Function at 0x566b10
Capabilities:
Check os version
Get system information on windows

Disassembly:
push rbp
sub rsp, 0x190
mov rbp, rsp
mov qword [rbp + 0x28], rbp
cmp dword [0x005b4dac], 0
je 0x566b39
mov eax, dword [0x005b4dac]
mov dword [rbp + 0x18c], eax
jmp 0x567032
mov dword [rbp + 0x18c], 0
nop
mov dword [rbp + 0x3c], 0x11c
lea rcx, [rbp + 0x3c]
call sub.kernel32.dll_GetVersionExW
test eax, eax
jne 0x566b70
mov dword [rbp + 0x3c], 0x114
lea rcx, [rbp + 0x3c]
call sub.kernel32.dll_GetVersionExW
test eax, eax
je 0x567026
cmp dword [rbp + 0x4c], 2
jne 0x567026
lea rcx, [rbp + 0x158]
mov edx, 0x30
xor r8, r8
call fcn.0040a600
lea rcx, [0x00567070]
call sub.kernel32.dll_GetModuleHandleW_2
mov rcx, rax
lea rdx, [0x0056708a]
call fcn.00418c20
mov qword [rbp + 0x30], rax
cmp qword [rbp + 0x30], 0
je 0x566bc1
lea rcx, [rbp + 0x158]
call qword [rbp + 0x30]
jmp 0x566bcd
lea rcx, [rbp + 0x158]
call sub.kernel32.dll_GetSystemInfo_1
cmp dword [rbp + 0x40], 5
jne 0x566be2
cmp dword [rbp + 0x44], 1
jne 0x566be2
cmp byte [rbp + 0x156], 1
je 0x566bf7
cmp dword [rbp + 0x40], 5
jne 0x566c4e
cmp dword [rbp + 0x44], 2
jne 0x566c4e
cmp byte [rbp + 0x156], 1
jne 0x566c4e
movzx rax, word [rbp + 0x158]
sub ax, 1
cmp ax, 0xffff
je 0x566c21
sub ax, 5
test ax, ax
je 0x566c3f
sub ax, 3
test ax, ax
jne 0x567017
jmp 0x566c30
mov dword [rbp + 0x18c], 1
jmp 0x567017
mov dword [rbp + 0x18c], 2
jmp 0x567017
mov dword [rbp + 0x18c], 4
jmp 0x567017
cmp dword [rbp + 0x40], 6
jne 0x566cba
cmp dword [rbp + 0x44], 0
jne 0x566cba
cmp byte [rbp + 0x156], 1
jne 0x566cba
movzx rax, word [rbp + 0x158]
sub ax, 1
cmp ax, 0xffff
je 0x566c8d
sub ax, 5
test ax, ax
je 0x566cab
sub ax, 3
test ax, ax
jne 0x567017
jmp 0x566c9c
mov dword [rbp + 0x18c], 8
jmp 0x567017
mov dword [rbp + 0x18c], 0x10
jmp 0x567017
mov dword [rbp + 0x18c], 0x20
jmp 0x567017
cmp dword [rbp + 0x40], 6
jne 0x566d26
cmp dword [rbp + 0x44], 1
jne 0x566d26
cmp byte [rbp + 0x156], 1
jne 0x566d26
movzx rax, word [rbp + 0x158]
sub ax, 1
cmp ax, 0xffff
je 0x566cf9
sub ax, 5
test ax, ax
je 0x566d17
sub ax, 3
test ax, ax
jne 0x567017
jmp 0x566d08
mov dword [rbp + 0x18c], 0x40
jmp 0x567017
mov dword [rbp + 0x18c], 0x80
jmp 0x567017
mov dword [rbp + 0x18c], pe_nt_image_headers64
jmp 0x567017
cmp dword [rbp + 0x40], 6
jne 0x566d92
cmp dword [rbp + 0x44], 2
jne 0x566d92
cmp byte [rbp + 0x156], 1
jne 0x566d92
movzx rax, word [rbp + 0x158]
sub ax, 1
cmp ax, 0xffff
je 0x566d65
sub ax, 5
test ax, ax
je 0x566d83
sub ax, 3
test ax, ax
jne 0x567017
jmp 0x566d74
mov dword [rbp + 0x18c], 0x200
jmp 0x567017
mov dword [rbp + 0x18c], 0x400
jmp 0x567017
mov dword [rbp + 0x18c], 0x800
jmp 0x567017
cmp dword [rbp + 0x40], 6
jne 0x566dfe
cmp dword [rbp + 0x44], 3
jne 0x566dfe
cmp byte [rbp + 0x156], 1
jne 0x566dfe
movzx rax, word [rbp + 0x158]
sub ax, 1
cmp ax, 0xffff
je 0x566dd1
sub ax, 5
test ax, ax
je 0x566def
sub ax, 3
test ax, ax
jne 0x567017
jmp 0x566de0
mov dword [rbp + 0x18c], 0x200000
jmp 0x567017
mov dword [rbp + 0x18c], 0x400000
jmp 0x567017
mov dword [rbp + 0x18c], 0x800000
jmp 0x567017
cmp dword [rbp + 0x40], 6
jne 0x566e6a
cmp dword [rbp + 0x44], 4
jne 0x566e6a
cmp byte [rbp + 0x156], 1
jne 0x566e6a
movzx rax, word [rbp + 0x158]
sub ax, 1
cmp ax, 0xffff
je 0x566e3d
sub ax, 5
test ax, ax
je 0x566e5b
sub ax, 3
test ax, ax
jne 0x567017
jmp 0x566e4c
mov dword [rbp + 0x18c], 0x1000000
jmp 0x567017
mov dword [rbp + 0x18c], 0x2000000
jmp 0x567017
mov dword [rbp + 0x18c], 0x4000000
jmp 0x567017
cmp dword [rbp + 0x40], 0xa
jne 0x566ed6
cmp dword [rbp + 0x44], 0
jne 0x566ed6
cmp byte [rbp + 0x156], 1
jne 0x566ed6
movzx rax, word [rbp + 0x158]
sub ax, 1
cmp ax, 0xffff
je 0x566ea9
sub ax, 5
test ax, ax
je 0x566ec7
sub ax, 3
test ax, ax
jne 0x567017
jmp 0x566eb8
mov dword [rbp + 0x18c], 0x1000000
jmp 0x567017
mov dword [rbp + 0x18c], 0x2000000
jmp 0x567017
mov dword [rbp + 0x18c], 0x4000000
jmp 0x567017
cmp dword [rbp + 0x40], 5
jne 0x566f42
cmp dword [rbp + 0x44], 2
jne 0x566f42
cmp byte [rbp + 0x156], 1
je 0x566f42
movzx rax, word [rbp + 0x158]
sub ax, 1
cmp ax, 0xffff
je 0x566f15
sub ax, 5
test ax, ax
je 0x566f33
sub ax, 3
test ax, ax
jne 0x567017
jmp 0x566f24
mov dword [rbp + 0x18c], 0x1000
jmp 0x567017
mov dword [rbp + 0x18c], 0x2000
jmp 0x567017
mov dword [rbp + 0x18c], 0x4000
jmp 0x567017
cmp dword [rbp + 0x40], 6
jne 0x566f57
cmp dword [rbp + 0x44], 0
jne 0x566f57
cmp byte [rbp + 0x156], 1
jne 0x566f6c
cmp dword [rbp + 0x40], 6
jne 0x566fba
cmp dword [rbp + 0x44], 1
jne 0x566fba
cmp byte [rbp + 0x156], 1
je 0x566fba
movzx rax, word [rbp + 0x158]
sub ax, 1
cmp ax, 0xffff
je 0x566f96
sub ax, 5
test ax, ax
je 0x566fae
sub ax, 3
test ax, ax
jne 0x567017
jmp 0x566fa2
mov dword [rbp + 0x18c], 0x8000
jmp 0x567017
mov dword [rbp + 0x18c], 0x10000
jmp 0x567017
mov dword [rbp + 0x18c], 0x20000
jmp 0x567017
cmp dword [rbp + 0x40], 6
jne 0x567017
cmp dword [rbp + 0x44], 2
jne 0x567017
cmp byte [rbp + 0x156], 1
je 0x567017
movzx rax, word [rbp + 0x158]
sub ax, 1
cmp ax, 0xffff
je 0x566ff5
sub ax, 5
test ax, ax
je 0x56700d
sub ax, 3
test ax, ax
jne 0x567017
jmp 0x567001
mov dword [rbp + 0x18c], 0x40000
jmp 0x567017
mov dword [rbp + 0x18c], 0x80000
jmp 0x567017
mov dword [rbp + 0x18c], 0x100000
nop
mov eax, dword [rbp + 0x18c]
mov dword [0x005b4dac], eax
jmp 0x567032
xor rcx, rcx
mov rdx, qword [rbp + 0x28]
call fcn.00567050
mov eax, dword [rbp + 0x18c]
lea rsp, [rbp + 0x190]
pop rbp
ret