Function at 0x5dc5df
Capabilities:
Check for vm using instruction vpcext
Contain obfuscated stackstrings
Reference the vmware io port

Disassembly:
push dword [esp]
push dword [esp]
mov eax, dword [esp]
add esp, 4
add esp, 4
push eax
mov eax, esp
push eax
mov dword [esp], ebp
push edx
mov edx, 0x75037bb6
jmp 0x5dbac3
xor ebp, ebx
pop ebx
shr ebp, 1
add ebp, 0x90b7f85a
add eax, ebp
pop ebp
jmp 0x5dbb86
mov ebp, 0x75f75a51
sub ebp, 0x7d47a689
jmp 0x5dbb09
mov dword [esp], 0x59ca1b91
mov dword [esp], edi
mov edi, 0x7fdd9ee0
jmp 0x5dbbb1
xchg dword [esp], eax
pop esp
push edi
jmp 0x5dbad3
add ebp, edx
add ebp, 0x7f9ef500
pop edx
dec ebp
sub esp, 4
mov dword [esp], ebp
jmp 0x5dbb57
push ebx
mov ebx, 0x3fba9d9a
xor ebx, 0x4024689a
jmp 0x5dbba9
mov ebp, 0x7bfbfd4c
xor edi, ebp
mov ebp, dword [esp]
add esp, 4
sub eax, 0x7fefea93
sub eax, edi
add eax, 0x7fefea93
mov edi, dword [esp]
sub esp, 4
mov dword [esp], eax
mov eax, esp
add eax, 4
add eax, 4
xchg dword [esp], eax
pop esp
jmp 0x5dbbf5
xchg dword [esp], ecx
not ecx
xchg dword [esp], ecx
mov ebp, dword [esp]
add esp, 4
push ebx
push ecx
push 0x78fecefb
pop ecx
push ebx
mov ebx, 0x2c21ef25
sub ecx, ebx
mov ebx, dword [esp]
add esp, 4
mov ebx, ecx
pop ecx
jmp 0x5dbaaf
add eax, 4
jmp 0x5dbae7
not eax
xor eax, 0x69ae4403
or edi, eax
pop eax
push edi
add dword [esp], 0xffffffff
pop edi
push eax
mov dword [esp], ebp
jmp 0x5dbb1a
sub ebp, ebx
pop ebx
jmp 0x5dbaf1
shr edi, 1
and edi, 0x33eabed8
add edi, 1
push ebp
mov dword [esp], eax
push ebx
push 0x779f3e62
mov ebx, dword [esp]
jmp 0x5dbbcf
add esp, 4
add ebx, 0x3f9fff22
add ebx, 0xa8bc443d
mov eax, ebx
pop ebx
add eax, 0x6fa6c5eb
push eax
dec dword [esp]
mov eax, dword [esp]
add esp, 4
jmp 0x5dbb90
jmp 0x5dbbfa
push ebx
jmp 0x5dbcc3
mov dword [esp], eax
mov eax, esp
add eax, 4
add eax, 4
jmp 0x5dbc98
push eax
mov dword [esp], esp
add dword [esp], 4
pop edx
add edx, 4
jmp 0x5dbe11
mov edx, ecx
push dword [esp]
mov ecx, dword [esp]
add esp, 4
jmp 0x5dbccb
xor esi, 0xca58e638
sub edi, esi
mov esi, dword [esp]
add esp, 4
add ebx, edi
mov edi, dword [esp]
push ebx
jmp 0x5dbc00
add ebx, 0x7ccf74d4
xor ebx, 0x4a401f48
mov edi, ebx
pop ebx
dec edi
dec edi
push esi
mov esi, 0x3d5d9f7d
jmp 0x5dbc39
sub dword [esp], 1
xor dword [esp], 0x7dfe97cd
neg dword [esp]
push ebx
mov ebx, 0xed74a32c
add dword [esp + 4], ebx
pop ebx
push esi
mov esi, 0x7ff7950d
jmp 0x5dbd0c
xor eax, dword [esp]
xor dword [esp], eax
xor eax, dword [esp]
pop esp
push ebx
mov dword [esp], 0x7ff7ed06
push ebx
mov dword [esp], ebp
mov ebp, 0x7f7fc887
push edi
jmp 0x5dbcdf
push edx
push dword [esp + 4]
jmp 0x5dbe1f
mov dword [esp], esi
jmp 0x5dbdf0
add esp, 4
mov ebx, dword [esp]
add esp, 4
jmp 0x5dbe9e
mov dword [esp], 0x5724a040
mov dword [esp], ecx
mov ecx, 0x56bf0201
add dword [esp + 8], ecx
pop ecx
sub dword [esp + 4], ebp
sub dword [esp + 4], 0x56bf0201
jmp 0x5dbd04
mov ebp, dword [esp]
jmp 0x5dbd31
sub dword [esp + 4], 0x3daf7000
jmp 0x5dbd3c
add dword [esp + 4], esi
pop esi
mov ebx, dword [esp]
push edi
mov dword [esp], 0x4d429136
mov dword [esp], edx
jmp 0x5dbc12
add esp, 4
dec dword [esp]
jmp 0x5dbc71
add dword [esp + 4], esi
add dword [esp + 4], 0x3daf7000
pop esi
jmp 0x5dbd4e
push ecx
mov ecx, 0x7bfcbb79
shl ecx, 7
shr ecx, 3
and ecx, 0x6dffe184
not ecx
add ecx, 0x7fc3895b
add dword [esp + 4], ecx
pop ecx
push edi
mov edi, 0xebec4262
sub dword [esp + 4], edi
pop edi
mov dword [esp], ecx
mov ecx, dword [esp]
add esp, 4
push 0x52e2b2d2
mov dword [esp], ebx
push 0x5ae240aa
mov dword [esp], eax
mov eax, edx
push 0x45738cce
mov dword [esp], eax
xor dword [esp], 0x7faf811b
pop ebx
xor ebx, 0x7faf811b
pop eax
push 0xd5b3b1a
mov dword [esp], ebx
mov dword [esp], ecx
push edi
mov dword [esp], edx
mov edx, ebx
push edx
sub dword [esp], 0x6f9cffd7
mov ecx, dword [esp]
add esp, 4
push esi
mov esi, 0x6f9cffd7
add ecx, esi
mov esi, dword [esp]
jmp 0x5dbddc
add esp, 4
mov edx, dword [esp]
add esp, 4
jmp 0x5dbc26
push eax
mov dword [esp], 0x14007674
mov dword [esp], ebx
push eax
push 0x33b991c
mov dword [esp], ecx
mov dword [esp], esi
mov esi, 0x7df6e246
jmp 0x5dbd19
push esi
mov esi, 4
add edx, esi
pop esi
jmp 0x5dbcb9
pop edx
pop dword [esp]
mov esp, dword [esp]
sub ebx, 0x7df6e246
mov esi, ebx
jmp 0x5dbe33
pop ebx
push esi
jmp 0x5dbe3a
mov eax, dword [esp]
add esp, 4
jmp 0x5dbe48
pop esi
push eax
mov dword [esp], 0x280de81d
mov dword [esp], eax
mov dword [esp], 0x7fb775d3
inc dword [esp]
sub esp, 4
mov dword [esp], eax
mov eax, 0xbceabfc3
add dword [esp + 4], eax
pop eax
mov dword [esp], ebx
push edi
push 0x67b607f3
pop edi
sub dword [esp + 4], edi
pop edi
mov ebx, dword [esp]
add esp, 4
sub esp, 4
mov dword [esp], edi
push ebx
jmp 0x5dbe92
mov ebx, 0x67d3d662
neg ebx
jmp 0x5dbc55
jmp 0x5dc25f
push ebx
jmp 0x5dc265
push esi
jmp 0x5dc360
or eax, 0x7fe3e321
shr eax, 5
add eax, 0xfc00400b
add ebx, eax
pop eax
xchg dword [esp], ebx
pop esp
push ebp
mov ebp, 0x63e51e1a
xor ebp, 0x6b3f1ce5
jmp 0x5dc290
push ecx
mov dword [esp], 0x61722403
jmp 0x5dc30a
mov ebx, 0x7fa7aabe
jmp 0x5dc2cd
sub eax, 4
xchg dword [esp], eax
pop esp
mov dword [esp], edi
mov edi, 4
add ebx, edi
pop edi
jmp 0x5dc2d4
pop ebp
jmp 0x5dc35b
push edx
mov dword [esp], ebx
jmp 0x5dc29d
or ecx, ebx
jmp 0x5dc330
sub ebx, 4
push ebx
push dword [esp + 4]
pop ebx
pop dword [esp]
mov esp, dword [esp]
mov dword [esp], eax
mov eax, esp
add eax, 4
push ecx
mov ecx, 4
add eax, ecx
pop ecx
push eax
push dword [esp + 4]
pop eax
pop dword [esp]
mov esp, dword [esp]
push esi
mov esi, esp
jmp 0x5dc39e
mov dword [esp], eax
mov eax, 0x5bb2f75e
not eax
shl eax, 6
sub eax, 0xd3731779
and ebp, eax
pop eax
add ebp, 0x7fda21c4
push ecx
mov ecx, 0x7ded02ea
jmp 0x5dc2c4
pop ebx
sub ecx, 0x7fe798f0
sub ecx, 0x7fef6a9b
push ebp
mov ebp, 0x7fe7588c
add ecx, ebp
pop ebp
jmp 0x5dc34b
sub ebp, ecx
pop ecx
xor ebp, 0xd11be12e
sub ebx, ebp
jmp 0x5dc2be
jmp 0x5dc3ed
mov esi, eax
mov ebx, esi
mov esi, dword [esp]
add esp, 4
push ecx
mov ecx, ebx
mov eax, ecx
jmp 0x5dc374
pop ecx
push dword [esp]
jmp 0x5dc37d
pop ebx
push ebx
jmp 0x5dc384
push esp
mov ebx, dword [esp]
add esp, 4
push ebp
mov dword [esp], eax
mov eax, esp
add eax, 4
jmp 0x5dc2a7
add esi, 4
sub esi, 4
xchg dword [esp], esi
jmp 0x5dc3b2
pop esp
mov dword [esp], ebx
add dword [esp], 0x59bfc3a2
mov ebx, dword [esp]
jmp 0x5dc3c5
push ebx
jmp 0x5dc3cb
mov ebx, esp
add ebx, 4
push esi
mov dword [esp], eax
push ebx
mov dword [esp], ecx
mov ecx, 0x7dcf5702
mov eax, 0x4196b03
xor eax, ecx
pop ecx
jmp 0x5dc26b
call 0x5dc3f2
push dword [esp]
mov eax, dword [esp]
push ecx
mov ecx, esp
add ecx, 4
jmp 0x5dc4cc
pop esp
push esi
jmp 0x5dc569
mov edi, 0x7ffb3729
jmp 0x5dc417
push esi
jmp 0x5dc448
shl edi, 2
shr edi, 7
add edi, 0x5c82f075
jmp 0x5dc490
pop eax
jmp 0x5dc460
xor esi, 0x77fb58e0
jmp 0x5dc49a
mov dword [esp], eax
push esp
jmp 0x5dc53f
mov esi, 0x36f59d8d
jmp 0x5dc434
sub eax, ebp
push dword [esp]
pop ebp
push ecx
push esp
pop ecx
jmp 0x5dc4ef
xchg edi, eax
inc edi
add edi, 0x5d891005
add ecx, edi
pop edi
push edx
jmp 0x5dc471
mov edx, 4
add ecx, edx
mov edx, dword [esp]
add esp, 4
xor ecx, dword [esp]
xor dword [esp], ecx
xor ecx, dword [esp]
pop esp
jmp 0x5dc58d
sub ecx, edi
pop edi
add ecx, edx
jmp 0x5dc4f8
add esi, 0x7f5f0deb
xchg esi, edi
inc edi
xchg esi, edi
and esi, 0x75afd246
sub esi, 0xc250396b
and edi, esi
mov esi, dword [esp]
add esp, 4
and edi, 0x5faf539b
xchg edi, eax
push eax
not dword [esp]
jmp 0x5dc42e
add ecx, 4
xchg dword [esp], ecx
pop esp
push ebx
mov dword [esp], eax
mov eax, esp
add eax, 4
sub eax, 4
xchg dword [esp], eax
pop esp
mov dword [esp], esi
jmp 0x5dc43f
push ecx
mov dword [esp], edi
jmp 0x5dc40d
add ecx, 0x5d179af1
pop edx
push eax
mov eax, 0x6ebf5f56
add eax, 0x1115fa7d
or ecx, eax
jmp 0x5dc511
pop eax
and ecx, 0x1fff64f4
push ebp
mov dword [esp], edx
mov edx, 0x1fd760f0
xor ecx, edx
pop edx
add eax, ecx
pop ecx
add eax, 4
push 0x65f2e8a1
mov dword [esp], eax
push dword [esp + 4]
pop eax
pop dword [esp]
jmp 0x5dc406
pop eax
push ecx
mov ecx, 0x1ff73575
push edx
push ebp
mov ebp, 0x31cf737f
mov edx, ebp
jmp 0x5dc554
pop ebp
push edi
mov edi, 0x3a7a2ec3
xor edi, 0x7edf7d23
shl edi, 2
jmp 0x5dc41d
mov dword [esp], 0x1c3a036c
mov dword [esp], ebp
sub esp, 4
mov dword [esp], esi
push ebx
mov ebx, 0x329
mov esi, ebx
pop ebx
mov ebp, esi
pop esi
jmp 0x5dc452
push 0x3bfbb8e3
jmp 0x5dc82e
push edi
jmp 0x5dc839
mov dword [esp], edx
jmp 0x5dc5e7
push eax
mov eax, 4
add edx, eax
pop eax
xor edx, dword [esp]
xor dword [esp], edx
xor edx, dword [esp]
mov esp, dword [esp]
push ecx
mov ecx, esp
add ecx, 4
sub ecx, 4
xchg dword [esp], ecx
pop esp
mov dword [esp], eax
mov dword [esp], ebx
push dword [esp]
pop ebx
push eax
jmp 0x5dc800
push dword [esp]
pop edx
push ecx
push ebp
mov ebp, esp
jmp 0x5dc787
mov edx, 0x490c3227
xor ebx, edx
pop edx
jmp 0x5dc613
inc ebx
sub esp, 4
mov dword [esp], edx
mov edx, 0x7b7f0685
add edx, 0x87a52ae3
xor ebx, edx
mov edx, dword [esp]
add esp, 4
jmp 0x5dc626
push 0
jmp 0x5dc64f
pop edi
xchg dword [esp], ecx
jmp 0x5dc6ae
add eax, ebx
pop ebx
xchg dword [esp], eax
mov esp, dword [esp]
push 0x35587737
mov dword [esp], ebx
jmp 0x5dc7ba
sub esp, 4
jmp 0x5dc6f7
sub esi, 0x67b3b3b1
jmp 0x5dc673
sub dword [esp], ebx
pop ebx
shr ebx, 6
jmp 0x5dc5f4
add esp, 4
xor esi, dword [esp]
xor dword [esp], esi
xor esi, dword [esp]
pop esp
mov dword [esp], eax
jmp 0x5dc742
sub esi, ebp
add esi, 0x67b3b3b1
mov ebp, dword [esp]
jmp 0x5dc65b
push ebx
mov ebx, 4
add dword [esp + 4], ebx
jmp 0x5dc75d
mov esp, dword [esp]
jmp 0x5dc845
mov ecx, dword [esp]
add esp, 4
sub esp, 4
jmp 0x5dc59d
pop esp
mov dword [esp], edi
jmp 0x5dc81f
mov dword [esp], edx
jmp 0x5dc5da
mov eax, dword [esp]
add esp, 4
push edx
mov dword [esp], 0x6fbfc947
neg dword [esp]
and dword [esp], 0x319e099f
shl dword [esp], 8
shr dword [esp], 5
sub dword [esp], 0x8df3c747
mov dword [esp], edx
push ecx
mov ecx, esp
add ecx, 4
jmp 0x5dc597
mov dword [esp], ecx
mov ecx, 0x6ff7802b
jmp 0x5dc818
add edx, 0x77e6a32b
xor edx, 0x7ff9c93d
or edx, 0x7f7f2065
push ebx
mov ebx, 0x77fecab2
and edx, ebx
pop ebx
sub edx, 0x77fe8a2e
add esi, edx
pop edx
push ecx
mov ecx, 4
add esi, ecx
pop ecx
xor esi, dword [esp]
xor dword [esp], esi
xor esi, dword [esp]
mov esp, dword [esp]
jmp 0x5dc772
mov dword [esp], ecx
push dword [esp]
pop ecx
push esi
mov esi, esp
push edx
mov edx, 0x5fbcd79f
xor edx, 0x3be96840
jmp 0x5dc704
pop ebx
mov edx, dword [esp]
add esp, 4
add edx, 4
jmp 0x5dc5a5
sub esp, 4
mov dword [esp], ecx
mov dword [esp], esi
mov dword [esp], 0xd524343
jmp 0x5dc6b7
add ebp, 4
sub ebp, 4
xchg dword [esp], ebp
pop esp
jmp 0x5dc799
mov dword [esp], esp
add dword [esp], 4
mov ecx, dword [esp]
add esp, 4
add ecx, 4
push ebp
push ecx
mov ecx, 0x1f3f622a
xchg ecx, eax
push eax
jmp 0x5dc7d3
mov dword [esp], esi
push esp
pop esi
add esi, 4
push esi
mov dword [esp], ebp
mov ebp, 4
jmp 0x5dc644
not dword [esp]
mov eax, dword [esp]
add esp, 4
xchg ecx, eax
inc ecx
xor ecx, 0xe0c09dd2
mov ebp, ecx
mov ecx, dword [esp]
add esp, 4
add ecx, ebp
pop ebp
push ecx
push dword [esp + 4]
pop ecx
pop dword [esp]
jmp 0x5dc692
push esp
pop eax
add eax, 4
push ebx
mov ebx, 0x77f8770f
sub ebx, 0x3beedfda
jmp 0x5dc63c
or ebx, ecx
jmp 0x5dc69a
mov dword [esp], 0x7b07cdf
mov dword [esp], esp
jmp 0x5dc683
mov dword [esp], eax
push dword [esp]
jmp 0x5dc6bf
mov edi, 4
sub ecx, edi
jmp 0x5dc61d
jmp 0x5dcbdb
sub esp, 4
mov dword [esp], edx
push eax
push dword [esp]
pop edx
jmp 0x5dcca6
sub dword [esp], 0x14b7a93a
shl dword [esp], 1
push edx
mov edx, 0xa5796d47
jmp 0x5dcc04
xor dword [esp + 4], edx
jmp 0x5dcc0d
pop edx
jmp 0x5dcc5a
add esp, 4
push ebx
jmp 0x5dcd3d
mov dword [esp], 0x7f59a6c0
mov dword [esp], edx
mov dword [esp], ebx
mov dword [esp], 0x7dfacc4d
jmp 0x5dcd62
add dword [esp], 0xbef3b64
jmp 0x5dcbee
push eax
mov eax, 0x5dccf93b
add dword [esp + 4], eax
pop eax
and dword [esp], 0x57f7fc02
jmp 0x5dcd56