Function at 0x561be9
Capabilities:
Check os version

Disassembly:
sub esp, 0x118
push ebx
push ebp
push esi
push edi
push dword [0x7ea840]
call fcn.0058c83f
cmp dword [0x7e6428], 0
mov esi, eax
jne 0x561d5b
mov edi, 0xa8
push edi
push 0
push 0x7e6380
call fcn.0052bb00
add esp, 0xc
mov dword [0x7e6380], 0x1b
mov dword [0x7e6384], edi
mov dword [0x7e6388], 0x56151f
mov dword [0x7e638c], 0x56186f
mov dword [0x7e63a4], 0x56129d
mov dword [0x7e63b4], 0x561865
mov dword [0x7e63ac], 0x561810
mov dword [0x7e63a8], 0x561ed9
mov dword [0x7e6394], 0x5623c8
mov dword [0x7e6390], 0x561ae6
mov dword [0x7e6398], 0x561b2f
mov dword [0x7e639c], 0x56240f
mov dword [0x7e63c0], 0x561a5d
mov dword [0x7e63c4], 0x562383
mov dword [0x7e63b8], 0x5619c1
mov dword [0x7e63bc], 0x56222f
mov dword [0x7e63f8], 0x562076
mov dword [0x7e63fc], 0x5618d5
mov dword [0x7e6400], 0x5620cf
mov dword [0x7e6404], 0x561965
mov dword [0x7e6408], 0x562141
mov dword [0x7e640c], 0x56199f
mov dword [0x7e63f0], 0x561934
mov dword [0x7e6420], 0x562163
mov dword [0x7e6424], 0x5618b4
call fcn.0056cd89
lea eax, [esp + 0x14]
mov dword [esp + 0x14], 0x114
push eax
call dword [sym.imp.KERNEL32.dll_GetVersionExW]
test eax, eax
je 0x561d51
cmp dword [esp + 0x24], 2
jne 0x561d51
mov eax, dword [0x7e642c]
cmp dword [esp + 0x18], 6
cmovae eax, dword [0x7e55f4]
mov dword [0x7e642c], eax
mov dword [0x7e6428], 1
mov ebp, dword [esp + 0x140]
mov ecx, ebp
not ecx
mov eax, ebp
and ecx, 2
or ecx, 0x50010000
mov edx, ecx
or edx, 5
test al, 1
push 0x1f4
cmovne edx, ecx
mov ebx, edx
or ebx, 0x20
test al, 0x20
push 0
push dword [0x7e42f8]
cmove ebx, edx
call dword [sym.imp.KERNEL32.dll_HeapAlloc]
mov edi, eax
lea eax, [esp + 0x13c]
push eax
lea eax, [esp + 0x13c]
mov dword [esp + 0x14], edi
push eax
lea eax, [esp + 0x13c]
push eax
lea eax, [esp + 0x13c]
push eax
call fcn.00577381
test edi, edi
je 0x561ec6
push 0
push dword [0x7e42f4]
push 0xffffffffffffffff
push dword [esi]
push dword [esp + 0x14c]
push dword [esp + 0x14c]
push dword [esp + 0x14c]
push dword [esp + 0x14c]
push ebx
push 0
push str.SysTreeView32
push 0x200
call dword [sym.imp.USER32.dll_CreateWindowExW]
mov edi, eax
test edi, edi
je 0x561eca
push dword [esp + 0x12c]
push dword [0x7ea844]
call fcn.0058c8cf
push 0x562456
push 0xfffffffffffffffc
push edi
mov esi, eax
call dword [sym.imp.USER32.dll_SetWindowLongW]
push 4
push 4
push 0x112c
push edi
mov dword [0x7e6430], eax
call dword [sym.imp.USER32.dll_SendMessageW]
mov eax, dword [esp + 0x10]
push 0x7e6380
push edi
push esi
push dword [esp + 0x138]
mov dword [esi + 0x14], eax
mov dword [esi + 0x18], 0x19
call fcn.0056cf49
mov edi, eax
mov eax, 0x100
test eax, ebp
je 0x561eca
or ebx, eax
push ebx
push 0xfffffffffffffff0
push dword [esi]
call dword [sym.imp.USER32.dll_SetWindowLongW]
test ebp, 0x10000
je 0x561eca
call fcn.005725fd
cmp eax, 0x3c
jg 0x561e99
push esi
call fcn.00561752
pop ecx
push 0
push 2
push 0x1108
push dword [esi]
call dword [sym.imp.USER32.dll_SendMessageW]
test eax, eax
je 0x561eb6
push eax
push dword [esi]
call fcn.00570c2c
push esi
push str.PB_3State
push dword [esi]
call dword [sym.imp.USER32.dll_SetPropW]
jmp 0x561eca
mov edi, dword [esp + 0x10]
mov eax, edi
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x118
ret 0x18