Function at 0x40bd98
Capabilities:
Check os version

Disassembly:
push ebp
mov ebp, esp
add esp, 0xfffffe24
push ebx
xor edx, edx
mov dword [ebp - 0x1dc], edx
mov dword [ebp - 4], eax
xor eax, eax
push ebp
push 0x40c2dc
push dword fs:[eax]
mov dword fs:[eax], esp
cmp byte [0x4e0b11], 0
je 0x40bdd1
cmp dword [0x4e729c], 0
jne 0x40c2b0
mov byte [0x4e0b11], 1
call sub.kernel32.dll_GetVersion
test eax, 0x80000000
jne 0x40be52
lea eax, [ebp - 0x1b4]
mov edx, 0x11c
call fcn.00403d90
mov dword [ebp - 0x1b4], 0x11c
push 0x40c2e8
push 0x40c304
call sub.kernel32.dll_GetModuleHandleW
push eax
call fcn.00403598
mov ebx, eax
test ebx, ebx
je 0x40be2a
lea eax, [ebp - 0x1b4]
push eax
call ebx
test eax, eax
je 0x40beac
lea eax, [ebp - 0x1b4]
push eax
call sub.kernel32.dll_GetVersionExW
test eax, eax
jne 0x40beac
mov dword [ebp - 0x1b4], 0x114
lea eax, [ebp - 0x1b4]
push eax
call sub.kernel32.dll_GetVersionExW
jmp 0x40beac
lea eax, [ebp - 0x98]
mov edx, 0x94
call fcn.00403d90
mov dword [ebp - 0x98], 0x94
lea eax, [ebp - 0x98]
push eax
call sub.kernel32.dll_GetVersionExA
lea edx, [ebp - 0x1b4]
lea eax, [ebp - 0x98]
mov ecx, 0x94
call sub.rtl250.bpl__System_Move_qqrpxvpvi
mov ecx, 0x80
lea eax, [ebp - 0x84]
lea edx, [ebp - 0x1a0]
movzx ebx, byte [eax]
mov word [edx], bx
add edx, 2
inc eax
dec ecx
jne 0x40be9f
mov eax, dword [ebp - 0x1b0]
mov dword [0x4e7280], eax
mov eax, dword [ebp - 0x1ac]
mov dword [0x4e7284], eax
mov eax, 0x4e728c
lea edx, [ebp - 0x1a0]
mov ecx, 0x80
call sub.rtl250.bpl__System__UStrFromWArray_qqrr20System_UnicodeStringpbi
mov eax, dword [ebp - 0x1a4]
cmp eax, 1
sete dl
mov byte [0x4e7290], dl
cmp eax, 2
sete al
mov byte [0x4e7292], al
cmp byte [0x4e7290], 0
je 0x40bf0b
movzx eax, word [ebp - 0x1a8]
mov dword [0x4e7288], eax
jmp 0x40bf16
mov eax, dword [ebp - 0x1a8]
mov dword [0x4e7288], eax
mov byte [0x4e7294], 0
xor eax, eax
mov dword [0x4e7298], eax
cmp byte [0x4e7290], 0
je 0x40bfd0
mov eax, dword [0x4e7280]
sub eax, 4
jb 0x40bfb8
je 0x40bf3f
jmp 0x40bfb1
mov eax, dword [0x4e7284]
sub eax, 0xa
jb 0x40bf53
je 0x40bf71
dec eax
sub eax, 0x50
jb 0x40bf9f
jmp 0x40bfa8
cmp dword [0x4e7288], 0x3e8
jbe 0x40bf68
mov byte [0x4e7294], 2
jmp 0x40bfb8
mov byte [0x4e7294], 1
jmp 0x40bfb8
mov eax, dword [0x4e7288]
cmp eax, 0xa8c
jbe 0x40bf86
mov byte [0x4e7294], 5
jmp 0x40bfb8
cmp eax, 0x7d0
jbe 0x40bf96
mov byte [0x4e7294], 4
jmp 0x40bfb8
mov byte [0x4e7294], 3
jmp 0x40bfb8
mov byte [0x4e7294], 5
jmp 0x40bfb8
mov byte [0x4e7294], 6
jmp 0x40bfb8
mov byte [0x4e7294], 6
movzx eax, byte [0x4e7294]
mov byte [0x4e7291], al
mov byte [0x4e7293], 0
jmp 0x40c1c3
cmp byte [0x4e7292], 0
je 0x40c1c3
mov eax, dword [0x4e7280]
cmp eax, 0xa
ja case.0x40bfeb.7
jmp dword [eax*4 + 0x40bff2]
mov byte [0x4e7294], 7
jmp 0x40c116
mov byte [0x4e7294], 8
jmp 0x40c116
mov eax, dword [0x4e7284]
sub eax, 1
jb 0x40c044
je 0x40c050
jmp 0x40c05c
mov byte [0x4e7294], 9
jmp 0x40c116
mov byte [0x4e7294], 0xa
jmp 0x40c116
cmp byte [ebp - 0x9a], 1
jne 0x40c071
mov byte [0x4e7294], 0xa
jmp 0x40c116
mov byte [0x4e7294], 0xb
jmp 0x40c116
mov eax, dword [0x4e7284]
sub eax, 1
jb 0x40c091
je 0x40c0ac
dec eax
je 0x40c0c7
dec eax
je 0x40c0e2
jmp 0x40c0fd
cmp byte [ebp - 0x9a], 1
jne 0x40c0a3
mov byte [0x4e7294], 0xc
jmp 0x40c116
mov byte [0x4e7294], 0xd
jmp 0x40c116
cmp byte [ebp - 0x9a], 1
jne 0x40c0be
mov byte [0x4e7294], 0xe
jmp 0x40c116
mov byte [0x4e7294], 0xf
jmp 0x40c116
cmp byte [ebp - 0x9a], 1
jne 0x40c0d9
mov byte [0x4e7294], 0x10
jmp 0x40c116
mov byte [0x4e7294], 0x11
jmp 0x40c116
cmp byte [ebp - 0x9a], 1
jne 0x40c0f4
mov byte [0x4e7294], 0x12
jmp 0x40c116
mov byte [0x4e7294], 0x13
jmp 0x40c116
mov byte [0x4e7294], 0x15
jmp 0x40c116
mov byte [0x4e7294], 0x14
jmp 0x40c116
mov byte [0x4e7294], 0x15
mov byte [0x4e7291], 0
movzx eax, byte [0x4e7294]
mov byte [0x4e7293], al
cmp dword [ebp - 0x1b4], 0x11c
jb 0x40c143
movzx eax, word [ebp - 0xa0]
mov dword [0x4e7298], eax
jmp 0x40c17f
mov eax, dword [0x4e728c]
call sub.rtl250.bpl__System__UStrLen_qqrx20System_UnicodeString
cmp eax, 0xe
jl 0x40c17f
mov eax, dword [0x4e728c]
call sub.rtl250.bpl__System__UStrLen_qqrx20System_UnicodeString
sub eax, 0xd
push eax
mov eax, 0x4e728c
call sub.rtl250.bpl__System__UniqueStringU_qqrr20System_UnicodeString
lea edx, [eax + 0x1a]
mov ebx, dword [0x4e4c6c]
mov ebx, dword [ebx]
xor eax, eax
pop ecx
call ebx
mov dword [0x4e7298], eax
push 0x40c318
push 0x40c340
call sub.kernel32.dll_GetModuleHandleW
push eax
call fcn.00403598
mov ebx, eax
test ebx, ebx
je 0x40c1c3
lea eax, [ebp - 0x1d8]
mov edx, 0x24
call fcn.00403d90
lea eax, [ebp - 0x1d8]
push eax
call ebx
cmp word [ebp - 0x1d8], 9
sete al
mov byte [0x4e7295], al
lea eax, [ebp - 0x1dc]
movzx edx, byte [0x4e7294]
mov edx, dword [edx*4 + 0x4e0a90]
mov ecx, 0
call sub.rtl250.bpl__System__LStrFromPChar_qqrr27System__AnsiStringT_us_i0__pcus
mov edx, dword [ebp - 0x1dc]
mov eax, 0x4e729c
call sub.rtl250.bpl__System__UStrFromLStr_qqrr20System_UnicodeStringx27System__AnsiStringT_us_i0__
cmp byte [0x4e7292], 0
je 0x40c2b0
push 0x59
call sub.user32.dll_GetSystemMetrics
test eax, eax
je 0x40c218
mov eax, 0x4e729c
mov edx, 0x40c368
call sub.rtl250.bpl__System__UStrCat_qqrr20System_UnicodeStringx20System_UnicodeString
push 0x56
call sub.user32.dll_GetSystemMetrics
test eax, eax
je 0x40c232
mov eax, 0x4e729c
mov edx, 0x40c37c
call sub.rtl250.bpl__System__UStrCat_qqrr20System_UnicodeStringx20System_UnicodeString
push 0x58
call sub.user32.dll_GetSystemMetrics
test eax, eax
je 0x40c24c
mov eax, 0x4e729c
mov edx, 0x40c3a0
call sub.rtl250.bpl__System__UStrCat_qqrr20System_UnicodeStringx20System_UnicodeString
cmp byte [0x4e7294], 0xc
jae 0x40c26f
push 0x57
call sub.user32.dll_GetSystemMetrics
test eax, eax
je 0x40c26f
mov eax, 0x4e729c
mov edx, 0x40c3c0
call sub.rtl250.bpl__System__UStrCat_qqrr20System_UnicodeStringx20System_UnicodeString
cmp byte [0x4e7295], 0
je 0x40c287
mov eax, 0x4e729c
mov edx, 0x40c3e8
call sub.rtl250.bpl__System__UStrCat_qqrr20System_UnicodeStringx20System_UnicodeString
cmp dword [0x4e728c], 0
je 0x40c2b0
push dword [0x4e729c]
push 0x40c400
push dword [0x4e728c]
mov eax, 0x4e729c
mov edx, 3
call sub.rtl250.bpl__System__UStrCatN_qqrv
mov eax, dword [ebp - 4]
mov edx, 0x4e7280
mov ecx, dword [0x40ba2c]
call sub.rtl250.bpl__System__CopyRecord_qqrv
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
push 0x40c2e3
lea eax, [ebp - 0x1dc]
call sub.rtl250.bpl__System__LStrClr_qqrpv
ret