Function at 0x434ab4
Capabilities:
Check for time delay via gettickcount
Check if file exists
Get graphical window text

Disassembly:
push ebp
mov ebp, esp
mov ecx, dword [0x4fb1c8]
sub esp, 0xc18
push ebx
push esi
mov esi, dword [ebp + 0x10]
push edi
cmp dword [esi], ecx
jne 0x4352cd
mov eax, dword [esi + 8]
mov edx, 0xfffffe3e
cmp eax, edx
ja 0x434fba
je 0x434c4e
cmp eax, 0xfffffe34
je 0x434e09
cmp eax, 0xfffffe35
je 0x434d20
cmp eax, 0xfffffe36
je 0x434c5a
cmp eax, 0xfffffe39
je 0x434b6d
cmp eax, 0xfffffe3a
je 0x434c4e
cmp eax, 0xfffffe3d
jne 0x4352cd
mov eax, dword [esi + 0x3c]
xor edi, edi
cmp eax, edi
je 0x434b57
mov ecx, dword [esi + 0x14]
push eax
push dword [ebp + 0xc]
mov dword [0x4fb8e0], ecx
push 0x8001
push dword [0x4fb1c0]
mov dword [0x4fb8e4], eax
call dword [sym.imp.USER32.dll_PostMessageW]
mov ecx, dword [0x4fb1c8]
push 1
push edi
push edi
push ecx
mov dword [0x4fb1a0], edi
call dword [sym.imp.USER32.dll_SetScrollPos]
jmp 0x4352cd
mov eax, dword [esi + 0x3c]
test eax, eax
je 0x434c4e
push eax
call fcn.0042ed1a
mov edi, eax
test edi, edi
je 0x434c4e
mov esi, dword [esi + 0xc]
push 4
pop ebx
cmp dword [0x507a24], ebx
jl 0x434bd8
push dword [edi + 8]
push dword [0x4fb1c8]
call fcn.0042726f
lea ecx, [edi + 0xcf6]
cmp word [ecx], 0
jne 0x434bb5
mov ecx, 0x44acfc
push dword [edi + 0x81c]
push ecx
push eax
push dword [edi + 0xff8]
push esi
call fcn.004437da
push eax
push str.TVN_ITEMEXPANDED__S_pTNI__bExp_u__u___s____s
push ebx
call fcn.00445f0b
add esp, 0x1c
cmp esi, 2
jne 0x434be9
mov dword [edi + 0xff8], 1
jmp 0x434c1a
cmp esi, 1
jne 0x434bf7
and dword [edi + 0xff8], 0
jmp 0x434c1a
cmp esi, 3
jne 0x434c12
push dword [edi + 8]
push dword [0x4fb1c8]
call fcn.0042726f
mov dword [edi + 0xff8], eax
jmp 0x434c1a
push 0
call dword [sym.imp.KERNEL32.dll_Sleep]
push str.pTNI__bLastExpandManuallytrue
push ebx
mov dword [edi + 0xffc], 1
call fcn.00445f0b
cmp dword [0x4fd630], 0
pop ecx
pop ecx
jne 0x434c4e
mov eax, dword [edi + 0x10]
cmp eax, 9
je 0x434c47
cmp eax, 0xa
jne 0x434c4e
mov ecx, edi
call fcn.00406cdb
and dword [0x4fb1a0], 0
jmp 0x4352cd
mov esi, dword [esi + 0x14]
push 4
pop ebx
cmp dword [0x507a24], ebx
jl 0x434c77
push esi
push str.TVN_DELETEITEM_hti0x_08Ix
push ebx
call fcn.00445f0b
add esp, 0xc
push esi
call fcn.0042ed1a
mov edi, eax
test edi, edi
je 0x4352cd
cmp dword [0x507a24], ebx
jl 0x434cda
lea eax, [edi + 0xcf6]
cmp word [eax], 0
jne 0x434ca0
mov eax, 0x44acfc
push eax
push dword [edi + 0x81c]
push str.__s_at__s
push ebx
call fcn.00445f0b
add esp, 0x10
cmp dword [0x507a24], ebx
jl 0x434cda
push dword [edi + 8]
push dword [0x4fb1c8]
call fcn.0042fd9a
push eax
push str._txt_s
push ebx
call fcn.00445f0b
add esp, 0xc
cmp esi, dword [0x4fb8e4]
jne 0x434ce9
and dword [0x4fb8e4], 0
cmp edi, dword [0x4fd644]
jne 0x434d0f
lea eax, [edi + 0xc58]
mov ecx, dword [eax]
test ecx, ecx
je 0x4352cd
and dword [eax], 0
push ecx
call fcn.0043ffc9
jmp 0x4351e0
mov ecx, dword [0x4fd5c0]
push edi
call fcn.0040c25d
jmp 0x4352cd
push dword [esi + 0x10]
call fcn.0042ed1a
mov esi, eax
xor edi, edi
cmp esi, edi
je 0x434ded
push dword [esi + 0xfc0]
mov ecx, dword [0x4fd5c4]
call fcn.004011ae
test eax, eax
je 0x434ded
cmp dword [esi + 0x10], 6
jl 0x434ded
push edi
push edi
push 0x110f
push dword [0x4fb1c8]
call dword [sym.imp.USER32.dll_SendMessageW]
push 0x42d42a
push 0xfffffffffffffffc
push eax
mov dword [0x4fb200], eax
call dword [sym.imp.USER32.dll_SetWindowLongW]
mov dword [0x4fb2a4], eax
mov eax, dword [esi + 0xfc0]
lea ecx, [eax + 0x1634]
cmp word [ecx], di
jne 0x434dc5
mov ecx, dword [0x493a70]
sub ecx, edi
je 0x434db4
dec ecx
je 0x434dac
dec ecx
jne 0x434dd2
add esi, 0xa5c
push esi
jmp 0x434dc6
add esi, 0x860
jmp 0x434da9
lea ecx, [eax + 0x1734]
cmp word [ecx], di
jne 0x434dc5
lea ecx, [eax + 0x1834]
push ecx
push dword [0x4fb200]
call dword [sym.imp.USER32.dll_SetWindowTextW]
push 0xfe
push 0x4fc198
push dword [0x4fb200]
call dword [sym.imp.USER32.dll_GetWindowTextW]
jmp 0x4352cd
push edi
push 1
push 0x1116
push dword [0x4fb1c8]
call dword [sym.imp.USER32.dll_SendMessageW]
xor eax, eax
inc eax
jmp 0x4352cf
cmp dword [esi + 0x1c], 0
je 0x4352cd
push str.lblendedit
push 0
push 0x7f02
call fcn.0042ee26
push dword [esi + 0x10]
call fcn.0042ed1a
mov dword [ebp + 8], eax
test eax, eax
je 0x434f9d
mov ecx, dword [0x4fd5c4]
mov edi, eax
add edi, 0xfc0
push dword [edi]
call fcn.004011ae
test eax, eax
je 0x434f9d
mov edi, dword [edi]
mov ebx, dword [sym.imp.USER32.dll_wsprintfW]
push str.Device_Parameters
lea eax, [edi + 0xe34]
push eax
push str.SystemCurrentControlSetEnum
mov dword [ebp + 0x10], eax
lea eax, [ebp - 0x418]
push 0x44b0bc
push eax
call ebx
mov eax, dword [esi + 0x1c]
add esp, 0x14
cmp word [eax], 0
jne 0x434ec1
push str.CustomName
lea eax, [ebp - 0x418]
push eax
push 0x80000002
call fcn.00425440
test eax, eax
jne 0x434eb3
call dword [sym.imp.KERNEL32.dll_GetLastError]
cmp eax, 2
jne 0x434f6d
xor eax, eax
mov word [edi + 0x1634], ax
jmp 0x434f61
push 0x4fc198
push eax
call dword [sym.imp.KERNEL32.dll_lstrcmpW]
test eax, eax
je 0x434f9d
push dword [esi + 0x1c]
add edi, 0x1634
push edi
mov dword [ebp + 0xc], edi
call dword [sym.imp.KERNEL32.dll_lstrcmpW]
test eax, eax
je 0x434f9d
push dword [esi + 0x1c]
lea eax, [ebp - 0x418]
push str.CustomName
push eax
mov edi, 0x80000002
push edi
call fcn.0042530b
test eax, eax
je 0x434f6d
push dword [ebp + 0x10]
lea eax, [ebp - 0x418]
push str.SystemCurrentControlSetEnum
push 0x44aee0
push eax
call ebx
add esp, 0x10
push dword [esi + 0x1c]
lea eax, [ebp - 0x418]
push str.FriendlyName
push eax
push edi
call fcn.0042530b
push dword [esi + 0x1c]
push str.CustomName__s_set
push 3
call fcn.00445f0b
add esp, 0xc
push dword [esi + 0x1c]
mov dword [esi + 0xc], 0x11
push dword [ebp + 0xc]
call dword [sym.imp.KERNEL32.dll_lstrcpyW]
mov ecx, dword [ebp + 8]
push 1
call fcn.0040a12e
jmp 0x434f9d
call fcn.0044394a
push eax
lea eax, [ebp - 0xc18]
push str.Error__S_writing_to_registry
push eax
call ebx
add esp, 0xc
push 0x30
push str.Set_name_failed
lea eax, [ebp - 0xc18]
push eax
push dword [0x4fb1c0]
call fcn.00446da2
and dword [0x4fb200], 0
push str.lblendedit
push 0
push 0x7f00
call fcn.0042ee26
jmp 0x4352cd
cmp eax, 0xfffffe62
je 0x43526f
cmp eax, 0xfffffe64
je 0x435219
cmp eax, 0xfffffff4
je 0x435039
cmp eax, 0xfffffff8
je 0x435028
cmp eax, 0xfffffffb
jne 0x4352cd
mov esi, dword [sym.imp.USER32.dll_SendDlgItemMessageW]
push 0
push 8
push 0x110a
mov edi, 0x3e8
push edi
push dword [ebp + 8]
call esi
mov dword [ebp + 0x10], eax
test eax, eax
je 0x4352cd
push eax
push 9
mov ebx, 0x110b
push ebx
push edi
push dword [ebp + 8]
call esi
push dword [ebp + 0x10]
push 8
push ebx
push edi
push dword [ebp + 8]
call esi
jmp 0x4352cd
push dword [0x4fb8e4]
push ecx
call fcn.0042e0c5
jmp 0x4352cd
mov eax, dword [esi + 0xc]
dec eax
je 0x4351e6
sub eax, 0x10000
jne 0x4352cd
cmp dword [0x507a24], 5
mov edi, dword [esi + 0x24]
jl 0x435070
push dword [esi + 0x34]
push dword [esi + 0x28]
push edi
push str.NM_CUSTOMDRAW__CDDS_ITEMPREPAINT_hTreeItem0x_08Ix_pCustomDraw__nmcd.uItemState0x_02X_clrTextBk0x_06x
push 5
call fcn.00445f0b
add esp, 0x14
test edi, edi
je 0x4351c6
push edi
call fcn.0042ed1a
mov ebx, eax
push ebx
call fcn.00406c0e
test eax, eax
je 0x4351c6
cmp dword [ebx + 8], 0
je 0x4351c6
cmp dword [0x507a24], 5
jl 0x435113
xor eax, eax
mov dword [ebp - 0x18], 0x2d
lea edi, [ebp - 0x14]
stosd dword es:[edi], eax
stosd dword es:[edi], eax
stosd dword es:[edi], eax
stosd dword es:[edi], eax
stosd dword es:[edi], eax
lea edi, [ebx + 0xfdc]
cmp dword [edi], 0
je 0x4350d8
call dword [sym.imp.KERNEL32.dll_GetTickCount]
sub eax, dword [edi]
push eax
lea eax, [ebp - 0x18]
push 0x454668
push eax
call dword [sym.imp.USER32.dll_wsprintfW]
add esp, 0xc
mov eax, dword [ebx + 0x81c]
cmp word [eax], 0
jne 0x4350ea
lea eax, [ebx + 0xcf6]
push eax
push 0x454a00
push 5
call fcn.00445f0b
push dword [esi + 0x28]
lea eax, [ebp - 0x18]
push eax
push dword [ebx + 0xfe0]
push str._JustArrivedRemoved_i_age_s_state0x_02X
push 5
call fcn.00445f0b
add esp, 0x20
lea edi, [esi + 0x30]
push edi
lea eax, [esi + 0x34]
push eax
push dword [esi + 0x28]
mov dword [ebp + 0x10], eax
push ebx
call fcn.004317a2
test eax, eax
je 0x4351a3
cmp dword [0x507a24], 5
jl 0x43514a
push dword [edi]
mov eax, dword [ebp + 0x10]
push dword [eax]
push str._set_clrTextBk0x_06X__clrText0x_06X
push 5
call fcn.00445f0b
add esp, 0x10
cmp dword [0x4fabc0], 5
jne 0x43515e
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [0x4fb1a0], eax
cmp dword [0x4fabd8], 0x500
jbe 0x43519f
cmp dword [0x4fb1b0], 0
jne 0x43519f
push 1
push dword [0x4fb1c0]
call fcn.00425da8
mov eax, dword [0x493a4c]
push 0x42cfbd
add eax, 0x64
push eax
push 0x92025971
push dword [0x4fb1c0]
call dword [sym.imp.USER32.dll_SetTimer]
push 2
jmp 0x435209
cmp dword [0x507a24], 5
jl 0x4352cd
push dword [edi]
mov eax, dword [ebp + 0x10]
push dword [eax]
push str._unchanged_clrTextBk0x_06X__clrText0x_06X
push 5
call fcn.00445f0b
add esp, 0x10
cmp dword [0x507a24], 5
jl 0x4352cd
push str._________CDDS_ITEMPREPAINT_________
push 5
call fcn.00445f0b
pop ecx
pop ecx
jmp 0x4352cd
cmp dword [0x507a24], 5
jl 0x435207
push dword [esi + 0x34]
push dword [esi + 0x28]
push dword [esi + 0x24]
push str.NM_CUSTOMDRAW__CDDS_PREPAINT_hTreeItem0x_08Ix_pCustomDraw__nmcd.uItemState0x_02X_clrTextBk0x_06x
push 5
call fcn.00445f0b
add esp, 0x14
push 0x20
push 0
push dword [ebp + 8]
call dword [sym.imp.USER32.dll_SetWindowLongW]
jmp 0x434e01
cmp word [esi + 0xc], 0x71
jne 0x4352cd
push dword [0x4fb8e4]
call fcn.0042ed1a
mov esi, eax
test esi, esi
je 0x4352cd
push dword [esi + 0xfc0]
mov ecx, dword [0x4fd5c4]
call fcn.004011ae
test eax, eax
je 0x4352cd
cmp dword [esi + 0x10], 6
jl 0x4352cd
push dword [0x4fb8e4]
push 0
push 0x1141
push dword [0x4fb1c8]
call dword [sym.imp.USER32.dll_SendMessageW]
jmp 0x4352cd
and dword [ebp - 0x10], 0
mov ebx, dword [esi + 0x14]
xor eax, eax
lea edi, [ebp - 0xc]
stosd dword es:[edi], eax
stosd dword es:[edi], eax
stosd dword es:[edi], eax
lea eax, [ebp - 0x10]
push eax
push 0
push 0x1111
push ecx
call dword [sym.imp.USER32.dll_SendMessageW]
push ebx
call fcn.0042ed1a
xor edi, edi
add esi, 0xc
cmp eax, edi
je 0x4352b3
add eax, 0xc5c
cmp byte [eax], 0
je 0x4352b3
push eax
push dword [esi]
call fcn.0042a381
jmp 0x4352b5
mov dword [esi], edi
cmp dword [esi], edi
je 0x4352cd
cmp dword [0x4fb1b0], edi
jne 0x4352cd
push edi
push dword [0x4fb1c0]
call fcn.00425da8
xor eax, eax
pop edi
pop esi
pop ebx
leave
ret 0xc