Function at 0x440f36
Capabilities:
Check for time delay via gettickcount
Check if file exists

Disassembly:
push ebp
lea ebp, [esp - 0x68]
sub esp, 0xc3c
push ebx
push esi
mov esi, dword [ebp + 0x78]
push edi
xor ebx, ebx
xor eax, eax
mov dword [ebp + 0x38], ebx
lea edi, [ebp + 0x3c]
stosd dword es:[edi], eax
stosd dword es:[edi], eax
stosd dword es:[edi], eax
cmp esi, ebx
je 0x440f5f
lea edi, [ebp + 0x38]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
mov eax, dword [ebp + 0x70]
push 3
pop esi
cmp eax, ebx
je 0x440f70
cmp word [eax], bx
je 0x440f70
xor esi, esi
push dword [ebp + 0x7c]
lea eax, [ebp + 0x38]
push ebx
push eax
call fcn.0044d484
mov edi, dword [ebp + 0x74]
push eax
push edi
push dword [ebp + 0x70]
push str.DeviceArrived__s___u___S___i_...
push esi
call fcn.00451479
add esp, 0x18
mov esi, 0x47f978
cmp dword [0x512cac], ebx
jne 0x440fc6
push 0x10
lea eax, [ebp + 0x38]
push eax
push esi
call fcn.0044b11b
add esp, 0xc
test eax, eax
jne 0x440fc6
push str._hidden_volume____ignore
push 3
call fcn.00451479
pop ecx
pop ecx
jmp 0x443096
push 0x10
lea eax, [ebp + 0x38]
push eax
push 0x47f918
mov dword [ebp + 0x58], ebx
call fcn.0044b11b
add esp, 0xc
test eax, eax
je 0x441008
push 0x10
lea eax, [ebp + 0x38]
push eax
push esi
call fcn.0044b11b
add esp, 0xc
test eax, eax
je 0x441008
cmp edi, ebx
je 0x441013
push edi
call fcn.004500d2
test eax, eax
jne 0x44100f
push str._not_USB_related____ignore
jmp 0x440fb8
mov dword [ebp + 0x58], 1
cmp edi, ebx
jne 0x441023
push 2
push dword [ebp + 0x78]
push dword [ebp + 0x70]
call fcn.0044f776
mov dword [ebp + 0x74], eax
xor eax, eax
push 0x18e
mov word [ebp - 0x4a4], ax
lea eax, [ebp - 0x4a2]
push ebx
push eax
call fcn.0044b15e
mov edi, dword [sym.imp.CFGMGR32.dll_CM_Get_Device_IDW]
add esp, 0xc
push ebx
mov esi, 0xc8
push esi
lea eax, [ebp - 0x4a4]
push eax
push dword [ebp + 0x74]
call edi
cmp eax, ebx
jne 0x443080
lea eax, [ebp - 0x4a4]
push eax
push str.DA_2_devid_s
push 3
call fcn.00451479
add esp, 0xc
cmp dword [0x512c60], ebx
je 0x443096
cmp dword [0x510ff4], ebx
jne 0x443096
push str.6AC27878_A6FA_4155_BA85_F98F491D4F33
push dword [ebp + 0x70]
call dword [sym.imp.SHLWAPI.dll_StrStrIW]
test eax, eax
je 0x4410ef
push ebx
push dword [ebp + 0x74]
lea eax, [ebp + 0x78]
push eax
mov dword [ebp + 0x78], ebx
call dword [sym.imp.CFGMGR32.dll_CM_Get_Parent]
test eax, eax
jne 0x4410e3
mov eax, dword [0x512c64]
push dword [ebp + 0x78]
mov ecx, dword [eax + 8]
call fcn.004063eb
test eax, eax
je 0x4410e3
push dword [ebp + 0x78]
mov ecx, dword [0x512c64]
call fcn.00401c46
cmp eax, ebx
je 0x4410e3
push eax
call fcn.00438166
cmp dword [0x512cb0], ebx
je 0x443096
push dword [ebp + 0x70]
call fcn.004358e2
test eax, eax
je 0x44110a
push dword [ebp + 0x70]
push str._blacklisted_device_interface____ignore___s_
push 1
jmp 0x44308e
mov dword [ebp + 0x4c], ebx
cmp dword [ebp + 0x74], ebx
jne 0x441144
cmp dword [ebp + 0x70], ebx
je 0x441144
push ebx
push dword [ebp + 0x70]
call fcn.004510d5
mov dword [ebp + 0x74], eax
cmp eax, ebx
jne 0x441131
push str._DevInst_not_determined____ignore
jmp 0x440fb8
cmp dword [ebp + 0x58], ebx
jne 0x441144
push eax
call fcn.004500d2
test eax, eax
je 0x441001
xor eax, eax
push 0x18e
mov word [ebp - 0x83c], ax
lea eax, [ebp - 0x83a]
push ebx
push eax
mov dword [ebp + 0x64], ebx
call fcn.0044b15e
xor eax, eax
push 0x7e
mov word [ebp - 0x184], ax
lea eax, [ebp - 0x182]
push ebx
push eax
call fcn.0044b15e
xor eax, eax
push 0x36
mov word [ebp - 0x84], ax
lea eax, [ebp - 0x82]
push ebx
push eax
call fcn.0044b15e
add esp, 0x24
push ebx
push dword [ebp + 0x74]
lea eax, [ebp + 0x64]
push eax
call dword [sym.imp.CFGMGR32.dll_CM_Get_Parent]
push ebx
push esi
lea eax, [ebp - 0x83c]
push eax
push dword [ebp + 0x64]
call edi
lea eax, [ebp - 0x184]
push eax
push dword [ebp + 0x64]
call fcn.004508cf
lea eax, [ebp - 0x184]
push eax
lea eax, [ebp - 0x83c]
push eax
push dword [ebp + 0x64]
push str._parent:_devinst_u_id_s_loc_s
push 3
call fcn.00451479
add esp, 0x14
push str.ROOTVOLMGR_
lea eax, [ebp - 0x83c]
xor edi, edi
push eax
mov dword [ebp + 0x5c], edi
call fcn.00429e44
test eax, eax
jne 0x441291
push dword [ebp + 0x64]
mov ecx, dword [0x512c64]
call fcn.00401c46
mov edi, eax
mov dword [ebp + 0x5c], edi
cmp edi, ebx
je 0x441257
push dword [edi + 0xc]
push str.pDevParent__IsPresent_i
push 4
call fcn.00451479
add esp, 0xc
cmp dword [edi + 0xc], ebx
jne 0x441291
push dword [ebp + 0x64]
push str._parent_seems_not_present____fake_an_arrival_notification
push 3
call fcn.00451479
add esp, 0xc
cmp dword [ebp + 0x7c], ebx
jne 0x441291
push 1
push ebx
push dword [ebp + 0x64]
lea eax, [edi + 0xc34]
push eax
call fcn.00440f36
jmp 0x441291
push dword [ebp + 0x64]
push str._parent_unknown_yet____fake_an_arrival_notification
push 3
call fcn.00451479
add esp, 0xc
cmp dword [ebp + 0x7c], ebx
jne 0x44127e
push 1
push ebx
push dword [ebp + 0x64]
push 0x4561e0
call fcn.00440f36
push dword [ebp + 0x64]
mov ecx, dword [0x512c64]
call fcn.00401c46
mov edi, eax
mov dword [ebp + 0x5c], eax
cmp dword [ebp + 0x64], ebx
je 0x4412d8
push str.Port_0
lea eax, [ebp - 0x184]
push eax
call dword [sym.imp.SHLWAPI.dll_StrStrW]
test eax, eax
je 0x4412d8
mov ecx, dword [0x512c64]
lea eax, [ebp - 0x84]
push eax
push ebx
push dword [ebp + 0x64]
call fcn.00401524
lea eax, [ebp - 0x84]
push eax
push str._parent_portchain_s
push 3
call fcn.00451479
add esp, 0xc
xor eax, eax
push 0x36
mov word [ebp - 0x14], ax
lea eax, [ebp - 0x12]
push ebx
push eax
call fcn.0044b15e
xor eax, eax
push 0x36
mov word [ebp - 0x4c], ax
lea eax, [ebp - 0x4a]
push ebx
push eax
call fcn.0044b15e
mov ecx, dword [0x512c64]
add esp, 0x18
lea eax, [ebp - 0x14]
push eax
push ebx
push dword [ebp + 0x74]
call fcn.00401524
test eax, eax
je 0x441329
lea eax, [ebp - 0x14]
push eax
push str._devportchain_s
push 3
call fcn.00451479
add esp, 0xc
mov ecx, dword [0x512c64]
lea eax, [ebp - 0x4c]
push eax
push 1
push dword [ebp + 0x74]
call fcn.00401524
test eax, eax
je 0x441354
lea eax, [ebp - 0x4c]
push eax
push str._usbportchain_s
push 3
call fcn.00451479
add esp, 0xc
push dword [ebp + 0x74]
mov ecx, dword [0x512c64]
call fcn.00401c46
mov esi, eax
mov dword [ebp + 0x78], eax
cmp esi, ebx
je 0x441556
lea eax, [esi + 0x1bbc]
push eax
lea eax, [esi + 0xe3c]
push eax
push dword [esi + 4]
push str.DA_3_device_found_in_DevList_at_idx_i__devid_s_loc_s
push 3
call fcn.00451479
add esp, 0x14
push dword [ebp + 0x70]
lea eax, [esi + 0xc34]
push eax
call dword [sym.imp.KERNEL32.dll_lstrcpyW]
cmp edi, ebx
je 0x4413ab
push esi
mov ecx, edi
call fcn.00401063
mov eax, dword [esi + 0x2c]
cmp eax, ebx
je 0x4413d2
cmp edi, ebx
je 0x4413d2
cmp eax, edi
je 0x4413d2
push dword [edi + 0x14]
push dword [eax + 0x14]
push str.parent_device_has_changed___u_____u
push 3
call fcn.00451479
add esp, 0x10
mov dword [esi + 0x2c], edi
push str.Port_0
lea edi, [esi + 0x1bbc]
push edi
call dword [sym.imp.SHLWAPI.dll_StrStrW]
cmp eax, edi
jne 0x441545
xor eax, eax
push 0x7e
mov word [ebp - 0x104], ax
lea eax, [ebp - 0x102]
push ebx
push eax
call fcn.0044b15e
add esp, 0xc
lea eax, [ebp - 0x104]
push eax
push dword [ebp + 0x74]
call fcn.004508cf
test eax, eax
je 0x441545
push edi
lea eax, [ebp - 0x104]
push eax
call dword [sym.imp.KERNEL32.dll_lstrcmpW]
test eax, eax
je 0x441545
lea eax, [ebp - 0x104]
push eax
push edi
push str.location_changed__s_____s
push 3
call fcn.00451479
mov ecx, dword [0x512c60]
add esp, 0x10
push ebx
push ebx
push dword [esi + 0x14]
call fcn.0040838c
mov ebx, eax
test ebx, ebx
je 0x44152f
lea eax, [ebp - 0x14]
push eax
lea edi, [ebx + 0xd90]
push edi
call dword [sym.imp.KERNEL32.dll_lstrcmpW]
test eax, eax
je 0x44152f
lea eax, [ebp - 0x14]
push eax
push edi
push str.portchain_changed__s_____s
push 3
call fcn.00451479
add esp, 0x10
lea eax, [ebp - 0x14]
push eax
push edi
call dword [sym.imp.KERNEL32.dll_lstrcpyW]
cmp dword [ebx + 0x18], 1
jne 0x4414b3
push dword [ebx + 8]
push dword [0x5106a4]
call fcn.0043759f
jmp 0x44152f
cmp dword [ebx + 8], 0
je 0x4414f1
push str.delete_all_old_child_nodes...
push 3
call fcn.00451479
mov edi, dword [sym.imp.USER32.dll_SendMessageW]
pop ecx
pop ecx
jmp 0x4414db
push eax
push dword [0x5106a4]
call fcn.0043759f
push dword [ebx + 8]
push 4
push 0x110a
push dword [0x5106a4]
call edi
test eax, eax
jne 0x4414cf
lea edi, [ebx + 0x1154]
push dword [edi]
push str.set_pOldTNI__pDeviceInfo__NULL___was_0x_08x
push 4
call fcn.00451479
and dword [edi], 0
xor eax, eax
add esp, 0xc
push 1
mov ecx, ebx
mov word [ebx + 0x24], ax
mov word [ebx + 0x428], ax
mov word [ebx + 0xa70], ax
mov dword [ebx + 0x18], 8
call fcn.0040bce8
lea eax, [ebp - 0x104]
push eax
lea eax, [esi + 0x1bbc]
push eax
call dword [sym.imp.KERNEL32.dll_lstrcpyW]
xor ebx, ebx
mov ecx, dword [0x512c64]
push esi
call fcn.00404bbc
jmp 0x4415ef
mov edi, dword [ebp + 0x74]
push edi
push str.DA_3_new_device____DevInst_u
push 3
call fcn.00451479
mov ecx, dword [0x512c64]
add esp, 0xc
push edi
push dword [ebp + 0x70]
call fcn.0040474e
mov esi, eax
mov dword [ebp + 0x78], esi
cmp esi, ebx
je 0x443096
push dword [0x4a7b04]
call dword [sym.imp.COMCTL32.dll_ImageList_GetImageCount]
cmp eax, dword [0x4a7b2c]
jle 0x44159e
call fcn.004381c4
mov ecx, dword [0x512c64]
lea eax, [ebp - 0x14]
push eax
push ebx
push edi
call fcn.00401524
test eax, eax
je 0x4415c6
lea eax, [ebp - 0x14]
push eax
push str._devportchain_s
push 3
call fcn.00451479
add esp, 0xc
mov ecx, dword [0x512c64]
lea eax, [ebp - 0x4c]
push eax
push 1
push edi
call fcn.00401524
test eax, eax
je 0x4415ef
lea eax, [ebp - 0x4c]
push eax
push str._usbportchain_s
push 3
call fcn.00451479
add esp, 0xc
call dword [sym.imp.KERNEL32.dll_GetTickCount]
xor edi, edi
mov dword [esi + 0x28], eax
push ebx
inc edi
mov dword [esi + 0xc], edi
mov dword [ebp + 0x54], ebx
push dword [esi + 0x14]
lea eax, [ebp + 0x54]
push eax
lea eax, [esi + 0x3a74]
push eax
call dword [sym.imp.CFGMGR32.dll_CM_Get_DevNode_Status]
test eax, eax
jne 0x44163a
mov eax, dword [esi + 8]
cmp dword [ebp + 0x54], eax
je 0x44163a
push dword [ebp + 0x54]
push eax
push str._problem__u_______u
push edi
call fcn.00451479
mov eax, dword [ebp + 0x54]
add esp, 0x10
mov dword [esi + 8], eax
mov ecx, dword [ebp + 0x70]
cmp ecx, ebx
je 0x441663
cmp word [ecx], bx
je 0x441663
lea eax, [esi + 0xc34]
cmp word [eax], bx
jne 0x441663
push ecx
push eax
call dword [sym.imp.KERNEL32.dll_lstrcpyW]
push 0x2e
pop eax
mov word [esi + 0xc38], ax
mov ecx, dword [0x512c64]
push esi
call fcn.004035cd
mov dword [esi + 0x3bc8], ebx
mov ecx, dword [0x512c64]
push esi
call fcn.00404bbc
lea eax, [esi + 0x1cbc]
push eax
push str._DriverKeyName_s
push 3
call fcn.00451479
add esp, 0xc
cmp dword [ebp + 0x58], ebx
je 0x4416e8
cmp dword [esi + 0x3bc4], ebx
jne 0x4416ba
mov eax, dword [0x512c64]
push dword [esi + 0x14]
mov ecx, dword [eax + 8]
call fcn.004063eb
mov dword [esi + 0x3bc4], eax
mov eax, dword [esi + 0x3bc4]
cmp eax, ebx
je 0x441758
mov dword [eax + 0xc], edi
mov ecx, dword [esi + 0x3bc4]
call fcn.0040681c
mov eax, dword [esi + 0x3bc4]
mov eax, dword [eax + 0x840]
mov dword [esi + 0x3ab0], eax
cmp dword [esi + 0x3ab8], ebx
jne 0x4416f8
cmp dword [esi + 0x3abc], ebx
je 0x441711
lea edi, [esi + 0x3ab0]
cmp dword [edi], 0xffffffff
jne 0x441711
add esi, 0xc34
push esi
call fcn.00430534
mov dword [edi], eax
mov ecx, dword [0x512c60]
lea eax, [ebp - 0x14]
push eax
xor edi, edi
push edi
push dword [ebp + 0x74]
call fcn.0040838c
mov ecx, dword [0x512c60]
mov ebx, eax
lea eax, [ebp - 0x4c]
push eax
push 1
push dword [ebp + 0x74]
call fcn.0040838c
mov esi, eax
mov dword [ebp + 0x60], esi
cmp ebx, edi
je 0x441784
lea eax, [ebx + 0xd90]
cmp word [eax], di
jne 0x441789
mov eax, dword [ebx + 0x828]
jmp 0x441789
push dword [esi + 0x14]
lea eax, [esi + 0xc34]
push eax
mov eax, dword [0x512c64]
mov ecx, dword [eax + 8]
call fcn.00407341
mov dword [esi + 0x3bc4], eax
cmp eax, ebx
jne 0x4416d6
mov eax, edi
jmp 0x443099
mov eax, 0x455d94
push eax
push str.pDevTNI_s
push 4
call fcn.00451479
add esp, 0xc
cmp esi, edi
je 0x4417b0
lea eax, [esi + 0xd90]
cmp word [eax], di
jne 0x4417b5
mov eax, dword [esi + 0x828]
jmp 0x4417b5
mov eax, 0x455d94
push eax
push str.pUsbTNI_s
push 4
call fcn.00451479
add esp, 0xc
cmp ebx, edi
je 0x44195f
mov eax, dword [ebx + 0x1154]
cmp eax, edi
je 0x4418a8
mov ecx, dword [ebp + 0x74]
cmp dword [eax + 0x14], ecx
je 0x4418a8
push ecx
mov ecx, dword [0x512c64]
call fcn.00401c46
mov esi, eax
mov dword [ebp + 0x78], esi
cmp esi, edi
je 0x4418ab
mov eax, dword [ebx + 0x1154]
cmp eax, edi
je 0x4418ab
push dword [esi + 0x14]
lea ecx, [esi + 0xe3c]
push ecx
push dword [eax + 0x14]
add eax, 0xe3c
push eax
push str.DA_3b_device_changed__s___u______s___u_
push 3
call fcn.00451479
mov eax, dword [ebx + 0x18]
add esp, 0x18
mov dword [ebx + 0x1154], esi
cmp eax, 8
je 0x441843
cmp eax, 9
jne 0x4418ab
mov dword [ebx + 0x18], 9
mov eax, dword [esi + 0x2c]
cmp eax, edi
je 0x4418ab
add eax, 0xc34
cmp eax, edi
je 0x4418ab
mov ecx, dword [ebx + 0xde0]
cmp dword [ecx + 0x1144], edi
je 0x4418ab
push edi
push edi
push 3
push edi
push 3
push 0x80000000
push eax
call dword [sym.imp.KERNEL32.dll_CreateFileW]
cmp eax, 0xffffffff
je 0x4418ab
mov ecx, dword [ebx + 0xde0]
push ebx
push dword [ecx + 0x1144]
mov ecx, dword [0x512c60]
push eax
call fcn.0040ca5f
test eax, eax
je 0x4418ab
push 1
mov ecx, ebx
call fcn.0040bce8
jmp 0x4418ab
mov esi, dword [ebp + 0x78]
cmp ebx, dword [ebp + 0x60]
je 0x441962
push dword [ebp + 0x60]
mov ecx, ebx
call fcn.00407f4d
test eax, eax
jne 0x441962
cmp dword [ebx + 0x18], 1
jne 0x4418dc
push dword [ebx + 8]
push dword [0x5106a4]
call fcn.0043759f
jmp 0x44195b
cmp dword [ebx + 8], edi
je 0x441919
push str.delete_all__child_nodes...
push 3
call fcn.00451479
mov esi, dword [sym.imp.USER32.dll_SendMessageW]
pop ecx
pop ecx
jmp 0x441903
push eax
push dword [0x5106a4]
call fcn.0043759f
push dword [ebx + 8]
push 4
push 0x110a
push dword [0x5106a4]
call esi
cmp eax, edi
jne 0x4418f7
push dword [ebx + 0x1154]
push str.set_pTNI__pDeviceInfo__NULL___was_0x_08x
push 4
call fcn.00451479
xor eax, eax
add esp, 0xc
push 1
mov ecx, ebx
mov dword [ebx + 0x1154], edi
mov word [ebx + 0x24], ax
mov word [ebx + 0x428], ax
mov word [ebx + 0xa70], ax
mov dword [ebx + 0x18], 8
call fcn.0040bce8
mov esi, dword [ebp + 0x78]
xor ebx, ebx
jmp 0x441962
mov esi, dword [ebp + 0x78]
mov eax, dword [ebp + 0x60]
cmp eax, edi
je 0x44197f
mov eax, dword [eax + 0x1154]
cmp eax, edi
je 0x44197f
mov ecx, dword [0x512c64]
push eax
call fcn.0040121c
cmp ebx, edi
je 0x4419a7
lea eax, [ebx + 0x24]
push eax
push edi
push ebx
call fcn.0040af35
lea eax, [ebx + 0x428]
push eax
push 1
push ebx
call fcn.0040af35
cmp ebx, dword [ebp + 0x60]
jne 0x4419b0
jmp 0x441a3c
cmp dword [ebp + 0x60], edi
je 0x441bd7
mov ecx, dword [ebp + 0x60]
cmp ecx, edi
je 0x441a34
mov eax, dword [ecx + 0x1148]
cmp eax, edi
je 0x441a34
mov eax, dword [eax + 0x14]
cmp dword [eax + 0x1f], 1
je 0x441a34
mov eax, dword [ecx + 0x1154]
cmp eax, edi
je 0x441a34
mov eax, dword [eax + 0x2c]
cmp eax, edi
je 0x441a34
add eax, 0xc34
cmp eax, edi
je 0x441a34
mov ecx, dword [ecx + 0xde0]
cmp dword [ecx + 0x1144], edi
je 0x441a34
push edi
push edi
push 3
push edi
push 3
push 0x80000000
push eax
call dword [sym.imp.KERNEL32.dll_CreateFileW]
cmp eax, 0xffffffff
je 0x441a34
mov ecx, dword [ebp + 0x60]
push ecx
mov ecx, dword [ecx + 0xde0]
push dword [ecx + 0x1144]
mov ecx, dword [0x512c60]
push eax
call fcn.0040ca5f
test eax, eax
je 0x441a34
mov ecx, dword [ebp + 0x60]
push 1
call fcn.0040bce8
cmp ebx, edi
je 0x441bd7
mov eax, dword [ebx + 0x1154]
lea ecx, [eax + 0xe3c]
cmp eax, edi
jne 0x441a51
mov ecx, 0x456110
push ecx
push eax
lea eax, [ebx + 0xd90]
push eax
push dword [ebx + 0xc]
push ebx
push str.DA_4_pTNI0x_08Ix___pTNI__PortNum_i___s__pTNI__pDeviceInfo0x_08Ix___s_
push 4
call fcn.00451479
lea eax, [esi + 0x1bbc]
push eax
push esi
push str._pDev0x_08Ix_pDev__Loc_s
push 4
call fcn.00451479
mov eax, dword [ebx + 0x1154]
add esp, 0x2c
cmp eax, edi
je 0x441a96
cmp esi, eax
je 0x441a96
push edi
call dword [sym.imp.KERNEL32.dll_Sleep]
cmp dword [ebx + 0x1154], esi
je 0x441aa4
mov dword [ebx + 0x1154], esi
cmp dword [esi + 0x3ab8], edi
jne 0x441ab4
cmp dword [esi + 0x3abc], edi
je 0x441ac4
push str.PutStorageProps_ThreadProc
push ebx
push 0x437a39
call fcn.00429b2b
mov eax, dword [ebx + 0x18]
mov byte [ebx + 0xc78], 0
cmp eax, 0xa
jne 0x441adc
mov dword [ebx + 0x18], 9
jmp 0x441ae8
cmp eax, 7
jne 0x441ae8
mov dword [ebx + 0x18], 6
mov eax, dword [ebx + 0x1154]
cmp eax, edi
je 0x441bd7
mov ecx, dword [ebp + 0x74]
cmp dword [eax + 0x14], ecx
jne 0x441bd7
push str.DA_5
push 4
call fcn.00451479
pop ecx
pop ecx
cmp word [ebp - 0x4a4], di
je 0x441b91
mov eax, dword [ebx + 0x1154]
mov esi, 0xe3c
add eax, esi
push eax
lea eax, [ebp - 0x4a4]
push eax
call dword [sym.imp.KERNEL32.dll_lstrcmpiW]
test eax, eax
je 0x441b91
mov eax, dword [ebx + 0x1154]
add eax, esi
push eax
lea eax, [ebp - 0x4a4]
push eax
push str._s____s
push 4
call fcn.00451479
push dword [ebx + 0x1154]
push str.set_pTNI__pDeviceInfo__NULL___was_0x_08x
push 4
call fcn.00451479
add esp, 0x1c
xor eax, eax
mov dword [ebx + 0x1154], edi
mov word [ebx + 0x86c], ax
mov word [ebx + 0x24], ax
mov word [ebx + 0x428], ax
mov word [ebx + 0xa70], ax
mov word [ebx + 0xde4], ax
mov ecx, ebx
call fcn.00407d2b
xor esi, esi
inc esi
mov dword [ebx + 0x11ac], edi
mov dword [ebx + 0x1188], esi
call dword [sym.imp.KERNEL32.dll_GetTickCount]
push eax
push str.set_JustArrivedRemovedJUST_ARRIVED_ArrivalRemovalT_u
push 4
mov dword [ebx + 0x1184], eax
call fcn.00451479
add esp, 0xc
cmp dword [ebx + 8], edi
je 0x441bd7
mov ecx, ebx
call fcn.0040e328
push esi
mov ecx, ebx
call fcn.0040bce8
push str.3abf6f2d_71c4_462a_8a92_1e6861e6af27
push dword [ebp + 0x70]
call dword [sym.imp.SHLWAPI.dll_StrStrIW]
test eax, eax
je 0x441ca3
push str.device_is_a_host_controller
push 3
call fcn.00451479
pop ecx
pop ecx
cmp ebx, edi
je 0x441ccb
mov eax, dword [ebx + 0x1154]
cmp eax, edi
je 0x441ccb
cmp dword [eax + 8], 0x2d
je 0x441ccb
cmp eax, edi
je 0x441ccb
mov ecx, dword [0x512c64]
push eax
call fcn.0040121c
test eax, eax
je 0x441ccb
mov esi, dword [ebx + 0x1154]
mov eax, dword [ebp + 0x5c]
mov dword [ebx + 0xcf8], 1
mov dword [esi + 0x2c], eax
mov dword [esi + 0x3bc8], edi
mov ecx, dword [0x512c64]
push esi
call fcn.00404bbc
mov ecx, dword [0x512c64]
push esi
call fcn.004035cd
lea eax, [ebx + 0x1140]
mov ecx, dword [eax]
cmp ecx, edi
je 0x441c8e
mov dword [ecx + 0x60c], ebx
push dword [eax]
mov ecx, dword [0x512c60]
call fcn.004089fc
test eax, eax
je 0x441ccb
push 1
mov ecx, ebx
call fcn.0040bce8
mov ecx, ebx
call fcn.0040e328
jmp 0x443096
push edi
push dword [ebp + 0x74]
lea eax, [ebp + 0x64]
push eax
call dword [sym.imp.CFGMGR32.dll_CM_Get_Parent]
cmp eax, edi
je 0x441cd2
push eax
call fcn.0044c9e1
push eax
push str._cr_S_getting_parent
push 3
call fcn.00451479
add esp, 0xc
xor eax, eax
jmp 0x443099
xor eax, eax
push 0x18e
mov word [ebp - 0x9cc], ax
lea eax, [ebp - 0x9ca]
push edi
push eax
call fcn.0044b15e
mov esi, dword [sym.imp.CFGMGR32.dll_CM_Get_Device_IDW]
add esp, 0xc
push edi
push 0xc8
lea eax, [ebp - 0x9cc]
push eax
push dword [ebp + 0x64]
call esi
lea eax, [ebp - 0x9cc]
push eax
push str._parent_devid_s
push 4
call fcn.00451479
add esp, 0xc
mov dword [ebp + 0x5c], edi
cmp ebx, edi
jne 0x441f78
push str.DA_7___pTNI
push 4
call fcn.00451479
pop ecx
pop ecx
cmp dword [ebp + 0x64], edi
je 0x44211f
push str.ROOTVOLMGR
lea eax, [ebp - 0x9cc]
push eax
call fcn.00429dfe
xor edi, edi
test eax, eax
jne 0x441d6a
mov ecx, dword [0x512c60]
push edi
push edi
push dword [ebp + 0x64]
call fcn.0040838c
mov dword [ebp + 0x5c], eax
push dword [ebp + 0x5c]
push str.DA_7a__pParentTNI0x_08Ix
push 4
call fcn.00451479
add esp, 0xc
cmp dword [ebp + 0x5c], edi
jne 0x441dfa
cmp dword [ebp + 0x58], edi
jne 0x441dfa
cmp dword [ebp + 0x7c], edi
jne 0x441d9b
push 1
push edi
push dword [ebp + 0x64]
push 0x4561e0
call fcn.00440f36
mov ecx, dword [0x512c60]
push edi
push edi
push dword [ebp + 0x64]
call fcn.0040838c
mov dword [ebp + 0x5c], eax
cmp eax, edi
jne 0x441dfa
push dword [ebp + 0x74]
call fcn.0044f5b3
test eax, eax
je 0x441dee
push edi
mov ebx, 0xc8
push ebx
lea eax, [ebp - 0xb5c]
push eax
push dword [ebp + 0x74]
call esi
test eax, eax
jne 0x441dee
push edi
push ebx
lea eax, [ebp - 0x634]
push eax
push dword [ebp + 0x64]
call esi
test eax, eax
jne 0x441dee
push edi
call dword [sym.imp.KERNEL32.dll_Sleep]
push str._no_parent_node__not_a_volume____ignore
push 4
jmp 0x440fba
xor eax, eax
push 0x18e
mov word [ebp - 0x314], ax
lea eax, [ebp - 0x312]
push edi
push eax
call fcn.0044b15e
add esp, 0xc
push edi
push 0xc8
lea eax, [ebp - 0x314]
push eax
push dword [ebp + 0x64]
call esi
test eax, eax
jne 0x44211f
push str.USBVID_
lea eax, [ebp - 0x314]
push eax
call dword [sym.imp.SHLWAPI.dll_StrStrW]
lea ecx, [ebp - 0x314]
cmp eax, ecx
jne 0x44211f
mov ecx, dword [0x512c60]
push 0
push 0
push dword [ebp + 0x64]
call fcn.0040838c
mov ebx, eax
test ebx, ebx
jne 0x441f78
cmp dword [0x51cdd4], 4
jl 0x441e8d
lea eax, [ebp - 0x314]
push eax
push str.node_for_parent_dev_not_found___s_
push 4
call fcn.00451479
add esp, 0xc
mov esi, str._usb
lea edi, [ebp - 0x6ac]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
push 0x1f6
lea eax, [ebp - 0x69a]
push 0
push eax
movsw word es:[edi], word [esi]
call fcn.0044b15e
mov esi, dword [sym.imp.KERNEL32.dll_lstrcatW]
add esp, 0xc
lea eax, [ebp - 0x30c]
push eax
lea eax, [ebp - 0x6ac]
push eax
call esi
lea eax, [ebp - 0x6ac]
push eax
call dword [sym.imp.USER32.dll_CharLowerW]
push 0x23
pop eax
mov word [ebp - 0x67a], ax
push 0x456de8
lea eax, [ebp - 0x6ac]
push eax
call esi
and dword [ebp + 0x34], 0
and dword [ebp + 0x7c], 0
mov eax, str.a5dcbf10_6530_11d2_901f_00c04fb951ed
mov dword [ebp + 0x28], eax
mov dword [ebp + 0x2c], str.f18a0e88_c30c_11d0_8815_00a0c906bed8
mov dword [ebp + 0x30], str.3abf6f2d_71c4_462a_8a92_1e6861e6af27
mov edi, eax
lea eax, [ebp - 0x6ac]
push eax
lea eax, [ebp - 0xbd4]
push eax
call dword [sym.imp.KERNEL32.dll_lstrcpyW]
push edi
lea eax, [ebp - 0xbd4]
push eax
call esi
push 0
lea eax, [ebp - 0xbd4]
push eax
call fcn.0042e164
test eax, eax
jne 0x441f52
inc dword [ebp + 0x7c]
mov eax, dword [ebp + 0x7c]
mov edi, dword [ebp + eax*4 + 0x28]
test edi, edi
jne 0x441f0f
jmp 0x44211f
push str.arrival_notification_for_child_of_an_unknown_USB_device_received__SILEX______fake_notification_for_USB_dev
push 1
call fcn.00451479
pop ecx
pop ecx
push 1
push 0
push dword [ebp + 0x64]
lea eax, [ebp - 0xbd4]
push eax
call fcn.00440f36
jmp 0x44211f
push ebx
call fcn.00407b01
test eax, eax
je 0x44211f
push dword [ebx + 0x1154]
mov ecx, dword [0x512c64]
call fcn.0040121c
test eax, eax
je 0x44211f
mov eax, dword [ebx + 0x1154]
mov ecx, dword [ebp + 0x74]
cmp dword [eax + 0x14], ecx
jne 0x44211f
lea ecx, [eax + 0xe3c]
test eax, eax
jne 0x441fc0
mov ecx, 0x456110
push ecx
push eax
lea eax, [ebx + 0xd90]
push eax
push dword [ebx + 0xc]
push str.DA_8__pTNI__PortNum_i___s__pTNI__pDeviceInfo0x_08Ix___s_
push 4
call fcn.00451479
mov esi, dword [ebx + 0x1154]
push dword [esi + 8]
xor edi, edi
inc edi
mov dword [esi + 0xc], edi
push dword [ebp + 0x54]
mov dword [ebp + 0x78], esi
push dword [esi + 0x14]
push dword [ebx + 8]
push ebx
push str.found_pTNI0x_08Ix_hti0x_08Ix__DevInst_u_Prob_u__was__u_
push 3
call fcn.00451479
add esp, 0x34
cmp dword [esi + 8], 0
jne 0x4420d1
cmp dword [ebp + 0x54], 0
jne 0x4420d7
mov ecx, dword [0x512c64]
push esi
call fcn.00402fb0
test eax, eax
jne 0x442059
cmp dword [ebx + 0x1188], edi
jne 0x442061
call dword [sym.imp.KERNEL32.dll_GetTickCount]
sub eax, dword [ebx + 0x1184]
cmp eax, 0x3e8
jae 0x442061
cmp dword [0x51cdd4], 4
jl 0x442059
push str.same_device_arrived_again____dont_care
push 4
call fcn.00451479
pop ecx
pop ecx
push edi
mov ecx, ebx
call fcn.0040bce8
push 0
push dword [ebp + 0x74]
lea eax, [ebp + 0x7c]
push eax
call dword [sym.imp.CFGMGR32.dll_CM_Get_Child]
test eax, eax
jne 0x44209c
push dword [ebp + 0x74]
push str.PostMessage_WM_APP_SCAN_ARRIVED_CHILDS___u__B
push 4
call fcn.00451479
add esp, 0xc
push 0
push dword [ebp + 0x74]
push 0x8007
push dword [0x51069c]
call dword [sym.imp.USER32.dll_PostMessageW]
push str.SetTimer_1000__ScanForUnnotifiedDevs_TimerProc_
push 4
call fcn.00451479
pop ecx
pop ecx
push 0x4353b9
push 0x3e8
push 0x12340008
push dword [0x51069c]
call dword [sym.imp.USER32.dll_SetTimer]
mov ecx, ebx
call fcn.0040e2aa
call fcn.0043d8ec
cmp dword [ebp + 0x54], 0
je 0x442118
mov esi, dword [esi + 8]
cmp esi, dword [ebp + 0x54]
jne 0x44210b
cmp dword [0x51cdd4], 4
jl 0x4420f8
push esi
push str.device_same_problem_code_as_before___i_____dont_care
push 4
call fcn.00451479
add esp, 0xc
push str.DA_8b_return_true
push 4
call fcn.00451479
pop ecx
pop ecx
jmp 0x44177d
cmp dword [ebp + 0x54], 0
je 0x442118
test esi, esi
je 0x442118
mov dword [ebp + 0x4c], edi
mov ecx, ebx
call fcn.0040e2aa
cmp dword [ebp + 0x58], 0
mov edi, dword [ebp + 0x78]
je 0x442331
mov esi, dword [edi + 0x3bc4]
mov dword [ebp + 0x7c], esi
test esi, esi
je 0x442331
push dword [esi + 0x83c]
mov ecx, dword [0x512c64]
lea edi, [esi + 0x840]
push dword [edi]
call fcn.00401eb7
mov ecx, dword [ebp + 0x78]
mov ebx, eax
mov eax, dword [edi]
xor edi, edi
inc edi
mov dword [ecx + 0x3ab0], eax
mov dword [esi + 0xc], edi
test ebx, ebx
je 0x442306
lea eax, [ebx + 0xe3c]
push eax
push str.device_is_a_volume____drive_is__s
push 3
call fcn.00451479
mov ecx, dword [0x512c60]
add esp, 0xc
push 0
push edi
push dword [ebx + 0x18]
call fcn.0040838c
test eax, eax
je 0x4421aa
push edi
mov ecx, eax
mov dword [eax + 0xcf8], edi
call fcn.0040bce8
cmp dword [0x4a7b40], 0
je 0x442306
mov ecx, dword [0x512c60]
push 0
push 0
push dword [ebx + 0x14]
call fcn.0040838c
mov ebx, eax
test ebx, ebx
je 0x442306
cmp dword [ebx + 8], 0
jne 0x442221
mov eax, dword [ebx + 0xde0]
cmp dword [eax + 8], 0
jne 0x442206
push dword [eax + 0x828]
push eax
mov eax, dword [eax + 0xde0]
push dword [eax + 8]
call fcn.0043c702
mov ecx, dword [ebx + 0xde0]
add esp, 0xc
mov dword [ecx + 8], eax
push dword [ebx + 0x828]
mov eax, dword [ebx + 0xde0]
push ebx
push dword [eax + 8]
call fcn.0043c702
add esp, 0xc
mov dword [ebx + 8], eax
mov ecx, dword [0x512c60]
push 0
push 0
push dword [ebp + 0x74]
call fcn.0040838c
mov esi, eax
test esi, esi
je 0x442249
push edi
mov ecx, esi
mov dword [esi + 0xcf8], edi
call fcn.0040bce8
jmp 0x4422bf
mov ecx, dword [0x512c60]
call fcn.0040898b
mov esi, eax
mov eax, dword [ebp + 0x78]
mov dword [esi + 0xde0], ebx
mov dword [esi + 0x18], edi
mov dword [esi + 0x1154], eax
mov dword [esi + 0x1188], edi
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [esi + 0x1184], eax
mov eax, dword [ebp + 0x78]
add eax, 0x1cbc
push eax
lea eax, [esi + 0xde4]
push eax
call dword [sym.imp.KERNEL32.dll_lstrcpyW]
lea eax, [esi + 0x24]
push eax
push 0
push esi
call fcn.0040af35
lea eax, [esi + 0x428]
push eax
push edi
push esi
call fcn.0040af35
push dword [esi + 0x828]
push esi
push dword [ebx + 8]
call fcn.0043c702
add esp, 0xc
mov dword [esi + 8], eax
mov ecx, ebx
call fcn.00407e1a
mov ecx, esi
call fcn.0040e328
push str.PutStorageProps_ThreadProc_pVolTNI_
push esi
push 0x437a39
call fcn.00429b2b
cmp dword [0x4a7b34], 0
jne 0x4422ef
cmp dword [0x4a7b3c], 0
je 0x442306
mov ecx, dword [ebx + 0xde0]
call fcn.00407e1a
push dword [0x5106a4]
call dword [sym.imp.USER32.dll_UpdateWindow]
push 0x47cc40
call fcn.0043ec88
mov eax, dword [ebp + 0x7c]
push 0x43ffaa
push 0x7d0
push dword [eax + 0x10]
push dword [0x51069c]
call dword [sym.imp.USER32.dll_SetTimer]
jmp 0x44177d
push 0x456644
lea eax, [edi + 0xfcc]
push eax
call fcn.00429dfe
test eax, eax
je 0x44235f
push 0x4359ec
push 0x7d0
push dword [edi + 0x14]
push dword [0x51069c]
call dword [sym.imp.USER32.dll_SetTimer]
mov edi, dword [ebp + 0x5c]
xor esi, esi
cmp edi, esi
jne 0x44241f
push str.determining_the_parent_node...
push 3
call fcn.00451479
pop ecx
pop ecx
mov ecx, dword [0x512c60]
push esi
push esi
push dword [ebp + 0x64]
call fcn.0040838c
mov edi, eax
mov dword [ebp + 0x5c], edi
cmp edi, esi
jne 0x44241f
mov ebx, dword [ebp + 0x78]
mov edi, dword [sym.imp.KERNEL32.dll_lstrcmpW]
push 0x4578b8
lea eax, [ebx + 0x1e16]
push eax
call edi
test eax, eax
jne 0x442405
push 0x456ee0
add ebx, 0x1e96
push ebx
call edi
test eax, eax
jne 0x442405
push 0x15227010
push dword [0x51069c]
call dword [sym.imp.USER32.dll_KillTimer]
push 0x43fe82
push 0x1f4
push 0x12340001
push dword [0x51069c]
call dword [sym.imp.USER32.dll_SetTimer]
push str.OnDevCh
push esi
push 0x7f8a
call fcn.00436641
jmp 0x443096
push dword [ebp + 0x74]
push dword [ebp + 0x70]
push str.parent_device_not_found_in_tree____dont_care___s___u_
push 3
call fcn.00451479
add esp, 0x10
jmp 0x443096
mov eax, dword [edi + 0x18]
xor esi, esi
cmp eax, 3
jne 0x442663
mov ecx, dword [edi + 0x1140]
cmp dword [ecx + 0x614], 1
jne 0x442663
push str.DA_10_root_hub
push 4
call fcn.00451479
pop ecx
pop ecx
mov ecx, dword [0x512c60]
xor ebx, ebx
push ebx
push ebx
push dword [ebp + 0x74]
mov dword [ebp + 0x70], ebx
call fcn.0040838c
mov esi, eax
cmp esi, ebx
jne 0x44248d
mov ecx, dword [0x512c60]
call fcn.0040898b
mov esi, eax
inc ebx
mov dword [ebp + 0x70], ebx
test esi, esi
jne 0x442490
push 0xc8
call fcn.0043b3a7
jmp 0x441ccb
xor ebx, ebx
inc ebx
mov eax, dword [ebp + 0x78]
and dword [esi + 0x11ac], 0
mov dword [esi + 0xde0], edi
mov dword [esi + 0x18], 4
mov dword [esi + 0x1c], ebx
mov dword [esi + 0x1154], eax
mov dword [esi + 0x1188], ebx
call dword [sym.imp.KERNEL32.dll_GetTickCount]
push 0x684
mov dword [esi + 0x1184], eax
mov dword [esi + 0xcf8], ebx
call fcn.0044b31e
pop ecx
test eax, eax
je 0x4424e0
mov ecx, eax
call fcn.00407a07
jmp 0x4424e2
xor eax, eax
mov dword [esi + 0x1144], eax
mov dword [eax], ebx
mov eax, dword [esi + 0x1144]
mov dword [eax + 0x284], esi
mov eax, dword [ebp + 0x78]
add eax, 0xc3c
push eax
mov eax, dword [esi + 0x1144]
add eax, 0x14
push eax
call dword [sym.imp.KERNEL32.dll_lstrcpyW]
mov eax, dword [ebp + 0x78]
add eax, 0x1cbc
push eax
lea eax, [esi + 0xde4]
push eax
call dword [sym.imp.KERNEL32.dll_lstrcpyW]
mov eax, dword [edi + 0x1154]
push dword [eax + 0x14]
mov eax, dword [0x512c60]
mov ecx, dword [eax]
call fcn.0040e82a
mov dword [ebp + 0x74], eax
cmp eax, 0xffffffff
je 0x44247e
push 0x47cbcc
push 0
push 0x7f8a
call fcn.00436641
cmp dword [esi + 8], 0
jne 0x44257f
mov eax, dword [esi + 0x1154]
add eax, 0x183c
push eax
push esi
push dword [edi + 8]
call fcn.0043c702
add esp, 0xc
mov ecx, esi
mov dword [esi + 8], eax
call fcn.0040e328
mov ecx, edi
call fcn.00407e1a
mov eax, dword [ebp + 0x74]
inc eax
push eax
lea eax, [esi + 0xd90]
push 0x458ab4
push eax
call dword [sym.imp.USER32.dll_wsprintfW]
mov ecx, dword [0x512c60]
add esp, 0xc
push esi
call fcn.00408aea
mov eax, dword [esi + 0x1144]
cmp dword [eax + 8], 0
je 0x4425cc
mov ecx, dword [0x512c60]
call fcn.00409f22
push esi
push dword [esi + 8]
call fcn.0043eaa9
cmp dword [ebp + 0x70], 0
jne 0x4425db
push ebx
push 0
push esi
call fcn.0043c88a
mov eax, dword [esi + 0x1154]
test eax, eax
je 0x442612
mov ecx, dword [eax + 8]
add eax, 0x183c
test ecx, ecx
je 0x44260f
push ecx
push eax
push str._s_attached_with_problem__u
push dword [0x4a7b1c]
push ebx
push dword [0x511014]
call fcn.0040601d
add esp, 0x18
jmp 0x442631
push eax
jmp 0x442617
push str.USB_Root_Hub
push str._s_attached
push dword [0x4a7b1c]
push ebx
push dword [0x511014]
call fcn.0040601d
add esp, 0x14
push ebx
push 0
push edi
call fcn.0043c88a
call fcn.00435f29
call fcn.0043b757
push 0
call fcn.004360b7
mov ecx, esi
call fcn.0040e328
push 0x320
call fcn.0043b3a7
mov eax, ebx
jmp 0x443099
push eax
push str.pParentTNI__DeviceType_i
push 4
call fcn.00451479
mov eax, dword [edi + 0x18]
add esp, 0xc
cmp eax, 6
je 0x4428da
cmp eax, 4
je 0x4428da
cmp eax, 5
je 0x4428da
cmp eax, 9
je 0x4426bc
cmp eax, 0xa
je 0x4426bc
cmp eax, 1
je 0x4426bc
cmp eax, 3
jne 0x442f9a
mov eax, dword [edi + 0x1140]
cmp dword [eax + 0x614], 1
je 0x442f9a
mov eax, dword [ebp + 0x78]
add eax, 0xe3c
push eax
push str.DA_11__new_child_device:__s
push 4
call fcn.00451479
xor ebx, ebx
add esp, 0xc
cmp dword [0x4a7b40], ebx
je 0x44285a
mov ecx, dword [0x512c60]
push ebx
push ebx
push dword [ebp + 0x74]
call fcn.0040838c
mov esi, eax
cmp esi, ebx
jne 0x44270b
mov ecx, dword [0x512c60]
call fcn.0040898b
mov esi, eax
mov dword [esi + 0xde0], edi
cmp dword [esi + 8], ebx
jne 0x442832
cmp dword [edi + 8], ebx
je 0x442832
mov eax, dword [ebp + 0x78]
push eax
push str.set_pTNI__pDeviceInfo0x_08x
push 4
mov dword [esi + 0x18], 1
mov dword [esi + 0x1154], eax
call fcn.00451479
add esp, 0xc
mov dword [esi + 0x11ac], ebx
mov dword [esi + 0x1188], 1
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [esi + 0x1184], eax
mov eax, dword [ebp + 0x78]
add eax, 0x1cbc
push eax
lea eax, [esi + 0xde4]
push eax
mov dword [esi + 0xcf8], 1
mov dword [esi + 0xde0], edi
call dword [sym.imp.KERNEL32.dll_lstrcpyW]
lea eax, [esi + 0x24]
push eax
push ebx
push esi
call fcn.0040af35
lea eax, [esi + 0x428]
push eax
push 1
push esi
call fcn.0040af35
push dword [esi + 0x828]
push esi
push dword [edi + 8]
call fcn.0043c702
add esp, 0xc
mov ecx, esi
mov dword [esi + 8], eax
call fcn.0040e328
mov eax, dword [ebp + 0x78]
cmp dword [eax + 0x3abc], ebx
je 0x4427d0
push str.PutStorageProps_ThreadProc_pDriveTNI_
push esi
push 0x437a39
call fcn.00429b2b
cmp dword [edi + 0x11a4], ebx
jne 0x44282b
cmp dword [edi + 0x18], 1
je 0x4427ee
cmp dword [0x4a7b3c], ebx
jne 0x4427ee
cmp dword [0x4a7b34], ebx
je 0x442805
mov ecx, edi
call fcn.00407e1a
cmp dword [0x4a7b34], ebx
jne 0x44282b
cmp dword [0x4a7b3c], ebx
jne 0x44282b
mov eax, dword [edi + 0x18]
cmp eax, 9
je 0x442812
cmp eax, 0xa
jne 0x44282b
push dword [edi + 8]
push dword [0x5106a4]
call fcn.0042c5d0
test eax, eax
je 0x44282b
mov ecx, edi
call fcn.00407e95
mov ecx, esi
call fcn.0040e328
mov eax, dword [esi + 0xde0]
cmp eax, ebx
je 0x44285a
mov eax, dword [eax + 0x1154]
cmp eax, ebx
je 0x44285a
cmp dword [eax + 8], ebx
je 0x44285a
mov dword [eax + 8], ebx
mov ecx, dword [esi + 0xde0]
push ebx
call fcn.0040bce8
mov esi, dword [ebp + 0x60]
cmp esi, ebx
jne 0x442878
mov ecx, dword [0x512c60]
push ebx
push 1
push dword [ebp + 0x74]
call fcn.0040838c
mov esi, eax
cmp esi, ebx
je 0x442895
mov eax, dword [esi + 0x1154]
add eax, 0xe3c
push eax
push str.pUsbTNI_s
push 4
call fcn.00451479
add esp, 0xc
jmp 0x4428a3
push str.pUsbTNI_is_NULL
push 4
call fcn.00451479
pop ecx
pop ecx
cmp esi, ebx
je 0x442f9c
lea eax, [esi + 0x24]
push eax
push ebx
push esi
call fcn.0040af35
lea eax, [esi + 0x428]
push eax
xor edi, edi
inc edi
push edi
push esi
call fcn.0040af35
push edi
mov ecx, esi
mov dword [esi + 0xcf8], edi
call fcn.0040bce8
jmp 0x442f9c
and dword [ebp + 0x7c], 0
cmp dword [0x510068], 6
jb 0x442928
mov edi, dword [ebp + 0x78]
push str.Port_0
add edi, 0x1bbc
push edi
call fcn.00429dfe
test eax, eax
je 0x442928
mov eax, dword [ebp + 0x78]
add eax, 0x1bc8
push eax
call dword [sym.imp.SHLWAPI.dll_StrToIntW]
push edi
push eax
push str._portnumber_i__loc_s_
push 3
mov dword [ebp + 0x7c], eax
call fcn.00451479
add esp, 0x10
cmp dword [ebp + 0x7c], 0
jne 0x442951
mov eax, dword [ebp + 0x78]
mov eax, dword [eax + 0x3a6c]
cmp eax, 1
jb 0x442951
cmp eax, 0x100
ja 0x442951
push eax
push eax
push str._portnumber_i__addr_u_
push 3
mov dword [ebp + 0x7c], eax
call fcn.00451479
add esp, 0x10
test ebx, ebx
je 0x442969
mov eax, dword [ebp + 0x7c]
cmp dword [ebx + 0xc], eax
je 0x442969
mov edi, dword [sym.imp.KERNEL32.dll_Sleep]
push 1
call edi
jmp 0x44296f
mov edi, dword [sym.imp.KERNEL32.dll_Sleep]
mov eax, dword [ebp + 0x5c]
mov ecx, dword [eax + 0x1154]
mov eax, dword [eax + 0x1144]
mov dword [ebp + 0x60], ecx
mov dword [ebp + 0x58], eax
test ecx, ecx
je 0x44247e
test eax, eax
je 0x44247e
cmp dword [eax + 8], 0
je 0x44247e
cmp dword [0x4a7b38], 0
je 0x4429bb
mov ecx, dword [ebp + 0x5c]
call fcn.00407e1a
push dword [0x5106a4]
call dword [sym.imp.USER32.dll_UpdateWindow]
cmp dword [0x51cdd4], 4
jl 0x4429dc
mov eax, dword [ebp + 0x60]
add eax, 0xc34
push eax
push str.open_hub__s_...
push 4
call fcn.00451479
add esp, 0xc
mov eax, dword [ebp + 0x60]
xor ecx, ecx
push ecx
push ecx
push 3
push ecx
push 3
add eax, 0xc34
push 0x80000000
push eax
mov dword [ebp + 0x50], eax
call dword [sym.imp.KERNEL32.dll_CreateFileW]
mov dword [ebp + 0x60], eax
cmp eax, 0xffffffff
jne 0x442a80
push dword [ebp + 0x50]
call fcn.0044e479
push eax
push str.err_S_opening_hub__s
push 1
call fcn.00451479
add esp, 0x10
call dword [sym.imp.KERNEL32.dll_GetLastError]
cmp eax, 2
je 0x442a49
push str.DeviceArrived
push 0x2249
push str..UsbTreeView.cpp
push str.INT3_in__S_line__u__function__S
push 1
call fcn.00451479
add esp, 0x14
push 0x64
call edi
cmp dword [ebp + 0x4c], 0
jne 0x442f91
test esi, esi
je 0x442f87
mov eax, dword [esi + 0x1154]
add esi, 0xd90
push esi
test eax, eax
je 0x442f67
add eax, 0x183c
push eax
push str._s_attached_to_port__s
jmp 0x442f71
mov eax, dword [ebp + 0x78]
add eax, 0x1cbc
cmp word [eax], 0
mov dword [ebp + 0x50], eax
je 0x442b2a
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov esi, dword [ebp + 0x58]
mov dword [ebp + 0x48], eax
jmp 0x442adf
push str._device_not_found_on_any_port
push 3
call fcn.00451479
pop ecx
pop ecx
call dword [sym.imp.KERNEL32.dll_GetTickCount]
sub eax, dword [ebp + 0x48]
cmp eax, 0x3e8
ja 0x442af9
push dword [ebp + 0x74]
call fcn.0044f5b3
test eax, eax
je 0x442b19
push str.__try_again_in_100_ms...
push 3
call fcn.00451479
pop ecx
pop ecx
push 0x64
call edi
push dword [ebp + 0x7c]
push dword [ebp + 0x50]
push dword [esi + 8]
push dword [ebp + 0x60]
call fcn.0040a265
mov dword [ebp + 0x7c], eax
test eax, eax
je 0x442aa3
jmp 0x442b2d
push str._____give_up_for_full_enumeration
push 3
call fcn.00451479
xor esi, esi
pop ecx
pop ecx
push dword [ebp + 0x60]
call dword [sym.imp.KERNEL32.dll_CloseHandle]
mov eax, esi
jmp 0x443099
push str.__because_no_more_present
push 3
call fcn.00451479
xor esi, esi
inc esi
jmp 0x442b07
mov esi, dword [ebp + 0x58]
mov eax, dword [ebp + 0x7c]
lea esi, [esi + eax*4 + 0x284]
mov eax, dword [esi]
test eax, eax
jne 0x442b7f
push dword [ebp + 0x7c]
push str._pHubInfo__pTNIs__i__is_NULL
push 3
call fcn.00451479
add esp, 0xc
push dword [ebp + 0x60]
call dword [sym.imp.KERNEL32.dll_CloseHandle]
push str.DeviceArrived
push 0x2268
push str..UsbTreeView.cpp
push str.INT3_in__S_line__u__function__S
push 1
call fcn.00451479
add esp, 0x14
push 0x64
call edi
jmp 0x44247e
push eax
call fcn.00407b01
test eax, eax
jne 0x442bb2
push dword [esi]
push dword [ebp + 0x7c]
push str._pHubInfo__pTNIs__i___0x_08Ix__is_invalid
push 3
call fcn.00451479
add esp, 0x10
push dword [ebp + 0x60]
call dword [sym.imp.KERNEL32.dll_CloseHandle]
push str.DeviceArrived
push 0x226f
jmp 0x442b62
mov eax, dword [esi]
cmp dword [eax + 4], 0x1000
jle 0x442bd2
push dword [ebp + 0x60]
call dword [sym.imp.KERNEL32.dll_CloseHandle]
push str.DeviceArrived
push 0x2275
jmp 0x442b62
push 0x47c9b4
push 0
push 0x7f8a
call fcn.00436641
mov esi, dword [esi]
mov edi, dword [ebp + 0x78]
mov dword [esi + 0x1188], 1
cmp dword [esi + 0x1154], edi
je 0x442c00
mov dword [esi + 0x1154], edi
cmp dword [0x51cdd4], 4
jl 0x442c22
push dword [esi + 0x1154]
push dword [esi + 8]
push esi
push str.pPortTNI0x_08Ix__pPortTNI__hTreeItem0x_08Ix_pPortTNI__pDeviceInfo0x_08Ix
push 4
call fcn.00451479
add esp, 0x14
xor eax, eax
mov word [esi + 0x24], ax
mov word [esi + 0x428], ax
mov word [esi + 0x86c], ax
mov word [esi + 0xa70], ax
mov word [esi + 0xe44], ax
add edi, 0x1cbc
push edi
lea eax, [esi + 0xde4]
push eax
call dword [sym.imp.KERNEL32.dll_lstrcpyW]
mov ecx, dword [0x512c60]
push esi
push dword [ebp + 0x58]
push dword [ebp + 0x60]
call fcn.0040ca5f
push dword [esi + 0xde0]
mov ecx, dword [0x512c60]
push esi
call fcn.00409473
mov eax, dword [esi + 0x18]
cmp eax, 9
je 0x442c89
cmp eax, 0xa
jne 0x442c99
cmp word [esi + 0xa70], 0
jne 0x442c99
push esi
call fcn.004336c0
lea eax, [esi + 0x24]
push eax
push 0
push esi
call fcn.0040af35
lea eax, [esi + 0x428]
push eax
xor edi, edi
inc edi
push edi
push esi
call fcn.0040af35
push edi
mov ecx, esi
mov dword [esi + 0xcf8], edi
call fcn.0040bce8
push 0
push 0
push esi
call fcn.0043c88a
mov ecx, esi
call fcn.0040e328
cmp dword [0x512c90], 0
je 0x442d27
cmp dword [0x4a7b34], 0
jne 0x442cf0
test ebx, ebx
je 0x442d27
cmp dword [ebx + 0x18], edi
jle 0x442d27
push dword [esi + 8]
push 9
push 0x110b
push dword [0x5106a4]
call dword [sym.imp.USER32.dll_SendMessageW]
test ebx, ebx
je 0x442d27
cmp dword [ebx + 0x11a4], 0
jne 0x442d27
mov ecx, dword [ebp + 0x5c]
call fcn.00407e1a
push dword [0x5106a4]
call dword [sym.imp.USER32.dll_UpdateWindow]
push 0xc8
call fcn.0043b3a7
mov eax, dword [esi + 0x1148]
test eax, eax
je 0x442a49
mov eax, dword [eax + 0x14]
test eax, eax
je 0x442a49
cmp byte [eax + 0x18], 0
je 0x442a49
cmp dword [esi + 0x18], 7
je 0x442d61
mov dword [esi + 0x18], 6
xor ebx, ebx
cmp dword [esi + 0x1144], ebx
jne 0x442d91
push 0x684
call fcn.0044b31e
pop ecx
cmp eax, ebx
je 0x442d83
mov ecx, eax
call fcn.00407a07
jmp 0x442d85
xor eax, eax
mov dword [esi + 0x1144], eax
inc dword [0x50fef8]
mov eax, dword [esi + 0x1144]
lea ecx, [eax + 0x21c]
push ecx
add eax, 0x14
push eax
push dword [ebp + 0x7c]
push dword [ebp + 0x60]
call fcn.00431dec
test eax, eax
jne 0x442dd8
mov edi, dword [ebp + 0x70]
push edi
push str.ERROR:_hub_does_not_provide_a_symname__using_devpath_instead___s_
push 1
call fcn.00451479
mov eax, dword [esi + 0x1144]
add esp, 0xc
add edi, 8
push edi
add eax, 0x14
push eax
call dword [sym.imp.KERNEL32.dll_lstrcpyW]
cmp dword [0x51cdd4], 4
jl 0x442dfa
mov eax, dword [esi + 0x1144]
add eax, 0x14
push eax
push str.device_is_a_hub__symname_s
push 4
call fcn.00451479
add esp, 0xc
cmp dword [esi + 0x1154], ebx
je 0x442f57
push 0x47c8fc
push ebx
push 0x7f8a
call fcn.00436641
mov eax, dword [esi + 0x1154]
add eax, 0xc34
cmp word [eax], bx
jne 0x442e44
mov ecx, dword [esi + 0x1144]
add ecx, 0x14
cmp word [ecx], bx
je 0x442e44
push ecx
push str.._s
push eax
call dword [sym.imp.USER32.dll_wsprintfW]
add esp, 0xc
mov eax, dword [esi + 0x1154]
cmp word [eax + 0xc34], bx
je 0x442ea6
call fcn.00435f29
call fcn.0043b757
push ebx
call fcn.004360b7
mov ecx, dword [0x512c60]
push esi
call fcn.00408aea
mov eax, dword [esi + 0x1144]
cmp dword [eax + 8], ebx
je 0x442e83
push esi
push dword [esi + 8]
call fcn.0043eaa9
lea eax, [esi + 0x24]
push eax
push ebx
push esi
call fcn.0040af35
lea eax, [esi + 0x428]
push eax
push 1
push esi
call fcn.0040af35
push 1
mov ecx, esi
call fcn.0040bce8
cmp dword [ebp + 0x4c], ebx
jne 0x442f91
mov eax, dword [esi + 0x1154]
test eax, eax
je 0x442ecd
lea ecx, [esi + 0xd90]
push ecx
add eax, 0x183c
push eax
push str._s_attached_to_port__s
jmp 0x442ede
lea eax, [esi + 0xd90]
push eax
push str.USB_Hub
push str._S_attached_to_port__s
push dword [0x4a7b1c]
push 1
push dword [0x511014]
call fcn.0040601d
mov ecx, dword [0x512c60]
add esp, 0x18
call fcn.00409f22
mov eax, dword [esi + 0x1148]
test eax, eax
je 0x442f4a
mov eax, dword [eax + 0x48]
test eax, eax
je 0x442f4a
xor ebx, ebx
test eax, eax
jle 0x442f4a
push 0x38
pop edi
mov eax, dword [esi + 0x1148]
mov eax, dword [edi + eax]
test eax, eax
je 0x442f3b
cmp dword [eax + 0x1144], 0
je 0x442f3b
mov ecx, dword [0x512c60]
push eax
call fcn.00408aea
mov eax, dword [esi + 0x1148]
inc ebx
add edi, 4
cmp ebx, dword [eax + 0x48]
jl 0x442f19
mov ecx, dword [0x512c60]
call fcn.00409f22
jmp 0x442f91
push str.no_devicepath_
push 1
call fcn.00451479
pop ecx
pop ecx
jmp 0x442f91
push str.USB_device
push str._S_attached_to_port__s
push dword [0x4a7b1c]
push 1
push dword [0x511014]
call fcn.0040601d
add esp, 0x18
push 0x47c8cc
call fcn.0043ec88
push dword [ebp + 0x60]
call dword [sym.imp.KERNEL32.dll_CloseHandle]
xor ebx, ebx
mov ecx, dword [0x512c60]
call fcn.0040a119
call fcn.00435f29
call fcn.0043b757
push ebx
call fcn.004360b7
push 0xc8
call fcn.0043b3a7
push 1
push ebx
push ebx
push dword [0x5106a4]
call dword [sym.imp.USER32.dll_RedrawWindow]
push ebx
push dword [ebp + 0x74]
lea eax, [ebp + 0x24]
push eax
call dword [sym.imp.CFGMGR32.dll_CM_Get_Child]
test eax, eax
jne 0x44300a
push dword [ebp + 0x74]
push str.PostMessage_WM_APP_SCAN_ARRIVED_CHILDS___u__A
push 4
call fcn.00451479
add esp, 0xc
push ebx
push dword [ebp + 0x74]
push 0x8007
push dword [0x51069c]
call dword [sym.imp.USER32.dll_PostMessageW]
push str.SetTimer_500__Search_TimerProc_
push 4
call fcn.00451479
mov esi, dword [sym.imp.USER32.dll_SetTimer]
pop ecx
pop ecx
push 0x43af26
push 0x1f4
push 0x19091969
push dword [0x51069c]
call esi
push str.SetTimer_1000__ScanForUnnotifiedDevs_TimerProc_
push 4
call fcn.00451479
pop ecx
pop ecx
push 0x4353b9
push 0x3e8
push 0x12340008
push dword [0x51069c]
call esi
push 0x4354da
push 0x7d0
push 0x12340007
push dword [0x51069c]
call esi
call fcn.0043d8ec
xor eax, eax
cmp dword [ebp + 0x78], ebx
setne al
jmp 0x443099
push eax
call fcn.0044c9e1
push eax
push str.DA_2x_cret_S
push 3
call fcn.00451479
add esp, 0xc
xor eax, eax
inc eax
pop edi
pop esi
pop ebx
add ebp, 0x68
leave
ret 0x10