Function at 0x44f600
Capabilities:
Check if file exists
Delete file
Delete registry value
Read .ini file
Set registry value

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x538951
mov eax, dword fs:[0]
push eax
mov eax, 0x27f0
call fcn.004b0a90
mov eax, dword [0x58c758]
xor eax, ebp
mov dword [ebp - 0x10], eax
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov dword [ebp - 0x228], 0
lea ecx, [ebp - 0x224]
call fcn.00403840
mov dword [ebp - 4], 0
push str.360EntClient_update.ini
lea eax, [ebp - 0x220]
push eax
call fcn.0041acc0
add esp, 8
mov byte [ebp - 4], 1
lea ecx, [ebp - 0x220]
push ecx
lea ecx, [ebp - 0x224]
call fcn.00401970
xor edx, edx
mov word [ebp - 0x434], dx
push 0x206
push 0
lea eax, [ebp - 0x432]
push eax
call fcn.004b0ac0
add esp, 0xc
xor ecx, ecx
mov word [ebp - 0x21c], cx
push 0x206
push 0
lea edx, [ebp - 0x21a]
push edx
call fcn.004b0ac0
add esp, 0xc
lea ecx, [ebp - 0x224]
call fcn.0043e290
push eax
push 0x103
lea eax, [ebp - 0x21c]
push eax
push 0x540868
push 0x5452c0
push str.360safe
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileStringW]
lea ecx, [ebp - 0x224]
call fcn.0043e290
push eax
push 0x103
lea ecx, [ebp - 0x434]
push ecx
push 0x540868
push str.pubuse
push str.360safe
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileStringW]
push 0x5452a4
lea edx, [ebp - 0x434]
push edx
call fcn.004b55b5
add esp, 8
test eax, eax
jne 0x44f741
push 0x5452a0
lea eax, [ebp - 0x21c]
push eax
call fcn.004b55b5
add esp, 8
test eax, eax
je 0x44f92c
mov dword [ebp - 0x4ac], str.EntClientignorelist.ini
mov dword [ebp - 0x4a8], str.EntClientignorelist.ini.dec
mov dword [ebp - 0x4a4], str.EntClientEntAdSafeConf.ini
mov dword [ebp - 0x4a0], str.EntClientEntAdSafeConf.ini.dec
mov dword [ebp - 0x49c], str.EntClient360ss2.dat
mov dword [ebp - 0x498], str.EntClient360ss2.dat.dec
mov dword [ebp - 0x494], str.EntCliententpub.dat
mov dword [ebp - 0x490], str.EntCliententpub.dat.dec
mov dword [ebp - 0x48c], str.EntClient360EntClient.ini
mov dword [ebp - 0x488], str.EntClient360EntClient.ini.dec
mov dword [ebp - 0x484], str.EntClientlibsdiex.dat
mov dword [ebp - 0x480], str.EntClientlibsdiex.dat.dec
mov dword [ebp - 0x47c], str.EntClientlibdefaex.dat
mov dword [ebp - 0x478], str.EntClientlibdefaex.dat.dec
mov dword [ebp - 0x474], str.EntClientlibwhite2.dat
mov dword [ebp - 0x470], str.EntClientlibwhite2.dat.dec
mov dword [ebp - 0x46c], str.EntClientlibwhite.dat
mov dword [ebp - 0x468], str.EntClientlibwhite.dat.dec
mov dword [ebp - 0x464], str.EntClientEntAllFix.ini
mov dword [ebp - 0x460], str.EntClientEntAllFix.ini.dec
mov dword [ebp - 0x45c], str.EntClientcustomlogo.png
mov dword [ebp - 0x458], str.EntClientcustomlogo.png.dec
mov dword [ebp - 0x454], str.EntClientSDReport.dat
mov dword [ebp - 0x450], str.EntClientSDReport.dat.dec
mov dword [ebp - 0x44c], str.EntClientLeakRepairReport.dat
mov dword [ebp - 0x448], str.EntClientLeakRepairReport.dat.dec
mov dword [ebp - 0x444], str.EntClientUninstallHub.exe
mov dword [ebp - 0x440], str.EntClientUninstallHub.exe.dec
mov dword [ebp - 0x43c], str.EntClientExamCmd.dat
mov dword [ebp - 0x438], str.EntClientExamCmd.dat.dec
mov dword [ebp - 0x228], 0
jmp 0x44f888
mov ecx, dword [ebp - 0x228]
add ecx, 1
mov dword [ebp - 0x228], ecx
cmp dword [ebp - 0x228], 0x1e
jge 0x44f92c
mov edx, dword [ebp - 0x228]
cmp dword [ebp + edx*4 - 0x4ac], 0
je 0x44f8bf
mov eax, dword [ebp - 0x228]
mov ecx, dword [ebp + eax*4 - 0x4ac]
push ecx
call fcn.004b0eb7
add esp, 4
test eax, eax
ja 0x44f8c1
jmp 0x44f879
mov edx, dword [ebp - 0x228]
mov eax, dword [ebp + edx*4 - 0x4ac]
push eax
lea ecx, [ebp - 0x27e8]
push ecx
call fcn.0041acc0
add esp, 8
mov dword [ebp - 0x27f0], eax
mov edx, dword [ebp - 0x27f0]
mov dword [ebp - 0x27f4], edx
mov byte [ebp - 4], 2
mov eax, dword [ebp - 0x27f4]
push eax
lea ecx, [ebp - 0x220]
call fcn.00401970
mov byte [ebp - 4], 1
lea ecx, [ebp - 0x27e8]
call fcn.00401eb0
lea ecx, [ebp - 0x220]
call fcn.0043e290
push eax
call dword [sym.imp.KERNEL32.dll_DeleteFileW]
jmp 0x44f879
lea ecx, [ebp - 0x224]
call fcn.0043e290
push eax
push 0x103
lea ecx, [ebp - 0x434]
push ecx
push 0x540868
push str.harduse
push str.360safe
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileStringW]
push str.EntClient360Hard
lea edx, [ebp - 0x27ec]
push edx
call fcn.0041acc0
add esp, 8
mov dword [ebp - 0x27f8], eax
mov eax, dword [ebp - 0x27f8]
mov dword [ebp - 0x27fc], eax
mov byte [ebp - 4], 3
mov ecx, dword [ebp - 0x27fc]
push ecx
lea ecx, [ebp - 0x220]
call fcn.00401970
mov byte [ebp - 4], 1
lea ecx, [ebp - 0x27ec]
call fcn.00401eb0
push 0x540b3c
lea edx, [ebp - 0x434]
push edx
call fcn.004b55b5
add esp, 8
test eax, eax
jne 0x44f9ea
lea ecx, [ebp - 0x220]
call fcn.0043e290
push eax
call dword [sym.imp.SHLWAPI.dll_PathFileExistsW]
test eax, eax
je 0x44f9ea
push 0x5452a0
lea eax, [ebp - 0x21c]
push eax
call fcn.004b55b5
add esp, 8
test eax, eax
je 0x44fa13
lea ecx, [ebp - 0x27d4]
call fcn.0046ab40
mov byte [ebp - 4], 4
lea ecx, [ebp - 0x27d4]
call fcn.0046efb0
mov byte [ebp - 4], 1
lea ecx, [ebp - 0x27d4]
call fcn.0046ad60
push 0x5452a0
lea ecx, [ebp - 0x21c]
push ecx
call fcn.004b55b5
add esp, 8
test eax, eax
je 0x44faa2
mov dword [ebp - 0x27d8], 3
mov dword [ebp - 0x27e4], 8
mov dword [ebp - 0x27e0], 0
xor edx, edx
mov dword [ebp - 0x27dc], edx
mov eax, dword [ebp - 0x27e4]
push eax
lea ecx, [ebp - 0x27e0]
push ecx
mov edx, dword [ebp - 0x27d8]
push edx
push str.SDReportTime
push str.SOFTWARE360Safe360Ent
push reloc.OLEAUT32.dll_SysReAllocString
call dword [sym.imp.SHLWAPI.dll_SHSetValueW]
push str.SDReportTime
push str.SOFTWARE360Safe360Ent
push reloc.OLEAUT32.dll_SysReAllocString
call dword [sym.imp.SHLWAPI.dll_SHDeleteValueW]
lea ecx, [ebp - 0x224]
call fcn.0043e290
push eax
call dword [sym.imp.KERNEL32.dll_DeleteFileW]
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x220]
call fcn.00401eb0
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x224]
call fcn.00401eb0
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
call fcn.004b0a79
mov esp, ebp
pop ebp
ret