Function at 0x40d840
Capabilities:
Check os version

Disassembly:
push ebp
mov ebp, esp
add esp, 0xffffff94
push ebx
push esi
push edi
mov eax, 0x5a20e4
call fcn.0057c5c8
mov dword [ebp - 0x40], 3
lea edx, [ebp + 0x18]
lea eax, [ebp + 0x18]
call fcn.0058f864
inc dword [ebp - 0x40]
mov word [ebp - 0x4c], 8
lea edx, [ebp + 0x14]
lea eax, [ebp + 0x14]
call fcn.0058f864
inc dword [ebp - 0x40]
lea edx, [ebp + 0x10]
lea eax, [ebp + 0x10]
call fcn.0058f864
inc dword [ebp - 0x40]
mov word [ebp - 0x4c], 0x14
mov edx, 0x5a1d86
lea eax, [ebp - 4]
call fcn.0058f82c
inc dword [ebp - 0x40]
mov word [ebp - 0x4c], 8
mov word [ebp - 0x4c], 0x20
lea eax, [ebp - 0x10]
call fcn.004025f4
push eax
inc dword [ebp - 0x40]
mov edx, 0x5a1d87
lea eax, [ebp - 0xc]
call fcn.0058f82c
inc dword [ebp - 0x40]
lea edx, [ebp - 0xc]
push edx
lea eax, [ebp - 8]
call fcn.004025f4
push eax
inc dword [ebp - 0x40]
call fcn.0042b6a4
pop ecx
lea eax, [ebp - 8]
pop edx
pop ecx
call fcn.0058fb5c
lea eax, [ebp - 0x10]
push eax
lea eax, [ebp - 0x18]
call fcn.004025f4
push eax
inc dword [ebp - 0x40]
mov edx, 0x5a1d8d
lea eax, [ebp - 0x14]
call fcn.0058f82c
inc dword [ebp - 0x40]
lea edx, [ebp - 0x14]
pop ecx
pop eax
call fcn.0058fb5c
lea ecx, [ebp - 0x18]
mov ecx, dword [ecx]
mov dl, 1
mov eax, dword [sym.imp.rtl60.bpl__Inifiles_TIniFile_]
call fcn.004096cc
mov dword [ebp - 0x60], eax
dec dword [ebp - 0x40]
lea eax, [ebp - 0x18]
mov edx, 2
call fcn.0058fb04
dec dword [ebp - 0x40]
lea eax, [ebp - 0x14]
mov edx, 2
call fcn.0058fb04
dec dword [ebp - 0x40]
lea eax, [ebp - 0x10]
mov edx, 2
call fcn.0058fb04
dec dword [ebp - 0x40]
lea eax, [ebp - 0xc]
mov edx, 2
call fcn.0058fb04
dec dword [ebp - 0x40]
lea eax, [ebp - 8]
mov edx, 2
call fcn.0058fb04
mov word [ebp - 0x4c], 0x2c
mov edx, 0x5a1d9a
lea eax, [ebp - 0x1c]
call fcn.0058f82c
inc dword [ebp - 0x40]
push dword [eax]
lea eax, [ebp - 0x20]
call fcn.004025f4
push eax
inc dword [ebp - 0x40]
mov ecx, dword [ebp + 0x14]
mov edx, dword [ebp + 0x10]
mov eax, dword [ebp - 0x60]
mov ebx, dword [eax]
call dword [ebx]
lea edx, [ebp - 0x20]
lea eax, [ebp - 4]
call fcn.0058fb34
dec dword [ebp - 0x40]
lea eax, [ebp - 0x20]
mov edx, 2
call fcn.0058fb04
dec dword [ebp - 0x40]
lea eax, [ebp - 0x1c]
mov edx, 2
call fcn.0058fb04
mov ecx, dword [ebp - 0x60]
mov dword [ebp - 0x28], ecx
cmp dword [ebp - 0x28], 0
je 0x40d9ff
mov eax, dword [ebp - 0x28]
mov edx, dword [eax]
mov dword [ebp - 0x24], edx
mov word [ebp - 0x4c], 0x44
mov edx, 3
mov eax, dword [ebp - 0x28]
mov ecx, dword [eax]
call dword [ecx - 4]
mov word [ebp - 0x4c], 0x38
lea eax, [ebp - 4]
call fcn.00404958
test al, al
je 0x40db2e
lea edx, [ebp + 0x18]
lea eax, [ebp - 4]
call fcn.0058fb34
call sub.kernel32.dll_GetVersion
mov dword [ebp - 0x64], eax
mov word [ebp - 0x4c], 8
mov dl, byte [ebp - 0x64]
and dl, 0xff
xor ecx, ecx
mov cl, dl
mov dword [ebp - 0x68], ecx
cmp dword [ebp - 0x68], 6
jae 0x40db2e
mov dl, 1
mov eax, dword [sym.imp.rtl60.bpl__Registry_TRegistry_]
call sub.rtl60.bpl__Registry_TRegistry__bctr_qqrv
mov dword [ebp - 0x6c], eax
call fcn.0042d3f8
mov edx, eax
mov eax, dword [ebp - 0x6c]
call fcn.0058f798
mov ecx, dword [ebp - 0x6c]
mov byte [ecx + 0xc], 1
mov word [ebp - 0x4c], 0x50
lea eax, [ebp - 0x2c]
call fcn.004025f4
push eax
inc dword [ebp - 0x40]
call fcn.0042d404
pop ecx
lea edx, [ebp - 0x2c]
mov edx, dword [edx]
mov cl, 1
mov eax, dword [ebp - 0x6c]
call sub.rtl60.bpl__Registry_TRegistry_OpenKey_qqrx17System_AnsiStringo
dec dword [ebp - 0x40]
lea eax, [ebp - 0x2c]
mov edx, 2
call fcn.0058fb04
mov word [ebp - 0x4c], 0x5c
mov word [ebp - 0x4c], 0x68
lea eax, [ebp - 0x30]
call fcn.004025f4
mov ecx, eax
inc dword [ebp - 0x40]
mov edx, dword [ebp + 0x14]
mov eax, dword [ebp - 0x6c]
call sub.rtl60.bpl__Registry_TRegistry_ReadString_qqrx17System_AnsiString
lea edx, [ebp - 0x30]
lea eax, [ebp - 4]
call fcn.0058fb34
dec dword [ebp - 0x40]
lea eax, [ebp - 0x30]
mov edx, 2
call fcn.0058fb04
push dword [ebp - 4]
push dword [ebp + 0x14]
push dword [ebp + 0x10]
push dword [ebp + 0xc]
call fcn.00431a44
add esp, 0x10
mov word [ebp - 0x4c], 8
jmp 0x40db01
mov ecx, dword [ebp - 0x6c]
mov dword [ebp - 0x38], ecx
cmp dword [ebp - 0x38], 0
je 0x40db2e
mov eax, dword [ebp - 0x38]
mov edx, dword [eax]
mov dword [ebp - 0x34], edx
mov word [ebp - 0x4c], pe_nt_image_headers32
mov edx, 3
mov eax, dword [ebp - 0x38]
mov ecx, dword [eax]
call dword [ecx - 4]
mov word [ebp - 0x4c], 0x74
mov word [ebp - 0x4c], 0x8c
lea edx, [ebp - 4]
mov eax, dword [ebp + 8]
call fcn.0058fb34
mov eax, dword [ebp + 8]
mov word [ebp - 0x4c], 0x98
push eax
dec dword [ebp - 0x40]
lea eax, [ebp - 4]
mov edx, 2
call fcn.0058fb04
dec dword [ebp - 0x40]
lea eax, [ebp + 0x10]
mov edx, 2
call fcn.0058fb04
dec dword [ebp - 0x40]
lea eax, [ebp + 0x14]
mov edx, 2
call fcn.0058fb04
dec dword [ebp - 0x40]
lea eax, [ebp + 0x18]
mov edx, 2
call fcn.0058fb04
pop eax
mov word [ebp - 0x4c], 0x8c
inc dword [ebp - 0x40]
mov edx, dword [ebp - 0x5c]
mov dword fs:[0], edx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret