Function at 0x4a567c
Capabilities:
Acquire debug privileges

Disassembly:
push ebp
mov ebp, esp
add esp, 0xfffffb9c
push ebx
push esi
push edi
xor ecx, ecx
mov dword [ebp - 0x460], ecx
mov dword [ebp - 0x464], ecx
mov dword [ebp - 0xc], ecx
mov dword [ebp - 0x10], ecx
mov dword [ebp - 0x14], ecx
mov dword [ebp - 0x18], ecx
mov dword [ebp - 8], edx
mov dword [ebp - 4], eax
mov eax, dword [ebp - 4]
call sub.rtl120.bpl__System__UStrAddRef_qqrpv
mov eax, dword [ebp - 8]
call sub.rtl120.bpl__System__UStrAddRef_qqrpv
xor eax, eax
push ebp
push 0x4a5899
push dword fs:[eax]
mov dword fs:[eax], esp
xor eax, eax
push ebp
push 0x4a56ea
push dword fs:[eax]
mov dword fs:[eax], esp
mov eax, 0x4a58ac
mov dl, 1
call fcn.004a55d4
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x4a56f4
xor eax, eax
mov dword [ebp - 0x1c], eax
xor eax, eax
push ebp
push 0x4a5864
push dword fs:[eax]
mov dword fs:[eax], esp
lea eax, [ebp - 0x10]
mov ecx, dword [ebp - 4]
mov edx, dword [ebp - 8]
call sub.rtl120.bpl__System__UStrCat3_qqrr20System_UnicodeStringx20System_UnicodeStringt2
lea edx, [ebp - 0x14]
mov eax, dword [ebp - 4]
call fcn.004076f8
xor edx, edx
mov eax, 2
call fcn.0040e318
mov esi, eax
mov dword [ebp - 0x254], 0x22c
lea edx, [ebp - 0x254]
mov eax, esi
call fcn.0040e338
cmp eax, 1
sbb ebx, ebx
inc ebx
call sub.kernel32.dll_GetCurrentProcessId
mov dword [ebp - 0x28], eax
jmp 0x4a584c
lea eax, [ebp - 0x464]
lea edx, [ebp - 0x230]
mov ecx, 0x104
call sub.rtl120.bpl__System__UStrFromWArray_qqrr20System_UnicodeStringpbi
mov eax, dword [ebp - 0x464]
lea edx, [ebp - 0x460]
call fcn.00407840
mov eax, dword [ebp - 0x460]
lea edx, [ebp - 0x18]
call fcn.004076f8
mov edx, dword [ebp - 0x14]
mov eax, dword [ebp - 0x18]
call sub.rtl120.bpl__System_Pos_qqrx20System_UnicodeStringt1
test eax, eax
jle 0x4a5839
mov eax, dword [ebp - 0x24c]
cmp eax, dword [ebp - 0x28]
je 0x4a5839
mov eax, dword [ebp - 0x24c]
push eax
push 0
push 0x1f0fff
call sub.kernel32.dll_OpenProcess
mov edi, eax
lea eax, [ebp - 0x24]
push eax
lea edx, [ebp - 0x20]
mov ecx, 4
mov eax, edi
call fcn.004368d8
push 0x208
lea ecx, [ebp - 0x45c]
mov edx, dword [ebp - 0x20]
mov eax, edi
call fcn.00436908
test eax, eax
jne 0x4a57fc
lea eax, [ebp - 0xc]
xor edx, edx
call sub.rtl120.bpl__System__UStrLAsg_qqrr20System_UnicodeStringx20System_UnicodeString
jmp 0x4a580f
lea eax, [ebp - 0xc]
lea edx, [ebp - 0x45c]
mov ecx, 0x104
call sub.rtl120.bpl__System__UStrFromWArray_qqrr20System_UnicodeStringpbi
mov edx, dword [ebp - 0x10]
mov eax, dword [ebp - 0xc]
call fcn.00407718
test eax, eax
jne 0x4a5839
push 0
mov eax, dword [ebp - 0x24c]
push eax
push 0
push 1
call sub.kernel32.dll_OpenProcess
push eax
call sub.kernel32.dll_TerminateProcess
mov dword [ebp - 0x1c], eax
lea edx, [ebp - 0x254]
mov eax, esi
call fcn.0040e358
cmp eax, 1
sbb ebx, ebx
inc ebx
test bl, bl
jne 0x4a5758
push esi
call sub.kernel32.dll_CloseHandle
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x4a586e
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
push 0x4a58a0
lea eax, [ebp - 0x464]
mov edx, 2
call sub.rtl120.bpl__System__UStrArrayClr_qqrpvi
lea eax, [ebp - 0x18]
mov edx, 6
call sub.rtl120.bpl__System__UStrArrayClr_qqrpvi
ret