Function at 0x5cf12e
Capabilities:
Check for vm using instruction vpcext
Contain obfuscated stackstrings
Reference the vmware io port

Disassembly:
push dword [esp]
pop eax
push edi
jmp 0x5ce725
add ecx, 0x759b6197
or ecx, 0x5dfd0d41
xor ecx, 0x7dae26d2
jmp 0x5ce61a
mov ecx, 0x7bdf6100
jmp 0x5ce791
mov eax, esp
add eax, 4
add eax, 4
xchg dword [esp], eax
pop esp
jmp 0x5ce7a8
xor ecx, 0xd5a49162
push ecx
pop edi
jmp 0x5ce647
add edi, 0x377bf68a
sub edi, eax
sub edi, 0x377bf68a
pop eax
push ebx
mov ebx, 0x6fff98fb
add ebx, 0xffceadf0
jmp 0x5ce74a
mov ecx, dword [esp]
jmp 0x5ce751
push dword [esp]
mov ecx, dword [esp]
jmp 0x5ce668
mov ecx, 0x76938fc2
dec ecx
shr ecx, 2
jmp 0x5ce5e6
add esp, 4
push eax
mov eax, esp
add eax, 4
add eax, 4
xchg dword [esp], eax
pop esp
xor edi, dword [esp]
xor dword [esp], edi
jmp 0x5ce687
xor edi, dword [esp]
pop esp
push edi
push ecx
jmp 0x5ce65a
mov ecx, dword [esp]
push edi
mov edi, esp
add edi, 4
push edx
mov edx, 4
jmp 0x5ce6e5
push eax
mov dword [esp], ecx
push edx
push ebx
jmp 0x5ce717
add edi, ebp
sub edi, 0x1ed766aa
pop ebp
add edi, 0x7f5a7796
jmp 0x5ce704
mov ebx, esp
add ebx, 4
add ebx, 4
xchg dword [esp], ebx
pop esp
add ebx, 0xa33490ba
jmp 0x5ce732
add edi, edx
pop edx
xchg dword [esp], edi
pop esp
xor edi, 0x7ff2d990
inc edi
add edi, 0x7ff9362a
push ebx
mov ebx, 0x62e0d336
jmp 0x5ce70c
pop ebx
sub eax, edi
jmp 0x5ce768
push eax
mov eax, 0x7f5a7796
jmp 0x5ce627
push 0x5ccb6f4a
mov ebx, dword [esp]
push ebx
jmp 0x5ce6c8
mov edi, esp
add edi, 4
jmp 0x5ce6a9
push ebx
pop edx
pop ebx
push esi
mov dword [esp], edi
mov edi, edx
push 0x698eb670
mov dword [esp], edi
pop ecx
pop edi
jmp 0x5ce798
sub edi, ebx
jmp 0x5ce771
add esp, 4
and edi, 0x6affbe72
sub esp, 4
mov dword [esp], ecx
jmp 0x5ce5fd
mov edi, dword [esp]
push eax
jmp 0x5ce607
pop ebx
add edi, ebx
push ebp
mov ebp, 0x7d7ffead
sub ebp, 0x765f0947
add ebp, 0x68ad5185
add edi, 0x1ed766aa
jmp 0x5ce6b4
and edi, ecx
jmp 0x5ce692
mov edx, dword [esp]
add esp, 4
add edi, ecx
jmp 0x5ce64f
sub esp, 4
mov dword [esp], eax
push esi
jmp 0x5ce9f2
pop edx
xchg dword [esp], ecx
mov esp, dword [esp]
add edx, 4
xor edx, dword [esp]
xor dword [esp], edx
xor edx, dword [esp]
mov esp, dword [esp]
jmp 0x5cea67
mov dword [esp], edx
mov edx, esp
add edx, 4
add edx, 4
xchg dword [esp], edx
mov esp, dword [esp]
push dword [esp]
jmp 0x5ce90d
push edi
mov edi, 0x3ad2d091
xor ecx, edi
pop edi
xor ecx, 0x25edd462
sub edx, 0x3f1f32b4
add edx, ecx
add edx, 0x3f1f32b4
jmp 0x5ce8f6
sub edi, 0x5f9d4ef5
sub edi, ebx
add edi, 0x5f9d4ef5
pop ebx
add edx, edi
mov edi, dword [esp]
push 0x3311ae41
jmp 0x5ce986
push edx
push dword [esp]
push dword [esp]
pop edx
add esp, 4
jmp 0x5ce886
add ebx, 0x2765819e
add edx, ebx
push dword [esp]
pop ebx
add esp, 4
push eax
mov dword [esp], edi
jmp 0x5ce932
add esp, 4
mov ecx, dword [esp]
add esp, 4
push ebx
jmp 0x5ce94e
xor eax, 0xfdfff709
xor edi, eax
pop eax
xor edi, 0x17eba303
xor eax, edi
mov edi, dword [esp]
jmp 0x5ce8a8
push edx
push 0x68f7eacd
mov dword [esp], esp
add dword [esp], 4
pop edx
push edi
mov edi, 0x7ffe55cd
or edi, 0x6fffe078
jmp 0x5ce943
add esp, 4
push ebp
push ebx
mov ebx, 0x7047b400
mov dword [esp + 4], ebx
jmp 0x5ce9c3
add edx, 0x33222912
add edx, 0xffc628b6
add ebx, edx
jmp 0x5ce9d9
mov ecx, dword [esp]
push ebx
mov dword [esp], 0x5e3f40b6
or dword [esp], 0x5fbfc953
add dword [esp], 0x6fff3a4a
xor dword [esp], 0xe2591bb9
mov dword [esp], edi
jmp 0x5ce7d5
pop ecx
add edx, 4
xchg dword [esp], edx
mov esp, dword [esp]
jmp 0x5ce831
sub esp, 4
jmp 0x5cea47
pop eax
add esp, 4
push edi
mov edi, 0x79c79996
or edi, 0x77ef46ec
push eax
mov eax, 0x75fb971b
push edi
mov edi, 0
sub edi, eax
xchg edi, eax
pop edi
jmp 0x5ce86e
mov edi, 4
add edx, edi
pop edi
xchg dword [esp], edx
pop esp
jmp 0x5ce905
push ebx
mov ebx, 0x7ffff5f9
jmp 0x5ce813
push esi
push 0x2ebbb0ae
pop esi
push ebx
mov ebx, 0x1500c43b
xor esi, ebx
pop ebx
mov ebx, esi
pop esi
xor ecx, ebx
mov ebx, dword [esp]
push 0x480d0161
mov dword [esp], edx
push esp
mov edx, dword [esp]
add esp, 4
push ecx
mov ecx, 0x7cfc13ed
shr ecx, 5
shl ecx, 3
jmp 0x5ce9e1
mov dword [esp], ecx
mov ecx, esp
jmp 0x5ce9bd
push ebx
mov ebx, 0x37bbd4ec
sub esp, 4
mov dword [esp], edx
push ecx
mov ecx, 0x4c7f062c
mov edx, ecx
pop ecx
add edx, 0x76bed9c0
push edx
xchg dword [esp], ebp
neg ebp
xchg dword [esp], ebp
pop edx
jmp 0x5ce8bb
push ebx
jmp 0x5cea14
pop ebx
mov dword [esp], ebx
push dword [esp]
push dword [esp]
pop ebx
add esp, 4
push edx
push esp
pop edx
jmp 0x5ce990
pop edx
neg ebx
jmp 0x5ce9e7
dec ecx
jmp 0x5ce7f1
sub ebx, 0x7fff3ad2
jmp 0x5ce844
mov dword [esp], 0x46597c31
mov dword [esp], esi
mov dword [esp], 0x24dd8d9e
mov dword [esp], ecx
mov ecx, 0x1fffe311
xor dword [esp + 4], ecx
jmp 0x5ce8ce
mov ebx, 0x5ff711ff
not ebx
xor ebx, 0xa008ee04
add ecx, 0x4bd5d531
add ecx, ebx
sub ecx, 0x4bd5d531
pop ebx
push edx
mov edx, 4
add ecx, edx
jmp 0x5ce7b7
mov eax, 0x3bbb7495
jmp 0x5cea5a
mov dword [esp], ecx
push edi
mov dword [esp], 0x42332f64
mov dword [esp], eax
jmp 0x5cea3d
xor dword [esp + 4], eax
push dword [esp]
pop eax
jmp 0x5ce85f
jmp 0x5cedbc
push 0x1e2fcc16
mov dword [esp], eax
jmp 0x5cedc9
push dword [esp]
mov eax, dword [esp]
push edi
jmp 0x5cee4a
push ecx
mov ecx, 0x7b3e9dce
shl ecx, 5
shr ecx, 4
push edx
mov edx, 0x69fe2f2e
shl edx, 4
not edx
inc edx
xor edx, 0x1ba378b4
or ecx, edx
pop edx
xor ecx, 0x148737
sub esi, ecx
jmp 0x5cef28
pop esi
jmp 0x5cef0f
xchg dword [esp], esi
pop esp
mov dword [esp], edi
push esi
push 0x7fd439df
mov esi, dword [esp]
add esp, 4
push esi
not dword [esp]
mov esi, dword [esp]
add esp, 4
jmp 0x5cee80
mov edx, 4
add edi, edx
pop edx
push eax
sub esp, 4
mov dword [esp], esi
jmp 0x5ceeaa
add esp, 4
push dword [esp]
jmp 0x5cee50
push esp
jmp 0x5cee99
pop esi
add esp, 4
mov ebx, dword [esp]
add esp, 4
push esi
mov esi, esp
push eax
jmp 0x5ceed0
pop esi
add edi, eax
pop eax
xor edi, dword [esp]
xor dword [esp], edi
xor edi, dword [esp]
pop esp
add esp, 4
push ebx
jmp 0x5cef30
not esi
add esi, 0x7bffcccb
sub esi, 0xa608f66d
mov edi, esi
pop esi
add ebx, edi
pop edi
jmp 0x5ceea5
pop edi
jmp 0x5cee9f
push edx
jmp 0x5cee2b
jmp 0x5cef64
push ebp
mov dword [esp], 0x3dffc6d2
dec dword [esp]
push edx
mov dword [esp], ecx
mov ecx, 0x7febd476
add dword [esp + 4], ecx
pop ecx
jmp 0x5ceeeb
mov edx, dword [esp]
jmp 0x5cee3f
mov eax, 4
add esi, eax
pop eax
push edi
mov edi, 4
sub esi, edi
mov edi, dword [esp]
add esp, 4
jmp 0x5cee09
xor dword [esp], 0x2fe77136
dec dword [esp]
jmp 0x5ceefa
push edi
mov edi, 0xedc46761
jmp 0x5cef05
xor dword [esp + 4], edi
pop edi
jmp 0x5cee03
sub esi, 0x5fbe148d
push edi
mov edi, 0x7fe198af
jmp 0x5cef20
or esi, edi
pop edi
jmp 0x5cedd5
pop ecx
mov eax, esi
jmp 0x5cee66
push edi
mov dword [esp], esi
mov esi, 0x55cb103d
sub dword [esp + 4], 0x47a73e83
sub dword [esp + 4], esi
push edx
mov edx, 0x47a73e83
add dword [esp + 8], 0x65ff0f32
add dword [esp + 8], edx
sub dword [esp + 8], 0x65ff0f32
jmp 0x5ceec8
call 0x5cef69
push dword [esp]
push dword [esp]
jmp 0x5cef74
push dword [esp]
pop eax
add esp, 4
push edx
mov edx, esp
add edx, 4
add edx, 4
xchg dword [esp], edx
pop esp
push ecx
mov ecx, esp
jmp 0x5cf002
pop dword [esp]
add dword [esp], 4
pop edx
jmp 0x5cefa3
add edx, 4
add edx, 4
push edx
mov dword [esp], 0x7a2f34a3
jmp 0x5cefdd
sub eax, edx
jmp 0x5cefc3
add eax, 0x7ec2472b
push ebx
push ebx
mov dword [esp], edx
push esi
mov esi, 0x6edf76d2
mov edx, 0x1034f9be
jmp 0x5cf0e3
mov dword [esp], ebp
jmp 0x5cf048
mov dword [esp], ecx
mov ecx, 0x2d9
mov edx, ecx
mov ecx, dword [esp]
add esp, 4
jmp 0x5cf00d
jmp 0x5cf0f9
add ecx, 4
jmp 0x5cf0ca
push ebx
mov ebx, 0x724abf2c
add ebx, 0x6e75b89a
shl ebx, 6
not ebx
push ebx
dec dword [esp]
pop ebx
jmp 0x5cf06b
sub edi, 0x181628eb
add eax, 0x5d7bb125
sub eax, edi
sub eax, 0x5d7bb125
mov edi, dword [esp]
add esp, 4
jmp 0x5cefbc
mov dword [esp], edx
push dword [esp + 4]
push dword [esp]
pop edx
add esp, 4
pop dword [esp]
mov esp, dword [esp]
sub esp, 4
mov dword [esp], edx
push eax
jmp 0x5cefe5
shr ebx, 2
xor ebx, 0x2d169842
add eax, ebx
mov ebx, dword [esp]
add esp, 4
push edi
mov edi, 0x3f5ac80d
jmp 0x5cf087
not edi
inc edi
xor edi, 0x567d47e5
jmp 0x5cf028
not ecx
and ecx, 0x6bef80f4
sub ecx, 0xa7681fae
xor edx, ecx
pop ecx
xor edx, 0xe44602cf
push edx
xor dword [esp], 0x7d7b1b66
pop ebx
xor ebx, 0x7d7b1b66
pop edx
sub eax, ebx
mov ebx, dword [esp]
add esp, 4
pop edx
jmp 0x5ceffd
sub ecx, 4
xchg dword [esp], ecx
pop esp
mov dword [esp], edx
sub esp, 4
push esp
jmp 0x5cef96
xor edx, esi
pop esi
and edx, 0x7fdc7800
neg edx
push ecx
mov ecx, 0x5cf7e037
jmp 0x5cf095
push eax
push 0x8eacb7a
mov dword [esp], eax
jmp 0x5cf165
push 0x63f0d4c9
mov dword [esp], eax
mov eax, ecx
push esi
mov esi, eax
push esi
add dword [esp], 0x6fee59a6
push dword [esp]
push dword [esp]
pop ecx
add esp, 4
push ebp
mov ebp, esp
push esi
mov esi, 4
add ebp, esi
pop esi
jmp 0x5cf16b
mov edi, 0x712f9912
shr edi, 2
jmp 0x5cf34d
mov dword [esp], ebp
mov ebp, esp
add ebp, 4
jmp 0x5cf32b
push edx
mov dword [esp], edi
jmp 0x5cf2af
push esp
jmp 0x5cf184
push edi
mov edi, 4
add ebp, 0x7f5dbc21
add ebp, edi
sub ebp, 0x7f5dbc21
jmp 0x5cf18a
pop eax
jmp 0x5cf1cc
mov edi, dword [esp]
add esp, 4
xor ebp, dword [esp]
xor dword [esp], ebp
xor ebp, dword [esp]
jmp 0x5cf1ad
pop ebp
sub eax, 4
push eax
jmp 0x5cf250
mov esp, dword [esp]
push eax
mov dword [esp], edi
jmp 0x5cf13f
mov eax, dword [esp]
add esp, 4
sub ebp, 0x5ff73069
add eax, ebp
jmp 0x5cf1a1
push ebp
push eax
push 0x6f178b96
pop eax
jmp 0x5cf233
xor dword [esp + 4], ebx
jmp 0x5cf20d
xor dword [esp + 4], ebp
mov ebp, dword [esp]
add esp, 4
mov eax, dword [esp]
push esi
push esp
pop esi
add esi, 4
jmp 0x5cf287
push dword [esp]
pop ebx
add esp, 4
mov ebx, dword [esp]
sub esp, 4
jmp 0x5cf25c
shl eax, 1
sub eax, 0x7e37e6bf
mov ebp, eax
jmp 0x5cf1b9
push dword [esp + 4]
mov eax, dword [esp]
jmp 0x5cf270
mov dword [esp], ebp
mov ebp, esp
add ebp, 4
add ebp, 4
push ebp
jmp 0x5cf299
add esp, 4
pop dword [esp]
pop esp
mov dword [esp], ebp
mov ebp, 0x7d63fbfe
jmp 0x5cf1f2
add esi, 4
xor esi, dword [esp]
xor dword [esp], esi
xor esi, dword [esp]
pop esp
jmp 0x5cf15c
push dword [esp + 4]
pop ebp
pop dword [esp]
mov esp, dword [esp]
xor ebx, 0x3f031537
jmp 0x5cf10c
mov edi, 0x7ef72281
push eax
push 0x1dbff219
pop eax
jmp 0x5cf2c0
add eax, 0x5fac628e
or edi, eax
pop eax
add edi, 0xfd648557
xor eax, edi
pop edi
push ecx
mov dword [esp], 0x350ef491
push eax
mov eax, 0x14badec1
add dword [esp + 4], eax
pop eax
neg dword [esp]
add dword [esp], 0x86f2a3c
shl dword [esp], 7
push ecx
mov ecx, 0x43ff56ba
jmp 0x5cf2fd
or ecx, 0x70f53aff
add ecx, 0x5c60f07c
add dword [esp + 4], ecx
mov ecx, dword [esp]
sub esp, 4
jmp 0x5cf14c
add ebp, 4
xchg dword [esp], ebp
pop esp
mov dword [esp], ebx
push ebx
push edx
push ebx
mov ebx, 0x3f031537
mov edx, ebx
pop ebx
mov ebx, edx
jmp 0x5cf347
pop edx
jmp 0x5cf1d9
push 0x3323ae91
mov dword [esp], edx
mov edx, 0x73a5bfe2
xor edi, edx
pop edx
sub ecx, edi
pop edi
pop esi
mov eax, dword [esp]
add esp, 4
push ebx
push 0x5bf3acf6
mov dword [esp], edx
mov dword [esp], ecx
mov dword [esp], edx
push dword [esp]
pop ebx
jmp 0x5cf242