Function at 0x44db80
Capabilities:
Check if file exists
Query or enumerate registry value
Read .ini file

Disassembly:
push 0xffffffffffffffff
push 0x4b991b
mov eax, dword fs:[0]
push eax
sub esp, 0x664
mov eax, dword [0x4e44b4]
xor eax, esp
mov dword [esp + 0x660], eax
push ebx
push esi
push edi
mov eax, dword [0x4e44b4]
xor eax, esp
push eax
lea eax, [esp + 0x674]
mov dword fs:[0], eax
xor ebx, ebx
push 0x206
lea eax, [esp + 0x5e]
mov edi, ecx
push ebx
push eax
mov dword [esp + 0x28], edi
mov word [esp + 0x64], bx
call fcn.00499a30
push 0x206
lea ecx, [esp + 0x272]
push ebx
push ecx
mov word [esp + 0x278], bx
call fcn.00499a30
push 0x206
lea edx, [esp + 0x486]
push ebx
push edx
mov word [esp + 0x48c], bx
call fcn.00499a30
add esp, 0x24
lea eax, [esp + 0x14]
push eax
push 0x20019
push ebx
push str.SoftwareTencentTTraveler
push closesocket
mov dword [esp + 0x2c], 0x104
call dword [sym.imp.ADVAPI32.dll_RegOpenKeyExW]
test eax, eax
jne 0x44dcb4
mov eax, dword [esp + 0x14]
lea ecx, [esp + 0x18]
push ecx
lea edx, [esp + 0x5c]
push edx
push ebx
push ebx
push str.ConfigPath
push eax
call dword [sym.imp.ADVAPI32.dll_RegQueryValueExW]
test eax, eax
jne 0x44dcb4
lea eax, [esp + 0x58]
lea edx, [eax + 2]
mov edi, edi
mov cx, word [eax]
add eax, 2
cmp cx, bx
jne 0x44dc60
sub eax, edx
sar eax, 1
je 0x44dcb4
lea eax, [esp + 0x58]
lea edx, [eax + 2]
jmp 0x44dc80
mov cx, word [eax]
add eax, 2
cmp cx, bx
jne 0x44dc80
sub eax, edx
sar eax, 1
cmp word [esp + eax*2 + 0x56], 0x5c
jne 0x44dcb4
lea eax, [esp + 0x58]
lea edx, [eax + 2]
mov edi, edi
mov cx, word [eax]
add eax, 2
cmp cx, bx
jne 0x44dca0
sub eax, edx
sar eax, 1
mov word [esp + eax*2 + 0x56], bx
lea eax, [esp + 0x58]
lea edx, [eax + 2]
jmp 0x44dcc0
mov cx, word [eax]
add eax, 2
cmp cx, bx
jne 0x44dcc0
sub eax, edx
sar eax, 1
jne 0x44dddb
lea ecx, [esp + 0x3c]
call fcn.00475600
lea ecx, [esp + 0x3c]
push ecx
push 0x6c
mov dword [esp + 0x684], ebx
call fcn.00476de0
add esp, 8
push 0xffffffffffffffff
push ebx
lea edx, [esp + 0x44]
mov edi, 7
push edx
lea ecx, [esp + 0x2c]
mov dword [esp + 0x44], edi
mov dword [esp + 0x40], ebx
mov word [esp + 0x30], bx
call fcn.004031a0
mov ecx, dword [esp + 0x24]
mov esi, 8
cmp dword [esp + 0x38], esi
jae 0x44dd2a
lea ecx, [esp + 0x24]
lea edx, [esp + 0x58]
mov edi, edi
movzx eax, word [ecx]
mov word [edx], ax
add ecx, 2
add edx, 2
cmp ax, bx
jne 0x44dd30
lea eax, [esp + 0x58]
lea edx, [eax + 2]
jmp 0x44dd50
mov cx, word [eax]
add eax, 2
cmp cx, bx
jne 0x44dd50
sub eax, edx
sar eax, 1
cmp word [esp + eax*2 + 0x56], 0x5c
jne 0x44dd84
lea eax, [esp + 0x58]
lea edx, [eax + 2]
mov edi, edi
mov cx, word [eax]
add eax, 2
cmp cx, bx
jne 0x44dd70
sub eax, edx
sar eax, 1
mov word [esp + eax*2 + 0x56], bx
lea eax, [esp + 0x58]
push eax
push str._sTencentTencentTraveler100
push 0x208
mov ecx, eax
push 0x104
push ecx
call fcn.00496163
add esp, 0x14
cmp dword [esp + 0x38], esi
jb 0x44ddb6
mov edx, dword [esp + 0x24]
push edx
call fcn.00495fd1
add esp, 4
lea ecx, [esp + 0x3c]
mov dword [esp + 0x38], edi
mov dword [esp + 0x34], ebx
mov word [esp + 0x24], bx
mov dword [esp + 0x67c], 0xffffffff
call fcn.00475620
mov edi, dword [esp + 0x1c]
lea eax, [esp + 0x58]
lea edx, [eax + 2]
mov cx, word [eax]
add eax, 2
cmp cx, bx
jne 0x44dde2
sub eax, edx
sar eax, 1
je 0x44dea9
mov esi, dword [sym.imp.SHLWAPI.dll_PathFileExistsW]
lea eax, [esp + 0x58]
push eax
call esi
test eax, eax
je 0x44dea9
lea ecx, [esp + 0x58]
push ecx
push str._sTtConf.dat
push 0x208
lea edx, [esp + 0x26c]
push 0x104
push edx
call fcn.00496163
add esp, 0x14
lea eax, [esp + 0x260]
push eax
call esi
test eax, eax
je 0x44dea9
lea ecx, [esp + 0x260]
push ecx
push 0x64
lea edx, [esp + 0x470]
push edx
push 0x4cadec
push str.strHomePageUrl
push str.COMMON
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileStringW]
mov edx, str.WWW.QQ.COM
lea ecx, [esp + 0x468]
call fcn.0044d760
test eax, eax
jl 0x44de80
mov byte [edi + 0x1c], 1
jmp 0x44dea9
cmp byte [esp + 0x684], bl
je 0x44dea6
lea eax, [esp + 0x260]
push eax
push str.http:__www.qq.com_
push str.strHomePageUrl
push str.COMMON
call dword [sym.imp.KERNEL32.dll_WritePrivateProfileStringW]
mov byte [edi + 0x1c], bl
mov ecx, dword [esp + 0x14]
push ecx
call dword [sym.imp.ADVAPI32.dll_RegCloseKey]
mov ecx, dword [esp + 0x674]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [esp + 0x660]
xor ecx, esp
call fcn.00495cb8
add esp, 0x670
ret 4