Function at 0x45ed4a
Capabilities:
Check if file exists
Delete file
Delete registry key

Disassembly:
push 0x50
mov eax, 0x4b2b28
call fcn.00476610
mov dword [ebp - 0x1c], ecx
call fcn.0045b072
xor esi, esi
mov dword [ebp - 0x10], eax
cmp eax, esi
jne 0x45ed6f
xor eax, eax
call fcn.004766e8
ret
mov ecx, 0x4f7ca8
call fcn.0046a2bd
mov ecx, dword [ebp - 0x10]
call fcn.0045f3af
push eax
lea ecx, [ebp - 0x28]
call fcn.00403c96
push str.updatecfg.ini
lea eax, [ebp - 0x28]
push eax
lea eax, [ebp - 0x24]
push eax
mov dword [ebp - 4], esi
call fcn.00403a6b
add esp, 0xc
push dword [ebp - 0x24]
mov ebx, dword [sym.imp.SHLWAPI.dll_PathFileExistsW]
mov byte [ebp - 4], 1
call ebx
test eax, eax
je 0x45edc5
push dword [ebp - 0x24]
push esi
push esi
push str.theme.xml
call dword [sym.imp.KERNEL32.dll_WritePrivateProfileStringW]
mov edi, 0x4f9e18
push edi
lea ecx, [ebp - 0x20]
call fcn.0040284b
mov ecx, dword [ebp - 0x10]
lea eax, [ebp - 0x20]
push eax
mov byte [ebp - 4], 2
call fcn.00460e88
push str.360Entclient.exe
lea eax, [ebp - 0x20]
push eax
lea eax, [ebp - 0x2c]
push eax
call fcn.00403a6b
add esp, 0xc
push dword [eax]
call ebx
mov ecx, dword [ebp - 0x2c]
mov ebx, eax
neg ebx
sbb bl, bl
add ecx, 0xfffffff0
inc bl
call fcn.00402870
test bl, bl
je 0x45eeb2
push str.Config_newui360SafeAir_Ent.xml
lea ecx, [ebp - 0x50]
call fcn.00402530
push str.ConfigEnt_NewExaminePluginEx.xml
lea ecx, [ebp - 0x4c]
mov byte [ebp - 4], 3
call fcn.00402530
push str.ConfigEnt_NewExaminePluginEx2.xml
lea ecx, [ebp - 0x48]
mov byte [ebp - 4], 4
call fcn.00402530
push str.ConfigCustomizeCfg_10.xml
lea ecx, [ebp - 0x44]
mov byte [ebp - 4], 5
call fcn.00402530
push str._safemonTrayMenuTrayMenuAir_Ent.xml
lea ecx, [ebp - 0x40]
mov byte [ebp - 4], 6
call fcn.00402530
push 5
mov byte [ebp - 4], 7
lea ebx, [ebp - 0x50]
pop esi
push ebx
lea eax, [ebp - 0x20]
push eax
lea eax, [ebp - 0x2c]
push eax
call fcn.00432ab7
add esp, 0xc
push dword [eax]
call dword [sym.imp.KERNEL32.dll_DeleteFileW]
mov ecx, dword [ebp - 0x2c]
add ecx, 0xfffffff0
call fcn.00402870
add ebx, 4
dec esi
jne 0x45ee72
push 0x402841
push 5
push 4
lea eax, [ebp - 0x50]
push eax
mov byte [ebp - 4], 2
call fcn.00479f5a
mov ecx, dword [ebp - 0x10]
call fcn.0045f3cd
mov esi, eax
neg esi
sbb esi, esi
push edi
lea ecx, [ebp - 0x18]
inc esi
call fcn.0040284b
mov ecx, dword [ebp - 0x10]
xor ebx, ebx
lea eax, [ebp - 0x18]
mov byte [ebp - 4], 8
push eax
cmp esi, ebx
je 0x45eee2
call fcn.004625b4
jmp 0x45eee7
call fcn.00461351
cmp eax, ebx
jne 0x45efd7
mov eax, esi
neg eax
sbb eax, eax
push ebx
and eax, 0xffffffe0
add eax, 0xb8
push ebx
push eax
call fcn.00402d9c
mov ecx, eax
call fcn.00402e2d
push edi
lea ecx, [ebp - 0x1c]
call fcn.0040284b
push 0x9b
lea ecx, [ebp - 0x1c]
mov byte [ebp - 4], 9
call fcn.004024ec
mov ecx, dword [ebp - 0x10]
call fcn.00461014
mov edi, dword [ebp - 0x1c]
lea ecx, [ebp - 0x2c]
test eax, eax
je 0x45ef5f
push 0x4c0ac8
call fcn.00402530
push ecx
lea eax, [ebp - 0x2c]
mov dword [ebp - 0x30], esp
mov ecx, esp
push eax
mov byte [ebp - 4], 0xa
call fcn.00403c96
mov ecx, dword [ebp - 0x10]
call fcn.004607b0
jmp 0x45ef87
push 0x96
call fcn.004323e4
mov eax, dword [eax]
mov ecx, dword [ebp - 0x10]
neg esi
sbb esi, esi
push 1
and esi, 0xfffffff0
add esi, 0x40
push esi
push eax
push edi
push ebx
mov byte [ebp - 4], 0xb
call fcn.004606bc
mov ecx, dword [ebp - 0x2c]
add ecx, 0xfffffff0
mov byte [ebp - 4], 9
call fcn.00402870
mov ecx, dword [ebp - 0x10]
call fcn.0045f96b
lea ecx, [edi - 0x10]
call fcn.00402870
mov ecx, dword [ebp - 0x18]
add ecx, 0xfffffff0
call fcn.00402870
mov ecx, dword [ebp - 0x20]
add ecx, 0xfffffff0
call fcn.00402870
mov ecx, dword [ebp - 0x24]
add ecx, 0xfffffff0
call fcn.00402870
mov ecx, dword [ebp - 0x28]
add ecx, 0xfffffff0
call fcn.00402870
jmp 0x45ed67
cmp esi, ebx
je 0x45efeb
push str.SOFTWARE360Safe
push reloc.OLEAUT32.dll_SysReAllocString
call dword [sym.imp.SHLWAPI.dll_SHDeleteKeyW]
lea ecx, [ebp - 0x3c]
call fcn.0043179f
push 0x4c27b8
lea ecx, [ebp - 0x3c]
mov byte [ebp - 4], 0xc
call fcn.004027b6
push ebx
lea eax, [ebp - 0x3c]
push eax
mov eax, dword [ebp - 0x1c]
push 0x3443
push dword [eax + 4]
call dword [sym.imp.USER32.dll_SendMessageW]
mov ecx, dword [ebp - 0x1c]
call fcn.0045b0b9
mov dword [ebp - 0x2c], eax
cmp eax, ebx
jne 0x45f036
lea ecx, [ebp - 0x3c]
call fcn.004317c5
jmp 0x45efa6
push edi
lea ecx, [ebp - 0x14]
call fcn.0040284b
mov ecx, dword [ebp - 0x10]
lea eax, [ebp - 0x14]
push eax
mov byte [ebp - 4], 0xd
call fcn.00460e88
test eax, eax
jne 0x45f0ac
push ebx
push ebx
push 0x9a
call fcn.00402d9c
mov ecx, eax
call fcn.00402e2d
mov ecx, dword [ebp - 0x14]
add ecx, 0xfffffff0
call fcn.00402870
lea ecx, [ebp - 0x3c]
call fcn.004317c5
mov ecx, dword [ebp - 0x18]
add ecx, 0xfffffff0
call fcn.00402870
mov ecx, dword [ebp - 0x20]
add ecx, 0xfffffff0
call fcn.00402870
mov ecx, dword [ebp - 0x24]
add ecx, 0xfffffff0
call fcn.00402870
mov ecx, dword [ebp - 0x28]
add ecx, 0xfffffff0
call fcn.00402870
mov eax, ebx
jmp 0x45ed69
mov eax, dword [ebp - 0x2c]
push dword [ebp - 0x14]
mov ecx, dword [eax]
push eax
call dword [ecx + 4]
mov ecx, dword [ebp - 0x10]
call fcn.0045f93b
cmp eax, ebx
je 0x45f0cd
push dword [ebp - 0x14]
mov ecx, dword [eax]
push eax
call dword [ecx + 0x30]
push dword [ebp - 0x14]
call fcn.0044639b
pop ecx
call fcn.00447c01
push dword [ebp - 0x18]
mov edi, dword [sym.imp.SHELL32.dll_SHCreateDirectory]
push ebx
call edi
mov ecx, dword [ebp - 0x1c]
lea eax, [ebp - 0x14]
add ecx, 0x70
push eax
call fcn.00448d31
mov ecx, dword [ebp - 0x1c]
lea eax, [ebp - 0x18]
push eax
add ecx, 0x70
call fcn.00448d39
mov ecx, dword [ebp - 0x1c]
lea eax, [ebp - 0x18]
add ecx, 0x380
push eax
call fcn.00401c8e
mov ecx, dword [ebp - 0x1c]
call fcn.0045d008
push dword [ebp - 0x14]
push ebx
call edi
lea ecx, [ebp - 0x2c]
call fcn.00450ced
push dword [ebp - 0x14]
mov ecx, eax
mov byte [ebp - 4], 0xe
call fcn.0045119e
lea ecx, [ebp - 0x2c]
mov byte [ebp - 4], 0xd
call fcn.00450cf6
push dword [ebp - 0x14]
call fcn.0040c0af
pop ecx
push ebx
push ebx
push 0xb9
call fcn.00402d9c
mov ecx, eax
call fcn.00402e2d
push ebx
push ebx
push 1
push ebx
push dword [ebp - 0x1c]
lea ecx, [ebp - 0x5c]
cmp esi, ebx
je 0x45f179
push 0x45dedb
jmp 0x45f17e
push 0x45e432
call fcn.004011be
lea ecx, [ebp - 0x5c]
call fcn.00401202
push ebx
push ebx
push 0xba
call fcn.00402d9c
mov ecx, eax
call fcn.00402e2d
xor ebx, ebx
inc ebx
jmp 0x45f066