Function at 0x45ae54
Capabilities:
Check if file exists
Delete file
Delete registry key

Disassembly:
push 0x50
mov eax, 0x4ad445
call fcn.004711ef
mov dword [ebp - 0x1c], ecx
call fcn.00457d5a
xor esi, esi
mov dword [ebp - 0x10], eax
cmp eax, esi
jne 0x45ae79
xor eax, eax
call fcn.004712c7
ret
mov ecx, 0x4f18b8
call fcn.004673a7
mov ecx, dword [ebp - 0x10]
call fcn.0045b9d0
push eax
lea ecx, [ebp - 0x28]
call fcn.00403c4d
push str.updatecfg.ini
lea eax, [ebp - 0x28]
push eax
lea eax, [ebp - 0x24]
push eax
mov dword [ebp - 4], esi
call fcn.004039cd
add esp, 0xc
push dword [ebp - 0x24]
mov ebx, dword [sym.imp.SHLWAPI.dll_PathFileExistsW]
mov byte [ebp - 4], 1
call ebx
test eax, eax
je 0x45aecf
push dword [ebp - 0x24]
push esi
push esi
push str.theme.xml
call dword [sym.imp.KERNEL32.dll_WritePrivateProfileStringW]
mov edi, 0x4f39f8
push edi
lea ecx, [ebp - 0x20]
call fcn.004028e9
mov ecx, dword [ebp - 0x10]
lea eax, [ebp - 0x20]
push eax
mov byte [ebp - 4], 2
call fcn.0045da4b
push str.360Entclient.exe
lea eax, [ebp - 0x20]
push eax
lea eax, [ebp - 0x2c]
push eax
call fcn.004039cd
add esp, 0xc
push dword [eax]
call ebx
mov ecx, dword [ebp - 0x2c]
mov ebx, eax
neg ebx
sbb bl, bl
add ecx, 0xfffffff0
inc bl
call fcn.0040290e
test bl, bl
je 0x45afbc
push str.Config_newui360SafeAir_Ent.xml
lea ecx, [ebp - 0x50]
call fcn.004025d8
push str.ConfigEnt_NewExaminePluginEx.xml
lea ecx, [ebp - 0x4c]
mov byte [ebp - 4], 3
call fcn.004025d8
push str.ConfigEnt_NewExaminePluginEx2.xml
lea ecx, [ebp - 0x48]
mov byte [ebp - 4], 4
call fcn.004025d8
push str.ConfigCustomizeCfg_10.xml
lea ecx, [ebp - 0x44]
mov byte [ebp - 4], 5
call fcn.004025d8
push str._safemonTrayMenuTrayMenuAir_Ent.xml
lea ecx, [ebp - 0x40]
mov byte [ebp - 4], 6
call fcn.004025d8
push 5
mov byte [ebp - 4], 7
lea ebx, [ebp - 0x50]
pop esi
push ebx
lea eax, [ebp - 0x20]
push eax
lea eax, [ebp - 0x2c]
push eax
call fcn.0043281a
add esp, 0xc
push dword [eax]
call dword [sym.imp.KERNEL32.dll_DeleteFileW]
mov ecx, dword [ebp - 0x2c]
add ecx, 0xfffffff0
call fcn.0040290e
add ebx, 4
dec esi
jne 0x45af7c
push 0x402928
push 5
push 4
lea eax, [ebp - 0x50]
push eax
mov byte [ebp - 4], 2
call fcn.0047341a
mov ecx, dword [ebp - 0x10]
call fcn.0045b9ee
mov esi, eax
neg esi
sbb esi, esi
push edi
lea ecx, [ebp - 0x18]
inc esi
call fcn.004028e9
mov ecx, dword [ebp - 0x10]
xor ebx, ebx
lea eax, [ebp - 0x18]
mov byte [ebp - 4], 8
push eax
cmp esi, ebx
je 0x45afec
call fcn.0045f53f
jmp 0x45aff1
call fcn.0045e0a5
cmp eax, ebx
jne 0x45b0e1
mov eax, esi
neg eax
sbb eax, eax
push ebx
and eax, 0xffffffe0
add eax, 0xb8
push ebx
push eax
call fcn.00402e62
mov ecx, eax
call fcn.00402ef3
push edi
lea ecx, [ebp - 0x1c]
call fcn.004028e9
push 0x9b
lea ecx, [ebp - 0x1c]
mov byte [ebp - 4], 9
call fcn.00402594
mov ecx, dword [ebp - 0x10]
call fcn.0045dbd7
mov edi, dword [ebp - 0x1c]
lea ecx, [ebp - 0x2c]
test eax, eax
je 0x45b069
push 0x4ba5d0
call fcn.004025d8
push ecx
lea eax, [ebp - 0x2c]
mov dword [ebp - 0x30], esp
mov ecx, esp
push eax
mov byte [ebp - 4], 0xa
call fcn.00403c4d
mov ecx, dword [ebp - 0x10]
call fcn.0045d191
jmp 0x45b091
push 0x96
call fcn.00432171
mov eax, dword [eax]
mov ecx, dword [ebp - 0x10]
neg esi
sbb esi, esi
push 1
and esi, 0xfffffff0
add esi, 0x40
push esi
push eax
push edi
push ebx
mov byte [ebp - 4], 0xb
call fcn.0045d09d
mov ecx, dword [ebp - 0x2c]
add ecx, 0xfffffff0
mov byte [ebp - 4], 9
call fcn.0040290e
mov ecx, dword [ebp - 0x10]
call fcn.0045c010
lea ecx, [edi - 0x10]
call fcn.0040290e
mov ecx, dword [ebp - 0x18]
add ecx, 0xfffffff0
call fcn.0040290e
mov ecx, dword [ebp - 0x20]
add ecx, 0xfffffff0
call fcn.0040290e
mov ecx, dword [ebp - 0x24]
add ecx, 0xfffffff0
call fcn.0040290e
mov ecx, dword [ebp - 0x28]
add ecx, 0xfffffff0
call fcn.0040290e
jmp 0x45ae71
cmp esi, ebx
je 0x45b0f5
push str.SOFTWARE360Safe
push reloc.OLEAUT32.dll_SysReAllocString
call dword [sym.imp.SHLWAPI.dll_SHDeleteKeyW]
lea ecx, [ebp - 0x3c]
call fcn.004314e7
push 0x4bc6cc
lea ecx, [ebp - 0x3c]
mov byte [ebp - 4], 0xc
call fcn.0040285e
push ebx
lea eax, [ebp - 0x3c]
push eax
mov eax, dword [ebp - 0x1c]
push 0x3443
push dword [eax + 4]
call dword [sym.imp.USER32.dll_SendMessageW]
mov ecx, dword [ebp - 0x1c]
call fcn.00457d9d
mov dword [ebp - 0x2c], eax
cmp eax, ebx
jne 0x45b140
lea ecx, [ebp - 0x3c]
call fcn.00445893
jmp 0x45b0b0
push edi
lea ecx, [ebp - 0x14]
call fcn.004028e9
mov ecx, dword [ebp - 0x10]
lea eax, [ebp - 0x14]
push eax
mov byte [ebp - 4], 0xd
call fcn.0045da4b
test eax, eax
jne 0x45b1b6
push ebx
push ebx
push 0x9a
call fcn.00402e62
mov ecx, eax
call fcn.00402ef3
mov ecx, dword [ebp - 0x14]
add ecx, 0xfffffff0
call fcn.0040290e
lea ecx, [ebp - 0x3c]
call fcn.00445893
mov ecx, dword [ebp - 0x18]
add ecx, 0xfffffff0
call fcn.0040290e
mov ecx, dword [ebp - 0x20]
add ecx, 0xfffffff0
call fcn.0040290e
mov ecx, dword [ebp - 0x24]
add ecx, 0xfffffff0
call fcn.0040290e
mov ecx, dword [ebp - 0x28]
add ecx, 0xfffffff0
call fcn.0040290e
mov eax, ebx
jmp 0x45ae73
mov eax, dword [ebp - 0x2c]
push dword [ebp - 0x14]
mov ecx, dword [eax]
push eax
call dword [ecx + 4]
mov ecx, dword [ebp - 0x10]
call fcn.0045bfe0
cmp eax, ebx
je 0x45b1d7
push dword [ebp - 0x14]
mov ecx, dword [eax]
push eax
call dword [ecx + 0x2c]
push dword [ebp - 0x14]
call fcn.00443b34
pop ecx
call fcn.00444f19
push dword [ebp - 0x18]
mov edi, dword [sym.imp.SHELL32.dll_SHCreateDirectory]
push ebx
call edi
mov ecx, dword [ebp - 0x1c]
lea eax, [ebp - 0x14]
add ecx, 0x68
push eax
call fcn.00446012
mov ecx, dword [ebp - 0x1c]
lea eax, [ebp - 0x18]
push eax
add ecx, 0x68
call fcn.0044601a
mov ecx, dword [ebp - 0x1c]
lea eax, [ebp - 0x18]
add ecx, 0x378
push eax
call fcn.00401d9d
mov ecx, dword [ebp - 0x1c]
call fcn.00458e8e
push dword [ebp - 0x14]
push ebx
call edi
lea ecx, [ebp - 0x2c]
call fcn.0044d2ff
push dword [ebp - 0x14]
mov ecx, eax
mov byte [ebp - 4], 0xe
call fcn.0044d7b0
lea ecx, [ebp - 0x2c]
mov byte [ebp - 4], 0xd
call fcn.0044d308
push dword [ebp - 0x14]
call fcn.0040c0a8
pop ecx
push ebx
push ebx
push 0xb9
call fcn.00402e62
mov ecx, eax
call fcn.00402ef3
push ebx
push ebx
push 1
push ebx
push dword [ebp - 0x1c]
lea ecx, [ebp - 0x5c]
cmp esi, ebx
je 0x45b283
push 0x459b9a
jmp 0x45b288
push 0x45a0a8
call fcn.004011be
lea ecx, [ebp - 0x5c]
call fcn.00401202
push ebx
push ebx
push 0xba
call fcn.00402e62
mov ecx, eax
call fcn.00402ef3
xor ebx, ebx
inc ebx
jmp 0x45b170