Function at 0x43fadc
Capabilities:
Check os version

Disassembly:
push ebp
mov ebp, esp
add esp, 0xffffffa0
push ebx
push esi
push edi
mov eax, 0x5c9c64
call fcn.005496a0
mov dword [ebp - 0x30], 2
lea edx, [ebp + 0x10]
lea eax, [ebp + 0x10]
call fcn.00549a1c
inc dword [ebp - 0x30]
mov word [ebp - 0x3c], 8
lea edx, [ebp + 0xc]
lea eax, [ebp + 0xc]
call fcn.00549a1c
inc dword [ebp - 0x30]
xor edx, edx
mov dword [ebp - 0x50], edx
mov word [ebp - 0x3c], 0x14
mov word [ebp - 0x3c], 0x20
lea eax, [ebp - 0xc]
call fcn.00401fbc
push eax
inc dword [ebp - 0x30]
mov edx, 0x5c7fdf
lea eax, [ebp - 8]
call fcn.005499e4
inc dword [ebp - 0x30]
lea edx, [ebp - 8]
push edx
lea eax, [ebp - 4]
call fcn.00401fbc
push eax
inc dword [ebp - 0x30]
call fcn.0043cae8
pop ecx
lea eax, [ebp - 4]
pop edx
pop ecx
call fcn.00549c60
lea eax, [ebp - 0xc]
push eax
lea eax, [ebp - 0x14]
call fcn.00401fbc
push eax
inc dword [ebp - 0x30]
mov edx, 0x5c7fe5
lea eax, [ebp - 0x10]
call fcn.005499e4
inc dword [ebp - 0x30]
lea edx, [ebp - 0x10]
pop ecx
pop eax
call fcn.00549c60
lea ecx, [ebp - 0x14]
mov ecx, dword [ecx]
mov dl, 1
mov eax, dword [sym.imp.rtl60.bpl__Inifiles_TIniFile_]
call fcn.0043eb44
mov dword [ebp - 0x54], eax
dec dword [ebp - 0x30]
lea eax, [ebp - 0x14]
mov edx, 2
call fcn.00549c08
dec dword [ebp - 0x30]
lea eax, [ebp - 0x10]
mov edx, 2
call fcn.00549c08
dec dword [ebp - 0x30]
lea eax, [ebp - 0xc]
mov edx, 2
call fcn.00549c08
dec dword [ebp - 0x30]
lea eax, [ebp - 8]
mov edx, 2
call fcn.00549c08
dec dword [ebp - 0x30]
lea eax, [ebp - 4]
mov edx, 2
call fcn.00549c08
push 0
mov ecx, dword [ebp + 0x10]
mov edx, dword [ebp + 0xc]
mov eax, dword [ebp - 0x54]
mov ebx, dword [eax]
call dword [ebx + 8]
mov dword [ebp - 0x50], eax
mov word [ebp - 0x3c], 8
mov eax, dword [ebp - 0x54]
mov dword [ebp - 0x1c], eax
cmp dword [ebp - 0x1c], 0
je 0x43fc39
mov edx, dword [ebp - 0x1c]
mov ecx, dword [edx]
mov dword [ebp - 0x18], ecx
mov word [ebp - 0x3c], 0x38
mov edx, 3
mov eax, dword [ebp - 0x1c]
mov ecx, dword [eax]
call dword [ecx - 4]
mov word [ebp - 0x3c], 0x2c
cmp word [ebp - 0x3a], 0
je 0x43fc41
ret
cmp dword [ebp - 0x50], 0
jne 0x43fd55
mov eax, dword [ebp + 0x14]
mov dword [ebp - 0x50], eax
call sub.kernel32.dll_GetVersion
mov dword [ebp - 0x58], eax
mov word [ebp - 0x3c], 8
mov dl, byte [ebp - 0x58]
and dl, 0xff
xor ecx, ecx
mov cl, dl
mov dword [ebp - 0x5c], ecx
cmp dword [ebp - 0x5c], 6
jae 0x43fd55
lea eax, [ebp + 0x10]
push eax
lea edx, [ebp + 0xc]
push edx
push dword [ebp + 8]
call fcn.0043f35c
add esp, 0xc
test al, al
je 0x43fd55
mov dl, 1
mov eax, dword [sym.imp.rtl60.bpl__Registry_TRegistry_]
call sub.rtl60.bpl__Registry_TRegistry__bctr_qqrv
mov dword [ebp - 0x60], eax
call fcn.0043d4ec
mov edx, eax
mov eax, dword [ebp - 0x60]
call fcn.00549950
mov ecx, dword [ebp - 0x60]
mov byte [ecx + 0xc], 1
mov word [ebp - 0x3c], 0x44
lea eax, [ebp - 0x20]
call fcn.00401fbc
push eax
inc dword [ebp - 0x30]
call fcn.0043d4f8
pop ecx
lea edx, [ebp - 0x20]
mov edx, dword [edx]
mov cl, 1
mov eax, dword [ebp - 0x60]
call sub.rtl60.bpl__Registry_TRegistry_OpenKey_qqrx17System_AnsiStringo
dec dword [ebp - 0x30]
lea eax, [ebp - 0x20]
mov edx, 2
call fcn.00549c08
mov word [ebp - 0x3c], 0x50
mov edx, dword [ebp + 0x10]
mov eax, dword [ebp - 0x60]
call sub.rtl60.bpl__Registry_TRegistry_ReadInteger_qqrx17System_AnsiString
mov dword [ebp - 0x50], eax
push dword [ebp - 0x50]
push dword [ebp + 0x10]
push dword [ebp + 0xc]
push dword [ebp + 8]
call fcn.0043ff50
add esp, 0x10
mov word [ebp - 0x3c], 8
jmp 0x43fd28
mov ecx, dword [ebp - 0x60]
mov dword [ebp - 0x28], ecx
cmp dword [ebp - 0x28], 0
je 0x43fd55
mov eax, dword [ebp - 0x28]
mov edx, dword [eax]
mov dword [ebp - 0x24], edx
mov word [ebp - 0x3c], 0x68
mov edx, 3
mov eax, dword [ebp - 0x28]
mov ecx, dword [eax]
call dword [ecx - 4]
mov word [ebp - 0x3c], 0x5c
mov eax, dword [ebp - 0x50]
push eax
dec dword [ebp - 0x30]
lea eax, [ebp + 0xc]
mov edx, 2
call fcn.00549c08
dec dword [ebp - 0x30]
lea eax, [ebp + 0x10]
mov edx, 2
call fcn.00549c08
pop eax
mov edx, dword [ebp - 0x4c]
mov dword fs:[0], edx
mov edi, dword [ebp - 0x6c]
mov esi, dword [ebp - 0x68]
mov ebx, dword [ebp - 0x64]
mov esp, ebp
pop ebp
ret