Function at 0x442ce0
Capabilities:
Persist via run registry key

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x44eb64
mov eax, dword fs:[0]
push eax
mov eax, 0x1da8
call fcn.00427d00
mov eax, dword [0x46972c]
xor eax, ebp
mov dword [ebp - 0x14], eax
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov dword [ebp - 0x1d98], ecx
xor eax, eax
mov word [ebp - 0x1d14], ax
push 0x206
push 0
lea ecx, [ebp - 0x1d12]
push ecx
call fcn.00422660
add esp, 0xc
xor edx, edx
mov word [ebp - 0xa54], dx
push 0x206
push 0
lea eax, [ebp - 0xa52]
push eax
call fcn.00422660
add esp, 0xc
xor ecx, ecx
mov word [ebp - 0x148c], cx
push 0x206
push 0
lea edx, [ebp - 0x148a]
push edx
call fcn.00422660
add esp, 0xc
mov eax, dword [0x45a1f8]
mov dword [ebp - 0xa5c], eax
xor ecx, ecx
mov word [ebp - 0x1284], cx
push 0x3fe
push 0
lea edx, [ebp - 0x1282]
push edx
call fcn.00422660
add esp, 0xc
xor eax, eax
mov word [ebp - 0x63c], ax
push 0x206
push 0
lea ecx, [ebp - 0x63a]
push ecx
call fcn.00422660
add esp, 0xc
xor edx, edx
mov word [ebp - 0x84c], dx
push 0x206
push 0
lea eax, [ebp - 0x84a]
push eax
call fcn.00422660
add esp, 0xc
xor ecx, ecx
mov word [ebp - 0x21c], cx
push 0x206
push 0
lea edx, [ebp - 0x21a]
push edx
call fcn.00422660
add esp, 0xc
xor eax, eax
mov word [ebp - 0x1b0c], ax
push 0x206
push 0
lea ecx, [ebp - 0x1b0a]
push ecx
call fcn.00422660
add esp, 0xc
xor edx, edx
mov word [ebp - 0xe74], dx
push 0x206
push 0
lea eax, [ebp - 0xe72]
push eax
call fcn.00422660
add esp, 0xc
xor ecx, ecx
mov word [ebp - 0xc6c], cx
push 0x206
push 0
lea edx, [ebp - 0xc6a]
push edx
call fcn.00422660
add esp, 0xc
xor eax, eax
mov word [ebp - 0x42c], ax
push 0x206
push 0
lea ecx, [ebp - 0x42a]
push ecx
call fcn.00422660
add esp, 0xc
lea ecx, [ebp - 0xe7c]
call fcn.00401be0
mov dword [ebp - 4], 0
lea ecx, [ebp - 0x434]
call fcn.00401be0
mov byte [ebp - 4], 1
lea ecx, [ebp - 0x18fc]
call fcn.00449a20
mov byte [ebp - 4], 2
push 0x456b62
push str.GetWebReportInfo___is_called____Clean_and_free_memory_for_web_data_structure
mov edx, dword [ebp - 0x1d98]
add edx, 0xb8c
push edx
lea ecx, [ebp - 0x18fc]
call fcn.0044a040
mov eax, dword [ebp - 0x1d98]
mov ecx, dword [ebp - 0x1d98]
mov edx, dword [ecx + 0x13c]
mov dword [eax + 0x130], edx
mov eax, dword [ebp - 0x1d98]
cmp dword [eax + 0x130], 0
je 0x442f67
mov ecx, dword [ebp - 0x1d98]
mov edx, dword [ecx + 0x130]
mov eax, dword [ebp - 0x1d98]
mov ecx, dword [edx + 0x844]
mov dword [eax + 0x134], ecx
mov edx, dword [ebp - 0x1d98]
mov eax, dword [edx + 0x130]
push eax
call dword [sym.imp.KERNEL32.dll_GlobalFree]
mov dword [ebp - 0x10], eax
cmp dword [ebp - 0x10], 0
je 0x442f4a
push str._r_n_r_n
push str.Failed_to_Free_Memory_for_Web_update_data_structure
mov ecx, dword [ebp - 0x1d98]
add ecx, 0xb8c
push ecx
lea ecx, [ebp - 0x18fc]
call fcn.0044a040
mov edx, dword [ebp - 0x1d98]
mov eax, dword [ebp - 0x1d98]
mov ecx, dword [eax + 0x134]
mov dword [edx + 0x130], ecx
jmp 0x442edf
mov edx, dword [ebp - 0x1d98]
mov dword [edx + 0x15c], 0
mov eax, dword [ebp - 0x1d98]
mov dword [eax + 0x12c], 0
mov ecx, dword [ebp - 0x1d98]
mov dword [ecx + 0x130], 0
mov edx, dword [ebp - 0x1d98]
mov dword [edx + 0x134], 0
mov eax, dword [ebp - 0x1d98]
mov dword [eax + 0x138], 0
mov ecx, dword [ebp - 0x1d98]
mov dword [ecx + 0x13c], 0
lea ecx, [ebp - 0x1d6c]
call fcn.00439730
mov byte [ebp - 4], 3
lea edx, [ebp - 0x21c]
push edx
lea eax, [ebp - 0x1d14]
push eax
lea ecx, [ebp - 0xa54]
push ecx
mov edx, dword [ebp - 0x1d98]
add edx, 0x15c
push edx
mov eax, dword [ebp - 0x1d98]
add eax, 0xb8c
push eax
lea ecx, [ebp - 0x1d6c]
call fcn.0043b630
mov dword [ebp - 0x1900], eax
cmp dword [ebp - 0x1900], 1
jne 0x4432af
push 0x45a1fc
lea ecx, [ebp - 0x148c]
push ecx
call dword [sym.imp.KERNEL32.dll_lstrcpyW]
mov edx, dword [ebp - 0x1d98]
add edx, 0xe4e8
push edx
lea eax, [ebp - 0x148c]
push eax
mov ecx, dword [ebp - 0x1d98]
add ecx, 0xb8c
push ecx
lea ecx, [ebp - 0x1d6c]
call fcn.00439a70
movzx edx, al
test edx, edx
je 0x44325e
push 0x21d
lea ecx, [ebp - 0x434]
call fcn.00402c30
push ecx
mov ecx, esp
mov dword [ebp - 0x1d70], esp
lea eax, [ebp - 0x434]
push eax
call fcn.00402820
mov dword [ebp - 0x1d9c], eax
push 0x45a318
mov ecx, dword [ebp - 0x1d98]
call fcn.0043d340
push 0x1fe
lea ecx, [ebp - 0x434]
call fcn.00402c30
push str._HP_Softpaq_Download_Manager_provides_a_simple__powerful_way_to_download_software_updates_for_HP_business_client_PC_modes.
lea ecx, [ebp - 0x434]
push ecx
lea edx, [ebp - 0x1d74]
push edx
call fcn.00401ef0
add esp, 0xc
mov dword [ebp - 0x1da0], eax
mov eax, dword [ebp - 0x1da0]
mov dword [ebp - 0x1da4], eax
mov byte [ebp - 4], 4
mov ecx, dword [ebp - 0x1da4]
push ecx
lea ecx, [ebp - 0x434]
call fcn.004029a0
mov byte [ebp - 4], 3
lea ecx, [ebp - 0x1d74]
call fcn.00401a80
push ecx
mov ecx, esp
mov dword [ebp - 0x1d78], esp
lea edx, [ebp - 0x434]
push edx
call fcn.00402820
mov dword [ebp - 0x1da8], eax
push 0x45a430
mov ecx, dword [ebp - 0x1d98]
call fcn.0043d340
lea ecx, [ebp - 0x434]
call fcn.004024c0
push eax
mov eax, dword [ebp - 0x1d98]
add eax, 0x574
push eax
call dword [sym.imp.KERNEL32.dll_lstrcpyW]
push str.HP_Softpaq_Download_Manager.htm
mov ecx, dword [ebp - 0x1d98]
add ecx, 0xe0d4
push ecx
call dword [sym.imp.KERNEL32.dll_lstrcpyW]
mov edx, dword [ebp - 0x1d98]
add edx, 0xd94
push edx
lea eax, [ebp - 0x42c]
push eax
call dword [sym.imp.KERNEL32.dll_lstrcpyW]
push 0x45a488
lea ecx, [ebp - 0x42c]
push ecx
call dword [sym.imp.KERNEL32.dll_lstrcatW]
mov edx, dword [ebp - 0x1d98]
add edx, 0xe4e8
push edx
lea eax, [ebp - 0x42c]
push eax
call dword [sym.imp.KERNEL32.dll_lstrcatW]
push 0x45a4c8
lea ecx, [ebp - 0x42c]
push ecx
call dword [sym.imp.KERNEL32.dll_lstrcatW]
lea edx, [ebp - 0x42c]
push edx
push str.Installing_Softpaq_with_Cmdline_____s
mov eax, dword [ebp - 0x1d98]
add eax, 0x984
push eax
call dword [sym.imp.USER32.dll_wsprintfW]
add esp, 0xc
push 0x456b63
mov ecx, dword [ebp - 0x1d98]
add ecx, 0x984
push ecx
mov edx, dword [ebp - 0x1d98]
add edx, 0xb8c
push edx
lea ecx, [ebp - 0x18fc]
call fcn.0044a040
lea eax, [ebp - 0x42c]
push eax
mov ecx, dword [ebp - 0x1d98]
call fcn.00442650
test eax, eax
je 0x44325e
push 0x456bd2
push str.Set_Enter_INSTALL_SDM
mov ecx, dword [ebp - 0x1d98]
add ecx, 0xb8c
push ecx
lea ecx, [ebp - 0x18fc]
call fcn.0044a040
push 0x43c3d0
push 0x3e8
push 0x37d
mov ecx, dword [ebp - 0x1d98]
call fcn.00402490
mov byte [ebp - 0x1d79], 0
mov byte [ebp - 4], 2
lea ecx, [ebp - 0x1d6c]
call fcn.00439710
mov byte [ebp - 4], 1
lea ecx, [ebp - 0x18fc]
call fcn.00449a00
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x434]
call fcn.00401a80
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0xe7c]
call fcn.00401a80
mov al, byte [ebp - 0x1d79]
jmp 0x443943
cmp dword [ebp - 0x1900], 2
jne 0x443364
mov edx, dword [ebp - 0x1d98]
cmp dword [edx + 0x14c], 0x14
jle 0x4432dd
push 0x214
lea ecx, [ebp - 0xe7c]
call fcn.00402c30
jmp 0x4432ed
push 0x213
lea ecx, [ebp - 0xe7c]
call fcn.00402c30
push ecx
mov ecx, esp
mov dword [ebp - 0x1d80], esp
lea eax, [ebp - 0xe7c]
push eax
call fcn.00402820
mov dword [ebp - 0x1dac], eax
mov ecx, dword [ebp - 0x1d98]
call fcn.0043ec10
mov byte [ebp - 0x1d81], 0
mov byte [ebp - 4], 2
lea ecx, [ebp - 0x1d6c]
call fcn.00439710
mov byte [ebp - 4], 1
lea ecx, [ebp - 0x18fc]
call fcn.00449a00
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x434]
call fcn.00401a80
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0xe7c]
call fcn.00401a80
mov al, byte [ebp - 0x1d81]
jmp 0x443943
cmp dword [ebp - 0x1900], 3
jne 0x4433f8
push 0x215
lea ecx, [ebp - 0xe7c]
call fcn.00402c30
push ecx
mov ecx, esp
mov dword [ebp - 0x1d88], esp
lea edx, [ebp - 0xe7c]
push edx
call fcn.00402820
mov dword [ebp - 0x1db0], eax
mov ecx, dword [ebp - 0x1d98]
call fcn.0043ec10
mov byte [ebp - 0x1d89], 0
mov byte [ebp - 4], 2
lea ecx, [ebp - 0x1d6c]
call fcn.00439710
mov byte [ebp - 4], 1
lea ecx, [ebp - 0x18fc]
call fcn.00449a00
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x434]
call fcn.00401a80
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0xe7c]
call fcn.00401a80
mov al, byte [ebp - 0x1d89]
jmp 0x443943
cmp dword [ebp - 0x1900], 4
jne 0x44348c
push 0x214
lea ecx, [ebp - 0xe7c]
call fcn.00402c30
push ecx
mov ecx, esp
mov dword [ebp - 0x1d90], esp
lea eax, [ebp - 0xe7c]
push eax
call fcn.00402820
mov dword [ebp - 0x1db4], eax
mov ecx, dword [ebp - 0x1d98]
call fcn.0043ec10
mov byte [ebp - 0x1d91], 0
mov byte [ebp - 4], 2
lea ecx, [ebp - 0x1d6c]
call fcn.00439710
mov byte [ebp - 4], 1
lea ecx, [ebp - 0x18fc]
call fcn.00449a00
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x434]
call fcn.00401a80
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0xe7c]
call fcn.00401a80
mov al, byte [ebp - 0x1d91]
jmp 0x443943
cmp dword [ebp - 0x1900], 5
jne 0x443831
lea ecx, [ebp - 0x1d14]
push ecx
mov edx, dword [ebp - 0x1d98]
mov eax, dword [edx + 0x15c]
push eax
push str.newer_Softpaq_update_:__SP__d___softpaq_ID______s
mov ecx, dword [ebp - 0x1d98]
add ecx, 0x984
push ecx
call dword [sym.imp.USER32.dll_wsprintfW]
add esp, 0x10
push 0x456bd3
mov edx, dword [ebp - 0x1d98]
add edx, 0x984
push edx
mov eax, dword [ebp - 0x1d98]
add eax, 0xb8c
push eax
lea ecx, [ebp - 0x18fc]
call fcn.0044a040
lea ecx, [ebp - 0x1b0c]
push ecx
push 0x45a600
push 0x45a620
push reloc.OLEAUT32.dll_SysReAllocString
lea ecx, [ebp - 0x18fc]
call fcn.00449690
push str.HPHP_SoftPaq_Download_ManagerSWDownload_sp
lea edx, [ebp - 0x1b0c]
push edx
call dword [sym.imp.KERNEL32.dll_lstrcatW]
lea eax, [ebp - 0xa60]
push eax
lea ecx, [ebp - 0xa5c]
push ecx
lea edx, [ebp - 0xa54]
push edx
call fcn.004232ec
add esp, 0xc
mov dword [ebp - 0x640], eax
lea eax, [ebp - 0xa58]
push eax
lea ecx, [ebp - 0xa5c]
push ecx
lea edx, [ebp - 0x1d14]
push edx
call fcn.004232ec
add esp, 0xc
mov dword [ebp - 0xe78], eax
lea eax, [ebp - 0x220]
push eax
lea ecx, [ebp - 0xa5c]
push ecx
lea edx, [ebp - 0x21c]
push edx
call fcn.004232ec
add esp, 0xc
mov dword [ebp - 0xe80], eax
mov dword [ebp - 0x430], 0
jmp 0x4435a8
mov eax, dword [ebp - 0x430]
add eax, 1
mov dword [ebp - 0x430], eax
mov ecx, dword [ebp - 0x1d98]
mov edx, dword [ebp - 0x430]
cmp edx, dword [ecx + 0x15c]
jge 0x443831
push 0x848
push 0x40
call dword [sym.imp.KERNEL32.dll_GlobalAlloc]
mov ecx, dword [ebp - 0x1d98]
mov dword [ecx + 0x130], eax
mov edx, dword [ebp - 0x1d98]
cmp dword [edx + 0x130], 0
je 0x44374b
lea eax, [ebp - 0x1b0c]
push eax
lea ecx, [ebp - 0xe74]
push ecx
call dword [sym.imp.KERNEL32.dll_lstrcpyW]
mov edx, dword [ebp - 0xe78]
push edx
lea eax, [ebp - 0xe74]
push eax
call dword [sym.imp.KERNEL32.dll_lstrcatW]
push str..cva
lea ecx, [ebp - 0xe74]
push ecx
call dword [sym.imp.KERNEL32.dll_lstrcatW]
lea edx, [ebp - 0x1284]
push edx
lea eax, [ebp - 0xe74]
push eax
push 0x45a704
lea ecx, [ebp - 0x18fc]
call fcn.0044b420
lea ecx, [ebp - 0xc6c]
push ecx
lea edx, [ebp - 0xe74]
push edx
push str.c:_system.savARCD.LOG
lea ecx, [ebp - 0x18fc]
call fcn.0044b110
lea eax, [ebp - 0x1284]
push eax
mov ecx, dword [ebp - 0x1d98]
mov edx, dword [ecx + 0x130]
add edx, 0x20c
push edx
call dword [sym.imp.KERNEL32.dll_lstrcpyW]
lea eax, [ebp - 0xc6c]
push eax
mov ecx, dword [ebp - 0x1d98]
mov edx, dword [ecx + 0x130]
add edx, 4
push edx
call dword [sym.imp.KERNEL32.dll_lstrcpyW]
mov eax, dword [ebp - 0x640]
push eax
mov ecx, dword [ebp - 0x1d98]
mov edx, dword [ecx + 0x130]
add edx, 0x60c
push edx
call dword [sym.imp.KERNEL32.dll_lstrcpyW]
mov eax, dword [ebp - 0xe78]
push eax
mov ecx, dword [ebp - 0x1d98]
mov edx, dword [ecx + 0x130]
add edx, 0x814
push edx
call dword [sym.imp.KERNEL32.dll_lstrcpyW]
mov eax, dword [ebp - 0xe80]
push eax
mov ecx, dword [ebp - 0x1d98]
mov edx, dword [ecx + 0x130]
add edx, 0x828
push edx
call dword [sym.imp.KERNEL32.dll_lstrcpyW]
mov eax, dword [ebp - 0x1d98]
mov ecx, dword [eax + 0x130]
mov byte [ecx + 0x83c], 0
mov edx, dword [ebp - 0x1d98]
mov eax, dword [edx + 0x130]
mov byte [eax + 0x83d], 0
mov ecx, dword [ebp - 0x1d98]
mov edx, dword [ecx + 0x130]
mov byte [edx + 0x83f], 0
mov eax, dword [ebp - 0x1d98]
mov ecx, dword [eax + 0x130]
mov byte [ecx + 0x83e], 0
cmp dword [ebp - 0x430], 0
jne 0x44379c
mov edx, dword [ebp - 0x1d98]
mov eax, dword [edx + 0x130]
mov dword [eax + 0x844], 0
mov ecx, dword [ebp - 0x1d98]
mov edx, dword [ebp - 0x1d98]
mov eax, dword [edx + 0x130]
mov dword [ecx + 0x12c], eax
mov ecx, dword [ebp - 0x1d98]
mov edx, dword [ebp - 0x1d98]
mov eax, dword [edx + 0x130]
mov dword [ecx + 0x13c], eax
jmp 0x4437d2
mov ecx, dword [ebp - 0x1d98]
mov edx, dword [ecx + 0x12c]
mov eax, dword [ebp - 0x1d98]
mov ecx, dword [eax + 0x130]
mov dword [edx + 0x844], ecx
mov edx, dword [ebp - 0x1d98]
mov eax, dword [ebp - 0x1d98]
mov ecx, dword [eax + 0x130]
mov dword [edx + 0x12c], ecx
lea edx, [ebp - 0xa60]
push edx
lea eax, [ebp - 0xa5c]
push eax
push 0
call fcn.004232ec
add esp, 0xc
mov dword [ebp - 0x640], eax
lea ecx, [ebp - 0xa58]
push ecx
lea edx, [ebp - 0xa5c]
push edx
push 0
call fcn.004232ec
add esp, 0xc
mov dword [ebp - 0xe78], eax
lea eax, [ebp - 0x220]
push eax
lea ecx, [ebp - 0xa5c]
push ecx
push 0
call fcn.004232ec
add esp, 0xc
mov dword [ebp - 0xe80], eax
jmp 0x443599
push 0x104
push 0
lea edx, [ebp - 0x1d14]
push edx
call fcn.00422660
add esp, 0xc
push 0x104
push 0
lea eax, [ebp - 0xa54]
push eax
call fcn.00422660
add esp, 0xc
push 0x104
push 0
lea ecx, [ebp - 0x148c]
push ecx
call fcn.00422660
add esp, 0xc
push 0x200
push 0
lea edx, [ebp - 0x1284]
push edx
call fcn.00422660
add esp, 0xc
push 0x104
push 0
lea eax, [ebp - 0x63c]
push eax
call fcn.00422660
add esp, 0xc
push 0x104
push 0
lea ecx, [ebp - 0x84c]
push ecx
call fcn.00422660
add esp, 0xc
push 0x104
push 0
lea edx, [ebp - 0x1b0c]
push edx
call fcn.00422660
add esp, 0xc
push 0x104
push 0
lea eax, [ebp - 0xe74]
push eax
call fcn.00422660
add esp, 0xc
push 0x104
push 0
lea ecx, [ebp - 0xc6c]
push ecx
call fcn.00422660
add esp, 0xc
mov byte [ebp - 0x1d92], 1
mov byte [ebp - 4], 2
lea ecx, [ebp - 0x1d6c]
call fcn.00439710
mov byte [ebp - 4], 1
lea ecx, [ebp - 0x18fc]
call fcn.00449a00
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x434]
call fcn.00401a80
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0xe7c]
call fcn.00401a80
mov al, byte [ebp - 0x1d92]
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
mov ecx, dword [ebp - 0x14]
xor ecx, ebp
call fcn.00422647
mov esp, ebp
pop ebp
ret