Function at 0x406fde
Capabilities:
Delete file
Get hostname
Set console window title

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x114
mov eax, dword [0x5ca1e0]
xor eax, ebp
mov dword [ebp - 4], eax
and dword [ebp - 0x10c], 0
push ebx
push esi
push edi
push str.InstallationDir
push str.SOFTWAREAdventNetDesktopCentral_
push closesocket
mov dword [ebp - 0x110], 0x100
call fcn.004042e0
add esp, 0xc
test eax, eax
jne 0x407027
call fcn.004065c8
jmp 0x40703a
lea edi, [eax - 1]
mov cl, byte [edi + 1]
inc edi
test cl, cl
jne 0x40702a
mov esi, str.logs
movsd dword es:[edi], dword [esi]
movsw word es:[edi], word [esi]
push eax
call fcn.0040663f
mov dword [esp], str._n
call fcn.004068eb
call fcn.00406a8a
mov dword [0x5d01c4], eax
lea eax, [ebp - 0x114]
push eax
push 2
call fcn.004069a0
push 0x5d03c8
mov dword [0x5d06d8], eax
call fcn.004069f3
call fcn.004054da
push 0x568d7c
call fcn.004046ef
add esp, 0x14
test eax, eax
jne 0x4078dc
push 0x568d78
call fcn.004046ef
pop ecx
test eax, eax
jne 0x4078dc
push str.help
call fcn.004046ef
pop ecx
test eax, eax
jne 0x4078dc
cmp dword [0x5d06d8], eax
je 0x4078dc
mov eax, dword [0x5d01c4]
test eax, eax
je 0x4078dc
push eax
push str._s_:_Starting_Connection_to:
mov esi, 0x5d04c8
push esi
call fcn.0053300c
add esp, 0xc
push esi
call dword [sym.imp.KERNEL32.dll_SetConsoleTitleA]
xor ebx, ebx
inc ebx
push ebx
push 0x4054d5
call dword [sym.imp.KERNEL32.dll_SetConsoleCtrlHandler]
push str.GetComputerName____n
call fcn.004068eb
pop ecx
lea eax, [ebp - 0x110]
push eax
push 0x5d01c8
call dword [sym.imp.KERNEL32.dll_GetComputerNameA]
test eax, eax
jne 0x40715c
push str.GetComputerName___failed._Use_a_valid_name__:__n
push 0x5679b4
call fcn.00531723
push 0x20
pop edi
add eax, edi
push eax
call fcn.00532a3b
call fcn.00531723
add eax, edi
push eax
call fcn.00531a62
add esp, 0x10
call dword [sym.imp.KERNEL32.dll_GetLastError]
push eax
push str.GetComputerName___is_Failed_:_d_n
call fcn.004068eb
pop ecx
pop ecx
push 0xfffffffffffffffd
pop eax
jmp 0x4078ef
push str.SetConnectionCredentials____n
call fcn.004068eb
push 0
call fcn.00406b04
pop ecx
pop ecx
test eax, eax
jne 0x407183
call fcn.0040435e
mov dword [ebp - 0x10c], eax
jmp 0x4078ad
push dword [0x5d01c4]
push str.Remote_Machine_Name:__s__n
call fcn.004068eb
push dword [0x5d06d0]
push str.User_Name:__s__n
call fcn.004068eb
push dword [0x5d06d8]
push str.lpszCommandExe:__s__n
call fcn.004068eb
push str.cmd_exe_n
call fcn.004068eb
push 0x10
push dword [0x5c32d8]
push dword [0x5d01c4]
call fcn.005326c0
add esp, 0x28
test eax, eax
je 0x407739
push 0x10
push dword [0x5c32dc]
push dword [0x5d01c4]
call fcn.005326c0
add esp, 0xc
test eax, eax
je 0x407739
push 2
push 0x5686dc
push dword [0x5d01c4]
call fcn.005326c0
add esp, 0xc
test eax, eax
je 0x407739
push str.Initiating_Connection_to_Remote_Service_._._.___n
call fcn.004068eb
mov esi, 0x5679b4
mov dword [esp], str.Initiating_Connection_to_Remote_Service_._._.
push esi
call fcn.00531723
push 0x20
pop edi
add eax, edi
push eax
call fcn.00532a3b
call fcn.00531723
add eax, edi
push eax
call fcn.00531a62
push ebx
push str.ADMIN_
push dword [0x5d01c4]
call fcn.00406e70
add esp, 0x1c
test eax, eax
je 0x40730e
call fcn.0040435e
push str.Failed_n_n
push esi
mov dword [ebp - 0x10c], eax
call fcn.00531723
add eax, edi
push eax
call fcn.00532a3b
call fcn.00531723
add eax, edi
push eax
call fcn.00531a62
add esp, 0x10
push str.Couldnt_connect_to
push esi
call fcn.00531723
push 0x40
pop edi
add eax, edi
push eax
call fcn.00532a3b
call fcn.00531723
add eax, edi
push eax
call fcn.00531a62
add esp, 0x10
push dword [0x5d01c4]
push esi
call fcn.00531723
add eax, edi
push eax
call fcn.00532a3b
call fcn.00531723
add eax, edi
push eax
call fcn.00531a62
add esp, 0x10
push str.ADMIN__n
push esi
call fcn.00531723
add eax, edi
push eax
call fcn.00532a3b
call fcn.00531723
add eax, edi
push eax
call fcn.00531a62
push dword [0x5d01c4]
push str.Couldnt_Establish_connection_to_remote_machine__s__Admin__n
jmp 0x407652
push ebx
push str.IPC_
push dword [0x5d01c4]
call fcn.00406e70
add esp, 0xc
test eax, eax
je 0x4073d2
call fcn.0040435e
push str.Failed_n_n
push esi
mov dword [ebp - 0x10c], eax
call fcn.00531723
add eax, edi
push eax
call fcn.00532a3b
call fcn.00531723
add eax, edi
push eax
call fcn.00531a62
add esp, 0x10
push str.Couldnt_connect_to
push esi
call fcn.00531723
push 0x40
pop edi
add eax, edi
push eax
call fcn.00532a3b
call fcn.00531723
add eax, edi
push eax
call fcn.00531a62
add esp, 0x10
push dword [0x5d01c4]
push esi
call fcn.00531723
add eax, edi
push eax
call fcn.00532a3b
call fcn.00531723
add eax, edi
push eax
call fcn.00531a62
add esp, 0x10
push str.IPC__n
push esi
call fcn.00531723
add eax, edi
push eax
call fcn.00532a3b
call fcn.00531723
add eax, edi
push eax
call fcn.00531a62
push dword [0x5d01c4]
push str.Couldnt_Establish_connection_to_remote_machine__s__IPC___n
jmp 0x407652
call fcn.004048d0
test eax, eax
jne 0x4074ce
call fcn.0040435e
push str.Failed_n_n
push esi
mov dword [ebp - 0x10c], eax
call fcn.00531723
add eax, edi
push eax
call fcn.00532a3b
call fcn.00531723
add eax, edi
push eax
call fcn.00531a62
add esp, 0x10
push str.Couldnt_copy
push esi
call fcn.00531723
push 0x40
pop edi
add eax, edi
push eax
call fcn.00532a3b
call fcn.00531723
add eax, edi
push eax
call fcn.00531a62
add esp, 0x10
push dword [0x5d06d8]
push esi
call fcn.00531723
add eax, edi
push eax
call fcn.00532a3b
call fcn.00531723
add eax, edi
push eax
call fcn.00531a62
add esp, 0x10
push str._to
push esi
call fcn.00531723
add eax, edi
push eax
call fcn.00532a3b
call fcn.00531723
add eax, edi
push eax
call fcn.00531a62
add esp, 0x10
push dword [0x5d01c4]
push esi
call fcn.00531723
add eax, edi
push eax
call fcn.00532a3b
call fcn.00531723
add eax, edi
push eax
call fcn.00531a62
add esp, 0x10
push str.ADMIN_System32_n
push esi
call fcn.00531723
add eax, edi
push eax
call fcn.00532a3b
call fcn.00531723
add eax, edi
push eax
call fcn.00531a62
push dword [0x5d01c4]
push str.Couldnt_copy_binary_to_remote_machine___s__n
jmp 0x407652
push 0
push ebx
call fcn.00404c61
pop ecx
pop ecx
test eax, eax
jne 0x40772f
call fcn.00404a15
test eax, eax
jne 0x407595
call fcn.0040435e
push str.Failed_n_n
push esi
mov dword [ebp - 0x10c], eax
call fcn.00531723
add eax, edi
push eax
call fcn.00532a3b
call fcn.00531723
add eax, edi
push eax
call fcn.00531a62
add esp, 0x10
push str.Couldnt_copy_service_to
push esi
call fcn.00531723
push 0x40
pop edi
add eax, edi
push eax
call fcn.00532a3b
call fcn.00531723
add eax, edi
push eax
call fcn.00531a62
add esp, 0x10
push dword [0x5d01c4]
push esi
call fcn.00531723
add eax, edi
push eax
call fcn.00532a3b
call fcn.00531723
add eax, edi
push eax
call fcn.00531a62
add esp, 0x10
push str.ADMIN_System32_n
push esi
call fcn.00531723
add eax, edi
push eax
call fcn.00532a3b
call fcn.00531723
add eax, edi
push eax
call fcn.00531a62
push dword [0x5d01c4]
push str.Couldnt_copy_service_to_remote___s__machine__n
jmp 0x407652
call fcn.00404bc3
test eax, eax
jne 0x4076c8
call fcn.00404aec
test eax, eax
jne 0x40765f
call fcn.0040435e
push str.Failed_n_n
push esi
mov dword [ebp - 0x10c], eax
call fcn.00531723
add eax, edi
push eax
call fcn.00532a3b
call fcn.00531723
add eax, edi
push eax
call fcn.00531a62
add esp, 0x10
push str.Couldnt_copy_service_to
push esi
call fcn.00531723
push 0x40
pop edi
add eax, edi
push eax
call fcn.00532a3b
call fcn.00531723
add eax, edi
push eax
call fcn.00531a62
add esp, 0x10
push dword [0x5d01c4]
push esi
call fcn.00531723
add eax, edi
push eax
call fcn.00532a3b
call fcn.00531723
add eax, edi
push eax
call fcn.00531a62
add esp, 0x10
push str.ADMIN_SysWOW64_n
push esi
call fcn.00531723
add eax, edi
push eax
call fcn.00532a3b
call fcn.00531723
add eax, edi
push eax
call fcn.00531a62
push dword [0x5d01c4]
push str.Couldnt_copy_service_to_remote___s__machine_SysWOW64_n
call fcn.004068eb
add esp, 0x18
jmp 0x4078ad
call fcn.00404bc3
test eax, eax
jne 0x4076c8
call fcn.0040435e
push str.Failed_n_n
push esi
mov dword [ebp - 0x10c], eax
call fcn.00531723
add eax, edi
push eax
call fcn.00532a3b
call fcn.00531723
add eax, edi
push eax
call fcn.00531a62
add esp, 0x10
push str.Couldnt_start_remote_service_n
push esi
call fcn.00531723
push 0x40
pop edi
add eax, edi
push eax
call fcn.00532a3b
call fcn.00531723
add eax, edi
push eax
call fcn.00531a62
push str.Couldnt_Install__start_remote_service_n
call fcn.004068eb
jmp 0x4078aa
push 0x3e8
push 5
call fcn.00404c61
pop ecx
pop ecx
test eax, eax
jne 0x40772f
call fcn.0040435e
push str.Failed_n_n
push esi
mov dword [ebp - 0x10c], eax
call fcn.00531723
add eax, edi
push eax
call fcn.00532a3b
call fcn.00531723
add eax, edi
push eax
call fcn.00531a62
add esp, 0x10
mov ebx, str.Couldnt_connect_to_remote_service_n
push ebx
push esi
call fcn.00531723
push 0x40
pop edi
add eax, edi
push eax
call fcn.00532a3b
call fcn.00531723
add eax, edi
push eax
call fcn.00531a62
push ebx
jmp 0x4076be
call fcn.00405394
jmp 0x407178
push str.lpszMachineName_check__n
call fcn.004068eb
pop ecx
call fcn.00404484
push 0x20
mov esi, 0x5679b4
pop edi
test eax, eax
je 0x407778
push str.Local_Admin_n_n
push esi
call fcn.00531723
add eax, edi
push eax
call fcn.00532a3b
call fcn.00531723
add eax, edi
push eax
call fcn.00531a62
add esp, 0x10
mov ebx, str.Localhost_entered_for_Target_Machine_.._Going_to_RunAs_Command_n_n
push ebx
call fcn.004068eb
pop ecx
push ebx
push esi
call fcn.00531723
add eax, edi
push eax
call fcn.00532a3b
call fcn.00531723
add eax, edi
push eax
call fcn.00531a62
add esp, 0x10
mov dword [0x5d01c4], 0x567988
call fcn.00404965
test eax, eax
je 0x40785c
push str.Launching_Local_Process_..._n
push esi
call fcn.00531723
add eax, edi
push eax
call fcn.00532a3b
call fcn.00531723
add eax, edi
push eax
call fcn.00531a62
push 0x103
lea eax, [ebp - 0x107]
push 0
push eax
mov byte [ebp - 0x108], 0
call fcn.00530a90
push dword [0x5d06d8]
mov ebx, 0x5d05c8
push dword [0x5d06cc]
lea eax, [ebp - 0x108]
push dword [0x5d06d0]
push ebx
push str._s__s__s__s
push eax
call fcn.0053300c
lea eax, [ebp - 0x108]
push eax
call fcn.004061d9
add esp, 0x38
test eax, eax
jne 0x407853
push str.Create_Local_Process_Failed._Illegal_Command
push esi
call fcn.00531723
add eax, edi
push eax
call fcn.00532a3b
call fcn.00531723
add eax, edi
push eax
call fcn.00531a62
add esp, 0x10
push ebx
call dword [sym.imp.KERNEL32.dll_DeleteFileA]
jmp 0x4078ad
push str.Cannot_Extract_Local_Resources._Please_check_write_access_to_local_tmp_filesystem_n
push esi
call fcn.00531723
add eax, edi
push eax
call fcn.00532a3b
call fcn.00531723
add eax, edi
push eax
call fcn.00531a62
add esp, 0x10
push str.Create_Process_as_User_Failed._Trying_to_run_the_process_with_the_current_user_n_n
push esi
call fcn.00531723
add eax, edi
push eax
call fcn.00532a3b
call fcn.00531723
add eax, edi
push eax
call fcn.00531a62
push dword [0x5d06d8]
call fcn.004061d9
add esp, 0x14
push 0
push str.IPC_
push dword [0x5d01c4]
call fcn.00406e70
push 0
push str.ADMIN_
push dword [0x5d01c4]
call fcn.00406e70
mov eax, dword [ebp - 0x10c]
add esp, 0x18
jmp 0x4078ef
call fcn.00405595
push str.ShowUsage__or__Wrong_CommandLine_argument__or__Machine_Name_may_be_Null__n
call fcn.004068eb
pop ecx
or eax, 0xffffffff
mov ecx, dword [ebp - 4]
pop edi
pop esi
xor ecx, ebp
pop ebx
call fcn.005310be
leave
ret