Function at 0xca4f5f
Capabilities:
Check for vm using instruction vpcext
Contain obfuscated stackstrings
Reference the vmware io port

Disassembly:
push dword [esp]
pop eax
push 0x54b02c73
mov dword [esp], edx
mov edx, esp
push edi
jmp 0xca4243
push 0x3e3df800
pop edi
and edi, 0x67f3a38e
xchg edi, esi
xchg esi, edi
xor edi, eax
xor eax, edi
xor edi, eax
jmp 0xca426c
xor esi, edi
jmp 0xca4265
xor edi, esi
jmp 0xca4281
not eax
xchg edi, eax
xor esi, edi
jmp 0xca4276
xor edi, esi
xor esi, edi
xor edi, esi
jmp 0xca425e
and edi, 0x7ffadad0
xor edi, 0x59ca5ad4
sub edx, 0x7975adb0
push esi
mov esi, 0x7777f9f3
jmp 0xca429e
xor esi, 0x14dea521
add edx, esi
pop esi
add edx, edi
sub edx, 0x63a95cd2
add edx, 0x7975adb0
mov edi, dword [esp]
sub esp, 4
mov dword [esp], ebp
mov ebp, esp
add ebp, 4
add ebp, 4
jmp 0xca432d
add eax, edi
pop edi
mov ebx, dword [esp]
add esp, 4
jmp 0xca43ac
inc eax
not eax
xor eax, 0x89f782fb
add edx, eax
pop eax
xchg dword [esp], edx
mov esp, dword [esp]
push ebx
push edi
mov dword [esp], 0x53b32b7e
sub dword [esp], 0x19853cfb
mov dword [esp], ebp
push ebx
mov ebx, 0x3e1a3bc6
mov ebp, ebx
pop ebx
and ebp, 0x676fc6ff
dec ebp
push ecx
mov ecx, 0x1fdb7a69
add ecx, 0x373fb3af
sub ecx, 0x17698038
jmp 0xca4341
xchg dword [esp], ebp
pop esp
jmp 0xca4336
push eax
mov eax, 0x76087cff
jmp 0xca42e2
and ebp, ecx
pop ecx
dec ebp
xchg ebp, edi
not edi
xchg ebp, edi
sub esp, 4
mov dword [esp], ebp
mov dword [esp], 0x6424e07c
mov dword [esp], eax
mov eax, 0x656a01d0
shr eax, 8
and eax, 0x6775f1f9
jmp 0xca4370
xor eax, 0xd99a9c8b
sub ebp, eax
pop eax
push ebp
push ebx
mov ebx, 0x77dcbe9a
sub dword [esp + 4], ebx
push dword [esp]
pop ebx
add esp, 4
mov ebx, dword [esp]
add esp, 4
add ebx, 0x77dcbe9a
pop ebp
sub eax, 0x7fbfe5ba
sub eax, ebx
push edi
mov edi, 0x7fbfe5ba
jmp 0xca42d4
push ecx
mov dword [esp], 0x234541db
mov dword [esp], eax
sub dword [esp], 0x6fffaafe
jmp 0xca4535
xchg dword [esp], eax
mov esp, dword [esp]
jmp 0xca44e7
xor dword [esp + 4], ecx
pop ecx
mov dword [esp], ebx
push dword [esp]
mov ebx, dword [esp]
jmp 0xca4509
add ebx, ecx
jmp 0xca44a9
push edx
push esi
mov esi, 0x6eff7d7e
push esi
jmp 0xca4401
pop ebx
push ecx
mov ecx, 4
jmp 0xca4556
add dword [esp], 0x7ffbb745
jmp 0xca45d2
xor edi, eax
pop eax
push edi
sub dword [esp], 0x7e5f2961
pop esi
add esi, 0x7e5f2961
jmp 0xca44bd
push ebx
mov dword [esp], ecx
mov ecx, 4
add edx, 0x67d3671f
add edx, ecx
sub edx, 0x67d3671f
pop ecx
xor edx, dword [esp]
xor dword [esp], edx
xor edx, dword [esp]
pop esp
push eax
mov eax, esp
add eax, 4
push esi
jmp 0xca457c
mov ebx, 0x75bbdb89
not ebx
neg ebx
and ebx, 0x1fff0a72
push ecx
jmp 0xca45d8
pop ebx
xchg dword [esp], ebp
jmp 0xca45f7
push ebx
jmp 0xca43e8
pop ebp
xor dword [esp + 4], eax
pop eax
add dword [esp], 0xffffffff
push ebx
mov dword [esp], 0x1e2c07fc
mov dword [esp], edx
mov edx, 0x7e7fbda1
xor dword [esp + 4], edx
pop edx
shl dword [esp], 2
push ecx
mov ecx, 0xfc787dfd
jmp 0xca43ce
pop ecx
sub ebx, 0x5ee7b3d7
add ebx, 0x60b04ab4
add edx, ebx
jmp 0xca43f5
mov edi, dword [esp]
add esp, 4
dec esi
add esi, 0x67bb5533
sub esi, 0x7f5f662e
jmp 0xca45a5
pop ecx
shr ecx, 2
xor ecx, 0x6fb951c6
jmp 0xca44f8
mov dword [esp], edx
pop edx
jmp 0xca46c6
add edx, 4
jmp 0xca46b0
add eax, 0x37fff119
add eax, ecx
sub eax, 0x37fff119
jmp 0xca4589
push eax
mov eax, esp
add eax, 4
add eax, 4
xchg dword [esp], eax
jmp 0xca4686
sub ecx, 0xd4725e2e
shl ecx, 5
push edi
mov dword [esp], 0
sub dword [esp], ecx
jmp 0xca44d8
mov eax, dword [esp]
add esp, 4
sub esp, 4
mov dword [esp], ecx
mov ecx, 0x77991139
neg ecx
sub ecx, 0x73fd7000
jmp 0xca451c
sub edx, ecx
pop ecx
xchg dword [esp], edx
pop esp
mov dword [esp], ecx
push dword [esp]
jmp 0xca4568
pop ecx
push edx
push esp
mov edx, dword [esp]
add esp, 4
add edx, 4
jmp 0xca4424
push edi
mov edi, 0x7df10cc5
push eax
push ecx
jmp 0xca45b6
mov ecx, dword [esp]
push ebp
push esp
pop ebp
push ecx
mov ecx, 4
add ebp, ecx
mov ecx, dword [esp]
add esp, 4
push ebx
push ecx
push ebx
jmp 0xca4454
sub esi, 0x77b3fa4
sub eax, 0x79ff066b
push ebx
jmp 0xca45c3
mov ecx, 0x62ee5c61
mov eax, ecx
pop ecx
jmp 0xca440d
mov ebx, 0x7ff73149
sub eax, ebx
mov ebx, dword [esp]
jmp 0xca463a
pop edx
jmp 0xca4608
mov ecx, 0x6a405565
add ebx, ecx
pop ecx
mov ecx, ebx
mov ebx, dword [esp]
add esp, 4
mov ebx, 0x7ffb5f63
xor ebx, ecx
pop ecx
add ebp, ebx
jmp 0xca4469
pop esp
push ecx
mov dword [esp], 0x31bf674e
dec dword [esp]
jmp 0xca466c
sub edx, 0x7ffbb745
mov esi, dword [esp]
add esp, 4
and edx, 0x7eeb62d9
xor edx, 0x77ff2919
and edx, 0x7d1a796b
sub edx, 0x99cb37ff
mov ebx, edx
pop edx
push ecx
mov ecx, 0x7ef257e5
jmp 0xca43e1
add esp, 4
sub eax, esi
push ebp
mov ebp, 0x7ff73149
add eax, ebp
pop ebp
jmp 0xca4650
add eax, 0x79ff066b
push dword [esp]
pop esi
push edx
push esp
jmp 0xca4660
pop edx
add edx, 4
jmp 0xca44f0
sub dword [esp], 0xb47fad7c
sub esp, 4
mov dword [esp], eax
push ebp
mov ebp, 0x6ff42300
mov eax, ebp
jmp 0xca4478
pop esp
push ecx
push esp
pop ecx
jmp 0xca468f
add ecx, 4
jmp 0xca469a
add ecx, 4
xor ecx, dword [esp]
xor dword [esp], ecx
xor ecx, dword [esp]
pop esp
push edx
jmp 0xca46bf
push edx
push dword [esp + 4]
pop edx
pop dword [esp]
pop esp
jmp 0xca43c3
push esp
pop edx
jmp 0xca4472
jmp 0xca4a29
push eax
jmp 0xca4b18
pop eax
not eax
xchg edi, eax
push eax
mov dword [esp], ebx
mov ebx, 0x5effc069
add ebx, 0x21d718db
xor edi, ebx
pop ebx
add eax, 0x3df80bb
add eax, 0x14efb0bb
sub eax, 0x6eeef697
sub eax, edi
add eax, 0x6eeef697
sub eax, 0x14efb0bb
push edi
mov dword [esp], esi
mov esi, 0x3df80bb
sub eax, esi
pop esi
pop edi
push ebx
push edx
mov edx, esp
push edi
mov edi, 4
add edx, edi
pop edi
sub edx, 4
xchg dword [esp], edx
jmp 0xca4a85
mov esp, dword [esp]
mov dword [esp], edi
mov edi, 0x7f7ec56d
add dword [esp + 4], 0x7cfd1301
add dword [esp + 4], edi
sub dword [esp + 4], 0x7cfd1301
mov edi, dword [esp]
push eax
jmp 0xca4aad
mov eax, esp
add eax, 4
add eax, 4
xchg dword [esp], eax
pop esp
mov ebx, dword [esp]
add esp, 4
push ebp
push eax
mov eax, 0x2b3beb3a
sub esp, 4
jmp 0xca4ad2
mov dword [esp], ecx
mov ecx, 0x7df74f21
mov ebp, 0xd64b8b12
jmp 0xca4ae4
add ebp, ecx
pop ecx
sub ebp, 0x3efeeff6
add ebp, 0x3fffd017
sub ebp, 0x53f37ddb
add ebp, eax
add ebp, 0x53f37ddb
sub ebp, 0x3fffd017
push esi
mov esi, 0x3efeeff6
add ebp, esi
pop esi
pop eax
sub ebx, ebp
jmp 0xca4b86
push esi
push ecx
push ebx
push 0x5ed74481
pop ebx
and ebx, 0x2fffe08e
inc ebx
xor ebx, 0x7022aa5f
mov ecx, ebx
pop ebx
sub esp, 4
mov dword [esp], ecx
xor dword [esp], 0x6bae7893
jmp 0xca4b43
mov esi, dword [esp]
jmp 0xca4b4b
add esp, 4
xor esi, 0x6bae7893
mov ecx, dword [esp]
add esp, 4
add dword [esp + 4], 0x71ff342c
add dword [esp + 4], esi
jmp 0xca4b6e
push esi
mov esi, 0x71ff342c
sub dword [esp + 8], esi
pop esi
pop esi
pop eax
push edi
mov edi, 0x77331971
jmp 0xca4b8f
mov ebp, dword [esp]
push ebp
jmp 0xca4b9e
not edi
neg edi
shr edi, 6
push edi
push eax
pop edi
jmp 0xca4a2f
mov ebp, esp
jmp 0xca4ba5
add ebp, 4
add ebp, 4
xchg dword [esp], ebp
pop esp
jmp 0xca4bb7
call 0xca4bbc
push dword [esp]
mov eax, dword [esp]
push eax
push esp
jmp 0xca4d41
add edx, 0x59bda8c7
pop edi
push ebp
push eax
mov dword [esp], 1
pop ebp
sub edx, ebp
jmp 0xca4c1b
pop esp
sub esp, 4
mov dword [esp], edx
jmp 0xca4cc4
mov dword [esp], edx
push dword [esp + 4]
pop edx
pop dword [esp]
mov esp, dword [esp]
push edx
sub esp, 4
jmp 0xca4c98
inc esi
jmp 0xca4d04
sub edi, 4
jmp 0xca4c29
pop ebp
push eax
mov eax, 0x4ff6c033
xor edx, eax
jmp 0xca4c88
xchg dword [esp], edi
pop esp
jmp 0xca4d21
sub eax, edx
pop edx
jmp 0xca4d91
mov edi, eax
pop eax
sub edi, 0x3ff70e95
xor edi, 0x7dfd8be4
add edi, 0xb5651916
add edx, edi
pop edi
jmp 0xca4c8e
mov edx, ecx
jmp 0xca4d89
mov edx, 4
add eax, edx
pop edx
xchg dword [esp], eax
jmp 0xca4be1
not ecx
push 0x76e00d22
mov dword [esp], edx
mov edx, 0x75fc7cf1
add ecx, edx
pop edx
shl ecx, 5
jmp 0xca4cfd
pop eax
jmp 0xca4cb9
push 0x6bd3aa06
jmp 0xca4bf0
mov dword [esp], ecx
mov ecx, 0x5fee77ff
push esi
mov esi, 0x7fffa601
add ecx, 0x47c7fc42
add ecx, esi
sub ecx, 0x47c7fc42
jmp 0xca4cd2
add edx, 0x3f5338e8
jmp 0xca4c32
push edi
push esp
pop edi
add edi, 4
jmp 0xca4c10
push dword [esp]
pop esi
add esp, 4
jmp 0xca4c6e
add esp, 4
and edx, 0x77cf5a3d
push edi
mov edi, 0x7dd3fffb
sub edx, 0x59bda8c7
add edx, edi
jmp 0xca4bc9
xchg ecx, esi
jmp 0xca4c0a
xchg ecx, esi
push eax
mov eax, 0x6d99d371
push ecx
mov ecx, 0x4fdb0a98
or eax, ecx
jmp 0xca4d4d
xor ecx, eax
pop eax
jmp 0xca4c57
mov dword [esp], esp
add dword [esp], 4
mov edx, dword [esp]
add esp, 4
sub esp, 4
mov dword [esp], ebp
mov ebp, 4
jmp 0xca4d5b
pop eax
add eax, 4
push edx
jmp 0xca4c5e
pop ecx
shl eax, 7
shr eax, 5
neg eax
jmp 0xca4d7f
add edx, ebp
pop ebp
jmp 0xca4d63
push edi
push eax
mov eax, 0x3fff024f
sub eax, 0x6537f9b7
shr eax, 7
shl eax, 4
sub eax, 0xa3fa6571
jmp 0xca4c3a
xor eax, 0x20fdc527
jmp 0xca4d19
mov ecx, dword [esp]
jmp 0xca4cde
push esi
mov esi, esp
jmp 0xca4da5
pop ebp
add esp, 4
xchg dword [esp], eax
jmp 0xca4f08
add esi, 4
sub esi, 4
xchg dword [esp], esi
pop esp
mov dword [esp], edx
mov dword [esp], ecx
push 0x664daee5
jmp 0xca4df5
push esi
jmp 0xca4ddc
mov esi, 0x7dfc579a
sub ebx, 0x5b7597de
sub ebx, esi
push edx
mov edx, 0x647e8c5a
dec edx
jmp 0xca4e6e
mov dword [esp], eax
add dword [esp], 0x2ed7d2c5
jmp 0xca4e04
pop ecx
sub ecx, 0x2ed7d2c5
push ebx
mov ebx, ecx
mov eax, ebx
push dword [esp]
jmp 0xca4e66
mov ebx, esp
add ebx, 4
add ebx, 4
jmp 0xca4e4e
push ecx
jmp 0xca4f2a
xchg dword [esp], ebx
mov esp, dword [esp]
jmp 0xca4dc5
sub eax, 0x72ffae6f
push dword [esp]
jmp 0xca4d99
push dword [esp]
jmp 0xca4ebd
add edx, 0xf6f70b85
add ebx, edx
pop edx
pop esi
sub esp, 4
mov dword [esp], edx
mov dword [esp], 0x1bf52109
jmp 0xca4f17
pop eax
add eax, 4
push ebp
mov ebp, 4
jmp 0xca4ed4
pop esp
mov ebx, dword [esp]
push ebx
jmp 0xca4e18
pop ebx
add esp, 4
jmp 0xca4ec6
add esp, 4
push dword [esp]
pop ecx
push eax
push esp
jmp 0xca4e8a
add eax, 0x72ffae6f
jmp 0xca4ede
add eax, 0x3fdfa6e6
add eax, ebp
jmp 0xca4ef8
sub eax, 0x3fdfa6e6
jmp 0xca4e59
pop esp
sub esp, 4
mov dword [esp], ebx
jmp 0xca4e2b
add dword [esp], 0x338410fa
mov dword [esp], esi
push ecx
mov esi, dword [esp]
jmp 0xca4e31
mov dword [esp], 0x5620c177
mov dword [esp], ecx
mov dword [esp], ebx
mov ebx, 0x7dfc579a
push ebp
mov ebp, 0x6fff6b0f
add dword [esp + 8], 0x7ff762a2
jmp 0xca4f6d
add dword [esp + 8], edx
pop edx
add dword [esp + 4], 0x6fff6b0f
mov ebx, dword [esp]
push ebp
mov ebp, esp
add ebp, 4
jmp 0xca4fbd
sub dword [esp + 8], ebp
sub dword [esp + 8], 0x7ff762a2
mov ebp, dword [esp]
add esp, 4
jmp 0xca4fa1
sub dword [esp + 4], 0x75fdc2ed
add dword [esp + 4], ebx
jmp 0xca4fb2
push edx
mov edx, 0x75fdc2ed
jmp 0xca4f4f
add ebp, 4
xchg dword [esp], ebp
jmp 0xca4eb3