Function at 0x414598
Capabilities:
Create process on windows
Enumerate gui resources

Disassembly:
push ebp
mov ebp, esp
mov ecx, 8
push 0
push 0
dec ecx
jne 0x4145a0
push ecx
push ebx
mov eax, 0x412d48
call fcn.004012cc
xor eax, eax
push ebp
push 0x4148ea
push dword fs:[eax]
mov dword fs:[eax], esp
lea eax, [ebp - 0x28]
call fcn.004077a0
lea edx, [ebp - 0x28]
mov eax, 0x4183ac
mov ecx, dword [0x407454]
call sub.rtl70.bpl__System__CopyRecord_qqrv
cmp byte [0x4183c1], 0
jne 0x4145f2
call fcn.00412c7c
test al, al
je 0x41489d
push 0x4148f8
push 0
push 0
call fcn.00401358
mov ebx, eax
push 0
push ebx
call sub.KERNEL32.DLL_WaitForSingleObject
cmp eax, 0x102
je 0x414615
mov al, 1
jmp 0x414621
mov dl, 1
mov eax, 0x414908
call sub.dvm.bpl__Devimnesnemodeli_SoruMesajiGoster_qqr17System_AnsiStringo
test al, al
je 0x41482c
xor ebx, ebx
mov eax, dword [0x4183ac]
call sub.rtl70.bpl__Sysutils_DirectoryExists_qqrx17System_AnsiString
test al, al
jne 0x41464d
mov eax, 0x414974
call sub.dvm.bpl__Devimnesnemodeli_UyariMesajiGoster_qqr17System_AnsiString
mov eax, 0x4183ac
call sub.rtl70.bpl__System__LStrClr_qqrpv
cmp dword [0x4183ac], 0
je 0x414720
lea edx, [ebp - 0x30]
mov eax, dword [sym.imp.vcl70.bpl__Forms_Application]
mov eax, dword [eax]
call sub.vcl70.bpl__Forms_TApplication_GetExeName_qqrv
mov eax, dword [ebp - 0x30]
lea edx, [ebp - 0x2c]
call sub.rtl70.bpl__Sysutils_ExtractFilePath_qqrx17System_AnsiString
mov edx, dword [ebp - 0x2c]
mov eax, 0x41839c
call sub.rtl70.bpl__System__LStrAsg_qqrpvpxv
mov edx, dword [0x41839c]
mov eax, dword [0x4183ac]
call fcn.00412bac
cmp dword [0x4183b4], 1
je 0x4146a4
call fcn.00412b2c
cmp eax, 0x1e
jle 0x4146d3
mov edx, dword [0x41839c]
mov eax, dword [0x4183ac]
call fcn.0040763c
test al, al
je 0x414720
push 1
push 0
push 0
push 0x414a28
push 0x414a38
push 0
call sub.shell32.dll_ShellExecuteA
mov bl, 1
jmp 0x414720
lea eax, [ebp - 0x34]
call fcn.004082f8
mov edx, dword [ebp - 0x34]
mov eax, 0x4183c4
call sub.rtl70.bpl__System__LStrAsg_qqrpvpxv
cmp dword [0x4183c4], 0
je 0x414720
push 1
push 0
lea ecx, [ebp - 0x38]
mov dl, 0x22
mov eax, dword [0x4183c4]
call sub.rtl70.bpl__Sysutils_AnsiQuotedStr_qqrx17System_AnsiStringc
mov eax, dword [ebp - 0x38]
call main
push eax
push 0x414a28
push 0x414a38
push 0
call sub.shell32.dll_ShellExecuteA
mov bl, 1
test bl, bl
jne 0x4148b3
lea eax, [ebp - 0x44]
call fcn.004079b8
lea edx, [ebp - 0x44]
mov eax, 0x4183a0
mov ecx, dword [0x407420]
call sub.rtl70.bpl__System__CopyRecord_qqrv
cmp dword [0x4183a0], 0
je 0x41475c
mov eax, dword [sym.imp.dvm.bpl__Devimnesnemodeli_VT_VTYS]
mov edx, dword [0x4183a0]
call sub.rtl70.bpl__System__LStrAsg_qqrpvpxv
cmp dword [0x4183a4], 0
je 0x414775
mov eax, dword [sym.imp.dvm.bpl__Devimnesnemodeli_VT_ADI]
mov edx, dword [0x4183a4]
call sub.rtl70.bpl__System__LStrAsg_qqrpvpxv
cmp dword [0x4183a8], 0
je 0x41478e
mov eax, dword [sym.imp.dvm.bpl__Devimnesnemodeli_VT_SERVER_ADI]
mov edx, dword [0x4183a8]
call sub.rtl70.bpl__System__LStrAsg_qqrpvpxv
mov eax, dword [sym.imp.dvm.bpl__Devimnesnemodeli_VT_VTYS]
mov eax, dword [eax]
mov edx, 0x414a48
call sub.rtl70.bpl__System__LStrCmp_qqrv
je 0x4147b8
mov eax, dword [sym.imp.dvm.bpl__Devimnesnemodeli_VT_VTYS]
mov eax, dword [eax]
mov edx, 0x414a54
call sub.rtl70.bpl__System__LStrCmp_qqrv
je 0x4147b8
xor eax, eax
jmp 0x4147ba
mov al, 1
mov edx, dword [sym.imp.dvm.bpl__Devimnesnemodeli_VT_LOG_TUTULACAK_MI]
mov byte [edx], al
mov eax, dword [sym.imp.dvm.bpl__Devimnesnemodeli_VT_VTYS]
mov eax, dword [eax]
mov edx, 0x414a64
call sub.rtl70.bpl__Sysutils_SameText_qqrx17System_AnsiStringt1
test al, al
je 0x4147e6
mov eax, dword [sym.imp.dvm.bpl__Devimnesnemodeli_VT_ERISIM_SEKLI]
mov edx, 0x414a78
call sub.rtl70.bpl__System__LStrAsg_qqrpvpxv
mov eax, dword [sym.imp.vcl70.bpl__Forms_Application]
mov eax, dword [eax]
call sub.vcl70.bpl__Forms_TApplication_Initialize_qqrv
mov eax, dword [sym.imp.vcl70.bpl__Forms_Application]
mov eax, dword [eax]
mov edx, 0x414a88
call sub.vcl70.bpl__Forms_TApplication_SetTitle_qqrx17System_AnsiString
mov ecx, dword [0x41573c]
mov eax, dword [sym.imp.vcl70.bpl__Forms_Application]
mov eax, dword [eax]
mov edx, dword [0x40a9b0]
call sub.vcl70.bpl__Forms_TApplication_CreateForm_qqrp17System_TMetaClasspv
mov eax, dword [sym.imp.vcl70.bpl__Forms_Application]
mov eax, dword [eax]
call sub.vcl70.bpl__Forms_TApplication_Run_qqrv
jmp 0x4148b3
mov eax, 0x418394
mov edx, 0xc8
call sub.rtl70.bpl__System__LStrSetLength_qqrv
mov eax, dword [0x418394]
call sub.rtl70.bpl__System__LStrLen_qqrx17System_AnsiString
push eax
mov eax, dword [0x418394]
call main
push eax
mov eax, dword [0x416004]
push eax
call sub.KERNEL32.DLL_GetModuleFileNameA
mov eax, dword [0x418394]
call main
mov edx, eax
mov eax, 0x418394
call sub.rtl70.bpl__System__LStrFromPChar_qqrr17System_AnsiStringpc
push 0
push 0x4129f8
call sub.user32.dll_EnumWindows
cmp dword [0x418398], 0
je 0x4148b3
push 0
push 0
push 0x8037
mov eax, dword [0x418398]
push eax
call sub.user32.dll_PostMessageA
jmp 0x4148b3
mov eax, 0x414aa8
call sub.dvm.bpl__Devimnesnemodeli_UyariMesajiGoster_qqr17System_AnsiString
mov eax, dword [sym.imp.vcl70.bpl__Forms_Application]
mov eax, dword [eax]
call sub.vcl70.bpl__Forms_TApplication_Terminate_qqrv
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
push 0x4148f1
lea eax, [ebp - 0x44]
mov edx, dword [0x407420]
call sub.rtl70.bpl__System__FinalizeRecord_qqrpvt1
lea eax, [ebp - 0x38]
mov edx, 4
call sub.rtl70.bpl__System__LStrArrayClr_qqrpvi
lea eax, [ebp - 0x28]
mov edx, dword [0x407454]
call sub.rtl70.bpl__System__FinalizeRecord_qqrpvt1
ret