Function at 0x5711c0
Capabilities:
Check os version
Get system information on windows

Disassembly:
push rbp
sub rsp, 0x190
mov rbp, rsp
mov qword [rbp + 0x28], rbp
cmp dword [0x005b5898], 0
je 0x5711e9
mov eax, dword [0x005b5898]
mov dword [rbp + 0x18c], eax
jmp 0x5716e2
mov dword [rbp + 0x18c], 0
nop
mov dword [rbp + 0x3c], 0x11c
lea rcx, [rbp + 0x3c]
call sub.kernel32.dll_GetVersionExW
test eax, eax
jne 0x571220
mov dword [rbp + 0x3c], 0x114
lea rcx, [rbp + 0x3c]
call sub.kernel32.dll_GetVersionExW
test eax, eax
je 0x5716d6
cmp dword [rbp + 0x4c], 2
jne 0x5716d6
lea rcx, [rbp + 0x158]
mov edx, 0x30
xor r8, r8
call fcn.0040a600
lea rcx, [0x00571720]
call sub.kernel32.dll_GetModuleHandleW_2
mov rcx, rax
lea rdx, [0x0057173a]
call fcn.00418c20
mov qword [rbp + 0x30], rax
cmp qword [rbp + 0x30], 0
je 0x571271
lea rcx, [rbp + 0x158]
call qword [rbp + 0x30]
jmp 0x57127d
lea rcx, [rbp + 0x158]
call sub.kernel32.dll_GetSystemInfo_1
cmp dword [rbp + 0x40], 5
jne 0x571292
cmp dword [rbp + 0x44], 1
jne 0x571292
cmp byte [rbp + 0x156], 1
je 0x5712a7
cmp dword [rbp + 0x40], 5
jne 0x5712fe
cmp dword [rbp + 0x44], 2
jne 0x5712fe
cmp byte [rbp + 0x156], 1
jne 0x5712fe
movzx rax, word [rbp + 0x158]
sub ax, 1
cmp ax, 0xffff
je 0x5712d1
sub ax, 5
test ax, ax
je 0x5712ef
sub ax, 3
test ax, ax
jne 0x5716c7
jmp 0x5712e0
mov dword [rbp + 0x18c], 1
jmp 0x5716c7
mov dword [rbp + 0x18c], 2
jmp 0x5716c7
mov dword [rbp + 0x18c], 4
jmp 0x5716c7
cmp dword [rbp + 0x40], 6
jne 0x57136a
cmp dword [rbp + 0x44], 0
jne 0x57136a
cmp byte [rbp + 0x156], 1
jne 0x57136a
movzx rax, word [rbp + 0x158]
sub ax, 1
cmp ax, 0xffff
je 0x57133d
sub ax, 5
test ax, ax
je 0x57135b
sub ax, 3
test ax, ax
jne 0x5716c7
jmp 0x57134c
mov dword [rbp + 0x18c], 8
jmp 0x5716c7
mov dword [rbp + 0x18c], 0x10
jmp 0x5716c7
mov dword [rbp + 0x18c], 0x20
jmp 0x5716c7
cmp dword [rbp + 0x40], 6
jne 0x5713d6
cmp dword [rbp + 0x44], 1
jne 0x5713d6
cmp byte [rbp + 0x156], 1
jne 0x5713d6
movzx rax, word [rbp + 0x158]
sub ax, 1
cmp ax, 0xffff
je 0x5713a9
sub ax, 5
test ax, ax
je 0x5713c7
sub ax, 3
test ax, ax
jne 0x5716c7
jmp 0x5713b8
mov dword [rbp + 0x18c], 0x40
jmp 0x5716c7
mov dword [rbp + 0x18c], 0x80
jmp 0x5716c7
mov dword [rbp + 0x18c], pe_nt_image_headers64
jmp 0x5716c7
cmp dword [rbp + 0x40], 6
jne 0x571442
cmp dword [rbp + 0x44], 2
jne 0x571442
cmp byte [rbp + 0x156], 1
jne 0x571442
movzx rax, word [rbp + 0x158]
sub ax, 1
cmp ax, 0xffff
je 0x571415
sub ax, 5
test ax, ax
je 0x571433
sub ax, 3
test ax, ax
jne 0x5716c7
jmp 0x571424
mov dword [rbp + 0x18c], 0x200
jmp 0x5716c7
mov dword [rbp + 0x18c], 0x400
jmp 0x5716c7
mov dword [rbp + 0x18c], 0x800
jmp 0x5716c7
cmp dword [rbp + 0x40], 6
jne 0x5714ae
cmp dword [rbp + 0x44], 3
jne 0x5714ae
cmp byte [rbp + 0x156], 1
jne 0x5714ae
movzx rax, word [rbp + 0x158]
sub ax, 1
cmp ax, 0xffff
je 0x571481
sub ax, 5
test ax, ax
je 0x57149f
sub ax, 3
test ax, ax
jne 0x5716c7
jmp 0x571490
mov dword [rbp + 0x18c], 0x200000
jmp 0x5716c7
mov dword [rbp + 0x18c], 0x400000
jmp 0x5716c7
mov dword [rbp + 0x18c], 0x800000
jmp 0x5716c7
cmp dword [rbp + 0x40], 6
jne 0x57151a
cmp dword [rbp + 0x44], 4
jne 0x57151a
cmp byte [rbp + 0x156], 1
jne 0x57151a
movzx rax, word [rbp + 0x158]
sub ax, 1
cmp ax, 0xffff
je 0x5714ed
sub ax, 5
test ax, ax
je 0x57150b
sub ax, 3
test ax, ax
jne 0x5716c7
jmp 0x5714fc
mov dword [rbp + 0x18c], 0x1000000
jmp 0x5716c7
mov dword [rbp + 0x18c], 0x2000000
jmp 0x5716c7
mov dword [rbp + 0x18c], 0x4000000
jmp 0x5716c7
cmp dword [rbp + 0x40], 0xa
jne 0x571586
cmp dword [rbp + 0x44], 0
jne 0x571586
cmp byte [rbp + 0x156], 1
jne 0x571586
movzx rax, word [rbp + 0x158]
sub ax, 1
cmp ax, 0xffff
je 0x571559
sub ax, 5
test ax, ax
je 0x571577
sub ax, 3
test ax, ax
jne 0x5716c7
jmp 0x571568
mov dword [rbp + 0x18c], 0x1000000
jmp 0x5716c7
mov dword [rbp + 0x18c], 0x2000000
jmp 0x5716c7
mov dword [rbp + 0x18c], 0x4000000
jmp 0x5716c7
cmp dword [rbp + 0x40], 5
jne 0x5715f2
cmp dword [rbp + 0x44], 2
jne 0x5715f2
cmp byte [rbp + 0x156], 1
je 0x5715f2
movzx rax, word [rbp + 0x158]
sub ax, 1
cmp ax, 0xffff
je 0x5715c5
sub ax, 5
test ax, ax
je 0x5715e3
sub ax, 3
test ax, ax
jne 0x5716c7
jmp 0x5715d4
mov dword [rbp + 0x18c], 0x1000
jmp 0x5716c7
mov dword [rbp + 0x18c], 0x2000
jmp 0x5716c7
mov dword [rbp + 0x18c], 0x4000
jmp 0x5716c7
cmp dword [rbp + 0x40], 6
jne 0x571607
cmp dword [rbp + 0x44], 0
jne 0x571607
cmp byte [rbp + 0x156], 1
jne 0x57161c
cmp dword [rbp + 0x40], 6
jne 0x57166a
cmp dword [rbp + 0x44], 1
jne 0x57166a
cmp byte [rbp + 0x156], 1
je 0x57166a
movzx rax, word [rbp + 0x158]
sub ax, 1
cmp ax, 0xffff
je 0x571646
sub ax, 5
test ax, ax
je 0x57165e
sub ax, 3
test ax, ax
jne 0x5716c7
jmp 0x571652
mov dword [rbp + 0x18c], 0x8000
jmp 0x5716c7
mov dword [rbp + 0x18c], 0x10000
jmp 0x5716c7
mov dword [rbp + 0x18c], 0x20000
jmp 0x5716c7
cmp dword [rbp + 0x40], 6
jne 0x5716c7
cmp dword [rbp + 0x44], 2
jne 0x5716c7
cmp byte [rbp + 0x156], 1
je 0x5716c7
movzx rax, word [rbp + 0x158]
sub ax, 1
cmp ax, 0xffff
je 0x5716a5
sub ax, 5
test ax, ax
je 0x5716bd
sub ax, 3
test ax, ax
jne 0x5716c7
jmp 0x5716b1
mov dword [rbp + 0x18c], 0x40000
jmp 0x5716c7
mov dword [rbp + 0x18c], 0x80000
jmp 0x5716c7
mov dword [rbp + 0x18c], 0x100000
nop
mov eax, dword [rbp + 0x18c]
mov dword [0x005b5898], eax
jmp 0x5716e2
xor rcx, rcx
mov rdx, qword [rbp + 0x28]
call fcn.00571700
mov eax, dword [rbp + 0x18c]
lea rsp, [rbp + 0x190]
pop rbp
ret