Function at 0x5eff13
Capabilities:
Check for vm using instruction vpcext
Contain obfuscated stackstrings
Reference the vmware io port

Disassembly:
push dword [esp]
push dword [esp]
pop eax
add esp, 4
jmp 0x5e9434
mov edx, 4
add dword [esp + 4], 0x71bf1dec
add dword [esp + 4], edx
sub dword [esp + 4], 0x71bf1dec
jmp 0x5e9492
add eax, ecx
push dword [esp]
pop ecx
add esp, 4
add eax, 4
xor eax, dword [esp]
xor dword [esp], eax
xor eax, dword [esp]
jmp 0x5e9428
mov esp, dword [esp]
push ebp
push edx
mov edx, esp
jmp 0x5e9459
sub esp, 4
jmp 0x5e954a
mov ebp, ecx
push dword [esp]
pop ecx
add esp, 4
push ebx
mov ebx, 0x8040f292
push ebx
mov ebx, 0x3fedb06a
jmp 0x5e947f
push eax
mov eax, 0x7eff7b74
or eax, 0x7efb9dc1
xor eax, 0x5dddc954
shr eax, 3
add eax, 0xfb9bb930
add edx, eax
pop eax
sub edx, 4
jmp 0x5e94cb
sub ebp, 0x7efeba33
sub ebp, ebx
push eax
mov eax, 0x6f96ea48
jmp 0x5e94f6
pop edx
pop eax
sub esp, 4
mov dword [esp], ecx
push eax
mov dword [esp], 0x7f3c3101
xor dword [esp], 0x7f3c3105
mov ecx, dword [esp]
add esp, 4
jmp 0x5e9409
add eax, 0x7fffb665
push dword [esp]
pop ebp
add esp, 4
jmp 0x5e94f1
xchg dword [esp], edx
mov esp, dword [esp]
mov dword [esp], ecx
push 0x1f37834c
mov dword [esp], esi
mov dword [esp], 0x1fff912d
pop ecx
not ecx
sub ecx, 0x60415e09
jmp 0x5e943f
jmp 0x5e955c
push edi
mov edi, 0x196f0cc2
dec edi
shr edi, 6
jmp 0x5e9505
sub edi, 0x7b774d4b
sub edi, 0x4ef44e8
xor eax, edi
pop edi
inc eax
xor eax, 0x7ff5daaa
jmp 0x5e951f
xor eax, 0x1162a0d0
add ebp, eax
mov eax, dword [esp]
jmp 0x5e952e
add esp, 4
pop ebx
add ebp, ebx
add ebp, 0x3fedb06a
pop ebx
sub eax, 0x7fffb665
sub eax, ebp
jmp 0x5e94ba
mov dword [esp], eax
jmp 0x5e9552
push esi
mov dword [esp], esp
push edx
jmp 0x5e93eb
mov ecx, ebx
jmp 0x5ea663
push esi
push 0x2bf92b8
push esp
pop dword [esp]
add dword [esp], 4
pop dword [esp]
push eax
mov dword [esp], ebx
jmp 0x5ecaae
push eax
jmp 0x5edbb6
push 0x437307d1
mov dword [esp], ecx
push eax
mov eax, 0x7ede2a0e
mov ecx, eax
pop eax
jmp 0x5ed90b
mov eax, 0x57e18c82
sub dword [esp + 4], 0x5bf6b43d
sub dword [esp + 4], eax
jmp 0x5f0300
shl eax, 2
xor eax, 0xffebfff8
jmp 0x5edc49
mov dword [esp], ebx
pop edi
push dword [esp]
pop ebx
add esp, 4
push edi
sub dword [esp], 0x7bff479e
push dword [esp]
pop esi
jmp 0x5f0284
sub esp, 4
mov dword [esp], ecx
mov ecx, esp
add ecx, 4
add ecx, 4
xchg dword [esp], ecx
mov esp, dword [esp]
sub esp, 4
mov dword [esp], ebx
jmp 0x5eabfe
add esp, 4
push eax
mov eax, 0x5cddc047
jmp 0x5ec235
push esp
mov ebx, dword [esp]
jmp 0x5eab8d
sub ebx, ebp
add ebx, 0x6e9b92d1
mov ebp, dword [esp]
push ebp
mov ebp, esp
add ebp, 4
add ebp, 4
push edx
mov dword [esp], ebp
push dword [esp + 4]
jmp 0x5f02df
add esp, 4
jmp 0x5edad8
mov dword [esp], eax
xor dword [esp], 0x3fafed0e
pop eax
xor eax, 0x3fafed0e
push esi
push esp
mov esi, dword [esp]
push edx
mov edx, esp
add edx, 4
add edx, 4
xchg dword [esp], edx
pop esp
jmp 0x5f036d
pop edx
push esi
mov esi, 0x7fbd5900
xchg esi, eax
not eax
xchg esi, eax
xor esi, 0x8042a6fb
add edx, esi
jmp 0x5edc7d
sub eax, ebx
pop ebx
dec eax
inc eax
xor eax, 0xf7d53f9e
add ebx, 0x72f80680
add ebx, eax
sub ebx, 0x72f80680
jmp 0x5eec51
mov dword [esp], eax
push edx
mov dword [esp], 0x4d3064cb
mov dword [esp], esi
jmp 0x5ef866
mov eax, dword [esp]
push ecx
mov ecx, esp
add ecx, 4
sub esp, 4
mov dword [esp], edx
push eax
push ebp
mov ebp, 0x7fb2259a
jmp 0x5eb9b2
add ecx, 4
xchg dword [esp], ecx
pop esp
jmp 0x5f02ca
pop ebx
jmp 0x5ee6d8
xor ebx, eax
pop eax
mov edi, ebx
jmp 0x5ed220
mov dword [esp], edx
sub esp, 4
mov dword [esp], ecx
push esp
pop ecx
add ecx, 4
push eax
jmp 0x5eee4a
mov eax, ebp
pop ebp
add eax, 0x1786b9e1
inc eax
push edi
mov edi, 0x7b7b3861
and edi, 0x7ff60c52
xor edi, 0x4983a97
or eax, edi
pop edi
jmp 0x5ea8f9
pop ebx
pop dword [esp]
dec ebx
xchg dword [esp], ebx
sub dword [esp], 0xdff1faa7
xor dword [esp], 0x7f7d2c64
dec dword [esp]
add dword [esp], 0x77570f23
jmp 0x5ed2ff
sub esp, 4
jmp 0x5ed047
push esi
jmp 0x5ec52c
pop edi
push edx
mov edx, 4
add edi, edx
mov edx, dword [esp]
jmp 0x5ed3f4
add esi, 4
xchg dword [esp], esi
mov esp, dword [esp]
add eax, 0x65f96cbf
push esi
mov esi, esp
add esi, 4
sub esi, 4
push esi
jmp 0x5f0388
push edx
push ebx
mov dword [esp], esp
add dword [esp], 4
push dword [esp]
pop edx
add esp, 4
push ecx
mov ecx, 4
add edx, ecx
jmp 0x5efa67
mov eax, dword [esp]
add esp, 4
add ecx, edx
jmp 0x5ed444
push ebx
mov ebx, 0x6fa930a7
xor eax, ebx
pop ebx
push ebx
mov ebx, 0x3b9fb146
jmp 0x5eafd7
mov esi, 4
add edx, esi
push dword [esp]
pop esi
add esp, 4
xchg dword [esp], edx
mov esp, dword [esp]
pop eax
jmp 0x5ed70a
push 0x28161430
mov dword [esp], ecx
jmp 0x5ed156
push esp
jmp 0x5ef29c
mov dword [esp], eax
push edx
mov edx, 0x7dce1d33
xor dword [esp + 4], edx
mov edx, dword [esp]
jmp 0x5ec0e3
pop esp
cmp dword [ebp + 0x122d3bc7], 0
jne 0x5ecd45
cmp dword [ebp + 0x122d3c27], 0
je 0x5ecd54
push eax
mov eax, eax
mov eax, 0
call dword [ebp + 0x122d1cd0]
pop eax
cmp dword [ebp + 0x122d3c27], 0
je 0x5ecd6a
push eax
mov eax, 0
call dword [ebp + 0x122d29f6]
pop eax
sub esp, 4
jmp 0x5eb793
cmp dword [ebp + 0x122d3bc7], 0
jne 0x5ece50
cmp dword [ebp + 0x122d3c27], 0
je 0x5ece65
push eax
mov eax, eax
mov eax, 0x43d
mov dword [ebp + 0x122d1e6f], eax
call dword [ebp + 0x122d275e]
pop eax
push ebx
sub esp, 4
mov dword [esp], eax
sub esp, 4
mov dword [esp], ebp
mov ebp, 0x7cf79773
add dword [esp + 4], ebp
mov ebp, dword [esp]
add esp, 4
mov ebx, dword [esp]
add esp, 4
sub esp, 4
jmp 0x5efe6b
mov dword [esp], eax
jmp 0x5ea80a
mov esp, dword [esp]
sub esp, 4
mov dword [esp], ebp
jmp 0x5ef68f
mov ecx, 0x5dbe1c68
push edx
mov edx, 0x15312295
jmp 0x5ef425
add dword [esp + 4], edx
jmp 0x5f035b
pop esp
cmp dword [ebp + 0x122d3bc7], 0
jne 0x5ed1dc
cmp dword [ebp + 0x122d3c27], 0
je 0x5ed1ed
push eax
push ebx
mov eax, eax
mov eax, 0
call dword [ebp + 0x122d3679]
pop ebx
pop eax
push 0xa6a2af4
jmp 0x5eed93
mov ebx, dword [esp]
add esp, 4
sub dword [esp + 4], edi
jmp 0x5efbf8
add esi, 4
jmp 0x5f0353
sub dword [esp], 0x1ff60890
jmp 0x5f0332
push dword [esp + 4]
pop edx
pop dword [esp]
jmp 0x5ed1c9
push ecx
push esp
jmp 0x5ee8fb
mov edx, dword [esp]
add esp, 4
xor ecx, dword [esp]
jmp 0x5edd6d
push ecx
mov ecx, 0x7dce1d33
xor eax, ecx
pop ecx
cmp dword [ebp + 0x122d3bc7], 0
jne 0x5ed725
cmp dword [ebp + 0x122d3c27], 0
je 0x5ed734
push eax
mov eax, eax
mov eax, 0
call dword [ebp + 0x122d1e3d]
pop eax
push 0x7fea830a
mov dword [esp], ecx
push ebp
mov ebp, 0xc04d5ad
mov dword [esp + 4], ebp
pop ebp
mov dword [esp], eax
jmp 0x5ef61c
pop dword [esp]
pop esp
mov dword [esp], eax
push dword [esp]
mov eax, dword [esp]
jmp 0x5eab65
pop esi
jmp 0x5ed80f
sub ecx, 0x2339b07c
dec ecx
jmp 0x5eeef5
add ebx, 4
xchg dword [esp], ebx
mov esp, dword [esp]
cmp dword [ebp + 0x122d3bc7], 0
jne 0x5edaf3
cmp dword [ebp + 0x122d3c27], 0
je 0x5edb02
push eax
mov eax, eax
mov eax, 0
call dword [ebp + 0x122d1d65]
pop eax
sub esp, 4
mov dword [esp], eax
push esi
mov esi, 0x13dd0162
add dword [esp + 4], esi
pop esi
push dword [esp]
push dword [esp]
jmp 0x5eb1a2
mov eax, esp
add eax, 4
jmp 0x5ef354
push ecx
mov ecx, eax
mov edx, ecx
pop ecx
jmp 0x5ec1d6
mov esi, dword [esp]
add esp, 4
jmp 0x5edcb0
sub esp, 4
mov dword [esp], ebp
mov ebp, 4
sub edx, ebp
pop ebp
push 0x40ae9565
mov dword [esp], edx
jmp 0x5eff48
sub esi, edi
pop edi
xchg dword [esp], esi
mov esp, dword [esp]
mov dword [esp], edi
push esp
jmp 0x5ec08a
xor dword [esp], ecx
xor ecx, dword [esp]
pop esp
add esp, 4
push eax
mov eax, esp
push ebp
mov ebp, 4
add eax, ebp
jmp 0x5ede38
pop ebp
add eax, 4
xchg dword [esp], eax
pop esp
sub eax, 0x13dd0162
push edx
push edi
mov edi, 0x29b69159
mov dword [esp + 4], edi
pop edi
mov dword [esp], esi
jmp 0x5eed21
push dword [esp]
pop ebx
add esp, 4
jmp 0x5f02f3
or ecx, edx
pop edx
and ecx, 0x43df1b52
add ecx, 0x6f779dad
xor ecx, 0xec7ab6fd
mov ebx, 0xa0d10004
add ebx, ecx
pop ecx
jmp 0x5efc8e
pop ecx
add ecx, 4
add ecx, 4
xor ecx, dword [esp]
xor dword [esp], ecx
xor ecx, dword [esp]
mov esp, dword [esp]
add edi, 4
xor edi, dword [esp]
jmp 0x5ef1b5
add dword [esp + 8], ecx
jmp 0x5eff0f
xor ebx, 0x70662e26
push 0x54edd683
jmp 0x5eaa2f
mov eax, dword [esp]
jmp 0x5eae98
mov dword [esp], 0x501fe659
mov dword [esp], ecx
push edx
push eax
jmp 0x5ef318
mov dword [esp], eax
push dword [esp]
mov eax, dword [esp]
add esp, 4
push 0x16d05a43
mov dword [esp], esi
mov esi, esp
jmp 0x5ef04d
mov eax, 4
sub ecx, eax
pop eax
jmp 0x5ef86d
xor ecx, 0xb47dff3
xor ecx, 0x1dff36c5
jmp 0x5efc11
add esi, 4
push edi
mov edi, 4
jmp 0x5edd3a
xor dword [esp], edi
xor edi, dword [esp]
jmp 0x5ed127
pop esi
push ebx
mov dword [esp], ebp
push 0x5f49701a
pop ebp
push ebp
not dword [esp]
pop ebp
sub ebp, 1
xor ebp, 0xa0b68fe0
jmp 0x5f0092
add eax, 4
xchg dword [esp], eax
jmp 0x5ef399
pop esp
add ecx, 0x8901f358
add esi, 0x7def5ab2
sub esi, ecx
sub esi, 0x7def5ab2
mov ecx, dword [esp]
add esp, 4
push esi
jmp 0x5ef3c2
push dword [esp + 4]
pop esi
pop dword [esp]
pop esp
jmp 0x5ef7b3
push ebx
mov ebx, 0x6514f35b
add edx, ebx
jmp 0x5eb622
push edi
push esi
mov dword [esp], ebx
push 0x5fc7c8c1
pop ebx
shr ebx, 3
push eax
mov eax, 0x6e0195a7
jmp 0x5eb77f
mov dword [esp], 0x7577108a
add dword [esp], 0xffffffff
not dword [esp]
xor dword [esp], 0x9aef2896
jmp 0x5ecb61
mov dword [esp], eax
push dword [esp]
pop eax
push edx
push esp
pop edx
push ecx
jmp 0x5ef9b3
push edi
push ebx
jmp 0x5f026e
xchg dword [esp], ecx
mov esp, dword [esp]
mov dword [esp], esp
push edx
mov edx, 4
jmp 0x5ed174
mov ecx, 4
add edx, ecx
pop ecx
add edx, 4
push edx
jmp 0x5ed30b
pop ecx
jmp 0x5ebfbb
pop edi
push dword [esp]
pop eax
push esi
jmp 0x5ecac5
add ecx, 0x318de5e4
jmp 0x5ee976
sub dword [esp + 4], 0x7eaa768b
add dword [esp + 4], ebx
jmp 0x5ea7f4
mov dword [esp], ebp
mov ebp, 0x7cf79773
push esi
mov esi, 0x3dbb3a26
xchg esi, edx
not edx
xchg esi, edx
add esi, 0x5f7d956b
or esi, 0x2fbe6a44
push ebp
mov dword [esp], ebx
mov ebx, 0xc162e873
sub esi, ebx
pop ebx
sub ebx, esi
pop esi
jmp 0x5eac7b
pop ecx
mov ebx, dword [esp]
push ebp
mov ebp, esp
jmp 0x5eff6e
push dword [esp + 4]
jmp 0x5f0361
add ebp, 4
jmp 0x5eff9e
add ebp, 4
xchg dword [esp], ebp
pop esp
mov eax, dword [esp]
add esp, 4
mov dword [ebp + 0x12455bd6], eax
mov dword [ebp + 0x122d3611], 0
push edi
jmp 0x5eb189
add esi, ebp
pop ebp
jmp 0x5ec0b2
push 0x7f9cc2ac
pop ebx
jmp 0x5f0279
shr ebx, 3
shr ebx, 1
jmp 0x5eec41
add esp, 4
add esi, 0x7bff479e
pop edi
xor dword [esp + 4], esi
push dword [esp]
pop esi
add esp, 4
push dword [esp]
pop eax
push ecx
push esp
pop ecx
add ecx, 4
jmp 0x5eb490
xor eax, 0x779fe20c
jmp 0x5ece3e
pop ebp
pop dword [esp]
pop esp
mov eax, ebx
jmp 0x5edf35
push 0x3082298b
mov dword [esp], eax
jmp 0x5ebafe
add dword [esp + 4], 0x5bf6b43d
pop eax
push dword [esp]
mov eax, dword [esp]
add esp, 4
add esp, 4
push 0x142b7a7
mov dword [esp], ebp
push ebx
mov dword [esp], 0x5fefa43c
push ebx
push dword [esp + 4]
jmp 0x5eba5e
pop ebp
add eax, ebp
push dword [esp]
pop ebp
push esi
mov esi, esp
add esi, 4
jmp 0x5ed241
xchg dword [esp], esi
jmp 0x5ecd32
pop edx
jmp 0x5eaf6f
pop edx
pop dword [esp]
mov esp, dword [esp]
jmp 0x5eaea0
add esi, 4
push 0x1d60dba2
mov dword [esp], ecx
push 0x76fe0cac
mov ecx, dword [esp]
jmp 0x5ea67d
push dword [esp + 4]
jmp 0x5ed83a