Function at 0x10036f03
Capabilities:
Check os version

Disassembly:
sub esp, 0xb8
mov eax, dword [0x102bff3c]
xor eax, esp
mov dword [esp + 0xb4], eax
push ebx
push ebp
push esi
push edi
push 0xa
call fcn.1002a528
pop ecx
push eax
lea ecx, [esp + 0x14]
call fcn.1001f510
push 0x10239f5c
lea ecx, [esp + 0x14]
call fcn.10027cc7
test eax, eax
je 0x10037639
call fcn.10012120
push eax
lea ecx, [esp + 0x30]
call fcn.1000dd90
call fcn.10012120
push eax
lea ecx, [esp + 0x18]
call fcn.1000dd90
call fcn.10012120
push eax
lea ecx, [esp + 0x20]
call fcn.1000dd90
call fcn.10012120
push eax
lea ecx, [esp + 0x28]
call fcn.1000dd90
push str.ironsourceshown
lea ecx, [esp + 0x14]
call fcn.10027cc7
test eax, eax
je 0x10037609
push str.betterinstallershown
lea ecx, [esp + 0x14]
call fcn.10027cc7
test eax, eax
je 0x10037609
push str.opencandyshown
lea ecx, [esp + 0x14]
call fcn.10027cc7
test eax, eax
je 0x10037609
push str.InstallerFailed
lea ecx, [esp + 0x14]
call fcn.10027cc7
test eax, eax
je 0x10037609
push str.SendUninstallFailed
lea ecx, [esp + 0x14]
call fcn.10027cc7
xor ebp, ebp
test eax, eax
jne 0x10037023
mov esi, 0x1023a068
push esi
call fcn.1000d790
pop ecx
push eax
push esi
lea ecx, [esp + 0x1c]
call fcn.1000d6e0
mov esi, 0x1023a07c
push esi
call fcn.1000d790
pop ecx
push eax
push esi
lea ecx, [esp + 0x24]
call fcn.1000d6e0
mov esi, 0x1023a08c
jmp 0x100374fc
lea eax, [esp + 0x10]
push str.SendReInstallFailed
push eax
call fcn.10037b91
pop ecx
pop ecx
test al, al
je 0x10037070
mov esi, str.Installer
push esi
call fcn.1000d790
pop ecx
push eax
push esi
lea ecx, [esp + 0x1c]
call fcn.1000d6e0
mov esi, str.Failed
push esi
call fcn.1000d790
pop ecx
push eax
push esi
lea ecx, [esp + 0x24]
call fcn.1000d6e0
mov esi, 0x1023a0dc
jmp 0x100374fc
push 0x1023a0e0
lea ecx, [esp + 0x14]
call fcn.10027cc7
test eax, eax
je 0x100374b1
push str.SendGadgetIsDisable
lea ecx, [esp + 0x14]
call fcn.10027cc7
test eax, eax
je 0x100374b1
push 1
lea eax, [esp + 0x34]
mov dword [esp + 0x34], ebp
push eax
push ebp
push ebp
push str.Version_Major
call fcn.10196300
push 1
lea eax, [esp + 0x40]
mov dword [esp + 0x40], ebp
push eax
push ebp
push ebp
push str.Version_Minor
call fcn.10196300
add esp, 0x28
lea ecx, [esp + 0x10]
push 0x1023a1e0
call fcn.10027cc7
test eax, eax
jne 0x100370e6
mov esi, 0x1023a200
jmp 0x1003714a
push 0x1023a210
lea ecx, [esp + 0x14]
call fcn.10027cc7
test eax, eax
je 0x10037145
push 0x1023a234
lea ecx, [esp + 0x14]
call fcn.10027cc7
test eax, eax
je 0x10037145
push 0x1023a258
lea ecx, [esp + 0x14]
call fcn.10027cc7
test eax, eax
je 0x10037145
cmp dword [esp + 0x30], ebp
jne 0x10037129
mov esi, 0x1023a290
jmp 0x1003714a
cmp dword [esp + 0x30], 5
jne 0x1003713e
cmp dword [esp + 0x28], 2
jne 0x1003713e
mov esi, str.reinstall
jmp 0x1003714a
mov esi, 0x1023a2b4
jmp 0x1003714a
mov esi, 0x1023a27c
push esi
call fcn.1000d790
pop ecx
push eax
push esi
lea ecx, [esp + 0x1c]
call fcn.1000d6e0
push 0x1023a2c4
lea ecx, [esp + 0x14]
call fcn.10027cc7
test eax, eax
je 0x10037192
push 0x1023a2e4
lea ecx, [esp + 0x14]
call fcn.10027cc7
test eax, eax
je 0x10037192
push str.ReInstallStarted
lea ecx, [esp + 0x14]
call fcn.10027cc7
test eax, eax
jne 0x100371a9
mov esi, str.Started
push esi
call fcn.1000d790
pop ecx
push eax
push esi
lea ecx, [esp + 0x24]
call fcn.1000d6e0
push 0x1023a33c
lea ecx, [esp + 0x14]
call fcn.10027cc7
test eax, eax
je 0x100371e3
push 0x1023a35c
lea ecx, [esp + 0x14]
call fcn.10027cc7
test eax, eax
je 0x100371e3
push 0x1023a380
lea ecx, [esp + 0x14]
call fcn.10027cc7
test eax, eax
jne 0x1003728f
mov esi, 0x1023a3a8
push esi
call fcn.1000d790
pop ecx
push eax
push esi
lea ecx, [esp + 0x24]
call fcn.1000d6e0
push 0x1023a3bc
lea ecx, [esp + 0x14]
call fcn.10027cc7
test eax, eax
je 0x1003721e
push str.ReInstallFinished
lea ecx, [esp + 0x14]
call fcn.10027cc7
test eax, eax
jne 0x1003728f
lea eax, [esp + 0xac]
push eax
call fcn.10024af4
pop ecx
cmp dword [eax + 0x14], 0x10
jb 0x10037234
mov eax, dword [eax]
push eax
lea ecx, [esp + 0x1c]
call fcn.10026142
push ebp
push 1
lea ecx, [esp + 0xb4]
call fcn.10016f10
mov eax, dword [esp + 0x18]
push ecx
add eax, 0xfffffff0
mov esi, esp
push eax
call fcn.1000c7d0
add eax, 0x10
mov ecx, esp
push str.Framework
mov dword [esi], eax
call fcn.1001f510
push ecx
mov ecx, esp
push str.install
call fcn.1001f510
call fcn.10036d93
mov ecx, dword [esp + 0x24]
add esp, 0xc
lea ecx, [ecx - 0x10]
call fcn.1000dde0
push 0x1023a424
lea ecx, [esp + 0x14]
call fcn.10027cc7
test eax, eax
je 0x100372d7
push 0x1023a444
lea ecx, [esp + 0x14]
call fcn.10027cc7
test eax, eax
je 0x100372d7
push str.InstallAborted
lea ecx, [esp + 0x14]
call fcn.10027cc7
test eax, eax
je 0x100372d7
push str.ReInstallAborted
lea ecx, [esp + 0x14]
call fcn.10027cc7
test eax, eax
jne 0x100372ee
mov esi, str.Canceled
push esi
call fcn.1000d790
pop ecx
push eax
push esi
lea ecx, [esp + 0x24]
call fcn.1000d6e0
push 0x1023a4c0
lea ecx, [esp + 0x14]
call fcn.10027cc7
test eax, eax
je 0x10037324
push 0x1023a4e4
lea ecx, [esp + 0x14]
call fcn.10027cc7
test eax, eax
je 0x10037324
push 0x1023a508
lea ecx, [esp + 0x14]
call fcn.10027cc7
test eax, eax
jne 0x1003733b
mov esi, str.uninstall
push esi
call fcn.1000d790
pop ecx
push eax
push esi
lea ecx, [esp + 0x1c]
call fcn.1000d6e0
push str.InstallFinished
lea ecx, [esp + 0x14]
call fcn.10027cc7
test eax, eax
je 0x10037383
push str.UninstallStarted
lea ecx, [esp + 0x14]
call fcn.10027cc7
test eax, eax
je 0x10037383
push str.UninstallFinished
lea ecx, [esp + 0x14]
call fcn.10027cc7
test eax, eax
je 0x10037383
push str.UninstallCanceled
lea ecx, [esp + 0x14]
call fcn.10027cc7
test eax, eax
jne 0x1003739a
mov esi, 0x1023a5cc
push esi
call fcn.1000d790
pop ecx
push eax
push esi
lea ecx, [esp + 0x2c]
call fcn.1000d6e0
push str.InstallStarted
lea ecx, [esp + 0x14]
call fcn.10027cc7
test eax, eax
je 0x1003740a
push str.InstallCanceled
lea ecx, [esp + 0x14]
call fcn.10027cc7
test eax, eax
je 0x1003740a
push 0x102396d8
lea ecx, [esp + 0x14]
call fcn.10027cc7
test eax, eax
je 0x1003740a
push 0x102396fc
lea ecx, [esp + 0x14]
call fcn.10027cc7
test eax, eax
je 0x1003740a
push 0x10239720
lea ecx, [esp + 0x14]
call fcn.10027cc7
test eax, eax
je 0x1003740a
push 0x10239740
lea ecx, [esp + 0x14]
call fcn.10027cc7
test eax, eax
jne 0x1003750e
mov esi, ebp
call dword [sym.imp.KERNEL32.dll_GetVersion]
mov ecx, eax
movzx edi, al
shr ecx, 8
movzx ebx, cl
cmp eax, 0x80000000
jae 0x10037429
mov esi, eax
shr esi, 0x10
call fcn.10012120
push eax
lea ecx, [esp + 0x24]
call fcn.1000dd90
push esi
push ebx
push edi
lea eax, [esp + 0x2c]
push 0x10239764
push eax
call fcn.10020be8
add esp, 0x14
lea ecx, [esp + 0x18]
push 0x10239778
call fcn.1001f510
call fcn.1019a8b0
test eax, eax
je 0x1003747b
mov esi, 0x10239780
push esi
call fcn.1000d790
pop ecx
push eax
push esi
lea ecx, [esp + 0x20]
call fcn.1000d6e0
mov esi, dword [esp + 0x20]
lea eax, [esp + 0x24]
push 0x10239788
push dword [esp + 0x1c]
push esi
push str._s__s__s
push eax
call fcn.10020be8
mov ecx, dword [esp + 0x2c]
add esp, 0x14
lea ecx, [ecx - 0x10]
call fcn.1000dde0
lea ecx, [esi - 0x10]
call fcn.1000dde0
jmp 0x1003750e
mov esi, 0x1023a12c
push esi
call fcn.1000d790
pop ecx
push eax
push esi
lea ecx, [esp + 0x1c]
call fcn.1000d6e0
mov esi, str.disableComponent
push esi
call fcn.1000d790
pop ecx
push eax
push esi
lea ecx, [esp + 0x24]
call fcn.1000d6e0
push str.SendStatIsDisable
lea ecx, [esp + 0x14]
call fcn.10027cc7
test eax, eax
mov esi, str.statistic
mov ecx, str.gadget
cmovne esi, ecx
push esi
call fcn.1000d790
pop ecx
push eax
push esi
lea ecx, [esp + 0x2c]
call fcn.1000d6e0
mov esi, dword [esp + 0x24]
cmp dword [esi - 0xc], ebp
jne 0x10037560
call fcn.10199320
push eax
lea ecx, [esp + 0x2c]
call fcn.10026142
mov edi, eax
lea eax, [esp + 0x20]
push eax
call fcn.10027652
push dword [esp + 0x20]
push dword [esp + 0x1c]
push 0x102397b4
push 2
push 5
push dword [edi]
push dword [eax]
lea eax, [esp + 0x4c]
push 0x102397c4
push 0x102397e0
push eax
call fcn.10020be8
add esp, 0x2c
jmp 0x100375a8
call fcn.10199320
push eax
lea ecx, [esp + 0x2c]
call fcn.10026142
mov edi, eax
lea eax, [esp + 0x20]
push eax
call fcn.10027652
push esi
push dword [esp + 0x24]
push dword [esp + 0x20]
push 0x10239858
push 2
push 5
push dword [edi]
push dword [eax]
lea eax, [esp + 0x50]
push 0x10239868
push 0x10239888
push eax
call fcn.10020be8
add esp, 0x30
mov ecx, dword [esp + 0x20]
lea ecx, [ecx - 0x10]
call fcn.1000dde0
mov ecx, dword [esp + 0x28]
lea ecx, [ecx - 0x10]
call fcn.1000dde0
push 0x10239910
lea ecx, [esp + 0x1c]
call fcn.10017d30
mov edi, dword [esp + 0x2c]
lea ecx, [esp + 0x18]
push edi
call fcn.10027b14
lea ecx, [esp + 0x34]
call fcn.1004f679
push ebp
push ebp
push dword [esp + 0x20]
lea ecx, [esp + 0x40]
call fcn.1004f6f5
lea ecx, [esp + 0x34]
call fcn.1004f6d1
push dword [esp + 0x18]
call dword [sym.imp.OLEAUT32.dll_SysStringLen]
jmp 0x10037611
mov edi, dword [esp + 0x2c]
mov esi, dword [esp + 0x24]
lea ecx, [esi - 0x10]
call fcn.1000dde0
mov ecx, dword [esp + 0x1c]
lea ecx, [ecx - 0x10]
call fcn.1000dde0
mov ecx, dword [esp + 0x14]
lea ecx, [ecx - 0x10]
call fcn.1000dde0
lea ecx, [edi - 0x10]
call fcn.1000dde0
mov ecx, dword [esp + 0x10]
lea ecx, [ecx - 0x10]
call fcn.1000dde0
mov ecx, dword [esp + 0xc4]
pop edi
pop esi
pop ebp
pop ebx
xor ecx, esp
call fcn.101b70aa
add esp, 0xb8
ret