebx, 0x6fffc03b
mov eax, ebx
pop ebx
push 0x72d728c7
mov dword [esp], edx
mov dword [esp], eax
push dword [esp]
jmp 0x5dcfb3
mov esp, dword [esp]
mov dword [esp], esp
push esi
mov esi, 4
jmp 0x5dcfa9
add dword [esp + 4], esi
pop esi
jmp 0x5dced5
pop esi
push ebp
push esp
mov ebp, dword [esp]
add esp, 4
add ebp, 4
push 0x37e856f4
mov dword [esp], esi
mov esi, 0x7bddef57
and esi, 0x3fbfb1bb
jmp 0x5dcfda
dec esi
jmp 0x5dcedd
mov ecx, ebx
jmp 0x5de0e7
sub esp, 4
mov dword [esp], ebx
push esp
pop ebx
add ebx, 4
sub ebx, 4
jmp 0x5dfd73
pop esp
jmp 0x5e2b36
add eax, 4
jmp 0x5e1480
push ebx
jmp 0x5defb0
mov ebx, esp
add ebx, 4
add ebx, 4
xchg dword [esp], ebx
pop esp
pop ebx
jmp 0x5e0c43
xor eax, 0x59124e18
add dword [esp + 4], 0x64ff561c
sub dword [esp + 4], 0x77bfb067
add dword [esp + 4], eax
add dword [esp + 4], 0x77bfb067
jmp 0x5df6b6
add esp, 4
push ebp
jmp 0x5dfc15
sub dword [esp + 4], 0x64ff561c
push dword [esp]
jmp 0x5e04e7
push dword [esp]
mov ecx, dword [esp]
jmp 0x5e12f5
mov ebp, dword [esp]
add esp, 4
push edi
push ebp
mov dword [esp], 4
pop edi
add ebp, edi
pop edi
sub ebp, 4
xchg dword [esp], ebp
jmp 0x5e12a1
push ecx
mov ecx, 4
add esi, ecx
pop ecx
xchg dword [esp], esi
mov esp, dword [esp]
push esi
mov dword [esp], 0x470a9ddc
mov dword [esp], edx
push ebx
mov dword [esp], edx
mov dword [esp], ebx
push ecx
mov ecx, eax
mov ebx, ecx
push dword [esp]
pop ecx
push esi
mov esi, esp
add esi, 4
add esi, 4
xchg dword [esp], esi
pop esp
sub esp, 4
mov dword [esp], ecx
mov dword [esp], 0x2191e844
mov dword [esp], ebx
push dword [esp]
jmp 0x5dfb3f
add ebp, ecx
mov ecx, dword [esp]
jmp 0x5dfde4
mov edx, dword [esp]
add esp, 4
jmp 0x5deaa3
push eax
mov dword [esp], 0x428c6d25
mov dword [esp], esp
add dword [esp], 4
pop ebx
push esi
mov esi, 0x1effb786
sub esi, 0x1effb782
add ebx, esi
push dword [esp]
mov esi, dword [esp]
push ecx
jmp 0x5e1517
push eax
pop ebp
push ebp
mov ebp, esp
add ebp, 4
sub ebp, 4
xchg dword [esp], ebp
pop esp
mov dword [esp], ebp
push esp
jmp 0x5df810
push ebx
mov ebx, 0x56f6f224
or ebx, 0x56d6d8fb
add ebx, 0x7ca70c6e
xor ebx, 0xd39e0769
sub ecx, ebx
pop ebx
xor ecx, dword [esp]
jmp 0x5e0010
push ecx
jmp 0x5e1013
add esp, 4
add ebp, 4
xor ebp, dword [esp]
jmp 0x5e0baf
xor dword [esp], ecx
xor ecx, dword [esp]
pop esp
mov dword [esp], ecx
mov dword [esp], 0x3bfc964f
dec dword [esp]
not dword [esp]
push eax
jmp 0x5e2669
mov dword [esp], esp
add dword [esp], 4
push dword [esp]
push dword [esp]
mov eax, dword [esp]
add esp, 4
add esp, 4
sub esp, 4
mov dword [esp], ebp
push ebp
mov dword [esp], esp
add dword [esp], 4
pop ebp
push ecx
mov ecx, 0x75bf10a5
jmp 0x5e0333
and ecx, 0x57fbbdb5
shl ecx, 3
xor ecx, 0xadd8852c
jmp 0x5df9aa
push 0x53a5ba2f
mov dword [esp], esp
add dword [esp], 4
pop ecx
add ecx, 4
jmp 0x5dfcba
mov eax, dword [esp]
add esp, 4
jmp fcn.005dfffa
mov dword [esp], eax
push dword [esp]
pop eax
jmp 0x5e0ecb
push edx
mov dword [esp], eax
push 0x2f43db2a
jmp 0x5e0cbe
add esp, 4
mov dword [esp], eax
mov eax, dword [esp]
jmp 0x5df69a
xor dword [esp], ebp
xor ebp, dword [esp]
mov esp, dword [esp]
mov dword [ebp + 0x122d204b], eax
mov dword [ebp + 0x122d3550], 0
push eax
push dword [esp]
pop eax
push 0x1c8e69fc
mov dword [esp], edx
mov edx, esp
add edx, 4
push ebx
jmp 0x5e0c4e
mov eax, edx
push dword [esp]
pop edx
jmp 0x5e14d2
mov ebx, 4
push eax
push edx
push 0x7ce72401
pop edx
xor edx, 0x409a130e
mov eax, edx
pop edx
add eax, 0x7eaf43e2
or eax, 0x3d9b823c
shr eax, 6
shr eax, 4
xor eax, 0x7a54064b
add edx, 0x7d57e533
add edx, 0x3eee5360
add edx, eax
sub edx, 0x3eee5360
sub edx, 0x7d57e533
jmp 0x5e1095
pop eax
sub eax, 0x5ffe3b04
and eax, 0x7ade9bf0
shr eax, 5
or eax, 0x77ff37cc
jmp 0x5df0fc
push edx
mov dword [esp], esi
jmp 0x5e2b29
mov dword [esp], ebx
push dword [esp + 4]
pop ebx
pop dword [esp]
pop esp
jmp 0x5e0091
pop eax
push eax
mov eax, 0x77ae6a46
dec eax
sub eax, 0x37bf36a6
add edx, 0x7fd3124b
sub edx, eax
jmp 0x5e1a9d
pop esp
mov dword [esp], ecx
push ebp
push edi
mov edi, 0x4ebf3769
xor dword [esp + 4], edi
mov edi, dword [esp]
add esp, 4
pop ecx
xor ecx, 0x4ebf3769
mov eax, ecx
jmp 0x5df765
add esp, 4
push eax
mov eax, esp
jmp 0x5e1343
add eax, 4
jmp 0x5de920
xchg dword [esp], eax
mov esp, dword [esp]
pop ebp
cmp dword [ebp + 0x122d2f2e], 0
jne 0x5e1499
cmp dword [ebp + 0x122d2ee6], 0
je 0x5e14aa
push eax
push ebx
mov eax, eax
mov eax, 0
call dword [ebp + 0x122db8b9]
pop ebx
pop eax
push eax
jmp 0x5e0904
add esp, 4
cmp dword [ebp + 0x122d2f2e], 0
jne 0x5e14e7
cmp dword [ebp + 0x122d2ee6], 0
je 0x5e14f6
push eax
mov eax, eax
mov eax, 0
call dword [ebp + 0x122d355c]
pop eax
cmp dword [ebp + 0x122d2ee6], 0
je 0x5e150c
push eax
mov eax, 0
call dword [ebp + 0x122d1f93]
pop eax
sub esp, 4
mov dword [esp], ebx
jmp 0x5dfb75
mov ecx, esp
add ecx, 4
add ecx, 4
xchg dword [esp], ecx
jmp 0x5de177
sub edx, 0x7fd3124b
jmp 0x5e2886
mov edx, dword [esp]
add esp, 4
pop dword [esp]
pop esp
cmp dword [ebp + 0x122d2f2e], 0
jne 0x5e21ae
cmp dword [ebp + 0x122d2ee6], 0
je 0x5e21c3
push eax
mov eax, eax
mov eax, 0x43d
mov dword [ebp + 0x122d3572], eax
call dword [ebp + 0x122d35ee]
pop eax
push ecx
jmp 0x5e03f6
mov eax, 0x6ffe1bb3
xor dword [esp + 4], eax
jmp 0x5e29b9
pop eax
add edx, ebx
add edx, 0x3fef339f
sub edx, 0x7a7be9b5
mov ebx, dword [esp]
jmp 0x5e28f6
push ebx
mov ebx, esp
add ebx, 4
add ebx, 4
xchg dword [esp], ebx
mov esp, dword [esp]
push ebx
mov dword [esp], edx
push dword [esp + 4]
jmp 0x5e218f
pop eax
sub dword [esp], 0x4c15f849
dec dword [esp]
neg dword [esp]
sub dword [esp], 0x3fff9b7b
sub dword [esp], 0xe019e9b5
add dword [esp], 0x98a2f623
jmp 0x5e0543
mov esi, esp
add esi, 4
jmp 0x5df92a
add esp, 4
sub ebx, 4
xor ebx, dword [esp]
xor dword [esp], ebx
xor ebx, dword [esp]
mov esp, dword [esp]
mov dword [esp], ebp
push edx
jmp 0x5e2c4c
push 0x1c23b1e4
pop edx
mov dword [esp + 4], edx
mov edx, dword [esp]
jmp 0x5e0b85