Function at 0x45dd52
Capabilities:
Check if file exists
Delete file
Delete registry key

Disassembly:
push 0x50
mov eax, 0x4b204a
call fcn.00475a5f
mov dword [ebp - 0x1c], ecx
call fcn.0045a4ed
xor esi, esi
mov dword [ebp - 0x10], eax
cmp eax, esi
jne 0x45dd77
xor eax, eax
call fcn.00475b37
ret
mov ecx, 0x4f6b70
call fcn.004698d9
mov ecx, dword [ebp - 0x10]
call fcn.0045e3b7
push eax
lea ecx, [ebp - 0x28]
call fcn.00403cb4
push str.updatecfg.ini
lea eax, [ebp - 0x28]
push eax
lea eax, [ebp - 0x24]
push eax
mov dword [ebp - 4], esi
call fcn.00403a89
add esp, 0xc
push dword [ebp - 0x24]
mov ebx, dword [sym.imp.SHLWAPI.dll_PathFileExistsW]
mov byte [ebp - 4], 1
call ebx
test eax, eax
je 0x45ddcd
push dword [ebp - 0x24]
push esi
push esi
push str.theme.xml
call dword [sym.imp.KERNEL32.dll_WritePrivateProfileStringW]
mov edi, 0x4f8ce0
push edi
lea ecx, [ebp - 0x20]
call fcn.004029af
mov ecx, dword [ebp - 0x10]
lea eax, [ebp - 0x20]
push eax
mov byte [ebp - 4], 2
call fcn.0045fd29
push str.360Entclient.exe
lea eax, [ebp - 0x20]
push eax
lea eax, [ebp - 0x2c]
push eax
call fcn.00403a89
add esp, 0xc
push dword [eax]
call ebx
mov ecx, dword [ebp - 0x2c]
mov ebx, eax
neg ebx
sbb bl, bl
add ecx, 0xfffffff0
inc bl
call fcn.004029d4
test bl, bl
je 0x45deba
push str.Config_newui360SafeAir_Ent.xml
lea ecx, [ebp - 0x50]
call fcn.00402675
push str.ConfigEnt_NewExaminePluginEx.xml
lea ecx, [ebp - 0x4c]
mov byte [ebp - 4], 3
call fcn.00402675
push str.ConfigEnt_NewExaminePluginEx2.xml
lea ecx, [ebp - 0x48]
mov byte [ebp - 4], 4
call fcn.00402675
push str.ConfigCustomizeCfg_10.xml
lea ecx, [ebp - 0x44]
mov byte [ebp - 4], 5
call fcn.00402675
push str._safemonTrayMenuTrayMenuAir_Ent.xml
lea ecx, [ebp - 0x40]
mov byte [ebp - 4], 6
call fcn.00402675
push 5
mov byte [ebp - 4], 7
lea ebx, [ebp - 0x50]
pop esi
push ebx
lea eax, [ebp - 0x20]
push eax
lea eax, [ebp - 0x2c]
push eax
call fcn.0043296c
add esp, 0xc
push dword [eax]
call dword [sym.imp.KERNEL32.dll_DeleteFileW]
mov ecx, dword [ebp - 0x2c]
add ecx, 0xfffffff0
call fcn.004029d4
add ebx, 4
dec esi
jne 0x45de7a
push 0x4029a5
push 5
push 4
lea eax, [ebp - 0x50]
push eax
mov byte [ebp - 4], 2
call fcn.0047941a
mov ecx, dword [ebp - 0x10]
call fcn.0045e3d5
mov esi, eax
neg esi
sbb esi, esi
push edi
lea ecx, [ebp - 0x18]
inc esi
call fcn.004029af
mov ecx, dword [ebp - 0x10]
xor ebx, ebx
lea eax, [ebp - 0x18]
mov byte [ebp - 4], 8
push eax
cmp esi, ebx
je 0x45deea
call fcn.004613e9
jmp 0x45deef
call fcn.004601f2
cmp eax, ebx
jne 0x45dfdf
mov eax, esi
neg eax
sbb eax, eax
push ebx
and eax, 0xffffffe0
add eax, 0xb8
push ebx
push eax
call fcn.00402f1e
mov ecx, eax
call fcn.00402faf
push edi
lea ecx, [ebp - 0x1c]
call fcn.004029af
push 0x9b
lea ecx, [ebp - 0x1c]
mov byte [ebp - 4], 9
call fcn.00402631
mov ecx, dword [ebp - 0x10]
call fcn.0045feb5
mov edi, dword [ebp - 0x1c]
lea ecx, [ebp - 0x2c]
test eax, eax
je 0x45df67
push 0x4bf620
call fcn.00402675
push ecx
lea eax, [ebp - 0x2c]
mov dword [ebp - 0x30], esp
mov ecx, esp
push eax
mov byte [ebp - 4], 0xa
call fcn.00403cb4
mov ecx, dword [ebp - 0x10]
call fcn.0045f71b
jmp 0x45df8f
push 0x96
call fcn.00432299
mov eax, dword [eax]
mov ecx, dword [ebp - 0x10]
neg esi
sbb esi, esi
push 1
and esi, 0xfffffff0
add esi, 0x40
push esi
push eax
push edi
push ebx
mov byte [ebp - 4], 0xb
call fcn.0045f627
mov ecx, dword [ebp - 0x2c]
add ecx, 0xfffffff0
mov byte [ebp - 4], 9
call fcn.004029d4
mov ecx, dword [ebp - 0x10]
call fcn.0045e94a
lea ecx, [edi - 0x10]
call fcn.004029d4
mov ecx, dword [ebp - 0x18]
add ecx, 0xfffffff0
call fcn.004029d4
mov ecx, dword [ebp - 0x20]
add ecx, 0xfffffff0
call fcn.004029d4
mov ecx, dword [ebp - 0x24]
add ecx, 0xfffffff0
call fcn.004029d4
mov ecx, dword [ebp - 0x28]
add ecx, 0xfffffff0
call fcn.004029d4
jmp 0x45dd6f
cmp esi, ebx
je 0x45dff3
push str.SOFTWARE360Safe
push reloc.OLEAUT32.dll_SysReAllocString
call dword [sym.imp.SHLWAPI.dll_SHDeleteKeyW]
lea ecx, [ebp - 0x3c]
call fcn.00447fd1
push 0x4c16e0
lea ecx, [ebp - 0x3c]
mov byte [ebp - 4], 0xc
call fcn.004028fb
push ebx
lea eax, [ebp - 0x3c]
push eax
mov eax, dword [ebp - 0x1c]
push 0x3443
push dword [eax + 4]
call dword [sym.imp.USER32.dll_SendMessageW]
mov ecx, dword [ebp - 0x1c]
call fcn.0045a534
mov dword [ebp - 0x2c], eax
cmp eax, ebx
jne 0x45e03e
lea ecx, [ebp - 0x3c]
call fcn.00447ff7
jmp 0x45dfae
push edi
lea ecx, [ebp - 0x14]
call fcn.004029af
mov ecx, dword [ebp - 0x10]
lea eax, [ebp - 0x14]
push eax
mov byte [ebp - 4], 0xd
call fcn.0045fd29
test eax, eax
jne 0x45e0b4
push ebx
push ebx
push 0x9a
call fcn.00402f1e
mov ecx, eax
call fcn.00402faf
mov ecx, dword [ebp - 0x14]
add ecx, 0xfffffff0
call fcn.004029d4
lea ecx, [ebp - 0x3c]
call fcn.00447ff7
mov ecx, dword [ebp - 0x18]
add ecx, 0xfffffff0
call fcn.004029d4
mov ecx, dword [ebp - 0x20]
add ecx, 0xfffffff0
call fcn.004029d4
mov ecx, dword [ebp - 0x24]
add ecx, 0xfffffff0
call fcn.004029d4
mov ecx, dword [ebp - 0x28]
add ecx, 0xfffffff0
call fcn.004029d4
mov eax, ebx
jmp 0x45dd71
mov eax, dword [ebp - 0x2c]
push dword [ebp - 0x14]
mov ecx, dword [eax]
push eax
call dword [ecx + 4]
mov ecx, dword [ebp - 0x10]
call fcn.0045e91a
cmp eax, ebx
je 0x45e0d5
push dword [ebp - 0x14]
mov ecx, dword [eax]
push eax
call dword [ecx + 0x30]
push dword [ebp - 0x14]
call fcn.004460d2
pop ecx
call fcn.00447602
push dword [ebp - 0x18]
mov edi, dword [sym.imp.SHELL32.dll_SHCreateDirectory]
push ebx
call edi
mov ecx, dword [ebp - 0x1c]
lea eax, [ebp - 0x14]
add ecx, 0x70
push eax
call fcn.00448747
mov ecx, dword [ebp - 0x1c]
lea eax, [ebp - 0x18]
push eax
add ecx, 0x70
call fcn.0044874f
mov ecx, dword [ebp - 0x1c]
lea eax, [ebp - 0x18]
add ecx, 0x380
push eax
call fcn.00401df2
mov ecx, dword [ebp - 0x1c]
call fcn.0045bf17
push dword [ebp - 0x14]
push ebx
call edi
lea ecx, [ebp - 0x2c]
call fcn.00450705
push dword [ebp - 0x14]
mov ecx, eax
mov byte [ebp - 4], 0xe
call fcn.00450bb6
lea ecx, [ebp - 0x2c]
mov byte [ebp - 4], 0xd
call fcn.0045070e
push dword [ebp - 0x14]
call fcn.0040c0cd
pop ecx
push ebx
push ebx
push 0xb9
call fcn.00402f1e
mov ecx, eax
call fcn.00402faf
push ebx
push ebx
push 1
push ebx
push dword [ebp - 0x1c]
lea ecx, [ebp - 0x5c]
cmp esi, ebx
je 0x45e181
push 0x45cdea
jmp 0x45e186
push 0x45d3d7
call fcn.004011be
lea ecx, [ebp - 0x5c]
call fcn.00401202
push ebx
push ebx
push 0xba
call fcn.00402f1e
mov ecx, eax
call fcn.00402faf
xor ebx, ebx
inc ebx
jmp 0x45e06e