Function at 0x4e9551
Capabilities:
Enumerate gui resources

Disassembly:
push ebp
sub esp, 0x40
lea ebp, [esp - 4]
mov eax, dword [0x601328]
xor eax, ebp
mov dword [ebp + 0x40], eax
push 0x8c
mov eax, 0x5752fe
call fcn.0054d40c
mov esi, ecx
xor ebx, ebx
call fcn.004e843c
test al, al
je 0x4e96c7
call fcn.00462c28
cmp byte [eax], bl
jne 0x4e95c5
lea eax, [ebp - 0x98]
push eax
call fcn.00409b60
lea eax, [ebp - 0x90]
push str.CIEApproveExtension::EnumIEWindows:_IsApproveExtension:_true
push eax
mov dword [ebp - 4], ebx
call fcn.00407390
pop ecx
pop ecx
lea ecx, [ebp + 0x24]
lea eax, [ebp - 0x98]
call fcn.00407170
mov byte [ebp - 4], 1
jmp 0x4e9711
lea eax, [ebp - 0x90]
push eax
mov dword [ebp - 4], 2
call fcn.004068d0
mov byte [ebp - 4], 3
call fcn.00462c28
lea esi, [ebp]
call fcn.00406720
mov byte [ebp - 4], 4
cmp dword [eax + 0x18], 8
jb 0x4e95f8
mov esi, dword [eax + 4]
jmp 0x4e95fb
lea esi, [eax + 4]
lea eax, [ebp - 0x90]
push 0x5950f8
push eax
call fcn.00407390
pop ecx
pop ecx
push esi
push eax
call fcn.00407390
pop ecx
pop ecx
push 0x5950f0
push eax
call fcn.00407390
pop ecx
pop ecx
push str.CIEApproveExtension::EnumIEWindows:_IsApproveExtension:_true
push eax
call fcn.00407390
pop ecx
pop ecx
lea ecx, [ebp]
mov byte [ebp - 4], 3
call fcn.00409c40
lea eax, [ebp + 0x1c]
push eax
call sub.log4cplusU.dll_public:_static_class_log4cplus::Logger___cdecl_log4cplus::Logger::getRoot_void_
pop ecx
mov esi, 0x2710
push esi
lea ecx, [ebp + 0x1c]
mov byte [ebp - 4], 5
call sub.log4cplusU.dll_public:_bool___thiscall_log4cplus::Logger::isEnabledFor_int_const
cmp al, bl
je 0x4e968b
lea ecx, [ebp]
lea eax, [ebp - 0x90]
call fcn.00406700
push 0xde
push str..IEApproveExtension.cpp
push eax
push esi
lea ecx, [ebp + 0x1c]
mov byte [ebp - 4], 6
call sub.log4cplusU.dll_public:_void___thiscall_log4cplus::Logger::forcedLog_int__class_std::basic_string_wchar_t__struct_std::char_traits_wchar_t___class_std::allocator_wchar_t___const___char_const___int_const
lea ecx, [ebp]
call fcn.00409c40
lea ecx, [ebp + 0x1c]
mov byte [ebp - 4], 3
call sub.log4cplusU.dll_public_virtual:_void___thiscall_log4cplus::Logger::destructor_void_
mov byte [ebp - 4], 2
jmp 0x4e980d
cmp byte [esi + 4], bl
je 0x4e9844
call fcn.00462c28
cmp byte [eax], bl
jne 0x4e9737
lea eax, [ebp - 0x98]
push eax
call fcn.00409b60
lea eax, [ebp - 0x90]
push str.CIEApproveExtension::EnumIEWindows:_m_bSendIEMsg__true
push eax
mov dword [ebp - 4], 9
call fcn.00407390
pop ecx
pop ecx
lea ecx, [ebp + 0x24]
lea eax, [ebp - 0x98]
call fcn.00407170
mov byte [ebp - 4], 0xa
lea ecx, [ebp + 0x24]
call fcn.00406a80
lea ecx, [ebp + 0x24]
call fcn.00409c40
or dword [ebp - 4], 0xffffffff
lea eax, [ebp - 0x98]
call fcn.00407660
mov bl, 1
jmp 0x4e9850
lea eax, [ebp - 0x90]
push eax
mov dword [ebp - 4], 0xb
call fcn.004068d0
mov byte [ebp - 4], 0xc
call fcn.00462c28
lea esi, [ebp]
call fcn.00406720
mov byte [ebp - 4], 0xd
cmp dword [eax + 0x18], 8
jb 0x4e976a
mov esi, dword [eax + 4]
jmp 0x4e976d
lea esi, [eax + 4]
lea eax, [ebp - 0x90]
push 0x5950f8
push eax
call fcn.00407390
pop ecx
pop ecx
push esi
push eax
call fcn.00407390
pop ecx
pop ecx
push 0x5950f0
push eax
call fcn.00407390
pop ecx
pop ecx
push str.CIEApproveExtension::EnumIEWindows:_m_bSendIEMsg__true
push eax
call fcn.00407390
pop ecx
pop ecx
lea ecx, [ebp]
mov byte [ebp - 4], 0xc
call fcn.00409c40
lea eax, [ebp + 0x1c]
push eax
call sub.log4cplusU.dll_public:_static_class_log4cplus::Logger___cdecl_log4cplus::Logger::getRoot_void_
pop ecx
mov esi, 0x2710
push esi
lea ecx, [ebp + 0x1c]
mov byte [ebp - 4], 0xe
call sub.log4cplusU.dll_public:_bool___thiscall_log4cplus::Logger::isEnabledFor_int_const
cmp al, bl
je 0x4e97fd
lea ecx, [ebp]
lea eax, [ebp - 0x90]
call fcn.00406700
push 0xe2
push str..IEApproveExtension.cpp
push eax
push esi
lea ecx, [ebp + 0x1c]
mov byte [ebp - 4], 0xf
call sub.log4cplusU.dll_public:_void___thiscall_log4cplus::Logger::forcedLog_int__class_std::basic_string_wchar_t__struct_std::char_traits_wchar_t___class_std::allocator_wchar_t___const___char_const___int_const
lea ecx, [ebp]
call fcn.00409c40
lea ecx, [ebp + 0x1c]
mov byte [ebp - 4], 0xc
call sub.log4cplusU.dll_public_virtual:_void___thiscall_log4cplus::Logger::destructor_void_
mov byte [ebp - 4], 0xb
lea eax, [ebp - 0x90]
call fcn.004067e0
jmp 0x4e9730
push ebx
push 0x4e9a8f
call dword [sym.imp.USER32.dll_EnumWindows]
mov al, bl
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [ebp + 0x40]
xor ecx, ebp
call fcn.0054677c
add ebp, 0x44
leave
ret