Function at 0x570077ec
Capabilities:
Check os version

Disassembly:
push ebp
mov ebp, esp
mov ecx, 4
push 0
push 0
dec ecx
jne 0x570077f4
push ecx
push ebx
push esi
push edi
mov esi, edx
mov ebx, eax
xor eax, eax
push ebp
push 0x57007a06
push dword fs:[eax]
mov dword fs:[eax], esp
call sub.kernel32.dll_GetVersion
test eax, 0x80000000
je 0x57007837
lea edx, [ebp - 0xc]
mov eax, ebx
call dword [sym.madBasic_.bpl__Madstrings_ErrorCodeToStrA]
mov edx, dword [ebp - 0xc]
mov eax, esi
call sub.rtl120.bpl__System__UStrFromLStr_qqrr20System_UnicodeStringx27System__AnsiStringT_us_i0__
jmp 0x570079d3
test ebx, 0xc0000000
je 0x5700787f
lea edx, [ebp - 0x10]
mov eax, dword [0x570243a4]
call sym.madBasic_.bpl__Madstrings_DecryptStr_qqrx27System__AnsiStringT_us_i0__
mov eax, dword [ebp - 0x10]
call sub.rtl120.bpl__System__LStrToPChar_qqrx27System__AnsiStringT_us_i0__
push eax
lea edx, [ebp - 0x14]
mov eax, dword [sym.madBasic_.bpl__Madstrings_CNtDll]
call sym.madBasic_.bpl__Madstrings_DecryptStr_qqrx27System__AnsiStringT_us_i0__
mov eax, dword [ebp - 0x14]
call sub.rtl120.bpl__System__LStrToPChar_qqrx27System__AnsiStringT_us_i0__
push eax
call sub.kernel32.dll_GetModuleHandleA
push eax
call sub.kernel32.dll_GetProcAddress
test eax, eax
je 0x5700787f
push ebx
call eax
mov ebx, eax
mov edi, 0x1300
cmp ebx, 0x834
jb 0x570078c4
cmp ebx, 0xbb7
ja 0x570078c4
push 2
push 0
lea edx, [ebp - 0x18]
mov eax, dword [0x570243a0]
call sym.madBasic_.bpl__Madstrings_DecryptStr_qqrx27System__AnsiStringT_us_i0__
mov eax, dword [ebp - 0x18]
call sub.rtl120.bpl__System__LStrToPChar_qqrx27System__AnsiStringT_us_i0__
push eax
call sub.kernel32.dll_LoadLibraryExA
mov dword [ebp - 8], eax
cmp dword [ebp - 8], 0
je 0x570078c9
or edi, 0x800
jmp 0x570078c9
xor eax, eax
mov dword [ebp - 8], eax
xor eax, eax
push ebp
push 0x570079cc
push dword fs:[eax]
mov dword fs:[eax], esp
push 0
push 0
lea eax, [ebp - 4]
push eax
push 0x400
push ebx
mov eax, dword [ebp - 8]
push eax
push edi
call sub.kernel32.dll_FormatMessageW
test eax, eax
je 0x5700796c
xor eax, eax
push ebp
push 0x57007965
push dword fs:[eax]
mov dword fs:[eax], esp
mov eax, esi
mov edx, dword [ebp - 4]
call sub.rtl120.bpl__System__UStrFromPWChar_qqrr20System_UnicodeStringpb
mov eax, dword [esi]
call sub.rtl120.bpl__System__UStrLen_qqrx20System_UnicodeString
mov ebx, eax
test ebx, ebx
jbe 0x5700794e
mov eax, dword [esi]
movzx edi, word [eax + ebx*2 - 2]
cmp di, 0xd
jne 0x57007935
mov eax, esi
call sub.rtl120.bpl__System__UniqueStringU_qqrr20System_UnicodeString
mov word [eax + ebx*2 - 2], 0x20
jmp 0x57007949
cmp di, 0xa
jne 0x57007949
mov eax, esi
mov ecx, 1
mov edx, ebx
call sub.rtl120.bpl__System__UStrDelete_qqrr20System_UnicodeStringii
dec ebx
test ebx, ebx
ja 0x57007918
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
push 0x570079af
mov eax, dword [ebp - 4]
push eax
call sub.kernel32.dll_LocalFree_1
ret
lea edx, [ebp - 0x20]
mov eax, dword [0x570243a8]
call sym.madBasic_.bpl__Madstrings_DecryptStr_qqrx27System__AnsiStringT_us_i0__
mov edx, dword [ebp - 0x20]
lea eax, [ebp - 0x1c]
call sub.rtl120.bpl__System__UStrFromLStr_qqrr20System_UnicodeStringx27System__AnsiStringT_us_i0__
push dword [ebp - 0x1c]
push 0x57007a20
lea eax, [ebp - 0x24]
push eax
mov cx, 0x30
mov edx, 1
mov eax, ebx
call sym.madBasic_.bpl__Madstrings_IntToHexExW_qqruiib
push dword [ebp - 0x24]
mov eax, esi
mov edx, 3
call sub.rtl120.bpl__System__UStrCatN_qqrv
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
push 0x570079d3
cmp dword [ebp - 8], 0
je 0x570079cb
mov eax, dword [ebp - 8]
push eax
call sub.kernel32.dll_FreeLibrary_1
ret
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
push 0x57007a0d
lea eax, [ebp - 0x24]
call sub.rtl120.bpl__System__UStrClr_qqrpv
lea eax, [ebp - 0x20]
call sub.rtl120.bpl__System__LStrClr_qqrpv
lea eax, [ebp - 0x1c]
call sub.rtl120.bpl__System__UStrClr_qqrpv
lea eax, [ebp - 0x18]
mov edx, 4
call sub.rtl120.bpl__System__LStrArrayClr_qqrpvi
ret