Function at 0x4dcaa0
Capabilities:
Read .ini file

Disassembly:
push 0xffffffffffffffff
mov eax, dword fs:[0]
push 0x4fbe4b
push eax
mov eax, 0x1db0
mov dword fs:[0], esp
call fcn.004ba380
push ebx
push ebp
push esi
mov esi, ecx
push edi
lea ecx, [esp + 0x434]
mov dword [esp + 0x10], esi
call fcn.004f2180
mov eax, dword [esp + 0x1dd0]
xor ebp, ebp
push ebp
push eax
lea ecx, [esp + 0x43c]
mov dword [esp + 0x1dd0], ebp
call fcn.004f21e0
push ebp
lea ecx, [esp + 0x438]
mov dword [esp + 0x1c], ebp
call fcn.004f3240
mov ebx, eax
cmp ebx, ebp
je 0x4dce9e
jmp 0x4dcb12
xor ebp, ebp
cmp dword [esi + 0x6278c], ebp
jne 0x4dce9e
cmp dword [ebx + 0xc], ebp
je 0x4dcbee
mov ecx, 0x81
xor eax, eax
lea edi, [esp + 0x22e]
mov word [esp + 0x22c], bp
rep stosd dword es:[edi], eax
lea ecx, [ebx + 0x201a]
lea edx, [esp + 0x22c]
push ecx
push 0x50f4e4
push 0x103
push edx
stosw word es:[edi], ax
call dword [sym.imp.MSVCRT.dll__snwprintf]
add esp, 0x10
lea eax, [esp + 0x22c]
push eax
push ebp
push str.BEST
push str.InternetShortcut
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileIntW]
mov ebp, eax
mov ecx, 0x411
xor eax, eax
lea edi, [esp + 0xd7a]
mov word [esp + 0xd78], 0
lea edx, [esp + 0xd78]
rep stosd dword es:[edi], eax
lea ecx, [esp + 0x22c]
push ecx
push 0x824
push edx
push 0x52a480
push 0x5236c0
push str.InternetShortcut
stosw word es:[edi], ax
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileStringW]
mov eax, dword [esp + 0x1dd4]
push 0
push ebp
push 1
push eax
lea ecx, [esp + 0xd88]
push 0
add ebx, 0x81a
push ecx
push ebx
mov ecx, esi
call fcn.004da980
jmp 0x4dce7e
mov edx, dword [esp + 0x1dd4]
push ebp
push ebp
push 2
push edx
push ebp
lea eax, [ebx + 0x81a]
push ebp
push eax
mov ecx, esi
call fcn.004da980
mov ebp, eax
mov eax, dword [esp + 0x1dd8]
test eax, eax
je 0x4dcc2c
push eax
add ebx, 0x201a
push ebp
push ebx
mov ecx, esi
call fcn.004dcaa0
jmp 0x4dce7e
mov ecx, 0x82
xor eax, eax
lea edi, [esp + 0x20]
add ebx, 0x201a
rep stosd dword es:[edi], eax
push ebx
push 0x50f4e4
lea ecx, [esp + 0x28]
push 0x103
push ecx
mov dword [esp + 0x238], eax
call dword [sym.imp.MSVCRT.dll__snwprintf]
mov ecx, dword [esi + 0x62774]
mov edx, dword [esi + 0x62778]
lea ebx, [esi + 0x6276c]
sub edx, ecx
mov eax, 0x3e88cb3d
add esp, 0x10
imul edx
sar edx, 7
mov eax, edx
mov dword [esp + 0x228], ebp
shr eax, 0x1f
add edx, eax
mov ebp, ecx
cmp edx, 1
jae 0x4dcd9c
mov esi, dword [ebx + 4]
test esi, esi
je 0x4dccb9
mov edx, ecx
mov eax, 0x3e88cb3d
sub edx, esi
imul edx
sar edx, 7
mov eax, edx
shr eax, 0x1f
add edx, eax
cmp edx, 1
mov edi, edx
ja 0x4dccbe
mov edi, 1
test esi, esi
jne 0x4dccc6
xor edx, edx
jmp 0x4dccd9
sub ecx, esi
mov eax, 0x3e88cb3d
imul ecx
sar edx, 7
mov ecx, edx
shr ecx, 0x1f
add edx, ecx
lea eax, [edx + edi]
test eax, eax
mov dword [esp + 0x1c], eax
jge 0x4dcce6
xor eax, eax
mov edx, eax
shl edx, 6
add edx, eax
lea eax, [eax + edx*2]
shl eax, 2
push eax
call sub.MSVCRT.dll_void____cdecl_operator_new_unsigned_int_
mov esi, dword [ebx + 4]
add esp, 4
cmp esi, ebp
mov dword [esp + 0x14], eax
mov edi, eax
je 0x4dcd23
push esi
push edi
call fcn.004f1920
add esi, 0x20c
add esp, 8
add edi, 0x20c
cmp esi, ebp
jne 0x4dcd09
lea ecx, [esp + 0x20]
push ecx
push 1
push edi
mov ecx, ebx
call fcn.004f18e0
mov edx, dword [ebx + 8]
add edi, 0x20c
push edi
push edx
push ebp
mov ecx, ebx
call fcn.004e1aa0
mov eax, dword [ebx + 8]
mov ecx, dword [ebx + 4]
push eax
push ecx
mov ecx, ebx
call fcn.00480b50
mov eax, dword [ebx + 4]
push eax
call fcn.004ba355
mov eax, dword [esp + 0x20]
mov esi, dword [esp + 0x18]
mov edx, eax
add esp, 4
shl edx, 6
add edx, eax
lea eax, [eax + edx*2]
lea ecx, [esi + eax*4]
mov dword [ebx + 0xc], ecx
mov ecx, ebx
call fcn.004df260
inc eax
mov dword [ebx + 4], esi
mov edx, eax
shl edx, 6
add edx, eax
lea eax, [eax + edx*2]
lea ecx, [esi + eax*4]
mov esi, dword [esp + 0x10]
mov dword [ebx + 8], ecx
jmp 0x4dce7e
mov edx, ecx
mov eax, 0x3e88cb3d
sub edx, ebp
imul edx
sar edx, 7
mov eax, edx
shr eax, 0x1f
add edx, eax
cmp edx, 1
jae 0x4dce13
lea edx, [ebp + 0x20c]
push edx
push ecx
push ebp
mov ecx, ebx
call fcn.004e1aa0
mov edi, dword [ebx + 8]
lea eax, [esp + 0x20]
mov ecx, edi
push eax
sub ecx, ebp
mov eax, 0x3e88cb3d
imul ecx
sar edx, 7
mov ecx, edx
mov eax, 1
shr ecx, 0x1f
add edx, ecx
mov ecx, ebx
sub eax, edx
push eax
push edi
call fcn.004f18e0
mov eax, dword [ebx + 8]
cmp ebp, eax
je 0x4dce77
mov edi, ebp
add ebp, 0x20c
mov ecx, 0x83
lea esi, [esp + 0x20]
cmp ebp, eax
rep movsd dword es:[edi], dword [esi]
jne 0x4dcdfa
jmp 0x4dce73
lea eax, [ecx - 0x20c]
push ecx
push ecx
push eax
mov ecx, ebx
mov dword [esp + 0x20], eax
call fcn.004e1aa0
mov edx, dword [ebx + 8]
lea eax, [edx - 0x20c]
cmp ebp, eax
je 0x4dce52
sub eax, 0x20c
sub edx, 0x20c
mov ecx, 0x83
mov esi, eax
mov edi, edx
cmp eax, ebp
rep movsd dword es:[edi], dword [esi]
jne 0x4dce34
mov esi, dword [esp + 0x10]
lea eax, [ebp + 0x20c]
cmp ebp, eax
je 0x4dce77
mov edi, ebp
add ebp, 0x20c
mov ecx, 0x83
lea esi, [esp + 0x20]
cmp ebp, eax
rep movsd dword es:[edi], dword [esi]
jne 0x4dce5c
mov esi, dword [esp + 0x10]
add dword [ebx + 8], 0x20c
mov eax, dword [esp + 0x18]
lea ecx, [esp + 0x434]
inc eax
push eax
mov dword [esp + 0x1c], eax
call fcn.004f3240
mov ebx, eax
test ebx, ebx
jne 0x4dcb10
lea ecx, [esp + 0x434]
mov dword [esp + 0x1dc8], 0xffffffff
call fcn.004f21d0
mov ecx, dword [esp + 0x1dc0]
pop edi
pop esi
pop ebp
pop ebx
mov dword fs:[0], ecx
add esp, 0x1dbc
ret 0xc