Function at 0x5eb70e
Capabilities:
Check for vm using instruction vpcext
Contain obfuscated stackstrings
Reference the vmware io port

Disassembly:
mov eax, dword [esp]
push ecx
mov dword [esp], eax
push 0x25e1daca
push 0x1ffd98d5
mov dword [esp], esp
add dword [esp], 4
pop dword [esp]
push edx
mov edx, 4
jmp 0x5eb54b
dec ecx
not ecx
sub ecx, 0x7f7daff8
or ecx, 0x7dff4771
jmp 0x5eb649
push ebp
mov ebp, 4
sub eax, 0x6b27fcd6
jmp 0x5eb578
add eax, edi
sub eax, 0x7ffea700
push ecx
mov ecx, 0x2dff4c79
add ecx, 0x51ffd570
sub eax, ecx
pop ecx
mov edi, dword [esp]
jmp 0x5eb5cc
add ecx, 0x850318
jmp 0x5eb4fe
add dword [esp + 4], edx
pop edx
push dword [esp]
pop eax
jmp 0x5eb568
shr ecx, 4
inc ecx
add ecx, 0x3b7b2496
jmp 0x5eb540
add esp, 4
add eax, 4
jmp 0x5eb512
push esi
mov esi, 0x3dffc05a
push ecx
jmp 0x5eb584
mov ecx, 0x6f99071f
jmp 0x5eb5a9
dec ebp
push eax
mov eax, 0x7ffb2c00
xor ebp, eax
pop eax
add ebp, 0x35ef2a7e
sub ebp, 0xad2ed93d
jmp 0x5eb660
sub ecx, 0x3f9eada2
jmp 0x5eb559
sub esi, ecx
pop ecx
xor esi, 0xbff32d62
sub eax, esi
mov esi, dword [esp]
add esp, 4
add eax, ebp
jmp 0x5eb5f6
add esp, 4
sub eax, esi
sub eax, 0x7b7fda2c
pop esi
jmp 0x5eb6ba
mov edi, dword [esp]
add esp, 4
xor edi, 0x41e3562
mov ebp, edi
pop edi
shl ebp, 6
jmp 0x5eb58e
add eax, 0x75fbcf65
add eax, 0x6b27fcd6
pop ebp
jmp 0x5eb61f
or edi, 0x767ab0da
push ebp
jmp 0x5eb655
add edi, eax
mov eax, dword [esp]
add esp, 4
jmp 0x5eb67a
xor eax, dword [esp]
xor dword [esp], eax
xor eax, dword [esp]
mov esp, dword [esp]
push 0x7e94d6f4
mov dword [esp], esi
mov esi, 0x2e4
push edi
mov edi, 0x4fe605a2
sub edi, 0x5b872854
jmp 0x5eb606
dec ecx
sub ecx, 0xa08e99f
jmp 0x5eb5b4
push edi
push 0x73bb9b11
jmp 0x5eb5df
dec ebp
sub ebp, 0x9f53122e
sub edi, ebp
pop ebp
jmp 0x5eb66f
push eax
mov eax, 0xffffffff
jmp 0x5eb612
not edi
push ecx
mov ecx, 0x5cddfa0b
and ecx, 0x797d561e
sub ecx, 0x2f1e0701
neg ecx
xor ecx, 0x653f64ec
push edi
mov edi, 0xc1fea43c
sub ecx, edi
pop edi
xor edi, ecx
pop ecx
add eax, 0x7fff21e9
push esi
mov esi, 0x7ffea700
jmp 0x5eb6b2
add eax, esi
pop esi
jmp 0x5eb522
push eax
mov eax, esp
push edx
jmp 0x5eb774
or ebx, 0x36f79cc4
jmp 0x5eb6d9
pop ebx
xor edx, ecx
mov ecx, dword [esp]
jmp 0x5eb852
and ebx, 0x6afdb2a1
and ebx, 0x6f7ed052
xor ebx, 0x6a749004
mov esi, ebx
mov ebx, dword [esp]
jmp 0x5eb724
mov esp, dword [esp]
sub esp, 4
mov dword [esp], eax
push ebx
push edx
mov edx, 0x5ffb6352
sub dword [esp + 4], edx
pop edx
pop eax
push ebp
mov ebp, esp
jmp 0x5eb785
pop esi
xchg dword [esp], ebp
pop esp
mov dword [esp], ebx
push eax
jmp 0x5eb748
add esp, 4
sub eax, 0x4ef39c37
add eax, esi
jmp 0x5eb870
mov dword [esp], ecx
jmp 0x5eb868
add ecx, ebx
sub ecx, 0x7bf5f6eb
jmp 0x5eb6ce
mov dword [esp], 0x79bdbe44
inc dword [esp]
sub dword [esp], 0x19c25af3
mov ebx, dword [esp]
add esp, 4
sub eax, 0x1bf3ca52
push esi
mov esi, 0x6ffe19a8
add eax, esi
pop esi
add eax, ebx
jmp 0x5eb7c3
mov edx, 4
add eax, 0x7b5f4941
add eax, edx
jmp 0x5eb812
add ebp, 4
push esi
jmp 0x5eb820
mov dword [esp], edx
mov edx, 0x3bee17c9
mov ebx, edx
mov edx, dword [esp]
jmp 0x5eb7fe
mov ebx, dword [esp]
add esp, 4
push ebx
mov ebx, 4
sub eax, 0x39af8bb0
add eax, 0xf7faab3
sub eax, 0x6b63480e
jmp 0x5eb99f
sub eax, 0x6ffe19a8
push ebx
mov ebx, 0x1bf3ca52
add eax, ebx
jmp 0x5eb7ee
mov ebx, 0x22804a15
add ecx, 0x7bf5f6eb
jmp 0x5eb73b
mov dword [esp], ebx
push eax
jmp 0x5eb791
pop ebx
mov ebx, dword [esp]
add esp, 4
push edx
jmp 0x5eb87b
add esp, 4
xor dword [esp + 4], ebx
pop ebx
push dword [esp]
pop edx
jmp 0x5eb85d
sub eax, 0x7b5f4941
pop edx
sub esp, 4
jmp 0x5eb84a
mov esi, 0x53fb4898
sub esi, 0x5ffe6b8d
neg esi
sub esi, 0x4db43884
and esi, 0x6bffb716
xor esi, 0x3bff3ebc
xor esi, 0x11b19ca8
jmp 0x5eb998
mov dword [esp], edi
jmp 0x5eb88a
add esp, 4
jmp 0x5eb9d8
push eax
mov dword [esp], edi
mov edi, esp
jmp 0x5eb89d
mov dword [esp], eax
jmp 0x5eb8f1
push ecx
mov ecx, 0x4ef39c37
jmp 0x5eb915
mov dword [esp], eax
sub dword [esp], 0x26ff132e
jmp 0x5eb8ab
mov edi, 4
sub eax, edi
pop edi
xchg dword [esp], eax
mov esp, dword [esp]
jmp 0x5eb733
push esi
push ebx
mov ebx, 4
mov esi, ebx
jmp 0x5eb8b2
pop ebx
push eax
jmp 0x5eb985
pop ebx
add edi, esi
pop esi
push ecx
mov ecx, 4
add edi, ecx
mov ecx, dword [esp]
add esp, 4
xchg dword [esp], edi
mov esp, dword [esp]
push ecx
mov ecx, 0x734a8bb4
not ecx
sub ecx, 0x7ffe8d72
jmp 0x5eb8e0
inc ecx
shl ecx, 1
push 0x1889e895
mov dword [esp], ebx
jmp 0x5eb7d5
mov eax, dword [esp]
sub esp, 4
mov dword [esp], eax
jmp 0x5eb8ff
mov eax, esp
push esi
push ebx
mov ebx, 0x7dc38bb1
neg ebx
xor ebx, 0x6efffff5
jmp 0x5eb6c3
add eax, ecx
pop ecx
jmp 0x5eb91d
mov esi, dword [esp]
add esp, 4
add eax, 4
xor eax, dword [esp]
jmp 0x5eb92e
xor dword [esp], eax
xor eax, dword [esp]
jmp 0x5eb6f5
push ecx
push dword [esp]
push dword [esp]
mov ecx, dword [esp]
add esp, 4
add esp, 4
push ecx
sub esp, 4
mov dword [esp], ecx
push eax
push 0x1ef5d253
pop eax
dec eax
and eax, 0x7bfe537f
sub eax, 0xc8309821
mov ecx, eax
pop eax
mov dword [esp + 4], ecx
pop ecx
mov dword [esp], eax
push esp
pop eax
push ebx
mov ebx, 4
add eax, ebx
jmp 0x5eb7a3
mov eax, 0x26ff132e
add ebx, eax
pop eax
jmp 0x5eb992
pop eax
jmp 0x5eb939
sub ebp, esi
jmp 0x5eb716
add eax, ebx
jmp 0x5eb9a6
add eax, 0x6b63480e
sub eax, 0xf7faab3
add eax, 0x39af8bb0
jmp 0x5eb9ba
pop ebx
xor eax, dword [esp]
xor dword [esp], eax
xor eax, dword [esp]
jmp 0x5eb9c9
pop esp
jmp 0x5eb9cf
push edx
sub esp, 4
jmp 0x5eb7e5
jmp 0x5ebd35
push 0x17af52b1
mov dword [esp], eax
mov eax, dword [esp]
jmp 0x5ebd78
mov edi, 0x21c7673b
shl edi, 4
jmp 0x5ebe21
sub dword [esp + 8], ebp
pop ebp
pop eax
mov ebp, dword [esp]
jmp 0x5ebd8c
shl ebp, 3
shr ebp, 2
sub ebp, 0x7857147c
jmp 0x5ebd7e
add esi, edi
jmp 0x5ebe29
push esi
jmp 0x5ebdae
add ebp, 0xf44cd4ad
sub eax, ebp
pop ebp
jmp 0x5ebdd7
push edi
mov edi, esp
add edi, 4
add edi, 4
jmp 0x5ebdbf
push eax
mov eax, 0x795b35ad
sub esi, eax
pop eax
jmp 0x5ebd71
push 0x7308362f
mov dword [esp], esp
add dword [esp], 4
jmp 0x5ebddd
xchg dword [esp], edi
pop esp
add ebp, 0x1b6b517b
mov ebx, ebp
mov ebp, dword [esp]
add esp, 4
pop esi
jmp 0x5ebeb6
push esi
jmp 0x5ebe88
mov esi, dword [esp]
add esp, 4
push 0x31b0aaa9
mov dword [esp], ebx
mov ebx, 0x7ffe5f8b
xchg ebx, eax
dec eax
xchg ebx, eax
and ebx, 0x6edf5b13
add ebx, 0x9121a502
add esi, ebx
pop ebx
push edi
jmp 0x5ebd45
sub esp, 4
mov dword [esp], eax
mov eax, 0x7ee15df2
xor edi, eax
pop eax
sub edi, 0x79fcc11a
jmp 0x5ebda0
shr edi, 2
jmp 0x5ebe08
add esi, 0x795b35ad
mov edi, dword [esp]
add esp, 4
sub esp, 4
mov dword [esp], eax
mov dword [esp], esi
push dword [esp + 4]
pop esi
pop dword [esp]
mov esp, dword [esp]
push esi
mov esi, ebx
push ebp
push edx
push esp
pop edx
add edx, 4
sub edx, 4
xchg dword [esp], edx
mov esp, dword [esp]
mov dword [esp], esi
push eax
mov eax, 0x5bbf6ff1
xchg edx, eax
inc edx
xchg edx, eax
not eax
push 0x39de9800
mov dword [esp], ebp
mov ebp, 0x7d3fdae4
shr ebp, 6
jmp 0x5ebd60
push 0xad56032
pop esi
add esi, 0xec352043
add eax, esi
pop esi
push ecx
mov ecx, 0x6fb49900
add dword [esp + 8], ecx
jmp 0x5ebea6
pop ecx
sub dword [esp + 4], eax
push ebp
mov ebp, 0x6fb49900
jmp 0x5ebd52
call 0x5ebebb
push dword [esp]
mov eax, dword [esp]
push esi
mov dword [esp], ebx
sub esp, 4
mov dword [esp], edi
mov edi, esp
push ebx
jmp 0x5ebf41
add edx, 4
add edx, 4
jmp 0x5ebf24
pop edi
sub edi, 0x7fd9ade1
push edi
jmp 0x5ebfb1
mov eax, 0x1befc348
sub eax, 0x3f3fa3c6
inc eax
sub eax, 0xdcb01f7f
sub edi, eax
pop eax
xchg dword [esp], edi
mov esp, dword [esp]
mov dword [esp], esp
jmp 0x5ebf83
push ebp
mov dword [esp], edx
sub esp, 4
jmp 0x5ebfa0
xchg dword [esp], edx
pop esp
jmp 0x5ec02f
add esi, 4
add esi, 4
xchg dword [esp], esi
jmp 0x5ebf7b
mov ebx, 4
add edi, ebx
pop ebx
push eax
jmp 0x5ebef4
add esp, 4
push edx
mov edx, esp
jmp 0x5ebed6
add esi, 0x7dff7113
inc esi
sub esi, 0xc5eeffc0
add ebx, esi
mov esi, dword [esp]
add esp, 4
xchg dword [esp], ebx
pop esp
jmp 0x5ebfb7
mov esp, dword [esp]
jmp 0x5ebf15
push esi
mov esi, 4
add dword [esp + 4], esi
pop esi
pop ebx
add ebx, 4
push esi
mov esi, 0x47ef8eb0
jmp 0x5ebf5a
mov dword [esp], ebx
sub esp, 4
mov dword [esp], edi
jmp 0x5ebfe4
pop ebx
jmp 0x5ebfd2
push esi
jmp 0x5ebfbd
push ebx
mov dword [esp], esp
push edi
mov edi, 4
add dword [esp + 4], edi
pop edi
pop esi
jmp 0x5ebf2d
pop edi
mov edx, ebx
pop ebx
push edx
jmp 0x5ebff8
push dword [esp]
jmp 0x5ec027
push esi
mov dword [esp], 0x7f564656
add dword [esp], 0x836a3f
jmp 0x5ebee7
mov edx, 0x6e1b2816
add eax, edx
mov edx, dword [esp]
add esp, 4
sub eax, edx
push 0x34000bd4
mov dword [esp], edx
push 0x59c0140f
mov dword [esp], ebp
mov ebp, 0x6e1b2816
mov edx, ebp
pop ebp
sub eax, edx
pop edx
jmp 0x5ebfdc
mov edx, dword [esp]
jmp 0x5ebf4f
push eax
xor dword [esp], 0x4dfb6666
mov eax, dword [esp]
add esp, 4
sub esp, 4
mov dword [esp], edx
jmp 0x5ec120
add eax, ebx
jmp 0x5ec1dc
push ecx
jmp 0x5ec1ac
pop eax
xor eax, edx
pop edx
jmp 0x5ec23e
xor edx, 0x7ffa2eaa
push esi
mov dword [esp], 0x1652bed8
mov dword [esp], ecx
mov dword [esp], 0xe123af
jmp 0x5ec1f7
pop ebx
add ecx, 4
xchg dword [esp], ecx
pop esp
xor esi, 0x74dfc532
mov edi, dword [esp]
add esp, 4
sub esp, 4
mov dword [esp], edi
mov dword [esp], ebx
mov dword [esp], esi
pop ebx
mov esi, dword [esp]
jmp 0x5ec151
add esp, 4
jmp 0x5ec052
mov edx, 0x7e5d8b8a
push 0x37d4f65a
mov dword [esp], eax
mov eax, 0x59711496
or edx, eax
jmp 0x5ec24b
xor ebx, 0x59bd74e5
xor ebx, 0x7fbf33b0
dec ebx
sub ebx, 0xc91f5fbe
jmp 0x5ec04b
add esp, 4
push 0x23b0156d
jmp 0x5ec161
mov ecx, esp
push ebx
mov ebx, 0x3dfeec21
dec ebx
or ebx, 0x37d00d11
jmp 0x5ec295
pop ebx
add eax, 4
xchg dword [esp], eax
pop esp
dec edx
push eax
mov eax, 0x3ef72694
xor eax, 0x7e897b81
xor edx, eax
jmp 0x5ec058
mov dword [esp], eax
mov eax, 0x7fbb95c3
and eax, 0x7eff1762
jmp 0x5ec209
not eax
push eax
not dword [esp]
pop eax
neg eax
push ebx
mov ebx, 0x7fb7f253
shr ebx, 8
sub ebx, 0xca3a502e
sub eax, ebx
pop ebx
sub edx, eax
mov eax, dword [esp]
push eax
push esp
pop eax
push ebx
mov ebx, 0x7f9fe004
add ebx, 0x6f7d3891
inc ebx
jmp 0x5ec139
push eax
mov eax, esp
add eax, 4
jmp 0x5ec25d
pop eax
push ecx
mov dword [esp], edi
mov edi, 0x57ff0eda
sub edx, edi
pop edi
jmp 0x5ec0b7
sub eax, 4
xchg dword [esp], eax
pop esp
mov dword [esp], esi
push edi
mov edi, ebx
sub esp, 4
mov dword [esp], edx
mov dword [esp], edi
push 0x47bfb774
mov dword [esp], ecx
mov ecx, 0x74dfc532
xor dword [esp + 4], ecx
pop ecx
push dword [esp]
mov esi, dword [esp]
jmp 0x5ec118
or ebx, 0x7859a314
add ebx, 0x800010cf
add ecx, ebx
jmp 0x5ec0d4