Function at 0x10001fd0
Capabilities:
Check if file exists

Disassembly:
sub esp, 0x118
mov eax, dword [0x1017455c]
xor eax, esp
mov dword [esp + 0x114], eax
push ebx
push ebp
mov ebp, dword [esp + 0x124]
push esi
xor esi, esi
cmp dword [0x1018c804], 0xffffffff
push edi
mov dword [esp + 0x18], esi
mov dword [esp + 0x10], esi
mov dword [esp + 0x14], esi
jne 0x10002037
push 0x104
lea eax, [esp + 0x24]
push eax
push 0x1013f817
mov edx, str.SNRM
mov ecx, str.eScan
call fcn.100436c0
xor ecx, ecx
add esp, 0xc
cmp byte [esp + 0x20], 0x31
sete cl
mov dword [0x1018c804], ecx
lea edx, [esp + 0x10]
push edx
push str.Start
mov ecx, str.SYSTEMCurrentControlSetServicesUsbStor
mov edx, reloc.OLEAUT32.dll_SysReAllocString
call fcn.10031670
cmp al, 1
jne 0x1000220d
lea eax, [esp + 0x1c]
push eax
push str.EPSUseDriver
mov ecx, str.SoftwareMicroWorldDeviceControl
mov edx, reloc.OLEAUT32.dll_SysReAllocString
mov dword [esp + 0x24], 1
call fcn.10031670
cmp dword [esp + 0x1c], esi
jne 0x10002162
cmp ebp, 1
jne 0x100020e6
lea ecx, [esp + 0x14]
push ecx
push str.StartBak
mov ecx, str.SYSTEMCurrentControlSetServicesUsbStor
mov edx, reloc.OLEAUT32.dll_SysReAllocString
call fcn.10031670
cmp al, 1
jne 0x1000220d
mov edx, dword [esp + 0x14]
push edx
push str.Start
mov edi, str.SYSTEMCurrentControlSetServicesUsbStor
mov ebx, reloc.OLEAUT32.dll_SysReAllocString
call fcn.10048180
mov eax, dword [esp + 0x1c]
push eax
push str.ESStart
call fcn.10048180
add esp, 0x10
call fcn.10035e40
xor edx, edx
mov ecx, 0x3e8
div ecx
add edx, ecx
jmp 0x1000214c
lea edx, [esp + 0x14]
push edx
push str.StartBak
mov ecx, str.SYSTEMCurrentControlSetServicesUsbStor
mov edx, reloc.OLEAUT32.dll_SysReAllocString
call fcn.10031670
cmp al, 1
je 0x1000220d
push 3
push str.Start
mov edi, str.SYSTEMCurrentControlSetServicesUsbStor
mov ebx, reloc.OLEAUT32.dll_SysReAllocString
call fcn.10048180
push 3
push str.StartBak
call fcn.10048180
push 3
push str.ESStart
call fcn.10048180
add esp, 0x18
call fcn.10035e40
xor edx, edx
mov ecx, 0x3e8
div ecx
add edx, 0x7d0
mov eax, edx
mov edi, str.USBStorChanged
mov ebx, str.SoftwareMicroWorldDeviceControl
call fcn.10031430
jmp 0x1000220d
lea edx, [esp + 0x14]
push edx
push str.StartBak
mov ecx, str.SYSTEMCurrentControlSetServicesUsbStor
mov edx, reloc.OLEAUT32.dll_SysReAllocString
call fcn.10031670
cmp al, 1
jne 0x1000219b
mov eax, dword [esp + 0x14]
push eax
push str.Start
mov edi, str.SYSTEMCurrentControlSetServicesUsbStor
mov ebx, reloc.OLEAUT32.dll_SysReAllocString
call fcn.10048180
add esp, 8
push str.StartBak
mov ecx, str.SYSTEMCurrentControlSetServicesUsbStor
mov edx, reloc.OLEAUT32.dll_SysReAllocString
call fcn.10031720
mov edi, dword [sym.imp.KERNEL32.dll_SetLastError]
mov esi, dword [sym.imp.KERNEL32.dll_GetLastError]
cmp al, 1
je 0x100021d9
call esi
cmp eax, 2
jne 0x100021d9
push str.StartBak
call fcn.1006ad20
cmp eax, 1
jne 0x100021d9
push 0
call edi
push str.ESStart
mov ecx, str.SYSTEMCurrentControlSetServicesUsbStor
mov edx, reloc.OLEAUT32.dll_SysReAllocString
call fcn.10031720
cmp al, 1
je 0x1000220b
call esi
cmp eax, 2
jne 0x1000220b
push str.ESStart
call fcn.1006ad20
cmp eax, 1
jne 0x1000220b
push 0
call edi
xor esi, esi
lea ecx, [esp + 0x18]
push ecx
push str.SoftwareMicroWorldDeviceControl
push reloc.OLEAUT32.dll_SysReAllocString
mov dword [esp + 0x1c], esi
call dword [sym.imp.ADVAPI32.dll_RegCreateKeyA]
test eax, eax
jne 0x10002657
mov edx, dword [esp + 0x18]
push edx
call dword [sym.imp.ADVAPI32.dll_RegCloseKey]
mov dword [esp + 0x18], esi
cmp ebp, 1
je 0x1000225f
lea eax, [esp + 0x10]
push eax
push str.DeviceControlEnabled
mov ecx, str.SoftwareMicroWorldDeviceControl
mov edx, reloc.OLEAUT32.dll_SysReAllocString
call fcn.10031670
test al, al
jne 0x10002278
push 1
push str.DeviceControlEnabled
mov edi, str.SoftwareMicroWorldDeviceControl
mov ebx, reloc.OLEAUT32.dll_SysReAllocString
call fcn.10048180
add esp, 8
cmp ebp, 1
je 0x1000229a
lea ecx, [esp + 0x10]
push ecx
push str.PasswordEnabled
mov ecx, str.SoftwareMicroWorldDeviceControl
mov edx, reloc.OLEAUT32.dll_SysReAllocString
call fcn.10031670
test al, al
jne 0x100022b2
push esi
push str.PasswordEnabled
mov edi, str.SoftwareMicroWorldDeviceControl
mov ebx, reloc.OLEAUT32.dll_SysReAllocString
call fcn.10048180
add esp, 8
cmp ebp, 1
je 0x100022d4
lea edx, [esp + 0x10]
push edx
push str.ScanUSBDevices
mov ecx, str.SoftwareMicroWorldDeviceControl
mov edx, reloc.OLEAUT32.dll_SysReAllocString
call fcn.10031670
test al, al
jne 0x100022f8
mov edi, str.SoftwareMicroWorldDeviceControl
mov ebx, reloc.OLEAUT32.dll_SysReAllocString
cmp dword [0x1018c804], esi
je 0x100022e9
push esi
jmp 0x100022eb
push 1
push str.ScanUSBDevices
call fcn.10048180
add esp, 8
cmp ebp, 1
je 0x1000231a
lea eax, [esp + 0x10]
push eax
push str.PassType
mov ecx, str.SoftwareMicroWorldDeviceControl
mov edx, reloc.OLEAUT32.dll_SysReAllocString
call fcn.10031670
test al, al
jne 0x10002332
push esi
push str.PassType
mov edi, str.SoftwareMicroWorldDeviceControl
mov ebx, reloc.OLEAUT32.dll_SysReAllocString
call fcn.10048180
add esp, 8
cmp ebp, 1
je 0x10002354
lea ecx, [esp + 0x10]
push ecx
push str.AutoplayDisabled
mov ecx, str.SoftwareMicroWorldDeviceControl
mov edx, reloc.OLEAUT32.dll_SysReAllocString
call fcn.10031670
test al, al
jne 0x1000236d
push 1
push str.AutoplayDisabled
mov edi, str.SoftwareMicroWorldDeviceControl
mov ebx, reloc.OLEAUT32.dll_SysReAllocString
call fcn.10048180
add esp, 8
cmp ebp, 1
je 0x1000238f
lea edx, [esp + 0x10]
push edx
push str.NotifySystemFilesExecution
mov ecx, str.SoftwareMicroWorldDeviceControl
mov edx, reloc.OLEAUT32.dll_SysReAllocString
call fcn.10031670
test al, al
jne 0x100023a7
push esi
push str.NotifySystemFilesExecution
mov edi, str.SoftwareMicroWorldDeviceControl
mov ebx, reloc.OLEAUT32.dll_SysReAllocString
call fcn.10048180
add esp, 8
cmp ebp, 1
je 0x100023c9
lea eax, [esp + 0x10]
push eax
push str.NotifyEScanFilesExecution
mov ecx, str.SoftwareMicroWorldDeviceControl
mov edx, reloc.OLEAUT32.dll_SysReAllocString
call fcn.10031670
test al, al
jne 0x100023e1
push esi
push str.NotifyEScanFilesExecution
mov edi, str.SoftwareMicroWorldDeviceControl
mov ebx, reloc.OLEAUT32.dll_SysReAllocString
call fcn.10048180
add esp, 8
cmp ebp, 1
jne 0x1000240b
push esi
push str.WriteProtect
mov edi, str.SYSTEMCurrentControlSetControlStorageDevicePolicies
mov ebx, reloc.OLEAUT32.dll_SysReAllocString
call fcn.10048180
push esi
push str.ESWriteProtect
call fcn.10048180
add esp, 0x10
jmp 0x10002428
lea ecx, [esp + 0x10]
push ecx
push str.CancelScanDisabled
mov ecx, str.SoftwareMicroWorldDeviceControl
mov edx, reloc.OLEAUT32.dll_SysReAllocString
call fcn.10031670
test al, al
jne 0x10002440
push esi
push str.CancelScanDisabled
mov edi, str.SoftwareMicroWorldDeviceControl
mov ebx, reloc.OLEAUT32.dll_SysReAllocString
call fcn.10048180
add esp, 8
cmp ebp, 1
je 0x10002462
lea edx, [esp + 0x10]
push edx
push str.ScanWhiteListedUSBDevices
mov ecx, str.SoftwareMicroWorldDeviceControl
mov edx, reloc.OLEAUT32.dll_SysReAllocString
call fcn.10031670
test al, al
jne 0x1000247a
push esi
push str.ScanWhiteListedUSBDevices
mov edi, str.SoftwareMicroWorldDeviceControl
mov ebx, reloc.OLEAUT32.dll_SysReAllocString
call fcn.10048180
add esp, 8
cmp ebp, 1
je 0x1000249c
lea eax, [esp + 0x10]
push eax
push str.AllowDomainLogonPassword
mov ecx, str.SoftwareMicroWorldDeviceControl
mov edx, reloc.OLEAUT32.dll_SysReAllocString
call fcn.10031670
test al, al
jne 0x100024b4
push esi
push str.AllowDomainLogonPassword
mov edi, str.SoftwareMicroWorldDeviceControl
mov ebx, reloc.OLEAUT32.dll_SysReAllocString
call fcn.10048180
add esp, 8
cmp ebp, 1
je 0x100024d6
lea ecx, [esp + 0x10]
push ecx
push str.USBOnTerminalClientsAllowed
mov ecx, str.SoftwareMicroWorldDeviceControl
mov edx, reloc.OLEAUT32.dll_SysReAllocString
call fcn.10031670
test al, al
jne 0x100024ef
push 1
push str.USBOnTerminalClientsAllowed
mov edi, str.SoftwareMicroWorldDeviceControl
mov ebx, reloc.OLEAUT32.dll_SysReAllocString
call fcn.10048180
add esp, 8
cmp ebp, 1
je 0x10002511
lea edx, [esp + 0x10]
push edx
push str.WebCamAllowed
mov ecx, str.SoftwareMicroWorldDeviceControl
mov edx, reloc.OLEAUT32.dll_SysReAllocString
call fcn.10031670
test al, al
jne 0x1000252a
push 1
push str.WebCamAllowed
mov edi, str.SoftwareMicroWorldDeviceControl
mov ebx, reloc.OLEAUT32.dll_SysReAllocString
call fcn.10048180
add esp, 8
cmp ebp, 1
je 0x1000254c
lea eax, [esp + 0x10]
push eax
push str.SDCardAllowed
mov ecx, str.SoftwareMicroWorldDeviceControl
mov edx, reloc.OLEAUT32.dll_SysReAllocString
call fcn.10031670
test al, al
jne 0x10002565
push 1
push str.SDCardAllowed
mov edi, str.SoftwareMicroWorldDeviceControl
mov ebx, reloc.OLEAUT32.dll_SysReAllocString
call fcn.10048180
add esp, 8
cmp ebp, 1
je 0x10002587
lea ecx, [esp + 0x10]
push ecx
push str.BluetoothAllowed
mov ecx, str.SoftwareMicroWorldDeviceControl
mov edx, reloc.OLEAUT32.dll_SysReAllocString
call fcn.10031670
test al, al
jne 0x100025a0
push 1
push str.BluetoothAllowed
mov edi, str.SoftwareMicroWorldDeviceControl
mov ebx, reloc.OLEAUT32.dll_SysReAllocString
call fcn.10048180
add esp, 8
cmp ebp, 1
je 0x100025c2
lea edx, [esp + 0x10]
push edx
push str.BluetoothFileTransfersAllowed
mov ecx, str.SoftwareMicroWorldDeviceControl
mov edx, reloc.OLEAUT32.dll_SysReAllocString
call fcn.10031670
test al, al
jne 0x100025db
push 1
push str.BluetoothFileTransfersAllowed
mov edi, str.SoftwareMicroWorldDeviceControl
mov ebx, reloc.OLEAUT32.dll_SysReAllocString
call fcn.10048180
add esp, 8
cmp ebp, 1
je 0x100025fd
lea eax, [esp + 0x10]
push eax
push str.WifiAllowed
mov ecx, str.SoftwareMicroWorldDeviceControl
mov edx, reloc.OLEAUT32.dll_SysReAllocString
call fcn.10031670
test al, al
jne 0x10002616
push 1
push str.WifiAllowed
mov edi, str.SoftwareMicroWorldDeviceControl
mov ebx, reloc.OLEAUT32.dll_SysReAllocString
call fcn.10048180
add esp, 8
cmp ebp, 1
je 0x10002638
lea ecx, [esp + 0x10]
push ecx
push str.PermanentWhiteListingAllowedOnEScanClients
mov ecx, str.SoftwareMicroWorldDeviceControl
mov edx, reloc.OLEAUT32.dll_SysReAllocString
call fcn.10031670
test al, al
jne 0x10002650
push esi
push str.PermanentWhiteListingAllowedOnEScanClients
mov edi, str.SoftwareMicroWorldDeviceControl
mov ebx, reloc.OLEAUT32.dll_SysReAllocString
call fcn.10048180
add esp, 8
mov eax, 1
jmp 0x10002659
xor eax, eax
mov ecx, dword [esp + 0x124]
pop edi
pop esi
pop ebp
pop ebx
xor ecx, esp
call fcn.1010d699
add esp, 0x118
ret