Function at 0x4add30
Capabilities:
Enumerate processes

Disassembly:
push ebp
lea ebp, [esp - 0x450]
sub esp, 0x450
push 0xffffffffffffffff
push 0x5466f1
mov eax, dword fs:[0]
push eax
sub esp, 0xbc
mov eax, dword [0x596c60]
xor eax, ebp
mov dword [ebp + 0x44c], eax
push ebx
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov dword [ebp - 0x10], esp
mov eax, dword [0x59f554]
test al, 1
jne 0x4adda0
or eax, 1
mov dword [0x59f554], eax
mov dword [ebp - 4], 0
call fcn.004a1290
push 0x54f080
call fcn.00507cdd
add esp, 4
mov dword [ebp - 4], 0xffffffff
mov eax, dword [0x597f88]
test byte [eax + 0x1c], 2
je 0x4addb5
cmp byte [eax + 0x19], 5
jb 0x4addb5
mov al, 1
jmp 0x4addb7
xor al, al
cmp byte [0x59f560], 0
jne 0x4addd1
cmp byte [0x59f561], 0
jne 0x4addd1
test al, al
je 0x4adefc
sub esp, 8
mov dword [ebp - 4], 1
lea ecx, [ebp - 0xc0]
call fcn.0047b4d0
lea ecx, [ebp + 0x22c]
mov byte [ebp - 4], 2
call fcn.004a1680
mov edx, eax
mov byte [ebp - 4], 3
lea ecx, [ebp - 0xc0]
call fcn.0047ee50
mov edx, str..InstallHelper.cpp
mov ecx, eax
call fcn.0047f0b0
mov edx, 0x56b378
mov ecx, eax
call fcn.0047f0b0
push 0x444
mov ecx, eax
call fcn.0047b130
mov edx, 0x56b378
mov ecx, eax
call fcn.0047f0b0
mov edx, str.Entering_ResumeWindowsStoreApps
mov ecx, eax
call fcn.0047f0b0
mov byte [ebp - 4], 2
cmp dword [ebp + 0x240], 0x10
jb 0x4ade62
mov eax, dword [ebp + 0x22c]
test eax, eax
je 0x4ade62
push eax
call fcn.00507b54
add esp, 4
lea eax, [ebp + 0x22c]
push eax
lea ecx, [ebp - 0xc0]
call fcn.0047b620
mov esi, eax
mov byte [ebp - 4], 4
cmp dword [esi + 0x14], 0x10
jb 0x4ade82
mov esi, dword [esi]
mov eax, dword [0x59f554]
test al, 1
jne 0x4adead
or eax, 1
mov dword [0x59f554], eax
mov byte [ebp - 4], 5
call fcn.004a1290
push 0x54f080
call fcn.00507cdd
add esp, 4
mov byte [ebp - 4], 4
push esi
push 5
mov ecx, 0x59f560
call fcn.004a1510
cmp dword [ebp + 0x240], 0x10
jb 0x4aded6
mov eax, dword [ebp + 0x22c]
test eax, eax
je 0x4aded6
push eax
call fcn.00507b54
add esp, 4
lea ecx, [ebp - 0x70]
mov byte [ebp - 4], 1
call fcn.0047b5a0
lea eax, [ebp - 0x70]
mov dword [ebp - 0x70], 0x56b700
push eax
call fcn.00528f2f
add esp, 4
mov dword [ebp - 4], 0xffffffff
push str.GetPackageFullName
push 0x5731e8
call dword [sym.imp.KERNEL32.dll_GetModuleHandleW]
push eax
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
mov esi, eax
mov dword [ebp - 0x14], esi
test esi, esi
jne 0x4ae0b9
mov eax, dword [0x59f554]
test al, 1
jne 0x4adf51
or eax, 1
mov dword [0x59f554], eax
mov dword [ebp - 4], 7
call fcn.004a1290
push 0x54f080
call fcn.00507cdd
add esp, 4
mov dword [ebp - 4], 0xffffffff
mov eax, dword [0x597f88]
test byte [eax + 0x1c], 2
je 0x4adf6c
cmp byte [eax + 0x19], 5
jb 0x4adf6c
mov al, 1
jmp 0x4adf6e
xor al, al
cmp byte [0x59f560], 0
jne 0x4adf88
cmp byte [0x59f561], 0
jne 0x4adf88
test al, al
je 0x4ae0ac
sub esp, 8
mov dword [ebp - 4], 8
lea ecx, [ebp - 0xc0]
call fcn.0047b4d0
lea ecx, [ebp + 0x22c]
mov byte [ebp - 4], 9
call fcn.004a1680
mov edx, eax
mov byte [ebp - 4], 0xa
lea ecx, [ebp - 0xc0]
call fcn.0047ee50
mov edx, str..InstallHelper.cpp
mov ecx, eax
call fcn.0047f0b0
mov edx, 0x56b378
mov ecx, eax
call fcn.0047f0b0
push 0x449
mov ecx, eax
call fcn.0047b130
mov edx, 0x56b378
mov ecx, eax
call fcn.0047f0b0
mov edx, str.Exiting_ResumeWindowsStoreApps___GetPackageFullName_function_not_available
mov ecx, eax
call fcn.0047f0b0
mov byte [ebp - 4], 9
cmp dword [ebp + 0x240], 0x10
jb 0x4ae019
mov eax, dword [ebp + 0x22c]
test eax, eax
je 0x4ae019
push eax
call fcn.00507b54
add esp, 4
lea eax, [ebp + 0x22c]
push eax
lea ecx, [ebp - 0xc0]
call fcn.0047b620
mov esi, eax
mov byte [ebp - 4], 0xb
cmp dword [esi + 0x14], 0x10
jb 0x4ae039
mov esi, dword [esi]
mov eax, dword [0x59f554]
test al, 1
jne 0x4ae064
or eax, 1
mov dword [0x59f554], eax
mov byte [ebp - 4], 0xc
call fcn.004a1290
push 0x54f080
call fcn.00507cdd
add esp, 4
mov byte [ebp - 4], 0xb
push esi
push 5
mov ecx, 0x59f560
call fcn.004a1510
cmp dword [ebp + 0x240], 0x10
jb 0x4ae08d
mov eax, dword [ebp + 0x22c]
test eax, eax
je 0x4ae08d
push eax
call fcn.00507b54
add esp, 4
lea ecx, [ebp - 0x70]
mov byte [ebp - 4], 8
call fcn.0047b5a0
lea eax, [ebp - 0x70]
mov dword [ebp - 0x70], 0x56b700
push eax
call fcn.00528f2f
add esp, 4
xor al, al
jmp 0x4aec00
mov dword [ebp - 0x1c], 0
mov dword [ebp - 0x18], 0
call fcn.004af140
mov dword [ebp - 0x1c], eax
push 0
push 2
mov dword [ebp - 4], 0xe
call dword [sym.imp.KERNEL32.dll_CreateToolhelp32Snapshot]
mov ebx, eax
mov dword [ebp - 0x28], ebx
cmp ebx, 0xffffffff
je 0x4ae366
push 0x228
lea eax, [ebp + 4]
push 0
push eax
call fcn.0050c510
add esp, 0xc
mov dword [ebp], 0x22c
lea eax, [ebp]
push eax
push ebx
call dword [sym.imp.KERNEL32.dll_Process32FirstW]
test eax, eax
je 0x4ae35f
jmp 0x4ae120
push dword [ebp + 8]
push 0
push 0x1000
call dword [sym.imp.KERNEL32.dll_OpenProcess]
mov edi, eax
mov dword [ebp - 0x24], edi
test edi, edi
je 0x4ae34c
lea eax, [ebp + 0x244]
mov dword [ebp - 0x20], 0x104
push eax
lea eax, [ebp - 0x20]
push eax
push edi
call esi
test eax, eax
jne 0x4ae345
mov eax, dword [0x59f554]
test al, 1
jne 0x4ae185
or eax, 1
mov dword [0x59f554], eax
mov byte [ebp - 4], 0xf
call fcn.004a1290
push 0x54f080
call fcn.00507cdd
add esp, 4
mov byte [ebp - 4], 0xe
mov eax, dword [0x597f88]
test byte [eax + 0x1c], 2
je 0x4ae19a
cmp byte [eax + 0x19], 5
jb 0x4ae19a
mov al, 1
jmp 0x4ae19c
xor al, al
cmp byte [0x59f560], 0
jne 0x4ae1b6
cmp byte [0x59f561], 0
jne 0x4ae1b6
test al, al
je 0x4ae2f0
sub esp, 8
mov byte [ebp - 4], 0x10
lea ecx, [ebp - 0xc0]
call fcn.0047b4d0
lea ecx, [ebp + 0x22c]
mov byte [ebp - 4], 0x11
call fcn.004a1680
mov edx, eax
mov byte [ebp - 4], 0x12
lea ecx, [ebp - 0xc0]
call fcn.0047ee50
mov edx, str..InstallHelper.cpp
mov ecx, eax
call fcn.0047f0b0
mov edx, 0x56b378
mov ecx, eax
call fcn.0047f0b0
push 0x462
mov ecx, eax
call fcn.0047b130
mov edx, 0x56b378
mov ecx, eax
call fcn.0047f0b0
mov edx, str.Executable:
mov ecx, eax
call fcn.0047f0b0
lea edx, [ebp + 0x24]
mov ecx, eax
call fcn.004a1820
mov edx, str.__Package_Name:
mov ecx, eax
call fcn.0047f0b0
lea edx, [ebp + 0x244]
mov ecx, eax
call fcn.004a1820
mov byte [ebp - 4], 0x11
cmp dword [ebp + 0x240], 0x10
jb 0x4ae267
mov eax, dword [ebp + 0x22c]
test eax, eax
je 0x4ae267
push eax
call fcn.00507b54
add esp, 4
lea eax, [ebp + 0x22c]
push eax
lea ecx, [ebp - 0xc0]
call fcn.0047b620
mov esi, eax
mov byte [ebp - 4], 0x13
cmp dword [esi + 0x14], 0x10
jb 0x4ae287
mov esi, dword [esi]
call fcn.004a1320
push esi
push 5
mov ecx, eax
call fcn.004a1510
cmp dword [ebp + 0x240], 0x10
jb 0x4ae2b2
mov eax, dword [ebp + 0x22c]
test eax, eax
je 0x4ae2b2
push eax
call fcn.00507b54
add esp, 4
lea ecx, [ebp - 0x70]
mov byte [ebp - 4], 0x10
call fcn.0047b5a0
lea eax, [ebp - 0x70]
mov dword [ebp - 0x70], 0x56b700
push eax
call fcn.00528f2f
add esp, 4
mov dword [ebp - 4], 0xe
jmp 0x4ae2ed
mov esi, dword [ebp - 0x14]
lea eax, [ebp + 0x244]
push eax
lea ecx, [ebp + 0x22c]
call fcn.0047af80
mov byte [ebp - 4], 0x15
movzx eax, byte [0x59f51a]
push eax
lea eax, [ebp + 0x22c]
push eax
push ecx
lea eax, [ebp - 0xc8]
push eax
lea ecx, [ebp - 0x1c]
call fcn.004af1a0
mov byte [ebp - 4], 0xe
cmp dword [ebp + 0x240], 8
jb 0x4ae345
mov eax, dword [ebp + 0x22c]
test eax, eax
je 0x4ae345
push eax
call fcn.00507b54
add esp, 4
push edi
call dword [sym.imp.KERNEL32.dll_CloseHandle]
lea eax, [ebp]
push eax
push ebx
call dword [sym.imp.KERNEL32.dll_Process32NextW]
test eax, eax
jne 0x4ae120
push ebx
call dword [sym.imp.KERNEL32.dll_CloseHandle]
mov eax, dword [0x59f554]
test al, 1
jne 0x4ae390
or dword [0x59f554], 1
mov byte [ebp - 4], 0x16
call fcn.004a1290
push 0x54f080
call fcn.00507cdd
add esp, 4
mov byte [ebp - 4], 0xe
mov eax, dword [0x597f88]
test byte [eax + 0x1c], 2
je 0x4ae3a5
cmp byte [eax + 0x19], 5
jb 0x4ae3a5
mov al, 1
jmp 0x4ae3a7
xor al, al
cmp byte [0x59f560], 0
jne 0x4ae3c1
cmp byte [0x59f561], 0
jne 0x4ae3c1
test al, al
je 0x4ae500
sub esp, 8
mov byte [ebp - 4], 0x17
lea ecx, [ebp - 0xc0]
call fcn.0047b4d0
lea ecx, [ebp + 0x22c]
mov byte [ebp - 4], 0x18
call fcn.004a1680
mov byte [ebp - 4], 0x19
lea ecx, [ebp - 0xc0]
mov esi, dword [ebp - 0x18]
mov edx, eax
call fcn.0047ee50
mov edx, str..InstallHelper.cpp
mov ecx, eax
call fcn.0047f0b0
mov edx, 0x56b378
mov ecx, eax
call fcn.0047f0b0
push 0x470
mov ecx, eax
call fcn.0047b130
mov edx, 0x56b378
mov ecx, eax
call fcn.0047f0b0
mov edx, str.Found
mov ecx, eax
call fcn.0047f0b0
push esi
mov ecx, eax
call fcn.0047b2d0
mov edx, str._Windows_Store_Apps
mov ecx, eax
call fcn.0047f0b0
mov byte [ebp - 4], 0x18
cmp dword [ebp + 0x240], 0x10
jb 0x4ae466
mov eax, dword [ebp + 0x22c]
test eax, eax
je 0x4ae466
push eax
call fcn.00507b54
add esp, 4
lea eax, [ebp + 0x22c]
push eax
lea ecx, [ebp - 0xc0]
call fcn.0047b620
mov esi, eax
mov byte [ebp - 4], 0x1a
cmp dword [esi + 0x14], 0x10
jb 0x4ae486
mov esi, dword [esi]
mov eax, dword [0x59f554]
test al, 1
jne 0x4ae4b1
or eax, 1
mov dword [0x59f554], eax
mov byte [ebp - 4], 0x1b
call fcn.004a1290
push 0x54f080
call fcn.00507cdd
add esp, 4
mov byte [ebp - 4], 0x1a
push esi
push 5
mov ecx, 0x59f560
call fcn.004a1510
cmp dword [ebp + 0x240], 0x10
jb 0x4ae4da
mov eax, dword [ebp + 0x22c]
test eax, eax
je 0x4ae4da
push eax
call fcn.00507b54
add esp, 4
lea ecx, [ebp - 0x70]
mov byte [ebp - 4], 0x17
call fcn.0047b5a0
lea eax, [ebp - 0x70]
mov dword [ebp - 0x70], 0x56b700
push eax
call fcn.00528f2f
add esp, 4
mov dword [ebp - 4], 0xe
cmp dword [ebp - 0x18], 0
je 0x4aea5a
push 0x59f42c
push 0x56b20c
push 0x17
push 0
push 0x56b1fc
call dword [sym.imp.ole32.dll_CoCreateInstance]
test eax, eax
js 0x4ae94c
mov esi, dword [ebp - 0x1c]
mov dword [ebp - 0x20], esi
mov eax, dword [esi]
mov dword [ebp - 0x14], eax
cmp eax, esi
je 0x4ae72c
cmp dword [eax + 0x24], 8
lea edi, [eax + 0x10]
jb 0x4ae551
mov edx, dword [edi]
jmp 0x4ae553
mov edx, edi
mov ecx, dword [0x59f42c]
test ecx, ecx
je 0x4ae568
mov eax, dword [ecx]
push 0
push 0
push edx
push ecx
call dword [eax + 0xc]
test byte [0x59f554], 1
jne 0x4ae592
or dword [0x59f554], 1
mov byte [ebp - 4], 0x1d
call fcn.004a1290
push 0x54f080
call fcn.00507cdd
add esp, 4
mov byte [ebp - 4], 0xe
mov eax, dword [0x597f88]
test byte [eax + 0x1c], 2
je 0x4ae5a7
cmp byte [eax + 0x19], 5
jb 0x4ae5a7
mov al, 1
jmp 0x4ae5a9
xor al, al
cmp byte [0x59f560], 0
jne 0x4ae5c3
cmp byte [0x59f561], 0
jne 0x4ae5c3
test al, al
je 0x4ae71c
sub esp, 8
mov byte [ebp - 4], 0x1e
lea ecx, [ebp - 0xc0]
call fcn.0047b4d0
lea ecx, [ebp + 0x22c]
mov byte [ebp - 4], 0x1f
call fcn.004a1680
mov byte [ebp - 4], 0x20
cmp dword [edi + 0x14], 8
jb 0x4ae5f0
mov edi, dword [edi]
mov edx, eax
lea ecx, [ebp - 0xc0]
call fcn.0047ee50
mov edx, str..InstallHelper.cpp
mov ecx, eax
call fcn.0047f0b0
mov edx, 0x56b378
mov ecx, eax
call fcn.0047f0b0
push 0x47c
mov ecx, eax
call fcn.0047b130
mov edx, 0x56b378
mov ecx, eax
call fcn.0047f0b0
mov edx, str.Enabled_debugging_for
mov ecx, eax
call fcn.0047f0b0
mov edx, edi
mov ecx, eax
call fcn.004a1820
mov byte [ebp - 4], 0x1f
cmp dword [ebp + 0x240], 0x10
jb 0x4ae662
mov eax, dword [ebp + 0x22c]
test eax, eax
je 0x4ae662
push eax
call fcn.00507b54
add esp, 4
lea eax, [ebp + 0x22c]
push eax
lea ecx, [ebp - 0xc0]
call fcn.0047b620
mov edi, eax
mov byte [ebp - 4], 0x21
cmp dword [edi + 0x14], 0x10
jb 0x4ae682
mov edi, dword [edi]
mov eax, dword [0x59f554]
test al, 1
jne 0x4ae6ad
or eax, 1
mov dword [0x59f554], eax
mov byte [ebp - 4], 0x22
call fcn.004a1290
push 0x54f080
call fcn.00507cdd
add esp, 4
mov byte [ebp - 4], 0x21
push edi
push 5
mov ecx, 0x59f560
call fcn.004a1510
cmp dword [ebp + 0x240], 0x10
jb 0x4ae6d6
mov eax, dword [ebp + 0x22c]
test eax, eax
je 0x4ae6d6
push eax
call fcn.00507b54
add esp, 4
lea ecx, [ebp - 0x70]
mov byte [ebp - 4], 0x1e
call fcn.0047b5a0
lea eax, [ebp - 0x70]
mov dword [ebp - 0x70], 0x56b700
push eax
call fcn.00528f2f
add esp, 4
mov dword [ebp - 4], 0xe
lea ecx, [ebp - 0x14]
call fcn.00497630
mov eax, dword [ebp - 0x14]
jmp 0x4ae536
lea ecx, [ebp - 0x14]
call fcn.00497630
mov eax, dword [ebp - 0x14]
jmp 0x4ae536
push 0x1388
call dword [sym.imp.KERNEL32.dll_Sleep]
mov eax, dword [ebp - 0x1c]
mov edi, dword [0x59f42c]
mov eax, dword [eax]
mov dword [ebp - 0x14], eax
cmp eax, esi
je 0x4ae92f
cmp dword [eax + 0x24], 8
lea ebx, [eax + 0x10]
jb 0x4ae75a
mov ecx, dword [ebx]
jmp 0x4ae75c
mov ecx, ebx
test edi, edi
je 0x4ae76d
mov eax, dword [edi]
push ecx
push edi
call dword [eax + 0x10]
mov edi, dword [0x59f42c]
mov eax, dword [0x59f554]
test al, 1
jne 0x4ae79d
or dword [0x59f554], 1
mov byte [ebp - 4], 0x24
call fcn.004a1290
push 0x54f080
call fcn.00507cdd
mov byte [ebp - 4], 0xe
add esp, 4
mov edi, dword [0x59f42c]
mov eax, dword [0x597f88]
test byte [eax + 0x1c], 2
je 0x4ae7b2
cmp byte [eax + 0x19], 5
jb 0x4ae7b2
mov al, 1
jmp 0x4ae7b4
xor al, al
cmp byte [0x59f560], 0
jne 0x4ae7ce
cmp byte [0x59f561], 0
jne 0x4ae7ce
test al, al
je 0x4ae91f
sub esp, 8
mov byte [ebp - 4], 0x25
lea ecx, [ebp - 0xc0]
call fcn.0047b4d0
lea ecx, [ebp + 0x22c]
mov byte [ebp - 4], 0x26
call fcn.004a1680
mov byte [ebp - 4], 0x27
cmp dword [ebx + 0x14], 8
jb 0x4ae7fb
mov ebx, dword [ebx]
mov edx, eax
lea ecx, [ebp - 0xc0]
call fcn.0047ee50
mov edx, str..InstallHelper.cpp
mov ecx, eax
call fcn.0047f0b0
mov edx, 0x56b378
mov ecx, eax
call fcn.0047f0b0
push 0x486
mov ecx, eax
call fcn.0047b130
mov edx, 0x56b378
mov ecx, eax
call fcn.0047f0b0
mov edx, str.Disabled_debugging_for
mov ecx, eax
call fcn.0047f0b0
mov edx, ebx
mov ecx, eax
call fcn.004a1820
mov byte [ebp - 4], 0x26
cmp dword [ebp + 0x240], 0x10
jb 0x4ae86d
mov eax, dword [ebp + 0x22c]
test eax, eax
je 0x4ae86d
push eax
call fcn.00507b54
add esp, 4
lea eax, [ebp + 0x22c]
push eax
lea ecx, [ebp - 0xc0]
call fcn.0047b620
mov edi, eax
mov byte [ebp - 4], 0x28
cmp dword [edi + 0x14], 0x10
jb 0x4ae88d
mov edi, dword [edi]
mov eax, dword [0x59f554]
test al, 1
jne 0x4ae8b8
or eax, 1
mov dword [0x59f554], eax
mov byte [ebp - 4], 0x29
call fcn.004a1290
push 0x54f080
call fcn.00507cdd
add esp, 4
mov byte [ebp - 4], 0x28
push edi
push 5
mov ecx, 0x59f560
call fcn.004a1510
cmp dword [ebp + 0x240], 0x10
jb 0x4ae8e1
mov eax, dword [ebp + 0x22c]
test eax, eax
je 0x4ae8e1
push eax
call fcn.00507b54
add esp, 4
lea ecx, [ebp - 0x70]
mov byte [ebp - 4], 0x25
call fcn.0047b5a0
lea eax, [ebp - 0x70]
mov dword [ebp - 0x70], 0x56b700
push eax
call fcn.00528f2f
add esp, 4
mov dword [ebp - 4], 0xe
jmp 0x4ae919
mov edi, dword [0x59f42c]
lea ecx, [ebp - 0x14]
call fcn.00497630
mov eax, dword [ebp - 0x14]
jmp 0x4ae745
test edi, edi
je 0x4aea5a
mov eax, dword [edi]
push edi
call dword [eax + 8]
mov dword [0x59f42c], 0
jmp 0x4aea5a
call fcn.004a1320
mov edx, eax
mov eax, dword [0x597f88]
test byte [eax + 0x1c], 2
je 0x4ae968
cmp byte [eax + 0x19], 2
jb 0x4ae968
mov cl, 1
jmp 0x4ae96a
xor cl, cl
cmp byte [edx], 0
jne 0x4ae97d
cmp byte [edx + 1], 0
jne 0x4ae97d
test cl, cl
je 0x4aea5a
sub esp, 8
mov byte [ebp - 4], 0x2b
lea ecx, [ebp - 0xc0]
call fcn.0047b4d0
lea ecx, [ebp + 0x22c]
mov byte [ebp - 4], 0x2c
call fcn.004a1680
mov edx, eax
mov byte [ebp - 4], 0x2d
lea ecx, [ebp - 0xc0]
call fcn.0047ee50
mov edx, str..InstallHelper.cpp
mov ecx, eax
call fcn.0047f0b0
mov edx, 0x56b378
mov ecx, eax
call fcn.0047f0b0
push 0x48e
mov ecx, eax
call fcn.0047b130
mov edx, 0x56b378
mov ecx, eax
call fcn.0047f0b0
mov edx, str.Failed_to_create_IDebugSettings_interface
mov ecx, eax
call fcn.0047f0b0
lea ecx, [ebp + 0x22c]
mov byte [ebp - 4], 0x2c
call fcn.0047abe0
lea eax, [ebp + 0x22c]
push eax
lea ecx, [ebp - 0xc0]
call fcn.0047b620
mov esi, eax
mov byte [ebp - 4], 0x2e
cmp dword [esi + 0x14], 0x10
jb 0x4aea1a
mov esi, dword [esi]
call fcn.004a1320
push esi
push 2
mov ecx, eax
call fcn.004a1510
lea ecx, [ebp + 0x22c]
call fcn.0047abe0
lea ecx, [ebp - 0x70]
mov byte [ebp - 4], 0x2b
call fcn.0047b5a0
lea eax, [ebp - 0x70]
mov dword [ebp - 0x70], 0x56b700
push eax
call fcn.00528f2f
add esp, 4
mov dword [ebp - 4], 0xe
mov eax, dword [0x59f554]
test al, 1
jne 0x4aea84
or dword [0x59f554], 1
mov byte [ebp - 4], 0x30
call fcn.004a1290
push 0x54f080
call fcn.00507cdd
add esp, 4
mov byte [ebp - 4], 0xe
mov eax, dword [0x597f88]
test byte [eax + 0x1c], 2
je 0x4aea9f
cmp byte [eax + 0x19], 5
jb 0x4aea9f
mov al, 1
jmp 0x4aeaa1
xor al, al
cmp byte [0x59f560], 0
jne 0x4aeabb
cmp byte [0x59f561], 0
jne 0x4aeabb
test al, al
je 0x4aebdc
sub esp, 8
mov byte [ebp - 4], 0x31
lea ecx, [ebp - 0xc0]
call fcn.0047b4d0
lea ecx, [ebp + 0x22c]
mov byte [ebp - 4], 0x32
call fcn.004a1680
mov edx, eax
mov byte [ebp - 4], 0x33
lea ecx, [ebp - 0xc0]
call fcn.0047ee50
mov edx, str..InstallHelper.cpp
mov ecx, eax
call fcn.0047f0b0
mov edx, 0x56b378
mov ecx, eax
call fcn.0047f0b0
push 0x492
mov ecx, eax
call fcn.0047b130
mov edx, 0x56b378
mov ecx, eax
call fcn.0047f0b0
mov edx, str.Exiting_ResumeWindowsStoreApps
mov ecx, eax
call fcn.0047f0b0
mov byte [ebp - 4], 0x32
cmp dword [ebp + 0x240], 0x10
jb 0x4aeb49
mov eax, dword [ebp + 0x22c]
test eax, eax
je 0x4aeb49
push eax
call fcn.00507b54
add esp, 4
lea eax, [ebp + 0x22c]
push eax
lea ecx, [ebp - 0xc0]
call fcn.0047b620
mov esi, eax
mov byte [ebp - 4], 0x34
cmp dword [esi + 0x14], 0x10
jb 0x4aeb69
mov esi, dword [esi]
mov eax, dword [0x59f554]
test al, 1
jne 0x4aeb94
or eax, 1
mov dword [0x59f554], eax
mov byte [ebp - 4], 0x35
call fcn.004a1290
push 0x54f080
call fcn.00507cdd
add esp, 4
mov byte [ebp - 4], 0x34
push esi
push 5
mov ecx, 0x59f560
call fcn.004a1510
cmp dword [ebp + 0x240], 0x10
jb 0x4aebbd
mov eax, dword [ebp + 0x22c]
test eax, eax
je 0x4aebbd
push eax
call fcn.00507b54
add esp, 4
lea ecx, [ebp - 0x70]
mov byte [ebp - 4], 0x31
call fcn.0047b5a0
lea eax, [ebp - 0x70]
mov dword [ebp - 0x70], 0x56b700
push eax
call fcn.00528f2f
add esp, 4
mov eax, dword [ebp - 0x1c]
lea ecx, [ebp - 0x1c]
push eax
push dword [eax]
lea eax, [ebp - 0x24]
push eax
call fcn.004aeda0
mov eax, dword [ebp - 0x1c]
test eax, eax
je 0x4aebfe
push eax
call fcn.00507b54
add esp, 4
mov al, 1
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [ebp + 0x44c]
xor ecx, ebp
call fcn.005072fd
lea esp, [ebp + 0x450]
pop ebp
ret