Function at 0x4275e4
Capabilities:
Encrypt or decrypt via wincrypt
Query or enumerate registry value

Disassembly:
push ebp
mov ebp, esp
mov eax, 0x3310
call fcn.005fec20
mov eax, dword [0x708c34]
xor eax, ebp
mov dword [ebp - 4], eax
push ebx
push esi
mov esi, dword [ebp + 8]
lea eax, [ebp - 0x7eb]
push edi
mov edi, dword [ebp + 0xc]
mov ebx, 0x3ff
push ebx
push 0
push eax
mov byte [ebp - 0x7ec], 0
call fcn.00626f50
push ebx
lea eax, [ebp - 0xbeb]
mov byte [ebp - 0xbec], 0
push 0
push eax
call fcn.00626f50
push edi
mov ebx, str.RecoverEmFTPPassfromRegistry
push ebx
push str._s_Entered___Recovering_from_key__s
call fcn.00449974
add esp, 0x24
mov dword [ebp - 0x3300], 0x2710
lea eax, [ebp - 0x3300]
push eax
lea eax, [ebp - 0x32fc]
push eax
lea eax, [ebp - 0x3310]
push eax
push 0
push str.Cust
push esi
call dword [sym.imp.ADVAPI32.dll_RegQueryValueExA]
mov ecx, dword [ebp - 0x3300]
test eax, eax
jne 0x4278a4
cmp ecx, 0x5a0
jb 0x4278a4
push ecx
push ecx
push ebx
push str._s_Entered___Read_Cust_value_of_size__d__0x_.8x_
call fcn.00449974
lea eax, [ebp - 0x31f8]
mov edi, 0x66bf70
push eax
push edi
mov esi, 0x400
lea eax, [ebp - 0xbec]
push esi
push eax
call fcn.00445d6d
lea eax, [ebp - 0x30f4]
push eax
push edi
lea eax, [ebp - 0x7ec]
push esi
push eax
call fcn.00445d6d
lea eax, [ebp - 0x7ec]
push eax
lea eax, [ebp - 0xbec]
push eax
push ebx
push str._s_Found_Server_s__Username_s
call fcn.00449974
add esp, 0x40
xor eax, eax
push eax
push 1
push eax
push eax
lea eax, [ebp - 0x3308]
push eax
call dword [sym.imp.ADVAPI32.dll_CryptAcquireContextA]
test eax, eax
jne 0x42771f
call dword [sym.imp.KERNEL32.dll_GetLastError]
push eax
push ebx
push str._s:_CryptAcquireContext_failed__Error0x_.8x
call fcn.00449974
add esp, 0xc
jmp 0x4278b5
mov esi, dword [ebp - 0x30a4]
push esi
push esi
push ebx
push str._s_Found_Keyblob_of_size__d__0x_.8x_
call fcn.00449974
add esp, 0x10
cmp esi, dword [ebp - 0x3300]
ja 0x42788d
cmp esi, 1
jb 0x42788d
lea eax, [ebp - 0x330c]
push eax
push 0
push 0
push esi
lea eax, [ebp - 0x30a0]
push eax
push dword [ebp - 0x3308]
call dword [sym.imp.ADVAPI32.dll_CryptImportKey]
test eax, eax
jne 0x42777c
call dword [sym.imp.KERNEL32.dll_GetLastError]
push eax
push ebx
push str._s:_CryptImportKey_failed__Error0x_.8x
jmp 0x427712
lea edi, [esi + 0x25c]
cmp dword [ebp - 0x3300], edi
jae 0x4277a3
call dword [sym.imp.KERNEL32.dll_GetLastError]
push eax
push dword [ebp - 0x3300]
push edi
push ebx
push str._s:_Critical_Error____Password_Index_size__0x_.8x__is_more_than_total_size__0x_.8x____Error0x_.8x
jmp 0x4278ad
mov eax, dword [ebp - 0x2d5c]
push eax
push eax
push ebx
push str._n_s:__Size_of__keypassdata__from_offset_0x5a0_is__d__0x_.8x_
mov dword [ebp - 0x3304], eax
call fcn.00449974
mov ecx, dword [ebp - 0x3304]
push 0xfffffffffffffffc
pop eax
sub eax, esi
add ecx, eax
push ecx
push ebx
push str._n_s:__Copying_input_password_data_of_size__d
mov dword [ebp - 0x3304], ecx
call fcn.00449974
push dword [ebp - 0x3304]
lea eax, [ebp - 0x30a0]
add eax, esi
push eax
lea eax, [ebp - 0x3ec]
push eax
call fcn.006269d0
add esp, 0x28
lea eax, [ebp - 0x3304]
push eax
lea eax, [ebp - 0x3ec]
push eax
push 0
push 1
push 0
push dword [ebp - 0x330c]
call dword [sym.imp.ADVAPI32.dll_CryptDecrypt]
test eax, eax
jne 0x42782f
call dword [sym.imp.KERNEL32.dll_GetLastError]
push eax
push ebx
push str._s:_CryptDecrypt_failed__Error0x_.8x
jmp 0x427712
mov eax, dword [ebp - 0x3304]
cmp eax, 0x3e8
jae 0x4278c6
lea ecx, [ebp - 0x3ec]
mov byte [ebp + eax - 0x3ec], 0
push ecx
push eax
push ebx
push str._n_s:__Successfully_decrypted_the_password___d____s__n
call fcn.00449974
push 0xffffffffffffffff
mov edx, 0x66ae5d
lea eax, [ebp - 0x3ec]
push edx
push eax
lea ecx, [ebp - 0x7ec]
push ecx
lea ecx, [ebp - 0xbec]
push ecx
push edx
push 0x139
push 4
call fcn.00412c85
xor eax, eax
add esp, 0x30
inc eax
jmp 0x4278b7
push dword [ebp - 0x3300]
push esi
push ebx
push str._s:__Critical_Error____KeyBlob_Index_size__0x_.8x__is_more_than_total_size__0x_.8x__or_less_than_zero__Aborting_now
call fcn.00449974
add esp, 0x10
jmp 0x4278b5
push eax
push edi
push ecx
push ebx
push str._s_:_Failed_to_read_Cust_value_from_key__read_size_d____s____Error0x_.8x
call fcn.00449974
add esp, 0x14
xor eax, eax
mov ecx, dword [ebp - 4]
pop edi
pop esi
xor ecx, ebp
pop ebx
call fcn.005fe955
leave
ret
call fcn.005fe87a
int3