Function at 0x27570380
Capabilities:
Encrypt data using des via winapi
Get hostname

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x48
mov eax, dword [0x275ba2ec]
xor eax, ebp
mov dword [ebp - 4], eax
push esi
lea eax, [ebp - 0x44]
mov dword [ebp - 0x48], ecx
push eax
lea ecx, [ebp - 0x24]
push ecx
mov dword [ebp - 0x44], 0x10
call dword [sym.imp.KERNEL32.dll_GetComputerNameW]
test eax, eax
jne 0x27570402
call fcn.27595010
test al, al
je 0x275703ca
push 0x27524858
push 0x275247d8
push 0
call fcn.27595fd0
add esp, 0xc
mov esi, dword [sym.imp.KERNEL32.dll_GetLastError]
call esi
test eax, eax
jg 0x275703e7
call esi
pop esi
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.2757f388
mov esp, ebp
pop ebp
ret
call esi
and eax, 0xffff
or eax, 0x80070000
pop esi
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.2757f388
mov esp, ebp
pop ebp
ret
xor esi, esi
push ebx
mov dword [ebp - 0x2c], 0xf0000048
mov dword [ebp - 0x40], 0x2752479c
mov dword [ebp - 0x3c], 0x18
mov dword [ebp - 0x38], 0x2752476c
mov dword [ebp - 0x34], 1
mov dword [ebp - 0x30], esi
push edi
lea esp, [esp]
mov dword [ebp - 0x28], 0
call fcn.27595010
test al, al
je 0x2757045e
mov edx, dword [ebp + esi*8 - 0x3c]
mov eax, dword [ebp + esi*8 - 0x40]
push edx
push eax
push 0x27524710
push 0x27524690
push 3
call fcn.27595fd0
add esp, 0x14
mov ecx, dword [ebp - 0x2c]
mov edi, dword [ebp + esi*8 - 0x3c]
mov ebx, dword [ebp + esi*8 - 0x40]
push ecx
push edi
push ebx
push 0
lea edx, [ebp - 0x30]
push edx
call dword [sym.imp.ADVAPI32.dll_CryptAcquireContextA]
test eax, eax
jne 0x2757055b
call dword [sym.imp.KERNEL32.dll_GetLastError]
cmp eax, 0x80090009
mov dword [ebp - 0x28], eax
jne 0x275704d2
test byte [ebp - 0x2c], 0x40
je 0x275704d2
call fcn.27595010
test al, al
je 0x275704b3
push 0x27524608
push 0x27524588
push 0
call fcn.27595fd0
add esp, 0xc
mov eax, dword [ebp - 0x2c]
and eax, 0xffffffbf
push eax
push edi
push ebx
mov dword [ebp - 0x2c], eax
push 0
lea eax, [ebp - 0x30]
push eax
call dword [sym.imp.ADVAPI32.dll_CryptAcquireContextA]
test eax, eax
jne 0x27570536
mov eax, dword [ebp - 0x28]
mov ecx, dword [ebp - 0x30]
test ecx, ecx
jne 0x275704e5
add esi, 1
cmp esi, 2
jb 0x27570430
test eax, eax
je 0x2757055e
call fcn.27595010
test al, al
mov esi, dword [ebp - 0x28]
je 0x2757050a
push esi
push 0x27524520
push 0x275244a0
push 0
call fcn.27595fd0
add esp, 0x10
test esi, esi
jle 0x2757051a
and esi, 0xffff
or esi, 0x80070000
mov eax, esi
test eax, eax
jl 0x27570525
mov eax, 0x8004886b
pop edi
pop ebx
pop esi
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.2757f388
mov esp, ebp
pop ebp
ret
call fcn.27595010
test al, al
je 0x275704e9
mov ecx, edi
push ecx
mov edx, ebx
push edx
push 0x27524438
push 0x275243b8
push 3
call fcn.27595fd0
add esp, 0x14
jmp 0x275704e9
mov ecx, dword [ebp - 0x30]
test ecx, ecx
je 0x275704e9
mov esi, dword [ebp - 0x48]
mov dword [esi + 0xbc], ecx
call fcn.27595010
test al, al
je 0x27570588
push 0x27524384
push 0x27524308
push 1
call fcn.27595fd0
add esp, 0xc
mov eax, dword [0x275bba54]
add esi, 0xb8
push esi
push 0xc00000
push 0x6603
push eax
call dword [sym.imp.ADVAPI32.dll_CryptGenKey]
test eax, eax
jne 0x275705bf
call fcn.27539290
pop edi
pop ebx
pop esi
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.2757f388
mov esp, ebp
pop ebp
ret
mov ecx, dword [ebp - 4]
pop edi
pop ebx
xor ecx, ebp
xor eax, eax
pop esi
call fcn.2757f388
mov esp, ebp
pop ebp
ret