Function at 0x10010360
Capabilities:
Check os version
Get system information on windows

Disassembly:
push 0xffffffffffffffff
push 0x1009c716
mov eax, dword fs:[0]
push eax
sub esp, 0x17c
mov eax, dword [0x100b7bd0]
xor eax, esp
mov dword [esp + 0x178], eax
push ebx
push esi
push edi
mov eax, dword [0x100b7bd0]
xor eax, esp
push eax
lea eax, [esp + 0x18c]
mov dword fs:[0], eax
mov esi, dword [esp + 0x19c]
mov ebx, dword [esp + 0x1a0]
push 0x11c
lea eax, [esp + 0x70]
push 0
push eax
call fcn.1007aac0
add esp, 0xc
lea ecx, [esp + 0x48]
push ecx
mov dword [esp + 0x70], 0x11c
call dword [sym.imp.KERNEL32.dll_GetSystemInfo]
lea edx, [esp + 0x6c]
push edx
call dword [sym.imp.KERNEL32.dll_GetVersionExW]
test eax, eax
jne 0x100103e5
xor al, al
jmp 0x10010646
mov ecx, dword [esp + 0x70]
lea eax, [ecx - 4]
cmp eax, 6
ja case.0x100103f5.7
jmp dword [eax*4 + 0x10010670]
mov eax, dword [esp + 0x74]
test eax, eax
je 0x10010434
cmp eax, 0xa
je 0x10010423
cmp eax, 0x5a
jne 0x10010639
push str.Microsoft_Windows_Me
mov ecx, esi
call fcn.10004260
jmp 0x10010639
push str.Microsoft_Windows_98
mov ecx, esi
call fcn.10004260
jmp 0x10010639
mov eax, dword [esp + 0x7c]
cmp eax, 2
jne 0x1001044e
push str.Microsoft_Windows_NT_4.0
mov ecx, esi
call fcn.10004260
jmp 0x10010639
cmp eax, 1
jne 0x10010639
push str.Microsoft_Windows_95
mov ecx, esi
call fcn.10004260
jmp 0x10010639
mov eax, dword [esp + 0x74]
sub eax, 0
je 0x100104f5
mov ecx, 1
sub eax, ecx
je 0x100104e4
sub eax, ecx
jne 0x10010639
cmp byte [esp + 0x186], cl
jne 0x100104a8
cmp word [esp + 0x48], 9
jne 0x100104a8
push str.Microsoft_Windows_XP_Professional_x64_Edition
mov ecx, esi
call fcn.10004260
jmp 0x10010639
mov edi, dword [sym.imp.USER32.dll_GetSystemMetrics]
push 0x59
call edi
test eax, eax
jne 0x100104c7
push str.Microsoft_Windows_Server_2003
mov ecx, esi
call fcn.10004260
jmp 0x10010639
push 0x59
call edi
test eax, eax
je 0x10010639
push str.Microsoft_Windows_Server_2003_R2
mov ecx, esi
call fcn.10004260
jmp 0x10010639
push str.Microsoft_Windows_XP
mov ecx, esi
call fcn.10004260
jmp 0x10010639
push str.Microsoft_Windows_2000
mov ecx, esi
call fcn.10004260
jmp 0x10010639
mov eax, dword [esp + 0x74]
sub eax, 0
je 0x1001056a
mov ecx, 1
sub eax, ecx
je 0x10010541
cmp byte [esp + 0x186], cl
mov ecx, esi
jne 0x10010532
push str.Microsoft_Windows_8
call fcn.10004260
jmp 0x10010639
push str.Windows_Server_2012
call fcn.10004260
jmp 0x10010639
cmp byte [esp + 0x186], cl
mov ecx, esi
jne 0x1001055b
push str.Microsoft_Windows_7
call fcn.10004260
jmp 0x10010639
push str.Microsoft_Windows_Server_2008_R2
call fcn.10004260
jmp 0x10010639
cmp byte [esp + 0x186], 1
mov ecx, esi
jne 0x10010585
push str.Microsoft_Windows_Vista
call fcn.10004260
jmp 0x10010639
push str.Microsoft_Windows_Server_2008
call fcn.10004260
jmp 0x10010639
mov eax, dword [esp + 0x74]
test eax, eax
je 0x100105d2
push eax
push ecx
lea eax, [esp + 0x34]
push str.Windows__d._d
push eax
call fcn.10003ea0
add esp, 0x10
push 0xffffffffffffffff
push 0
push eax
mov ecx, esi
mov dword [esp + 0x1a0], 0
call fcn.10002490
lea ecx, [esp + 0x2c]
call fcn.10008190
jmp 0x10010639
cmp byte [esp + 0x186], 1
mov ecx, esi
jne 0x100105ea
push str.Microsoft_Windows_10
call fcn.10004260
jmp 0x10010639
push str.Microsoft_Windows_Server_2016
call fcn.10004260
jmp 0x10010639
mov edx, dword [esp + 0x74]
push edx
push ecx
lea eax, [esp + 0x18]
push str.Windows__d._d
push eax
call fcn.10003ea0
add esp, 0x10
push 0xffffffffffffffff
push 0
push eax
mov ecx, esi
mov dword [esp + 0x1a0], 1
call fcn.10002490
cmp dword [esp + 0x28], 8
jb 0x10010639
mov ecx, dword [esp + 0x14]
push ecx
call fcn.10079508
add esp, 4
mov edx, dword [esp + 0x70]
mov dword [ebx], edx
cmp dword [esi + 0x14], 0
setne al
mov ecx, dword [esp + 0x18c]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [esp + 0x178]
xor ecx, esp
call fcn.1007a1bc
add esp, 0x188
ret