Function at 0x100b36a7
Capabilities:
Check os version

Disassembly:
mov edi, edi
push ebx
push esi
mov esi, ecx
mov ebx, 0x100772d8
push edi
test esi, esi
je 0x100d6057
xor edi, edi
cmp dword [0x101dcae0], edi
jne 0x100b36e2
push 0x101dcae0
mov dword [0x101dcae0], 0x11c
call dword [sym.imp.api_ms_win_core_sysinfo_l1_1_0.dll_GetVersionExW]
test eax, eax
je 0x100d606b
mov eax, dword [0x101dcae4]
cmp eax, 0xa
ja 0x100b3714
jne 0x100d60d4
mov eax, dword [0x101dcae8]
test eax, eax
jne 0x100b3714
cmp dword [0x101dcaf0], 2
jne 0x100d60c0
mov dword [esi], 0xc
mov eax, edi
pop edi
pop esi
pop ebx
ret
mov dword [esi], 0xd
jmp 0x100b370e
push 0x100772fc
push 0x18
pop edx
mov ecx, ebx
call fcn.100e970f
jmp 0x100b36bb
push 0x101dcae0
mov dword [0x101dcae0], 0x114
call dword [sym.imp.api_ms_win_core_sysinfo_l1_1_0.dll_GetVersionExW]
test eax, eax
jne 0x100b36e2
call dword [sym.imp.api_ms_win_core_errorhandling_l1_1_0.dll_GetLastError]
mov edi, eax
test edi, edi
jle 0x100d609f
movzx edi, di
or edi, 0x80070000
test edi, edi
js 0x100d60a6
mov edi, 0x80004005
push 0x10077340
push 1
push edi
push 0x4000000
call fcn.100ab973
add esp, 0x10
jmp 0x100b370e
push 0x10077308
push 0x36
pop edx
mov ecx, ebx
call fcn.100e970f
jmp 0x100b3708
cmp eax, 6
jne 0x100d6165
mov eax, dword [0x101dcae8]
push 2
pop ebx
cmp eax, ebx
jb 0x100d610e
cmp dword [0x101dcaf0], ebx
je 0x100d6103
push 0x10077308
push 0x3c
pop edx
mov ecx, 0x100772d8
call fcn.100e970f
mov dword [esi], 0xb
jmp 0x100b370e
cmp eax, 1
jne 0x100d6138
cmp dword [0x101dcaf0], ebx
je 0x100d612d
push 0x10077308
push 0x41
pop edx
mov ecx, 0x100772d8
call fcn.100e970f
mov dword [esi], 0xa
jmp 0x100b370e
test eax, eax
jne 0x100d62bc
cmp dword [0x101dcaf0], ebx
je 0x100d615a
push 0x10077308
push 0x46
pop edx
mov ecx, 0x100772d8
call fcn.100e970f
mov dword [esi], 9
jmp 0x100b370e
push 5
pop ecx
cmp eax, ecx
jne 0x100d61f8
mov eax, dword [0x101dcae8]
push 2
pop ebx
cmp eax, ebx
jne 0x100d61a1
cmp dword [0x101dcaf0], ebx
je 0x100d6196
push 0x10077308
push 0x4b
pop edx
mov ecx, 0x100772d8
call fcn.100e970f
mov dword [esi], 8
jmp 0x100b370e
cmp eax, 1
jne 0x100d61cb
cmp dword [0x101dcaf0], ebx
je 0x100d61c0
push 0x10077308
push 0x50
pop edx
mov ecx, 0x100772d8
call fcn.100e970f
mov dword [esi], 7
jmp 0x100b370e
test eax, eax
jne 0x100d62bc
cmp dword [0x101dcaf0], ebx
je 0x100d61ed
push 0x10077308
push 0x55
pop edx
mov ecx, 0x100772d8
call fcn.100e970f
mov dword [esi], 6
jmp 0x100b370e
cmp eax, 4
jne 0x100d628b
mov eax, dword [0x101dcae8]
test eax, eax
jne 0x100d623b
mov eax, dword [0x101dcaf0]
push 2
pop ebx
cmp eax, ebx
jne 0x100d621d
mov dword [esi], ecx
jmp 0x100b370e
cmp eax, 1
je 0x100d6234
push 0x10077368
push 0x69
pop edx
mov ecx, 0x100772d8
call fcn.100e970f
mov dword [esi], ebx
jmp 0x100b370e
cmp eax, 0x5a
jne 0x100d6263
cmp dword [0x101dcaf0], 1
je 0x100d6258
push 0x10077368
push 0x5f
pop edx
mov ecx, ebx
call fcn.100e970f
mov dword [esi], 4
jmp 0x100b370e
cmp eax, 0xa
jne 0x100d62bc
cmp dword [0x101dcaf0], 1
je 0x100d6280
push 0x10077368
push 0x64
pop edx
mov ecx, ebx
call fcn.100e970f
mov dword [esi], 3
jmp 0x100b370e
cmp eax, 3
jne 0x100d62bc
cmp dword [0x101dcae8], 0x33
jne 0x100d62bc
cmp dword [0x101dcaf0], 2
je 0x100d62b1
push 0x10077308
push 0x6e
pop edx
mov ecx, ebx
call fcn.100e970f
mov dword [esi], 1
jmp 0x100b370e
mov dword [esi], edi
jmp 0x100b370e