Function at 0x403890
Capabilities:
Check if file exists
Delete file
Delete registry key

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x4ac48e
mov eax, dword fs:[0]
push eax
sub esp, 0xe4
mov eax, dword [0x4d500c]
xor eax, ebp
mov dword [ebp - 0x10], eax
push ebx
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
push 0
push 0x403570
push edx
push 0x93
push 0
mov dword [ebp - 0xec], 0
call dword [sym.imp.KERNEL32.dll_GetModuleHandleW]
push eax
call dword [sym.imp.USER32.dll_DialogBoxParamW]
cmp eax, 1
jne 0x403db1
call fcn.0040b180
test eax, eax
je 0x403aed
mov ecx, 2
call fcn.00411130
call fcn.004138a0
lea ecx, [ebp - 0xd0]
call fcn.00416ce0
mov dword [ebp - 4], 0
mov edx, dword [ebp - 0xbc]
mov ebx, dword [sym.imp.SHLWAPI.dll_PathIsDirectoryW]
mov edi, dword [sym.imp.SHLWAPI.dll_PathFileExistsW]
mov ecx, dword [ebp - 0xd0]
cmp edx, 8
jb 0x40393c
test ecx, ecx
je 0x4039a1
cmp edx, 8
lea eax, [ebp - 0xd0]
cmovae eax, ecx
cmp word [eax], 0
je 0x4039a1
cmp edx, 8
lea eax, [ebp - 0xd0]
cmovae eax, ecx
push eax
call edi
test eax, eax
je 0x4039a1
cmp dword [ebp - 0xbc], 8
lea esi, [ebp - 0xd0]
jb 0x40397a
mov esi, dword [ebp - 0xd0]
test esi, esi
je 0x4039a1
cmp word [esi], 0
je 0x4039a1
push esi
call edi
test eax, eax
je 0x4039a1
push esi
call ebx
mov ecx, esi
test eax, eax
je 0x40399c
push 1
call fcn.004335c0
add esp, 4
jmp 0x4039a1
call fcn.00433240
cmp dword [0x4deb38], 0
je 0x403a9a
mov edx, 0x1c
mov byte [ebp - 4], 1
lea ecx, [ebp - 0xb8]
call fcn.00420510
mov edx, str.GoogleChromeUser_Data
mov dword [ebp - 0xec], 3
lea ecx, [ebp - 0xb8]
call fcn.0041af80
mov edx, dword [ebp - 0xa4]
mov ecx, dword [ebp - 0xb8]
cmp edx, 8
jb 0x4039f1
test ecx, ecx
je 0x403a66
cmp edx, 8
lea eax, [ebp - 0xb8]
cmovae eax, ecx
cmp word [eax], 0
je 0x403a66
cmp edx, 8
lea eax, [ebp - 0xb8]
cmovae eax, ecx
push eax
call edi
test eax, eax
je 0x403a5a
mov edx, dword [ebp - 0xa4]
lea esi, [ebp - 0xb8]
mov ecx, dword [ebp - 0xb8]
cmp edx, 8
jb 0x403a33
mov esi, ecx
test esi, esi
je 0x403a66
cmp word [esi], 0
je 0x403a66
push esi
call edi
test eax, eax
je 0x403a5a
push esi
call ebx
mov ecx, esi
test eax, eax
je 0x403a55
push 1
call fcn.004335c0
add esp, 4
jmp 0x403a5a
call fcn.00433240
mov edx, dword [ebp - 0xa4]
mov ecx, dword [ebp - 0xb8]
cmp edx, 8
jb 0x403a9a
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x403a90
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x403dcd
push edx
push ecx
call fcn.0044b3bd
add esp, 8
push str.SOFTWAREMicrosoftWindowsCurrentVersionUninstallAIWebGC
push SysReAllocString
call dword [sym.imp.SHLWAPI.dll_SHDeleteKeyW]
mov edx, dword [ebp - 0xbc]
cmp edx, 8
jb 0x403db1
mov ecx, dword [ebp - 0xd0]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x403da7
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x403dd2
jmp 0x403da7
mov ecx, 3
call fcn.00411130
push fcn.00403eb0
push 0x403ff0
push 6
push 0x18
lea eax, [ebp - 0xa0]
push eax
call fcn.0044b5eb
push ecx
lea eax, [ebp - 0x28]
mov dword [ebp - 4], 2
push eax
lea eax, [ebp - 0x40]
push eax
lea eax, [ebp - 0x58]
push eax
lea eax, [ebp - 0x70]
push eax
lea edx, [ebp - 0x88]
lea ecx, [ebp - 0xa0]
call fcn.004139f0
mov edi, dword [sym.imp.SHLWAPI.dll_PathFileExistsW]
lea esi, [ebp - 0xa0]
mov ebx, dword [sym.imp.KERNEL32.dll_DeleteFileW]
nop dword [eax]
push esi
lea ecx, [ebp - 0xd0]
call fcn.00404010
cmp dword [ebp - 0xbc], 8
lea eax, [ebp - 0xd0]
cmovae eax, dword [ebp - 0xd0]
push eax
call edi
test eax, eax
je 0x403b8e
cmp dword [ebp - 0xbc], 8
lea eax, [ebp - 0xd0]
cmovae eax, dword [ebp - 0xd0]
push eax
call ebx
mov edx, dword [ebp - 0xbc]
cmp edx, 8
jb 0x403bce
mov ecx, dword [ebp - 0xd0]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x403bc4
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x403dcd
push edx
push ecx
call fcn.0044b3bd
add esp, 8
add esi, 0x18
lea eax, [ebp - 0x10]
cmp esi, eax
jne 0x403b50
push fcn.00403eb0
push 6
push 0x18
lea eax, [ebp - 0xa0]
mov dword [ebp - 4], 0xffffffff
push eax
call fcn.0044b057
lea ecx, [ebp - 0xe8]
call fcn.004071b0
mov dword [ebp - 4], 3
mov edx, dword [ebp - 0xd4]
mov ebx, dword [sym.imp.SHLWAPI.dll_PathIsDirectoryW]
mov ecx, dword [ebp - 0xe8]
cmp edx, 8
jb 0x403c25
test ecx, ecx
je 0x403c8a
cmp edx, 8
lea eax, [ebp - 0xe8]
cmovae eax, ecx
cmp word [eax], 0
je 0x403c8a
cmp edx, 8
lea eax, [ebp - 0xe8]
cmovae eax, ecx
push eax
call edi
test eax, eax
je 0x403c8a
cmp dword [ebp - 0xd4], 8
lea esi, [ebp - 0xe8]
jb 0x403c63
mov esi, dword [ebp - 0xe8]
test esi, esi
je 0x403c8a
cmp word [esi], 0
je 0x403c8a
push esi
call edi
test eax, eax
je 0x403c8a
push esi
call ebx
mov ecx, esi
test eax, eax
je 0x403c85
push 1
call fcn.004335c0
add esp, 4
jmp 0x403c8a
call fcn.00433240
cmp dword [0x4deb38], 0
je 0x403d65
mov edx, 3
lea ecx, [ebp - 0xb8]
call fcn.00422460
mov byte [ebp - 4], 4
mov edx, dword [ebp - 0xa4]
mov ecx, dword [ebp - 0xb8]
cmp edx, 8
jb 0x403cc0
test ecx, ecx
je 0x403d35
cmp edx, 8
lea eax, [ebp - 0xb8]
cmovae eax, ecx
cmp word [eax], 0
je 0x403d35
cmp edx, 8
lea eax, [ebp - 0xb8]
cmovae eax, ecx
push eax
call edi
test eax, eax
je 0x403d29
mov edx, dword [ebp - 0xa4]
lea esi, [ebp - 0xb8]
mov ecx, dword [ebp - 0xb8]
cmp edx, 8
jb 0x403d02
mov esi, ecx
test esi, esi
je 0x403d35
cmp word [esi], 0
je 0x403d35
push esi
call edi
test eax, eax
je 0x403d29
push esi
call ebx
mov ecx, esi
test eax, eax
je 0x403d24
push 1
call fcn.004335c0
add esp, 4
jmp 0x403d29
call fcn.00433240
mov edx, dword [ebp - 0xa4]
mov ecx, dword [ebp - 0xb8]
cmp edx, 8
jb 0x403d65
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x403d5b
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x403dd7
push edx
push ecx
call fcn.0044b3bd
add esp, 8
push str.SOFTWAREMicrosoftWindowsCurrentVersionUninstallAIWeb
push SysReAllocString
call dword [sym.imp.SHLWAPI.dll_SHDeleteKeyW]
mov edx, dword [ebp - 0xd4]
cmp edx, 8
jb 0x403db1
mov ecx, dword [ebp - 0xe8]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x403da7
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x403ddc
push edx
push ecx
call fcn.0044b3bd
add esp, 8
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
call fcn.0044ae26
mov esp, ebp
pop ebp
ret
call fcn.0047aa50
call fcn.0047aa50
call fcn.0047aa50
call fcn.0047aa50
int3