Function at 0x40ccd0
Capabilities:
Get hostname
Read file on windows

Disassembly:
sub esp, 0x9dc
mov eax, dword [0x42cb90]
xor eax, esp
mov dword [esp + 0x9d8], eax
push ebx
mov ebx, dword [esp + 0x9e4]
push ebp
push esi
mov esi, dword [esp + 0x9f0]
xor ebp, ebp
push 0x9c5
lea eax, [esp + 0x21]
push ebp
push eax
mov dword [esp + 0x1c], ebx
mov dword [esp + 0x24], esi
mov dword [esp + 0x18], ebp
mov byte [esp + 0x28], 0
call fcn.0040eb90
add esp, 0xc
cmp ebx, ebp
mov dword [esp + 0x14], ebp
je 0x40d026
cmp esi, ebp
je 0x40d026
push 0x4233d0
push esi
call fcn.0040f6c8
mov esi, eax
add esp, 8
cmp esi, ebp
jne 0x40cd78
call fcn.0041069a
mov ecx, dword [eax]
push str.Failed_to_open_the_initialization_file.
push ecx
push 3
push 1
push ebx
call fcn.0040e6f0
add esp, 0x14
pop esi
lea eax, [ebp - 4]
pop ebp
pop ebx
mov ecx, dword [esp + 0x9d8]
xor ecx, esp
call fcn.0040f6db
add esp, 0x9dc
ret
push edi
push 2
push ebp
push esi
call fcn.0040f57f
push esi
call fcn.0040f48a
push ebp
push ebp
push esi
mov edi, eax
call fcn.0040f57f
add esp, 0x1c
cmp edi, 1
jge 0x40cdd2
push esi
call fcn.0040f276
push str.Invalid_initialization_file.
push 0xfffffffffffffff6
push 3
push 3
push ebx
call fcn.0040e6f0
add esp, 0x18
mov eax, 0xfffffff6
pop edi
pop esi
pop ebp
pop ebx
mov ecx, dword [esp + 0x9d8]
xor ecx, esp
call fcn.0040f6db
add esp, 0x9dc
ret
lea ebx, [edi + 0xa]
push ebx
call fcn.0040f141
mov ebp, eax
add esp, 4
test ebp, ebp
jne 0x40ce07
push esi
call fcn.0040f276
mov edx, dword [esp + 0x18]
push str.Memory_allocation_error_during_the_reading_of_the_intialization_fie.
push 0xfffffffffffffff3
push 3
push 3
push edx
call fcn.0040e6f0
add esp, 0x18
lea eax, [ebp - 0xd]
jmp 0x40cdb9
push ebx
push 0
push ebp
call fcn.0040eb90
push esi
push edi
push 1
push ebp
call fcn.0040f0d7
push esi
mov edi, eax
call fcn.0040f276
push edi
push ebp
lea eax, [esp + 0x38]
push eax
push str.Password
call fcn.00401500
add esp, 0x30
test eax, eax
jne 0x40ceb4
mov ebx, dword [esp + 0x10]
test ebx, ebx
je 0x40ceb4
push 0x9c6
push eax
lea ecx, [esp + 0x28]
push ecx
call fcn.0040eb90
movsx edx, byte [ebx]
push edx
xor esi, esi
call fcn.00410d1d
add esp, 0x10
test eax, eax
je 0x40ce8c
cmp esi, 0x9c5
jae 0x40ce8c
mov eax, dword [esp + 0x10]
mov cl, byte [esi + eax]
mov byte [esp + esi + 0x20], cl
movsx edx, byte [esi + eax + 1]
add esi, 1
push edx
call fcn.00410d1d
add esp, 4
test eax, eax
jne 0x40ce64
push 0xf
lea eax, [esp + 0x24]
push str.NewKaseyaAgent
push eax
call fcn.0041019c
mov ebx, dword [esp + 0x20]
add esp, 0xc
test eax, eax
jne 0x40cecf
mov dword [ebx + 0x23c], 1
jmp 0x40cecf
mov ecx, dword [esp + 0x14]
push str.Failed_to_determine_if_initialization_file_may_be_updated.
push eax
push 3
push 3
push ecx
call fcn.0040e6f0
mov ebx, dword [esp + 0x28]
add esp, 0x14
push edi
push ebp
lea edx, [esp + 0x18]
push edx
push str.User_Name
call fcn.00401500
add esp, 0x10
test eax, eax
je 0x40ceff
push str.Failed_to_determine_groupid_from_initialization_file.
push eax
push 1
push 3
push ebx
call fcn.0040e6f0
add esp, 0x14
jmp 0x40cfb5
mov edi, dword [esp + 0x10]
test edi, edi
je 0x40cfb5
push 0x9c6
lea eax, [esp + 0x24]
push 0
push eax
call fcn.0040eb90
add esp, 0xc
xor esi, esi
cmp byte [edi], 0x2e
jne 0x40cfb5
add edi, 1
mov dword [esp + 0x10], edi
movsx ecx, byte [edi]
push ecx
call fcn.00410d97
add esp, 4
test eax, eax
jne 0x40cf7e
mov edx, dword [esp + 0x10]
movsx eax, byte [esi + edx]
push eax
call fcn.00410ca0
add esp, 4
test eax, eax
jne 0x40cf7e
cmp esi, 0x9c5
jae 0x40cf7e
mov eax, dword [esp + 0x10]
mov cl, byte [esi + eax]
mov byte [esp + esi + 0x20], cl
movsx edx, byte [esi + eax + 1]
add esi, 1
push edx
call fcn.00410d97
add esp, 4
test eax, eax
je 0x40cf41
lea eax, [esp + 0x20]
lea edx, [eax + 1]
mov cl, byte [eax]
add eax, 1
test cl, cl
jne 0x40cf85
sub eax, edx
cmp eax, 1
jbe 0x40cfb5
push 0x50
lea eax, [esp + 0x24]
push eax
lea ecx, [ebx + 0x2c4]
push ecx
call fcn.0040f940
add esp, 0xc
mov dword [ebx + 0x2c0], 5
push ebp
call fcn.0040e862
mov ecx, dword [esp + 0x20]
lea edi, [ebx + 0x102]
push edi
lea edx, [ebx + 0xcf]
push edx
lea eax, [ebx + 0x9c]
push eax
push ecx
call fcn.00401580
mov esi, eax
add esp, 0x14
test esi, esi
je 0x40cffd
push str.Failed_to_get_Adminstrator_credentials.
push esi
push 3
push 3
push ebx
call fcn.0040e6f0
add esp, 0x14
mov eax, esi
jmp 0x40cdb9
cmp byte [edi], 0
jne 0x40d016
lea edx, [esp + 0x18]
push edx
push edi
mov dword [esp + 0x20], 0x33
call dword [sym.imp.KERNEL32.dll_GetComputerNameA]
push ebx
call fcn.0040cc60
add esp, 4
mov esi, eax
jmp 0x40cdb9
mov ecx, dword [esp + 0x9e4]
pop esi
pop ebp
pop ebx
xor ecx, esp
mov eax, 0xfffffff8
call fcn.0040f6db
add esp, 0x9dc
ret