Function at 0x18000a3d0
Capabilities:
Check os version

Disassembly:
mov rax, rsp
push rbp
push rdi
push r12
push r14
push r15
lea rbp, [rax - 0x148]
sub rsp, 0x220
mov qword [rsp + 0x58], 0xfffffffffffffffe
mov qword [rax + 0x10], rbx
mov qword [rax + 0x18], rsi
mov rax, qword [0x18020d140]
xor rax, rsp
mov qword [rbp + 0x110], rax
mov r14, rcx
call fcn.1800d4840
mov byte [r14 + 0x98], al
movzx ecx, al
call fcn.1800d5d10
xor ebx, ebx
lea r8d, [rbx + 5]
lea rcx, [rsp + 0x68]
mov qword [rsp + 0x78], rbx
mov qword [rbp - 0x80], rbx
mov byte [rsp + 0x68], bl
mov qword [rsp + 0x78], rbx
mov qword [rbp - 0x80], InitCommonControls
cmp byte [r14 + 0x98], bl
jne 0x18000a679
lea rdx, str.pbj50
call fcn.180008980
nop
call fcn.1800d0b50
mov rcx, rax
lea rdx, [rsp + 0x68]
call fcn.1800d0720
nop
mov rdx, qword [rbp - 0x80]
cmp rdx, 0x10
jb 0x18000a4b0
inc rdx
mov rcx, qword [rsp + 0x68]
mov rax, rcx
cmp rdx, 0x1000
jb 0x18000a4ab
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x18000aaf2
call fcn.180148104
mov qword [rsp + 0x78], rbx
mov qword [rbp - 0x80], InitCommonControls
mov byte [rsp + 0x68], 0
call qword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
mov esi, eax
mov ecx, 1
call fcn.180147c14
mov rdi, rax
mov qword [rsp + 0x50], rax
mov byte [rax], 0
xor edx, edx
mov r8d, 0x118
lea rcx, [rbp - 0xc]
call fcn.18014be70
mov dword [rbp - 0x10], 0x11c
lea rcx, [rbp - 0x10]
call qword [sym.imp.KERNEL32.dll_GetVersionExW]
test eax, eax
je 0x18000a50e
cmp dword [rbp - 0xc], 6
setae al
mov byte [rdi], al
mov edx, esi
lea rcx, [rsp + 0x50]
call fcn.180016840
test al, al
jne 0x18000a66d
mov eax, dword [r14 + 0x10]
cmp eax, 4
jne 0x18000a657
lea rdx, [r14 + 0x68]
lea rcx, [rbp - 0x78]
call fcn.1800051e0
nop
mov rdi, rbx
lea r15, str.netframework_setup
nop word [rax + rax]
inc rdi
cmp word [r15 + rdi*2], 0
jne 0x18000a550
mov rsi, rbx
lea r12, str.netframework_setup_as_admin
nop word [rax + rax]
lea rsi, [rsi + 1]
cmp word [r12 + rsi*2], 0
jne 0x18000a570
lea rcx, [rbp - 0x78]
cmp qword [rbp - 0x60], 8
cmovae rcx, qword [rbp - 0x78]
mov qword [rsp + 0x20], 0x12
mov r9, r15
xor r8d, r8d
mov rdx, qword [rbp - 0x68]
call fcn.180008f10
mov r14, rax
cmp rax, 0xffffffffffffffff
je 0x18000a5fb
nop dword [rax + rax]
mov qword [rsp + 0x20], 0x1b
mov r9, r12
mov r8, rdi
mov rdx, r14
lea rcx, [rbp - 0x78]
call fcn.18000eae0
lea r8, [rsi + r14]
lea rcx, [rbp - 0x78]
cmp qword [rbp - 0x60], 8
cmovae rcx, qword [rbp - 0x78]
mov qword [rsp + 0x20], 0x12
mov r9, r15
mov rdx, qword [rbp - 0x68]
call fcn.180008f10
mov r14, rax
cmp rax, 0xffffffffffffffff
jne 0x18000a5b0
lea rcx, [rbp - 0x78]
call fcn.1800d5700
nop
mov rdx, qword [rbp - 0x60]
cmp rdx, 8
jb 0x18000a645
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp - 0x78]
mov rax, rcx
cmp rdx, 0x1000
jb 0x18000a640
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x18000aaf8
call fcn.180148104
mov qword [rbp - 0x68], rbx
mov qword [rbp - 0x60], 7
mov word [rbp - 0x78], bx
jmp 0x18000a65c
cmp eax, 5
jne 0x18000a66d
lea rcx, [rsp + 0x50]
call fcn.1800154d0
xor al, al
jmp 0x18000aac1
lea rcx, [rsp + 0x50]
call fcn.1800154d0
jmp 0x18000a6e7
lea rdx, str.pbj49
call fcn.180008980
nop
call fcn.1800d0b50
mov rcx, rax
lea rdx, [rsp + 0x68]
call fcn.1800d0720
nop
mov rdx, qword [rbp - 0x80]
cmp rdx, 0x10
jb 0x18000a6d5
inc rdx
mov rcx, qword [rsp + 0x68]
mov rax, rcx
cmp rdx, 0x1000
jb 0x18000a6d0
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x18000aafe
call fcn.180148104
mov qword [rsp + 0x78], rbx
mov qword [rbp - 0x80], InitCommonControls
mov byte [rsp + 0x68], 0
cmp byte [r14 + 0x98], 0
jne 0x18000aaa4
cmp byte [r14 + 0x14], 0
je 0x18000a723
mov rcx, r14
call fcn.180006fe0
mov edx, 0xffffffff
mov rcx, qword [r14 + 0x90]
call qword [sym.imp.KERNEL32.dll_WaitForSingleObject]
mov rcx, r14
call fcn.180007090
jmp 0x18000aabf
mov qword [rsp + 0x78], rbx
mov qword [rbp - 0x80], rbx
mov qword [rsp + 0x78], rbx
mov qword [rbp - 0x80], 7
mov word [rsp + 0x68], bx
mov r8d, 6
lea rdx, str.Cancel
lea rcx, [rsp + 0x68]
call fcn.180005390
nop
mov qword [rbp - 0x28], rbx
mov qword [rbp - 0x20], rbx
mov qword [rbp - 0x28], rbx
mov qword [rbp - 0x20], 7
mov word [rbp - 0x38], bx
mov r8d, 4
lea rdx, [0x1801b25f0]
lea rcx, [rbp - 0x38]
call fcn.180005390
nop
mov qword [rbp - 0x48], rbx
mov qword [rbp - 0x40], rbx
mov qword [rbp - 0x48], rbx
mov qword [rbp - 0x40], 7
mov word [rbp - 0x58], bx
mov r8d, 7
lea rdx, [0x1801b21d8]
lea rcx, [rbp - 0x58]
call fcn.180005390
nop
mov qword [rbp - 0x68], rbx
mov qword [rbp - 0x60], rbx
mov qword [rbp - 0x68], rbx
mov qword [rbp - 0x60], 7
mov word [rbp - 0x78], bx
mov r8d, gethostbyname
lea rdx, [0x1801b2600]
lea rcx, [rbp - 0x78]
call fcn.180005390
nop
mov ecx, 0xb68
call fcn.180147c14
mov rdi, rax
mov qword [rsp + 0x50], rax
lea rax, [rbp - 0x10]
mov qword [rsp + 0x60], rax
lea rdx, [rbp - 0x78]
cmp qword [rbp - 0x60], 8
cmovae rdx, qword [rbp - 0x78]
mov r8d, 0xffffffff
lea rcx, [rbp - 0x10]
call fcn.1800f1e2c
nop
mov dword [rsp + 0x20], ebx
xor r8d, r8d
mov rdx, rax
mov rcx, rdi
call fcn.18000b9a0
mov rsi, rax
lea rdx, [rbp - 0x58]
cmp qword [rbp - 0x40], 8
cmovae rdx, qword [rbp - 0x58]
lea rcx, [rax + 0x9c0]
call fcn.1800f203c
lea rdx, [rbp - 0x38]
cmp qword [rbp - 0x20], 8
cmovae rdx, qword [rbp - 0x38]
lea rcx, [rsi + 0xa48]
call fcn.1800f203c
lea rdx, [rsp + 0x68]
cmp qword [rbp - 0x80], 8
cmovae rdx, qword [rsp + 0x68]
lea rcx, [rsi + 0xad0]
call fcn.1800f203c
mov word [rsi + 0xb60], 0x100
mov qword [rsp + 0x48], rbx
mov dword [rsp + 0x40], 0x96
mov dword [rsp + 0x38], 0x15e
mov dword [rsp + 0x30], ebx
mov dword [rsp + 0x28], ebx
mov dword [rsp + 0x20], 0x100
mov r9d, 0x12cf0000
lea r8, str.2345PDF
xor edx, edx
mov rcx, rsi
call fcn.1800f12b4
mov rdi, rax
mov edx, 0xfffffff0
mov rcx, rax
call qword [sym.imp.USER32.dll_GetWindowLongW]
and eax, 0xfffaffff
mov r8d, eax
mov edx, 0xfffffff0
mov rcx, rdi
call qword [sym.imp.USER32.dll_SetWindowLongW]
mov dword [rsp + 0x30], 3
mov dword [rsp + 0x28], ebx
mov dword [rsp + 0x20], ebx
xor r9d, r9d
xor r8d, r8d
lea rdx, [r9 - 1]
mov rcx, rdi
call qword [sym.imp.USER32.dll_SetWindowPos]
mov edx, 0x64
mov rcx, rsi
call fcn.1800f192c
mov rcx, rsi
call fcn.1800f10e8
mov rcx, rsi
call fcn.1800f1a10
mov edi, eax
mov r8, qword [rsi]
mov edx, 1
mov rcx, rsi
call qword [r8 + 0x28]
nop
mov rdx, qword [rbp - 0x60]
cmp rdx, 8
jb 0x18000a97f
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp - 0x78]
mov rax, rcx
cmp rdx, 0x1000
jb 0x18000a97a
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x18000ab04
call fcn.180148104
mov qword [rbp - 0x68], rbx
mov qword [rbp - 0x60], 7
mov word [rbp - 0x78], bx
mov rdx, qword [rbp - 0x40]
cmp rdx, 8
jb 0x18000a9cf
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp - 0x58]
mov rax, rcx
cmp rdx, 0x1000
jb 0x18000a9ca
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x18000ab0a
call fcn.180148104
mov qword [rbp - 0x48], rbx
mov qword [rbp - 0x40], 7
mov word [rbp - 0x58], bx
mov rdx, qword [rbp - 0x20]
cmp rdx, 8
jb 0x18000aa1f
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp - 0x38]
mov rax, rcx
cmp rdx, 0x1000
jb 0x18000aa1a
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x18000ab10
call fcn.180148104
mov qword [rbp - 0x28], rbx
mov qword [rbp - 0x20], 7
mov word [rbp - 0x38], bx
mov rdx, qword [rbp - 0x80]
cmp rdx, 8
jb 0x18000aa70
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0x68]
mov rax, rcx
cmp rdx, 0x1000
jb 0x18000aa6b
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x18000aaec
call fcn.180148104
mov qword [rsp + 0x78], rbx
mov qword [rbp - 0x80], 7
mov word [rsp + 0x68], bx
cmp edi, 1
jne 0x18000aa91
mov rcx, r14
call fcn.18000ab20
jmp 0x18000aabf
cmp edi, 9
jne 0x18000aabf
lea rcx, str.https:__dotnet.microsoft.com_zh_cn_download_dotnet_framework
call fcn.1800122f0
jmp 0x18000aabf
cmp byte [r14 + 0x15], 0
je 0x18000aabf
mov rcx, r14
call fcn.180007a60
cmp byte [r14 + 0x16], 0
je 0x18000aabf
call fcn.1800071e0
mov al, 1
mov rcx, qword [rbp + 0x110]
xor rcx, rsp
call fcn.180147bf0
lea r11, [rsp + 0x220]
mov rbx, qword [r11 + 0x38]
mov rsi, qword [r11 + 0x40]
mov rsp, r11
pop r15
pop r14
pop r12
pop rdi
pop rbp
ret
call fcn.18014ebe4
int3
call fcn.18014ebe4
nop
call fcn.18014ebe4
nop
call fcn.18014ebe4
nop
call fcn.18014ebe4
nop
call fcn.18014ebe4
nop
call fcn.18014ebe4
int3