Function at 0x57bc52
Capabilities:
Delete file
Get hostname
Set console window title

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x114
mov eax, dword [0x6c6e10]
xor eax, ebp
mov dword [ebp - 4], eax
push ebx
push esi
push edi
push str.Remcom_EC_V2:
call fcn.005dcd3f
and dword [ebp - 0x10c], 0
mov dword [esp], str.InstallationDir
push str.SOFTWAREAdventNetDesktopCentral_
push reloc.WS2_32.dll_bind
mov dword [ebp - 0x110], 0x1000
call fcn.005785b2
add esp, 0xc
test eax, eax
jne 0x57bca7
call fcn.0057a8a5
jmp 0x57bcba
lea edi, [eax - 1]
mov cl, byte [edi + 1]
inc edi
test cl, cl
jne 0x57bcaa
mov esi, str.logs
movsd dword es:[edi], dword [esi]
movsw word es:[edi], word [esi]
push eax
call fcn.0057a91c
mov dword [esp], str._n
call fcn.0057af1d
call fcn.0057b1e9
mov dword [0x6ccda4], eax
lea eax, [ebp - 0x114]
push eax
push 2
call fcn.0057b0ff
push 0x6ceda8
mov dword [0x6d0eb8], eax
call fcn.0057b152
call fcn.005797b8
push 0x646d4c
call fcn.005789c1
add esp, 0x14
test eax, eax
jne 0x57c566
push 0x646d48
call fcn.005789c1
pop ecx
test eax, eax
jne 0x57c566
push str.help
call fcn.005789c1
pop ecx
test eax, eax
jne 0x57c566
cmp dword [0x6d0eb8], eax
je 0x57c566
mov eax, dword [0x6ccda4]
test eax, eax
je 0x57c566
push eax
push str._s_:_Starting_Connection_to:
mov esi, 0x6cfda8
push esi
call fcn.005dd5b8
add esp, 0xc
push esi
call dword [sym.imp.KERNEL32.dll_SetConsoleTitleA]
xor ebx, ebx
inc ebx
push ebx
push 0x5797b3
call dword [sym.imp.KERNEL32.dll_SetConsoleCtrlHandler]
push str.GetComputerName____n
call fcn.0057af1d
pop ecx
lea eax, [ebp - 0x110]
push eax
push 0x6ccda8
call dword [sym.imp.KERNEL32.dll_GetComputerNameA]
test eax, eax
jne 0x57bddc
push str.GetComputerName___failed._Use_a_valid_name__:__n
push 0x6aa560
call fcn.005e1f9e
push 0x20
pop edi
add eax, edi
push eax
call fcn.005e3085
call fcn.005e1f9e
add eax, edi
push eax
call fcn.005e22df
add esp, 0x10
call dword [sym.imp.KERNEL32.dll_GetLastError]
push eax
push str.GetComputerName___is_Failed_:_d_n
call fcn.0057af1d
pop ecx
pop ecx
push 0xfffffffffffffffd
pop eax
jmp 0x57c579
push str.SetConnectionCredentials____n
call fcn.0057af1d
push 0
call fcn.0057b263
pop ecx
pop ecx
test eax, eax
jne 0x57be03
call fcn.00578630
mov dword [ebp - 0x10c], eax
jmp 0x57c532
push dword [0x6ccda4]
push str.Remote_Machine_Name:__s__n
call fcn.0057af1d
push dword [0x6d0eb0]
push str.User_Name:__s__n
call fcn.0057af1d
push dword [0x6d0eb8]
push str.lpszCommandExe:__s__n
call fcn.0057af1d
push str.cmd_exe_n
call fcn.0057af1d
push 0x10
push dword [0x6c646c]
push dword [0x6ccda4]
call fcn.005e2dbc
add esp, 0x28
test eax, eax
je 0x57c3be
push 0x10
push dword [0x6c6470]
push dword [0x6ccda4]
call fcn.005e2dbc
add esp, 0xc
test eax, eax
je 0x57c3be
push 2
push 0x6465cc
push dword [0x6ccda4]
call fcn.005e2dbc
add esp, 0xc
test eax, eax
je 0x57c3be
push str.Initiating_Connection_to_Remote_Service_._._.___n
call fcn.0057af1d
mov esi, 0x6aa560
mov dword [esp], str.Initiating_Connection_to_Remote_Service_._._.
push esi
call fcn.005e1f9e
push 0x20
pop edi
add eax, edi
push eax
call fcn.005e3085
call fcn.005e1f9e
add eax, edi
push eax
call fcn.005e22df
push ebx
push str.ADMIN_
push dword [0x6ccda4]
call fcn.0057bacc
add esp, 0x1c
test eax, eax
je 0x57bf8e
call fcn.00578630
push str.Failed_n_n
push esi
mov dword [ebp - 0x10c], eax
call fcn.005e1f9e
add eax, edi
push eax
call fcn.005e3085
call fcn.005e1f9e
add eax, edi
push eax
call fcn.005e22df
add esp, 0x10
push str.Couldnt_connect_to
push esi
call fcn.005e1f9e
push 0x40
pop edi
add eax, edi
push eax
call fcn.005e3085
call fcn.005e1f9e
add eax, edi
push eax
call fcn.005e22df
add esp, 0x10
push dword [0x6ccda4]
push esi
call fcn.005e1f9e
add eax, edi
push eax
call fcn.005e3085
call fcn.005e1f9e
add eax, edi
push eax
call fcn.005e22df
add esp, 0x10
push str.ADMIN__n
push esi
call fcn.005e1f9e
add eax, edi
push eax
call fcn.005e3085
call fcn.005e1f9e
add eax, edi
push eax
call fcn.005e22df
push dword [0x6ccda4]
push str.Couldnt_Establish_connection_to_remote_machine__s__Admin__n
jmp 0x57c2d7
push ebx
push str.IPC_
push dword [0x6ccda4]
call fcn.0057bacc
add esp, 0xc
test eax, eax
je 0x57c052
call fcn.00578630
push str.Failed_n_n
push esi
mov dword [ebp - 0x10c], eax
call fcn.005e1f9e
add eax, edi
push eax
call fcn.005e3085
call fcn.005e1f9e
add eax, edi
push eax
call fcn.005e22df
add esp, 0x10
push str.Couldnt_connect_to
push esi
call fcn.005e1f9e
push 0x40
pop edi
add eax, edi
push eax
call fcn.005e3085
call fcn.005e1f9e
add eax, edi
push eax
call fcn.005e22df
add esp, 0x10
push dword [0x6ccda4]
push esi
call fcn.005e1f9e
add eax, edi
push eax
call fcn.005e3085
call fcn.005e1f9e
add eax, edi
push eax
call fcn.005e22df
add esp, 0x10
push str.IPC__n
push esi
call fcn.005e1f9e
add eax, edi
push eax
call fcn.005e3085
call fcn.005e1f9e
add eax, edi
push eax
call fcn.005e22df
push dword [0x6ccda4]
push str.Couldnt_Establish_connection_to_remote_machine__s__IPC___n
jmp 0x57c2d7
call fcn.0057afd2
call fcn.00578ba2
test eax, eax
jne 0x57c153
call fcn.00578630
push str.Failed_n_n
push esi
mov dword [ebp - 0x10c], eax
call fcn.005e1f9e
add eax, edi
push eax
call fcn.005e3085
call fcn.005e1f9e
add eax, edi
push eax
call fcn.005e22df
add esp, 0x10
push str.Couldnt_copy
push esi
call fcn.005e1f9e
push 0x40
pop edi
add eax, edi
push eax
call fcn.005e3085
call fcn.005e1f9e
add eax, edi
push eax
call fcn.005e22df
add esp, 0x10
push dword [0x6d0eb8]
push esi
call fcn.005e1f9e
add eax, edi
push eax
call fcn.005e3085
call fcn.005e1f9e
add eax, edi
push eax
call fcn.005e22df
add esp, 0x10
push str._to
push esi
call fcn.005e1f9e
add eax, edi
push eax
call fcn.005e3085
call fcn.005e1f9e
add eax, edi
push eax
call fcn.005e22df
add esp, 0x10
push dword [0x6ccda4]
push esi
call fcn.005e1f9e
add eax, edi
push eax
call fcn.005e3085
call fcn.005e1f9e
add eax, edi
push eax
call fcn.005e22df
add esp, 0x10
push str.ADMIN_System32_n
push esi
call fcn.005e1f9e
add eax, edi
push eax
call fcn.005e3085
call fcn.005e1f9e
add eax, edi
push eax
call fcn.005e22df
push dword [0x6ccda4]
push str.Couldnt_copy_binary_to_remote_machine___s__n
jmp 0x57c2d7
push 0
push ebx
call fcn.00578f33
pop ecx
pop ecx
test eax, eax
jne 0x57c3b4
call fcn.00578ce7
test eax, eax
jne 0x57c21a
call fcn.00578630
push str.Failed_n_n
push esi
mov dword [ebp - 0x10c], eax
call fcn.005e1f9e
add eax, edi
push eax
call fcn.005e3085
call fcn.005e1f9e
add eax, edi
push eax
call fcn.005e22df
add esp, 0x10
push str.Couldnt_copy_service_to
push esi
call fcn.005e1f9e
push 0x40
pop edi
add eax, edi
push eax
call fcn.005e3085
call fcn.005e1f9e
add eax, edi
push eax
call fcn.005e22df
add esp, 0x10
push dword [0x6ccda4]
push esi
call fcn.005e1f9e
add eax, edi
push eax
call fcn.005e3085
call fcn.005e1f9e
add eax, edi
push eax
call fcn.005e22df
add esp, 0x10
push str.ADMIN_System32_n
push esi
call fcn.005e1f9e
add eax, edi
push eax
call fcn.005e3085
call fcn.005e1f9e
add eax, edi
push eax
call fcn.005e22df
push dword [0x6ccda4]
push str.Couldnt_copy_service_to_remote___s__machine__n
jmp 0x57c2d7
call fcn.00578e95
test eax, eax
jne 0x57c34d
call fcn.00578dbe
test eax, eax
jne 0x57c2e4
call fcn.00578630
push str.Failed_n_n
push esi
mov dword [ebp - 0x10c], eax
call fcn.005e1f9e
add eax, edi
push eax
call fcn.005e3085
call fcn.005e1f9e
add eax, edi
push eax
call fcn.005e22df
add esp, 0x10
push str.Couldnt_copy_service_to
push esi
call fcn.005e1f9e
push 0x40
pop edi
add eax, edi
push eax
call fcn.005e3085
call fcn.005e1f9e
add eax, edi
push eax
call fcn.005e22df
add esp, 0x10
push dword [0x6ccda4]
push esi
call fcn.005e1f9e
add eax, edi
push eax
call fcn.005e3085
call fcn.005e1f9e
add eax, edi
push eax
call fcn.005e22df
add esp, 0x10
push str.ADMIN_SysWOW64_n
push esi
call fcn.005e1f9e
add eax, edi
push eax
call fcn.005e3085
call fcn.005e1f9e
add eax, edi
push eax
call fcn.005e22df
push dword [0x6ccda4]
push str.Couldnt_copy_service_to_remote___s__machine_SysWOW64_n
call fcn.0057af1d
add esp, 0x18
jmp 0x57c532
call fcn.00578e95
test eax, eax
jne 0x57c34d
call fcn.00578630
push str.Failed_n_n
push esi
mov dword [ebp - 0x10c], eax
call fcn.005e1f9e
add eax, edi
push eax
call fcn.005e3085
call fcn.005e1f9e
add eax, edi
push eax
call fcn.005e22df
add esp, 0x10
push str.Couldnt_start_remote_service_n
push esi
call fcn.005e1f9e
push 0x40
pop edi
add eax, edi
push eax
call fcn.005e3085
call fcn.005e1f9e
add eax, edi
push eax
call fcn.005e22df
push str.Couldnt_Install__start_remote_service_n
call fcn.0057af1d
jmp 0x57c52f
push 0x3e8
push 5
call fcn.00578f33
pop ecx
pop ecx
test eax, eax
jne 0x57c3b4
call fcn.00578630
push str.Failed_n_n
push esi
mov dword [ebp - 0x10c], eax
call fcn.005e1f9e
add eax, edi
push eax
call fcn.005e3085
call fcn.005e1f9e
add eax, edi
push eax
call fcn.005e22df
add esp, 0x10
mov ebx, str.Couldnt_connect_to_remote_service_n
push ebx
push esi
call fcn.005e1f9e
push 0x40
pop edi
add eax, edi
push eax
call fcn.005e3085
call fcn.005e1f9e
add eax, edi
push eax
call fcn.005e22df
push ebx
jmp 0x57c343
call fcn.00579672
jmp 0x57bdf8
push str.lpszMachineName_check__n
call fcn.0057af1d
pop ecx
call fcn.00578756
push 0x20
mov esi, 0x6aa560
pop edi
test eax, eax
je 0x57c3fd
push str.Local_Admin_n_n
push esi
call fcn.005e1f9e
add eax, edi
push eax
call fcn.005e3085
call fcn.005e1f9e
add eax, edi
push eax
call fcn.005e22df
add esp, 0x10
mov ebx, str.Localhost_entered_for_Target_Machine_.._Going_to_RunAs_Command_n_n
push ebx
call fcn.0057af1d
pop ecx
push ebx
push esi
call fcn.005e1f9e
add eax, edi
push eax
call fcn.005e3085
call fcn.005e1f9e
add eax, edi
push eax
call fcn.005e22df
add esp, 0x10
mov dword [0x6ccda4], 0x645704
call fcn.00578c37
test eax, eax
je 0x57c4e1
push str.Launching_Local_Process_..._n
push esi
call fcn.005e1f9e
add eax, edi
push eax
call fcn.005e3085
call fcn.005e1f9e
add eax, edi
push eax
call fcn.005e22df
push 0x103
lea eax, [ebp - 0x107]
push 0
push eax
mov byte [ebp - 0x108], 0
call fcn.005dd9b0
push dword [0x6d0eb8]
mov ebx, 0x6d0da8
push dword [0x6d0eac]
lea eax, [ebp - 0x108]
push dword [0x6d0eb0]
push ebx
push str._s__s__s__s
push eax
call fcn.005dd5b8
lea eax, [ebp - 0x108]
push eax
call fcn.0057a4b6
add esp, 0x38
test eax, eax
jne 0x57c4d8
push str.Create_Local_Process_Failed._Illegal_Command
push esi
call fcn.005e1f9e
add eax, edi
push eax
call fcn.005e3085
call fcn.005e1f9e
add eax, edi
push eax
call fcn.005e22df
add esp, 0x10
push ebx
call dword [sym.imp.KERNEL32.dll_DeleteFileA]
jmp 0x57c532
push str.Cannot_Extract_Local_Resources._Please_check_write_access_to_local_tmp_filesystem_n
push esi
call fcn.005e1f9e
add eax, edi
push eax
call fcn.005e3085
call fcn.005e1f9e
add eax, edi
push eax
call fcn.005e22df
add esp, 0x10
push str.Create_Process_as_User_Failed._Trying_to_run_the_process_with_the_current_user_n_n
push esi
call fcn.005e1f9e
add eax, edi
push eax
call fcn.005e3085
call fcn.005e1f9e
add eax, edi
push eax
call fcn.005e22df
push dword [0x6d0eb8]
call fcn.0057a4b6
add esp, 0x14
push 0
push str.IPC_
push dword [0x6ccda4]
call fcn.0057bacc
push 0
push str.ADMIN_
push dword [0x6ccda4]
call fcn.0057bacc
add esp, 0x18
call fcn.0057afd2
mov eax, dword [ebp - 0x10c]
jmp 0x57c579
call fcn.00579873
push str.ShowUsage__or__Wrong_CommandLine_argument__or__Machine_Name_may_be_Null__n
call fcn.0057af1d
pop ecx
or eax, 0xffffffff
mov ecx, dword [ebp - 4]
pop edi
pop esi
xor ecx, ebp
pop ebx
call fcn.005dcf8a
leave
ret