Function at 0x437f37
Capabilities:
Check for time delay via gettickcount

Disassembly:
sub esp, 0x58
push ebx
mov ebx, dword [esp + 0x60]
push ebp
push esi
push edi
push dword [esp + 0x74]
mov edi, dword [esp + 0x74]
push edi
push ebx
push str.DeviceRemoved__s___u___i_...
xor ebp, ebp
push ebp
call fcn.004487a4
add esp, 0x14
cmp word [ebx], bp
jne 0x437f6e
cmp dword [esp + 0x74], ebp
jne 0x437f6e
push ebp
call dword [sym.imp.KERNEL32.dll_Sleep]
cmp dword [0x5034f8], ebp
je 0x438c07
cmp dword [0x501804], ebp
jne 0x438c07
cmp edi, ebp
jne 0x437f97
push ebp
push ebx
call fcn.004470fa
mov edi, eax
mov dword [esp + 0x70], edi
cmp edi, dword [0x50cb9c]
jne 0x437fc7
call dword [sym.imp.KERNEL32.dll_GetTickCount]
sub eax, dword [0x50cb98]
cmp eax, 0xc8
jae 0x437fc7
push edi
push str._same_devinst_u_again____ignore
push 1
call fcn.004487a4
add esp, 0xc
jmp 0x438c07
mov dword [0x50cb9c], edi
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [0x50cb98], eax
cmp edi, dword [0x50d5f8]
jne 0x437fe6
mov dword [0x50d5f8], ebp
cmp edi, ebp
je 0x437ff9
mov ecx, dword [0x5034f8]
push ebp
push edi
call fcn.004076b3
jmp 0x43800e
cmp word [ebx], bp
je 0x4381a2
mov ecx, dword [0x5034f8]
push ebx
call fcn.0040737e
mov esi, eax
cmp esi, ebp
je 0x4381a2
mov eax, dword [esi + 0xfcc]
cmp eax, ebp
je 0x438086
cmp dword [eax + 8], ebp
jne 0x43804c
cmp dword [esi + 0xfe0], 2
jne 0x43804c
call dword [sym.imp.KERNEL32.dll_GetTickCount]
sub eax, dword [esi + 0xfdc]
push eax
push str._device_already_marked_as_non_present__age_u
push 1
call fcn.004487a4
add esp, 0xc
mov eax, dword [esi + 0xfcc]
cmp dword [eax + 8], ebp
jne 0x438086
cmp dword [esi + 0xfe0], 2
jne 0x438086
call dword [sym.imp.KERNEL32.dll_GetTickCount]
sub eax, dword [esi + 0xfdc]
cmp eax, 0x2710
jae 0x438086
push str._removal_event_already_processed____ignore
push 1
call fcn.004487a4
pop ecx
pop ecx
jmp 0x438c07
mov edi, dword [esi + 0xfcc]
cmp edi, ebp
je 0x4380d1
cmp dword [edi + 0x82c], ebp
mov dword [esp + 0x14], ebp
jle 0x4380d1
lea ebx, [edi + 0x2c]
mov eax, dword [ebx]
cmp eax, ebp
je 0x4380be
cmp dword [eax], ebp
je 0x4380be
cmp dword [eax + 8], ebp
je 0x4380be
push 1
push dword [eax + 0x10]
add eax, 0xc30
push eax
call fcn.00437f37
inc dword [esp + 0x14]
mov eax, dword [esp + 0x14]
add ebx, 4
cmp eax, dword [edi + 0x82c]
jl 0x43809f
mov dword [esi + 0xcf0], 1
cmp dword [0x50352c], ebp
je 0x438141
cmp dword [esi + 8], ebp
je 0x438141
cmp dword [esi + 0xffc], ebp
jne 0x438141
cmp dword [0x498afc], ebp
jne 0x4380fe
cmp dword [esi + 0x10], 1
je 0x438141
push dword [esp + 0x70]
call fcn.00446f5a
test eax, eax
je 0x438141
push dword [esp + 0x70]
call fcn.004461f5
test eax, eax
jne 0x438141
push dword [esi + 8]
push 9
push 0x110b
push dword [0x5010c4]
call dword [sym.imp.USER32.dll_SendMessageW]
test eax, eax
je 0x438141
mov ecx, dword [esi + 0xd5c]
cmp ecx, ebp
je 0x438141
call fcn.004070bb
mov edi, dword [esi + 0xfcc]
cmp edi, ebp
jne 0x4381d0
push str._treenode_found_but_has_no_deviceinfo
push 3
call fcn.004487a4
mov edi, dword [esp + 0x74]
mov esi, dword [sym.imp.SHLWAPI.dll_StrStrIW]
pop ecx
pop ecx
push str.a5dcbf10_6530_11d2_901f_00c04fb951ed
push edi
call esi
test eax, eax
jne 0x43819b
push str.f18a0e88_c30c_11d0_8815_00a0c906bed8
push edi
call esi
test eax, eax
jne 0x43819b
push str.3abf6f2d_71c4_462a_8a92_1e6861e6af27
push edi
call esi
test eax, eax
jne 0x43819b
push str.ROOT_HUB
push edi
call esi
test eax, eax
je 0x438c07
xor eax, eax
jmp 0x438c0a
cmp dword [0x498b08], ebp
je 0x4381b6
push str._no_treenode_found____ignore
push 3
jmp 0x43807a
push str._no_treenode_found____try_child_devices
push 3
call fcn.004487a4
pop ecx
pop ecx
push edi
push ebx
call fcn.00437c79
jmp 0x438c0a
push ebp
lea eax, [edi + 0x10]
push dword [eax]
lea ebx, [edi + 0x39e8]
lea ecx, [edi + 0x39e4]
push ebx
push ecx
mov dword [esp + 0x24], eax
mov dword [esp + 0x2c], ebx
call dword [sym.imp.CFGMGR32.dll_CM_Get_DevNode_Status]
cmp dword [0x50da14], 3
mov dword [esp + 0x10], eax
jl 0x438241
cmp eax, ebp
jne 0x438222
push dword [edi + 0x39e4]
mov eax, dword [esp + 0x18]
push dword [ebx]
push dword [eax]
push str.CM_Get_DevNode_Status__u___problem_u_status0x_08x
push 3
call fcn.004487a4
add esp, 0x14
jmp 0x438241
push dword [esp + 0x10]
call fcn.004443a1
push eax
mov eax, dword [esp + 0x18]
push dword [eax]
push str.CM_Get_DevNode_Status__u___cret_S
push 3
call fcn.004487a4
add esp, 0x10
mov eax, dword [esp + 0x14]
cmp dword [eax], ebp
je 0x43826b
cmp dword [esp + 0x70], ebp
jne 0x43826b
push str.looks_like_a_just_uninstalled_device____fake_CR_NO_SUCH_DEVINST__CM_PROB_PHANTOM
push 3
call fcn.004487a4
pop ecx
pop ecx
mov dword [esp + 0x10], 0xd
mov dword [ebx], 0x2d
mov dword [esp + 0x20], ebp
cmp dword [esp + 0x10], ebp
jne 0x4382b6
cmp dword [ebx], ebp
jne 0x43828f
push str._device_is_present_again
push 3
call fcn.004487a4
pop ecx
pop ecx
mov dword [esp + 0x20], 1
push dword [ebx]
call fcn.004475f9
test eax, eax
je 0x4382b2
push ebp
push 0x435c72
push dword [esi + 8]
mov dword [esi + 0x1004], 1
call fcn.00430592
cmp dword [ebx], ebp
jne 0x4382bf
mov dword [edi + 8], ebp
mov dword [ebx], 0x2d
cmp dword [edi + 0x3a2c], ebp
je 0x4382e7
lea eax, [edi + 0x3a78]
mov ecx, dword [eax]
cmp ecx, ebp
je 0x4382e7
xor edx, edx
mov word [ecx + 0x930], dx
mov eax, dword [eax]
xor ecx, ecx
mov word [eax + 0x848], cx
xor eax, eax
inc eax
push eax
mov ecx, esi
mov dword [esi + 0xcf0], eax
call fcn.0040a7ba
cmp dword [0x501170], ebp
je 0x438313
mov eax, dword [esi + 8]
cmp eax, dword [0x501818]
jne 0x43836d
cmp dword [0x501178], ebp
jne 0x43836d
push 0xa
call dword [sym.imp.KERNEL32.dll_Sleep]
mov eax, dword [esp + 0x14]
push ebp
push dword [eax]
lea eax, [edi + 0x39e4]
push ebx
push eax
call dword [sym.imp.CFGMGR32.dll_CM_Get_DevNode_Status]
cmp eax, 0xd
jne 0x43836d
cmp dword [esi + 0x10], 6
jl 0x438342
mov dword [esi + 0x10], 8
xor eax, eax
push 1
mov ecx, esi
mov word [esi + 0x1c], ax
mov word [esi + 0x420], ax
mov word [esi + 0x864], ax
mov word [esi + 0xa68], ax
mov word [esi + 0xdc0], ax
call fcn.0040a7ba
cmp dword [edi + 0x3a2c], ebp
je 0x43838e
cmp dword [edi + 0x3a78], ebp
je 0x43838e
mov eax, dword [0x5034fc]
push dword [esp + 0x6c]
mov ecx, dword [eax + 8]
call fcn.00405fbf
mov ecx, dword [edi + 0x28]
cmp ecx, ebp
je 0x43839d
push edi
call fcn.004010e0
jmp 0x4383a4
push ebp
call dword [sym.imp.KERNEL32.dll_Sleep]
mov eax, dword [edi + 0x82c]
cmp eax, ebp
je 0x43845b
mov ecx, 0x200
cmp eax, ecx
jb 0x4383bd
mov eax, ecx
dec eax
cmp eax, ebp
mov dword [esp + 0x6c], eax
jl 0x43845b
lea eax, [edi + eax*4 + 0x2c]
mov dword [esp + 0x18], eax
cmp dword [0x50da14], 4
mov eax, dword [esp + 0x18]
mov ebx, dword [eax]
jl 0x438405
lea eax, [ebx + 0xc30]
push eax
push dword [ebx + 8]
lea eax, [ebx + 0xe38]
push eax
push dword [esp + 0x78]
push str.Child__i___s_present_i_devpath_s
push 4
call fcn.004487a4
add esp, 0x18
cmp dword [ebx + 8], ebp
je 0x438448
lea eax, [ebx + 0xc30]
mov dword [esp + 0x24], eax
cmp word [eax], bp
jne 0x438448
push dword [ebx + 0x10]
call fcn.00446df3
test eax, eax
jne 0x438448
lea eax, [ebx + 0xe38]
push eax
push str.fake_removal_event_for_child_device_without_interface:__s
push 4
call fcn.004487a4
add esp, 0xc
push ebp
push dword [ebx + 0x10]
push dword [esp + 0x2c]
call fcn.00437f37
dec dword [esp + 0x6c]
sub dword [esp + 0x18], 4
cmp dword [esp + 0x6c], ebp
jge 0x4383d2
cmp dword [esp + 0x74], ebp
jne 0x438564
mov eax, dword [esi + 0xd5c]
cmp eax, ebp
je 0x4384d4
mov eax, dword [eax + 0xfcc]
cmp eax, ebp
je 0x4384d4
mov ecx, dword [0x5034fc]
push eax
call fcn.0040121c
test eax, eax
jne 0x4384ac
lea eax, [esi + 0x420]
push eax
mov eax, dword [esi + 0xd5c]
push dword [eax + 0xfcc]
push str.pTNI__pParentTNI__pDeviceInfo0x_08Ix_is_invalid__pTNI_s
push ebp
call fcn.004487a4
add esp, 0x10
jmp 0x4384d4
mov eax, dword [esi + 0xd5c]
add eax, 0xfcc
mov ecx, dword [eax]
cmp word [ecx + 0xc30], bp
jne 0x4384d4
mov eax, ecx
push 1
push dword [eax + 0x10]
add eax, 0xc30
push eax
call fcn.00437f37
cmp dword [edi + 0x82c], ebp
mov dword [esp + 0x18], ebp
jle 0x438564
lea eax, [edi + 0x2c]
mov dword [esp + 0x6c], eax
mov eax, dword [esp + 0x6c]
mov ebx, dword [eax]
mov ecx, dword [0x5034fc]
push ebx
call fcn.0040121c
test eax, eax
je 0x43854f
lea eax, [ebx + 0xc30]
mov dword [esp + 0x24], eax
cmp word [eax], bp
jne 0x43854f
cmp dword [ebx + 8], ebp
je 0x43854f
cmp dword [ebx + 0x39e8], ebp
jne 0x43854f
push dword [ebx + 0x10]
call fcn.00446ea8
test eax, eax
jne 0x43854f
lea eax, [ebx + 0xe38]
push eax
push dword [ebx + 0x10]
push str.calling_DeviceRemoved_for__u___s__because_child_device_without_an_interface
push 4
call fcn.004487a4
add esp, 0x10
push ebp
push dword [ebx + 0x10]
push dword [esp + 0x2c]
call fcn.00437f37
inc dword [esp + 0x18]
mov eax, dword [esp + 0x18]
add dword [esp + 0x6c], 4
cmp eax, dword [edi + 0x82c]
jl 0x4384eb
mov eax, dword [0x501170]
mov ecx, dword [0x501174]
add ecx, eax
je 0x43861a
mov dword [esi + 0xfe0], 2
call dword [sym.imp.KERNEL32.dll_GetTickCount]
push eax
push str.set_JustArrivedRemovedJUST_REMOVED_ArrivalRemovalT_u
push 4
mov dword [esi + 0xfdc], eax
call fcn.004487a4
add esp, 0xc
mov ecx, esi
call fcn.0040a753
cmp dword [0x50da14], 4
mov ebx, fcn.00436e1f
jl 0x4385d8
push dword [esi + 0x820]
push dword [esi + 8]
push ebx
push dword [0x501170]
push esi
push dword [0x5010bc]
push str.SetTimer_0x_08Ix__0x_08Ix___u__0x_08Ix_EndOfTreeNodeHighlight_TimerProc___hTreeItem0x_08Ix___s
push 4
call fcn.004487a4
add esp, 0x20
push ebx
push dword [0x501170]
push esi
push dword [0x5010bc]
call dword [sym.imp.USER32.dll_SetTimer]
cmp dword [0x50117c], ebp
je 0x438632
push dword [esi + 8]
call fcn.0043183e
test eax, eax
je 0x438632
cmp dword [esi + 0x10], 1
jne 0x438611
mov ecx, esi
call fcn.0040719f
test eax, eax
je 0x438632
mov ecx, esi
call fcn.004070ac
jmp 0x438632
call dword [sym.imp.KERNEL32.dll_GetTickCount]
push eax
push esi
push 0x113
push dword [0x5010bc]
call fcn.00436e1f
cmp dword [esp + 0x20], ebp
jne 0x438c07
mov ecx, esi
call fcn.0040c687
cmp dword [edi + 0x3a30], ebp
je 0x43865b
xor eax, eax
or dword [edi + 0x3a24], 0xffffffff
mov word [edi + 0x3a38], ax
mov dword [edi + 0x3a7c], ebp
mov ecx, dword [0x5034fc]
push edi
call fcn.00404800
push 0x46ea10
push ebp
push 0x7f8a
call fcn.004309d8
xor edx, edx
cmp dword [edi + 0x82c], ebp
jle 0x4386ad
lea eax, [edi + 0x2c]
mov ecx, dword [eax]
cmp ecx, ebp
je 0x4386a1
mov ebx, dword [esp + 0x1c]
mov dword [ecx + 8], ebp
mov ecx, dword [eax]
mov ebx, dword [ebx]
mov dword [ecx + 0x39e8], ebx
inc edx
add eax, 4
cmp edx, dword [edi + 0x82c]
jl 0x43868a
mov dword [edi + 0x18], ebp
mov dword [edi + 0x1c], ebp
cmp dword [esi + 0xfc0], ebp
je 0x43870f
mov eax, dword [esi + 0xfc4]
cmp eax, ebp
je 0x43870f
mov eax, dword [eax + 0x40]
cmp eax, ebp
je 0x43870f
mov dword [esp + 0x6c], ebp
jle 0x438704
push 0x30
pop ebx
mov eax, dword [esi + 0xfc4]
mov eax, dword [ebx + eax]
cmp eax, ebp
je 0x4386ee
mov ecx, dword [0x5034f8]
push eax
call fcn.00407b49
inc dword [esp + 0x6c]
mov eax, dword [esi + 0xfc4]
mov ecx, dword [esp + 0x6c]
add ebx, 4
cmp ecx, dword [eax + 0x40]
jl 0x4386d5
mov ecx, dword [0x5034f8]
call fcn.00408e6c
mov eax, dword [esi + 0xfc8]
cmp eax, ebp
je 0x43878d
mov eax, dword [eax + 0x10c]
cmp eax, ebp
je 0x438740
mov ebx, dword [eax]
push eax
mov dword [eax], ebp
call fcn.00442f64
pop ecx
mov eax, ebx
cmp ebx, ebp
jne 0x438723
mov eax, dword [esi + 0xfc8]
mov dword [eax + 0x10c], ebp
cmp dword [edi + 8], ebp
jne 0x43878d
lea ebx, [esi + 0x1008]
mov eax, dword [ebx]
mov dword [esp + 0x6c], ebp
cmp eax, ebp
je 0x43876f
push 0xea60
push eax
call dword [sym.imp.KERNEL32.dll_WaitForSingleObject]
push dword [ebx]
mov dword [esp + 0x70], eax
call dword [sym.imp.KERNEL32.dll_CloseHandle]
mov dword [ebx], ebp
cmp dword [esp + 0x10], ebp
je 0x43878d
cmp dword [esp + 0x6c], ebp
jne 0x438787
push ebp
push dword [esi + 0xfc8]
call fcn.00445e1e
mov dword [esi + 0xfc8], ebp
cmp dword [esi + 0xfc0], ebp
je 0x438865
cmp dword [esp + 0x10], ebp
jne 0x4387ad
push 1
mov ecx, esi
call fcn.0040a7ba
jmp 0x438856
mov eax, dword [esi + 0xd5c]
cmp eax, ebp
je 0x4387f8
add eax, 0xd0a
cmp word [eax], bp
push eax
mov eax, dword [esi + 0xfcc]
je 0x4387d5
add eax, 0x1838
push eax
push str._s_removed_from_port__s
jmp 0x4387e0
add eax, 0x1838
push eax
push str._s_removed
push dword [0x498aec]
push 1
push dword [0x501824]
call fcn.00405a42
add esp, 0x18
jmp 0x438813
push str.Device_removed
push dword [0x498aec]
push 1
push dword [0x501824]
call fcn.00405a42
add esp, 0x10
mov dword [esi + 0xfcc], ebp
push dword [edi + 4]
mov ecx, dword [0x5034fc]
call fcn.004041de
mov esi, dword [esi + 0xfc4]
cmp esi, ebp
je 0x43883b
mov esi, dword [esi + 0x10]
cmp esi, ebp
je 0x43883b
mov dword [esi + 0x1f], ebp
call fcn.004301d9
call fcn.00434ab7
mov ecx, dword [0x5034f8]
call fcn.00409063
push ebp
call fcn.00430367
push 0xc8
call fcn.00434739
jmp 0x438c07
mov eax, dword [esi + 0xd5c]
cmp eax, ebp
je 0x438ac8
cmp dword [eax + 0x14], ebp
je 0x438ac8
push 0x42fbe5
push 0xa
push 0x12340003
push dword [0x5010bc]
call dword [sym.imp.USER32.dll_SetTimer]
xor ebx, ebx
inc ebx
cmp edi, dword [esi + 0xfcc]
je 0x4388c5
push str.DeviceRemoved
push 0x2131
push str..UsbTreeView.cpp
push str.INT3_in__S_line__u__function__S
push ebx
call fcn.004487a4
add esp, 0x14
push 0x64
call dword [sym.imp.KERNEL32.dll_Sleep]
int3
cmp dword [esp + 0x10], ebp
jne 0x43896f
push ebx
mov ecx, esi
call fcn.0040a7ba
mov edi, dword [esp + 0x1c]
push dword [edi]
call fcn.004475f9
test eax, eax
je 0x438900
lea eax, [esi + 0xd0a]
push eax
mov eax, dword [esi + 0xfcc]
add eax, 0x1838
push eax
push str._s_prepared_for_safe_removal_from_port__s
jmp 0x43891d
cmp dword [edi], 0x16
jne 0x438937
lea eax, [esi + 0xd0a]
push eax
mov eax, dword [esi + 0xfcc]
add eax, 0x1838
push eax
push str._s_disabled_at_port__s
push dword [0x498aec]
push ebx
push dword [0x501824]
call fcn.00405a42
add esp, 0x18
jmp 0x438a17
mov eax, dword [esi + 0xfcc]
lea ecx, [esi + 0xd0a]
push ecx
push dword [eax + 0x39e8]
add eax, 0x1838
push eax
push str._s_got_problem__u_at_port__s
push dword [0x498aec]
push ebx
push dword [0x501824]
call fcn.00405a42
add esp, 0x1c
jmp 0x438a17
mov dword [esi + 0x10], 8
cmp dword [0x501170], ebp
je 0x438986
mov dword [esi + 0xfe8], ebx
jmp 0x438998
cmp dword [0x501174], ebp
je 0x438998
mov dword [esi + 0xfe8], 2
lea eax, [esi + 0xd0a]
push eax
mov eax, dword [esi + 0xfcc]
add eax, 0x1838
push eax
push str._s_removed_from_port__s
push dword [0x498aec]
push ebx
push dword [0x501824]
call fcn.00405a42
mov eax, dword [esi + 0xfc4]
add esp, 0x18
cmp eax, ebp
je 0x4389d9
mov eax, dword [eax + 0x10]
cmp eax, ebp
je 0x4389d9
mov dword [eax + 0x1f], ebp
mov dword [esi + 0xfcc], ebp
push dword [edi + 4]
mov ecx, dword [0x5034fc]
call fcn.004041de
push dword [esi + 8]
push dword [0x5010c4]
call fcn.00426f7c
mov eax, dword [0x501818]
cmp dword [esi + 8], eax
jne 0x438a17
push eax
push dword [0x5010c4]
push dword [0x5010c8]
call fcn.0041590b
cmp dword [esp + 0x74], ebp
jne 0x438ba6
mov eax, dword [esi + 0xd5c]
cmp eax, ebp
je 0x438ba6
mov eax, dword [eax + 0xfcc]
cmp eax, ebp
je 0x438ba6
cmp dword [eax], 1
jne 0x438ba6
add eax, 0xc30
push eax
call fcn.0042ae2a
test eax, eax
je 0x438ba6
mov eax, dword [esi + 0xd5c]
mov eax, dword [eax + 0xfcc]
push ebp
push ebp
push 3
push ebp
push 3
push 0x80000000
add eax, 0xc30
push eax
call dword [sym.imp.KERNEL32.dll_CreateFileW]
mov edi, eax
cmp edi, 0xffffffff
je 0x438ba6
mov eax, dword [esi + 0xd5c]
mov ecx, dword [0x5034f8]
push esi
push dword [eax + 0xfc0]
push edi
call fcn.0040b170
push dword [esi + 0xd5c]
mov ecx, dword [0x5034f8]
push esi
call fcn.004084d4
push edi
call dword [sym.imp.KERNEL32.dll_CloseHandle]
push 1
push ebp
push esi
call fcn.00435af8
jmp 0x438ba6
cmp dword [esi + 0x10], 1
jne 0x438b0d
xor edi, edi
inc edi
push edi
mov ecx, esi
mov dword [esi + 0xcf0], edi
call fcn.0040a7ba
mov ecx, dword [0x5034f8]
push edi
push dword [esp + 0x74]
call fcn.004076b3
cmp eax, ebp
je 0x438ba6
xor ecx, ecx
inc ecx
mov dword [eax + 0xcf0], ecx
push ecx
mov ecx, eax
call fcn.0040a7ba
jmp 0x438ba6
mov ecx, str.removed
cmp dword [esp + 0x10], ebp
jne 0x438b57
mov ebx, dword [esp + 0x1c]
push dword [ebx]
call fcn.00443d20
push eax
lea eax, [esp + 0x2c]
push str.got_problem__s
push eax
call dword [sym.imp.USER32.dll_wsprintfA]
mov eax, dword [ebx]
add esp, 0xc
sub eax, 0x15
lea ecx, [esp + 0x28]
je 0x438b52
dec eax
je 0x438c14
dec eax
dec eax
je 0x438b52
sub eax, 0x17
jne 0x438b57
mov ecx, str.prepared_for_safe_removal
mov eax, dword [esi + 0xfcc]
push ecx
add eax, 0x1938
push eax
push str._s__S
push dword [0x498aec]
push 1
push dword [0x501824]
call fcn.00405a42
add esp, 0x18
cmp dword [edi + 8], ebp
jne 0x438ba6
push dword [esi + 8]
push dword [0x5010c4]
call fcn.00431932
mov dword [esi + 0xfcc], ebp
push dword [edi + 4]
mov ecx, dword [0x5034fc]
call fcn.004041de
mov eax, dword [esp + 0x14]
mov esi, dword [sym.imp.USER32.dll_SetTimer]
push 0x42ff29
push 0x64
push dword [eax]
push dword [0x5010bc]
call esi
call fcn.004301d9
call fcn.00434ab7
mov ecx, dword [0x5034f8]
call fcn.00409063
push ebp
call fcn.00430367
call fcn.0043482f
push 0x4342d0
push 0x1f4
push 0x19091969
push dword [0x5010bc]
call esi
push 0xc8
call fcn.00434739
call fcn.00436cb4
xor eax, eax
inc eax
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x58
ret 0xc
mov ecx, str.disabled
jmp 0x438b57