Function at 0x4010eb
Capabilities:
Delete file
Set current directory

Disassembly:
jmp 0x4032e0
mov eax, dword [esp + 8]
push ebx
push ebp
mov ebp, dword [eax + 4]
push esi
push edi
push 0x3e8
push 2
call fcn.00408600
push 0x3e8
push 2
mov edi, eax
call fcn.00408600
push str.InstallPath
push str.SOFTWAREZOHO_CorpManageEngine_AssetExplorerAgent
push str.HKEY_LOCAL_MACHINE
mov dword [esp + 0x34], eax
call fcn.00401073
push 0x3e8
push 2
mov ebx, eax
call fcn.00408600
add esp, 0x24
test ebx, ebx
mov esi, eax
je 0x40334f
push 0x477ac0
push ebx
push 0x476d30
push esi
call fcn.004010c8
add esp, 0x10
push esi
call dword [sym.imp.KERNEL32.dll_SetCurrentDirectoryW]
push 1
push 1
push 3
push str.aeservice.log
call dword [0x48830c]
push 0x4781a4
push 0x477ac0
push ebx
push str.__s_s_s_
push edi
call fcn.004010c8
mov esi, dword [esp + 0x3c]
push str.Service.exe
push ebx
push str.__sRemoteControl_s
push esi
call fcn.004010c8
add esp, 0x34
cmp dword [esp + 0x14], 1
jne 0x4033ce
call fcn.00401109
push 0x48e098
call dword [sym.imp.ADVAPI32.dll_StartServiceCtrlDispatcherW]
test eax, eax
jne 0x4033c7
call dword [sym.imp.KERNEL32.dll_GetLastError]
push eax
push str.StartServiceCtrlDispatcher_failure_with_the_error_code___d.
push 1
push 0x56
push str...main_srcAgentMonitor.cpp
call dword [0x488308]
add esp, 0x14
pop edi
pop esi
pop ebp
xor eax, eax
pop ebx
ret
push ebp
push 0x47810c
call fcn.0040f190
add esp, 8
test eax, eax
jne 0x4034b2
mov ebx, dword [sym.agentmonitor.exe_Log]
push str.ManageEngine_AssetExplorer_Agent
push str.Calling_install_option_of__S_service.
push 3
push 0x5e
push str...main_srcAgentMonitor.cpp
call ebx
push str.ManageEngine_AssetExplorer_Agent
call fcn.00401041
add esp, 0x18
test eax, eax
je 0x40341f
push str.ManageEngine_AssetExplorer_Agent
call fcn.00401082
add esp, 4
jmp 0x403448
call fcn.004010ff
push str.Monitor_the_Inventory_changes_for_the_AssetExplorer_Software.
push 2
push edi
push str.ManageEngine_AssetExplorer_Agent
call fcn.00401023
call fcn.00401019
push str.ManageEngine_AssetExplorer_Agent
call fcn.00401082
add esp, 0x14
push str.ManageEngine_AssetExplorer_RemoteControl
call fcn.00401041
add esp, 4
test eax, eax
je 0x403485
push str.ManageEngine_AssetExplorer_RemoteControl
push str.Calling_uninstall_option_of__S_service_n
push 3
push 0x6d
push str...main_srcAgentMonitor.cpp
call ebx
push str.ManageEngine_AssetExplorer_RemoteControl
call fcn.0040110e
push str.ManageEngine_AssetExplorer_RemoteControl
call fcn.0040105a
add esp, 0x1c
push 0x477f48
call fcn.00401041
add esp, 4
test eax, eax
jne 0x4034ab
push str.Remote_desktop_sharing_of_AssetExplorer_Software.
push 3
push esi
push 0x477f48
call fcn.00401023
add esp, 0x10
pop edi
pop esi
pop ebp
xor eax, eax
pop ebx
ret
push ebp
push 0x477ec8
call fcn.0040f190
add esp, 8
test eax, eax
jne 0x403552
push str.ManageEngine_AssetExplorer_Agent
call fcn.00401041
mov esi, dword [sym.agentmonitor.exe_Log]
add esp, 4
test eax, eax
je 0x40350b
push str.ManageEngine_AssetExplorer_Agent
push str.Calling_uninstall_option_of__S_service_n
push 3
push 0x7b
push str...main_srcAgentMonitor.cpp
call esi
push str.ManageEngine_AssetExplorer_Agent
call fcn.0040110e
push str.ManageEngine_AssetExplorer_Agent
call fcn.0040105a
add esp, 0x1c
push 0x477f48
call fcn.00401041
add esp, 4
test eax, eax
je 0x40354b
push 0x477f48
push str.Calling_uninstall_option_of__S_service_n
push 3
push 0x81
push str...main_srcAgentMonitor.cpp
call esi
push 0x477f48
call fcn.0040110e
push 0x477f48
call fcn.0040105a
add esp, 0x1c
pop edi
pop esi
pop ebp
xor eax, eax
pop ebx
ret
push ebp
push 0x477ec4
call fcn.0040f190
add esp, 8
test eax, eax
jne 0x40387b
push str.ManageEngine_AssetExplorer_Agent
call fcn.00401041
mov ebp, dword [sym.agentmonitor.exe_Log]
add esp, 4
test eax, eax
je 0x4035ae
push str.ManageEngine_AssetExplorer_Agent
push str.Calling_uninstall_option_of__S_service_n
push 3
push 0x8b
push str...main_srcAgentMonitor.cpp
call ebp
push str.ManageEngine_AssetExplorer_Agent
call fcn.0040110e
push str.ManageEngine_AssetExplorer_Agent
call fcn.0040105a
add esp, 0x1c
push 0x477f48
call fcn.00401041
add esp, 4
test eax, eax
je 0x4035ee
push 0x477f48
push str.Calling_uninstall_option_of__S_service_n
push 3
push 0x91
push str...main_srcAgentMonitor.cpp
call ebp
push 0x477f48
call fcn.0040110e
push 0x477f48
call fcn.0040105a
add esp, 0x1c
mov esi, 0x48e048
mov ecx, dword [esi]
push ecx
call fcn.004010cd
add esi, 4
add esp, 4
cmp esi, 0x48e058
jl 0x4035f3
push ebx
push str.installPath_is__S
push 3
push 0x9b
push str...main_srcAgentMonitor.cpp
call ebp
add esp, 0x14
test ebx, ebx
je 0x403874
mov edi, dword [sym.imp.KERNEL32.dll_DeleteFileW]
mov dword [esp + 0x18], 0x48e058
jmp 0x403640
push 0x3e8
push 2
call fcn.00408600
mov edx, dword [esp + 0x20]
mov esi, eax
mov eax, dword [edx]
push eax
push 0x477ac0
push ebx
push str._s_s_s
push esi
call fcn.004010c8
push esi
push str.delete_the_file__:_S
push 3
push 0xa4
push str...main_srcAgentMonitor.cpp
call ebp
add esp, 0x30
push esi
call edi
test esi, esi
je 0x40368d
push esi
call fcn.00408fc0
add esp, 4
mov eax, dword [esp + 0x18]
add eax, 4
cmp eax, 0x48e064
mov dword [esp + 0x18], eax
jl 0x403640
mov dword [esp + 0x18], str.aeagent.log
jmp 0x4036b0
push 0x3e8
push 2
call fcn.00408600
mov ecx, dword [esp + 0x20]
mov edx, dword [ecx]
push edx
push 0x477840
push ebx
mov esi, eax
push str._s_s_s
push esi
call fcn.004010c8
push esi
push str.delete_the_file_:_S
push 3
push 0xad
push str...main_srcAgentMonitor.cpp
call ebp
add esp, 0x30
push esi
call edi
test esi, esi
je 0x4036fd
push esi
call fcn.00408fc0
add esp, 4
mov eax, dword [esp + 0x18]
add eax, 4
cmp eax, 0x48e080
mov dword [esp + 0x18], eax
jl 0x4036b0
mov dword [esp + 0x18], str.Connection.conf
jmp 0x403720
push 0x3e8
push 2
call fcn.00408600
mov esi, eax
mov eax, dword [esp + 0x20]
mov ecx, dword [eax]
push ecx
push str.RemoteControl
push ebx
push str._s_s_s
push esi
call fcn.004010c8
push esi
push str.delete_the_file_:_S
push 3
push 0xb6
push str...main_srcAgentMonitor.cpp
call ebp
add esp, 0x30
push esi
call edi
test esi, esi
je 0x40376d
push esi
call fcn.00408fc0
add esp, 4
mov eax, dword [esp + 0x18]
add eax, 4
cmp eax, 0x48e088
mov dword [esp + 0x18], eax
jl 0x403720
push 0x3e8
push 2
call fcn.00408600
mov edx, dword [str.LogFile.log]
push edx
push str.RemoteControl
push ebx
mov esi, eax
push str._s_slog_s
push esi
call fcn.004010c8
push esi
push str.delete_the_file_:_S
push 3
push 0xbf
push str...main_srcAgentMonitor.cpp
call ebp
add esp, 0x30
push esi
call edi
test esi, esi
je 0x4037cc
push esi
call fcn.00408fc0
add esp, 4
mov dword [esp + 0x18], 0x48e08c
push 0x3e8
push 2
call fcn.00408600
mov esi, eax
mov eax, dword [esp + 0x20]
mov ecx, dword [eax]
push ecx
push str.RemoteControl
push ebx
push str._s_s_s
push esi
call fcn.004010c8
push esi
push str.delete_the_dir:_S
push 3
push 0xc8
push str...main_srcAgentMonitor.cpp
call ebp
push 0x3e8
push 2
call fcn.00408600
push esi
mov edi, eax
push 0x477de4
push edi
call fcn.004010c8
add esp, 0x44
push 0
push edi
push 0x477de0
call fcn.0040105f
add esp, 0xc
test edi, edi
je 0x403848
push edi
call fcn.00408fc0
add esp, 4
test esi, esi
je 0x403855
push esi
call fcn.00408fc0
add esp, 4
mov eax, dword [esp + 0x18]
add eax, 4
cmp eax, 0x48e098
mov dword [esp + 0x18], eax
jl 0x4037d4
push ebx
call fcn.00408fc0
add esp, 4
pop edi
pop esi
pop ebp
xor eax, eax
pop ebx
ret
push ebp
push str.Invalid_parameter__s_.
push 3
push 0xd5
push str...main_srcAgentMonitor.cpp
call dword [0x488308]
add esp, 0x14
pop edi
pop esi
pop ebp
mov eax, 1
pop ebx
ret