Function at 0x4106d0
Capabilities:
Get hostname
Read file on windows

Disassembly:
sub esp, 0x9dc
mov eax, dword [0x435e80]
xor eax, esp
mov dword [esp + 0x9d8], eax
push ebx
mov ebx, dword [esp + 0x9e4]
push ebp
push esi
mov esi, dword [esp + 0x9f0]
xor ebp, ebp
push 0x9c5
lea eax, [esp + 0x21]
push ebp
push eax
mov dword [esp + 0x1c], ebx
mov dword [esp + 0x24], esi
mov dword [esp + 0x18], ebp
mov byte [esp + 0x28], 0
call fcn.00412590
add esp, 0xc
cmp ebx, ebp
mov dword [esp + 0x14], ebp
je 0x410a26
cmp esi, ebp
je 0x410a26
push 0x42a3f4
push esi
call fcn.0041349e
mov esi, eax
add esp, 8
cmp esi, ebp
jne 0x410778
call fcn.00414ab8
mov ecx, dword [eax]
push str.Failed_to_open_the_initialization_file.
push ecx
push 3
push 1
push ebx
call fcn.004120f0
add esp, 0x14
pop esi
lea eax, [ebp - 4]
pop ebp
pop ebx
mov ecx, dword [esp + 0x9d8]
xor ecx, esp
call fcn.00412a21
add esp, 0x9dc
ret
push edi
push 2
push ebp
push esi
call fcn.00413355
push esi
call fcn.00413260
push ebp
push ebp
push esi
mov edi, eax
call fcn.00413355
add esp, 0x1c
cmp edi, 1
jge 0x4107d2
push esi
call fcn.0041304c
push str.Invalid_initialization_file.
push 0xfffffffffffffff6
push 3
push 3
push ebx
call fcn.004120f0
add esp, 0x18
mov eax, 0xfffffff6
pop edi
pop esi
pop ebp
pop ebx
mov ecx, dword [esp + 0x9d8]
xor ecx, esp
call fcn.00412a21
add esp, 0x9dc
ret
lea ebx, [edi + 0xa]
push ebx
call fcn.00412f17
mov ebp, eax
add esp, 4
test ebp, ebp
jne 0x410807
push esi
call fcn.0041304c
mov edx, dword [esp + 0x18]
push str.Memory_allocation_error_during_the_reading_of_the_intialization_fie.
push 0xfffffffffffffff3
push 3
push 3
push edx
call fcn.004120f0
add esp, 0x18
lea eax, [ebp - 0xd]
jmp 0x4107b9
push ebx
push 0
push ebp
call fcn.00412590
push esi
push edi
push 1
push ebp
call fcn.00412ead
push esi
mov edi, eax
call fcn.0041304c
push edi
push ebp
lea eax, [esp + 0x38]
push eax
push str.Password
call fcn.00401600
add esp, 0x30
test eax, eax
jne 0x4108b4
mov ebx, dword [esp + 0x10]
test ebx, ebx
je 0x4108b4
push 0x9c6
push eax
lea ecx, [esp + 0x28]
push ecx
call fcn.00412590
movsx edx, byte [ebx]
push edx
xor esi, esi
call fcn.00415223
add esp, 0x10
test eax, eax
je 0x41088c
cmp esi, 0x9c5
jae 0x41088c
mov eax, dword [esp + 0x10]
mov cl, byte [esi + eax]
mov byte [esp + esi + 0x20], cl
movsx edx, byte [esi + eax + 1]
add esi, 1
push edx
call fcn.00415223
add esp, 4
test eax, eax
jne 0x410864
push 0xf
lea eax, [esp + 0x24]
push str.NewKaseyaAgent
push eax
call fcn.00413d7f
mov ebx, dword [esp + 0x20]
add esp, 0xc
test eax, eax
jne 0x4108cf
mov dword [ebx + 0x23c], 1
jmp 0x4108cf
mov ecx, dword [esp + 0x14]
push str.Failed_to_determine_if_initialization_file_may_be_updated.
push eax
push 3
push 3
push ecx
call fcn.004120f0
mov ebx, dword [esp + 0x28]
add esp, 0x14
push edi
push ebp
lea edx, [esp + 0x18]
push edx
push str.User_Name
call fcn.00401600
add esp, 0x10
test eax, eax
je 0x4108ff
push str.Failed_to_determine_groupid_from_initialization_file.
push eax
push 1
push 3
push ebx
call fcn.004120f0
add esp, 0x14
jmp 0x4109b5
mov edi, dword [esp + 0x10]
test edi, edi
je 0x4109b5
push 0x9c6
lea eax, [esp + 0x24]
push 0
push eax
call fcn.00412590
add esp, 0xc
xor esi, esi
cmp byte [edi], 0x2e
jne 0x4109b5
add edi, 1
mov dword [esp + 0x10], edi
movsx ecx, byte [edi]
push ecx
call fcn.0041529d
add esp, 4
test eax, eax
jne 0x41097e
mov edx, dword [esp + 0x10]
movsx eax, byte [esi + edx]
push eax
call fcn.004151a6
add esp, 4
test eax, eax
jne 0x41097e
cmp esi, 0x9c5
jae 0x41097e
mov eax, dword [esp + 0x10]
mov cl, byte [esi + eax]
mov byte [esp + esi + 0x20], cl
movsx edx, byte [esi + eax + 1]
add esi, 1
push edx
call fcn.0041529d
add esp, 4
test eax, eax
je 0x410941
lea eax, [esp + 0x20]
lea edx, [eax + 1]
mov cl, byte [eax]
add eax, 1
test cl, cl
jne 0x410985
sub eax, edx
cmp eax, 1
jbe 0x4109b5
push 0x50
lea eax, [esp + 0x24]
push eax
lea ecx, [ebx + 0x2c4]
push ecx
call fcn.00413710
add esp, 0xc
mov dword [ebx + 0x2c0], 5
push ebp
call fcn.00412262
mov ecx, dword [esp + 0x20]
lea edi, [ebx + 0x102]
push edi
lea edx, [ebx + 0xcf]
push edx
lea eax, [ebx + 0x9c]
push eax
push ecx
call fcn.00401680
mov esi, eax
add esp, 0x14
test esi, esi
je 0x4109fd
push str.Failed_to_get_Adminstrator_credentials.
push esi
push 3
push 3
push ebx
call fcn.004120f0
add esp, 0x14
mov eax, esi
jmp 0x4107b9
cmp byte [edi], 0
jne 0x410a16
lea edx, [esp + 0x18]
push edx
push edi
mov dword [esp + 0x20], 0x33
call dword [sym.imp.KERNEL32.dll_GetComputerNameA]
push ebx
call fcn.00410660
add esp, 4
mov esi, eax
jmp 0x4107b9
mov ecx, dword [esp + 0x9e4]
pop esi
pop ebp
pop ebx
xor ecx, esp
mov eax, 0xfffffff8
call fcn.00412a21
add esp, 0x9dc
ret