Function at 0x140014db0
Capabilities:
Check os version

Disassembly:
mov r11, rsp
push rsi
push rdi
push r12
sub rsp, 0x150
mov qword [rsp + 0x48], 0xfffffffffffffffe
mov qword [r11 + 0x10], rbx
mov qword [r11 + 0x18], rbp
mov rax, qword [0x140021220]
xor rax, rsp
mov qword [rsp + 0x140], rax
mov rsi, rcx
mov qword [rsp + 0x50], rcx
lea rax, vtable.CDMI.0
mov qword [rcx], rax
xor ebx, ebx
mov qword [rcx + 0x30], rbx
mov dword [rcx + 0x38], ebx
mov qword [rcx + 0x22], rbx
xor eax, eax
mov qword [rsp + 0x30], rax
mov word [rsp + 0x38], ax
mov dword [rsp + 0x24], eax
mov word [rsp + 0x28], ax
mov dword [rsp + 0x20], 0xf0000
mov dword [rsp + 0x2c], 0xffff
mov dword [rsp + 0xa0], 0x94
lea rcx, [r11 - 0xc8]
call qword [sym.imp.KERNEL32.dll_GetVersionExA]
test eax, eax
je 0x1400150f6
mov eax, dword [rsp + 0xa4]
cmp eax, 5
jne 0x140014e60
cmp dword [rsp + 0xa8], 2
je 0x140014e69
jmp 0x140014f5f
cmp eax, 6
jne 0x140014f5f
call fcn.1400141f0
test eax, eax
je 0x140014f57
mov r8d, 0x40
lea rdx, [rsp + 0x60]
mov ecx, 0x52534d42
call qword [0x140025ad0]
test eax, eax
je 0x1400150da
xor r9d, r9d
xor r8d, r8d
mov edx, dword [rsp + 0x60]
mov ecx, 0x52534d42
call qword [0x140025ac8]
mov ebx, eax
test eax, eax
je 0x1400150da
mov rcx, rbx
call sub.MSVCR90.dll_void____ptr64___cdecl_operator_new_unsigned_long_long_unsigned___int64__
mov rbp, rax
mov r9d, ebx
mov r8, rax
mov edx, dword [rsp + 0x60]
mov ecx, 0x52534d42
call qword [0x140025ac8]
cmp eax, ebx
ja 0x140014f4a
movzx ebx, word [rbp + 4]
mov word [rsp + 0x31], bx
movzx ecx, byte [rbp + 1]
mov byte [rsp + 0x26], cl
movzx ecx, byte [rbp + 2]
mov byte [rsp + 0x27], cl
mov edx, ebx
lea rcx, [rbp + 8]
call fcn.1400144b0
mov word [rsp + 0x37], ax
lea rcx, [rbx + 0x10]
call sub.MSVCR90.dll_void____ptr64___cdecl_operator_new_unsigned_long_long_unsigned___int64__
mov qword [rsi + 0x22], rax
lea rdx, [rsp + 0x30]
mov rcx, qword [rdx]
mov qword [rax], rcx
movzx ecx, word [rdx + 8]
mov word [rax + 8], cx
mov rcx, qword [rsi + 0x22]
lea rdx, [rsp + 0x24]
mov eax, dword [rdx]
mov dword [rcx + 0xa], eax
movzx eax, word [rdx + 4]
mov word [rcx + 0xe], ax
mov rcx, qword [rsi + 0x22]
add rcx, 0x10
mov r8, rbx
lea rdx, [rbp + 8]
call sub.MSVCR90.dll_memcpy
mov rcx, rbp
call sub.MSVCR90.dll_void___cdecl_operator_delete_void____ptr64_
jmp 0x1400150da
mov rax, rsi
jmp 0x1400150f9
call fcn.1400143c0
test al, al
je 0x1400150da
call fcn.1400142e0
mov r12, rax
test rax, rax
je 0x1400150da
lea r9, [rsp + 0x44]
lea r8, [rsp + 0x2c]
lea rdx, [rsp + 0x20]
mov rcx, rax
call fcn.140014270
test al, al
je 0x1400150da
mov ebp, dword [rsp + 0x44]
mov edi, ebx
movsxd rdx, edi
add rdx, rbp
mov r8d, 4
lea rcx, str._SM_
call fcn.140015a6a
test eax, eax
je 0x140014fcd
inc edi
cmp edi, 0xffff
jl 0x140014fa2
jmp 0x1400150d3
movsxd rcx, edi
lea rdx, [rsp + 0x24]
mov eax, dword [rcx + rbp + 4]
mov dword [rdx], eax
movzx eax, word [rcx + rbp + 8]
mov word [rdx + 4], ax
cmp edi, 0xffff
jge 0x1400150d3
movsxd rdx, ebx
add rdx, rbp
mov r8d, 5
lea rcx, str._DMI_
call fcn.140015a6a
test eax, eax
je 0x14001501b
inc ebx
cmp ebx, 0xffff
jl 0x140014ff0
jmp 0x1400150d3
movsxd rcx, ebx
lea rdx, [rsp + 0x30]
mov rax, qword [rcx + rbp + 5]
mov qword [rdx], rax
movzx eax, word [rcx + rbp + 0xd]
mov word [rdx + 8], ax
cmp ebx, 0xffff
jge 0x1400150d3
mov rbx, qword [rsp + 0x30]
shr rbx, 0x18
mov dword [rsp + 0x20], ebx
mov dword [rsp + 0x2c], 0xffff
lea r9, [rsp + 0x40]
lea r8, [rsp + 0x2c]
lea rdx, [rsp + 0x20]
mov rcx, r12
call fcn.140014270
test al, al
je 0x1400150d3
sub ebx, dword [rsp + 0x20]
mov edi, dword [rsp + 0x40]
add edi, ebx
movzx ebx, word [rsp + 0x31]
lea rcx, [rbx + 0x10]
call sub.MSVCR90.dll_void____ptr64___cdecl_operator_new_unsigned_long_long_unsigned___int64__
mov qword [rsi + 0x22], rax
lea rdx, [rsp + 0x30]
mov rcx, qword [rdx]
mov qword [rax], rcx
movzx ecx, word [rdx + 8]
mov word [rax + 8], cx
mov r9, qword [rsi + 0x22]
lea rcx, [rsp + 0x24]
mov eax, dword [rcx]
mov dword [r9 + 0xa], eax
movzx eax, word [rcx + 4]
mov word [r9 + 0xe], ax
mov rcx, qword [rsi + 0x22]
add rcx, 0x10
mov r8, rbx
mov rdx, rdi
call sub.MSVCR90.dll_memcpy
mov ecx, dword [rsp + 0x40]
call fcn.140014260
mov ecx, ebp
call fcn.140014260
mov rdx, qword [rsi + 0x22]
test rdx, rdx
je 0x1400150f1
mov rcx, rsi
call fcn.140014cb0
nop
mov rax, rsi
jmp 0x1400150f9
mov rax, rsi
jmp 0x1400150f9
mov rax, rsi
mov rcx, qword [rsp + 0x140]
xor rcx, rsp
call fcn.140015270
lea r11, [rsp + 0x150]
mov rbx, qword [r11 + 0x28]
mov rbp, qword [r11 + 0x30]
mov rsp, r11
pop r12
pop rdi
pop rsi
ret