Function at 0x4ad510
Capabilities:
Enumerate processes

Disassembly:
push ebp
lea ebp, [esp - 0x450]
sub esp, 0x450
push 0xffffffffffffffff
push 0x545ef1
mov eax, dword fs:[0]
push eax
sub esp, 0xbc
mov eax, dword [0x595c60]
xor eax, ebp
mov dword [ebp + 0x44c], eax
push ebx
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov dword [ebp - 0x10], esp
mov eax, dword [0x59e598]
test al, 1
jne 0x4ad580
or eax, 1
mov dword [0x59e598], eax
mov dword [ebp - 4], 0
call fcn.004a08c0
push 0x54e860
call fcn.0050765d
add esp, 4
mov dword [ebp - 4], 0xffffffff
mov eax, dword [0x596f88]
test byte [eax + 0x1c], 2
je 0x4ad595
cmp byte [eax + 0x19], 5
jb 0x4ad595
mov al, 1
jmp 0x4ad597
xor al, al
cmp byte [0x59e5a8], 0
jne 0x4ad5b1
cmp byte [0x59e5a9], 0
jne 0x4ad5b1
test al, al
je 0x4ad6dc
sub esp, 8
mov dword [ebp - 4], 1
lea ecx, [ebp - 0xc0]
call fcn.0047b550
lea ecx, [ebp + 0x22c]
mov byte [ebp - 4], 2
call fcn.004a0cb0
mov edx, eax
mov byte [ebp - 4], 3
lea ecx, [ebp - 0xc0]
call fcn.0047eed0
mov edx, str..InstallHelper.cpp
mov ecx, eax
call fcn.0047f130
mov edx, 0x56a378
mov ecx, eax
call fcn.0047f130
push 0x443
mov ecx, eax
call fcn.0047b1b0
mov edx, 0x56a378
mov ecx, eax
call fcn.0047f130
mov edx, str.Entering_ResumeWindowsStoreApps
mov ecx, eax
call fcn.0047f130
mov byte [ebp - 4], 2
cmp dword [ebp + 0x240], 0x10
jb 0x4ad642
mov eax, dword [ebp + 0x22c]
test eax, eax
je 0x4ad642
push eax
call fcn.005074d4
add esp, 4
lea eax, [ebp + 0x22c]
push eax
lea ecx, [ebp - 0xc0]
call fcn.0047b6a0
mov esi, eax
mov byte [ebp - 4], 4
cmp dword [esi + 0x14], 0x10
jb 0x4ad662
mov esi, dword [esi]
mov eax, dword [0x59e598]
test al, 1
jne 0x4ad68d
or eax, 1
mov dword [0x59e598], eax
mov byte [ebp - 4], 5
call fcn.004a08c0
push 0x54e860
call fcn.0050765d
add esp, 4
mov byte [ebp - 4], 4
push esi
push 5
mov ecx, 0x59e5a8
call fcn.004a0b40
cmp dword [ebp + 0x240], 0x10
jb 0x4ad6b6
mov eax, dword [ebp + 0x22c]
test eax, eax
je 0x4ad6b6
push eax
call fcn.005074d4
add esp, 4
lea ecx, [ebp - 0x70]
mov byte [ebp - 4], 1
call fcn.0047b620
lea eax, [ebp - 0x70]
mov dword [ebp - 0x70], 0x56a6f8
push eax
call fcn.0052889f
add esp, 4
mov dword [ebp - 4], 0xffffffff
push str.GetPackageFullName
push 0x5721a8
call dword [sym.imp.KERNEL32.dll_GetModuleHandleW]
push eax
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
mov esi, eax
mov dword [ebp - 0x14], esi
test esi, esi
jne 0x4ad899
mov eax, dword [0x59e598]
test al, 1
jne 0x4ad731
or eax, 1
mov dword [0x59e598], eax
mov dword [ebp - 4], 7
call fcn.004a08c0
push 0x54e860
call fcn.0050765d
add esp, 4
mov dword [ebp - 4], 0xffffffff
mov eax, dword [0x596f88]
test byte [eax + 0x1c], 2
je 0x4ad74c
cmp byte [eax + 0x19], 5
jb 0x4ad74c
mov al, 1
jmp 0x4ad74e
xor al, al
cmp byte [0x59e5a8], 0
jne 0x4ad768
cmp byte [0x59e5a9], 0
jne 0x4ad768
test al, al
je 0x4ad88c
sub esp, 8
mov dword [ebp - 4], 8
lea ecx, [ebp - 0xc0]
call fcn.0047b550
lea ecx, [ebp + 0x22c]
mov byte [ebp - 4], 9
call fcn.004a0cb0
mov edx, eax
mov byte [ebp - 4], 0xa
lea ecx, [ebp - 0xc0]
call fcn.0047eed0
mov edx, str..InstallHelper.cpp
mov ecx, eax
call fcn.0047f130
mov edx, 0x56a378
mov ecx, eax
call fcn.0047f130
push 0x448
mov ecx, eax
call fcn.0047b1b0
mov edx, 0x56a378
mov ecx, eax
call fcn.0047f130
mov edx, str.Exiting_ResumeWindowsStoreApps___GetPackageFullName_function_not_available
mov ecx, eax
call fcn.0047f130
mov byte [ebp - 4], 9
cmp dword [ebp + 0x240], 0x10
jb 0x4ad7f9
mov eax, dword [ebp + 0x22c]
test eax, eax
je 0x4ad7f9
push eax
call fcn.005074d4
add esp, 4
lea eax, [ebp + 0x22c]
push eax
lea ecx, [ebp - 0xc0]
call fcn.0047b6a0
mov esi, eax
mov byte [ebp - 4], 0xb
cmp dword [esi + 0x14], 0x10
jb 0x4ad819
mov esi, dword [esi]
mov eax, dword [0x59e598]
test al, 1
jne 0x4ad844
or eax, 1
mov dword [0x59e598], eax
mov byte [ebp - 4], 0xc
call fcn.004a08c0
push 0x54e860
call fcn.0050765d
add esp, 4
mov byte [ebp - 4], 0xb
push esi
push 5
mov ecx, 0x59e5a8
call fcn.004a0b40
cmp dword [ebp + 0x240], 0x10
jb 0x4ad86d
mov eax, dword [ebp + 0x22c]
test eax, eax
je 0x4ad86d
push eax
call fcn.005074d4
add esp, 4
lea ecx, [ebp - 0x70]
mov byte [ebp - 4], 8
call fcn.0047b620
lea eax, [ebp - 0x70]
mov dword [ebp - 0x70], 0x56a6f8
push eax
call fcn.0052889f
add esp, 4
xor al, al
jmp 0x4ae3e0
mov dword [ebp - 0x1c], 0
mov dword [ebp - 0x18], 0
call fcn.004ae920
mov dword [ebp - 0x1c], eax
push 0
push 2
mov dword [ebp - 4], 0xe
call dword [sym.imp.KERNEL32.dll_CreateToolhelp32Snapshot]
mov ebx, eax
mov dword [ebp - 0x28], ebx
cmp ebx, 0xffffffff
je 0x4adb46
push 0x228
lea eax, [ebp + 4]
push 0
push eax
call fcn.0050be90
add esp, 0xc
mov dword [ebp], 0x22c
lea eax, [ebp]
push eax
push ebx
call dword [sym.imp.KERNEL32.dll_Process32FirstW]
test eax, eax
je 0x4adb3f
jmp 0x4ad900
push dword [ebp + 8]
push 0
push 0x1000
call dword [sym.imp.KERNEL32.dll_OpenProcess]
mov edi, eax
mov dword [ebp - 0x24], edi
test edi, edi
je 0x4adb2c
lea eax, [ebp + 0x244]
mov dword [ebp - 0x20], 0x104
push eax
lea eax, [ebp - 0x20]
push eax
push edi
call esi
test eax, eax
jne 0x4adb25
mov eax, dword [0x59e598]
test al, 1
jne 0x4ad965
or eax, 1
mov dword [0x59e598], eax
mov byte [ebp - 4], 0xf
call fcn.004a08c0
push 0x54e860
call fcn.0050765d
add esp, 4
mov byte [ebp - 4], 0xe
mov eax, dword [0x596f88]
test byte [eax + 0x1c], 2
je 0x4ad97a
cmp byte [eax + 0x19], 5
jb 0x4ad97a
mov al, 1
jmp 0x4ad97c
xor al, al
cmp byte [0x59e5a8], 0
jne 0x4ad996
cmp byte [0x59e5a9], 0
jne 0x4ad996
test al, al
je 0x4adad0
sub esp, 8
mov byte [ebp - 4], 0x10
lea ecx, [ebp - 0xc0]
call fcn.0047b550
lea ecx, [ebp + 0x22c]
mov byte [ebp - 4], 0x11
call fcn.004a0cb0
mov edx, eax
mov byte [ebp - 4], 0x12
lea ecx, [ebp - 0xc0]
call fcn.0047eed0
mov edx, str..InstallHelper.cpp
mov ecx, eax
call fcn.0047f130
mov edx, 0x56a378
mov ecx, eax
call fcn.0047f130
push 0x461
mov ecx, eax
call fcn.0047b1b0
mov edx, 0x56a378
mov ecx, eax
call fcn.0047f130
mov edx, str.Executable:
mov ecx, eax
call fcn.0047f130
lea edx, [ebp + 0x24]
mov ecx, eax
call fcn.004a0e50
mov edx, str.__Package_Name:
mov ecx, eax
call fcn.0047f130
lea edx, [ebp + 0x244]
mov ecx, eax
call fcn.004a0e50
mov byte [ebp - 4], 0x11
cmp dword [ebp + 0x240], 0x10
jb 0x4ada47
mov eax, dword [ebp + 0x22c]
test eax, eax
je 0x4ada47
push eax
call fcn.005074d4
add esp, 4
lea eax, [ebp + 0x22c]
push eax
lea ecx, [ebp - 0xc0]
call fcn.0047b6a0
mov esi, eax
mov byte [ebp - 4], 0x13
cmp dword [esi + 0x14], 0x10
jb 0x4ada67
mov esi, dword [esi]
call fcn.004a0950
push esi
push 5
mov ecx, eax
call fcn.004a0b40
cmp dword [ebp + 0x240], 0x10
jb 0x4ada92
mov eax, dword [ebp + 0x22c]
test eax, eax
je 0x4ada92
push eax
call fcn.005074d4
add esp, 4
lea ecx, [ebp - 0x70]
mov byte [ebp - 4], 0x10
call fcn.0047b620
lea eax, [ebp - 0x70]
mov dword [ebp - 0x70], 0x56a6f8
push eax
call fcn.0052889f
add esp, 4
mov dword [ebp - 4], 0xe
jmp 0x4adacd
mov esi, dword [ebp - 0x14]
lea eax, [ebp + 0x244]
push eax
lea ecx, [ebp + 0x22c]
call fcn.0047b000
mov byte [ebp - 4], 0x15
movzx eax, byte [0x59e55c]
push eax
lea eax, [ebp + 0x22c]
push eax
push ecx
lea eax, [ebp - 0xc8]
push eax
lea ecx, [ebp - 0x1c]
call fcn.004ae980
mov byte [ebp - 4], 0xe
cmp dword [ebp + 0x240], 8
jb 0x4adb25
mov eax, dword [ebp + 0x22c]
test eax, eax
je 0x4adb25
push eax
call fcn.005074d4
add esp, 4
push edi
call dword [sym.imp.KERNEL32.dll_CloseHandle]
lea eax, [ebp]
push eax
push ebx
call dword [sym.imp.KERNEL32.dll_Process32NextW]
test eax, eax
jne 0x4ad900
push ebx
call dword [sym.imp.KERNEL32.dll_CloseHandle]
mov eax, dword [0x59e598]
test al, 1
jne 0x4adb70
or dword [0x59e598], 1
mov byte [ebp - 4], 0x16
call fcn.004a08c0
push 0x54e860
call fcn.0050765d
add esp, 4
mov byte [ebp - 4], 0xe
mov eax, dword [0x596f88]
test byte [eax + 0x1c], 2
je 0x4adb85
cmp byte [eax + 0x19], 5
jb 0x4adb85
mov al, 1
jmp 0x4adb87
xor al, al
cmp byte [0x59e5a8], 0
jne 0x4adba1
cmp byte [0x59e5a9], 0
jne 0x4adba1
test al, al
je 0x4adce0
sub esp, 8
mov byte [ebp - 4], 0x17
lea ecx, [ebp - 0xc0]
call fcn.0047b550
lea ecx, [ebp + 0x22c]
mov byte [ebp - 4], 0x18
call fcn.004a0cb0
mov byte [ebp - 4], 0x19
lea ecx, [ebp - 0xc0]
mov esi, dword [ebp - 0x18]
mov edx, eax
call fcn.0047eed0
mov edx, str..InstallHelper.cpp
mov ecx, eax
call fcn.0047f130
mov edx, 0x56a378
mov ecx, eax
call fcn.0047f130
push 0x46f
mov ecx, eax
call fcn.0047b1b0
mov edx, 0x56a378
mov ecx, eax
call fcn.0047f130
mov edx, str.Found
mov ecx, eax
call fcn.0047f130
push esi
mov ecx, eax
call fcn.0047b350
mov edx, str._Windows_Store_Apps
mov ecx, eax
call fcn.0047f130
mov byte [ebp - 4], 0x18
cmp dword [ebp + 0x240], 0x10
jb 0x4adc46
mov eax, dword [ebp + 0x22c]
test eax, eax
je 0x4adc46
push eax
call fcn.005074d4
add esp, 4
lea eax, [ebp + 0x22c]
push eax
lea ecx, [ebp - 0xc0]
call fcn.0047b6a0
mov esi, eax
mov byte [ebp - 4], 0x1a
cmp dword [esi + 0x14], 0x10
jb 0x4adc66
mov esi, dword [esi]
mov eax, dword [0x59e598]
test al, 1
jne 0x4adc91
or eax, 1
mov dword [0x59e598], eax
mov byte [ebp - 4], 0x1b
call fcn.004a08c0
push 0x54e860
call fcn.0050765d
add esp, 4
mov byte [ebp - 4], 0x1a
push esi
push 5
mov ecx, 0x59e5a8
call fcn.004a0b40
cmp dword [ebp + 0x240], 0x10
jb 0x4adcba
mov eax, dword [ebp + 0x22c]
test eax, eax
je 0x4adcba
push eax
call fcn.005074d4
add esp, 4
lea ecx, [ebp - 0x70]
mov byte [ebp - 4], 0x17
call fcn.0047b620
lea eax, [ebp - 0x70]
mov dword [ebp - 0x70], 0x56a6f8
push eax
call fcn.0052889f
add esp, 4
mov dword [ebp - 4], 0xe
cmp dword [ebp - 0x18], 0
je 0x4ae23a
push 0x59e46c
push 0x56a20c
push 0x17
push 0
push 0x56a1fc
call dword [sym.imp.ole32.dll_CoCreateInstance]
test eax, eax
js 0x4ae12c
mov esi, dword [ebp - 0x1c]
mov dword [ebp - 0x20], esi
mov eax, dword [esi]
mov dword [ebp - 0x14], eax
cmp eax, esi
je 0x4adf0c
cmp dword [eax + 0x24], 8
lea edi, [eax + 0x10]
jb 0x4add31
mov edx, dword [edi]
jmp 0x4add33
mov edx, edi
mov ecx, dword [0x59e46c]
test ecx, ecx
je 0x4add48
mov eax, dword [ecx]
push 0
push 0
push edx
push ecx
call dword [eax + 0xc]
test byte [0x59e598], 1
jne 0x4add72
or dword [0x59e598], 1
mov byte [ebp - 4], 0x1d
call fcn.004a08c0
push 0x54e860
call fcn.0050765d
add esp, 4
mov byte [ebp - 4], 0xe
mov eax, dword [0x596f88]
test byte [eax + 0x1c], 2
je 0x4add87
cmp byte [eax + 0x19], 5
jb 0x4add87
mov al, 1
jmp 0x4add89
xor al, al
cmp byte [0x59e5a8], 0
jne 0x4adda3
cmp byte [0x59e5a9], 0
jne 0x4adda3
test al, al
je 0x4adefc
sub esp, 8
mov byte [ebp - 4], 0x1e
lea ecx, [ebp - 0xc0]
call fcn.0047b550
lea ecx, [ebp + 0x22c]
mov byte [ebp - 4], 0x1f
call fcn.004a0cb0
mov byte [ebp - 4], 0x20
cmp dword [edi + 0x14], 8
jb 0x4addd0
mov edi, dword [edi]
mov edx, eax
lea ecx, [ebp - 0xc0]
call fcn.0047eed0
mov edx, str..InstallHelper.cpp
mov ecx, eax
call fcn.0047f130
mov edx, 0x56a378
mov ecx, eax
call fcn.0047f130
push 0x47b
mov ecx, eax
call fcn.0047b1b0
mov edx, 0x56a378
mov ecx, eax
call fcn.0047f130
mov edx, str.Enabled_debugging_for
mov ecx, eax
call fcn.0047f130
mov edx, edi
mov ecx, eax
call fcn.004a0e50
mov byte [ebp - 4], 0x1f
cmp dword [ebp + 0x240], 0x10
jb 0x4ade42
mov eax, dword [ebp + 0x22c]
test eax, eax
je 0x4ade42
push eax
call fcn.005074d4
add esp, 4
lea eax, [ebp + 0x22c]
push eax
lea ecx, [ebp - 0xc0]
call fcn.0047b6a0
mov edi, eax
mov byte [ebp - 4], 0x21
cmp dword [edi + 0x14], 0x10
jb 0x4ade62
mov edi, dword [edi]
mov eax, dword [0x59e598]
test al, 1
jne 0x4ade8d
or eax, 1
mov dword [0x59e598], eax
mov byte [ebp - 4], 0x22
call fcn.004a08c0
push 0x54e860
call fcn.0050765d
add esp, 4
mov byte [ebp - 4], 0x21
push edi
push 5
mov ecx, 0x59e5a8
call fcn.004a0b40
cmp dword [ebp + 0x240], 0x10
jb 0x4adeb6
mov eax, dword [ebp + 0x22c]
test eax, eax
je 0x4adeb6
push eax
call fcn.005074d4
add esp, 4
lea ecx, [ebp - 0x70]
mov byte [ebp - 4], 0x1e
call fcn.0047b620
lea eax, [ebp - 0x70]
mov dword [ebp - 0x70], 0x56a6f8
push eax
call fcn.0052889f
add esp, 4
mov dword [ebp - 4], 0xe
lea ecx, [ebp - 0x14]
call fcn.00496c70
mov eax, dword [ebp - 0x14]
jmp 0x4add16
lea ecx, [ebp - 0x14]
call fcn.00496c70
mov eax, dword [ebp - 0x14]
jmp 0x4add16
push 0x1388
call dword [sym.imp.KERNEL32.dll_Sleep]
mov eax, dword [ebp - 0x1c]
mov edi, dword [0x59e46c]
mov eax, dword [eax]
mov dword [ebp - 0x14], eax
cmp eax, esi
je 0x4ae10f
cmp dword [eax + 0x24], 8
lea ebx, [eax + 0x10]
jb 0x4adf3a
mov ecx, dword [ebx]
jmp 0x4adf3c
mov ecx, ebx
test edi, edi
je 0x4adf4d
mov eax, dword [edi]
push ecx
push edi
call dword [eax + 0x10]
mov edi, dword [0x59e46c]
mov eax, dword [0x59e598]
test al, 1
jne 0x4adf7d
or dword [0x59e598], 1
mov byte [ebp - 4], 0x24
call fcn.004a08c0
push 0x54e860
call fcn.0050765d
mov byte [ebp - 4], 0xe
add esp, 4
mov edi, dword [0x59e46c]
mov eax, dword [0x596f88]
test byte [eax + 0x1c], 2
je 0x4adf92
cmp byte [eax + 0x19], 5
jb 0x4adf92
mov al, 1
jmp 0x4adf94
xor al, al
cmp byte [0x59e5a8], 0
jne 0x4adfae
cmp byte [0x59e5a9], 0
jne 0x4adfae
test al, al
je 0x4ae0ff
sub esp, 8
mov byte [ebp - 4], 0x25
lea ecx, [ebp - 0xc0]
call fcn.0047b550
lea ecx, [ebp + 0x22c]
mov byte [ebp - 4], 0x26
call fcn.004a0cb0
mov byte [ebp - 4], 0x27
cmp dword [ebx + 0x14], 8
jb 0x4adfdb
mov ebx, dword [ebx]
mov edx, eax
lea ecx, [ebp - 0xc0]
call fcn.0047eed0
mov edx, str..InstallHelper.cpp
mov ecx, eax
call fcn.0047f130
mov edx, 0x56a378
mov ecx, eax
call fcn.0047f130
push 0x485
mov ecx, eax
call fcn.0047b1b0
mov edx, 0x56a378
mov ecx, eax
call fcn.0047f130
mov edx, str.Disabled_debugging_for
mov ecx, eax
call fcn.0047f130
mov edx, ebx
mov ecx, eax
call fcn.004a0e50
mov byte [ebp - 4], 0x26
cmp dword [ebp + 0x240], 0x10
jb 0x4ae04d
mov eax, dword [ebp + 0x22c]
test eax, eax
je 0x4ae04d
push eax
call fcn.005074d4
add esp, 4
lea eax, [ebp + 0x22c]
push eax
lea ecx, [ebp - 0xc0]
call fcn.0047b6a0
mov edi, eax
mov byte [ebp - 4], 0x28
cmp dword [edi + 0x14], 0x10
jb 0x4ae06d
mov edi, dword [edi]
mov eax, dword [0x59e598]
test al, 1
jne 0x4ae098
or eax, 1
mov dword [0x59e598], eax
mov byte [ebp - 4], 0x29
call fcn.004a08c0
push 0x54e860
call fcn.0050765d
add esp, 4
mov byte [ebp - 4], 0x28
push edi
push 5
mov ecx, 0x59e5a8
call fcn.004a0b40
cmp dword [ebp + 0x240], 0x10
jb 0x4ae0c1
mov eax, dword [ebp + 0x22c]
test eax, eax
je 0x4ae0c1
push eax
call fcn.005074d4
add esp, 4
lea ecx, [ebp - 0x70]
mov byte [ebp - 4], 0x25
call fcn.0047b620
lea eax, [ebp - 0x70]
mov dword [ebp - 0x70], 0x56a6f8
push eax
call fcn.0052889f
add esp, 4
mov dword [ebp - 4], 0xe
jmp 0x4ae0f9
mov edi, dword [0x59e46c]
lea ecx, [ebp - 0x14]
call fcn.00496c70
mov eax, dword [ebp - 0x14]
jmp 0x4adf25
test edi, edi
je 0x4ae23a
mov eax, dword [edi]
push edi
call dword [eax + 8]
mov dword [0x59e46c], 0
jmp 0x4ae23a
call fcn.004a0950
mov edx, eax
mov eax, dword [0x596f88]
test byte [eax + 0x1c], 2
je 0x4ae148
cmp byte [eax + 0x19], 2
jb 0x4ae148
mov cl, 1
jmp 0x4ae14a
xor cl, cl
cmp byte [edx], 0
jne 0x4ae15d
cmp byte [edx + 1], 0
jne 0x4ae15d
test cl, cl
je 0x4ae23a
sub esp, 8
mov byte [ebp - 4], 0x2b
lea ecx, [ebp - 0xc0]
call fcn.0047b550
lea ecx, [ebp + 0x22c]
mov byte [ebp - 4], 0x2c
call fcn.004a0cb0
mov edx, eax
mov byte [ebp - 4], 0x2d
lea ecx, [ebp - 0xc0]
call fcn.0047eed0
mov edx, str..InstallHelper.cpp
mov ecx, eax
call fcn.0047f130
mov edx, 0x56a378
mov ecx, eax
call fcn.0047f130
push 0x48d
mov ecx, eax
call fcn.0047b1b0
mov edx, 0x56a378
mov ecx, eax
call fcn.0047f130
mov edx, str.Failed_to_create_IDebugSettings_interface
mov ecx, eax
call fcn.0047f130
lea ecx, [ebp + 0x22c]
mov byte [ebp - 4], 0x2c
call fcn.0047ac60
lea eax, [ebp + 0x22c]
push eax
lea ecx, [ebp - 0xc0]
call fcn.0047b6a0
mov esi, eax
mov byte [ebp - 4], 0x2e
cmp dword [esi + 0x14], 0x10
jb 0x4ae1fa
mov esi, dword [esi]
call fcn.004a0950
push esi
push 2
mov ecx, eax
call fcn.004a0b40
lea ecx, [ebp + 0x22c]
call fcn.0047ac60
lea ecx, [ebp - 0x70]
mov byte [ebp - 4], 0x2b
call fcn.0047b620
lea eax, [ebp - 0x70]
mov dword [ebp - 0x70], 0x56a6f8
push eax
call fcn.0052889f
add esp, 4
mov dword [ebp - 4], 0xe
mov eax, dword [0x59e598]
test al, 1
jne 0x4ae264
or dword [0x59e598], 1
mov byte [ebp - 4], 0x30
call fcn.004a08c0
push 0x54e860
call fcn.0050765d
add esp, 4
mov byte [ebp - 4], 0xe
mov eax, dword [0x596f88]
test byte [eax + 0x1c], 2
je 0x4ae27f
cmp byte [eax + 0x19], 5
jb 0x4ae27f
mov al, 1
jmp 0x4ae281
xor al, al
cmp byte [0x59e5a8], 0
jne 0x4ae29b
cmp byte [0x59e5a9], 0
jne 0x4ae29b
test al, al
je 0x4ae3bc
sub esp, 8
mov byte [ebp - 4], 0x31
lea ecx, [ebp - 0xc0]
call fcn.0047b550
lea ecx, [ebp + 0x22c]
mov byte [ebp - 4], 0x32
call fcn.004a0cb0
mov edx, eax
mov byte [ebp - 4], 0x33
lea ecx, [ebp - 0xc0]
call fcn.0047eed0
mov edx, str..InstallHelper.cpp
mov ecx, eax
call fcn.0047f130
mov edx, 0x56a378
mov ecx, eax
call fcn.0047f130
push 0x491
mov ecx, eax
call fcn.0047b1b0
mov edx, 0x56a378
mov ecx, eax
call fcn.0047f130
mov edx, str.Exiting_ResumeWindowsStoreApps
mov ecx, eax
call fcn.0047f130
mov byte [ebp - 4], 0x32
cmp dword [ebp + 0x240], 0x10
jb 0x4ae329
mov eax, dword [ebp + 0x22c]
test eax, eax
je 0x4ae329
push eax
call fcn.005074d4
add esp, 4
lea eax, [ebp + 0x22c]
push eax
lea ecx, [ebp - 0xc0]
call fcn.0047b6a0
mov esi, eax
mov byte [ebp - 4], 0x34
cmp dword [esi + 0x14], 0x10
jb 0x4ae349
mov esi, dword [esi]
mov eax, dword [0x59e598]
test al, 1
jne 0x4ae374
or eax, 1
mov dword [0x59e598], eax
mov byte [ebp - 4], 0x35
call fcn.004a08c0
push 0x54e860
call fcn.0050765d
add esp, 4
mov byte [ebp - 4], 0x34
push esi
push 5
mov ecx, 0x59e5a8
call fcn.004a0b40
cmp dword [ebp + 0x240], 0x10
jb 0x4ae39d
mov eax, dword [ebp + 0x22c]
test eax, eax
je 0x4ae39d
push eax
call fcn.005074d4
add esp, 4
lea ecx, [ebp - 0x70]
mov byte [ebp - 4], 0x31
call fcn.0047b620
lea eax, [ebp - 0x70]
mov dword [ebp - 0x70], 0x56a6f8
push eax
call fcn.0052889f
add esp, 4
mov eax, dword [ebp - 0x1c]
lea ecx, [ebp - 0x1c]
push eax
push dword [eax]
lea eax, [ebp - 0x24]
push eax
call fcn.004ae580
mov eax, dword [ebp - 0x1c]
test eax, eax
je 0x4ae3de
push eax
call fcn.005074d4
add esp, 4
mov al, 1
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [ebp + 0x44c]
xor ecx, ebp
call fcn.00506c7d
lea esp, [ebp + 0x450]
pop ebp
ret