Function at 0x14008bd44
Capabilities:
Check os version

Disassembly:
mov rax, rsp
push rbp
push rsi
push rdi
push r12
push r13
push r14
push r15
lea rbp, [rsp - 0x80]
sub rsp, 0x180
mov qword [rsp + 0x40], 0xfffffffffffffffe
mov qword [rax + 0x10], rbx
mov rax, qword [0x1402677d8]
xor rax, rsp
mov qword [rbp + 0x70], rax
mov rsi, r9
mov qword [rsp + 0x30], r8
mov r15d, edx
mov rbx, rcx
mov r14d, dword [rbp + 0xf8]
mov qword [rsp + 0x48], rcx
mov rdi, qword [rbp + 0xe8]
mov r8, qword [rbp + 0xf0]
xor edx, edx
call fcn.14002b324
nop
lea rax, vtable.CFileDialog.0
mov qword [rbx], rax
lea r12, [rbx + 0x160]
call fcn.140019f30
mov rcx, rax
xor r13d, r13d
test rax, rax
je 0x14008c0f6
mov rax, qword [rax]
mov rax, qword [rax + 0x18]
call qword [case.0x14003a4e2.0]
add rax, 0x18
mov qword [r12], rax
mov qword [rbx + 0x580], r13
mov qword [rbx + 0x588], r13
mov r13d, 0x114
mov r8d, r13d
xor edx, edx
lea rcx, [rsp + 0x50]
call fcn.140199110
mov dword [rsp + 0x50], r13d
lea rcx, [rsp + 0x50]
call qword [sym.imp.KERNEL32.dll_GetVersionExW]
xor eax, eax
cmp dword [rsp + 0x54], 6
cmovae eax, dword [rbp + 0x100]
mov dword [rbx + 0x138], eax
and dword [rbx + 0x13c], 0
and dword [rbx + 0x140], 0
lea eax, [r13 - 0x7c]
test r14d, r14d
cmovne eax, r14d
mov r13d, eax
mov ecx, eax
call fcn.1401a0cac
mov qword [rbx + 0x130], rax
test rax, rax
je 0x14008c0f0
mov r8d, r13d
xor edx, edx
mov rcx, rax
call fcn.140199110
lea r14, [rbx + 0x368]
xor eax, eax
mov word [r14], ax
lea rcx, [rbx + 0x168]
mov word [rcx], ax
mov qword [rbx + 0x570], rax
mov dword [rbx + 0x158], r15d
mov dword [rbx + 0x578], eax
neg r15d
sbb eax, eax
add eax, 0x7005
mov dword [rbx + 0xe8], eax
mov rax, qword [rbx + 0x130]
mov dword [rax], r13d
mov rax, qword [rbx + 0x130]
mov qword [rax + 0x30], r14
mov rax, qword [rbx + 0x130]
mov r13d, 0x104
mov dword [rax + 0x38], r13d
mov rax, qword [rbx + 0x130]
mov rdx, qword [rsp + 0x30]
mov qword [rax + 0x68], rdx
mov rax, qword [rbx + 0x130]
mov qword [rax + 0x40], rcx
mov rax, qword [rbx + 0x130]
mov dword [rax + 0x48], 0x100
mov rcx, qword [rbx + 0x130]
mov eax, dword [rbp + 0xe0]
or eax, 0x80020
or dword [rcx + 0x60], eax
test byte [rbp + 0xe0], 0x40
je 0x14008bf1e
mov rax, qword [rbx + 0x130]
btr dword [rax + 0x60], 0x17
call fcn.1400152e8
mov r9, qword [rax + 0x18]
mov rax, qword [rbx + 0x130]
mov qword [rax + 0x10], r9
mov rax, qword [rbx + 0x130]
lea rcx, [0x1400335e4]
mov qword [rax + 0x78], rcx
xor r15d, r15d
test rsi, rsi
je 0x14008bf74
or r9, 0xffffffffffffffff
mov r8, rsi
mov rdx, r13
mov rcx, r14
call fcn.1401a1c70
test eax, eax
je 0x14008bf74
cmp eax, 0xc
je 0x14008c0f0
cmp eax, 0x50
jne 0x14008c101
mov esi, 1
test rdi, rdi
je 0x14008bfe7
mov rcx, rdi
call fcn.1401a1f38
mov r8d, eax
mov rdx, rdi
mov rcx, r12
call fcn.1400192d0
lea rdi, [rbx + 0x160]
mov r8, qword [rdi]
mov ecx, esi
sub ecx, dword [r8 - 8]
mov eax, dword [r8 - 0xc]
or eax, ecx
jge 0x14008bfb9
xor edx, edx
mov rcx, rdi
call fcn.140015588
mov r8, qword [rdi]
mov r14d, 0x7c
mov rcx, r8
jmp 0x14008bfcc
mov word [rax], r15w
lea rcx, [rax + 2]
mov edx, r14d
call fcn.1401999e8
test rax, rax
jne 0x14008bfc4
mov rcx, qword [rdi]
mov rax, qword [rbx + 0x130]
mov qword [rax + 0x18], rcx
cmp dword [rbx + 0x138], esi
jne 0x14008c0c0
mov edx, 2
xor ecx, ecx
call qword [sym.imp.ole32.dll_CoInitializeEx]
test eax, eax
js 0x14008c0b9
lea rdi, [rbx + 0x580]
lea rax, vtable.CFileDialog::XFileDialogEvents.0
mov qword [rdi], rax
lea rax, vtable.CFileDialog::XFileDialogControlEvents.0
mov qword [rbx + 0x588], rax
lea rax, [rsp + 0x30]
lea r9, [0x1401e1cb0]
mov r8d, esi
xor edx, edx
mov qword [rsp + 0x20], rax
cmp dword [rbx + 0x158], r15d
lea rcx, [0x14021ed38]
jne 0x14008c054
lea rcx, [0x14021ed48]
call qword [sym.imp.ole32.dll_CoCreateInstance]
test eax, eax
js 0x14008c0b9
mov rcx, qword [rsp + 0x30]
mov rax, qword [rcx]
lea r8, [rsp + 0x38]
lea rdx, [0x1401e1cc0]
mov rax, qword [rax]
call qword [case.0x14003a4e2.0]
test eax, eax
js 0x14008c0ea
mov rcx, qword [rsp + 0x30]
mov rax, qword [rcx]
lea r8, [rbx + 0x144]
mov rdx, rdi
mov rax, qword [rax + 0x38]
call qword [case.0x14003a4e2.0]
test eax, eax
js 0x14008c0ea
mov rax, qword [rsp + 0x30]
mov qword [rbx + 0x148], rax
mov rax, qword [rsp + 0x38]
mov qword [rbx + 0x150], rax
jmp 0x14008c0c0
mov dword [rbx + 0x138], r15d
mov rax, rbx
mov rcx, qword [rbp + 0x70]
xor rcx, rsp
call fcn.140197410
mov rbx, qword [rsp + 0x1c8]
add rsp, 0x180
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbp
ret
call fcn.140014bec
nop
call fcn.140014c10
nop
mov ecx, 0x80004005
call fcn.140015384
nop
call fcn.140014bec
int3