Function at 0x5711d0
Capabilities:
Check os version
Get system information on windows

Disassembly:
push rbp
sub rsp, 0x190
mov rbp, rsp
mov qword [rbp + 0x28], rbp
cmp dword [0x005b5898], 0
je 0x5711f9
mov eax, dword [0x005b5898]
mov dword [rbp + 0x18c], eax
jmp 0x5716f2
mov dword [rbp + 0x18c], 0
nop
mov dword [rbp + 0x3c], 0x11c
lea rcx, [rbp + 0x3c]
call sub.kernel32.dll_GetVersionExW
test eax, eax
jne 0x571230
mov dword [rbp + 0x3c], 0x114
lea rcx, [rbp + 0x3c]
call sub.kernel32.dll_GetVersionExW
test eax, eax
je 0x5716e6
cmp dword [rbp + 0x4c], 2
jne 0x5716e6
lea rcx, [rbp + 0x158]
mov edx, 0x30
xor r8, r8
call fcn.0040a600
lea rcx, [0x00571730]
call sub.kernel32.dll_GetModuleHandleW_2
mov rcx, rax
lea rdx, [0x0057174a]
call fcn.00418c20
mov qword [rbp + 0x30], rax
cmp qword [rbp + 0x30], 0
je 0x571281
lea rcx, [rbp + 0x158]
call qword [rbp + 0x30]
jmp 0x57128d
lea rcx, [rbp + 0x158]
call sub.kernel32.dll_GetSystemInfo_1
cmp dword [rbp + 0x40], 5
jne 0x5712a2
cmp dword [rbp + 0x44], 1
jne 0x5712a2
cmp byte [rbp + 0x156], 1
je 0x5712b7
cmp dword [rbp + 0x40], 5
jne 0x57130e
cmp dword [rbp + 0x44], 2
jne 0x57130e
cmp byte [rbp + 0x156], 1
jne 0x57130e
movzx rax, word [rbp + 0x158]
sub ax, 1
cmp ax, 0xffff
je 0x5712e1
sub ax, 5
test ax, ax
je 0x5712ff
sub ax, 3
test ax, ax
jne 0x5716d7
jmp 0x5712f0
mov dword [rbp + 0x18c], 1
jmp 0x5716d7
mov dword [rbp + 0x18c], 2
jmp 0x5716d7
mov dword [rbp + 0x18c], 4
jmp 0x5716d7
cmp dword [rbp + 0x40], 6
jne 0x57137a
cmp dword [rbp + 0x44], 0
jne 0x57137a
cmp byte [rbp + 0x156], 1
jne 0x57137a
movzx rax, word [rbp + 0x158]
sub ax, 1
cmp ax, 0xffff
je 0x57134d
sub ax, 5
test ax, ax
je 0x57136b
sub ax, 3
test ax, ax
jne 0x5716d7
jmp 0x57135c
mov dword [rbp + 0x18c], 8
jmp 0x5716d7
mov dword [rbp + 0x18c], 0x10
jmp 0x5716d7
mov dword [rbp + 0x18c], 0x20
jmp 0x5716d7
cmp dword [rbp + 0x40], 6
jne 0x5713e6
cmp dword [rbp + 0x44], 1
jne 0x5713e6
cmp byte [rbp + 0x156], 1
jne 0x5713e6
movzx rax, word [rbp + 0x158]
sub ax, 1
cmp ax, 0xffff
je 0x5713b9
sub ax, 5
test ax, ax
je 0x5713d7
sub ax, 3
test ax, ax
jne 0x5716d7
jmp 0x5713c8
mov dword [rbp + 0x18c], 0x40
jmp 0x5716d7
mov dword [rbp + 0x18c], 0x80
jmp 0x5716d7
mov dword [rbp + 0x18c], pe_nt_image_headers64
jmp 0x5716d7
cmp dword [rbp + 0x40], 6
jne 0x571452
cmp dword [rbp + 0x44], 2
jne 0x571452
cmp byte [rbp + 0x156], 1
jne 0x571452
movzx rax, word [rbp + 0x158]
sub ax, 1
cmp ax, 0xffff
je 0x571425
sub ax, 5
test ax, ax
je 0x571443
sub ax, 3
test ax, ax
jne 0x5716d7
jmp 0x571434
mov dword [rbp + 0x18c], 0x200
jmp 0x5716d7
mov dword [rbp + 0x18c], 0x400
jmp 0x5716d7
mov dword [rbp + 0x18c], 0x800
jmp 0x5716d7
cmp dword [rbp + 0x40], 6
jne 0x5714be
cmp dword [rbp + 0x44], 3
jne 0x5714be
cmp byte [rbp + 0x156], 1
jne 0x5714be
movzx rax, word [rbp + 0x158]
sub ax, 1
cmp ax, 0xffff
je 0x571491
sub ax, 5
test ax, ax
je 0x5714af
sub ax, 3
test ax, ax
jne 0x5716d7
jmp 0x5714a0
mov dword [rbp + 0x18c], 0x200000
jmp 0x5716d7
mov dword [rbp + 0x18c], 0x400000
jmp 0x5716d7
mov dword [rbp + 0x18c], 0x800000
jmp 0x5716d7
cmp dword [rbp + 0x40], 6
jne 0x57152a
cmp dword [rbp + 0x44], 4
jne 0x57152a
cmp byte [rbp + 0x156], 1
jne 0x57152a
movzx rax, word [rbp + 0x158]
sub ax, 1
cmp ax, 0xffff
je 0x5714fd
sub ax, 5
test ax, ax
je 0x57151b
sub ax, 3
test ax, ax
jne 0x5716d7
jmp 0x57150c
mov dword [rbp + 0x18c], 0x1000000
jmp 0x5716d7
mov dword [rbp + 0x18c], 0x2000000
jmp 0x5716d7
mov dword [rbp + 0x18c], 0x4000000
jmp 0x5716d7
cmp dword [rbp + 0x40], 0xa
jne 0x571596
cmp dword [rbp + 0x44], 0
jne 0x571596
cmp byte [rbp + 0x156], 1
jne 0x571596
movzx rax, word [rbp + 0x158]
sub ax, 1
cmp ax, 0xffff
je 0x571569
sub ax, 5
test ax, ax
je 0x571587
sub ax, 3
test ax, ax
jne 0x5716d7
jmp 0x571578
mov dword [rbp + 0x18c], 0x1000000
jmp 0x5716d7
mov dword [rbp + 0x18c], 0x2000000
jmp 0x5716d7
mov dword [rbp + 0x18c], 0x4000000
jmp 0x5716d7
cmp dword [rbp + 0x40], 5
jne 0x571602
cmp dword [rbp + 0x44], 2
jne 0x571602
cmp byte [rbp + 0x156], 1
je 0x571602
movzx rax, word [rbp + 0x158]
sub ax, 1
cmp ax, 0xffff
je 0x5715d5
sub ax, 5
test ax, ax
je 0x5715f3
sub ax, 3
test ax, ax
jne 0x5716d7
jmp 0x5715e4
mov dword [rbp + 0x18c], 0x1000
jmp 0x5716d7
mov dword [rbp + 0x18c], 0x2000
jmp 0x5716d7
mov dword [rbp + 0x18c], 0x4000
jmp 0x5716d7
cmp dword [rbp + 0x40], 6
jne 0x571617
cmp dword [rbp + 0x44], 0
jne 0x571617
cmp byte [rbp + 0x156], 1
jne 0x57162c
cmp dword [rbp + 0x40], 6
jne 0x57167a
cmp dword [rbp + 0x44], 1
jne 0x57167a
cmp byte [rbp + 0x156], 1
je 0x57167a
movzx rax, word [rbp + 0x158]
sub ax, 1
cmp ax, 0xffff
je 0x571656
sub ax, 5
test ax, ax
je 0x57166e
sub ax, 3
test ax, ax
jne 0x5716d7
jmp 0x571662
mov dword [rbp + 0x18c], 0x8000
jmp 0x5716d7
mov dword [rbp + 0x18c], 0x10000
jmp 0x5716d7
mov dword [rbp + 0x18c], 0x20000
jmp 0x5716d7
cmp dword [rbp + 0x40], 6
jne 0x5716d7
cmp dword [rbp + 0x44], 2
jne 0x5716d7
cmp byte [rbp + 0x156], 1
je 0x5716d7
movzx rax, word [rbp + 0x158]
sub ax, 1
cmp ax, 0xffff
je 0x5716b5
sub ax, 5
test ax, ax
je 0x5716cd
sub ax, 3
test ax, ax
jne 0x5716d7
jmp 0x5716c1
mov dword [rbp + 0x18c], 0x40000
jmp 0x5716d7
mov dword [rbp + 0x18c], 0x80000
jmp 0x5716d7
mov dword [rbp + 0x18c], 0x100000
nop
mov eax, dword [rbp + 0x18c]
mov dword [0x005b5898], eax
jmp 0x5716f2
xor rcx, rcx
mov rdx, qword [rbp + 0x28]
call fcn.00571710
mov eax, dword [rbp + 0x18c]
lea rsp, [rbp + 0x190]
pop rbp
ret