Function at 0x57bc66
Capabilities:
Delete file
Get hostname
Set console window title

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x114
mov eax, dword [0x6c6e10]
xor eax, ebp
mov dword [ebp - 4], eax
push ebx
push esi
push edi
push str.Remcom_EC_V2:
call fcn.005dcd3f
and dword [ebp - 0x10c], 0
mov dword [esp], str.InstallationDir
push str.SOFTWAREAdventNetDesktopCentral_
push reloc.WS2_32.dll_bind
mov dword [ebp - 0x110], 0x1000
call fcn.005785c4
add esp, 0xc
test eax, eax
jne 0x57bcbb
call fcn.0057a8b7
jmp 0x57bcce
lea edi, [eax - 1]
mov cl, byte [edi + 1]
inc edi
test cl, cl
jne 0x57bcbe
mov esi, str.logs
movsd dword es:[edi], dword [esi]
movsw word es:[edi], word [esi]
push eax
call fcn.0057a92e
mov dword [esp], str._n
call fcn.0057af2f
call fcn.0057b1fd
mov dword [0x6ccda4], eax
lea eax, [ebp - 0x114]
push eax
push 2
call fcn.0057b113
push 0x6ceda8
mov dword [0x6d0eb8], eax
call fcn.0057b166
call fcn.005797ca
push 0x646d64
call fcn.005789d3
add esp, 0x14
test eax, eax
jne 0x57c57a
push 0x646d60
call fcn.005789d3
pop ecx
test eax, eax
jne 0x57c57a
push str.help
call fcn.005789d3
pop ecx
test eax, eax
jne 0x57c57a
cmp dword [0x6d0eb8], eax
je 0x57c57a
mov eax, dword [0x6ccda4]
test eax, eax
je 0x57c57a
push eax
push str._s_:_Starting_Connection_to:
mov esi, 0x6cfda8
push esi
call fcn.005dd5b8
add esp, 0xc
push esi
call dword [sym.imp.KERNEL32.dll_SetConsoleTitleA]
xor ebx, ebx
inc ebx
push ebx
push 0x5797c5
call dword [sym.imp.KERNEL32.dll_SetConsoleCtrlHandler]
push str.GetComputerName____n
call fcn.0057af2f
pop ecx
lea eax, [ebp - 0x110]
push eax
push 0x6ccda8
call dword [sym.imp.KERNEL32.dll_GetComputerNameA]
test eax, eax
jne 0x57bdf0
push str.GetComputerName___failed._Use_a_valid_name__:__n
push 0x6aa570
call fcn.005e1f9e
push 0x20
pop edi
add eax, edi
push eax
call fcn.005e3085
call fcn.005e1f9e
add eax, edi
push eax
call fcn.005e22df
add esp, 0x10
call dword [sym.imp.KERNEL32.dll_GetLastError]
push eax
push str.GetComputerName___is_Failed_:_d_n
call fcn.0057af2f
pop ecx
pop ecx
push 0xfffffffffffffffd
pop eax
jmp 0x57c58d
push str.SetConnectionCredentials____n
call fcn.0057af2f
push 0
call fcn.0057b277
pop ecx
pop ecx
test eax, eax
jne 0x57be17
call fcn.00578642
mov dword [ebp - 0x10c], eax
jmp 0x57c546
push dword [0x6ccda4]
push str.Remote_Machine_Name:__s__n
call fcn.0057af2f
push dword [0x6d0eb0]
push str.User_Name:__s__n
call fcn.0057af2f
push dword [0x6d0eb8]
push str.lpszCommandExe:__s__n
call fcn.0057af2f
push str.cmd_exe_n
call fcn.0057af2f
push 0x10
push dword [0x6c646c]
push dword [0x6ccda4]
call fcn.005e2dbc
add esp, 0x28
test eax, eax
je 0x57c3d2
push 0x10
push dword [0x6c6470]
push dword [0x6ccda4]
call fcn.005e2dbc
add esp, 0xc
test eax, eax
je 0x57c3d2
push 2
push 0x6465e4
push dword [0x6ccda4]
call fcn.005e2dbc
add esp, 0xc
test eax, eax
je 0x57c3d2
push str.Initiating_Connection_to_Remote_Service_._._.___n
call fcn.0057af2f
mov esi, 0x6aa570
mov dword [esp], str.Initiating_Connection_to_Remote_Service_._._.
push esi
call fcn.005e1f9e
push 0x20
pop edi
add eax, edi
push eax
call fcn.005e3085
call fcn.005e1f9e
add eax, edi
push eax
call fcn.005e22df
push ebx
push str.ADMIN_
push dword [0x6ccda4]
call fcn.0057bae0
add esp, 0x1c
test eax, eax
je 0x57bfa2
call fcn.00578642
push str.Failed_n_n
push esi
mov dword [ebp - 0x10c], eax
call fcn.005e1f9e
add eax, edi
push eax
call fcn.005e3085
call fcn.005e1f9e
add eax, edi
push eax
call fcn.005e22df
add esp, 0x10
push str.Couldnt_connect_to
push esi
call fcn.005e1f9e
push 0x40
pop edi
add eax, edi
push eax
call fcn.005e3085
call fcn.005e1f9e
add eax, edi
push eax
call fcn.005e22df
add esp, 0x10
push dword [0x6ccda4]
push esi
call fcn.005e1f9e
add eax, edi
push eax
call fcn.005e3085
call fcn.005e1f9e
add eax, edi
push eax
call fcn.005e22df
add esp, 0x10
push str.ADMIN__n
push esi
call fcn.005e1f9e
add eax, edi
push eax
call fcn.005e3085
call fcn.005e1f9e
add eax, edi
push eax
call fcn.005e22df
push dword [0x6ccda4]
push str.Couldnt_Establish_connection_to_remote_machine__s__Admin__n
jmp 0x57c2eb
push ebx
push str.IPC_
push dword [0x6ccda4]
call fcn.0057bae0
add esp, 0xc
test eax, eax
je 0x57c066
call fcn.00578642
push str.Failed_n_n
push esi
mov dword [ebp - 0x10c], eax
call fcn.005e1f9e
add eax, edi
push eax
call fcn.005e3085
call fcn.005e1f9e
add eax, edi
push eax
call fcn.005e22df
add esp, 0x10
push str.Couldnt_connect_to
push esi
call fcn.005e1f9e
push 0x40
pop edi
add eax, edi
push eax
call fcn.005e3085
call fcn.005e1f9e
add eax, edi
push eax
call fcn.005e22df
add esp, 0x10
push dword [0x6ccda4]
push esi
call fcn.005e1f9e
add eax, edi
push eax
call fcn.005e3085
call fcn.005e1f9e
add eax, edi
push eax
call fcn.005e22df
add esp, 0x10
push str.IPC__n
push esi
call fcn.005e1f9e
add eax, edi
push eax
call fcn.005e3085
call fcn.005e1f9e
add eax, edi
push eax
call fcn.005e22df
push dword [0x6ccda4]
push str.Couldnt_Establish_connection_to_remote_machine__s__IPC___n
jmp 0x57c2eb
call fcn.0057afe6
call fcn.00578bb4
test eax, eax
jne 0x57c167
call fcn.00578642
push str.Failed_n_n
push esi
mov dword [ebp - 0x10c], eax
call fcn.005e1f9e
add eax, edi
push eax
call fcn.005e3085
call fcn.005e1f9e
add eax, edi
push eax
call fcn.005e22df
add esp, 0x10
push str.Couldnt_copy
push esi
call fcn.005e1f9e
push 0x40
pop edi
add eax, edi
push eax
call fcn.005e3085
call fcn.005e1f9e
add eax, edi
push eax
call fcn.005e22df
add esp, 0x10
push dword [0x6d0eb8]
push esi
call fcn.005e1f9e
add eax, edi
push eax
call fcn.005e3085
call fcn.005e1f9e
add eax, edi
push eax
call fcn.005e22df
add esp, 0x10
push str._to
push esi
call fcn.005e1f9e
add eax, edi
push eax
call fcn.005e3085
call fcn.005e1f9e
add eax, edi
push eax
call fcn.005e22df
add esp, 0x10
push dword [0x6ccda4]
push esi
call fcn.005e1f9e
add eax, edi
push eax
call fcn.005e3085
call fcn.005e1f9e
add eax, edi
push eax
call fcn.005e22df
add esp, 0x10
push str.ADMIN_System32_n
push esi
call fcn.005e1f9e
add eax, edi
push eax
call fcn.005e3085
call fcn.005e1f9e
add eax, edi
push eax
call fcn.005e22df
push dword [0x6ccda4]
push str.Couldnt_copy_binary_to_remote_machine___s__n
jmp 0x57c2eb
push 0
push ebx
call fcn.00578f45
pop ecx
pop ecx
test eax, eax
jne 0x57c3c8
call fcn.00578cf9
test eax, eax
jne 0x57c22e
call fcn.00578642
push str.Failed_n_n
push esi
mov dword [ebp - 0x10c], eax
call fcn.005e1f9e
add eax, edi
push eax
call fcn.005e3085
call fcn.005e1f9e
add eax, edi
push eax
call fcn.005e22df
add esp, 0x10
push str.Couldnt_copy_service_to
push esi
call fcn.005e1f9e
push 0x40
pop edi
add eax, edi
push eax
call fcn.005e3085
call fcn.005e1f9e
add eax, edi
push eax
call fcn.005e22df
add esp, 0x10
push dword [0x6ccda4]
push esi
call fcn.005e1f9e
add eax, edi
push eax
call fcn.005e3085
call fcn.005e1f9e
add eax, edi
push eax
call fcn.005e22df
add esp, 0x10
push str.ADMIN_System32_n
push esi
call fcn.005e1f9e
add eax, edi
push eax
call fcn.005e3085
call fcn.005e1f9e
add eax, edi
push eax
call fcn.005e22df
push dword [0x6ccda4]
push str.Couldnt_copy_service_to_remote___s__machine__n
jmp 0x57c2eb
call fcn.00578ea7
test eax, eax
jne 0x57c361
call fcn.00578dd0
test eax, eax
jne 0x57c2f8
call fcn.00578642
push str.Failed_n_n
push esi
mov dword [ebp - 0x10c], eax
call fcn.005e1f9e
add eax, edi
push eax
call fcn.005e3085
call fcn.005e1f9e
add eax, edi
push eax
call fcn.005e22df
add esp, 0x10
push str.Couldnt_copy_service_to
push esi
call fcn.005e1f9e
push 0x40
pop edi
add eax, edi
push eax
call fcn.005e3085
call fcn.005e1f9e
add eax, edi
push eax
call fcn.005e22df
add esp, 0x10
push dword [0x6ccda4]
push esi
call fcn.005e1f9e
add eax, edi
push eax
call fcn.005e3085
call fcn.005e1f9e
add eax, edi
push eax
call fcn.005e22df
add esp, 0x10
push str.ADMIN_SysWOW64_n
push esi
call fcn.005e1f9e
add eax, edi
push eax
call fcn.005e3085
call fcn.005e1f9e
add eax, edi
push eax
call fcn.005e22df
push dword [0x6ccda4]
push str.Couldnt_copy_service_to_remote___s__machine_SysWOW64_n
call fcn.0057af2f
add esp, 0x18
jmp 0x57c546
call fcn.00578ea7
test eax, eax
jne 0x57c361
call fcn.00578642
push str.Failed_n_n
push esi
mov dword [ebp - 0x10c], eax
call fcn.005e1f9e
add eax, edi
push eax
call fcn.005e3085
call fcn.005e1f9e
add eax, edi
push eax
call fcn.005e22df
add esp, 0x10
push str.Couldnt_start_remote_service_n
push esi
call fcn.005e1f9e
push 0x40
pop edi
add eax, edi
push eax
call fcn.005e3085
call fcn.005e1f9e
add eax, edi
push eax
call fcn.005e22df
push str.Couldnt_Install__start_remote_service_n
call fcn.0057af2f
jmp 0x57c543
push 0x3e8
push 5
call fcn.00578f45
pop ecx
pop ecx
test eax, eax
jne 0x57c3c8
call fcn.00578642
push str.Failed_n_n
push esi
mov dword [ebp - 0x10c], eax
call fcn.005e1f9e
add eax, edi
push eax
call fcn.005e3085
call fcn.005e1f9e
add eax, edi
push eax
call fcn.005e22df
add esp, 0x10
mov ebx, str.Couldnt_connect_to_remote_service_n
push ebx
push esi
call fcn.005e1f9e
push 0x40
pop edi
add eax, edi
push eax
call fcn.005e3085
call fcn.005e1f9e
add eax, edi
push eax
call fcn.005e22df
push ebx
jmp 0x57c357
call fcn.00579684
jmp 0x57be0c
push str.lpszMachineName_check__n
call fcn.0057af2f
pop ecx
call fcn.00578768
push 0x20
mov esi, 0x6aa570
pop edi
test eax, eax
je 0x57c411
push str.Local_Admin_n_n
push esi
call fcn.005e1f9e
add eax, edi
push eax
call fcn.005e3085
call fcn.005e1f9e
add eax, edi
push eax
call fcn.005e22df
add esp, 0x10
mov ebx, str.Localhost_entered_for_Target_Machine_.._Going_to_RunAs_Command_n_n
push ebx
call fcn.0057af2f
pop ecx
push ebx
push esi
call fcn.005e1f9e
add eax, edi
push eax
call fcn.005e3085
call fcn.005e1f9e
add eax, edi
push eax
call fcn.005e22df
add esp, 0x10
mov dword [0x6ccda4], 0x64571c
call fcn.00578c49
test eax, eax
je 0x57c4f5
push str.Launching_Local_Process_..._n
push esi
call fcn.005e1f9e
add eax, edi
push eax
call fcn.005e3085
call fcn.005e1f9e
add eax, edi
push eax
call fcn.005e22df
push 0x103
lea eax, [ebp - 0x107]
push 0
push eax
mov byte [ebp - 0x108], 0
call fcn.005dd9b0
push dword [0x6d0eb8]
mov ebx, 0x6d0da8
push dword [0x6d0eac]
lea eax, [ebp - 0x108]
push dword [0x6d0eb0]
push ebx
push str._s__s__s__s
push eax
call fcn.005dd5b8
lea eax, [ebp - 0x108]
push eax
call fcn.0057a4c8
add esp, 0x38
test eax, eax
jne 0x57c4ec
push str.Create_Local_Process_Failed._Illegal_Command
push esi
call fcn.005e1f9e
add eax, edi
push eax
call fcn.005e3085
call fcn.005e1f9e
add eax, edi
push eax
call fcn.005e22df
add esp, 0x10
push ebx
call dword [sym.imp.KERNEL32.dll_DeleteFileA]
jmp 0x57c546
push str.Cannot_Extract_Local_Resources._Please_check_write_access_to_local_tmp_filesystem_n
push esi
call fcn.005e1f9e
add eax, edi
push eax
call fcn.005e3085
call fcn.005e1f9e
add eax, edi
push eax
call fcn.005e22df
add esp, 0x10
push str.Create_Process_as_User_Failed._Trying_to_run_the_process_with_the_current_user_n_n
push esi
call fcn.005e1f9e
add eax, edi
push eax
call fcn.005e3085
call fcn.005e1f9e
add eax, edi
push eax
call fcn.005e22df
push dword [0x6d0eb8]
call fcn.0057a4c8
add esp, 0x14
push 0
push str.IPC_
push dword [0x6ccda4]
call fcn.0057bae0
push 0
push str.ADMIN_
push dword [0x6ccda4]
call fcn.0057bae0
add esp, 0x18
call fcn.0057afe6
mov eax, dword [ebp - 0x10c]
jmp 0x57c58d
call fcn.00579885
push str.ShowUsage__or__Wrong_CommandLine_argument__or__Machine_Name_may_be_Null__n
call fcn.0057af2f
pop ecx
or eax, 0xffffffff
mov ecx, dword [ebp - 4]
pop edi
pop esi
xor ecx, ebp
pop ebx
call fcn.005dcf8a
leave
ret