Function at 0x480b40
Capabilities:
Query or enumerate registry key

Disassembly:
push 0x240
mov eax, 0x4936f2
call fcn.00492097
mov eax, dword [ebp + 8]
xor ebx, ebx
mov dword [ebp - 4], ebx
push ecx
mov dword [ebp - 0x220], ebx
mov ecx, esp
mov dword [ebp - 0x228], esp
push 0x4b17f2
mov dword [ebp - 0x238], eax
call dword [0x4a2bf8]
push ecx
mov dword [ebp - 4], 1
mov esi, esp
mov dword [ebp - 0x22c], esp
push ecx
mov ecx, esp
mov dword [ebp - 0x21c], esp
mov edi, str.7NsKhdU_fzNy_X7
push edi
call dword [0x4a2bf8]
push esi
call fcn.00480733
add esp, 4
mov dword [ebp - 0x21c], esp
mov esi, esp
push ecx
mov ecx, esp
mov dword [ebp - 0x21c], esp
push str..7TVJfbpXMNQUkUkNz
mov byte [ebp - 4], 2
call dword [0x4a2bf8]
push esi
call fcn.00480733
mov esi, dword [ebp - 0x238]
pop ecx
pop ecx
push reloc.WS2_32.dll_closesocket
push esi
mov byte [ebp - 4], bl
call fcn.0048dd87
add esp, 0x14
mov dword [ebp - 4], ebx
mov eax, dword [esi]
mov eax, dword [eax - 0xc]
cmp eax, ebx
mov dword [ebp - 0x220], 1
jne 0x480de0
lea eax, [ebp - 0x24c]
push eax
push ebx
push ebx
push ebx
lea eax, [ebp - 0x244]
push eax
lea eax, [ebp - 0x214]
push eax
push ebx
push reloc.WS2_32.dll_closesocket
call dword [sym.imp.ADVAPI32.dll_RegEnumKeyExW]
mov dword [ebp - 0x21c], eax
lea eax, [ebp - 0x214]
push eax
lea ecx, [ebp - 0x224]
call dword [0x4a2c00]
push ebx
push str.S_1_5_21
lea ecx, [ebp - 0x224]
mov dword [ebp - 4], 3
call dword [0x4a2c24]
test eax, eax
jne 0x480c9b
push ebx
push ecx
mov ecx, esp
mov dword [ebp - 0x228], esp
push str.0dKzzNz
call dword [0x4a2bf8]
lea eax, [ebp - 0x234]
push eax
call fcn.00480733
or dword [ebp - 0x220], 2
pop ecx
pop ecx
push dword [eax]
lea ecx, [ebp - 0x224]
call dword [0x4a2c24]
test eax, eax
mov byte [ebp - 0x215], 1
jl 0x480ca1
mov byte [ebp - 0x215], bl
test byte [ebp - 0x220], 2
je 0x480cbd
and dword [ebp - 0x220], 0xfffffffd
lea ecx, [ebp - 0x234]
call dword [0x4a2d9c]
cmp byte [ebp - 0x215], bl
jne 0x480ce5
lea ecx, [ebp - 0x224]
mov byte [ebp - 4], bl
call dword [0x4a2d9c]
cmp dword [ebp - 0x21c], ebx
je 0x480bfe
jmp 0x480de0
push ecx
mov ecx, esp
mov dword [ebp - 0x230], esp
push 0x4b17f2
call dword [0x4a2bf8]
push ecx
mov byte [ebp - 4], 4
mov esi, esp
mov dword [ebp - 0x23c], esp
push ecx
mov ecx, esp
mov dword [ebp - 0x21c], esp
push edi
call dword [0x4a2bf8]
push esi
call fcn.00480733
add esp, 4
mov ecx, esp
mov dword [ebp - 0x21c], esp
push str.XMNQUkUkNz
mov byte [ebp - 4], 5
call dword [0x4a2bf8]
lea eax, [ebp - 0x228]
push eax
call fcn.00480733
mov dword [ebp - 0x21c], eax
lea eax, [ebp - 0x22c]
push 0x4a7de8
push eax
lea esi, [ebp - 0x224]
mov byte [ebp - 4], 6
call fcn.00485779
add esp, 0xc
mov byte [ebp - 4], 7
mov ecx, esp
mov dword [ebp - 0x240], esp
push dword [ebp - 0x21c]
push ecx
mov ecx, eax
call fcn.00485726
pop ecx
pop ecx
lea eax, [ebp - 0x234]
push reloc.WS2_32.dll_closesocket
push eax
mov byte [ebp - 4], 9
call fcn.0048dd87
add esp, 0x14
mov byte [ebp - 4], 0xa
mov ecx, dword [ebp - 0x238]
push eax
call dword [0x4a2c08]
lea ecx, [ebp - 0x234]
call dword [0x4a2d9c]
lea ecx, [ebp - 0x22c]
call dword [0x4a2d9c]
lea ecx, [ebp - 0x228]
call dword [0x4a2d9c]
mov ecx, esi
mov byte [ebp - 4], bl
call dword [0x4a2d9c]
mov esi, dword [ebp - 0x238]
mov eax, dword [esi]
cmp dword [eax - 0xc], ebx
jne 0x480e92
push ecx
mov ecx, esp
mov dword [ebp - 0x240], esp
push 0x4b17f2
call dword [0x4a2bf8]
push ecx
mov dword [ebp - 4], 0xb
mov eax, esp
mov dword [ebp - 0x23c], esp
push ecx
mov ecx, esp
mov dword [ebp - 0x230], esp
push edi
mov dword [ebp - 0x228], eax
call dword [0x4a2bf8]
mov eax, dword [ebp - 0x228]
push eax
call fcn.00480733
add esp, 4
mov byte [ebp - 4], 0xc
mov dword [ebp - 0x230], esp
mov edi, esp
push ecx
mov ecx, esp
mov dword [ebp - 0x230], esp
push str.XMNQUkUkNz
call dword [0x4a2bf8]
push edi
call fcn.00480733
pop ecx
pop ecx
lea eax, [ebp - 0x22c]
push SysReAllocString
push eax
mov byte [ebp - 4], bl
call fcn.0048dd87
add esp, 0x14
push eax
mov ecx, esi
mov dword [ebp - 4], 0xd
call dword [0x4a2c08]
lea ecx, [ebp - 0x22c]
mov byte [ebp - 4], bl
call dword [0x4a2d9c]
mov eax, dword [esi]
cmp dword [eax - 0xc], ebx
jne 0x480ea6
push str.12345678_ABCD_9876_5432_1A2B3C4D5E6F
mov ecx, esi
call dword [0x4a2d98]
push 0x2d
mov ecx, esi
call dword [0x4a284c]
push 0x7b
mov ecx, esi
call dword [0x4a284c]
push 0x7d
mov ecx, esi
call dword [0x4a284c]
mov eax, esi
call fcn.0049211a
ret