Function at 0x14002a160
Capabilities:
Check os version

Disassembly:
mov rax, rsp
push rbp
push rsi
push rdi
push r12
push r13
push r14
push r15
lea rbp, [rsp - 0x80]
sub rsp, 0x180
mov qword [rsp + 0x40], 0xfffffffffffffffe
mov qword [rax + 0x10], rbx
mov rax, qword [0x1402987c8]
xor rax, rsp
mov qword [rbp + 0x70], rax
mov rsi, r9
mov qword [rsp + 0x30], r8
mov r15d, edx
mov rbx, rcx
mov r14d, dword [rbp + 0xf8]
mov qword [rsp + 0x48], rcx
mov rdi, qword [rbp + 0xe8]
mov r8, qword [rbp + 0xf0]
xor edx, edx
call fcn.140026750
nop
lea rax, vtable.CFileDialog.0
mov qword [rbx], rax
lea r12, [rbx + 0x160]
call fcn.14000c644
mov rcx, rax
xor r13d, r13d
test rax, rax
je 0x14002a512
mov rax, qword [rax]
mov rax, qword [rax + 0x18]
call qword [case.0x140033e8a.0]
add rax, 0x18
mov qword [r12], rax
mov qword [rbx + 0x580], r13
mov qword [rbx + 0x588], r13
mov r13d, 0x114
mov r8d, r13d
xor edx, edx
lea rcx, [rsp + 0x50]
call fcn.1401b62f0
mov dword [rsp + 0x50], r13d
lea rcx, [rsp + 0x50]
call qword [sym.imp.KERNEL32.dll_GetVersionExW]
xor eax, eax
cmp dword [rsp + 0x54], 6
cmovae eax, dword [rbp + 0x100]
mov dword [rbx + 0x138], eax
and dword [rbx + 0x13c], 0
and dword [rbx + 0x140], 0
lea eax, [r13 - 0x7c]
test r14d, r14d
cmovne eax, r14d
mov r13d, eax
mov ecx, eax
call fcn.1401bbf74
mov qword [rbx + 0x130], rax
test rax, rax
je 0x14002a50c
mov r8d, r13d
xor edx, edx
mov rcx, rax
call fcn.1401b62f0
lea r14, [rbx + 0x368]
xor eax, eax
mov word [r14], ax
lea rcx, [rbx + 0x168]
mov word [rcx], ax
mov qword [rbx + 0x570], rax
mov dword [rbx + 0x158], r15d
mov dword [rbx + 0x578], eax
neg r15d
sbb eax, eax
add eax, 0x7005
mov dword [rbx + 0xe8], eax
mov rax, qword [rbx + 0x130]
mov dword [rax], r13d
mov rax, qword [rbx + 0x130]
mov qword [rax + 0x30], r14
mov rax, qword [rbx + 0x130]
mov r13d, 0x104
mov dword [rax + 0x38], r13d
mov rax, qword [rbx + 0x130]
mov rdx, qword [rsp + 0x30]
mov qword [rax + 0x68], rdx
mov rax, qword [rbx + 0x130]
mov qword [rax + 0x40], rcx
mov rax, qword [rbx + 0x130]
mov dword [rax + 0x48], 0x100
mov rcx, qword [rbx + 0x130]
mov eax, dword [rbp + 0xe0]
or eax, 0x80020
or dword [rcx + 0x60], eax
test byte [rbp + 0xe0], 0x40
je 0x14002a33a
mov rax, qword [rbx + 0x130]
btr dword [rax + 0x60], 0x17
call fcn.14000fef0
mov r9, qword [rax + 0x18]
mov rax, qword [rbx + 0x130]
mov qword [rax + 0x10], r9
mov rax, qword [rbx + 0x130]
lea rcx, [0x14002e7e8]
mov qword [rax + 0x78], rcx
xor r15d, r15d
test rsi, rsi
je 0x14002a390
or r9, 0xffffffffffffffff
mov r8, rsi
mov rdx, r13
mov rcx, r14
call fcn.1401bc738
test eax, eax
je 0x14002a390
cmp eax, 0xc
je 0x14002a50c
cmp eax, 0x50
jne 0x14002a51d
mov esi, 1
test rdi, rdi
je 0x14002a403
mov rcx, rdi
call fcn.1401bc2fc
mov r8d, eax
mov rdx, rdi
mov rcx, r12
call fcn.14000c820
lea rdi, [rbx + 0x160]
mov r8, qword [rdi]
mov ecx, esi
sub ecx, dword [r8 - 8]
mov eax, dword [r8 - 0xc]
or eax, ecx
jge 0x14002a3d5
xor edx, edx
mov rcx, rdi
call fcn.14000bd30
mov r8, qword [rdi]
mov r14d, 0x7c
mov rcx, r8
jmp 0x14002a3e8
mov word [rax], r15w
lea rcx, [rax + 2]
mov edx, r14d
call fcn.1401b6848
test rax, rax
jne 0x14002a3e0
mov rcx, qword [rdi]
mov rax, qword [rbx + 0x130]
mov qword [rax + 0x18], rcx
cmp dword [rbx + 0x138], esi
jne 0x14002a4dc
mov edx, 2
xor ecx, ecx
call qword [sym.imp.ole32.dll_CoInitializeEx]
test eax, eax
js 0x14002a4d5
lea rdi, [rbx + 0x580]
lea rax, vtable.CFileDialog::XFileDialogEvents.0
mov qword [rdi], rax
lea rax, vtable.CFileDialog::XFileDialogControlEvents.0
mov qword [rbx + 0x588], rax
lea rax, [rsp + 0x30]
lea r9, [0x1401f5d08]
mov r8d, esi
xor edx, edx
mov qword [rsp + 0x20], rax
cmp dword [rbx + 0x158], r15d
lea rcx, [0x140244da8]
jne 0x14002a470
lea rcx, [0x140244db8]
call qword [sym.imp.ole32.dll_CoCreateInstance]
test eax, eax
js 0x14002a4d5
mov rcx, qword [rsp + 0x30]
mov rax, qword [rcx]
lea r8, [rsp + 0x38]
lea rdx, [0x1401f5d18]
mov rax, qword [rax]
call qword [case.0x140033e8a.0]
test eax, eax
js 0x14002a506
mov rcx, qword [rsp + 0x30]
mov rax, qword [rcx]
lea r8, [rbx + 0x144]
mov rdx, rdi
mov rax, qword [rax + 0x38]
call qword [case.0x140033e8a.0]
test eax, eax
js 0x14002a506
mov rax, qword [rsp + 0x30]
mov qword [rbx + 0x148], rax
mov rax, qword [rsp + 0x38]
mov qword [rbx + 0x150], rax
jmp 0x14002a4dc
mov dword [rbx + 0x138], r15d
mov rax, rbx
mov rcx, qword [rbp + 0x70]
xor rcx, rsp
call fcn.14018e750
mov rbx, qword [rsp + 0x1c8]
add rsp, 0x180
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbp
ret
call fcn.14000d8b0
nop
call fcn.14000d8d4
nop
mov ecx, 0x80004005
call fcn.14000bfa0
nop
call fcn.14000d8b0
int3