Function at 0xc8218
Capabilities:
Access peb ldr_data
Get kernel32 base address
Get process heap flags
Get process heap force flags
Query environment variable

Disassembly:
push ebp
mov ebp, esp
add esp, 0xfffffee4
push ebx
push esi
push edi
xor edx, edx
mov dword [ebp - 0x118], edx
mov dword [ebp - 0x11c], edx
mov dword [ebp - 0x110], edx
mov dword [ebp - 0x114], edx
mov dword [ebp - 0x108], edx
mov dword [ebp - 0x10c], edx
lea ebx, [ebp - 0x104]
mov esi, dword [0xd3140]
xor eax, eax
push ebp
push 0xc8537
push dword fs:[eax]
mov dword fs:[eax], esp
push 0xff
push ebx
push 0xc8548
call sub.kernel32.dll_GetEnvironmentVariableA
mov eax, esi
mov edx, ebx
mov ecx, pe_nt_image_headers32
call fcn.000111c0
push 0xff
push ebx
push 0xc8554
call sub.kernel32.dll_GetEnvironmentVariableA
lea eax, [esi + 4]
mov edx, ebx
mov ecx, pe_nt_image_headers32
call fcn.000111c0
push 0xff
push ebx
push 0xc8560
call sub.kernel32.dll_GetEnvironmentVariableA
lea eax, [esi + 8]
mov edx, ebx
mov ecx, pe_nt_image_headers32
call fcn.000111c0
push 0xff
push ebx
push 0xc856c
call sub.kernel32.dll_GetEnvironmentVariableA
lea eax, [esi + 0xc]
mov edx, ebx
mov ecx, pe_nt_image_headers32
call fcn.000111c0
push 0xff
push ebx
push 0xc8578
call sub.kernel32.dll_GetEnvironmentVariableA
lea eax, [esi + 0x10]
mov edx, ebx
mov ecx, pe_nt_image_headers32
call fcn.000111c0
push 0xff
push ebx
push 0xc8584
call sub.kernel32.dll_GetEnvironmentVariableA
lea eax, [esi + 0x14]
mov edx, ebx
mov ecx, 0x100
call fcn.000111c0
push 0xff
push ebx
push @Forms@TCustomForm@GetFloating$qqrv
call sub.kernel32.dll_GetEnvironmentVariableA
lea eax, [esi + 0x18]
mov edx, ebx
mov ecx, pe_nt_image_headers32
call fcn.000111c0
push 0xff
push ebx
push 0xc859c
call sub.kernel32.dll_GetEnvironmentVariableA
lea eax, [esi + 0x38]
mov edx, ebx
mov ecx, pe_nt_image_headers32
call fcn.000111c0
push 0xff
push ebx
push 0xc85ac
call sub.kernel32.dll_GetEnvironmentVariableA
lea eax, [esi + 0x1c]
mov edx, ebx
mov ecx, pe_nt_image_headers32
call fcn.000111c0
push 0xff
push ebx
push @Forms@TCustomForm@GetClientRect$qqrv
call sub.kernel32.dll_GetEnvironmentVariableA
lea eax, [esi + 0x20]
mov edx, ebx
mov ecx, 0x100
call fcn.000111c0
push 0xff
push ebx
push 0xc85c8
call sub.kernel32.dll_GetEnvironmentVariableA
lea eax, [esi + 0x24]
mov edx, ebx
mov ecx, pe_nt_image_headers32
call fcn.000111c0
push 0xff
push ebx
push 0xc85d4
call sub.kernel32.dll_GetEnvironmentVariableA
lea eax, [esi + 0x28]
mov edx, ebx
mov ecx, pe_nt_image_headers32
call fcn.000111c0
push 0xff
push ebx
push @Forms@TCustomForm@DefineProperties$qqrp14Classes@TFiler
call sub.kernel32.dll_GetEnvironmentVariableA
lea eax, [esi + 0x2c]
mov edx, ebx
mov ecx, pe_nt_image_headers32
call fcn.000111c0
push 0xff
push ebx
push 0xc85ec
call sub.kernel32.dll_GetEnvironmentVariableA
lea eax, [esi + 0x30]
mov edx, ebx
mov ecx, pe_nt_image_headers32
call fcn.000111c0
push 0xff
push ebx
push 0xc85f8
call sub.kernel32.dll_GetEnvironmentVariableA
lea eax, [esi + 0x3c]
mov edx, ebx
mov ecx, pe_nt_image_headers32
call fcn.000111c0
push 0xff
push ebx
push 0xc8608
call sub.kernel32.dll_GetEnvironmentVariableA
test eax, eax
jne reloc.Vcl50.bpl__Forms_TCustomForm_WndProc_qqrr17Messages_TMessage
call sub.Vcl50.bpl__Sysutils_Date_qqrv
fstp qword [esi + 0x40]
wait
jmp @Forms@TCustomForm@WantChildKey$qqrp17Controls@TControlr17Messages@TMessage
lea eax, [ebp - 0x108]
push eax
lea eax, [ebp - 0x10c]
mov edx, ebx
mov ecx, pe_nt_image_headers32
call fcn.000111c0
mov eax, dword [ebp - 0x10c]
mov ecx, 4
mov edx, 1
call fcn.00011208
mov eax, dword [ebp - 0x108]
call sub.Vcl50.bpl__Sysutils_StrToInt_qqrx17System_AnsiString
mov edi, eax
lea eax, [ebp - 0x110]
push eax
lea eax, [ebp - 0x114]
mov edx, ebx
mov ecx, pe_nt_image_headers32
call fcn.000111c0
mov eax, dword [ebp - 0x114]
mov ecx, 2
mov edx, 5
call fcn.00011208
mov eax, dword [ebp - 0x110]
call sub.Vcl50.bpl__Sysutils_StrToInt_qqrx17System_AnsiString
mov dword [ebp - 4], eax
lea eax, [ebp - 0x118]
push eax
lea eax, [ebp - 0x11c]
mov edx, ebx
mov ecx, 0x100
call fcn.000111c0
mov eax, dword [ebp - 0x11c]
mov ecx, 2
mov edx, 7
call fcn.00011208
mov eax, dword [ebp - 0x118]
call sub.Vcl50.bpl__Sysutils_StrToInt_qqrx17System_AnsiString
mov ebx, eax
mov ecx, ebx
mov dx, word [ebp - 4]
mov eax, edi
call sub.Vcl50.bpl__Sysutils_EncodeDate_qqrususus
fstp qword [esi + 0x40]
wait
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
push 0xc853e
lea eax, [ebp - 0x11c]
mov edx, 6
call fcn.00011188
ret