Function at 0x4404f6
Capabilities:
Check for time delay via gettickcount
Check if file exists

Disassembly:
push ebp
lea ebp, [esp - 0x68]
sub esp, 0xc38
push ebx
push esi
mov esi, dword [ebp + 0x78]
push edi
xor ebx, ebx
xor eax, eax
mov dword [ebp + 0x3c], ebx
lea edi, [ebp + 0x40]
stosd dword es:[edi], eax
stosd dword es:[edi], eax
stosd dword es:[edi], eax
cmp esi, ebx
je 0x44051f
lea edi, [ebp + 0x3c]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
mov eax, dword [ebp + 0x70]
push 3
pop esi
cmp eax, ebx
je 0x440530
cmp word [eax], bx
je 0x440530
xor esi, esi
push dword [ebp + 0x7c]
lea eax, [ebp + 0x3c]
push ebx
push eax
call fcn.0044bf7f
mov edi, dword [ebp + 0x74]
push eax
push edi
push dword [ebp + 0x70]
push str.DeviceArrived__s___u___S___i_...
push esi
call fcn.0044fe2e
add esp, 0x18
mov esi, 0x47e028
cmp dword [0x510c8c], ebx
jne 0x440586
push 0x10
lea eax, [ebp + 0x3c]
push eax
push esi
call fcn.00449c35
add esp, 0xc
test eax, eax
jne 0x440586
push str._hidden_volume____ignore
push 3
call fcn.0044fe2e
pop ecx
pop ecx
jmp 0x44259a
push 0x10
lea eax, [ebp + 0x3c]
push eax
push 0x47dfc8
mov dword [ebp + 0x60], ebx
call fcn.00449c35
add esp, 0xc
test eax, eax
je 0x4405c8
push 0x10
lea eax, [ebp + 0x3c]
push eax
push esi
call fcn.00449c35
add esp, 0xc
test eax, eax
je 0x4405c8
cmp edi, ebx
je 0x4405d3
push edi
call fcn.0044ebbf
test eax, eax
jne 0x4405cf
push str._not_USB_related____ignore
jmp 0x440578
mov dword [ebp + 0x60], 1
cmp edi, ebx
jne 0x4405e3
push 2
push dword [ebp + 0x78]
push dword [ebp + 0x70]
call fcn.0044e26f
mov dword [ebp + 0x74], eax
xor eax, eax
push 0x18e
mov word [ebp - 0x310], ax
lea eax, [ebp - 0x30e]
push ebx
push eax
call fcn.00449c78
mov edi, dword [sym.imp.CFGMGR32.dll_CM_Get_Device_IDW]
add esp, 0xc
push ebx
mov esi, 0xc8
push esi
lea eax, [ebp - 0x310]
push eax
push dword [ebp + 0x74]
call edi
cmp eax, ebx
jne 0x442584
lea eax, [ebp - 0x310]
push eax
push str.DA_2_devid_s
push 3
call fcn.0044fe2e
add esp, 0xc
cmp dword [0x510c40], ebx
je 0x44259a
cmp dword [0x50efd4], ebx
jne 0x44259a
push str.6AC27878_A6FA_4155_BA85_F98F491D4F33
push dword [ebp + 0x70]
call dword [sym.imp.SHLWAPI.dll_StrStrIW]
test eax, eax
je 0x4406af
push ebx
push dword [ebp + 0x74]
lea eax, [ebp + 0x78]
push eax
mov dword [ebp + 0x78], ebx
call dword [sym.imp.CFGMGR32.dll_CM_Get_Parent]
test eax, eax
jne 0x4406a3
mov eax, dword [0x510c44]
push dword [ebp + 0x78]
mov ecx, dword [eax + 8]
call fcn.0040635d
test eax, eax
je 0x4406a3
push dword [ebp + 0x78]
mov ecx, dword [0x510c44]
call fcn.00401c56
cmp eax, ebx
je 0x4406a3
push eax
call fcn.0043717e
cmp dword [0x510c90], ebx
je 0x44259a
push dword [ebp + 0x70]
call fcn.00434aa6
test eax, eax
je 0x4406ca
push dword [ebp + 0x70]
push str._blacklisted_device_interface____ignore___s_
push 1
jmp 0x442592
mov dword [ebp + 0x4c], ebx
cmp dword [ebp + 0x74], ebx
jne 0x440704
cmp dword [ebp + 0x70], ebx
je 0x440704
push ebx
push dword [ebp + 0x70]
call fcn.0044fa91
mov dword [ebp + 0x74], eax
cmp eax, ebx
jne 0x4406f1
push str._DevInst_not_determined____ignore
jmp 0x440578
cmp dword [ebp + 0x60], ebx
jne 0x440704
push eax
call fcn.0044ebbf
test eax, eax
je 0x4405c1
xor eax, eax
push 0x18e
mov word [ebp - 0x9c8], ax
lea eax, [ebp - 0x9c6]
push ebx
push eax
mov dword [ebp + 0x64], ebx
call fcn.00449c78
xor eax, eax
push 0x7e
mov word [ebp - 0x180], ax
lea eax, [ebp - 0x17e]
push ebx
push eax
call fcn.00449c78
xor eax, eax
push 0x36
mov word [ebp - 0x80], ax
lea eax, [ebp - 0x7e]
push ebx
push eax
call fcn.00449c78
add esp, 0x24
push ebx
push dword [ebp + 0x74]
lea eax, [ebp + 0x64]
push eax
call dword [sym.imp.CFGMGR32.dll_CM_Get_Parent]
push ebx
push esi
lea eax, [ebp - 0x9c8]
push eax
push dword [ebp + 0x64]
call edi
lea eax, [ebp - 0x180]
push eax
push dword [ebp + 0x64]
call fcn.0044f33f
lea eax, [ebp - 0x180]
push eax
lea eax, [ebp - 0x9c8]
push eax
push dword [ebp + 0x64]
push str._parent:_devinst_u_id_s_loc_s
push 3
call fcn.0044fe2e
add esp, 0x14
push str.ROOTVOLMGR_
lea eax, [ebp - 0x9c8]
xor edi, edi
push eax
mov dword [ebp + 0x78], edi
call fcn.004295d2
test eax, eax
jne 0x44084b
push dword [ebp + 0x64]
mov ecx, dword [0x510c44]
call fcn.00401c56
mov edi, eax
mov dword [ebp + 0x78], edi
cmp edi, ebx
je 0x440811
push dword [edi + 8]
push str.pDevParent__IsPresent_i
push 4
call fcn.0044fe2e
add esp, 0xc
cmp dword [edi + 8], ebx
jne 0x44084b
push dword [ebp + 0x64]
push str._parent_seems_not_present____fake_an_arrival_notification
push 3
call fcn.0044fe2e
add esp, 0xc
cmp dword [ebp + 0x7c], ebx
jne 0x44084b
push 1
push ebx
push dword [ebp + 0x64]
lea eax, [edi + 0xc30]
push eax
call fcn.004404f6
jmp 0x44084b
push dword [ebp + 0x64]
push str._parent_unknown_yet____fake_an_arrival_notification
push 3
call fcn.0044fe2e
add esp, 0xc
cmp dword [ebp + 0x7c], ebx
jne 0x440838
push 1
push ebx
push dword [ebp + 0x64]
push 0x4551b0
call fcn.004404f6
push dword [ebp + 0x64]
mov ecx, dword [0x510c44]
call fcn.00401c56
mov edi, eax
mov dword [ebp + 0x78], eax
cmp dword [ebp + 0x64], ebx
je 0x44088c
push str.Port_0
lea eax, [ebp - 0x180]
push eax
call dword [sym.imp.SHLWAPI.dll_StrStrW]
test eax, eax
je 0x44088c
mov ecx, dword [0x510c44]
lea eax, [ebp - 0x80]
push eax
push ebx
push dword [ebp + 0x64]
call fcn.00401524
lea eax, [ebp - 0x80]
push eax
push str._parent_portchain_s
push 3
call fcn.0044fe2e
add esp, 0xc
xor eax, eax
push 0x36
mov word [ebp - 0x10], ax
lea eax, [ebp - 0xe]
push ebx
push eax
call fcn.00449c78
xor eax, eax
push 0x36
mov word [ebp - 0x48], ax
lea eax, [ebp - 0x46]
push ebx
push eax
call fcn.00449c78
mov ecx, dword [0x510c44]
add esp, 0x18
lea eax, [ebp - 0x10]
push eax
push ebx
push dword [ebp + 0x74]
call fcn.00401524
test eax, eax
je 0x4408dd
lea eax, [ebp - 0x10]
push eax
push str._devportchain_s
push 3
call fcn.0044fe2e
add esp, 0xc
mov ecx, dword [0x510c44]
lea eax, [ebp - 0x48]
push eax
push 1
push dword [ebp + 0x74]
call fcn.00401524
test eax, eax
je 0x440908
lea eax, [ebp - 0x48]
push eax
push str._usbportchain_s
push 3
call fcn.0044fe2e
add esp, 0xc
push dword [ebp + 0x74]
mov ecx, dword [0x510c44]
call fcn.00401c56
mov esi, eax
mov dword [ebp + 0x58], eax
cmp esi, ebx
je 0x440b0a
lea eax, [esi + 0x1bb8]
push eax
lea eax, [esi + 0xe38]
push eax
push dword [esi + 4]
push str.DA_3_device_found_in_DevList_at_idx_i__devid_s_loc_s
push 3
call fcn.0044fe2e
add esp, 0x14
push dword [ebp + 0x70]
lea eax, [esi + 0xc30]
push eax
call dword [sym.imp.KERNEL32.dll_lstrcpyW]
cmp edi, ebx
je 0x44095f
push esi
mov ecx, edi
call fcn.00401063
mov eax, dword [esi + 0x28]
cmp eax, ebx
je 0x440986
cmp edi, ebx
je 0x440986
cmp eax, edi
je 0x440986
push dword [edi + 0x10]
push dword [eax + 0x10]
push str.parent_device_has_changed___u_____u
push 3
call fcn.0044fe2e
add esp, 0x10
mov dword [esi + 0x28], edi
push str.Port_0
lea edi, [esi + 0x1bb8]
push edi
call dword [sym.imp.SHLWAPI.dll_StrStrW]
cmp eax, edi
jne 0x440af9
xor eax, eax
push 0x7e
mov word [ebp - 0x100], ax
lea eax, [ebp - 0xfe]
push ebx
push eax
call fcn.00449c78
add esp, 0xc
lea eax, [ebp - 0x100]
push eax
push dword [ebp + 0x74]
call fcn.0044f33f
test eax, eax
je 0x440af9
push edi
lea eax, [ebp - 0x100]
push eax
call dword [sym.imp.KERNEL32.dll_lstrcmpW]
test eax, eax
je 0x440af9
lea eax, [ebp - 0x100]
push eax
push edi
push str.location_changed__s_____s
push 3
call fcn.0044fe2e
mov ecx, dword [0x510c40]
add esp, 0x10
push ebx
push ebx
push dword [esi + 0x10]
call fcn.0040821e
mov ebx, eax
test ebx, ebx
je 0x440ae3
lea eax, [ebp - 0x10]
push eax
lea edi, [ebx + 0xd90]
push edi
call dword [sym.imp.KERNEL32.dll_lstrcmpW]
test eax, eax
je 0x440ae3
lea eax, [ebp - 0x10]
push eax
push edi
push str.portchain_changed__s_____s
push 3
call fcn.0044fe2e
add esp, 0x10
lea eax, [ebp - 0x10]
push eax
push edi
call dword [sym.imp.KERNEL32.dll_lstrcpyW]
cmp dword [ebx + 0x18], 1
jne 0x440a67
push dword [ebx + 8]
push dword [0x50e684]
call fcn.0043671c
jmp 0x440ae3
cmp dword [ebx + 8], 0
je 0x440aa5
push str.delete_all_old_child_nodes...
push 3
call fcn.0044fe2e
mov edi, dword [sym.imp.USER32.dll_SendMessageW]
pop ecx
pop ecx
jmp 0x440a8f
push eax
push dword [0x50e684]
call fcn.0043671c
push dword [ebx + 8]
push 4
push 0x110a
push dword [0x50e684]
call edi
test eax, eax
jne 0x440a83
lea edi, [ebx + 0x1154]
push dword [edi]
push str.set_pOldTNI__pDeviceInfo__NULL___was_0x_08x
push 4
call fcn.0044fe2e
and dword [edi], 0
xor eax, eax
add esp, 0xc
push 1
mov ecx, ebx
mov word [ebx + 0x24], ax
mov word [ebx + 0x428], ax
mov word [ebx + 0xa70], ax
mov dword [ebx + 0x18], 8
call fcn.0040b963
lea eax, [ebp - 0x100]
push eax
lea eax, [esi + 0x1bb8]
push eax
call dword [sym.imp.KERNEL32.dll_lstrcpyW]
xor ebx, ebx
mov ecx, dword [0x510c44]
push esi
call fcn.00404b65
jmp 0x440ba3
mov edi, dword [ebp + 0x74]
push edi
push str.DA_3_new_device____DevInst_u
push 3
call fcn.0044fe2e
mov ecx, dword [0x510c44]
add esp, 0xc
push edi
push dword [ebp + 0x70]
call fcn.004046f4
mov esi, eax
mov dword [ebp + 0x58], esi
cmp esi, ebx
je 0x44259a
push dword [0x4a5afc]
call dword [sym.imp.COMCTL32.dll_ImageList_GetImageCount]
cmp eax, dword [0x4a5b24]
jle 0x440b52
call fcn.004371dc
mov ecx, dword [0x510c44]
lea eax, [ebp - 0x10]
push eax
push ebx
push edi
call fcn.00401524
test eax, eax
je 0x440b7a
lea eax, [ebp - 0x10]
push eax
push str._devportchain_s
push 3
call fcn.0044fe2e
add esp, 0xc
mov ecx, dword [0x510c44]
lea eax, [ebp - 0x48]
push eax
push 1
push edi
call fcn.00401524
test eax, eax
je 0x440ba3
lea eax, [ebp - 0x48]
push eax
push str._usbportchain_s
push 3
call fcn.0044fe2e
add esp, 0xc
call dword [sym.imp.KERNEL32.dll_GetTickCount]
xor edi, edi
mov dword [esi + 0x24], eax
push ebx
inc edi
mov dword [esi + 8], edi
mov dword [ebp + 0x54], ebx
push dword [esi + 0x10]
lea eax, [ebp + 0x54]
push eax
lea eax, [esi + 0x3a70]
push eax
call dword [sym.imp.CFGMGR32.dll_CM_Get_DevNode_Status]
test eax, eax
jne 0x440bf4
mov eax, dword [esi + 0x3a74]
cmp dword [ebp + 0x54], eax
je 0x440bf4
push dword [ebp + 0x54]
push eax
push str._problem__u_______u
push edi
call fcn.0044fe2e
mov eax, dword [ebp + 0x54]
add esp, 0x10
mov dword [esi + 0x3a74], eax
mov ecx, dword [ebp + 0x70]
cmp ecx, ebx
je 0x440c1d
cmp word [ecx], bx
je 0x440c1d
lea eax, [esi + 0xc30]
cmp word [eax], bx
jne 0x440c1d
push ecx
push eax
call dword [sym.imp.KERNEL32.dll_lstrcpyW]
push 0x2e
pop eax
mov word [esi + 0xc34], ax
mov ecx, dword [0x510c44]
push esi
call fcn.004035ec
mov dword [esi + 0x3b88], ebx
mov ecx, dword [0x510c44]
push esi
call fcn.00404b65
lea eax, [esi + 0x1cb8]
push eax
push str._DriverKeyName_s
push 3
call fcn.0044fe2e
add esp, 0xc
cmp dword [ebp + 0x60], ebx
je 0x440ca2
cmp dword [esi + 0x3b84], ebx
jne 0x440c74
mov eax, dword [0x510c44]
push dword [esi + 0x10]
mov ecx, dword [eax + 8]
call fcn.0040635d
mov dword [esi + 0x3b84], eax
mov eax, dword [esi + 0x3b84]
cmp eax, ebx
je 0x440d12
mov dword [eax + 0xc], edi
mov ecx, dword [esi + 0x3b84]
call fcn.0040678e
mov eax, dword [esi + 0x3b84]
mov eax, dword [eax + 0x840]
mov dword [esi + 0x3ab0], eax
cmp dword [esi + 0x3ab8], ebx
jne 0x440cb2
cmp dword [esi + 0x3abc], ebx
je 0x440ccb
lea edi, [esi + 0x3ab0]
cmp dword [edi], 0xffffffff
jne 0x440ccb
add esi, 0xc30
push esi
call fcn.0042f5de
mov dword [edi], eax
mov ecx, dword [0x510c40]
lea eax, [ebp - 0x10]
push eax
xor edi, edi
push edi
push dword [ebp + 0x74]
call fcn.0040821e
mov ecx, dword [0x510c40]
mov ebx, eax
lea eax, [ebp - 0x48]
push eax
push 1
push dword [ebp + 0x74]
call fcn.0040821e
mov esi, eax
mov dword [ebp + 0x5c], esi
cmp ebx, edi
je 0x440d3e
lea eax, [ebx + 0xd90]
cmp word [eax], di
jne 0x440d43
mov eax, dword [ebx + 0x828]
jmp 0x440d43
push dword [esi + 0x10]
lea eax, [esi + 0xc30]
push eax
mov eax, dword [0x510c44]
mov ecx, dword [eax + 8]
call fcn.004071fa
mov dword [esi + 0x3b84], eax
cmp eax, ebx
jne 0x440c90
mov eax, edi
jmp 0x44259d
mov eax, 0x454d64
push eax
push str.pDevTNI_s
push 4
call fcn.0044fe2e
add esp, 0xc
cmp esi, edi
je 0x440d6a
lea eax, [esi + 0xd90]
cmp word [eax], di
jne 0x440d6f
mov eax, dword [esi + 0x828]
jmp 0x440d6f
mov eax, 0x454d64
push eax
push str.pUsbTNI_s
push 4
call fcn.0044fe2e
add esp, 0xc
cmp ebx, edi
je 0x440e34
cmp ebx, esi
je 0x440e34
push esi
mov ecx, ebx
call fcn.00407ddf
test eax, eax
jne 0x440e34
cmp dword [ebx + 0x18], 1
jne 0x440db5
push dword [ebx + 8]
push dword [0x50e684]
call fcn.0043671c
jmp 0x440e32
cmp dword [ebx + 8], edi
je 0x440df2
push str.delete_all__child_nodes...
push 3
call fcn.0044fe2e
mov esi, dword [sym.imp.USER32.dll_SendMessageW]
pop ecx
pop ecx
jmp 0x440ddc
push eax
push dword [0x50e684]
call fcn.0043671c
push dword [ebx + 8]
push 4
push 0x110a
push dword [0x50e684]
call esi
cmp eax, edi
jne 0x440dd0
lea esi, [ebx + 0x1154]
push dword [esi]
push str.set_pTNI__pDeviceInfo__NULL___was_0x_08x
push 4
call fcn.0044fe2e
xor eax, eax
add esp, 0xc
push 1
mov ecx, ebx
mov dword [esi], edi
mov word [ebx + 0x24], ax
mov word [ebx + 0x428], ax
mov word [ebx + 0xa70], ax
mov dword [ebx + 0x18], 8
call fcn.0040b963
mov esi, dword [ebp + 0x5c]
xor ebx, ebx
cmp esi, edi
je 0x440e4e
mov eax, dword [esi + 0x1154]
cmp eax, edi
je 0x440e4e
mov ecx, dword [0x510c44]
push eax
call fcn.0040121c
cmp ebx, edi
je 0x440e75
lea eax, [ebx + 0x24]
push eax
push edi
push ebx
call fcn.0040ac0f
lea eax, [ebx + 0x428]
push eax
push 1
push ebx
call fcn.0040ac0f
cmp ebx, esi
jne 0x440e80
jmp 0x440f05
cmp esi, edi
je 0x4410a3
mov esi, dword [ebp + 0x5c]
cmp esi, edi
je 0x440efd
mov eax, dword [esi + 0x1148]
cmp eax, edi
je 0x440efd
mov eax, dword [eax + 0x14]
cmp dword [eax + 0x1f], 1
je 0x440efd
mov eax, dword [esi + 0x1154]
cmp eax, edi
je 0x440efd
mov eax, dword [eax + 0x28]
cmp eax, edi
je 0x440efd
add eax, 0xc30
cmp eax, edi
je 0x440efd
mov ecx, dword [esi + 0xde0]
cmp dword [ecx + 0x1144], edi
je 0x440efd
push edi
push edi
push 3
push edi
push 3
push 0x80000000
push eax
call dword [sym.imp.KERNEL32.dll_CreateFileW]
cmp eax, 0xffffffff
je 0x440efd
mov ecx, dword [esi + 0xde0]
push esi
push dword [ecx + 0x1144]
mov ecx, dword [0x510c40]
push eax
call fcn.0040c6dd
test eax, eax
je 0x440efd
push 1
mov ecx, esi
call fcn.0040b963
cmp ebx, edi
je 0x4410a3
mov eax, dword [ebx + 0x1154]
lea ecx, [eax + 0xe38]
cmp eax, edi
jne 0x440f1a
mov ecx, 0x4550e0
push ecx
push eax
lea eax, [ebx + 0xd90]
push eax
push dword [ebx + 0xc]
push ebx
push str.DA_4_pTNI0x_08Ix___pTNI__PortNum_i___s__pTNI__pDeviceInfo0x_08Ix___s_
push 4
call fcn.0044fe2e
mov esi, dword [ebp + 0x58]
lea eax, [esi + 0x1bb8]
push eax
push esi
push str._pDev0x_08Ix_pDev__Loc_s
push 4
call fcn.0044fe2e
mov eax, dword [ebx + 0x1154]
add esp, 0x2c
cmp eax, edi
je 0x440f62
cmp esi, eax
je 0x440f62
push edi
call dword [sym.imp.KERNEL32.dll_Sleep]
cmp dword [ebx + 0x1154], esi
je 0x440f70
mov dword [ebx + 0x1154], esi
cmp dword [esi + 0x3ab8], edi
jne 0x440f80
cmp dword [esi + 0x3abc], edi
je 0x440f90
push str.PutStorageProps_ThreadProc
push ebx
push 0x436bb6
call fcn.004292b9
mov eax, dword [ebx + 0x18]
mov byte [ebx + 0xc78], 0
cmp eax, 0xa
jne 0x440fa8
mov dword [ebx + 0x18], 9
jmp 0x440fb4
cmp eax, 7
jne 0x440fb4
mov dword [ebx + 0x18], 6
mov eax, dword [ebx + 0x1154]
cmp eax, edi
je 0x4410a3
mov ecx, dword [ebp + 0x74]
cmp dword [eax + 0x10], ecx
jne 0x4410a3
push str.DA_5
push 4
call fcn.0044fe2e
pop ecx
pop ecx
cmp word [ebp - 0x310], di
je 0x44105d
mov eax, dword [ebx + 0x1154]
mov esi, 0xe38
add eax, esi
push eax
lea eax, [ebp - 0x310]
push eax
call dword [sym.imp.KERNEL32.dll_lstrcmpiW]
test eax, eax
je 0x44105d
mov eax, dword [ebx + 0x1154]
add eax, esi
push eax
lea eax, [ebp - 0x310]
push eax
push str._s____s
push 4
call fcn.0044fe2e
push dword [ebx + 0x1154]
push str.set_pTNI__pDeviceInfo__NULL___was_0x_08x
push 4
call fcn.0044fe2e
add esp, 0x1c
xor eax, eax
mov dword [ebx + 0x1154], edi
mov word [ebx + 0x86c], ax
mov word [ebx + 0x24], ax
mov word [ebx + 0x428], ax
mov word [ebx + 0xa70], ax
mov word [ebx + 0xde4], ax
mov ecx, ebx
call fcn.00407bba
xor esi, esi
inc esi
mov dword [ebx + 0x11ac], edi
mov dword [ebx + 0x1188], esi
call dword [sym.imp.KERNEL32.dll_GetTickCount]
push eax
push str.set_JustArrivedRemovedJUST_ARRIVED_ArrivalRemovalT_u
push 4
mov dword [ebx + 0x1184], eax
call fcn.0044fe2e
add esp, 0xc
cmp dword [ebx + 8], edi
je 0x4410a3
mov ecx, ebx
call fcn.0040de94
push esi
mov ecx, ebx
call fcn.0040b963
push str.3abf6f2d_71c4_462a_8a92_1e6861e6af27
push dword [ebp + 0x70]
call dword [sym.imp.SHLWAPI.dll_StrStrIW]
test eax, eax
je 0x441172
push str.device_is_a_host_controller
push 3
call fcn.0044fe2e
pop ecx
pop ecx
cmp ebx, edi
je 0x44119a
mov eax, dword [ebx + 0x1154]
cmp eax, edi
je 0x44119a
cmp dword [eax + 0x3a74], 0x2d
je 0x44119a
cmp eax, edi
je 0x44119a
mov ecx, dword [0x510c44]
push eax
call fcn.0040121c
test eax, eax
je 0x44119a
mov esi, dword [ebx + 0x1154]
mov eax, dword [ebp + 0x78]
mov dword [ebx + 0xcf8], 1
mov dword [esi + 0x28], eax
mov dword [esi + 0x3b88], edi
mov ecx, dword [0x510c44]
push esi
call fcn.00404b65
mov ecx, dword [0x510c44]
push esi
call fcn.004035ec
lea eax, [ebx + 0x1140]
mov ecx, dword [eax]
cmp ecx, edi
je 0x44115d
mov dword [ecx + 0x60c], ebx
push dword [eax]
mov ecx, dword [0x510c40]
call fcn.00408851
test eax, eax
je 0x44119a
push 1
mov ecx, ebx
call fcn.0040b963
mov ecx, ebx
call fcn.0040de94
jmp 0x44259a
push edi
push dword [ebp + 0x74]
lea eax, [ebp + 0x64]
push eax
call dword [sym.imp.CFGMGR32.dll_CM_Get_Parent]
cmp eax, edi
je 0x4411a1
push eax
call fcn.0044b4df
push eax
push str._cr_S_getting_parent
push 3
call fcn.0044fe2e
add esp, 0xc
xor eax, eax
jmp 0x44259d
xor eax, eax
push 0x18e
mov word [ebp - 0x838], ax
lea eax, [ebp - 0x836]
push edi
push eax
call fcn.00449c78
mov esi, dword [sym.imp.CFGMGR32.dll_CM_Get_Device_IDW]
add esp, 0xc
push edi
push 0xc8
lea eax, [ebp - 0x838]
push eax
push dword [ebp + 0x64]
call esi
lea eax, [ebp - 0x838]
push eax
push str._parent_devid_s
push 4
call fcn.0044fe2e
add esp, 0xc
mov dword [ebp + 0x78], edi
cmp ebx, edi
jne 0x441447
push str.DA_7___pTNI
push 4
call fcn.0044fe2e
pop ecx
pop ecx
cmp dword [ebp + 0x64], edi
je 0x4415f7
push str.ROOTVOLMGR
lea eax, [ebp - 0x838]
push eax
call fcn.0042958c
xor edi, edi
test eax, eax
jne 0x441239
mov ecx, dword [0x510c40]
push edi
push edi
push dword [ebp + 0x64]
call fcn.0040821e
mov dword [ebp + 0x78], eax
push dword [ebp + 0x78]
push str.DA_7a__pParentTNI0x_08Ix
push 4
call fcn.0044fe2e
add esp, 0xc
cmp dword [ebp + 0x78], edi
jne 0x4412c9
cmp dword [ebp + 0x60], edi
jne 0x4412c9
cmp dword [ebp + 0x7c], edi
jne 0x44126a
push 1
push edi
push dword [ebp + 0x64]
push 0x4551b0
call fcn.004404f6
mov ecx, dword [0x510c40]
push edi
push edi
push dword [ebp + 0x64]
call fcn.0040821e
mov dword [ebp + 0x78], eax
cmp eax, edi
jne 0x4412c9
push dword [ebp + 0x74]
call fcn.0044e0b4
test eax, eax
je 0x4412bd
push edi
mov ebx, 0xc8
push ebx
lea eax, [ebp - 0xb58]
push eax
push dword [ebp + 0x74]
call esi
test eax, eax
jne 0x4412bd
push edi
push ebx
lea eax, [ebp - 0x630]
push eax
push dword [ebp + 0x64]
call esi
test eax, eax
jne 0x4412bd
push edi
call dword [sym.imp.KERNEL32.dll_Sleep]
push str._no_parent_node__not_a_volume____ignore
push 4
jmp 0x44057a
xor eax, eax
push 0x18e
mov word [ebp - 0x4a0], ax
lea eax, [ebp - 0x49e]
push edi
push eax
call fcn.00449c78
add esp, 0xc
push edi
push 0xc8
lea eax, [ebp - 0x4a0]
push eax
push dword [ebp + 0x64]
call esi
test eax, eax
jne 0x4415f7
push str.USBVID_
lea eax, [ebp - 0x4a0]
push eax
call dword [sym.imp.SHLWAPI.dll_StrStrW]
lea ecx, [ebp - 0x4a0]
cmp eax, ecx
jne 0x4415f7
mov ecx, dword [0x510c40]
push 0
push 0
push dword [ebp + 0x64]
call fcn.0040821e
mov ebx, eax
test ebx, ebx
jne 0x441447
cmp dword [0x51adac], 4
jl 0x44135c
lea eax, [ebp - 0x4a0]
push eax
push str.node_for_parent_dev_not_found___s_
push 4
call fcn.0044fe2e
add esp, 0xc
mov esi, str._usb
lea edi, [ebp - 0x6a8]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
push 0x1f6
lea eax, [ebp - 0x696]
push 0
push eax
movsw word es:[edi], word [esi]
call fcn.00449c78
mov esi, dword [sym.imp.KERNEL32.dll_lstrcatW]
add esp, 0xc
lea eax, [ebp - 0x498]
push eax
lea eax, [ebp - 0x6a8]
push eax
call esi
lea eax, [ebp - 0x6a8]
push eax
call dword [sym.imp.USER32.dll_CharLowerW]
push 0x23
pop eax
mov word [ebp - 0x676], ax
push 0x455db8
lea eax, [ebp - 0x6a8]
push eax
call esi
and dword [ebp + 0x38], 0
and dword [ebp + 0x7c], 0
mov eax, str.a5dcbf10_6530_11d2_901f_00c04fb951ed
mov dword [ebp + 0x2c], eax
mov dword [ebp + 0x30], str.f18a0e88_c30c_11d0_8815_00a0c906bed8
mov dword [ebp + 0x34], str.3abf6f2d_71c4_462a_8a92_1e6861e6af27
mov edi, eax
lea eax, [ebp - 0x6a8]
push eax
lea eax, [ebp - 0xbd0]
push eax
call dword [sym.imp.KERNEL32.dll_lstrcpyW]
push edi
lea eax, [ebp - 0xbd0]
push eax
call esi
push 0
lea eax, [ebp - 0xbd0]
push eax
call fcn.0042d8e4
test eax, eax
jne 0x441421
inc dword [ebp + 0x7c]
mov eax, dword [ebp + 0x7c]
mov edi, dword [ebp + eax*4 + 0x2c]
test edi, edi
jne 0x4413de
jmp 0x4415f7
push str.arrival_notification_for_child_of_an_unknown_USB_device_received__SILEX______fake_notification_for_USB_dev
push 1
call fcn.0044fe2e
pop ecx
pop ecx
push 1
push 0
push dword [ebp + 0x64]
lea eax, [ebp - 0xbd0]
push eax
call fcn.004404f6
jmp 0x4415f7
push ebx
call fcn.004079b7
test eax, eax
je 0x4415f7
push dword [ebx + 0x1154]
mov ecx, dword [0x510c44]
call fcn.0040121c
test eax, eax
je 0x4415f7
mov eax, dword [ebx + 0x1154]
mov ecx, dword [ebp + 0x74]
cmp dword [eax + 0x10], ecx
jne 0x4415f7
lea ecx, [eax + 0xe38]
test eax, eax
jne 0x44148f
mov ecx, 0x4550e0
push ecx
push eax
lea eax, [ebx + 0xd90]
push eax
push dword [ebx + 0xc]
push str.DA_8__pTNI__PortNum_i___s__pTNI__pDeviceInfo0x_08Ix___s_
push 4
call fcn.0044fe2e
mov esi, dword [ebx + 0x1154]
push dword [esi + 0x3a74]
xor edi, edi
inc edi
mov dword [esi + 8], edi
push dword [ebp + 0x54]
mov dword [ebp + 0x58], esi
push dword [esi + 0x10]
push dword [ebx + 8]
push ebx
push str.found_pTNI0x_08Ix_hti0x_08Ix__DevInst_u_Prob_u__was__u_
push 3
call fcn.0044fe2e
add esp, 0x34
cmp dword [esi + 0x3a74], 0
jne 0x4415a6
cmp dword [ebp + 0x54], 0
jne 0x4415ac
mov ecx, dword [0x510c44]
push esi
call fcn.00402fcf
test eax, eax
jne 0x44152e
cmp dword [ebx + 0x1188], edi
jne 0x441536
call dword [sym.imp.KERNEL32.dll_GetTickCount]
sub eax, dword [ebx + 0x1184]
cmp eax, 0x3e8
jae 0x441536
cmp dword [0x51adac], 4
jl 0x44152e
push str.same_device_arrived_again____dont_care
push 4
call fcn.0044fe2e
pop ecx
pop ecx
push edi
mov ecx, ebx
call fcn.0040b963
push 0
push dword [ebp + 0x74]
lea eax, [ebp + 0x7c]
push eax
call dword [sym.imp.CFGMGR32.dll_CM_Get_Child]
test eax, eax
jne 0x441571
push dword [ebp + 0x74]
push str.PostMessage_WM_APP_SCAN_ARRIVED_CHILDS___u__B
push 4
call fcn.0044fe2e
add esp, 0xc
push 0
push dword [ebp + 0x74]
push 0x8007
push dword [0x50e67c]
call dword [sym.imp.USER32.dll_PostMessageW]
push str.SetTimer_1000__ScanForUnnotifiedDevs_TimerProc_
push 4
call fcn.0044fe2e
pop ecx
pop ecx
push 0x43457a
push 0x3e8
push 0x12340008
push dword [0x50e67c]
call dword [sym.imp.USER32.dll_SetTimer]
mov ecx, ebx
call fcn.0040de16
call fcn.0043c7e8
cmp dword [ebp + 0x54], 0
je 0x4415f0
mov esi, dword [esi + 0x3a74]
cmp esi, dword [ebp + 0x54]
jne 0x4415e3
cmp dword [0x51adac], 4
jl 0x4415d0
push esi
push str.device_same_problem_code_as_before___i_____dont_care
push 4
call fcn.0044fe2e
add esp, 0xc
push str.DA_8b_return_true
push 4
call fcn.0044fe2e
pop ecx
pop ecx
jmp 0x440d37
cmp dword [ebp + 0x54], 0
je 0x4415f0
test esi, esi
je 0x4415f0
mov dword [ebp + 0x4c], edi
mov ecx, ebx
call fcn.0040de16
cmp dword [ebp + 0x60], 0
mov edi, dword [ebp + 0x58]
je 0x44180b
mov esi, dword [edi + 0x3b84]
mov dword [ebp + 0x7c], esi
test esi, esi
je 0x44180b
push dword [esi + 0x83c]
mov ecx, dword [0x510c44]
lea ebx, [esi + 0x840]
push dword [ebx]
call fcn.00401ecd
mov ecx, dword [ebx]
xor ebx, ebx
inc ebx
mov dword [edi + 0x3ab0], ecx
mov dword [ebp + 0x70], eax
mov dword [esi + 0xc], ebx
test eax, eax
je 0x4417e0
add eax, 0xe38
push eax
push str.device_is_a_volume____drive_is__s
push 3
call fcn.0044fe2e
mov esi, dword [ebp + 0x70]
mov ecx, dword [0x510c40]
add esp, 0xc
push 0
push ebx
push dword [esi + 0x14]
call fcn.0040821e
test eax, eax
je 0x441682
push ebx
mov ecx, eax
mov dword [eax + 0xcf8], ebx
call fcn.0040b963
cmp dword [0x4a5b38], 0
je 0x4417e0
mov ecx, dword [0x510c40]
push 0
push 0
push dword [esi + 0x10]
call fcn.0040821e
mov ebx, eax
test ebx, ebx
je 0x4417e0
cmp dword [ebx + 8], 0
jne 0x4416f9
mov eax, dword [ebx + 0xde0]
cmp dword [eax + 8], 0
jne 0x4416de
push dword [eax + 0x828]
push eax
mov eax, dword [eax + 0xde0]
push dword [eax + 8]
call fcn.0043b5fb
mov ecx, dword [ebx + 0xde0]
add esp, 0xc
mov dword [ecx + 8], eax
push dword [ebx + 0x828]
mov eax, dword [ebx + 0xde0]
push ebx
push dword [eax + 8]
call fcn.0043b5fb
add esp, 0xc
mov dword [ebx + 8], eax
mov ecx, dword [0x510c40]
push 0
push 0
push dword [ebp + 0x74]
call fcn.0040821e
mov esi, eax
test esi, esi
je 0x441724
xor eax, eax
inc eax
push eax
mov ecx, esi
mov dword [esi + 0xcf8], eax
call fcn.0040b963
jmp 0x441799
mov ecx, dword [0x510c40]
call fcn.004087e0
mov esi, eax
xor eax, eax
inc eax
mov dword [esi + 0xde0], ebx
mov dword [esi + 0x18], eax
mov dword [esi + 0x1154], edi
mov dword [esi + 0x1188], eax
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [esi + 0x1184], eax
add edi, 0x1cb8
push edi
lea eax, [esi + 0xde4]
push eax
call dword [sym.imp.KERNEL32.dll_lstrcpyW]
lea eax, [esi + 0x24]
push eax
push 0
push esi
call fcn.0040ac0f
lea eax, [esi + 0x428]
push eax
push 1
push esi
call fcn.0040ac0f
push dword [esi + 0x828]
push esi
push dword [ebx + 8]
call fcn.0043b5fb
add esp, 0xc
mov dword [esi + 8], eax
mov ecx, ebx
call fcn.00407cac
mov ecx, esi
call fcn.0040de94
push str.PutStorageProps_ThreadProc_pVolTNI_
push esi
push 0x436bb6
call fcn.004292b9
cmp dword [0x4a5b2c], 0
jne 0x4417c9
cmp dword [0x4a5b34], 0
je 0x4417e0
mov ecx, dword [ebx + 0xde0]
call fcn.00407cac
push dword [0x50e684]
call dword [sym.imp.USER32.dll_UpdateWindow]
push 0x47b5e0
call fcn.0043dec2
mov eax, dword [ebp + 0x7c]
push 0x43f570
push 0x7d0
push dword [eax + 0x10]
push dword [0x50e67c]
call dword [sym.imp.USER32.dll_SetTimer]
jmp 0x44259a
push 0x455614
lea eax, [edi + 0xfc8]
push eax
call fcn.0042958c
test eax, eax
je 0x441839
push 0x434bb0
push 0x7d0
push dword [edi + 0x10]
push dword [0x50e67c]
call dword [sym.imp.USER32.dll_SetTimer]
xor esi, esi
cmp dword [ebp + 0x78], esi
jne 0x4418f2
push str.determining_the_parent_node...
push 3
call fcn.0044fe2e
pop ecx
pop ecx
mov ecx, dword [0x510c40]
push esi
push esi
push dword [ebp + 0x64]
call fcn.0040821e
mov dword [ebp + 0x78], eax
cmp eax, esi
jne 0x4418f2
mov ebx, dword [sym.imp.KERNEL32.dll_lstrcmpW]
push 0x456880
lea eax, [edi + 0x1e12]
push eax
call ebx
test eax, eax
jne 0x4418d8
push 0x455eb0
add edi, 0x1e92
push edi
call ebx
test eax, eax
jne 0x4418d8
push 0x15227010
push dword [0x50e67c]
call dword [sym.imp.USER32.dll_KillTimer]
push 0x43f448
push 0x1f4
push 0x12340001
push dword [0x50e67c]
call dword [sym.imp.USER32.dll_SetTimer]
push str.OnDevCh
push esi
push 0x7f8a
call fcn.00435888
jmp 0x44259a
push dword [ebp + 0x74]
push dword [ebp + 0x70]
push str.parent_device_not_found_in_tree____dont_care___s___u_
push 3
call fcn.0044fe2e
add esp, 0x10
jmp 0x44259a
mov ecx, dword [ebp + 0x78]
mov eax, dword [ecx + 0x18]
xor esi, esi
cmp eax, 3
jne 0x441b3a
mov ecx, dword [ecx + 0x1140]
cmp dword [ecx + 0x614], 1
jne 0x441b3a
push str.DA_10_root_hub
push 4
call fcn.0044fe2e
pop ecx
pop ecx
mov ecx, dword [0x510c40]
xor ebx, ebx
push ebx
push ebx
push dword [ebp + 0x74]
mov dword [ebp + 0x70], ebx
call fcn.0040821e
mov esi, eax
cmp esi, ebx
jne 0x441963
mov ecx, dword [0x510c40]
call fcn.004087e0
mov esi, eax
inc ebx
mov dword [ebp + 0x70], ebx
test esi, esi
jne 0x441966
push 0xc8
call fcn.0043a28c
jmp 0x44119a
xor ebx, ebx
inc ebx
mov eax, dword [ebp + 0x78]
and dword [esi + 0x11ac], 0
mov dword [esi + 0xde0], eax
mov dword [esi + 0x18], 4
mov dword [esi + 0x1c], ebx
mov dword [esi + 0x1154], edi
mov dword [esi + 0x1188], ebx
call dword [sym.imp.KERNEL32.dll_GetTickCount]
push 0x684
mov dword [esi + 0x1184], eax
mov dword [esi + 0xcf8], ebx
call fcn.00449e38
pop ecx
test eax, eax
je 0x4419b6
mov ecx, eax
call fcn.004078bd
jmp 0x4419b8
xor eax, eax
mov dword [esi + 0x1144], eax
mov dword [eax], ebx
mov eax, dword [esi + 0x1144]
mov dword [eax + 0x284], esi
lea eax, [edi + 0xc38]
push eax
mov eax, dword [esi + 0x1144]
add eax, 0x14
push eax
call dword [sym.imp.KERNEL32.dll_lstrcpyW]
add edi, 0x1cb8
push edi
lea eax, [esi + 0xde4]
push eax
call dword [sym.imp.KERNEL32.dll_lstrcpyW]
mov eax, dword [ebp + 0x78]
mov eax, dword [eax + 0x1154]
push dword [eax + 0x10]
mov eax, dword [0x510c40]
mov ecx, dword [eax]
call fcn.0040e391
mov edi, eax
cmp edi, 0xffffffff
je 0x441954
push 0x47b56c
push 0
push 0x7f8a
call fcn.00435888
cmp dword [esi + 8], 0
jne 0x441a56
mov eax, dword [esi + 0x1154]
add eax, 0x1838
push eax
mov eax, dword [ebp + 0x78]
push esi
push dword [eax + 8]
call fcn.0043b5fb
add esp, 0xc
mov ecx, esi
mov dword [esi + 8], eax
call fcn.0040de94
mov ecx, dword [ebp + 0x78]
call fcn.00407cac
inc edi
push edi
lea eax, [esi + 0xd90]
push 0x4579d4
push eax
call dword [sym.imp.USER32.dll_wsprintfW]
mov ecx, dword [0x510c40]
add esp, 0xc
push esi
call fcn.0040893f
mov eax, dword [esi + 0x1144]
xor edi, edi
cmp dword [eax + 8], edi
je 0x441aa2
mov ecx, dword [0x510c40]
call fcn.00409d3c
push esi
push dword [esi + 8]
call fcn.0043dce3
cmp dword [ebp + 0x70], edi
jne 0x441aaf
push ebx
push edi
push esi
call fcn.0043b783
mov eax, dword [esi + 0x1154]
cmp eax, edi
je 0x441ae9
mov ecx, dword [eax + 0x3a74]
add eax, 0x1838
cmp ecx, edi
je 0x441ae6
push ecx
push eax
push str._s_attached_with_problem__u
push dword [0x4a5b14]
push ebx
push dword [0x50eff4]
call fcn.00405f8f
add esp, 0x18
jmp 0x441b08
push eax
jmp 0x441aee
push str.USB_Root_Hub
push str._s_attached
push dword [0x4a5b14]
push ebx
push dword [0x50eff4]
call fcn.00405f8f
add esp, 0x14
push ebx
push edi
push dword [ebp + 0x78]
call fcn.0043b783
call fcn.004350ee
call fcn.0043a63c
push edi
call fcn.0043527c
mov ecx, esi
call fcn.0040de94
push 0x320
call fcn.0043a28c
mov eax, ebx
jmp 0x44259d
push eax
push str.pParentTNI__DeviceType_i
push 4
call fcn.0044fe2e
mov eax, dword [ebp + 0x78]
mov eax, dword [eax + 0x18]
add esp, 0xc
cmp eax, 6
je 0x441dc3
cmp eax, 4
je 0x441dc3
cmp eax, 5
je 0x441dc3
cmp eax, 9
je 0x441b99
cmp eax, 0xa
je 0x441b99
cmp eax, 1
je 0x441b99
cmp eax, 3
jne 0x4424a6
mov eax, dword [ebp + 0x78]
mov eax, dword [eax + 0x1140]
cmp dword [eax + 0x614], 1
je 0x4424a6
lea eax, [edi + 0xe38]
push eax
push str.DA_11__new_child_device:__s
push 4
call fcn.0044fe2e
xor ebx, ebx
add esp, 0xc
cmp dword [0x4a5b38], ebx
je 0x441d42
mov ecx, dword [0x510c40]
push ebx
push ebx
push dword [ebp + 0x74]
call fcn.0040821e
mov esi, eax
cmp esi, ebx
jne 0x441beb
mov ecx, dword [0x510c40]
call fcn.004087e0
mov ebx, dword [ebp + 0x78]
mov esi, eax
mov dword [esi + 0xde0], ebx
jmp 0x441bee
mov ebx, dword [ebp + 0x78]
cmp dword [esi + 8], 0
jne 0x441d14
cmp dword [ebx + 8], 0
je 0x441d14
push edi
push str.set_pTNI__pDeviceInfo0x_08x
push 4
mov dword [esi + 0x18], 1
mov dword [esi + 0x1154], edi
call fcn.0044fe2e
and dword [esi + 0x11ac], 0
add esp, 0xc
mov dword [esi + 0x1188], 1
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [esi + 0x1184], eax
lea eax, [edi + 0x1cb8]
push eax
lea eax, [esi + 0xde4]
push eax
mov dword [esi + 0xcf8], 1
mov dword [esi + 0xde0], ebx
call dword [sym.imp.KERNEL32.dll_lstrcpyW]
lea eax, [esi + 0x24]
push eax
push 0
push esi
call fcn.0040ac0f
lea eax, [esi + 0x428]
push eax
push 1
push esi
call fcn.0040ac0f
push dword [esi + 0x828]
push esi
push dword [ebx + 8]
call fcn.0043b5fb
add esp, 0xc
mov ecx, esi
mov dword [esi + 8], eax
call fcn.0040de94
cmp dword [edi + 0x3abc], 0
je 0x441cb0
push str.PutStorageProps_ThreadProc_pDriveTNI_
push esi
push 0x436bb6
call fcn.004292b9
xor edi, edi
cmp dword [ebx + 0x11a4], edi
jne 0x441d0d
cmp dword [ebx + 0x18], 1
je 0x441cd0
cmp dword [0x4a5b34], edi
jne 0x441cd0
cmp dword [0x4a5b2c], edi
je 0x441ce7
mov ecx, ebx
call fcn.00407cac
cmp dword [0x4a5b2c], edi
jne 0x441d0d
cmp dword [0x4a5b34], edi
jne 0x441d0d
mov eax, dword [ebx + 0x18]
cmp eax, 9
je 0x441cf4
cmp eax, 0xa
jne 0x441d0d
push dword [ebx + 8]
push dword [0x50e684]
call fcn.0042bd51
test eax, eax
je 0x441d0d
mov ecx, ebx
call fcn.00407d27
mov ecx, esi
call fcn.0040de94
mov eax, dword [esi + 0xde0]
test eax, eax
je 0x441d42
mov eax, dword [eax + 0x1154]
test eax, eax
je 0x441d42
add eax, 0x3a74
cmp dword [eax], 0
je 0x441d42
and dword [eax], 0
mov ecx, dword [esi + 0xde0]
push 0
call fcn.0040b963
mov esi, dword [ebp + 0x5c]
test esi, esi
jne 0x441d60
mov ecx, dword [0x510c40]
push esi
push 1
push dword [ebp + 0x74]
call fcn.0040821e
mov esi, eax
test esi, esi
je 0x441d7d
mov eax, dword [esi + 0x1154]
add eax, 0xe38
push eax
push str.pUsbTNI_s
push 4
call fcn.0044fe2e
add esp, 0xc
jmp 0x441d8b
push str.pUsbTNI_is_NULL
push 4
call fcn.0044fe2e
pop ecx
pop ecx
test esi, esi
je 0x4424a6
lea eax, [esi + 0x24]
push eax
push 0
push esi
call fcn.0040ac0f
lea eax, [esi + 0x428]
push eax
xor edi, edi
inc edi
push edi
push esi
call fcn.0040ac0f
push edi
mov ecx, esi
mov dword [esi + 0xcf8], edi
call fcn.0040b963
jmp 0x4424a6
and dword [ebp + 0x7c], 0
cmp dword [0x50e048], 6
jb 0x441e14
lea eax, [edi + 0x1bb8]
push str.Port_0
push eax
call fcn.0042958c
test eax, eax
je 0x441e14
lea eax, [edi + 0x1bc4]
push eax
call dword [sym.imp.SHLWAPI.dll_StrToIntW]
mov dword [ebp + 0x7c], eax
lea eax, [edi + 0x1bb8]
push eax
push dword [ebp + 0x7c]
push str._portnumber_i__loc_s_
push 3
call fcn.0044fe2e
add esp, 0x10
cmp dword [ebp + 0x7c], 0
jne 0x441e3a
mov eax, dword [edi + 0x3a68]
cmp eax, 1
jb 0x441e3a
cmp eax, 0x100
ja 0x441e3a
push eax
push eax
push str._portnumber_i__addr_u_
push 3
mov dword [ebp + 0x7c], eax
call fcn.0044fe2e
add esp, 0x10
test ebx, ebx
je 0x441e4e
mov eax, dword [ebp + 0x7c]
cmp dword [ebx + 0xc], eax
je 0x441e4e
push 1
call dword [sym.imp.KERNEL32.dll_Sleep]
mov eax, dword [ebp + 0x78]
mov ecx, dword [eax + 0x1154]
mov eax, dword [eax + 0x1144]
mov dword [ebp + 0x5c], ecx
mov dword [ebp + 0x58], eax
test ecx, ecx
je 0x441954
test eax, eax
je 0x441954
cmp dword [eax + 8], 0
je 0x441954
cmp dword [0x4a5b30], 0
je 0x441e9a
mov ecx, dword [ebp + 0x78]
call fcn.00407cac
push dword [0x50e684]
call dword [sym.imp.USER32.dll_UpdateWindow]
cmp dword [0x51adac], 4
jl 0x441ebb
mov eax, dword [ebp + 0x5c]
add eax, 0xc30
push eax
push str.open_hub__s_...
push 4
call fcn.0044fe2e
add esp, 0xc
mov eax, dword [ebp + 0x5c]
xor ecx, ecx
push ecx
push ecx
push 3
push ecx
push 3
add eax, 0xc30
push 0x80000000
push eax
mov dword [ebp + 0x50], eax
call dword [sym.imp.KERNEL32.dll_CreateFileW]
mov dword [ebp + 0x60], eax
cmp eax, 0xffffffff
jne 0x441f67
push dword [ebp + 0x50]
call fcn.0044cf74
push eax
push str.err_S_opening_hub__s
push 1
call fcn.0044fe2e
add esp, 0x10
call dword [sym.imp.KERNEL32.dll_GetLastError]
cmp eax, 2
je 0x441f30
push str.DeviceArrived
push 0x21d3
push str..UsbTreeView.cpp
push str.INT3_in__S_line__u__function__S
push 1
call fcn.0044fe2e
add esp, 0x14
push 0x64
call dword [sym.imp.KERNEL32.dll_Sleep]
cmp dword [ebp + 0x4c], 0
jne 0x44249d
test esi, esi
je 0x442493
mov eax, dword [esi + 0x1154]
add esi, 0xd90
push esi
test eax, eax
je 0x442473
add eax, 0x1838
push eax
push str._s_attached_to_port__s
jmp 0x44247d
lea esi, [edi + 0x1cb8]
cmp word [esi], 0
mov dword [ebp + 0x50], esi
je 0x442030
call dword [sym.imp.KERNEL32.dll_GetTickCount]
push dword [ebp + 0x7c]
mov dword [ebp + 0x5c], eax
mov eax, dword [ebp + 0x58]
push esi
push dword [eax + 8]
push dword [ebp + 0x60]
call fcn.0040a07f
mov dword [ebp + 0x7c], eax
test eax, eax
jne 0x442030
mov esi, dword [sym.imp.KERNEL32.dll_Sleep]
push str._device_not_found_on_any_port
push 3
call fcn.0044fe2e
pop ecx
pop ecx
call dword [sym.imp.KERNEL32.dll_GetTickCount]
sub eax, dword [ebp + 0x5c]
cmp eax, 0x3e8
ja 0x441fff
push dword [ebp + 0x74]
call fcn.0044e0b4
test eax, eax
je 0x44201f
push str.__try_again_in_100_ms...
push 3
call fcn.0044fe2e
pop ecx
pop ecx
push 0x64
call esi
push dword [ebp + 0x7c]
mov eax, dword [ebp + 0x58]
push dword [ebp + 0x50]
push dword [eax + 8]
push dword [ebp + 0x60]
call fcn.0040a07f
mov dword [ebp + 0x7c], eax
test eax, eax
je 0x441fa6
jmp 0x442036
push str._____give_up_for_full_enumeration
push 3
call fcn.0044fe2e
xor esi, esi
pop ecx
pop ecx
push dword [ebp + 0x60]
call dword [sym.imp.KERNEL32.dll_CloseHandle]
mov eax, esi
jmp 0x44259d
push str.__because_no_more_present
push 3
call fcn.0044fe2e
xor esi, esi
inc esi
jmp 0x44200d
mov esi, dword [sym.imp.KERNEL32.dll_Sleep]
mov eax, dword [ebp + 0x58]
mov ecx, dword [ebp + 0x7c]
lea eax, [eax + ecx*4 + 0x284]
mov dword [ebp + 0x5c], eax
mov eax, dword [eax]
test eax, eax
jne 0x44208c
push ecx
push str._pHubInfo__pTNIs__i__is_NULL
push 3
call fcn.0044fe2e
add esp, 0xc
push dword [ebp + 0x60]
call dword [sym.imp.KERNEL32.dll_CloseHandle]
push str.DeviceArrived
push 0x21f2
push str..UsbTreeView.cpp
push str.INT3_in__S_line__u__function__S
push 1
call fcn.0044fe2e
add esp, 0x14
push 0x64
call esi
jmp 0x441954
push eax
call fcn.004079b7
test eax, eax
mov eax, dword [ebp + 0x5c]
jne 0x4420c2
push dword [eax]
push dword [ebp + 0x7c]
push str._pHubInfo__pTNIs__i___0x_08Ix__is_invalid
push 3
call fcn.0044fe2e
add esp, 0x10
push dword [ebp + 0x60]
call dword [sym.imp.KERNEL32.dll_CloseHandle]
push str.DeviceArrived
push 0x21f9
jmp 0x44206f
mov eax, dword [eax]
cmp dword [eax + 4], 0x1000
jle 0x4420e2
push dword [ebp + 0x60]
call dword [sym.imp.KERNEL32.dll_CloseHandle]
push str.DeviceArrived
push 0x21ff
jmp 0x44206f
push 0x47b354
push 0
push 0x7f8a
call fcn.00435888
mov eax, dword [ebp + 0x5c]
mov esi, dword [eax]
mov dword [esi + 0x1188], 1
cmp dword [esi + 0x1154], edi
je 0x442110
mov dword [esi + 0x1154], edi
cmp dword [0x51adac], 4
jl 0x442132
push dword [esi + 0x1154]
push dword [esi + 8]
push esi
push str.pPortTNI0x_08Ix__pPortTNI__hTreeItem0x_08Ix_pPortTNI__pDeviceInfo0x_08Ix
push 4
call fcn.0044fe2e
add esp, 0x14
push dword [ebp + 0x50]
xor eax, eax
mov word [esi + 0x24], ax
mov word [esi + 0x428], ax
mov word [esi + 0x86c], ax
mov word [esi + 0xa70], ax
mov word [esi + 0xe44], ax
lea eax, [esi + 0xde4]
push eax
call dword [sym.imp.KERNEL32.dll_lstrcpyW]
mov ecx, dword [0x510c40]
push esi
push dword [ebp + 0x58]
push dword [ebp + 0x60]
call fcn.0040c6dd
push dword [esi + 0xde0]
mov ecx, dword [0x510c40]
push esi
call fcn.004092ca
mov eax, dword [esi + 0x18]
cmp eax, 9
je 0x442195
cmp eax, 0xa
jne 0x4421a5
cmp word [esi + 0xa70], 0
jne 0x4421a5
push esi
call fcn.00432881
lea eax, [esi + 0x24]
push eax
push 0
push esi
call fcn.0040ac0f
lea eax, [esi + 0x428]
push eax
xor edi, edi
inc edi
push edi
push esi
call fcn.0040ac0f
push edi
mov ecx, esi
mov dword [esi + 0xcf8], edi
call fcn.0040b963
push 0
push 0
push esi
call fcn.0043b783
mov ecx, esi
call fcn.0040de94
cmp dword [0x510c70], 0
je 0x442233
cmp dword [0x4a5b2c], 0
jne 0x4421fc
test ebx, ebx
je 0x442233
cmp dword [ebx + 0x18], edi
jle 0x442233
push dword [esi + 8]
push 9
push 0x110b
push dword [0x50e684]
call dword [sym.imp.USER32.dll_SendMessageW]
test ebx, ebx
je 0x442233
cmp dword [ebx + 0x11a4], 0
jne 0x442233
mov ecx, dword [ebp + 0x78]
call fcn.00407cac
push dword [0x50e684]
call dword [sym.imp.USER32.dll_UpdateWindow]
push 0xc8
call fcn.0043a28c
mov eax, dword [esi + 0x1148]
test eax, eax
je 0x441f30
mov eax, dword [eax + 0x14]
test eax, eax
je 0x441f30
cmp byte [eax + 0x18], 0
je 0x441f30
cmp dword [esi + 0x18], 7
je 0x44226d
mov dword [esi + 0x18], 6
xor ebx, ebx
cmp dword [esi + 0x1144], ebx
jne 0x44229d
push 0x684
call fcn.00449e38
pop ecx
cmp eax, ebx
je 0x44228f
mov ecx, eax
call fcn.004078bd
jmp 0x442291
xor eax, eax
mov dword [esi + 0x1144], eax
inc dword [0x50ded8]
mov eax, dword [esi + 0x1144]
lea ecx, [eax + 0x21c]
push ecx
add eax, 0x14
push eax
push dword [ebp + 0x7c]
push dword [ebp + 0x60]
call fcn.00430fad
test eax, eax
jne 0x4422e4
mov edi, dword [ebp + 0x70]
push edi
push str.ERROR:_hub_does_not_provide_a_symname__using_devpath_instead___s_
push 1
call fcn.0044fe2e
mov eax, dword [esi + 0x1144]
add esp, 0xc
add edi, 8
push edi
add eax, 0x14
push eax
call dword [sym.imp.KERNEL32.dll_lstrcpyW]
cmp dword [0x51adac], 4
jl 0x442306
mov eax, dword [esi + 0x1144]
add eax, 0x14
push eax
push str.device_is_a_hub__symname_s
push 4
call fcn.0044fe2e
add esp, 0xc
cmp dword [esi + 0x1154], ebx
je 0x442463
push 0x47b2a0
push ebx
push 0x7f8a
call fcn.00435888
mov eax, dword [esi + 0x1154]
add eax, 0xc30
cmp word [eax], bx
jne 0x442350
mov ecx, dword [esi + 0x1144]
add ecx, 0x14
cmp word [ecx], bx
je 0x442350
push ecx
push str.._s
push eax
call dword [sym.imp.USER32.dll_wsprintfW]
add esp, 0xc
mov eax, dword [esi + 0x1154]
cmp word [eax + 0xc30], bx
je 0x4423b2
call fcn.004350ee
call fcn.0043a63c
push ebx
call fcn.0043527c
mov ecx, dword [0x510c40]
push esi
call fcn.0040893f
mov eax, dword [esi + 0x1144]
cmp dword [eax + 8], ebx
je 0x44238f
push esi
push dword [esi + 8]
call fcn.0043dce3
lea eax, [esi + 0x24]
push eax
push ebx
push esi
call fcn.0040ac0f
lea eax, [esi + 0x428]
push eax
push 1
push esi
call fcn.0040ac0f
push 1
mov ecx, esi
call fcn.0040b963
cmp dword [ebp + 0x4c], ebx
jne 0x44249d
mov eax, dword [esi + 0x1154]
test eax, eax
je 0x4423d9
lea ecx, [esi + 0xd90]
push ecx
add eax, 0x1838
push eax
push str._s_attached_to_port__s
jmp 0x4423ea
lea eax, [esi + 0xd90]
push eax
push str.USB_Hub
push str._S_attached_to_port__s
push dword [0x4a5b14]
push 1
push dword [0x50eff4]
call fcn.00405f8f
mov ecx, dword [0x510c40]
add esp, 0x18
call fcn.00409d3c
mov eax, dword [esi + 0x1148]
test eax, eax
je 0x442456
mov eax, dword [eax + 0x48]
test eax, eax
je 0x442456
xor ebx, ebx
test eax, eax
jle 0x442456
push 0x38
pop edi
mov eax, dword [esi + 0x1148]
mov eax, dword [edi + eax]
test eax, eax
je 0x442447
cmp dword [eax + 0x1144], 0
je 0x442447
mov ecx, dword [0x510c40]
push eax
call fcn.0040893f
mov eax, dword [esi + 0x1148]
inc ebx
add edi, 4
cmp ebx, dword [eax + 0x48]
jl 0x442425
mov ecx, dword [0x510c40]
call fcn.00409d3c
jmp 0x44249d
push str.no_devicepath_
push 1
call fcn.0044fe2e
pop ecx
pop ecx
jmp 0x44249d
push str.USB_device
push str._S_attached_to_port__s
push dword [0x4a5b14]
push 1
push dword [0x50eff4]
call fcn.00405f8f
add esp, 0x18
push 0x47b270
call fcn.0043dec2
push dword [ebp + 0x60]
call dword [sym.imp.KERNEL32.dll_CloseHandle]
mov ecx, dword [0x510c40]
call fcn.00409f33
call fcn.004350ee
call fcn.0043a63c
xor esi, esi
push esi
call fcn.0043527c
push 0xc8
call fcn.0043a28c
push 1
push esi
push esi
push dword [0x50e684]
call dword [sym.imp.USER32.dll_RedrawWindow]
push esi
push dword [ebp + 0x74]
lea eax, [ebp + 0x28]
push eax
call dword [sym.imp.CFGMGR32.dll_CM_Get_Child]
test eax, eax
jne 0x442516
push dword [ebp + 0x74]
push str.PostMessage_WM_APP_SCAN_ARRIVED_CHILDS___u__A
push 4
call fcn.0044fe2e
add esp, 0xc
push esi
push dword [ebp + 0x74]
push 0x8007
push dword [0x50e67c]
call dword [sym.imp.USER32.dll_PostMessageW]
push str.SetTimer_500__Search_TimerProc_
push 4
call fcn.0044fe2e
mov esi, dword [sym.imp.USER32.dll_SetTimer]
pop ecx
pop ecx
push 0x439e0b
push 0x1f4
push 0x19091969
push dword [0x50e67c]
call esi
push str.SetTimer_1000__ScanForUnnotifiedDevs_TimerProc_
push 4
call fcn.0044fe2e
pop ecx
pop ecx
push 0x43457a
push 0x3e8
push 0x12340008
push dword [0x50e67c]
call esi
push 0x43469b
push 0x7d0
push 0x12340007
push dword [0x50e67c]
call esi
call fcn.0043c7e8
jmp 0x44259a
push eax
call fcn.0044b4df
push eax
push str.DA_2x_cret_S
push 3
call fcn.0044fe2e
add esp, 0xc
xor eax, eax
inc eax
pop edi
pop esi
pop ebx
add ebp, 0x68
leave
ret 0x10