Function at 0x57bd32
Capabilities:
Delete file
Get hostname
Set console window title

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x114
mov eax, dword [0x6c6e10]
xor eax, ebp
mov dword [ebp - 4], eax
push ebx
push esi
push edi
push str.Remcom_EC_V2:
call fcn.005dcd3f
and dword [ebp - 0x10c], 0
mov dword [esp], str.InstallationDir
push str.SOFTWAREAdventNetDesktopCentral_
push reloc.WS2_32.dll_bind
mov dword [ebp - 0x110], 0x1000
call fcn.00578692
add esp, 0xc
test eax, eax
jne 0x57bd87
call fcn.0057a985
jmp 0x57bd9a
lea edi, [eax - 1]
mov cl, byte [edi + 1]
inc edi
test cl, cl
jne 0x57bd8a
mov esi, str.logs
movsd dword es:[edi], dword [esi]
movsw word es:[edi], word [esi]
push eax
call fcn.0057a9fc
mov dword [esp], str._n
call fcn.0057affd
call fcn.0057b2c9
mov dword [0x6ccda4], eax
lea eax, [ebp - 0x114]
push eax
push 2
call fcn.0057b1df
push 0x6ceda8
mov dword [0x6d0eb8], eax
call fcn.0057b232
call fcn.00579898
push 0x646d64
call fcn.00578aa1
add esp, 0x14
test eax, eax
jne 0x57c646
push 0x646d60
call fcn.00578aa1
pop ecx
test eax, eax
jne 0x57c646
push str.help
call fcn.00578aa1
pop ecx
test eax, eax
jne 0x57c646
cmp dword [0x6d0eb8], eax
je 0x57c646
mov eax, dword [0x6ccda4]
test eax, eax
je 0x57c646
push eax
push str._s_:_Starting_Connection_to:
mov esi, 0x6cfda8
push esi
call fcn.005dd5b8
add esp, 0xc
push esi
call dword [sym.imp.KERNEL32.dll_SetConsoleTitleA]
xor ebx, ebx
inc ebx
push ebx
push 0x579893
call dword [sym.imp.KERNEL32.dll_SetConsoleCtrlHandler]
push str.GetComputerName____n
call fcn.0057affd
pop ecx
lea eax, [ebp - 0x110]
push eax
push 0x6ccda8
call dword [sym.imp.KERNEL32.dll_GetComputerNameA]
test eax, eax
jne 0x57bebc
push str.GetComputerName___failed._Use_a_valid_name__:__n
push 0x6aa570
call fcn.005e1f9e
push 0x20
pop edi
add eax, edi
push eax
call fcn.005e3085
call fcn.005e1f9e
add eax, edi
push eax
call fcn.005e22df
add esp, 0x10
call dword [sym.imp.KERNEL32.dll_GetLastError]
push eax
push str.GetComputerName___is_Failed_:_d_n
call fcn.0057affd
pop ecx
pop ecx
push 0xfffffffffffffffd
pop eax
jmp 0x57c659
push str.SetConnectionCredentials____n
call fcn.0057affd
push 0
call fcn.0057b343
pop ecx
pop ecx
test eax, eax
jne 0x57bee3
call fcn.00578710
mov dword [ebp - 0x10c], eax
jmp 0x57c612
push dword [0x6ccda4]
push str.Remote_Machine_Name:__s__n
call fcn.0057affd
push dword [0x6d0eb0]
push str.User_Name:__s__n
call fcn.0057affd
push dword [0x6d0eb8]
push str.lpszCommandExe:__s__n
call fcn.0057affd
push str.cmd_exe_n
call fcn.0057affd
push 0x10
push dword [0x6c646c]
push dword [0x6ccda4]
call fcn.005e2dbc
add esp, 0x28
test eax, eax
je 0x57c49e
push 0x10
push dword [0x6c6470]
push dword [0x6ccda4]
call fcn.005e2dbc
add esp, 0xc
test eax, eax
je 0x57c49e
push 2
push 0x6465e4
push dword [0x6ccda4]
call fcn.005e2dbc
add esp, 0xc
test eax, eax
je 0x57c49e
push str.Initiating_Connection_to_Remote_Service_._._.___n
call fcn.0057affd
mov esi, 0x6aa570
mov dword [esp], str.Initiating_Connection_to_Remote_Service_._._.
push esi
call fcn.005e1f9e
push 0x20
pop edi
add eax, edi
push eax
call fcn.005e3085
call fcn.005e1f9e
add eax, edi
push eax
call fcn.005e22df
push ebx
push str.ADMIN_
push dword [0x6ccda4]
call fcn.0057bbac
add esp, 0x1c
test eax, eax
je 0x57c06e
call fcn.00578710
push str.Failed_n_n
push esi
mov dword [ebp - 0x10c], eax
call fcn.005e1f9e
add eax, edi
push eax
call fcn.005e3085
call fcn.005e1f9e
add eax, edi
push eax
call fcn.005e22df
add esp, 0x10
push str.Couldnt_connect_to
push esi
call fcn.005e1f9e
push 0x40
pop edi
add eax, edi
push eax
call fcn.005e3085
call fcn.005e1f9e
add eax, edi
push eax
call fcn.005e22df
add esp, 0x10
push dword [0x6ccda4]
push esi
call fcn.005e1f9e
add eax, edi
push eax
call fcn.005e3085
call fcn.005e1f9e
add eax, edi
push eax
call fcn.005e22df
add esp, 0x10
push str.ADMIN__n
push esi
call fcn.005e1f9e
add eax, edi
push eax
call fcn.005e3085
call fcn.005e1f9e
add eax, edi
push eax
call fcn.005e22df
push dword [0x6ccda4]
push str.Couldnt_Establish_connection_to_remote_machine__s__Admin__n
jmp 0x57c3b7
push ebx
push str.IPC_
push dword [0x6ccda4]
call fcn.0057bbac
add esp, 0xc
test eax, eax
je 0x57c132
call fcn.00578710
push str.Failed_n_n
push esi
mov dword [ebp - 0x10c], eax
call fcn.005e1f9e
add eax, edi
push eax
call fcn.005e3085
call fcn.005e1f9e
add eax, edi
push eax
call fcn.005e22df
add esp, 0x10
push str.Couldnt_connect_to
push esi
call fcn.005e1f9e
push 0x40
pop edi
add eax, edi
push eax
call fcn.005e3085
call fcn.005e1f9e
add eax, edi
push eax
call fcn.005e22df
add esp, 0x10
push dword [0x6ccda4]
push esi
call fcn.005e1f9e
add eax, edi
push eax
call fcn.005e3085
call fcn.005e1f9e
add eax, edi
push eax
call fcn.005e22df
add esp, 0x10
push str.IPC__n
push esi
call fcn.005e1f9e
add eax, edi
push eax
call fcn.005e3085
call fcn.005e1f9e
add eax, edi
push eax
call fcn.005e22df
push dword [0x6ccda4]
push str.Couldnt_Establish_connection_to_remote_machine__s__IPC___n
jmp 0x57c3b7
call fcn.0057b0b2
call fcn.00578c82
test eax, eax
jne 0x57c233
call fcn.00578710
push str.Failed_n_n
push esi
mov dword [ebp - 0x10c], eax
call fcn.005e1f9e
add eax, edi
push eax
call fcn.005e3085
call fcn.005e1f9e
add eax, edi
push eax
call fcn.005e22df
add esp, 0x10
push str.Couldnt_copy
push esi
call fcn.005e1f9e
push 0x40
pop edi
add eax, edi
push eax
call fcn.005e3085
call fcn.005e1f9e
add eax, edi
push eax
call fcn.005e22df
add esp, 0x10
push dword [0x6d0eb8]
push esi
call fcn.005e1f9e
add eax, edi
push eax
call fcn.005e3085
call fcn.005e1f9e
add eax, edi
push eax
call fcn.005e22df
add esp, 0x10
push str._to
push esi
call fcn.005e1f9e
add eax, edi
push eax
call fcn.005e3085
call fcn.005e1f9e
add eax, edi
push eax
call fcn.005e22df
add esp, 0x10
push dword [0x6ccda4]
push esi
call fcn.005e1f9e
add eax, edi
push eax
call fcn.005e3085
call fcn.005e1f9e
add eax, edi
push eax
call fcn.005e22df
add esp, 0x10
push str.ADMIN_System32_n
push esi
call fcn.005e1f9e
add eax, edi
push eax
call fcn.005e3085
call fcn.005e1f9e
add eax, edi
push eax
call fcn.005e22df
push dword [0x6ccda4]
push str.Couldnt_copy_binary_to_remote_machine___s__n
jmp 0x57c3b7
push 0
push ebx
call fcn.00579013
pop ecx
pop ecx
test eax, eax
jne 0x57c494
call fcn.00578dc7
test eax, eax
jne 0x57c2fa
call fcn.00578710
push str.Failed_n_n
push esi
mov dword [ebp - 0x10c], eax
call fcn.005e1f9e
add eax, edi
push eax
call fcn.005e3085
call fcn.005e1f9e
add eax, edi
push eax
call fcn.005e22df
add esp, 0x10
push str.Couldnt_copy_service_to
push esi
call fcn.005e1f9e
push 0x40
pop edi
add eax, edi
push eax
call fcn.005e3085
call fcn.005e1f9e
add eax, edi
push eax
call fcn.005e22df
add esp, 0x10
push dword [0x6ccda4]
push esi
call fcn.005e1f9e
add eax, edi
push eax
call fcn.005e3085
call fcn.005e1f9e
add eax, edi
push eax
call fcn.005e22df
add esp, 0x10
push str.ADMIN_System32_n
push esi
call fcn.005e1f9e
add eax, edi
push eax
call fcn.005e3085
call fcn.005e1f9e
add eax, edi
push eax
call fcn.005e22df
push dword [0x6ccda4]
push str.Couldnt_copy_service_to_remote___s__machine__n
jmp 0x57c3b7
call fcn.00578f75
test eax, eax
jne 0x57c42d
call fcn.00578e9e
test eax, eax
jne 0x57c3c4
call fcn.00578710
push str.Failed_n_n
push esi
mov dword [ebp - 0x10c], eax
call fcn.005e1f9e
add eax, edi
push eax
call fcn.005e3085
call fcn.005e1f9e
add eax, edi
push eax
call fcn.005e22df
add esp, 0x10
push str.Couldnt_copy_service_to
push esi
call fcn.005e1f9e
push 0x40
pop edi
add eax, edi
push eax
call fcn.005e3085
call fcn.005e1f9e
add eax, edi
push eax
call fcn.005e22df
add esp, 0x10
push dword [0x6ccda4]
push esi
call fcn.005e1f9e
add eax, edi
push eax
call fcn.005e3085
call fcn.005e1f9e
add eax, edi
push eax
call fcn.005e22df
add esp, 0x10
push str.ADMIN_SysWOW64_n
push esi
call fcn.005e1f9e
add eax, edi
push eax
call fcn.005e3085
call fcn.005e1f9e
add eax, edi
push eax
call fcn.005e22df
push dword [0x6ccda4]
push str.Couldnt_copy_service_to_remote___s__machine_SysWOW64_n
call fcn.0057affd
add esp, 0x18
jmp 0x57c612
call fcn.00578f75
test eax, eax
jne 0x57c42d
call fcn.00578710
push str.Failed_n_n
push esi
mov dword [ebp - 0x10c], eax
call fcn.005e1f9e
add eax, edi
push eax
call fcn.005e3085
call fcn.005e1f9e
add eax, edi
push eax
call fcn.005e22df
add esp, 0x10
push str.Couldnt_start_remote_service_n
push esi
call fcn.005e1f9e
push 0x40
pop edi
add eax, edi
push eax
call fcn.005e3085
call fcn.005e1f9e
add eax, edi
push eax
call fcn.005e22df
push str.Couldnt_Install__start_remote_service_n
call fcn.0057affd
jmp 0x57c60f
push 0x3e8
push 5
call fcn.00579013
pop ecx
pop ecx
test eax, eax
jne 0x57c494
call fcn.00578710
push str.Failed_n_n
push esi
mov dword [ebp - 0x10c], eax
call fcn.005e1f9e
add eax, edi
push eax
call fcn.005e3085
call fcn.005e1f9e
add eax, edi
push eax
call fcn.005e22df
add esp, 0x10
mov ebx, str.Couldnt_connect_to_remote_service_n
push ebx
push esi
call fcn.005e1f9e
push 0x40
pop edi
add eax, edi
push eax
call fcn.005e3085
call fcn.005e1f9e
add eax, edi
push eax
call fcn.005e22df
push ebx
jmp 0x57c423
call fcn.00579752
jmp 0x57bed8
push str.lpszMachineName_check__n
call fcn.0057affd
pop ecx
call fcn.00578836
push 0x20
mov esi, 0x6aa570
pop edi
test eax, eax
je 0x57c4dd
push str.Local_Admin_n_n
push esi
call fcn.005e1f9e
add eax, edi
push eax
call fcn.005e3085
call fcn.005e1f9e
add eax, edi
push eax
call fcn.005e22df
add esp, 0x10
mov ebx, str.Localhost_entered_for_Target_Machine_.._Going_to_RunAs_Command_n_n
push ebx
call fcn.0057affd
pop ecx
push ebx
push esi
call fcn.005e1f9e
add eax, edi
push eax
call fcn.005e3085
call fcn.005e1f9e
add eax, edi
push eax
call fcn.005e22df
add esp, 0x10
mov dword [0x6ccda4], 0x64571c
call fcn.00578d17
test eax, eax
je 0x57c5c1
push str.Launching_Local_Process_..._n
push esi
call fcn.005e1f9e
add eax, edi
push eax
call fcn.005e3085
call fcn.005e1f9e
add eax, edi
push eax
call fcn.005e22df
push 0x103
lea eax, [ebp - 0x107]
push 0
push eax
mov byte [ebp - 0x108], 0
call fcn.005dd9b0
push dword [0x6d0eb8]
mov ebx, 0x6d0da8
push dword [0x6d0eac]
lea eax, [ebp - 0x108]
push dword [0x6d0eb0]
push ebx
push str._s__s__s__s
push eax
call fcn.005dd5b8
lea eax, [ebp - 0x108]
push eax
call fcn.0057a596
add esp, 0x38
test eax, eax
jne 0x57c5b8
push str.Create_Local_Process_Failed._Illegal_Command
push esi
call fcn.005e1f9e
add eax, edi
push eax
call fcn.005e3085
call fcn.005e1f9e
add eax, edi
push eax
call fcn.005e22df
add esp, 0x10
push ebx
call dword [sym.imp.KERNEL32.dll_DeleteFileA]
jmp 0x57c612
push str.Cannot_Extract_Local_Resources._Please_check_write_access_to_local_tmp_filesystem_n
push esi
call fcn.005e1f9e
add eax, edi
push eax
call fcn.005e3085
call fcn.005e1f9e
add eax, edi
push eax
call fcn.005e22df
add esp, 0x10
push str.Create_Process_as_User_Failed._Trying_to_run_the_process_with_the_current_user_n_n
push esi
call fcn.005e1f9e
add eax, edi
push eax
call fcn.005e3085
call fcn.005e1f9e
add eax, edi
push eax
call fcn.005e22df
push dword [0x6d0eb8]
call fcn.0057a596
add esp, 0x14
push 0
push str.IPC_
push dword [0x6ccda4]
call fcn.0057bbac
push 0
push str.ADMIN_
push dword [0x6ccda4]
call fcn.0057bbac
add esp, 0x18
call fcn.0057b0b2
mov eax, dword [ebp - 0x10c]
jmp 0x57c659
call fcn.00579953
push str.ShowUsage__or__Wrong_CommandLine_argument__or__Machine_Name_may_be_Null__n
call fcn.0057affd
pop ecx
or eax, 0xffffffff
mov ecx, dword [ebp - 4]
pop edi
pop esi
xor ecx, ebp
pop ebx
call fcn.005dcf8a
leave
ret