Function at 0x409e54
Capabilities:
Check os version

Disassembly:
push ebp
mov ebp, esp
mov ecx, 4
push 0
push 0
dec ecx
jne 0x409e5c
push ecx
push ebx
push esi
push edi
mov esi, edx
mov ebx, eax
xor eax, eax
push ebp
push 0x40a06e
push dword fs:[eax]
mov dword fs:[eax], esp
call sub.kernel32.dll_GetVersion
test eax, 0x80000000
je 0x409e9f
lea edx, [ebp - 0xc]
mov eax, ebx
call dword [0x5f87fc]
mov edx, dword [ebp - 0xc]
mov eax, esi
call sub.rtl250.bpl__System__UStrFromLStr_qqrr20System_UnicodeStringx27System__AnsiStringT_us_i0__
jmp 0x40a03b
test ebx, 0xc0000000
je 0x409ee7
lea edx, [ebp - 0x10]
mov eax, dword [0x5f8a88]
call fcn.0040a08c
mov eax, dword [ebp - 0x10]
call sub.rtl250.bpl__System__LStrToPChar_qqrx27System__AnsiStringT_us_i0__
push eax
lea edx, [ebp - 0x14]
mov eax, dword [0x5f886c]
call fcn.0040a08c
mov eax, dword [ebp - 0x14]
call sub.rtl250.bpl__System__LStrToPChar_qqrx27System__AnsiStringT_us_i0__
push eax
call sub.kernel32.dll_GetModuleHandleA
push eax
call sub.kernel32.dll_GetProcAddress
test eax, eax
je 0x409ee7
push ebx
call eax
mov ebx, eax
mov edi, 0x1300
cmp ebx, 0x834
jb 0x409f2c
cmp ebx, 0xbb7
ja 0x409f2c
push 2
push 0
lea edx, [ebp - 0x18]
mov eax, dword [0x5f8a84]
call fcn.0040a08c
mov eax, dword [ebp - 0x18]
call sub.rtl250.bpl__System__LStrToPChar_qqrx27System__AnsiStringT_us_i0__
push eax
call sub.kernel32.dll_LoadLibraryExA
mov dword [ebp - 8], eax
cmp dword [ebp - 8], 0
je 0x409f31
or edi, 0x800
jmp 0x409f31
xor eax, eax
mov dword [ebp - 8], eax
xor eax, eax
push ebp
push 0x40a034
push dword fs:[eax]
mov dword fs:[eax], esp
push 0
push 0
lea eax, [ebp - 4]
push eax
push 0x400
push ebx
mov eax, dword [ebp - 8]
push eax
push edi
call sub.kernel32.dll_FormatMessageW
test eax, eax
je 0x409fd4
xor eax, eax
push ebp
push 0x409fcd
push dword fs:[eax]
mov dword fs:[eax], esp
mov eax, esi
mov edx, dword [ebp - 4]
call sub.rtl250.bpl__System__UStrFromPWChar_qqrr20System_UnicodeStringpb
mov eax, dword [esi]
call sub.rtl250.bpl__System__UStrLen_qqrx20System_UnicodeString
mov ebx, eax
test ebx, ebx
jbe 0x409fb6
mov eax, dword [esi]
movzx edi, word [eax + ebx*2 - 2]
cmp di, 0xd
jne 0x409f9d
mov eax, esi
call sub.rtl250.bpl__System__UniqueStringU_qqrr20System_UnicodeString
mov word [eax + ebx*2 - 2], 0x20
jmp 0x409fb1
cmp di, 0xa
jne 0x409fb1
mov eax, esi
mov ecx, 1
mov edx, ebx
call sub.rtl250.bpl__System__UStrDelete_qqrr20System_UnicodeStringii
dec ebx
test ebx, ebx
ja 0x409f80
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
push 0x40a017
mov eax, dword [ebp - 4]
push eax
call sub.kernel32.dll_LocalFree
ret
lea edx, [ebp - 0x20]
mov eax, dword [0x5f8a8c]
call fcn.0040a08c
mov edx, dword [ebp - 0x20]
lea eax, [ebp - 0x1c]
call sub.rtl250.bpl__System__UStrFromLStr_qqrr20System_UnicodeStringx27System__AnsiStringT_us_i0__
push dword [ebp - 0x1c]
push 0x40a088
lea eax, [ebp - 0x24]
push eax
mov cx, 0x30
mov edx, 1
mov eax, ebx
call fcn.004091cc
push dword [ebp - 0x24]
mov eax, esi
mov edx, 3
call sub.rtl250.bpl__System__UStrCatN_qqrv
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
push 0x40a03b
cmp dword [ebp - 8], 0
je 0x40a033
mov eax, dword [ebp - 8]
push eax
call sub.kernel32.dll_FreeLibrary
ret
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
push 0x40a075
lea eax, [ebp - 0x24]
call sub.rtl250.bpl__System__UStrClr_qqrpv
lea eax, [ebp - 0x20]
call sub.rtl250.bpl__System__LStrClr_qqrpv
lea eax, [ebp - 0x1c]
call sub.rtl250.bpl__System__UStrClr_qqrpv
lea eax, [ebp - 0x18]
mov edx, 4
call sub.rtl250.bpl__System__LStrArrayClr_qqrpvi
ret