Function at 0x45ebe3
Capabilities:
Check if file exists
Delete file
Delete registry key

Disassembly:
push 0x50
mov eax, 0x4b2b25
call fcn.004764c0
mov dword [ebp - 0x1c], ecx
call fcn.0045b5b2
xor esi, esi
mov dword [ebp - 0x10], eax
cmp eax, esi
jne 0x45ec08
xor eax, eax
call fcn.00476598
ret
mov ecx, 0x4f7c90
call fcn.0046a387
mov ecx, dword [ebp - 0x10]
call fcn.0045f244
push eax
lea ecx, [ebp - 0x28]
call fcn.00403cb9
push str.updatecfg.ini
lea eax, [ebp - 0x28]
push eax
lea eax, [ebp - 0x24]
push eax
mov dword [ebp - 4], esi
call fcn.00403a39
add esp, 0xc
push dword [ebp - 0x24]
mov ebx, dword [sym.imp.SHLWAPI.dll_PathFileExistsW]
mov byte [ebp - 4], 1
call ebx
test eax, eax
je 0x45ec5e
push dword [ebp - 0x24]
push esi
push esi
push str.theme.xml
call dword [sym.imp.KERNEL32.dll_WritePrivateProfileStringW]
mov edi, 0x4f9e00
push edi
lea ecx, [ebp - 0x20]
call fcn.004027fb
mov ecx, dword [ebp - 0x10]
lea eax, [ebp - 0x20]
push eax
mov byte [ebp - 4], 2
call fcn.00460be6
push str.360Entclient.exe
lea eax, [ebp - 0x20]
push eax
lea eax, [ebp - 0x2c]
push eax
call fcn.00403a39
add esp, 0xc
push dword [eax]
call ebx
mov ecx, dword [ebp - 0x2c]
mov ebx, eax
neg ebx
sbb bl, bl
add ecx, 0xfffffff0
inc bl
call fcn.00402820
test bl, bl
je 0x45ed4b
push str.Config_newui360SafeAir_Ent.xml
lea ecx, [ebp - 0x50]
call fcn.004024e0
push str.ConfigEnt_NewExaminePluginEx.xml
lea ecx, [ebp - 0x4c]
mov byte [ebp - 4], 3
call fcn.004024e0
push str.ConfigEnt_NewExaminePluginEx2.xml
lea ecx, [ebp - 0x48]
mov byte [ebp - 4], 4
call fcn.004024e0
push str.ConfigCustomizeCfg_10.xml
lea ecx, [ebp - 0x44]
mov byte [ebp - 4], 5
call fcn.004024e0
push str._safemonTrayMenuTrayMenuAir_Ent.xml
lea ecx, [ebp - 0x40]
mov byte [ebp - 4], 6
call fcn.004024e0
push 5
mov byte [ebp - 4], 7
lea ebx, [ebp - 0x50]
pop esi
push ebx
lea eax, [ebp - 0x20]
push eax
lea eax, [ebp - 0x2c]
push eax
call fcn.00432c7a
add esp, 0xc
push dword [eax]
call dword [sym.imp.KERNEL32.dll_DeleteFileW]
mov ecx, dword [ebp - 0x2c]
add ecx, 0xfffffff0
call fcn.00402820
add ebx, 4
dec esi
jne 0x45ed0b
push 0x4027f1
push 5
push 4
lea eax, [ebp - 0x50]
push eax
mov byte [ebp - 4], 2
call fcn.00479d5a
mov ecx, dword [ebp - 0x10]
call fcn.0045f262
mov esi, eax
neg esi
sbb esi, esi
push edi
lea ecx, [ebp - 0x18]
inc esi
call fcn.004027fb
mov ecx, dword [ebp - 0x10]
xor ebx, ebx
lea eax, [ebp - 0x18]
mov byte [ebp - 4], 8
push eax
cmp esi, ebx
je 0x45ed7b
call fcn.00462551
jmp 0x45ed80
call fcn.004610af
cmp eax, ebx
jne 0x45ee70
mov eax, esi
neg eax
sbb eax, eax
push ebx
and eax, 0xffffffe0
add eax, 0xb8
push ebx
push eax
call fcn.00402d6a
mov ecx, eax
call fcn.00402dfb
push edi
lea ecx, [ebp - 0x1c]
call fcn.004027fb
push 0x9b
lea ecx, [ebp - 0x1c]
mov byte [ebp - 4], 9
call fcn.0040249c
mov ecx, dword [ebp - 0x10]
call fcn.00460d72
mov edi, dword [ebp - 0x1c]
lea ecx, [ebp - 0x2c]
test eax, eax
je 0x45edf8
push 0x4bfa10
call fcn.004024e0
push ecx
lea eax, [ebp - 0x2c]
mov dword [ebp - 0x30], esp
mov ecx, esp
push eax
mov byte [ebp - 4], 0xa
call fcn.00403cb9
mov ecx, dword [ebp - 0x10]
call fcn.00460636
jmp 0x45ee20
push 0x96
call fcn.004325a7
mov eax, dword [eax]
mov ecx, dword [ebp - 0x10]
neg esi
sbb esi, esi
push 1
and esi, 0xfffffff0
add esi, 0x40
push esi
push eax
push edi
push ebx
mov byte [ebp - 4], 0xb
call fcn.00460542
mov ecx, dword [ebp - 0x2c]
add ecx, 0xfffffff0
mov byte [ebp - 4], 9
call fcn.00402820
mov ecx, dword [ebp - 0x10]
call fcn.0045f7cc
lea ecx, [edi - 0x10]
call fcn.00402820
mov ecx, dword [ebp - 0x18]
add ecx, 0xfffffff0
call fcn.00402820
mov ecx, dword [ebp - 0x20]
add ecx, 0xfffffff0
call fcn.00402820
mov ecx, dword [ebp - 0x24]
add ecx, 0xfffffff0
call fcn.00402820
mov ecx, dword [ebp - 0x28]
add ecx, 0xfffffff0
call fcn.00402820
jmp 0x45ec00
cmp esi, ebx
je 0x45ee84
push str.SOFTWARE360Safe
push reloc.OLEAUT32.dll_SysReAllocString
call dword [sym.imp.SHLWAPI.dll_SHDeleteKeyW]
lea ecx, [ebp - 0x3c]
call fcn.00448233
push 0x4c1a38
lea ecx, [ebp - 0x3c]
mov byte [ebp - 4], 0xc
call fcn.00402766
push ebx
lea eax, [ebp - 0x3c]
push eax
mov eax, dword [ebp - 0x1c]
push 0x3443
push dword [eax + 4]
call dword [sym.imp.USER32.dll_SendMessageW]
mov ecx, dword [ebp - 0x1c]
call fcn.0045b5f9
mov dword [ebp - 0x2c], eax
cmp eax, ebx
jne 0x45eecf
lea ecx, [ebp - 0x3c]
call fcn.00448259
jmp 0x45ee3f
push edi
lea ecx, [ebp - 0x14]
call fcn.004027fb
mov ecx, dword [ebp - 0x10]
lea eax, [ebp - 0x14]
push eax
mov byte [ebp - 4], 0xd
call fcn.00460be6
test eax, eax
jne 0x45ef45
push ebx
push ebx
push 0x9a
call fcn.00402d6a
mov ecx, eax
call fcn.00402dfb
mov ecx, dword [ebp - 0x14]
add ecx, 0xfffffff0
call fcn.00402820
lea ecx, [ebp - 0x3c]
call fcn.00448259
mov ecx, dword [ebp - 0x18]
add ecx, 0xfffffff0
call fcn.00402820
mov ecx, dword [ebp - 0x20]
add ecx, 0xfffffff0
call fcn.00402820
mov ecx, dword [ebp - 0x24]
add ecx, 0xfffffff0
call fcn.00402820
mov ecx, dword [ebp - 0x28]
add ecx, 0xfffffff0
call fcn.00402820
mov eax, ebx
jmp 0x45ec02
mov eax, dword [ebp - 0x2c]
push dword [ebp - 0x14]
mov ecx, dword [eax]
push eax
call dword [ecx + 4]
mov ecx, dword [ebp - 0x10]
call fcn.0045f79c
cmp eax, ebx
je 0x45ef66
push dword [ebp - 0x14]
mov ecx, dword [eax]
push eax
call dword [ecx + 0x30]
push dword [ebp - 0x14]
call fcn.0044647e
pop ecx
call fcn.004478a9
push dword [ebp - 0x18]
mov edi, dword [sym.imp.SHELL32.dll_SHCreateDirectory]
push ebx
call edi
mov ecx, dword [ebp - 0x1c]
lea eax, [ebp - 0x14]
add ecx, 0x70
push eax
call fcn.0044898a
mov ecx, dword [ebp - 0x1c]
lea eax, [ebp - 0x18]
push eax
add ecx, 0x70
call fcn.00448992
mov ecx, dword [ebp - 0x1c]
lea eax, [ebp - 0x18]
add ecx, 0x380
push eax
call fcn.00401c3e
mov ecx, dword [ebp - 0x1c]
call fcn.0045ce3e
push dword [ebp - 0x14]
push ebx
call edi
lea ecx, [ebp - 0x2c]
call fcn.004508e6
push dword [ebp - 0x14]
mov ecx, eax
mov byte [ebp - 4], 0xe
call fcn.00450d97
lea ecx, [ebp - 0x2c]
mov byte [ebp - 4], 0xd
call fcn.004508ef
push dword [ebp - 0x14]
call fcn.0040c108
pop ecx
push ebx
push ebx
push 0xb9
call fcn.00402d6a
mov ecx, eax
call fcn.00402dfb
push ebx
push ebx
push 1
push ebx
push dword [ebp - 0x1c]
lea ecx, [ebp - 0x5c]
cmp esi, ebx
je 0x45f012
push 0x45dd11
jmp 0x45f017
push 0x45e268
call fcn.004011be
lea ecx, [ebp - 0x5c]
call fcn.00401202
push ebx
push ebx
push 0xba
call fcn.00402d6a
mov ecx, eax
call fcn.00402dfb
xor ebx, ebx
inc ebx
jmp 0x45eeff