Function at 0x14010c57c
Capabilities:
Check os version

Disassembly:
mov rax, rsp
push rbp
push rsi
push rdi
push r12
push r13
push r14
push r15
lea rbp, [rsp - 0x80]
sub rsp, 0x180
mov qword [rsp + 0x40], 0xfffffffffffffffe
mov qword [rax + 0x10], rbx
mov rax, qword [0x1402688f8]
xor rax, rsp
mov qword [rbp + 0x70], rax
mov rsi, r9
mov qword [rsp + 0x30], r8
mov r15d, edx
mov rbx, rcx
mov r14d, dword [rbp + 0xf8]
mov qword [rsp + 0x48], rcx
mov rdi, qword [rbp + 0xe8]
mov r8, qword [rbp + 0xf0]
xor edx, edx
call fcn.14001c2a0
nop
lea rax, vtable.CFileDialog.0
mov qword [rbx], rax
lea r12, [rbx + 0x160]
call fcn.14000f428
mov rcx, rax
xor r13d, r13d
test rax, rax
je 0x14010c92e
mov rax, qword [rax]
mov rax, qword [rax + 0x18]
call qword [case.0x140048382.0]
add rax, 0x18
mov qword [r12], rax
mov qword [rbx + 0x580], r13
mov qword [rbx + 0x588], r13
mov r13d, 0x114
mov r8d, r13d
xor edx, edx
lea rcx, [rsp + 0x50]
call fcn.14019edd0
mov dword [rsp + 0x50], r13d
lea rcx, [rsp + 0x50]
call qword [sym.imp.KERNEL32.dll_GetVersionExW]
xor eax, eax
cmp dword [rsp + 0x54], 6
cmovae eax, dword [rbp + 0x100]
mov dword [rbx + 0x138], eax
and dword [rbx + 0x13c], 0
and dword [rbx + 0x140], 0
lea eax, [r13 - 0x7c]
test r14d, r14d
cmovne eax, r14d
mov r13d, eax
mov ecx, eax
call fcn.1401a51a8
mov qword [rbx + 0x130], rax
test rax, rax
je 0x14010c928
mov r8d, r13d
xor edx, edx
mov rcx, rax
call fcn.14019edd0
lea r14, [rbx + 0x368]
xor eax, eax
mov word [r14], ax
lea rcx, [rbx + 0x168]
mov word [rcx], ax
mov qword [rbx + 0x570], rax
mov dword [rbx + 0x158], r15d
mov dword [rbx + 0x578], eax
neg r15d
sbb eax, eax
add eax, 0x7005
mov dword [rbx + 0xe8], eax
mov rax, qword [rbx + 0x130]
mov dword [rax], r13d
mov rax, qword [rbx + 0x130]
mov qword [rax + 0x30], r14
mov rax, qword [rbx + 0x130]
mov r13d, 0x104
mov dword [rax + 0x38], r13d
mov rax, qword [rbx + 0x130]
mov rdx, qword [rsp + 0x30]
mov qword [rax + 0x68], rdx
mov rax, qword [rbx + 0x130]
mov qword [rax + 0x40], rcx
mov rax, qword [rbx + 0x130]
mov dword [rax + 0x48], 0x100
mov rcx, qword [rbx + 0x130]
mov eax, dword [rbp + 0xe0]
or eax, 0x80020
or dword [rcx + 0x60], eax
test byte [rbp + 0xe0], 0x40
je 0x14010c756
mov rax, qword [rbx + 0x130]
btr dword [rax + 0x60], 0x17
call fcn.1400202e4
mov r9, qword [rax + 0x18]
mov rax, qword [rbx + 0x130]
mov qword [rax + 0x10], r9
mov rax, qword [rbx + 0x130]
lea rcx, [0x14010a848]
mov qword [rax + 0x78], rcx
xor r15d, r15d
test rsi, rsi
je 0x14010c7ac
or r9, 0xffffffffffffffff
mov r8, rsi
mov rdx, r13
mov rcx, r14
call fcn.1401a5534
test eax, eax
je 0x14010c7ac
cmp eax, 0xc
je 0x14010c928
cmp eax, 0x50
jne 0x14010c939
mov esi, 1
test rdi, rdi
je 0x14010c81f
mov rcx, rdi
call fcn.1401a51b8
mov r8d, eax
mov rdx, rdi
mov rcx, r12
call fcn.14000e558
lea rdi, [rbx + 0x160]
mov r8, qword [rdi]
mov ecx, esi
sub ecx, dword [r8 - 8]
mov eax, dword [r8 - 0xc]
or eax, ecx
jge 0x14010c7f1
xor edx, edx
mov rcx, rdi
call fcn.140003170
mov r8, qword [rdi]
mov r14d, 0x7c
mov rcx, r8
jmp 0x14010c804
mov word [rax], r15w
lea rcx, [rax + 2]
mov edx, r14d
call fcn.14019f548
test rax, rax
jne 0x14010c7fc
mov rcx, qword [rdi]
mov rax, qword [rbx + 0x130]
mov qword [rax + 0x18], rcx
cmp dword [rbx + 0x138], esi
jne 0x14010c8f8
mov edx, 2
xor ecx, ecx
call qword [sym.imp.ole32.dll_CoInitializeEx]
test eax, eax
js 0x14010c8f1
lea rdi, [rbx + 0x580]
lea rax, vtable.CFileDialog::XFileDialogEvents.0
mov qword [rdi], rax
lea rax, vtable.CFileDialog::XFileDialogControlEvents.0
mov qword [rbx + 0x588], rax
lea rax, [rsp + 0x30]
lea r9, [0x1401fa4d8]
mov r8d, esi
xor edx, edx
mov qword [rsp + 0x20], rax
cmp dword [rbx + 0x158], r15d
lea rcx, [0x1402240a8]
jne 0x14010c88c
lea rcx, [0x1402240b8]
call qword [sym.imp.ole32.dll_CoCreateInstance]
test eax, eax
js 0x14010c8f1
mov rcx, qword [rsp + 0x30]
mov rax, qword [rcx]
lea r8, [rsp + 0x38]
lea rdx, [0x1401fa4e8]
mov rax, qword [rax]
call qword [case.0x140048382.0]
test eax, eax
js 0x14010c922
mov rcx, qword [rsp + 0x30]
mov rax, qword [rcx]
lea r8, [rbx + 0x144]
mov rdx, rdi
mov rax, qword [rax + 0x38]
call qword [case.0x140048382.0]
test eax, eax
js 0x14010c922
mov rax, qword [rsp + 0x30]
mov qword [rbx + 0x148], rax
mov rax, qword [rsp + 0x38]
mov qword [rbx + 0x150], rax
jmp 0x14010c8f8
mov dword [rbx + 0x138], r15d
mov rax, rbx
mov rcx, qword [rbp + 0x70]
xor rcx, rsp
call fcn.14019cf10
mov rbx, qword [rsp + 0x1c8]
add rsp, 0x180
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbp
ret
call fcn.14000ec78
nop
call fcn.14000ec9c
nop
mov ecx, 0x80004005
call fcn.140003370
nop
call fcn.14000ec78
int3