Function at 0x442700
Capabilities:
Check if file exists
Delete file
Get file attributes
Persist via run registry key

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x44ead2
mov eax, dword fs:[0]
push eax
sub esp, 0x88c
mov eax, dword [0x46972c]
xor eax, ebp
mov dword [ebp - 0x10], eax
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov dword [ebp - 0x898], ecx
xor eax, eax
mov word [ebp - 0x21c], ax
push 0x206
push 0
lea ecx, [ebp - 0x21a]
push ecx
call fcn.00422660
add esp, 0xc
xor edx, edx
mov word [ebp - 0x424], dx
push 0x206
push 0
lea eax, [ebp - 0x422]
push eax
call fcn.00422660
add esp, 0xc
lea ecx, [ebp - 0x894]
call fcn.00449a20
mov dword [ebp - 4], 0
push 0x456c3f
push str.Check_update_software_again_after_installing_udpate_SDM
mov ecx, dword [ebp - 0x898]
add ecx, 0xb8c
push ecx
lea ecx, [ebp - 0x894]
call fcn.0044a040
lea edx, [ebp - 0x424]
push edx
push str.Common_AppData
push str.SoftwareMicrosoftWindowsCurrentVersionExplorerShell_Folders
push reloc.OLEAUT32.dll_SysReAllocString
lea ecx, [ebp - 0x894]
call fcn.00449690
push str.HPHP_SoftPaq_Download_Manager_
lea eax, [ebp - 0x424]
push eax
call dword [sym.imp.KERNEL32.dll_lstrcatW]
lea ecx, [ebp - 0x424]
push ecx
lea edx, [ebp - 0x21c]
push edx
call dword [sym.imp.KERNEL32.dll_lstrcpyW]
push str.sp35546.exe
lea eax, [ebp - 0x21c]
push eax
call dword [sym.imp.KERNEL32.dll_lstrcatW]
lea ecx, [ebp - 0x21c]
push ecx
call dword [sym.imp.KERNEL32.dll_GetFileAttributesW]
cmp eax, 0xffffffff
je 0x44281b
lea edx, [ebp - 0x21c]
push edx
call dword [sym.imp.KERNEL32.dll_DeleteFileW]
lea eax, [ebp - 0x424]
push eax
lea ecx, [ebp - 0x21c]
push ecx
call dword [sym.imp.KERNEL32.dll_lstrcpyW]
push str.SoftpaqReport.csv
lea edx, [ebp - 0x21c]
push edx
call dword [sym.imp.KERNEL32.dll_lstrcatW]
lea eax, [ebp - 0x21c]
push eax
call dword [sym.imp.KERNEL32.dll_GetFileAttributesW]
cmp eax, 0xffffffff
je 0x442860
lea ecx, [ebp - 0x21c]
push ecx
call dword [sym.imp.KERNEL32.dll_DeleteFileW]
mov edx, dword [ebp - 0x898]
add edx, 0xe2dc
push edx
lea eax, [ebp - 0x21c]
push eax
call dword [sym.imp.KERNEL32.dll_lstrcpyW]
push str.__runhidden__autoreport
lea ecx, [ebp - 0x21c]
push ecx
call dword [sym.imp.KERNEL32.dll_lstrcatW]
lea edx, [ebp - 0x21c]
push edx
push str.Launch_Softpaq_Download_Manager_with_Cmd___s
mov eax, dword [ebp - 0x898]
add eax, 0x984
push eax
call dword [sym.imp.USER32.dll_wsprintfW]
add esp, 0xc
push 0x456c9e
mov ecx, dword [ebp - 0x898]
add ecx, 0x984
push ecx
mov edx, dword [ebp - 0x898]
add edx, 0xb8c
push edx
lea ecx, [ebp - 0x894]
call fcn.0044a040
mov eax, dword [ebp - 0x898]
mov dword [eax + 0x140], 0xf
mov ecx, dword [ebp - 0x898]
mov dword [ecx + 0x14c], 0
push 0x11d
push 0x1b8
mov ecx, dword [ebp - 0x898]
call fcn.0043d050
mov ecx, dword [ebp - 0x898]
call fcn.0043ca30
movzx edx, al
test edx, edx
je 0x442930
push 0x8a
mov ecx, dword [ebp - 0x898]
call fcn.0040f39b
jmp 0x442940
push 0x84
mov ecx, dword [ebp - 0x898]
call fcn.0040f39b
lea eax, [ebp - 0x21c]
push eax
mov ecx, dword [ebp - 0x898]
call fcn.00442650
test eax, eax
je 0x4429ac
push 0x456c9f
push str.Set_Enter_SDM_REPORT_MODE
mov ecx, dword [ebp - 0x898]
add ecx, 0xb8c
push ecx
lea ecx, [ebp - 0x894]
call fcn.0044a040
push 0x43c3d0
push 0x3e8
push 0x3de
mov ecx, dword [ebp - 0x898]
call fcn.00402490
push 0x43c3d0
push 0x927c0
push 0x3e0
mov ecx, dword [ebp - 0x898]
call fcn.00402490
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x894]
call fcn.00449a00
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
call fcn.00422647
mov esp, ebp
pop ebp
ret