Function at 0x406830
Capabilities:
Check os version

Disassembly:
push ebp
mov ebp, esp
mov ecx, 4
push 0
push 0
dec ecx
jne 0x406838
push ecx
push ebx
push esi
push edi
mov esi, edx
mov ebx, eax
xor eax, eax
push ebp
push 0x406a4a
push dword fs:[eax]
mov dword fs:[eax], esp
call sub.kernel32.dll_GetVersion
test eax, 0x80000000
je 0x40687b
lea edx, [ebp - 0xc]
mov eax, ebx
call dword [0x595068]
mov edx, dword [ebp - 0xc]
mov eax, esi
call sub.rtl120.bpl__System__UStrFromLStr_qqrr20System_UnicodeStringx27System__AnsiStringT_us_i0__
jmp 0x406a17
test ebx, 0xc0000000
je 0x4068c3
lea edx, [ebp - 0x10]
mov eax, dword [0x5952f4]
call fcn.00406a68
mov eax, dword [ebp - 0x10]
call sub.rtl120.bpl__System__LStrToPChar_qqrx27System__AnsiStringT_us_i0__
push eax
lea edx, [ebp - 0x14]
mov eax, dword [0x5950d8]
call fcn.00406a68
mov eax, dword [ebp - 0x14]
call sub.rtl120.bpl__System__LStrToPChar_qqrx27System__AnsiStringT_us_i0__
push eax
call sub.kernel32.dll_GetModuleHandleA
push eax
call sub.kernel32.dll_GetProcAddress
test eax, eax
je 0x4068c3
push ebx
call eax
mov ebx, eax
mov edi, 0x1300
cmp ebx, 0x834
jb 0x406908
cmp ebx, 0xbb7
ja 0x406908
push 2
push 0
lea edx, [ebp - 0x18]
mov eax, dword [0x5952f0]
call fcn.00406a68
mov eax, dword [ebp - 0x18]
call sub.rtl120.bpl__System__LStrToPChar_qqrx27System__AnsiStringT_us_i0__
push eax
call sub.kernel32.dll_LoadLibraryExA
mov dword [ebp - 8], eax
cmp dword [ebp - 8], 0
je 0x40690d
or edi, 0x800
jmp 0x40690d
xor eax, eax
mov dword [ebp - 8], eax
xor eax, eax
push ebp
push 0x406a10
push dword fs:[eax]
mov dword fs:[eax], esp
push 0
push 0
lea eax, [ebp - 4]
push eax
push 0x400
push ebx
mov eax, dword [ebp - 8]
push eax
push edi
call sub.kernel32.dll_FormatMessageW
test eax, eax
je 0x4069b0
xor eax, eax
push ebp
push 0x4069a9
push dword fs:[eax]
mov dword fs:[eax], esp
mov eax, esi
mov edx, dword [ebp - 4]
call sub.rtl120.bpl__System__UStrFromPWChar_qqrr20System_UnicodeStringpb
mov eax, dword [esi]
call sub.rtl120.bpl__System__UStrLen_qqrx20System_UnicodeString
mov ebx, eax
test ebx, ebx
jbe 0x406992
mov eax, dword [esi]
movzx edi, word [eax + ebx*2 - 2]
cmp di, 0xd
jne 0x406979
mov eax, esi
call sub.rtl120.bpl__System__UniqueStringU_qqrr20System_UnicodeString
mov word [eax + ebx*2 - 2], 0x20
jmp 0x40698d
cmp di, 0xa
jne 0x40698d
mov eax, esi
mov ecx, 1
mov edx, ebx
call sub.rtl120.bpl__System__UStrDelete_qqrr20System_UnicodeStringii
dec ebx
test ebx, ebx
ja 0x40695c
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
push 0x4069f3
mov eax, dword [ebp - 4]
push eax
call sub.kernel32.dll_LocalFree
ret
lea edx, [ebp - 0x20]
mov eax, dword [0x5952f8]
call fcn.00406a68
mov edx, dword [ebp - 0x20]
lea eax, [ebp - 0x1c]
call sub.rtl120.bpl__System__UStrFromLStr_qqrr20System_UnicodeStringx27System__AnsiStringT_us_i0__
push dword [ebp - 0x1c]
push 0x406a64
lea eax, [ebp - 0x24]
push eax
mov cx, 0x30
mov edx, 1
mov eax, ebx
call fcn.00405a30
push dword [ebp - 0x24]
mov eax, esi
mov edx, 3
call sub.rtl120.bpl__System__UStrCatN_qqrv
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
push 0x406a17
cmp dword [ebp - 8], 0
je 0x406a0f
mov eax, dword [ebp - 8]
push eax
call sub.kernel32.dll_FreeLibrary
ret
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
push 0x406a51
lea eax, [ebp - 0x24]
call sub.rtl120.bpl__System__UStrClr_qqrpv
lea eax, [ebp - 0x20]
call sub.rtl120.bpl__System__LStrClr_qqrpv
lea eax, [ebp - 0x1c]
call sub.rtl120.bpl__System__UStrClr_qqrpv
lea eax, [ebp - 0x18]
mov edx, 4
call sub.rtl120.bpl__System__LStrArrayClr_qqrpvi
ret