Function at 0x48d710
Capabilities:
Link many functions at runtime
Set current directory

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x210
mov eax, dword [0x53f4a0]
xor eax, ebp
mov dword [ebp - 4], eax
push ebx
xor ebx, ebx
push esi
mov esi, ecx
push 0x104
lea eax, [ebp - 0x210]
push eax
push ebx
mov dword [esi], ebx
mov dword [esi + 4], ebx
mov dword [esi + 0x10], ebx
mov dword [esi + 0x14], ebx
mov dword [esi + 0x18], ebx
mov dword [esi + 0x1c], ebx
mov dword [esi + 0x20], ebx
mov dword [esi + 0x24], ebx
mov dword [esi + 0x28], ebx
mov dword [esi + 0x2c], ebx
mov dword [esi + 0x30], ebx
mov dword [esi + 0x34], ebx
mov dword [esi + 0x38], ebx
mov dword [esi + 0x3c], ebx
mov dword [esi + 0x40], ebx
mov dword [esi + 0x44], ebx
mov dword [esi + 0x48], ebx
mov dword [esi + 0x4c], ebx
mov dword [esi + 0x50], ebx
mov dword [esi + 0x54], ebx
mov dword [esi + 0x58], ebx
mov dword [esi + 0x5c], ebx
mov dword [esi + 0x60], ebx
mov dword [esi + 0x64], ebx
mov dword [esi + 0x68], ebx
mov dword [esi + 0x6c], ebx
mov dword [esi + 0x70], ebx
mov dword [esi + 0x74], ebx
mov dword [esi + 0x78], ebx
mov dword [esi + 0x7c], ebx
mov dword [esi + 0x80], ebx
mov dword [esi + 0x84], ebx
mov dword [esi + 0x8c], ebx
mov dword [esi + 0x90], ebx
mov dword [esi + 0x88], ebx
call dword [sym.imp.KERNEL32.dll_GetModuleFileNameW]
lea ecx, [ebp - 0x210]
push 0x5c
push ecx
call fcn.004ea650
xor edx, edx
mov word [eax + 2], dx
add esp, 8
lea eax, [ebp - 0x210]
push eax
call dword [sym.imp.KERNEL32.dll_SetCurrentDirectoryW]
push str.IEFix.dll
call dword [sym.imp.KERNEL32.dll_LoadLibraryW]
mov dword [esi], eax
cmp eax, ebx
je 0x48d9d4
push edi
mov edi, dword [sym.imp.KERNEL32.dll_GetProcAddress]
push str.CreateIEFixer
push eax
call edi
mov ecx, dword [esi]
push str.FreeIEFixer
push ecx
mov dword [esi + 8], eax
call edi
mov edx, dword [esi]
push str.IETitleChanged
push edx
mov dword [esi + 0xc], eax
call edi
mov dword [esi + 0x10], eax
mov eax, dword [esi]
push str.FixIETitle
push eax
call edi
mov ecx, dword [esi]
push str.IEStartLocalPageChanged
push ecx
mov dword [esi + 0x14], eax
call edi
mov edx, dword [esi]
push str.FixIEStartLocalPage
push edx
mov dword [esi + 0x18], eax
call edi
mov dword [esi + 0x1c], eax
mov eax, dword [esi]
push str.IEExtensionsChangedByUnknown
push eax
call edi
mov ecx, dword [esi]
push str.FixIEExtensionsByUnknown
push ecx
mov dword [esi + 0x20], eax
call edi
mov edx, dword [esi]
push str.IERightMenuChangedByUnknown
push edx
mov dword [esi + 0x24], eax
call edi
mov dword [esi + 0x28], eax
mov eax, dword [esi]
push str.FixIERightMenuByUnknown
push eax
call edi
mov ecx, dword [esi]
push str.IESearchChanged
push ecx
mov dword [esi + 0x2c], eax
call edi
mov edx, dword [esi]
push str.FixIESearch
push edx
mov dword [esi + 0x30], eax
call edi
mov dword [esi + 0x34], eax
mov eax, dword [esi]
push str.IESearch2Changed
push eax
call edi
mov ecx, dword [esi]
push str.FixIESearch2
push ecx
mov dword [esi + 0x38], eax
call edi
mov edx, dword [esi]
push str.IELinksFolderNameChanged
push edx
mov dword [esi + 0x3c], eax
call edi
mov dword [esi + 0x40], eax
mov eax, dword [esi]
push str.FixIELinksFolderName
push eax
call edi
mov dword [esi + 0x44], eax
mov ecx, dword [esi]
push str.IEBrowserDesktopIcoChanged
push ecx
call edi
mov edx, dword [esi]
push str.FixIEBrowserDesktopIco
push edx
mov dword [esi + 0x48], eax
call edi
mov dword [esi + 0x4c], eax
mov eax, dword [esi]
push str.FixIEShellIcos
push eax
call edi
mov ecx, dword [esi]
push str.FixIEProtocolDefaultSetting
push ecx
mov dword [esi + 0x50], eax
call edi
mov edx, dword [esi]
push str.IEShellOpenChanged
push edx
mov dword [esi + 0x54], eax
call edi
mov dword [esi + 0x58], eax
mov eax, dword [esi]
push str.FixIEShellOpen
push eax
call edi
mov ecx, dword [esi]
push str.OutLookWindowTitleChanged
push ecx
mov dword [esi + 0x5c], eax
call edi
mov edx, dword [esi]
push str.FixOutLookWindowTitle
push edx
mov dword [esi + 0x60], eax
call edi
mov dword [esi + 0x64], eax
mov eax, dword [esi]
push str.WinlogonChanged
push eax
call edi
mov ecx, dword [esi]
push str.FixWinlogon
push ecx
mov dword [esi + 0x68], eax
call edi
mov edx, dword [esi]
push str.WinLogonShellSystemChanged
push edx
mov dword [esi + 0x6c], eax
call edi
mov dword [esi + 0x70], eax
mov eax, dword [esi]
push str.FixWinLogonShellSystem
push eax
call edi
mov ecx, dword [esi]
push str.WindowsStartMenuIsNormal
push ecx
mov dword [esi + 0x74], eax
call edi
mov edx, dword [esi]
push str.FixWindowsStartMenu2Normal
push edx
mov dword [esi + 0x78], eax
call edi
mov dword [esi + 0x7c], eax
mov eax, dword [esi]
push str.HasRunOnece
push eax
call edi
mov ecx, dword [esi]
push str.ClearRunOnece
push ecx
mov dword [esi + 0x80], eax
call edi
mov dword [esi + 0x84], eax
push str.WinINIStartRunSelfChanged
mov edx, dword [esi]
push edx
call edi
mov dword [esi + 0x8c], eax
mov eax, dword [esi]
push str.FixWinINIStartRunSelf
push eax
call edi
mov ecx, dword [esi]
push str.FixFileShellExecuteHooks
push ecx
mov dword [esi + 0x90], eax
call edi
mov dword [esi + 0x88], eax
mov eax, dword [esi + 8]
pop edi
cmp eax, ebx
je 0x48d9d4
call eax
mov dword [esi + 4], eax
mov ecx, dword [ebp - 4]
pop esi
xor ecx, ebp
pop ebx
call fcn.004ea5a8
mov esp, ebp
pop ebp
ret