Function at 0x40336a
Capabilities:
Delete file
Get hostname
Set console window title

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x114
mov eax, dword [0x41b2a0]
xor eax, ebp
mov dword [ebp - 4], eax
push ebx
push esi
push edi
xor edi, edi
mov dword [ebp - 0x10c], edi
mov dword [ebp - 0x110], 0x500
call fcn.00401538
mov dword [0x41d304], eax
lea eax, [ebp - 0x114]
push eax
push 2
call fcn.00401455
push 0x41c800
mov dword [0x41d314], eax
call fcn.004014bb
call fcn.004023c9
push 0x417334
call fcn.004013ac
add esp, 0x10
test eax, eax
jne 0x403acc
push 0x417330
call fcn.004013ac
pop ecx
test eax, eax
jne 0x403acc
push str.help
call fcn.004013ac
pop ecx
test eax, eax
jne 0x403acc
cmp dword [0x41d314], edi
je 0x403acc
mov eax, dword [0x41d304]
cmp eax, edi
je 0x403acc
push eax
push str._s_:_Starting_Connection_to:
mov esi, 0x41cd00
push esi
call fcn.00404f38
add esp, 0xc
push esi
call dword [sym.imp.KERNEL32.dll_SetConsoleTitleA]
xor ebx, ebx
inc ebx
push ebx
push 0x4023c4
call dword [sym.imp.KERNEL32.dll_SetConsoleCtrlHandler]
lea eax, [ebp - 0x110]
push eax
push 0x41be00
call dword [sym.imp.KERNEL32.dll_GetComputerNameA]
test eax, eax
jne 0x403484
push str.GetComputerName___failed._Use_a_valid_name__:__n
push 0x4162b8
call fcn.00404770
push 0x40
pop edi
add eax, edi
push eax
call fcn.004045da
call fcn.00404770
add eax, edi
push eax
call fcn.0040457e
add esp, 0x10
push 0xfffffffffffffffd
pop eax
jmp 0x403ad4
push edi
call fcn.004016ca
pop ecx
test eax, eax
jne 0x40349e
mov dword [ebp - 0x10c], 0xfffffffe
jmp 0x403a9d
push 0x10
push dword [0x41b004]
push dword [0x41d304]
call fcn.004043da
add esp, 0xc
test eax, eax
je 0x403939
push 0x10
push dword [0x41b008]
push dword [0x41d304]
call fcn.004043da
add esp, 0xc
test eax, eax
je 0x403939
push 2
push 0x4162c0
push dword [0x41d304]
call fcn.004043da
add esp, 0xc
test eax, eax
je 0x403939
push str.Initiating_Connection_to_Remote_Service_._._.
mov esi, 0x4162b8
push esi
call fcn.00404770
push 0x40
pop edi
add eax, edi
push eax
call fcn.004045da
call fcn.00404770
add eax, edi
push eax
call fcn.0040457e
push ebx
push str.ADMIN_
push dword [0x41d304]
call fcn.0040173b
add esp, 0x1c
test eax, eax
jne 0x4035d9
call dword [sym.imp.KERNEL32.dll_GetLastError]
sub eax, 5
je 0x40355b
sub eax, 0x51
je 0x40355b
sub eax, 0x46d
je 0x40355b
sub eax, 0x6b
jne 0x403621
push str.Failed_n_n
push esi
mov dword [ebp - 0x10c], 0xfffffffc
call fcn.00404770
add eax, edi
push eax
call fcn.004045da
call fcn.00404770
add eax, edi
push eax
call fcn.0040457e
add esp, 0x10
push str.Couldnt_connect_to
push esi
call fcn.00404770
add eax, edi
push eax
call fcn.004045da
call fcn.00404770
add eax, edi
push eax
call fcn.0040457e
add esp, 0x10
push dword [0x41d304]
push esi
call fcn.00404770
add eax, edi
push eax
call fcn.004045da
call fcn.00404770
add eax, edi
push eax
call fcn.0040457e
add esp, 0x10
push str.ADMIN__n
jmp 0x40373b
push ebx
push str.IPC_
push dword [0x41d304]
call fcn.0040173b
add esp, 0xc
test eax, eax
jne 0x403763
call dword [sym.imp.KERNEL32.dll_GetLastError]
sub eax, 5
je 0x4036c2
sub eax, 0x51
je 0x4036c2
sub eax, 0x46d
je 0x4036c2
sub eax, 0x6b
je 0x4036c2
push str.Failed_n_n
push esi
mov dword [ebp - 0x10c], 0xfffffffb
call fcn.00404770
add eax, edi
push eax
call fcn.004045da
call fcn.00404770
add eax, edi
push eax
call fcn.0040457e
add esp, 0x10
push str.Couldnt_connect_to
push esi
call fcn.00404770
add eax, edi
push eax
call fcn.004045da
call fcn.00404770
add eax, edi
push eax
call fcn.0040457e
add esp, 0x10
push dword [0x41d304]
push esi
call fcn.00404770
add eax, edi
push eax
call fcn.004045da
call fcn.00404770
add eax, edi
push eax
call fcn.0040457e
add esp, 0x10
push str.ADMIN__n
push esi
call fcn.00404770
add eax, edi
push eax
call fcn.004045da
call fcn.00404770
add eax, edi
push eax
call fcn.0040457e
add esp, 0x10
push str.Connection_failed._n
jmp 0x403901
push str.Failed_n_n
push esi
mov dword [ebp - 0x10c], 0xfffffffc
call fcn.00404770
add eax, edi
push eax
call fcn.004045da
call fcn.00404770
add eax, edi
push eax
call fcn.0040457e
add esp, 0x10
push str.Couldnt_connect_to
push esi
call fcn.00404770
add eax, edi
push eax
call fcn.004045da
call fcn.00404770
add eax, edi
push eax
call fcn.0040457e
add esp, 0x10
push dword [0x41d304]
push esi
call fcn.00404770
add eax, edi
push eax
call fcn.004045da
call fcn.00404770
add eax, edi
push eax
call fcn.0040457e
add esp, 0x10
push str.IPC__n
push esi
call fcn.00404770
add eax, edi
push eax
call fcn.004045da
call fcn.00404770
add eax, edi
push eax
call fcn.0040457e
add esp, 0x10
push str.Bad_credentials._n
jmp 0x403901
call fcn.00401877
test eax, eax
jne 0x4037e7
push str.Failed_n_n
push esi
mov dword [ebp - 0x10c], 0xfffffffa
call fcn.00404770
add eax, edi
push eax
call fcn.004045da
call fcn.00404770
add eax, edi
push eax
call fcn.0040457e
add esp, 0x10
push str.Couldnt_copy
push esi
call fcn.00404770
add eax, edi
push eax
call fcn.004045da
call fcn.00404770
add eax, edi
push eax
call fcn.0040457e
add esp, 0x10
push dword [0x41d314]
push esi
call fcn.00404770
add eax, edi
push eax
call fcn.004045da
call fcn.00404770
add eax, edi
push eax
call fcn.0040457e
add esp, 0x10
push str._to
jmp 0x403834
push 0
push ebx
call fcn.00401b31
pop ecx
pop ecx
test eax, eax
jne 0x403929
call fcn.004019bc
test eax, eax
jne 0x403880
push str.Failed_n_n
push esi
mov dword [ebp - 0x10c], 0xfffffff9
call fcn.00404770
add eax, edi
push eax
call fcn.004045da
call fcn.00404770
add eax, edi
push eax
call fcn.0040457e
add esp, 0x10
push str.Couldnt_copy_service_to
push esi
call fcn.00404770
add eax, edi
push eax
call fcn.004045da
call fcn.00404770
add eax, edi
push eax
call fcn.0040457e
add esp, 0x10
push dword [0x41d304]
push esi
call fcn.00404770
add eax, edi
push eax
call fcn.004045da
call fcn.00404770
add eax, edi
push eax
call fcn.0040457e
add esp, 0x10
push str.ADMIN__n
jmp 0x403901
call fcn.00401a93
test eax, eax
jne 0x4038bd
push str.Failed_n_n
push esi
mov dword [ebp - 0x10c], 0xfffffff8
call fcn.00404770
add eax, edi
push eax
call fcn.004045da
call fcn.00404770
add eax, edi
push eax
call fcn.0040457e
add esp, 0x10
push str.Couldnt_start_remote_service_n
jmp 0x403901
push 0x3e8
push 5
call fcn.00401b31
pop ecx
pop ecx
test eax, eax
jne 0x403929
push str.Failed_n_n
push esi
mov dword [ebp - 0x10c], 0xfffffff7
call fcn.00404770
add eax, edi
push eax
call fcn.004045da
call fcn.00404770
add eax, edi
push eax
call fcn.0040457e
add esp, 0x10
push str.Couldnt_connect_to_remote_service_n
push esi
call fcn.00404770
add eax, edi
push eax
call fcn.004045da
call fcn.00404770
add eax, edi
push eax
call fcn.0040457e
add esp, 0x10
call fcn.0040101b
jmp 0x403a9d
call fcn.0040225c
mov dword [ebp - 0x10c], eax
jmp 0x403a9d
call fcn.00401141
push 0x40
mov esi, 0x4162b8
pop edi
test eax, eax
je 0x40396d
push str.Local_Admin_n_n
push esi
call fcn.00404770
add eax, edi
push eax
call fcn.004045da
call fcn.00404770
add eax, edi
push eax
call fcn.0040457e
add esp, 0x10
push str.Localhost_entered_for_Target_Machine_.._Going_to_RunAs_Command_n_n
push esi
call fcn.00404770
push 0x20
pop ebx
add eax, ebx
push eax
call fcn.004045da
call fcn.00404770
add eax, ebx
push eax
call fcn.0040457e
add esp, 0x10
mov dword [0x41d304], 0x41628c
call fcn.0040190c
test eax, eax
je 0x403a4c
push str.Launching_Local_Process_..._n
push esi
call fcn.00404770
add eax, edi
push eax
call fcn.004045da
call fcn.00404770
add eax, edi
push eax
call fcn.0040457e
push 0x103
lea eax, [ebp - 0x107]
push 0
push eax
mov byte [ebp - 0x108], 0
call fcn.00405340
push dword [0x41d314]
mov ebx, 0x41d200
push dword [0x41d308]
lea eax, [ebp - 0x108]
push dword [0x41d30c]
push ebx
push str._s__s__s__s
push eax
call fcn.00404f38
lea eax, [ebp - 0x108]
push eax
call fcn.00403195
add esp, 0x38
test eax, eax
jne 0x403a43
push str.Create_Local_Process_Failed._Illegal_Command
push esi
call fcn.00404770
add eax, edi
push eax
call fcn.004045da
call fcn.00404770
add eax, edi
push eax
call fcn.0040457e
add esp, 0x10
push ebx
call dword [sym.imp.KERNEL32.dll_DeleteFileA]
jmp 0x403a9d
push str.Cannot_Extract_Local_Resources._Please_check_write_access_to_local_tmp_filesystem_n
push esi
call fcn.00404770
add eax, edi
push eax
call fcn.004045da
call fcn.00404770
add eax, edi
push eax
call fcn.0040457e
add esp, 0x10
push str.Create_Process_as_User_Failed._Trying_to_run_the_process_with_the_current_user_n_n
push esi
call fcn.00404770
add eax, ebx
push eax
call fcn.004045da
call fcn.00404770
add eax, ebx
push eax
call fcn.0040457e
push dword [0x41d314]
call fcn.00403195
add esp, 0x14
push 0
push str.IPC_
push dword [0x41d304]
call fcn.0040173b
push 0
push str.ADMIN_
push dword [0x41d304]
call fcn.0040173b
mov eax, dword [ebp - 0x10c]
add esp, 0x18
jmp 0x403ad4
call fcn.004024ed
or eax, 0xffffffff
mov ecx, dword [ebp - 4]
pop edi
pop esi
xor ecx, ebp
pop ebx
call fcn.00404925
leave
ret