Function at 0x496135
Capabilities:
Check os version

Disassembly:
mov edi, edi
push ebp
mov ebp, esp
sub esp, 0x90
push ebx
push esi
xor esi, esi
cmp dword [ebp + 0xc], esi
push edi
mov dword [ebp - 0x20], esi
mov dword [ebp - 0x1c], esi
mov dword [ebp - 0x24], esi
mov dword [ebp - 4], esi
je 0x49615d
mov eax, dword [ebp + 0x14]
cmp eax, esi
jne 0x496165
xor eax, eax
inc eax
jmp 0x496533
test byte [eax + 0xd], 0x20
mov ebx, dword [ebp + 8]
mov cx, word [ebx + 0x188fc]
mov word [ebp - 0x28], cx
je 0x496199
call dword [sym.imp.KERNEL32.dll_GetVersion]
movzx ecx, al
cmp ecx, 5
jb 0x49618c
cmp ah, 1
jae 0x496199
cmp ecx, 6
jae 0x496199
xor edi, edi
inc edi
mov dword [ebp - 0x20], edi
jmp 0x49619c
xor edi, edi
inc edi
cmp word [ebx + 0x14a], di
mov eax, dword [ebp + 0x24]
jne 0x4961b2
cmp dword [eax], 0xffffff
je 0x4961b2
mov dword [eax], esi
push edi
push esi
push esi
push eax
push ebx
call fcn.00493f82
push dword [ebp + 0x14]
push ebx
call fcn.0047b432
push eax
push dword [ebp + 0x14]
push ebx
call fcn.0047b445
cmp dword [ebp + 0xc], esi
mov dword [ebp - 0x40], eax
mov dword [ebp + 8], esi
jbe 0x496531
mov esi, dword [ebp + 0x10]
add esi, 4
mov dword [ebp + 0x24], esi
jmp 0x4961ec
mov esi, dword [ebp + 0x24]
lea eax, [ebp - 0x90]
lea ecx, [ebp - 0x2c]
push ecx
mov dword [ebp - 0x2c], eax
lea eax, [esi - 4]
push eax
push edi
push edi
push dword [ebp + 0x14]
call sub.GDI32.dll_FONTOBJ_cGetGlyphs
cmp eax, edi
jne 0x49653a
mov edx, dword [ebp - 0x2c]
mov dword [esi], edx
cmp word [ebx + 0x5e], 0x12c
jle 0x4962b4
cmp dword [ebx + 0x199e4], edi
jne 0x49628a
movsx eax, word [ebx + 0xd62]
dec eax
je 0x496264
dec eax
je 0x496252
dec eax
jne 0x4962b0
mov eax, dword [ebp + 0x18]
mov eax, dword [eax + 0x20]
mov edi, dword [ebp + 8]
mov cx, 0xff
cmp cx, word [eax + edi*2]
sbb eax, eax
neg eax
mov dword [ebp - 4], eax
jmp 0x4962b4
xor eax, eax
cmp dword [ebx + 0x50ac], 0x50a
setg al
inc eax
jmp 0x49624d
cmp dword [ebx + 0x50ac], 0x6f6
mov eax, dword [ebp + 0x18]
mov edi, dword [ebp + 8]
mov eax, dword [eax + 0x20]
jle 0x496241
xor ecx, ecx
cmp word [eax + edi*2], 0xff
seta cl
inc ecx
mov dword [ebp - 4], ecx
jmp 0x4962b4
mov eax, dword [ebp + 0x18]
mov eax, dword [eax + 0x20]
mov ecx, dword [ebp + 8]
cmp word [eax + ecx*2], 0xff
jbe 0x4962b0
movsx eax, word [ebx + 0xd62]
dec eax
je 0x49637b
dec eax
je 0x49638f
and dword [ebp - 4], 0
mov ecx, dword [edx]
mov eax, dword [esi + 8]
add eax, dword [ecx + 4]
mov ecx, dword [ecx]
add ecx, dword [esi + 4]
mov dword [ebp - 0x38], eax
mov dword [ebp - 0x3c], ecx
mov esi, dword [edx]
mov esi, dword [esi + 8]
add esi, ecx
mov dword [ebp - 0x34], esi
mov ecx, dword [edx]
mov ecx, dword [ecx + 0xc]
add ecx, eax
lea eax, [ebp - 0x3c]
push eax
push ebx
mov dword [ebp - 0x30], ecx
call fcn.0049d2d4
lea esi, [ebp - 0x3c]
lea edi, [ebp - 0x50]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
lea eax, [ebp - 0x50]
push eax
lea eax, [ebp - 0x3c]
push eax
movsd dword es:[edi], dword [esi]
lea eax, [ebp + 0x28]
push eax
push ebx
movsd dword es:[edi], dword [esi]
call fcn.00494e75
mov esi, eax
cmp si, 2
je 0x49651b
cmp si, 1
mov edx, dword [ebp + 0x24]
mov eax, dword [edx]
mov ecx, dword [eax]
mov eax, dword [ecx + 0xc]
mov edi, dword [ecx + 8]
mov dword [ebp - 0x10], eax
lea eax, [ecx + 0x10]
mov dword [ebp - 0x14], edi
mov dword [ebp - 8], eax
je 0x4964e4
mov esi, dword [ebp - 0x10]
imul esi, edi
cmp esi, 0x5000
jg 0x4964e4
mov ecx, dword [ebp - 0x40]
xor esi, esi
lea eax, [ecx + 0x12a0]
mov dword [ebp - 0xc], 0x800
mov dword [ebp + 0x10], esi
mov dword [ebp - 0x18], eax
cmp ecx, esi
je 0x496369
mov eax, dword [ebp - 0x18]
movzx eax, word [eax]
cmp eax, dword [edx - 4]
je 0x4963a3
inc dword [ebp + 0x10]
add dword [ebp - 0x18], 2
cmp dword [ebp + 0x10], 0x800
jb 0x49635a
jmp 0x4963bc
cmp dword [ebx + 0x199e0], edi
jne 0x49639b
cmp dword [ebx + 0x50ac], 0x6f6
jl 0x49639b
mov dword [ebp - 4], 2
jmp 0x4962b4
mov dword [ebp - 4], edi
jmp 0x4962b4
mov eax, dword [ebp + 0x10]
mov di, word [ecx + eax*2 + 0x2a0]
cmp di, 0xffff
mov dword [ebp - 0xc], eax
jne 0x4964cb
lea eax, [ebx + 0x188ac]
cmp word [eax], 0xfff
jbe 0x4963cc
mov word [eax], si
xor edi, edi
cmp ecx, esi
mov di, word [eax]
lea edx, [edi + 1]
mov word [eax], dx
je 0x4963ed
mov eax, dword [ebp - 0xc]
cmp eax, 0x800
je 0x4963ed
mov word [ecx + eax*2 + 0x2a0], di
push esi
push esi
push esi
push esi
lea eax, [ebp - 0x24]
push eax
lea eax, [ebp - 0x1c]
push eax
push dword [ebp - 0x10]
push dword [ebp - 0x14]
push esi
push dword [ebp - 8]
push esi
push dword [ebp - 0x28]
call fcn.00495b00
push eax
push esi
mov dword [ebp + 0x10], eax
call dword [sym.imp.KERNEL32.dll_GlobalAlloc]
cmp eax, esi
mov dword [ebp - 0xc], eax
je 0x49653a
push esi
push esi
push esi
push esi
lea ecx, [ebp - 0x24]
push ecx
lea ecx, [ebp - 0x1c]
push ecx
push dword [ebp - 0x10]
push dword [ebp - 0x14]
push eax
push dword [ebp - 8]
push 1
push dword [ebp - 0x28]
call fcn.00495b00
movsx eax, word [ebx + 0x5e]
mov dword [ebp - 8], eax
fild dword [ebp - 8]
fmul dword [ebx + 0x16294]
call fcn.004a9810
movsx eax, ax
imul eax, dword [ebx + 0x50ac]
cdq
push 0x48
pop ecx
idiv ecx
sar eax, 8
mov dword [ebp - 8], eax
fild dword [ebp - 8]
fcom dword [0x405bd4]
fnstsw ax
test ah, 1
jne 0x49648e
fcom dword [0x405bb0]
fnstsw ax
test ah, 0x41
jp 0x49648e
fstp st(0)
fld1
push dword [ebp + 0x10]
call fcn.004a9810
push eax
push dword [ebp - 0x1c]
lea eax, [ebx + 0x166f0]
push dword [ebp - 0x24]
push edi
push eax
call fcn.004b853e
push dword [ebp - 0xc]
lea eax, [ebx + 0x166f0]
push esi
push esi
push esi
push dword [ebp + 0x10]
push eax
call fcn.004bb56b
push dword [ebp - 0xc]
call dword [sym.imp.KERNEL32.dll_GlobalFree]
mov edx, dword [ebp + 0x24]
push dword [ebp - 0x20]
add edx, 0xfffffffc
push dword [ebp - 4]
push edi
push dword [ebp - 0x10]
push dword [ebp - 0x14]
push edx
push ebx
call fcn.004958a6
jmp 0x49651b
push dword [ebp - 0x20]
lea esi, [ebp - 0x50]
push dword [ebp - 4]
sub esp, 0x10
mov edi, esp
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
sub esp, 0x10
mov edi, esp
lea esi, [ebp - 0x3c]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
sub esp, 0x10
mov edi, esp
lea esi, [ebp + 0x28]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
push eax
push dword [ecx + 0xc]
movsd dword es:[edi], dword [esi]
push dword [ecx + 8]
movsd dword es:[edi], dword [esi]
push ebx
call fcn.00495e78
inc dword [ebp + 8]
mov eax, dword [ebp + 8]
add dword [ebp + 0x24], 0x10
xor edi, edi
inc edi
cmp eax, dword [ebp + 0xc]
jb 0x4961e9
mov eax, edi
pop edi
pop esi
pop ebx
leave
ret 0x30
xor eax, eax
jmp 0x496533