Function at 0x48b5d0
Capabilities:
Check os version

Disassembly:
mov eax, dword fs:[0]
push 0xffffffffffffffff
push 0x4d2130
push eax
mov dword fs:[0], esp
mov eax, dword [0x4fef68]
sub esp, 0x6c
push ebx
push esi
push edi
push eax
mov ebx, ecx
call dword [sym.imp.GDI32.dll_DeleteObject]
push 0x5b8
push 0
push 0x4fef68
call fcn.004a30a0
add esp, 0xc
mov dword [0x4fefec], 7
xor eax, eax
lea esp, [esp]
movzx ecx, word [eax*4 + 0x4dc968]
mov dx, word [eax*4 + 0x4dc96a]
mov dword [eax*4 + 0x4feff0], ecx
mov word [eax*2 + 0x4fef6c], dx
inc eax
cmp eax, dword [0x4fefec]
jl 0x48b620
mov esi, 0x4ff5e8
mov edi, 0x13
push ebx
mov eax, esi
call fcn.0048b260
add esi, 0x18
sub edi, 1
jne 0x48b652
cmp dword [0x4fef68], edi
jne 0x48b6c6
lea eax, [esp + 0x14]
push eax
push 0x5c
push 0x11
call dword [sym.imp.GDI32.dll_GetStockObject]
push eax
call dword [sym.imp.GDI32.dll_GetObjectW]
push edi
mov dword [esp + 0x28], 0x190
call dword [sym.imp.GDI32.dll_CreateCompatibleDC]
push 0x48
mov esi, eax
push 0x5a
push esi
call dword [sym.imp.GDI32.dll_GetDeviceCaps]
push eax
push 8
call dword [sym.imp.KERNEL32.dll_MulDiv]
neg eax
push esi
mov dword [esp + 0x18], eax
call dword [sym.imp.GDI32.dll_DeleteDC]
lea ecx, [esp + 0x14]
push ecx
mov dword [esp + 0x1c], edi
call dword [sym.imp.GDI32.dll_CreateFontIndirectW]
mov dword [0x4fef68], eax
mov esi, dword [0x4ff310]
test esi, esi
je 0x48b6d5
mov eax, dword [esi + 4]
jmp 0x48b6d7
xor eax, eax
test eax, eax
je 0x48b6de
sub eax, 2
mov ebx, dword [sym.imp.KERNEL32.dll_InterlockedDecrement]
test eax, 0xfffffffe
jne 0x48b822
push str.__NT_SYMBOL_PATH_
lea eax, [esp + 0x10]
call fcn.00442e40
mov esi, eax
mov dword [esp + 0x80], 0
mov eax, dword [0x4ff310]
test eax, eax
je 0x48b725
push eax
mov edi, eax
call ebx
test eax, eax
jne 0x48b725
push edi
call fcn.0049e96f
add esp, 4
mov esi, dword [esi]
mov dword [0x4ff310], esi
test esi, esi
je 0x48b73e
push esi
call dword [sym.imp.KERNEL32.dll_InterlockedIncrement]
mov esi, dword [0x4ff310]
mov dword [esp + 0x80], 0xffffffff
mov eax, dword [esp + 0xc]
test eax, eax
je 0x48b769
push eax
mov esi, eax
call ebx
test eax, eax
jne 0x48b763
push esi
call fcn.0049e96f
add esp, 4
mov esi, dword [0x4ff310]
test esi, esi
je 0x48b82d
lea eax, [esi + 8]
test eax, eax
je 0x48b822
cmp word [eax], 0x25
jne 0x48b822
test eax, eax
jne 0x48b78f
mov eax, 0x4d9064
mov ecx, str.__NT_SYMBOL_PATH_
mov dx, word [eax]
cmp dx, word [ecx]
jne 0x48b7ba
test dx, dx
je 0x48b7b6
mov dx, word [eax + 2]
cmp dx, word [ecx + 2]
jne 0x48b7ba
add eax, 4
add ecx, 4
test dx, dx
jne 0x48b794
xor eax, eax
jmp 0x48b7bf
sbb eax, eax
sbb eax, 0xffffffff
test eax, eax
jne 0x48b822
call dword [sym.imp.KERNEL32.dll_GetVersion]
cmp al, 6
jb 0x48b81c
push 0x69
call fcn.0049e995
add esp, 4
mov esi, eax
push 0x5e
lea edx, [esi + 8]
push str.srvhttp:__msdl.microsoft.com_download_symbols
push edx
mov dword [esi], 1
mov dword [esi + 4], 0x5e
call fcn.004a7df0
mov eax, dword [0x4ff310]
add esp, 0xc
test eax, eax
je 0x48b814
push eax
mov edi, eax
call ebx
test eax, eax
jne 0x48b814
push edi
call fcn.0049e96f
add esp, 4
mov dword [0x4ff310], esi
jmp 0x48b822
mov esi, dword [0x4ff310]
test esi, esi
je 0x48b82d
lea eax, [esi + 8]
test eax, eax
jne 0x48b832
mov eax, 0x4d9064
push eax
lea eax, [esp + 0x14]
call fcn.00442e40
mov esi, eax
mov dword [esp + 0x80], 1
mov eax, dword [0x4ff544]
test eax, eax
je 0x48b864
push eax
mov edi, eax
call ebx
test eax, eax
jne 0x48b864
push edi
call fcn.0049e96f
add esp, 4
mov eax, dword [esi]
mov dword [0x4ff544], eax
test eax, eax
je 0x48b876
push eax
call dword [sym.imp.KERNEL32.dll_InterlockedIncrement]
mov dword [esp + 0x80], 0xffffffff
mov eax, dword [esp + 0x10]
test eax, eax
je 0x48b89b
push eax
mov esi, eax
call ebx
test eax, eax
jne 0x48b89b
push esi
call fcn.0049e96f
add esp, 4
mov ecx, dword [esp + 0x78]
pop edi
pop esi
mov dword fs:[0], ecx
pop ebx
add esp, 0x78
ret