Function at 0x41f140
Capabilities:
Query or enumerate registry value

Disassembly:
push 0xffffffffffffffff
push 0x46e920
mov eax, dword fs:[0]
push eax
sub esp, 0x34
mov eax, dword [0x498760]
xor eax, esp
mov dword [esp + 0x30], eax
push ebx
push ebp
push esi
push edi
mov eax, dword [0x498760]
xor eax, esp
push eax
lea eax, [esp + 0x48]
mov dword fs:[0], eax
mov eax, dword [0x499fd0]
mov edi, dword [sym.imp.USER32.dll_SendMessageA]
push str._r_nLooking_For_The_USB_COM_Port...
push 0
mov esi, ecx
mov dword [esp + 0x20], 0xa
mov ecx, dword [eax + 0x238]
push 0xc2
push ecx
call edi
lea edx, [esp + 0x14]
push edx
push 1
push 0
push str.HARDWAREDEVICEMAPSERIALCOMM
push reloc.OLEAUT32.dll_SysReAllocString
call dword [sym.imp.ADVAPI32.dll_RegOpenKeyExA]
test eax, eax
jne 0x41f3d2
mov ecx, dword [0x477a90]
mov edx, dword [0x477a94]
mov eax, dword [str.DeviceVCP0]
mov bl, byte [esp + 0x58]
mov ebp, dword [sym.imp.ADVAPI32.dll_RegQueryValueExA]
mov dword [esp + 0x28], ecx
mov dword [esp + 0x2c], edx
lea ecx, [esp + 0x18]
push ecx
mov ecx, dword [esp + 0x18]
lea edx, [esp + 0x3c]
push edx
mov dword [esp + 0x2c], eax
mov al, byte [0x477a98]
push 0
mov byte [esp + 0x3c], al
push 0
lea eax, [esp + 0x34]
push eax
push ecx
mov byte [esp + 0x47], bl
call ebp
test eax, eax
jne 0x41f2d1
mov edx, dword [esp + 0x14]
push edx
call dword [sym.imp.ADVAPI32.dll_RegCloseKey]
lea eax, [esp + 0x38]
add esi, 0x164
lea ecx, [eax + 1]
jmp 0x41f230
mov dl, byte [eax]
add eax, 1
test dl, dl
jne 0x41f230
sub eax, ecx
push eax
lea eax, [esp + 0x3c]
push eax
mov ecx, esi
call fcn.00401240
mov ecx, dword [0x499fd0]
mov edx, dword [ecx + 0x238]
push str.Found_As
push 0
push 0xc2
push edx
call edi
push esi
lea eax, [esp + 0x20]
push str.._
push eax
call fcn.00409060
add esp, 0xc
push eax
mov ecx, esi
mov dword [esp + 0x54], 0
call fcn.00408f20
mov eax, dword [esp + 0x1c]
add eax, 0xfffffff0
mov dword [esp + 0x50], 0xffffffff
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x41f2ae
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov ecx, dword [esi]
mov edx, dword [0x499fd0]
mov eax, dword [edx + 0x238]
push ecx
push 0
push 0xc2
push eax
call edi
mov eax, 1
jmp 0x41f401
mov ecx, dword [str.DeviceSilabser0]
mov eax, dword [0x477a6c]
mov edx, dword [0x477a68]
mov dword [esp + 0x24], ecx
mov ecx, dword [0x477a70]
mov dword [esp + 0x2c], eax
lea eax, [esp + 0x18]
push eax
mov eax, dword [esp + 0x18]
mov dword [esp + 0x34], ecx
lea ecx, [esp + 0x3c]
push ecx
mov dword [esp + 0x30], edx
mov dx, word [0x477a74]
push 0
mov word [esp + 0x40], dx
push 0
lea edx, [esp + 0x34]
push edx
push eax
mov byte [esp + 0x4c], bl
call ebp
test eax, eax
mov ecx, dword [esp + 0x14]
push ecx
jne 0x41f3cc
call dword [sym.imp.ADVAPI32.dll_RegCloseKey]
lea edx, [esp + 0x38]
add esi, 0x164
push edx
mov ecx, esi
call fcn.0041f100
mov eax, dword [0x499fd0]
mov ecx, dword [eax + 0x238]
push str.Found_As
push 0
push 0xc2
push ecx
call edi
push esi
lea edx, [esp + 0x24]
push str.._
push edx
call fcn.00409060
add esp, 0xc
push eax
mov ecx, esi
mov dword [esp + 0x54], 1
call fcn.00408f20
mov eax, dword [esp + 0x20]
add eax, 0xfffffff0
mov dword [esp + 0x50], 0xffffffff
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x41f3ac
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov ecx, dword [esi]
mov edx, dword [0x499fd0]
mov eax, dword [edx + 0x238]
push ecx
push 0
push 0xc2
push eax
call edi
mov eax, 1
jmp 0x41f401
call dword [sym.imp.ADVAPI32.dll_RegCloseKey]
lea ecx, [esi + 0x164]
call fcn.00401160
mov edx, dword [0x499fd0]
mov eax, dword [edx + 0x238]
push str.Not_Found.
push 0
push 0xc2
push eax
call edi
mov ecx, esi
call fcn.0041e430
xor eax, eax
mov ecx, dword [esp + 0x48]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebp
pop ebx
mov ecx, dword [esp + 0x30]
xor ecx, esp
call fcn.004527b7
add esp, 0x40
ret 4