Function at 0x1000e5d9
Capabilities:
Check if file exists
Get file attributes

Disassembly:
push 0x354
mov eax, 0x1005b7bc
call fcn.1004262a
mov eax, dword [ebp + 8]
mov dword [ebp - 0x2bc], eax
mov eax, dword [ebp + 0xc]
xor esi, esi
mov dword [ebp - 4], esi
push eax
mov dword [ebp - 0x2a8], eax
mov dword [ebp - 0x2c0], esi
call fcn.1001131c
xor ebx, ebx
lea eax, [ebp - 0x324]
inc ebx
mov dword [ebp - 4], esi
push eax
mov ecx, 0x10062e9c
mov dword [ebp - 0x2c0], ebx
call fcn.1000e106
pop ecx
mov dword [ebp - 4], ebx
mov eax, dword [ebp - 0x30c]
mov eax, dword [eax]
mov ecx, dword [ebp - 0x324]
mov dword [ebp - 0x2b0], ecx
mov dword [ebp - 0x2ac], eax
mov eax, dword [ebp - 0x30c]
mov dword [ebp - 0x2d0], eax
mov eax, dword [ebp - 0x324]
lea edi, [ebp - 0x2d4]
lea esi, [ebp - 0x2b0]
mov dword [ebp - 0x2d4], eax
call fcn.10007627
test al, al
jne 0x1000ed73
call fcn.1001d3de
cmp dword [eax + 0x18], 8
jb 0x1000e687
mov eax, dword [eax + 4]
jmp 0x1000e68a
add eax, 4
push str.Local_SettingsSoftwareMicrosoftWindowsCurrentVersionAppModelSystemAppData
push eax
push str._ls_ls
lea ecx, [ebp - 0x110]
call fcn.10028d88
add esp, 0xc
mov byte [ebp - 4], 2
cmp dword [ebp - 0xf8], 8
mov ecx, dword [ebp - 0x10c]
jae 0x1000e6bc
lea ecx, [ebp - 0x10c]
lea eax, [ebp - 0x344]
push eax
call fcn.1000e106
pop ecx
mov byte [ebp - 4], 3
mov eax, dword [ebp - 0x32c]
mov eax, dword [eax]
mov ecx, dword [ebp - 0x344]
mov dword [ebp - 0x29c], ecx
mov dword [ebp - 0x298], eax
mov eax, dword [ebp - 0x32c]
mov dword [ebp - 0x2e0], eax
mov eax, dword [ebp - 0x344]
lea edi, [ebp - 0x2e4]
lea esi, [ebp - 0x29c]
mov dword [ebp - 0x2e4], eax
call fcn.10007627
test al, al
jne 0x1000ed42
call fcn.1001d3de
cmp dword [eax + 0x18], 8
jb 0x1000e728
mov eax, dword [eax + 4]
jmp 0x1000e72b
add eax, 4
cmp dword [ebp - 0xf8], 8
mov ecx, dword [ebp - 0x10c]
jae 0x1000e740
lea ecx, [ebp - 0x10c]
push eax
push ecx
push str._ls_ls
lea ecx, [ebp - 0x68]
call fcn.10028d88
add esp, 0xc
lea esi, [ebp - 0x29c]
mov byte [ebp - 4], 4
call fcn.1001d3de
push eax
lea esi, [ebp - 0xa0]
call fcn.100048fd
mov byte [ebp - 4], 5
cmp dword [ebp - 0x50], 8
mov ecx, dword [ebp - 0x64]
jae 0x1000e77d
lea ecx, [ebp - 0x64]
lea eax, [ebp - 0x304]
push eax
call fcn.1000e106
pop ecx
and dword [ebp - 0x1c], 0
xor eax, eax
mov dword [ebp - 0x18], 7
mov word [ebp - 0x2c], ax
mov byte [ebp - 4], 7
mov eax, dword [ebp - 0x2ec]
mov eax, dword [eax]
mov ecx, dword [ebp - 0x304]
mov dword [ebp - 0x2b8], ecx
mov dword [ebp - 0x2b4], eax
mov eax, dword [ebp - 0x2ec]
mov dword [ebp - 0x2d8], eax
mov eax, dword [ebp - 0x304]
lea edi, [ebp - 0x2dc]
lea esi, [ebp - 0x2b8]
mov dword [ebp - 0x2dc], eax
call fcn.10007627
test al, al
jne 0x1000e8c2
call fcn.1001d3de
cmp dword [eax + 0x18], 8
jb 0x1000e7fa
mov eax, dword [eax + 4]
jmp 0x1000e7fd
add eax, 4
cmp dword [ebp - 0x50], 8
mov ecx, dword [ebp - 0x64]
jae 0x1000e809
lea ecx, [ebp - 0x64]
push eax
push ecx
push str._ls_ls
lea ecx, [ebp - 0x4c]
call fcn.10028d88
add esp, 0xc
push 0xffffffffffffffff
lea ecx, [ebp - 0x30]
push ecx
xor ebx, ebx
mov byte [ebp - 4], 8
call fcn.10004d65
push ebx
push 1
lea esi, [ebp - 0x4c]
mov byte [ebp - 4], 7
call fcn.10004e12
cmp dword [ebp - 0x18], 8
mov eax, dword [ebp - 0x2c]
jae 0x1000e847
lea eax, [ebp - 0x2c]
push str.UserEnabledStartupOnce
push eax
mov edi, reloc.WS2_32.dll_closesocket
push edi
call fcn.1002937a
add esp, 0xc
test al, al
je 0x1000e8b2
cmp dword [ebp - 0x18], 8
mov eax, dword [ebp - 0x2c]
jae 0x1000e86b
lea eax, [ebp - 0x2c]
mov esi, str.State
push esi
push eax
push edi
call fcn.1002937a
add esp, 0xc
test al, al
je 0x1000e8b2
cmp dword [ebp - 0x18], 8
mov eax, dword [ebp - 0x2c]
jae 0x1000e88b
lea eax, [ebp - 0x2c]
push eax
push str.uwp_status_key:_ls
call fcn.1003b928
cmp dword [ebp - 0x18], 8
mov eax, dword [ebp - 0x2c]
pop ecx
pop ecx
jae 0x1000e8a4
lea eax, [ebp - 0x2c]
push ebx
push esi
push eax
push edi
call fcn.10028ead
cmp eax, 2
je 0x1000e8f5
lea esi, [ebp - 0x2b8]
call fcn.100188f0
jmp 0x1000e7b9
xor edi, edi
push edi
push 1
lea esi, [ebp - 0x30]
call fcn.10004e12
lea eax, [ebp - 0x304]
push eax
mov byte [ebp - 4], 5
call fcn.1000992a
push edi
push 1
lea esi, [ebp - 0xa0]
call fcn.10004e12
push edi
push 1
jmp 0x1000ed23
cmp dword [ebp - 0x88], 8
mov eax, dword [ebp - 0x9c]
jae 0x1000e90a
lea eax, [ebp - 0x9c]
push eax
push str.Package_Name:_ls
call fcn.1003b928
pop ecx
pop ecx
lea esi, [ebp - 0x29c]
call fcn.1001d3de
cmp dword [eax + 0x18], 8
jb 0x1000e92d
mov eax, dword [eax + 4]
jmp 0x1000e930
add eax, 4
cmp dword [ebp - 0x50], 8
mov ecx, dword [ebp - 0x64]
jae 0x1000e93c
lea ecx, [ebp - 0x64]
push eax
push ecx
push str._lsSplashScreen_ls_App
lea ecx, [ebp - 0xd8]
call fcn.10028d88
add esp, 0xc
mov byte [ebp - 4], 9
cmp dword [ebp - 0xc0], 8
mov ecx, dword [ebp - 0xd4]
jae 0x1000e96a
lea ecx, [ebp - 0xd4]
push str.Image
push edi
lea esi, [ebp - 0x168]
call fcn.10028f39
pop ecx
pop ecx
lea eax, [ebp - 0xbc]
push eax
mov ecx, esi
mov byte [ebp - 4], 0xa
call fcn.1000e545
mov byte [ebp - 4], 0xb
cmp dword [ebp - 0xc0], 8
mov ecx, dword [ebp - 0xd4]
jae 0x1000e9a8
lea ecx, [ebp - 0xd4]
push str.AppName
push edi
lea esi, [ebp - 0xf4]
call fcn.10028f39
pop ecx
pop ecx
mov byte [ebp - 4], 0xc
cmp dword [ebp - 0xdc], 8
mov eax, dword [ebp - 0xf0]
jae 0x1000e9d4
lea eax, [ebp - 0xf0]
push eax
push str.uwp_appname_str:_ls
call fcn.1003b928
cmp dword [ebp - 0xa4], 8
mov eax, dword [ebp - 0xb8]
pop ecx
pop ecx
jae 0x1000e9f6
lea eax, [ebp - 0xb8]
push eax
call dword [sym.imp.KERNEL32.dll_GetFileAttributesW]
cmp eax, 0xffffffff
jne 0x1000ea0a
xor edi, edi
inc edi
jmp 0x1000ecc6
push 7
pop esi
xor eax, eax
mov dword [ebp - 0x130], esi
mov dword [ebp - 0x134], ebx
mov word [ebp - 0x144], ax
lea eax, [ebp - 0x12c]
push eax
mov byte [ebp - 4], 0xd
call fcn.1000493f
mov dword [ebp - 0x14c], ebx
mov byte [ebp - 4], 0xe
cmp dword [ebp - 0xa4], 8
mov eax, dword [ebp - 0xb8]
jae 0x1000ea51
lea eax, [ebp - 0xb8]
push ebx
push ebx
lea ecx, [ebp - 0x14c]
push ecx
push 0x1000ed91
push 1
push eax
call fcn.10026742
xor eax, eax
mov dword [ebp - 0x6c], esi
mov dword [ebp - 0x70], ebx
mov word [ebp - 0x80], ax
mov byte [ebp - 4], 0xf
mov eax, dword [ebp - 0x118]
mov eax, dword [eax]
mov ecx, dword [ebp - 0x12c]
mov dword [ebp - 0x2a4], ecx
mov dword [ebp - 0x2a0], eax
mov eax, dword [ebp - 0x118]
mov dword [ebp - 0x2c8], eax
mov eax, dword [ebp - 0x12c]
lea edi, [ebp - 0x2cc]
lea esi, [ebp - 0x2a4]
mov dword [ebp - 0x2cc], eax
call fcn.10020fd3
test al, al
je 0x1000ebed
call fcn.1001e4df
cmp dword [eax + 0x18], 8
jb 0x1000ead2
mov eax, dword [eax + 4]
jmp 0x1000ead5
add eax, 4
push eax
call dword [sym.imp.SHLWAPI.dll_PathFindFileNameW]
push eax
lea esi, [ebp - 0x4c]
call fcn.100048dd
lea eax, [ebp - 0x2c4]
push eax
mov byte [ebp - 4], 0x10
mov eax, esi
mov dword [ebp - 0x2c4], 0x2e
call fcn.100118b6
cmp eax, 0xffffffff
jne 0x1000eb17
push ebx
push 1
mov byte [ebp - 4], 0xf
call fcn.10004e12
jmp 0x1000ebb3
push eax
lea eax, [ebp - 0x4c]
push eax
xor ebx, ebx
lea esi, [ebp - 0x360]
call fcn.100112c0
push 0xffffffffffffffff
lea ecx, [ebp - 0x4c]
push ecx
mov byte [ebp - 4], 0x11
call fcn.10004d65
xor edi, edi
push edi
push 1
mov byte [ebp - 4], 0x10
call fcn.10004e12
cmp dword [ebp - 0x38], edi
je 0x1000eba2
mov ecx, dword [ebp - 0x48]
push 8
pop ebx
cmp dword [ebp - 0x34], ebx
jae 0x1000eb59
lea ecx, [ebp - 0x48]
mov eax, dword [ebp - 0x9c]
cmp dword [ebp - 0x88], ebx
jae 0x1000eb6d
lea eax, [ebp - 0x9c]
mov esi, dword [sym.imp.SHLWAPI.dll_StrStrIW]
push ecx
push eax
call esi
test eax, eax
jne 0x1000ebc3
mov ecx, dword [ebp - 0x48]
cmp dword [ebp - 0x34], ebx
jae 0x1000eb86
lea ecx, [ebp - 0x48]
mov eax, dword [ebp - 0xf0]
cmp dword [ebp - 0xdc], ebx
jae 0x1000eb9a
lea eax, [ebp - 0xf0]
push ecx
push eax
call esi
test eax, eax
jne 0x1000ebc3
push edi
push 1
lea esi, [ebp - 0x4c]
mov byte [ebp - 4], 0xf
call fcn.10004e12
xor ebx, ebx
lea esi, [ebp - 0x2a4]
call fcn.1001192f
jmp 0x1000ea91
lea esi, [ebp - 0x2a4]
call fcn.1001e4df
push 0xffffffffffffffff
lea ecx, [ebp - 0x84]
push ecx
xor ebx, ebx
call fcn.10004d65
push ebx
push 1
lea esi, [ebp - 0x4c]
mov byte [ebp - 4], 0xf
call fcn.10004e12
cmp dword [ebp - 0x70], ebx
jne 0x1000ec02
push str.uwp_can_not_find_file_path___
call fcn.1003b928
pop ecx
jmp 0x1000ec91
cmp dword [ebp - 0x6c], 8
mov eax, dword [ebp - 0x80]
jae 0x1000ec0e
lea eax, [ebp - 0x80]
push eax
push str.uwp_proc_path:_ls
call fcn.1003b928
pop ecx
pop ecx
lea eax, [ebp - 0x294]
push eax
call fcn.1000e177
push 0x10062e9c
lea esi, [ebp - 0x4c]
mov byte [ebp - 4], 0x12
call fcn.100048dd
lea eax, [ebp - 0x294]
push eax
mov eax, esi
push eax
lea eax, [ebp - 0x30]
push eax
push reloc.WS2_32.dll_closesocket
push 1
push dword [ebp - 0x2bc]
lea ecx, [ebp - 0x84]
mov byte [ebp - 4], 0x13
call fcn.1000f934
push ebx
push 1
mov edi, eax
mov byte [ebp - 4], 0x12
call fcn.10004e12
cmp edi, ebx
je 0x1000ec86
lea eax, [ebp - 0x294]
push eax
mov eax, dword [ebp - 0x2a8]
call fcn.1001145f
lea edi, [ebp - 0x294]
call fcn.1000ee10
push ebx
push 1
lea esi, [ebp - 0x84]
call fcn.10004e12
lea edi, [ebp - 0x12c]
call fcn.10004f07
push dword [ebp - 0x12c]
call fcn.10040dca
pop ecx
xor edi, edi
push ebx
inc edi
push edi
lea esi, [ebp - 0x148]
call fcn.10004e12
push ebx
push edi
lea esi, [ebp - 0xf4]
call fcn.10004e12
push ebx
push edi
lea esi, [ebp - 0xbc]
call fcn.10004e12
push ebx
push edi
lea esi, [ebp - 0x168]
call fcn.10004e12
push ebx
push edi
lea esi, [ebp - 0xd8]
call fcn.10004e12
push ebx
push edi
lea esi, [ebp - 0x30]
call fcn.10004e12
lea eax, [ebp - 0x304]
push eax
mov byte [ebp - 4], 5
call fcn.1000992a
push ebx
push edi
lea esi, [ebp - 0xa0]
call fcn.10004e12
push ebx
push edi
lea esi, [ebp - 0x68]
mov byte [ebp - 4], 3
call fcn.10004e12
lea esi, [ebp - 0x29c]
call fcn.100188f0
xor ebx, ebx
inc ebx
jmp 0x1000e6e7
lea eax, [ebp - 0x344]
push eax
mov byte [ebp - 4], 2
call fcn.1000992a
push 0
push ebx
lea esi, [ebp - 0x110]
mov byte [ebp - 4], bl
call fcn.10004e12
lea esi, [ebp - 0x2b0]
call fcn.100188f0
jmp 0x1000e646
lea eax, [ebp - 0x324]
push eax
mov byte [ebp - 4], 0
call fcn.1000992a
mov eax, dword [ebp - 0x2a8]
call fcn.100426ad
ret 8