Function at 0x548da0
Capabilities:
Get system information on windows

Disassembly:
push rbp
sub rsp, 0x1a0
mov rbp, rsp
mov qword [rbp + 0x38], rcx
mov qword [rbp + 0x48], 0
mov qword [rbp + 0x40], 0
nop
mov rcx, qword [rbp + 0x38]
lea rdx, [0x00549104]
call fcn.00411290
lea rcx, [rbp + 0x50]
call sub.kernel32.dll_GetSystemInfo
mov dword [rbp + 0x84], 0x11c
lea rcx, [rbp + 0x84]
call sub.kernel32.dll_GetVersionExW
test eax, eax
je 0x54907d
mov eax, dword [rbp + 0x88]
sub eax, 5
test eax, eax
je 0x548e1f
sub eax, 1
test eax, eax
je 0x548ee5
sub eax, 4
test eax, eax
jne 0x549038
jmp 0x548fd4
mov eax, dword [rbp + 0x8c]
sub eax, 1
cmp eax, 0xffffffff
je 0x548e3a
test eax, eax
je 0x548e4f
sub eax, 1
test eax, eax
jne 0x548e88
jmp 0x548e64
mov rcx, qword [rbp + 0x38]
lea rdx, [0x00549118]
call fcn.00411290
jmp 0x549038
mov rcx, qword [rbp + 0x38]
lea rdx, [0x00549134]
call fcn.00411290
jmp 0x549038
cmp word [rbp + 0x19c], 0x8000
jne 0x549038
mov rcx, qword [rbp + 0x38]
lea rdx, [0x0054914c]
call fcn.00411290
jmp 0x549038
cmp byte [rbp + 0x19e], 1
jne 0x548ead
cmp word [rbp + 0x50], 9
jne 0x548ead
mov rcx, qword [rbp + 0x38]
lea rdx, [0x00549164]
call fcn.00411290
jmp 0x549038
mov ecx, 0x59
call sub.user32.dll_GetSystemMetrics
test eax, eax
je 0x548ed0
mov rcx, qword [rbp + 0x38]
lea rdx, [0x0054918c]
call fcn.00411290
jmp 0x549038
mov rcx, qword [rbp + 0x38]
lea rdx, [0x005491b0]
call fcn.00411290
jmp 0x549038
mov eax, dword [rbp + 0x8c]
sub eax, 1
cmp eax, 0xffffffff
je 0x548f0e
test eax, eax
je 0x548f41
sub eax, 1
test eax, eax
je 0x548f74
sub eax, 1
test eax, eax
jne 0x549038
jmp 0x548fa7
cmp byte [rbp + 0x19e], 1
jne 0x548f2c
mov rcx, qword [rbp + 0x38]
lea rdx, [0x005491d0]
call fcn.00411290
jmp 0x549038
mov rcx, qword [rbp + 0x38]
lea rdx, [0x005491ec]
call fcn.00411290
jmp 0x549038
cmp byte [rbp + 0x19e], 1
jne 0x548f5f
mov rcx, qword [rbp + 0x38]
lea rdx, [0x0054920c]
call fcn.00411290
jmp 0x549038
mov rcx, qword [rbp + 0x38]
lea rdx, [0x00549224]
call fcn.00411290
jmp 0x549038
cmp byte [rbp + 0x19e], 1
jne 0x548f92
mov rcx, qword [rbp + 0x38]
lea rdx, [0x00549248]
call fcn.00411290
jmp 0x549038
mov rcx, qword [rbp + 0x38]
lea rdx, [0x00549260]
call fcn.00411290
jmp 0x549038
cmp byte [rbp + 0x19e], 1
jne 0x548fc2
mov rcx, qword [rbp + 0x38]
lea rdx, [0x00549280]
call fcn.00411290
jmp 0x549038
mov rcx, qword [rbp + 0x38]
lea rdx, [0x00549298]
call fcn.00411290
jmp 0x549038
cmp dword [rbp + 0x90], 0x55f0
jae 0x54900d
cmp byte [rbp + 0x19e], 1
jne 0x548ffb
mov rcx, qword [rbp + 0x38]
lea rdx, [0x005492bc]
call fcn.00411290
jmp 0x549038
mov rcx, qword [rbp + 0x38]
lea rdx, [0x005492d4]
call fcn.00411290
jmp 0x549038
cmp byte [rbp + 0x19e], 1
jne 0x549028
mov rcx, qword [rbp + 0x38]
lea rdx, [0x005492fc]
call fcn.00411290
jmp 0x549038
mov rcx, qword [rbp + 0x38]
lea rdx, [0x00549314]
call fcn.00411290
lea rcx, [rbp + 0x48]
movzx edx, word [rbp + 0x198]
call fcn.00431320
lea rcx, [rbp + 0x40]
mov rdx, qword [rbp + 0x48]
xor r8, r8
call fcn.00411fc0
mov rcx, qword [rbp + 0x38]
mov edx, 3
mov rax, qword [rbp + 0x38]
mov r8, qword [rax]
lea r9, [0x00549334]
mov rax, qword [rbp + 0x40]
mov qword [rsp + 0x20], rax
call fcn.00411cb0
call fcn.00548ce0
test al, al
je 0x549098
mov rcx, qword [rbp + 0x38]
lea rdx, [0x00549344]
call fcn.004118e0
jmp 0x5490a8
mov rcx, qword [rbp + 0x38]
lea rdx, [0x00549358]
call fcn.004118e0
nop
lea rcx, [rbp + 0x40]
call fcn.00410b10
lea rcx, [rbp + 0x48]
call fcn.00410ac0
mov rax, qword [rbp + 0x38]
lea rsp, [rbp + 0x1a0]
pop rbp
ret