Function at 0x45d4f0
Capabilities:
Check os version
Contain obfuscated stackstrings
Get number of processors
Resolve function by parsing pe exports

Disassembly:
push 0xffffffffffffffff
push 0x4a25e6
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
sub esp, 0xc0
push ebx
push ebp
push esi
push edi
mov dword [esp + 0x44], ecx
mov eax, dword [0x4cc854]
xor ebp, ebp
mov dword [esp + 0xd8], ebp
mov dword [esp + 0x10], eax
mov dword [esp + 0x34], eax
xor esi, esi
mov dword [esp + 0x28], ebp
mov dword [esp + 0x2c], esi
mov dword [esp + 0x30], ebp
mov dword [esp + 0xcc], eax
mov dword [esp + 0x18], eax
mov dword [esp + 0x1c], eax
lea eax, [esp + 0x24]
push 1
push eax
lea ecx, [esp + 0xe8]
mov byte [esp + 0xe0], 5
call fcn.0048a360
mov eax, dword [eax]
push 0x4c3018
push eax
call fcn.0047514f
add esp, 8
lea ecx, [esp + 0x24]
test eax, eax
setne bl
call fcn.0048c403
test bl, bl
je 0x45d594
push 0x4c3018
lea ecx, [esp + 0xe4]
call fcn.0048c7df
mov ecx, dword [0x4cc854]
mov dword [esp + 0x14], ecx
mov bl, 6
push 0x4c3018
lea ecx, [esp + 0xe4]
mov byte [esp + 0xdc], bl
call fcn.0048a476
mov edi, dword [esp + 0xe4]
cmp eax, 0xffffffff
je 0x45e0dc
jmp 0x45d5ce
mov esi, dword [esp + 0x2c]
push 0x4c3018
lea ecx, [esp + 0xe4]
call fcn.0048a476
lea edx, [esp + 0x70]
push eax
push edx
lea ecx, [esp + 0xe8]
call fcn.0048a3dc
push eax
lea ecx, [esp + 0x14]
mov byte [esp + 0xdc], 7
call fcn.0048c53c
lea ecx, [esp + 0x70]
mov byte [esp + 0xd8], bl
call fcn.0048c403
push str._______
lea ecx, [esp + 0x14]
call fcn.0048a476
cmp eax, 0xffffffff
je 0x45d63d
inc esi
push 0x4d0e20
lea ecx, [esp + 0x18]
mov dword [esp + 0x30], esi
mov dword [esp + 0x2c], ebp
call fcn.0048c58c
cmp esi, 1
jne 0x45d669
cmp dword [esp + 0x28], ebp
jne 0x45d671
push str.______
lea ecx, [esp + 0x14]
call fcn.0048a476
cmp eax, 0xffffffff
je 0x45d671
push str.qdzrsoftww
mov ecx, edi
call fcn.0048c7df
jmp 0x45d671
cmp esi, ebp
je 0x45dbde
push 0x4cb1a8
lea ecx, [esp + 0x14]
call fcn.0048a476
cmp eax, 0xffffffff
je 0x45dbde
push 0x4cb1a4
lea ecx, [esp + 0x14]
call fcn.0048a476
cmp eax, 0xffffffff
je 0x45dbde
mov eax, dword [esp + 0x28]
inc eax
mov dword [esp + 0x28], eax
push eax
lea eax, [esp + 0x1c]
push 0x4cb19c
push eax
call fcn.0048a7fc
mov ecx, dword [esp + 0x1c]
mov eax, dword [esp + 0x24]
add esp, 0xc
mov esi, dword [ecx - 8]
mov ebp, dword [eax - 8]
push eax
lea ecx, [esp + 0x14]
call fcn.0048a476
sub esi, ebp
lea edx, [esp + 0xbc]
sub esi, eax
lea ecx, [esp + 0x10]
push esi
push edx
call fcn.0048a360
push eax
lea ecx, [esp + 0x14]
mov byte [esp + 0xdc], 8
call fcn.0048c53c
lea ecx, [esp + 0xbc]
mov byte [esp + 0xd8], bl
call fcn.0048c403
mov esi, dword [esp + 0x28]
mov ecx, 5
mov eax, esi
cdq
idiv ecx
test edx, edx
je 0x45d8de
cmp esi, 0xa
push 0x4cb18c
lea ecx, [esp + 0x14]
jl 0x45d80a
call fcn.0048a476
cmp eax, 0xffffffff
je 0x45d7a5
lea edx, [esp + 0x18]
lea eax, [esp + 0x14]
push edx
lea ecx, [esp + 0x4c]
push eax
push ecx
call fcn.0048c632
push 0x4cb184
lea edx, [esp + 0xc8]
push eax
push edx
mov byte [esp + 0xe4], 9
call fcn.0048c698
push eax
lea ecx, [esp + 0x18]
mov byte [esp + 0xdc], 0xa
call fcn.0048c53c
lea ecx, [esp + 0xc4]
mov byte [esp + 0xd8], 9
call fcn.0048c403
mov byte [esp + 0xd8], bl
lea ecx, [esp + 0x48]
jmp 0x45da96
lea eax, [esp + 0x18]
lea ecx, [esp + 0x14]
push eax
lea edx, [esp + 0x54]
push ecx
push edx
call fcn.0048c632
push 0x4cb17c
push eax
lea eax, [esp + 0xd0]
mov byte [esp + 0xe0], 0xb
push eax
call fcn.0048c698
push eax
lea ecx, [esp + 0x18]
mov byte [esp + 0xdc], 0xc
call fcn.0048c53c
lea ecx, [esp + 0xc8]
mov byte [esp + 0xd8], 0xb
call fcn.0048c403
mov byte [esp + 0xd8], bl
lea ecx, [esp + 0x50]
jmp 0x45da96
call fcn.0048a476
cmp eax, 0xffffffff
je 0x45d879
lea ecx, [esp + 0x18]
lea edx, [esp + 0x14]
push ecx
lea eax, [esp + 0x5c]
push edx
push eax
call fcn.0048c632
push 0x4cb170
lea ecx, [esp + 0x94]
push eax
push ecx
mov byte [esp + 0xe4], 0xd
call fcn.0048c698
push eax
lea ecx, [esp + 0x18]
mov byte [esp + 0xdc], 0xe
call fcn.0048c53c
lea ecx, [esp + 0x90]
mov byte [esp + 0xd8], 0xd
call fcn.0048c403
mov byte [esp + 0xd8], bl
lea ecx, [esp + 0x58]
jmp 0x45da96
lea edx, [esp + 0x18]
lea eax, [esp + 0x14]
push edx
lea ecx, [esp + 0x64]
push eax
push ecx
call fcn.0048c632
push 0x4cb164
lea edx, [esp + 0xb4]
push eax
push edx
mov byte [esp + 0xe4], 0xf
call fcn.0048c698
push eax
lea ecx, [esp + 0x18]
mov byte [esp + 0xdc], 0x10
call fcn.0048c53c
lea ecx, [esp + 0xb0]
mov byte [esp + 0xd8], 0xf
call fcn.0048c403
mov byte [esp + 0xd8], bl
lea ecx, [esp + 0x60]
jmp 0x45da96
cmp esi, 0xa
push 0x4cb18c
lea ecx, [esp + 0x14]
jl 0x45d9c4
call fcn.0048a476
cmp eax, 0xffffffff
je 0x45d95f
lea eax, [esp + 0x18]
lea ecx, [esp + 0x14]
push eax
lea edx, [esp + 0x6c]
push ecx
push edx
call fcn.0048c632
push 0x4cb15c
push eax
lea eax, [esp + 0xa0]
mov byte [esp + 0xe0], 0x11
push eax
call fcn.0048c698
push eax
lea ecx, [esp + 0x18]
mov byte [esp + 0xdc], 0x12
call fcn.0048c53c
lea ecx, [esp + 0x98]
mov byte [esp + 0xd8], 0x11
call fcn.0048c403
mov byte [esp + 0xd8], bl
lea ecx, [esp + 0x68]
jmp 0x45da96
lea ecx, [esp + 0x18]
lea edx, [esp + 0x14]
push ecx
lea eax, [esp + 0x44]
push edx
push eax
call fcn.0048c632
push 0x4cb154
lea ecx, [esp + 0xc4]
push eax
push ecx
mov byte [esp + 0xe4], 0x13
call fcn.0048c698
push eax
lea ecx, [esp + 0x18]
mov byte [esp + 0xdc], 0x14
call fcn.0048c53c
lea ecx, [esp + 0xc0]
mov byte [esp + 0xd8], 0x13
call fcn.0048c403
mov byte [esp + 0xd8], bl
lea ecx, [esp + 0x40]
jmp 0x45da96
call fcn.0048a476
cmp eax, 0xffffffff
je 0x45da30
lea edx, [esp + 0x18]
lea eax, [esp + 0x14]
push edx
lea ecx, [esp + 0x7c]
push eax
push ecx
call fcn.0048c632
push 0x4cb148
lea edx, [esp + 0xa4]
push eax
push edx
mov byte [esp + 0xe4], 0x15
call fcn.0048c698
push eax
lea ecx, [esp + 0x18]
mov byte [esp + 0xdc], 0x16
call fcn.0048c53c
lea ecx, [esp + 0xa0]
mov byte [esp + 0xd8], 0x15
call fcn.0048c403
mov byte [esp + 0xd8], bl
lea ecx, [esp + 0x78]
jmp 0x45da96
lea eax, [esp + 0x18]
lea ecx, [esp + 0x14]
push eax
lea edx, [esp + 0x84]
push ecx
push edx
call fcn.0048c632
push 0x4cb13c
push eax
lea eax, [esp + 0xc0]
mov byte [esp + 0xe0], 0x17
push eax
call fcn.0048c698
push eax
lea ecx, [esp + 0x18]
mov byte [esp + 0xdc], 0x18
call fcn.0048c53c
lea ecx, [esp + 0xb8]
mov byte [esp + 0xd8], 0x17
call fcn.0048c403
mov byte [esp + 0xd8], bl
lea ecx, [esp + 0x80]
call fcn.0048c403
lea ecx, [esp + 0x10]
lea edx, [esp + 0x88]
push ecx
push 0x4cb130
push edx
call fcn.0048c70c
push 0x4c3018
push eax
lea eax, [esp + 0xb0]
mov byte [esp + 0xe0], 0x19
push eax
call fcn.0048c698
push eax
lea ecx, [esp + 0x14]
mov byte [esp + 0xdc], 0x1a
call fcn.0048c53c
lea ecx, [esp + 0xa8]
mov byte [esp + 0xd8], 0x19
call fcn.0048c403
lea ecx, [esp + 0x88]
mov byte [esp + 0xd8], bl
call fcn.0048c403
push 0x64
call dword [sym.imp.KERNEL32.dll_Sleep]
mov edx, dword [esp + 0x2c]
mov eax, dword [esp + 0x44]
lea ecx, [esp + 0x34]
dec esi
push ecx
dec edx
push esi
push edx
lea ecx, [eax + 0xa44c]
call fcn.00402610
lea ecx, [esp + 0x18]
lea edx, [esp + 0x54]
push ecx
push edi
push edx
call fcn.0048c632
push str.zrsoft_r_n
push eax
lea eax, [esp + 0x54]
mov byte [esp + 0xe0], 0x1b
push eax
call fcn.0048c698
push eax
mov ecx, edi
mov byte [esp + 0xdc], 0x1c
call fcn.0048c53c
lea ecx, [esp + 0x4c]
mov byte [esp + 0xd8], 0x1b
call fcn.0048c403
lea ecx, [esp + 0x54]
mov byte [esp + 0xd8], bl
call fcn.0048c403
lea ecx, [esp + 0x34]
lea edx, [esp + 0x64]
push ecx
push edi
push edx
call fcn.0048c632
push str.rtfzrsoft_r_n
push eax
lea eax, [esp + 0x64]
mov byte [esp + 0xe0], 0x1d
push eax
call fcn.0048c698
push eax
mov ecx, edi
mov byte [esp + 0xdc], 0x1e
call fcn.0048c53c
mov byte [esp + 0xd8], 0x1d
lea ecx, [esp + 0x5c]
call fcn.0048c403
lea ecx, [esp + 0x64]
mov byte [esp + 0xd8], bl
call fcn.0048c403
xor ebp, ebp
push 0x4cb10c
lea ecx, [esp + 0x14]
call fcn.0048a476
cmp eax, 0xffffffff
je 0x45dc97
mov ecx, dword [0x4cc854]
mov dword [esp + 0x24], ecx
push 0x4cb10c
lea ecx, [esp + 0x14]
mov byte [esp + 0xdc], 0x1f
call fcn.0048a476
lea edx, [esp + 0x6c]
push eax
push edx
lea ecx, [esp + 0x18]
call fcn.0048a3dc
push eax
lea ecx, [esp + 0x28]
mov byte [esp + 0xdc], 0x20
call fcn.0048c53c
lea ecx, [esp + 0x6c]
mov byte [esp + 0xd8], 0x1f
call fcn.0048c403
lea eax, [esp + 0x24]
lea ecx, [esp + 0x1c]
push eax
lea edx, [esp + 0x78]
push ecx
push edx
call fcn.0048c632
push eax
lea ecx, [esp + 0x20]
mov byte [esp + 0xdc], 0x21
call fcn.0048c53c
lea ecx, [esp + 0x74]
mov byte [esp + 0xd8], 0x1f
call fcn.0048c403
mov eax, dword [esp + 0x30]
lea ecx, [esp + 0x24]
inc eax
mov byte [esp + 0xd8], bl
mov dword [esp + 0x30], eax
call fcn.0048c403
push 0x4cb108
lea ecx, [esp + 0x14]
call fcn.0048a476
cmp eax, 0xffffffff
je 0x45dd52
push 0x4cb0fc
lea ecx, [esp + 0x14]
call fcn.0048a476
cmp eax, 0xffffffff
je 0x45dd52
push 0x4cb0f0
lea ecx, [esp + 0x14]
call fcn.0048a476
cmp eax, 0xffffffff
je 0x45dd52
push 0x4cb0e4
lea ecx, [esp + 0x14]
call fcn.0048a476
cmp eax, 0xffffffff
je 0x45dd52
push 0x4cb0dc
lea ecx, [esp + 0x14]
call fcn.0048a476
cmp eax, 0xffffffff
je 0x45dd52
push 0x4cb0d4
lea ecx, [esp + 0x14]
call fcn.0048a476
cmp eax, 0xffffffff
je 0x45dd52
push 0x4cb0c8
lea ecx, [esp + 0x14]
call fcn.0048a476
cmp eax, 0xffffffff
je 0x45dd52
push 0x4cb0bc
lea ecx, [esp + 0x14]
call fcn.0048a476
cmp eax, 0xffffffff
je 0x45dd52
push 0x4cb0b4
lea ecx, [esp + 0x14]
call fcn.0048a476
cmp eax, 0xffffffff
je 0x45dd52
mov dword [esp + 0x2c], ebp
mov dword [esp + 0x28], ebp
cmp dword [esp + 0x30], ebp
jle 0x45ded7
push 0x4cb0ac
lea ecx, [esp + 0x14]
call fcn.0048a476
cmp eax, 0xffffffff
je 0x45ded7
lea eax, [esp + 0x10]
lea ecx, [esp + 0x20]
push eax
call fcn.0048c178
mov ecx, dword [esp + 0x20]
push 0x4cb0ac
mov byte [esp + 0xdc], 0x22
mov esi, dword [ecx - 8]
lea ecx, [esp + 0x24]
call fcn.0048a476
sub esi, eax
lea edx, [esp + 0x7c]
push esi
push edx
lea ecx, [esp + 0x28]
call fcn.0048a360
push eax
lea ecx, [esp + 0x24]
mov byte [esp + 0xdc], 0x23
call fcn.0048c53c
lea ecx, [esp + 0x7c]
mov byte [esp + 0xd8], 0x22
call fcn.0048c403
push 0x4cb0a8
lea ecx, [esp + 0x24]
call fcn.0048a476
push eax
lea eax, [esp + 0x88]
push eax
lea ecx, [esp + 0x28]
call fcn.0048a3dc
push eax
lea ecx, [esp + 0x24]
mov byte [esp + 0xdc], 0x24
call fcn.0048c53c
lea ecx, [esp + 0x84]
mov byte [esp + 0xd8], 0x22
call fcn.0048c403
push 0x4cb0a0
push 0x4cb098
lea ecx, [esp + 0x28]
call fcn.0048a144
lea ecx, [esp + 0x20]
lea edx, [esp + 0x1c]
push ecx
lea eax, [esp + 0x98]
push edx
push eax
call fcn.0048c632
push 0x4c3018
lea ecx, [esp + 0x90]
push eax
push ecx
mov byte [esp + 0xe4], 0x25
call fcn.0048c698
push eax
lea ecx, [esp + 0x20]
mov byte [esp + 0xdc], 0x26
call fcn.0048c53c
lea ecx, [esp + 0x8c]
mov byte [esp + 0xd8], 0x25
call fcn.0048c403
lea ecx, [esp + 0x94]
mov byte [esp + 0xd8], 0x22
call fcn.0048c403
push 0xa
lea ecx, [esp + 0x18]
call fcn.0048a454
cmp eax, 0xffffffff
je 0x45deb5
push 0x4c3018
lea ecx, [esp + 0x18]
call fcn.0048c7df
lea edx, [esp + 0x14]
lea ecx, [esp + 0x1c]
push edx
call fcn.0048c81b
lea ecx, [esp + 0x20]
mov dword [esp + 0x30], ebp
mov byte [esp + 0xd8], bl
call fcn.0048c403
push 0x4cb108
lea ecx, [esp + 0x14]
call fcn.0048a476
cmp eax, 0xffffffff
je 0x45e00e
push 0x4cb090
lea ecx, [esp + 0x14]
call fcn.0048a476
cmp eax, 0xffffffff
jne 0x45df18
push 0x4cb084
lea ecx, [esp + 0x14]
call fcn.0048a476
cmp eax, 0xffffffff
je 0x45e00e
mov eax, dword [0x4cc854]
mov dword [esp + 0x24], eax
push 0x4cb07c
lea ecx, [esp + 0x14]
mov byte [esp + 0xdc], 0x27
call fcn.0048a476
cmp eax, 0xffffffff
je 0x45df84
push 0x4cb07c
lea ecx, [esp + 0x14]
call fcn.0048a476
lea ecx, [esp + 0x9c]
push eax
push ecx
lea ecx, [esp + 0x18]
call fcn.0048a3dc
push eax
lea ecx, [esp + 0x28]
mov byte [esp + 0xdc], 0x28
call fcn.0048c53c
lea ecx, [esp + 0x9c]
mov byte [esp + 0xd8], 0x27
call fcn.0048c403
jmp 0x45df92
lea edx, [esp + 0x10]
lea ecx, [esp + 0x24]
push edx
call fcn.0048c53c
lea eax, [esp + 0x24]
lea ecx, [esp + 0x1c]
push eax
lea edx, [esp + 0xb0]
push ecx
push edx
call fcn.0048c632
push 0x4c3018
push eax
lea eax, [esp + 0xac]
mov byte [esp + 0xe0], 0x29
push eax
call fcn.0048c698
push eax
lea ecx, [esp + 0x20]
mov byte [esp + 0xdc], 0x2a
call fcn.0048c53c
lea ecx, [esp + 0xa4]
mov byte [esp + 0xd8], 0x29
call fcn.0048c403
lea ecx, [esp + 0xac]
mov byte [esp + 0xd8], 0x27
call fcn.0048c403
lea ecx, [esp + 0x24]
mov byte [esp + 0xd8], bl
call fcn.0048c403
lea ecx, [esp + 0x10]
lea edx, [esp + 0x3c]
push ecx
push edi
push edx
call fcn.0048c632
push str._nzrsoft_r_n
push eax
lea eax, [esp + 0xbc]
mov byte [esp + 0xe0], 0x2b
push eax
call fcn.0048c698
push eax
mov ecx, edi
mov byte [esp + 0xdc], 0x2c
call fcn.0048c53c
lea ecx, [esp + 0xb4]
mov byte [esp + 0xd8], 0x2b
call fcn.0048c403
lea ecx, [esp + 0x3c]
mov byte [esp + 0xd8], bl
call fcn.0048c403
mov ecx, dword [esp + 0xe0]
push 0x4c3018
mov esi, dword [ecx - 8]
lea ecx, [esp + 0xe4]
call fcn.0048a476
sub esi, eax
lea edx, [esp + 0x38]
dec esi
lea ecx, [esp + 0xe0]
push esi
push edx
call fcn.0048a360
push eax
lea ecx, [esp + 0xe4]
mov byte [esp + 0xdc], 0x2d
call fcn.0048c53c
lea ecx, [esp + 0x38]
mov byte [esp + 0xd8], bl
call fcn.0048c403
push 0x4c3018
lea ecx, [esp + 0xe4]
call fcn.0048a476
cmp eax, 0xffffffff
jne 0x45d5ca
lea eax, [esp + 0x1c]
lea ecx, [esp + 0x3c]
push eax
push 0x4cb024
push ecx
call fcn.0048c70c
push str._n_n
lea edx, [esp + 0x3c]
push eax
push edx
mov byte [esp + 0xe4], 0x2e
call fcn.0048c698
push eax
lea ecx, [esp + 0x20]
mov byte [esp + 0xdc], 0x2f
call fcn.0048c53c
lea ecx, [esp + 0x38]
mov byte [esp + 0xd8], 0x2e
call fcn.0048c403
lea ecx, [esp + 0x3c]
mov byte [esp + 0xd8], bl
call fcn.0048c403
push str.qdzrsoftww
mov ecx, edi
call fcn.0048a476
cmp eax, 0xffffffff
je 0x45e15d
mov eax, dword [esp + 0x1c]
mov ecx, edi
push eax
push str.qdzrsoftww
call fcn.0048a144
lea ecx, [esp + 0x14]
mov byte [esp + 0xd8], 5
call fcn.0048c403
lea ecx, [esp + 0x1c]
mov byte [esp + 0xd8], 4
call fcn.0048c403
lea ecx, [esp + 0x18]
mov byte [esp + 0xd8], 3
call fcn.0048c403
lea ecx, [esp + 0xcc]
mov byte [esp + 0xd8], 2
call fcn.0048c403
lea ecx, [esp + 0x34]
mov byte [esp + 0xd8], 1
call fcn.0048c403
lea ecx, [esp + 0x10]
mov byte [esp + 0xd8], 0
call fcn.0048c403
lea ecx, [esp + 0xe0]
mov dword [esp + 0xd8], 0xffffffff
call fcn.0048c403
mov ecx, dword [esp + 0xd0]
pop edi
pop esi
pop ebp
pop ebx
mov dword fs:[0], ecx
add esp, 0xcc
ret 8