Function at 0x440bf8
Capabilities:
Check for time delay via gettickcount

Disassembly:
sub esp, 0x60
push ebx
mov ebx, dword [esp + 0x68]
push ebp
push esi
push edi
push dword [esp + 0x7c]
mov edi, dword [esp + 0x7c]
push edi
push ebx
push str.DeviceRemoved__s___u___i_...
xor ebp, ebp
push ebp
call fcn.0044def7
add esp, 0x14
cmp word [ebx], bp
jne 0x440c2f
cmp dword [esp + 0x7c], ebp
jne 0x440c2f
push ebp
call dword [sym.imp.KERNEL32.dll_Sleep]
cmp dword [0x50d7e8], ebp
je 0x4419b6
cmp dword [0x50bb7c], ebp
jne 0x4419b6
cmp edi, ebp
jne 0x440c6f
push ebp
push ebx
call fcn.0044dba2
mov edi, eax
push edi
push str.DevInst_u
push 4
mov dword [esp + 0x84], edi
call fcn.0044def7
add esp, 0xc
cmp edi, ebp
je 0x440c9f
cmp edi, dword [0x516ea4]
jne 0x440c9f
call dword [sym.imp.KERNEL32.dll_GetTickCount]
sub eax, dword [0x516ea0]
cmp eax, 0xc8
jae 0x440c9f
push edi
push str._same_devinst_u_again____ignore
push 1
call fcn.0044def7
add esp, 0xc
jmp 0x4419b6
mov dword [0x516ea4], edi
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [0x516ea0], eax
cmp edi, dword [0x517518]
jne 0x440cbe
mov dword [0x517518], ebp
cmp edi, ebp
je 0x440cd1
mov ecx, dword [0x50d7e8]
push ebp
push edi
call fcn.004082ee
jmp 0x440ce6
cmp word [ebx], bp
je 0x440eb9
mov ecx, dword [0x50d7e8]
push ebx
call fcn.00407fb9
mov esi, eax
cmp esi, ebp
je 0x440eb9
mov eax, dword [esi + 0xfd0]
cmp eax, ebp
je 0x440da9
cmp dword [eax + 8], ebp
jne 0x440d28
cmp dword [esi + 0xfec], 2
jne 0x440d28
call dword [sym.imp.KERNEL32.dll_GetTickCount]
sub eax, dword [esi + 0xfe8]
push eax
push str._device_already_marked_as_non_present__age_u
push 1
call fcn.0044def7
add esp, 0xc
mov eax, dword [esi + 0xfd0]
cmp dword [eax + 8], ebp
jne 0x440d62
cmp dword [esi + 0xfec], 2
jne 0x440d62
call dword [sym.imp.KERNEL32.dll_GetTickCount]
sub eax, dword [esi + 0xfe8]
cmp eax, 0x2710
jae 0x440d62
push str._removal_event_already_processed____ignore
push 1
call fcn.0044def7
pop ecx
pop ecx
jmp 0x4419b6
mov edi, dword [esi + 0xfd0]
cmp dword [edi + 0x82c], ebp
mov dword [esp + 0x10], ebp
jle 0x440da9
lea ebx, [edi + 0x2c]
mov eax, dword [ebx]
cmp eax, ebp
je 0x440d96
cmp dword [eax], ebp
je 0x440d96
cmp dword [eax + 8], ebp
je 0x440d96
push 1
push dword [eax + 0x10]
add eax, 0xc30
push eax
call fcn.00440bf8
inc dword [esp + 0x10]
mov eax, dword [esp + 0x10]
add ebx, 4
cmp eax, dword [edi + 0x82c]
jl 0x440d77
mov dword [esi + 0xcf4], 1
cmp dword [0x50d81c], ebp
je 0x440e19
cmp dword [esi + 8], ebp
je 0x440e19
cmp dword [esi + 0x1008], ebp
jne 0x440e19
cmp dword [0x4a2b14], ebp
jne 0x440dd6
cmp dword [esi + 0x14], 1
je 0x440e19
push dword [esp + 0x78]
call fcn.0044c6d0
test eax, eax
je 0x440e19
push dword [esp + 0x78]
call fcn.0044b8fc
test eax, eax
jne 0x440e19
push dword [esi + 8]
push 9
push 0x110b
push dword [0x50b230]
call dword [sym.imp.USER32.dll_SendMessageW]
test eax, eax
je 0x440e19
mov ecx, dword [esi + 0xd60]
cmp ecx, ebp
je 0x440e19
call fcn.00407c0b
cmp dword [esi + 0xfd0], ebp
jne 0x440e4d
mov eax, dword [esp + 0x78]
cmp eax, ebp
jne 0x440e3b
push ebp
push dword [esp + 0x78]
call fcn.0044c870
mov dword [esp + 0x78], eax
cmp eax, ebp
je 0x440e4d
mov ecx, dword [0x50d7ec]
push eax
call fcn.00401afc
mov dword [esi + 0xfd0], eax
push dword [esi + 0xfd0]
mov ecx, dword [0x50d7ec]
call fcn.0040121c
test eax, eax
jne 0x440ee7
push str._treenode_found_but_has_no_deviceinfo
push 3
call fcn.0044def7
mov edi, dword [esp + 0x7c]
mov esi, dword [sym.imp.SHLWAPI.dll_StrStrIW]
pop ecx
pop ecx
push str.a5dcbf10_6530_11d2_901f_00c04fb951ed
push edi
call esi
test eax, eax
jne 0x440eb2
push str.f18a0e88_c30c_11d0_8815_00a0c906bed8
push edi
call esi
test eax, eax
jne 0x440eb2
push str.3abf6f2d_71c4_462a_8a92_1e6861e6af27
push edi
call esi
test eax, eax
jne 0x440eb2
push str.ROOT_HUB
push edi
call esi
test eax, eax
je 0x4419b6
xor eax, eax
jmp 0x4419b9
cmp dword [0x4a2b20], ebp
je 0x440ecd
push str._no_treenode_found____ignore
push 3
jmp 0x440d56
push str._no_treenode_found____try_child_devices
push 3
call fcn.0044def7
pop ecx
pop ecx
push edi
push ebx
call fcn.0043e281
jmp 0x4419b9
mov edi, dword [esi + 0xfd0]
push ebp
push dword [edi + 0x10]
lea ebx, [edi + 0x39f4]
lea eax, [edi + 0x39f0]
push ebx
push eax
call dword [sym.imp.CFGMGR32.dll_CM_Get_DevNode_Status]
cmp dword [0x517934], 3
mov dword [esp + 0x10], eax
jl 0x440f4e
cmp eax, ebp
jne 0x440f32
push dword [edi + 0x39f0]
push dword [ebx]
push dword [edi + 0x10]
push str.CM_Get_DevNode_Status__u___problem_u_status0x_08x
push 3
call fcn.0044def7
add esp, 0x14
jmp 0x440f4e
push dword [esp + 0x10]
call fcn.00449a0d
push eax
push dword [edi + 0x10]
push str.CM_Get_DevNode_Status__u___cret_S
push 3
call fcn.0044def7
add esp, 0x10
cmp dword [edi + 0x10], ebp
je 0x440f75
cmp dword [esp + 0x78], ebp
jne 0x440f75
push str.looks_like_a_just_uninstalled_device____fake_CR_NO_SUCH_DEVINST__CM_PROB_PHANTOM
push 3
call fcn.0044def7
pop ecx
pop ecx
mov dword [esp + 0x10], 0xd
mov dword [ebx], 0x2d
or dword [edi + 0x3a30], 0xffffffff
mov dword [esp + 0x18], ebp
cmp dword [esp + 0x10], ebp
jne 0x440fd2
cmp dword [ebx], ebp
jne 0x440fa0
push str._device_is_present_again
push 3
call fcn.0044def7
pop ecx
pop ecx
mov dword [esp + 0x18], 1
push dword [ebx]
call fcn.0044cd80
test eax, eax
je 0x440fc3
push ebp
push 0x43a3de
push dword [esi + 8]
mov dword [esi + 0x1010], 1
call fcn.004342b0
cmp dword [ebx], ebp
jne 0x440fe8
mov dword [ebx], 0x2d
mov dword [edi + 8], ebp
jmp 0x440fe8
mov dword [ebx], 0x2d
mov dword [edi + 8], ebp
cmp dword [esi + 0x14], 6
jl 0x440fe8
mov ecx, esi
call fcn.00407ace
cmp dword [edi + 0x3a38], ebp
je 0x441010
lea eax, [edi + 0x3b04]
mov ecx, dword [eax]
cmp ecx, ebp
je 0x441010
xor edx, edx
mov word [ecx + 0x930], dx
mov eax, dword [eax]
xor ecx, ecx
mov word [eax + 0x848], cx
cmp dword [esi + 4], ebp
jl 0x44109c
xor eax, eax
inc eax
push eax
mov ecx, esi
mov dword [esi + 0xcf4], eax
call fcn.0040b812
cmp dword [0x50b2e0], ebp
je 0x441045
mov eax, dword [esi + 8]
cmp eax, dword [0x50bb90]
jne 0x44109c
cmp dword [0x50b2e8], ebp
jne 0x44109c
push 0xa
call dword [sym.imp.KERNEL32.dll_Sleep]
push ebp
push dword [edi + 0x10]
lea eax, [edi + 0x39f0]
push ebx
push eax
call dword [sym.imp.CFGMGR32.dll_CM_Get_DevNode_Status]
cmp eax, 0xd
jne 0x44109c
cmp dword [esi + 0x14], 6
jl 0x441071
mov dword [esi + 0x14], 8
xor eax, eax
push 1
mov ecx, esi
mov word [esi + 0x20], ax
mov word [esi + 0x424], ax
mov word [esi + 0x868], ax
mov word [esi + 0xa6c], ax
mov word [esi + 0xdc4], ax
call fcn.0040b812
cmp dword [edi + 0x3a38], ebp
je 0x4410bd
cmp dword [edi + 0x3b04], ebp
je 0x4410bd
mov eax, dword [0x50d7ec]
push dword [esp + 0x74]
mov ecx, dword [eax + 8]
call fcn.0040646c
mov ecx, dword [edi + 0x28]
cmp ecx, ebp
je 0x4410cc
push edi
call fcn.004010e0
jmp 0x4410d3
push ebp
call dword [sym.imp.KERNEL32.dll_Sleep]
mov eax, dword [edi + 0x82c]
cmp eax, ebp
je 0x44118d
mov ecx, 0x200
cmp eax, ecx
jb 0x4410ec
mov eax, ecx
dec eax
cmp eax, ebp
mov dword [esp + 0x74], eax
jl 0x44118d
lea eax, [edi + eax*4 + 0x2c]
mov dword [esp + 0x14], eax
cmp dword [0x517934], 4
mov eax, dword [esp + 0x14]
mov ebx, dword [eax]
jl 0x441137
lea eax, [ebx + 0xc30]
push eax
push dword [ebx + 8]
lea eax, [ebx + 0xe38]
push eax
push dword [esp + 0x80]
push str.Child__i___s_present_i_devpath_s
push 4
call fcn.0044def7
add esp, 0x18
cmp dword [ebx + 8], ebp
je 0x44117a
lea eax, [ebx + 0xc30]
mov dword [esp + 0x1c], eax
cmp word [eax], bp
jne 0x44117a
push dword [ebx + 0x10]
call fcn.0044c569
test eax, eax
jne 0x44117a
lea eax, [ebx + 0xe38]
push eax
push str.fake_removal_event_for_child_device_without_interface:__s
push 4
call fcn.0044def7
add esp, 0xc
push ebp
push dword [ebx + 0x10]
push dword [esp + 0x24]
call fcn.00440bf8
dec dword [esp + 0x74]
sub dword [esp + 0x14], 4
cmp dword [esp + 0x74], ebp
jge 0x441101
cmp dword [esp + 0x7c], ebp
jne 0x441296
mov eax, dword [esi + 0xd60]
cmp eax, ebp
je 0x441206
mov eax, dword [eax + 0xfd0]
cmp eax, ebp
je 0x441206
mov ecx, dword [0x50d7ec]
push eax
call fcn.0040121c
test eax, eax
jne 0x4411de
lea eax, [esi + 0x424]
push eax
mov eax, dword [esi + 0xd60]
push dword [eax + 0xfd0]
push str.pTNI__pParentTNI__pDeviceInfo0x_08Ix_is_invalid__pTNI_s
push ebp
call fcn.0044def7
add esp, 0x10
jmp 0x441206
mov eax, dword [esi + 0xd60]
add eax, 0xfd0
mov ecx, dword [eax]
cmp word [ecx + 0xc30], bp
jne 0x441206
mov eax, ecx
push 1
push dword [eax + 0x10]
add eax, 0xc30
push eax
call fcn.00440bf8
cmp dword [edi + 0x82c], ebp
mov dword [esp + 0x14], ebp
jle 0x441296
lea eax, [edi + 0x2c]
mov dword [esp + 0x74], eax
mov eax, dword [esp + 0x74]
mov ebx, dword [eax]
mov ecx, dword [0x50d7ec]
push ebx
call fcn.0040121c
test eax, eax
je 0x441281
lea eax, [ebx + 0xc30]
mov dword [esp + 0x1c], eax
cmp word [eax], bp
jne 0x441281
cmp dword [ebx + 8], ebp
je 0x441281
cmp dword [ebx + 0x39f4], ebp
jne 0x441281
push dword [ebx + 0x10]
call fcn.0044c61e
test eax, eax
jne 0x441281
lea eax, [ebx + 0xe38]
push eax
push dword [ebx + 0x10]
push str.calling_DeviceRemoved_for__u___s__because_child_device_without_an_interface
push 4
call fcn.0044def7
add esp, 0x10
push ebp
push dword [ebx + 0x10]
push dword [esp + 0x24]
call fcn.00440bf8
inc dword [esp + 0x14]
mov eax, dword [esp + 0x14]
add dword [esp + 0x74], 4
cmp eax, dword [edi + 0x82c]
jl 0x44121d
cmp dword [esi + 4], ebp
jl 0x441376
mov eax, dword [0x50b2e4]
mov ecx, dword [0x50b2e0]
add eax, ecx
je 0x441357
mov dword [esi + 0xfec], 2
call dword [sym.imp.KERNEL32.dll_GetTickCount]
push eax
push str.set_JustArrivedRemovedJUST_REMOVED_ArrivalRemovalT_u
push 4
mov dword [esi + 0xfe8], eax
call fcn.0044def7
add esp, 0xc
mov ecx, esi
call fcn.0040b7ab
cmp dword [0x517934], 4
mov ebx, fcn.0043b759
jl 0x441313
push dword [esi + 0x824]
push dword [esi + 8]
push ebx
push dword [0x50b2e0]
push esi
push dword [0x50b228]
push str.SetTimer_0x_08Ix__0x_08Ix___u__0x_08Ix_EndOfTreeNodeHighlight_TimerProc___hTreeItem0x_08Ix___s
push 4
call fcn.0044def7
add esp, 0x20
push ebx
push dword [0x50b2e0]
push esi
push dword [0x50b228]
call dword [sym.imp.USER32.dll_SetTimer]
cmp dword [0x50b2ec], ebp
je 0x44136f
push dword [esi + 8]
call fcn.00435575
test eax, eax
je 0x44136f
cmp dword [esi + 0x14], 1
jne 0x44134c
mov ecx, esi
call fcn.00407e0e
test eax, eax
je 0x44136f
push 1
mov ecx, esi
call fcn.0040786e
jmp 0x44136f
call dword [sym.imp.KERNEL32.dll_GetTickCount]
push eax
push esi
push 0x113
push dword [0x50b228]
call fcn.0043b759
mov ecx, esi
call fcn.0040d829
cmp dword [esp + 0x18], ebp
je 0x4413a4
cmp dword [esi + 0x14], 9
jne 0x4419b6
push 0x440b9e
push 0x3e8
push dword [edi + 0x10]
push dword [0x50b228]
call dword [sym.imp.USER32.dll_SetTimer]
jmp 0x4419b6
cmp dword [edi + 0x3a3c], ebp
je 0x4413c3
xor eax, eax
or dword [edi + 0x3a30], 0xffffffff
mov word [edi + 0x3a44], ax
mov word [edi + 0x3a84], ax
mov dword [edi + 0x3b08], ebp
mov ecx, dword [0x50d7ec]
push edi
call fcn.00404a15
push 0x479250
push ebp
push 0x7f8a
call fcn.004346f7
xor ecx, ecx
cmp dword [edi + 0x82c], ebp
jle 0x441415
lea eax, [edi + 0x2c]
cmp dword [eax], ebp
je 0x441409
mov edx, dword [eax]
mov dword [edx + 8], ebp
mov edx, dword [eax]
mov ebx, dword [edi + 0x39f4]
mov dword [edx + 0x39f4], ebx
inc ecx
add eax, 4
cmp ecx, dword [edi + 0x82c]
jl 0x4413f2
mov dword [edi + 0x18], ebp
mov dword [edi + 0x1c], ebp
cmp dword [esi + 0xfc4], ebp
je 0x441477
mov eax, dword [esi + 0xfc8]
cmp eax, ebp
je 0x441477
mov eax, dword [eax + 0x40]
cmp eax, ebp
je 0x441477
mov dword [esp + 0x74], ebp
jle 0x44146c
push 0x30
pop ebx
mov eax, dword [esi + 0xfc8]
mov eax, dword [ebx + eax]
cmp eax, ebp
je 0x441456
mov ecx, dword [0x50d7e8]
push eax
call fcn.004088a8
inc dword [esp + 0x74]
mov eax, dword [esi + 0xfc8]
mov ecx, dword [esp + 0x74]
add ebx, 4
cmp ecx, dword [eax + 0x40]
jl 0x44143d
mov ecx, dword [0x50d7e8]
call fcn.00409c40
mov eax, dword [esi + 0xfcc]
cmp eax, ebp
je 0x4414f5
mov eax, dword [eax + 0x10c]
cmp eax, ebp
je 0x4414a8
mov ebx, dword [eax]
push eax
mov dword [eax], ebp
call fcn.00448411
pop ecx
mov eax, ebx
cmp ebx, ebp
jne 0x44148b
mov eax, dword [esi + 0xfcc]
mov dword [eax + 0x10c], ebp
cmp dword [edi + 8], ebp
jne 0x4414f5
lea ebx, [esi + 0x1014]
mov eax, dword [ebx]
mov dword [esp + 0x74], ebp
cmp eax, ebp
je 0x4414d7
push 0xea60
push eax
call dword [sym.imp.KERNEL32.dll_WaitForSingleObject]
push dword [ebx]
mov dword [esp + 0x78], eax
call dword [sym.imp.KERNEL32.dll_CloseHandle]
mov dword [ebx], ebp
cmp dword [esp + 0x10], ebp
je 0x4414f5
cmp dword [esp + 0x74], ebp
jne 0x4414ef
push ebp
push dword [esi + 0xfcc]
call fcn.0044b4e7
mov dword [esi + 0xfcc], ebp
cmp dword [esi + 0xfc4], ebp
je 0x4415e8
cmp dword [esp + 0x10], ebp
jne 0x441515
push 1
mov ecx, esi
call fcn.0040b812
jmp 0x4415d9
mov eax, dword [esi + 0xd60]
cmp eax, ebp
je 0x441572
add eax, 0xd0e
cmp word [eax], bp
je 0x44154e
push eax
lea eax, [edi + 0x1838]
push eax
push str._s_removed_from_port__s
push dword [0x4a2afc]
push 1
push dword [0x50bb9c]
call fcn.00405e29
add esp, 0x18
jmp 0x44158d
lea eax, [edi + 0x1838]
push eax
push str._s_removed
push dword [0x4a2afc]
push 1
push dword [0x50bb9c]
call fcn.00405e29
add esp, 0x14
jmp 0x44158d
push str.Device_removed
push dword [0x4a2afc]
push 1
push dword [0x50bb9c]
call fcn.00405e29
add esp, 0x10
xor eax, eax
mov dword [esi + 0xfd0], ebp
mov word [esi + 0xd64], ax
push dword [edi + 4]
mov ecx, dword [0x50d7ec]
call fcn.004043d8
mov esi, dword [esi + 0xfc8]
cmp esi, ebp
je 0x4415be
mov esi, dword [esi + 0x10]
cmp esi, ebp
je 0x4415be
mov dword [esi + 0x1f], ebp
call fcn.00433f5d
call fcn.00439125
mov ecx, dword [0x50d7e8]
call fcn.00409e37
push ebp
call fcn.004340eb
push 0xc8
call fcn.00438d75
jmp 0x4419b6
mov eax, dword [esi + 0xd60]
cmp eax, ebp
je 0x441832
cmp dword [eax + 0x18], ebp
je 0x441832
push 0x4335b5
push 0xa
push 0x12340003
push dword [0x50b228]
call dword [sym.imp.USER32.dll_SetTimer]
xor ebx, ebx
inc ebx
cmp edi, dword [esi + 0xfd0]
je 0x441647
push str.DeviceRemoved
push 0x24d8
push str..UsbTreeView.cpp
push str.INT3_in__S_line__u__function__S
push ebx
call fcn.0044def7
add esp, 0x14
push 0x64
call dword [sym.imp.KERNEL32.dll_Sleep]
mov ecx, esi
cmp dword [esp + 0x10], ebp
jne 0x4416c5
push ebx
call fcn.0040b812
lea ebx, [edi + 0x39f4]
push dword [ebx]
call fcn.0044cd80
test eax, eax
lea eax, [esi + 0xd0e]
push eax
lea eax, [edi + 0x1838]
je 0x44167b
push eax
push str._s_prepared_for_safe_removal_from_port__s
jmp 0x441688
mov ebx, dword [ebx]
cmp ebx, 0x16
jne 0x4416a3
push eax
push str._s_disabled_at_port__s
push dword [0x4a2afc]
push 1
push dword [0x50bb9c]
call fcn.00405e29
add esp, 0x18
jmp 0x441781
push ebx
push eax
push str._s_got_problem__u_at_port__s
push dword [0x4a2afc]
push 1
push dword [0x50bb9c]
call fcn.00405e29
add esp, 0x1c
jmp 0x441781
mov dword [esi + 0x14], 8
call fcn.00407ace
xor eax, eax
push ebx
mov ecx, esi
mov word [esi + 0x20], ax
mov word [esi + 0x424], ax
mov word [esi + 0xa6c], ax
call fcn.0040b812
cmp dword [0x50b2e0], ebp
je 0x4416fd
mov dword [esi + 0xff4], ebx
jmp 0x44170f
cmp dword [0x50b2e4], ebp
je 0x44170f
mov dword [esi + 0xff4], 2
lea eax, [esi + 0xd0e]
push eax
lea eax, [edi + 0x1838]
push eax
push str._s_removed_from_port__s
push dword [0x4a2afc]
push ebx
push dword [0x50bb9c]
call fcn.00405e29
mov eax, dword [esi + 0xfc8]
add esp, 0x18
cmp eax, ebp
je 0x44174b
mov eax, dword [eax + 0x10]
cmp eax, ebp
je 0x44174b
mov dword [eax + 0x1f], ebp
mov dword [esi + 0xfd0], ebp
push dword [edi + 4]
mov ecx, dword [0x50d7ec]
call fcn.004043d8
push dword [esi + 8]
push dword [0x50b230]
call fcn.00428b4b
mov eax, dword [esi + 8]
cmp eax, ebp
je 0x441781
cmp eax, dword [0x50bb90]
jne 0x441781
call fcn.00416e8e
cmp dword [esp + 0x7c], ebp
jne 0x441920
mov eax, dword [esi + 0xd60]
cmp eax, ebp
je 0x441920
mov eax, dword [eax + 0xfd0]
cmp eax, ebp
je 0x441920
cmp dword [eax], 1
jne 0x441920
add eax, 0xc30
push eax
call fcn.0042d38b
test eax, eax
je 0x441920
mov eax, dword [esi + 0xd60]
mov eax, dword [eax + 0xfd0]
push ebp
push ebp
push 3
push ebp
push 3
push 0x80000000
add eax, 0xc30
push eax
call dword [sym.imp.KERNEL32.dll_CreateFileW]
mov ebx, eax
cmp ebx, 0xffffffff
je 0x441920
mov eax, dword [esi + 0xd60]
mov ecx, dword [0x50d7e8]
push esi
push dword [eax + 0xfc4]
push ebx
call fcn.0040c2e5
push dword [esi + 0xd60]
mov ecx, dword [0x50d7e8]
push esi
call fcn.00409233
push ebx
call dword [sym.imp.KERNEL32.dll_CloseHandle]
push 1
push ebp
push esi
call fcn.0043a270
jmp 0x441920
cmp dword [esi + 0x14], 1
jne 0x441888
cmp dword [esi], 1
jne 0x441920
xor ebx, ebx
inc ebx
push ebx
mov ecx, esi
mov dword [esi + 0xcf4], ebx
call fcn.0040b812
mov ecx, dword [0x50d7e8]
push ebx
push dword [esp + 0x7c]
call fcn.004082ee
cmp eax, ebp
je 0x441920
cmp dword [eax], ebx
jne 0x441920
xor ecx, ecx
inc ecx
mov dword [eax + 0xcf4], ecx
push ecx
mov ecx, eax
call fcn.0040b812
jmp 0x441920
mov eax, str.removed
cmp dword [esp + 0x10], ebp
jne 0x4418d0
lea ebx, [edi + 0x39f4]
push dword [ebx]
call fcn.00449354
push eax
lea eax, [esp + 0x24]
push str.got_problem__s
push eax
call dword [sym.imp.USER32.dll_wsprintfA]
mov ebx, dword [ebx]
add esp, 0xc
sub ebx, 0x15
lea eax, [esp + 0x20]
je 0x4418cb
dec ebx
je 0x441963
sub ebx, 0x19
jne 0x4418d0
mov eax, str.prepared_for_safe_removal
push eax
lea eax, [edi + 0x1938]
push eax
push str._s__S
push dword [0x4a2afc]
push 1
push dword [0x50bb9c]
call fcn.00405e29
add esp, 0x18
cmp dword [edi + 8], ebp
jne 0x441920
push dword [edi + 4]
mov ecx, dword [0x50d7ec]
call fcn.004043d8
cmp dword [edi + 0xc], 6
jge 0x441920
push dword [esi + 8]
push dword [0x50b230]
call fcn.00435671
mov dword [esi + 0xfd0], ebp
mov ebx, dword [sym.imp.USER32.dll_SetTimer]
push 0x43399c
push 0x64
push dword [edi + 0x10]
push dword [0x50b228]
call ebx
call fcn.00433f5d
call fcn.00439125
mov ecx, dword [0x50d7e8]
call fcn.00409e37
push ebp
call fcn.004340eb
mov eax, dword [esi + 0x14]
cmp eax, 1
jne 0x44196d
push esi
call fcn.00433d7c
jmp 0x441990
mov eax, str.disabled
jmp 0x4418d0
cmp eax, 9
jne 0x441990
cmp dword [edi + 8], ebp
jne 0x441990
call dword [sym.imp.KERNEL32.dll_GetTickCount]
sub eax, dword [esi + 0xfe0]
cmp eax, 0x1388
jbe 0x441990
push esi
call fcn.00433cfc
push 0x4388f5
push 0x1f4
push 0x19091969
push dword [0x50b228]
call ebx
push 0xc8
call fcn.00438d75
call fcn.0043b5f2
xor eax, eax
inc eax
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x60
ret 0xc