Function at 0x4017b0
Capabilities:
Query environment variable
Terminate process

Disassembly:
sub esp, 0x9d8
mov eax, dword [0x40706c]
xor eax, esp
mov dword [esp + 0x9d4], eax
push edi
push str.09:33:32
push str.Jul_28_2008
push str.AutoForm_remote_computing_daemon_4.2___s__s_
push 0x408a80
call sub.nutlibc4.dll_sprintf
add esp, 0x10
cmp dword [esp + 0x9e0], 2
jne 0x401820
mov eax, dword [esp + 0x9e4]
push esi
mov esi, dword [eax + 4]
mov edi, 0x405488
mov ecx, 3
xor edx, edx
repe cmpsb byte [esi], byte es:[edi]
pop esi
jne 0x401820
push 0x408a80
push 0x405484
call sub.nutlibc4.dll_printf
add esp, 8
push 0
call sub.nutlibc4.dll_exit
call sub.nutlibc4.dll_getpid
push eax
lea eax, [esp + 0xc]
push 0x405480
push eax
call sub.nutlibc4.dll_sprintf
lea ecx, [esp + 0x8b8]
push 0x12c
push ecx
call fcn.00404010
lea edx, [esp + 0x1c]
push edx
lea eax, [esp + 0x8c4]
push eax
lea ecx, [esp + 0x2ec]
push str._s_afcom.slv._s
push ecx
call sub.nutlibc4.dll_sprintf
lea edx, [esp + 0x2f4]
push 0x40546c
push edx
call fcn.00402190
add esp, 0x2c
test eax, eax
mov dword [0x408a78], eax
jne 0x40189b
push 0x40546c
push str._dev_null
call fcn.00402190
add esp, 8
mov dword [0x408a78], eax
lea eax, [esp + 0x2d0]
push 0x1a4
push eax
call sub.nutlibc4.dll_chmod
push 1
call sub.nutlibc4.dll_close
push 2
call sub.nutlibc4.dll_close
add esp, 0x10
call fcn.004031f0
test eax, eax
jge 0x4018ce
push 0xffffffffffffffff
call sub.nutlibc4.dll_exit
mov ecx, dword [0x408b08]
push 0x408af0
push ecx
call fcn.00403190
add esp, 8
test eax, eax
jge 0x4018ed
push 0xffffffffffffffff
call sub.nutlibc4.dll_exit
mov eax, dword [0x408b08]
push 0x408af0
push 0x1f4
lea edx, [esp + 0x80]
push edx
push eax
call fcn.00402e00
add esp, 0x10
test eax, eax
jge 0x401922
push 5
call fcn.004021e0
add esp, 4
push 0xffffffffffffffff
call sub.nutlibc4.dll_exit
mov ecx, dword [0x408b08]
push 0x408af0
push 0x408a80
push ecx
call fcn.00402bc0
add esp, 0xc
test eax, eax
jge 0x401950
push 6
call fcn.004021e0
add esp, 4
push 0xffffffffffffffff
call sub.nutlibc4.dll_exit
mov eax, dword [0x408b08]
push 0x408af0
push 0x1f4
lea edx, [esp + 0x80]
push edx
push eax
call fcn.00402e00
add esp, 0x10
test eax, eax
jge 0x401985
push 5
call fcn.004021e0
add esp, 4
push 0xffffffffffffffff
call sub.nutlibc4.dll_exit
push 0x12c
lea ecx, [esp + 0x7c]
push ecx
lea edx, [esp + 0x65c]
push edx
call sub.nutlibc4.dll_strncpy
mov ecx, dword [0x408b08]
push 0x408af0
push 0x1f4
lea eax, [esp + 0x8c]
push eax
push ecx
call fcn.00402e00
add esp, 0x1c
test eax, eax
jge 0x4019d2
push 5
call fcn.004021e0
add esp, 4
push 0xffffffffffffffff
call sub.nutlibc4.dll_exit
push 2
lea edx, [esp + 0x7c]
push edx
lea eax, [esp + 0x1c]
push eax
call sub.nutlibc4.dll_strncpy
lea edi, [esp + 0x20]
add esp, 0xc
add edi, 0xffffffff
lea ecx, [ecx]
mov al, byte [edi + 1]
add edi, 1
test al, al
jne 0x4019f0
mov eax, dword [0x408b08]
mov cx, word [0x405468]
push 0x408af0
push 0x1f4
lea edx, [esp + 0x80]
push edx
push eax
mov word [edi], cx
call fcn.00402e00
add esp, 0x10
test eax, eax
jge 0x401a39
push 5
call fcn.004021e0
add esp, 4
push 0xffffffffffffffff
call sub.nutlibc4.dll_exit
push 0x10
lea ecx, [esp + 0x7c]
push ecx
lea edx, [esp + 0x1c]
push edx
call sub.nutlibc4.dll_strncat
lea edi, [esp + 0x20]
add esp, 0xc
add edi, 0xffffffff
mov al, byte [edi + 1]
add edi, 1
test al, al
jne 0x401a54
mov edx, dword [0x408b08]
mov ax, word [0x405468]
push 0x408af0
push 0x1f4
lea ecx, [esp + 0x80]
push ecx
push edx
mov word [edi], ax
call fcn.00402e00
add esp, 0x10
test eax, eax
jge 0x401a9d
push 5
call fcn.004021e0
add esp, 4
push 0xffffffffffffffff
call sub.nutlibc4.dll_exit
push 0xa
lea eax, [esp + 0x7c]
push eax
lea ecx, [esp + 0x1c]
push ecx
call sub.nutlibc4.dll_strncat
lea edi, [esp + 0x20]
add esp, 0xc
add edi, 0xffffffff
mov al, byte [edi + 1]
add edi, 1
test al, al
jne 0x401ab8
mov dx, word [0x405468]
push 0xa
lea eax, [esp + 0xc]
push eax
lea ecx, [esp + 0x1c]
push ecx
mov word [edi], dx
call sub.nutlibc4.dll_strncat
lea eax, [esp + 0x20]
add esp, 0xc
add eax, 0xffffffff
mov cl, byte [eax + 1]
add eax, 1
test cl, cl
jne 0x401ae7
mov dx, word [0x405464]
mov cl, byte [0x405466]
mov word [eax], dx
push 0x408af0
push 0x1f4
lea edx, [esp + 0x80]
mov byte [eax + 2], cl
mov eax, dword [0x408b08]
push edx
push eax
call fcn.00402e00
add esp, 0x10
test eax, eax
jge 0x401b39
push 5
call fcn.004021e0
add esp, 4
push 0xffffffffffffffff
call sub.nutlibc4.dll_exit
push 0x64
lea ecx, [esp + 0x7c]
push ecx
lea edx, [esp + 0x274]
push edx
call sub.nutlibc4.dll_strncpy
mov ecx, dword [0x40545c]
mov dx, word [0x405460]
mov eax, dword [str.Account_OK]
mov dword [esp + 0x88], ecx
lea ecx, [esp + 0x278]
push ecx
push str.AF_USER_s
mov word [esp + 0x94], dx
mov dword [esp + 0x8c], eax
mov al, byte [0x405462]
lea edx, [esp + 0x794]
push 0x12c
push edx
mov byte [esp + 0x9e], al
call sub.nutlibc4.dll_snprintf
lea eax, [esp + 0x79c]
push eax
call sub.nutlibc4.dll_putenv
mov edx, dword [0x408b08]
push 0x408af0
lea ecx, [esp + 0x9c]
push ecx
push edx
call fcn.00402bc0
add esp, 0x2c
test eax, eax
jge 0x401bde
push 6
call fcn.004021e0
add esp, 4
push 0xffffffffffffffff
call sub.nutlibc4.dll_exit
push 0xa
lea eax, [esp + 0x7c]
push str.Account_OK
push eax
call sub.nutlibc4.dll_strncmp
add esp, 0xc
test eax, eax
je 0x401bfd
push 1
call sub.nutlibc4.dll_exit
lea ecx, [esp + 4]
push ecx
push str.cmd.exe
call fcn.004041c0
add esp, 8
test eax, eax
je 0x401c2b
push 0x12c
push eax
lea edx, [esp + 0x404]
push edx
call sub.nutlibc4.dll_strncpy
add esp, 0xc
jmp 0x401c73
push str.SystemRoot
call sub.nutlibc4.dll_getenv
add esp, 4
test eax, eax
je 0x401c5e
cmp byte [eax], 0
je 0x401c5e
push str.cmd.exe
push eax
lea eax, [esp + 0x404]
push str._s_system32_s
push eax
call sub.nutlibc4.dll_sprintf
add esp, 0x10
jmp 0x401c73
lea ecx, [esp + 0x3fc]
push str.cmd.exe
push ecx
call sub.nutlibc4.dll_sprintf
add esp, 8
push 1
lea edx, [esp + 0x52c]
push edx
lea eax, [esp + 0x404]
push eax
call sub.nutlibc4.dll__NutPathToWin32
lea ecx, [esp + 0x278]
push ecx
lea edx, [esp + 0x2e0]
push edx
lea eax, [esp + 0x28]
push eax
lea ecx, [esp + 0x66c]
push ecx
lea edx, [esp + 0x544]
push edx
lea eax, [esp + 0x548]
push eax
call fcn.00401500
add esp, 0x24
test eax, eax
jge 0x401d00
call sub.nutlibc4.dll_getpid
mov ecx, dword [0x408a78]
push eax
push str._d:
push ecx
call sub.nutlibc4.dll_fprintf
mov edx, dword [0x408a78]
push str.afcomd_terminated_n
push edx
call sub.nutlibc4.dll_fprintf
mov eax, dword [0x408a78]
push eax
call sub.nutlibc4.dll_fflush
add esp, 0x18
push 0xffffffffffffffff
call sub.nutlibc4.dll_exit
mov ecx, dword [esp + 0x9d8]
pop edi
xor ecx, esp
xor eax, eax
call fcn.00403990
add esp, 0x9d8
ret