Function at 0x45e098
Capabilities:
Check if file exists
Delete file
Delete registry key

Disassembly:
push 0x50
mov eax, 0x4b2a20
call fcn.004764b0
mov dword [ebp - 0x1c], ecx
call fcn.0045a9af
xor esi, esi
mov dword [ebp - 0x10], eax
cmp eax, esi
jne 0x45e0bd
xor eax, eax
call fcn.00476588
ret
mov ecx, 0x4f7c90
call fcn.0046a315
mov ecx, dword [ebp - 0x10]
call fcn.0045e6f9
push eax
lea ecx, [ebp - 0x28]
call fcn.00403c36
push str.updatecfg.ini
lea eax, [ebp - 0x28]
push eax
lea eax, [ebp - 0x24]
push eax
mov dword [ebp - 4], esi
call fcn.00403a22
add esp, 0xc
push dword [ebp - 0x24]
mov ebx, dword [sym.imp.SHLWAPI.dll_PathFileExistsW]
mov byte [ebp - 4], 1
call ebx
test eax, eax
je 0x45e113
push dword [ebp - 0x24]
push esi
push esi
push str.theme.xml
call dword [sym.imp.KERNEL32.dll_WritePrivateProfileStringW]
mov edi, 0x4f9e00
push edi
lea ecx, [ebp - 0x20]
call fcn.0040293e
mov ecx, dword [ebp - 0x10]
lea eax, [ebp - 0x20]
push eax
mov byte [ebp - 4], 2
call fcn.004600b7
push str.360Entclient.exe
lea eax, [ebp - 0x20]
push eax
lea eax, [ebp - 0x2c]
push eax
call fcn.00403a22
add esp, 0xc
push dword [eax]
call ebx
mov ecx, dword [ebp - 0x2c]
mov ebx, eax
neg ebx
sbb bl, bl
add ecx, 0xfffffff0
inc bl
call fcn.00402963
test bl, bl
je 0x45e200
push str.Config_newui360SafeAir_Ent.xml
lea ecx, [ebp - 0x50]
call fcn.0040260e
push str.ConfigEnt_NewExaminePluginEx.xml
lea ecx, [ebp - 0x4c]
mov byte [ebp - 4], 3
call fcn.0040260e
push str.ConfigEnt_NewExaminePluginEx2.xml
lea ecx, [ebp - 0x48]
mov byte [ebp - 4], 4
call fcn.0040260e
push str.ConfigCustomizeCfg_10.xml
lea ecx, [ebp - 0x44]
mov byte [ebp - 4], 5
call fcn.0040260e
push str._safemonTrayMenuTrayMenuAir_Ent.xml
lea ecx, [ebp - 0x40]
mov byte [ebp - 4], 6
call fcn.0040260e
push 5
mov byte [ebp - 4], 7
lea ebx, [ebp - 0x50]
pop esi
push ebx
lea eax, [ebp - 0x20]
push eax
lea eax, [ebp - 0x2c]
push eax
call fcn.00432c08
add esp, 0xc
push dword [eax]
call dword [sym.imp.KERNEL32.dll_DeleteFileW]
mov ecx, dword [ebp - 0x2c]
add ecx, 0xfffffff0
call fcn.00402963
add ebx, 4
dec esi
jne 0x45e1c0
push 0x40297d
push 5
push 4
lea eax, [ebp - 0x50]
push eax
mov byte [ebp - 4], 2
call fcn.00479d4a
mov ecx, dword [ebp - 0x10]
call fcn.0045e717
mov esi, eax
neg esi
sbb esi, esi
push edi
lea ecx, [ebp - 0x18]
inc esi
call fcn.0040293e
mov ecx, dword [ebp - 0x10]
xor ebx, ebx
lea eax, [ebp - 0x18]
mov byte [ebp - 4], 8
push eax
cmp esi, ebx
je 0x45e230
call fcn.00461a22
jmp 0x45e235
call fcn.00460580
cmp eax, ebx
jne 0x45e325
mov eax, esi
neg eax
sbb eax, eax
push ebx
and eax, 0xffffffe0
add eax, 0xb8
push ebx
push eax
call fcn.00402eb7
mov ecx, eax
call fcn.00402f48
push edi
lea ecx, [ebp - 0x1c]
call fcn.0040293e
push 0x9b
lea ecx, [ebp - 0x1c]
mov byte [ebp - 4], 9
call fcn.004025ca
mov ecx, dword [ebp - 0x10]
call fcn.00460243
mov edi, dword [ebp - 0x1c]
lea ecx, [ebp - 0x2c]
test eax, eax
je 0x45e2ad
push 0x4bf9e8
call fcn.0040260e
push ecx
lea eax, [ebp - 0x2c]
mov dword [ebp - 0x30], esp
mov ecx, esp
push eax
mov byte [ebp - 4], 0xa
call fcn.00403c36
mov ecx, dword [ebp - 0x10]
call fcn.0045fb07
jmp 0x45e2d5
push 0x96
call fcn.00432535
mov eax, dword [eax]
mov ecx, dword [ebp - 0x10]
neg esi
sbb esi, esi
push 1
and esi, 0xfffffff0
add esi, 0x40
push esi
push eax
push edi
push ebx
mov byte [ebp - 4], 0xb
call fcn.0045fa13
mov ecx, dword [ebp - 0x2c]
add ecx, 0xfffffff0
mov byte [ebp - 4], 9
call fcn.00402963
mov ecx, dword [ebp - 0x10]
call fcn.0045ec4e
lea ecx, [edi - 0x10]
call fcn.00402963
mov ecx, dword [ebp - 0x18]
add ecx, 0xfffffff0
call fcn.00402963
mov ecx, dword [ebp - 0x20]
add ecx, 0xfffffff0
call fcn.00402963
mov ecx, dword [ebp - 0x24]
add ecx, 0xfffffff0
call fcn.00402963
mov ecx, dword [ebp - 0x28]
add ecx, 0xfffffff0
call fcn.00402963
jmp 0x45e0b5
cmp esi, ebx
je 0x45e339
push str.SOFTWARE360Safe
push reloc.OLEAUT32.dll_SysReAllocString
call dword [sym.imp.SHLWAPI.dll_SHDeleteKeyW]
lea ecx, [ebp - 0x3c]
call fcn.00454128
push 0x4c1a00
lea ecx, [ebp - 0x3c]
mov byte [ebp - 4], 0xc
call fcn.00402894
push ebx
lea eax, [ebp - 0x3c]
push eax
mov eax, dword [ebp - 0x1c]
push 0x3443
push dword [eax + 4]
call dword [sym.imp.USER32.dll_SendMessageW]
mov ecx, dword [ebp - 0x1c]
call fcn.0045a9f6
mov dword [ebp - 0x2c], eax
cmp eax, ebx
jne 0x45e384
lea ecx, [ebp - 0x3c]
call fcn.00447c1c
jmp 0x45e2f4
push edi
lea ecx, [ebp - 0x14]
call fcn.0040293e
mov ecx, dword [ebp - 0x10]
lea eax, [ebp - 0x14]
push eax
mov byte [ebp - 4], 0xd
call fcn.004600b7
test eax, eax
jne 0x45e3fa
push ebx
push ebx
push 0x9a
call fcn.00402eb7
mov ecx, eax
call fcn.00402f48
mov ecx, dword [ebp - 0x14]
add ecx, 0xfffffff0
call fcn.00402963
lea ecx, [ebp - 0x3c]
call fcn.00447c1c
mov ecx, dword [ebp - 0x18]
add ecx, 0xfffffff0
call fcn.00402963
mov ecx, dword [ebp - 0x20]
add ecx, 0xfffffff0
call fcn.00402963
mov ecx, dword [ebp - 0x24]
add ecx, 0xfffffff0
call fcn.00402963
mov ecx, dword [ebp - 0x28]
add ecx, 0xfffffff0
call fcn.00402963
mov eax, ebx
jmp 0x45e0b7
mov eax, dword [ebp - 0x2c]
push dword [ebp - 0x14]
mov ecx, dword [eax]
push eax
call dword [ecx + 4]
mov ecx, dword [ebp - 0x10]
call fcn.0045ec1e
cmp eax, ebx
je 0x45e41b
push dword [ebp - 0x14]
mov ecx, dword [eax]
push eax
call dword [ecx + 0x30]
push dword [ebp - 0x14]
call fcn.00445d94
pop ecx
call fcn.004471e8
push dword [ebp - 0x18]
mov edi, dword [sym.imp.SHELL32.dll_SHCreateDirectory]
push ebx
call edi
mov ecx, dword [ebp - 0x1c]
lea eax, [ebp - 0x14]
add ecx, 0x70
push eax
call fcn.004483c6
mov ecx, dword [ebp - 0x1c]
lea eax, [ebp - 0x18]
push eax
add ecx, 0x70
call fcn.004483ce
mov ecx, dword [ebp - 0x1c]
lea eax, [ebp - 0x18]
add ecx, 0x380
push eax
call fcn.00401df2
mov ecx, dword [ebp - 0x1c]
call fcn.0045c314
push dword [ebp - 0x14]
push ebx
call edi
lea ecx, [ebp - 0x2c]
call fcn.004502f6
push dword [ebp - 0x14]
mov ecx, eax
mov byte [ebp - 4], 0xe
call fcn.004507a7
lea ecx, [ebp - 0x2c]
mov byte [ebp - 4], 0xd
call fcn.004502ff
push dword [ebp - 0x14]
call fcn.0040c08a
pop ecx
push ebx
push ebx
push 0xb9
call fcn.00402eb7
mov ecx, eax
call fcn.00402f48
push ebx
push ebx
push 1
push ebx
push dword [ebp - 0x1c]
lea ecx, [ebp - 0x5c]
cmp esi, ebx
je 0x45e4c7
push 0x45d1e7
jmp 0x45e4cc
push 0x45d741
call fcn.004011be
lea ecx, [ebp - 0x5c]
call fcn.00401202
push ebx
push ebx
push 0xba
call fcn.00402eb7
mov ecx, eax
call fcn.00402f48
xor ebx, ebx
inc ebx
jmp 0x45e3b4