Function at 0x4278f0
Capabilities:
Check if file exists
Contain obfuscated stackstrings
Create process on windows
Delete registry key
Get common file path
Get session user name
Query or enumerate registry value

Disassembly:
push ebp
mov ebp, esp
and esp, 0xfffffff8
push 0xffffffffffffffff
push 0x4ad753
mov eax, dword fs:[0]
push eax
push ecx
mov eax, 0x1eec
call fcn.00492e50
mov eax, dword [0x4e42d0]
xor eax, esp
mov dword [esp + 0x1ee8], eax
push ebx
push esi
push edi
mov eax, dword [0x4e42d0]
xor eax, esp
push eax
lea eax, [esp + 0x1f00]
mov dword fs:[0], eax
xor eax, eax
push 0x206
push eax
lea ecx, [esp + 0x2ae]
push ecx
mov word [esp + 0x2b0], ax
call fcn.00493520
mov esi, dword [sym.imp.SHLWAPI.dll_SHGetValueW]
add esp, 0xc
lea edx, [esp + 0x24]
push edx
lea eax, [esp + 0x2a8]
push eax
lea ecx, [esp + 0x44]
push ecx
push str.UninstallString
push str.SOFTWAREMicrosoftWindowsCurrentVersionUninstallStormPlayer9
mov edi, 0x102
mov ebx, 1
push reloc.OLEAUT32.dll_SysReAllocString
mov dword [esp + 0x3c], edi
mov dword [esp + 0x54], ebx
call esi
test eax, eax
jne 0x427ede
xor edx, edx
push 0x206
mov byte [esp + 0x1e], al
push edx
lea eax, [esp + 0x4b6]
push eax
mov word [esp + 0x4b8], dx
call fcn.00493520
add esp, 0xc
lea ecx, [esp + 0x24]
push ecx
lea edx, [esp + 0x4b0]
push edx
lea eax, [esp + 0x44]
push eax
push str.DisplayVersion
push str.SOFTWAREMicrosoftWindowsCurrentVersionUninstallStormPlayer9
push reloc.OLEAUT32.dll_SysReAllocString
mov dword [esp + 0x3c], edi
mov dword [esp + 0x54], ebx
call esi
test eax, eax
jne 0x427ba3
push 0x4ba358
lea ecx, [esp + 0x4b0]
push ecx
call dword [sym.imp.SHLWAPI.dll_StrCmpW]
test eax, eax
je 0x427ba3
lea edx, [esp + 0x1b]
push edx
push str.5.42.1031.1111
lea esi, [esp + 0x7c]
call fcn.00440210
lea eax, [esp + 0x1b]
push eax
lea ecx, [esp + 0x4b0]
push ecx
lea esi, [esp + 0x68]
mov dword [esp + 0x1f10], 0
call fcn.00440210
mov eax, esi
lea ecx, [esp + 0x74]
call fcn.004402a0
test eax, eax
jns 0x427a51
mov byte [esp + 0x1a], bl
lea edx, [esp + 0x1b]
push edx
push str.9.06.0912.1111
lea esi, [esp + 0x90]
call fcn.00440210
lea eax, [esp + 0x60]
mov ecx, esi
mov byte [esp + 0x1f08], 2
call fcn.004402a0
test eax, eax
jle 0x427b8d
push str.SkinFile
mov esi, str.SoftwareBaofengVideoStormPlayer9UserConfig
mov edi, SysReAllocString
call fcn.00405330
add esp, 4
push str.ThemeFile
call fcn.00405330
add esp, 4
xor eax, eax
push 0x206
push eax
lea ecx, [esp + 0xa6]
push ecx
mov word [esp + 0xa8], ax
call fcn.00493520
mov esi, dword [sym.imp.SHELL32.dll_SHGetSpecialFolderPathW]
add esp, 0xc
push ebx
push 0x23
lea edx, [esp + 0xa4]
push edx
push 0
call esi
test eax, eax
je 0x427b93
lea eax, [esp + 0x38]
push eax
lea ecx, [esp + 0xa0]
call fcn.00402b20
lea ecx, [esp + 0x38]
push ecx
lea edx, [esp + 0x28]
push edx
mov ebx, str.BaofengVideoStormPlayer9Profiles
mov byte [esp + 0x1f10], 3
call fcn.00404f20
push eax
lea eax, [esp + 0x34]
push eax
mov ebx, str._skinlist.xml
mov byte [esp + 0x1f18], 4
call fcn.00404f20
add esp, 0x10
lea ecx, [esp + 0x24]
mov byte [esp + 0x1f08], 6
call fcn.00402760
mov ecx, dword [esp + 0x28]
push ecx
call dword [sym.imp.SHLWAPI.dll_PathFileExistsW]
test eax, eax
je 0x427b6b
mov eax, dword [esp + 0x28]
push ecx
add eax, 0xfffffff0
mov dword [esp + 0x14], esp
mov edi, esp
call fcn.004050f0
add eax, 0x10
mov dword [edi], eax
call fcn.004044a0
add esp, 4
lea ecx, [esp + 0x28]
call fcn.00402760
lea ecx, [esp + 0x38]
call fcn.00402760
mov dword [esp + 0x1f08], 0xffffffff
jmp 0x427cfd
mov esi, dword [sym.imp.SHELL32.dll_SHGetSpecialFolderPathW]
mov dword [esp + 0x1f08], 0xffffffff
jmp 0x427cfd
push str.SkinFile
mov esi, str.SoftwareBaofengVideoStormPlayer9UserConfig
mov edi, SysReAllocString
call fcn.00405330
add esp, 4
push str.ThemeFile
call fcn.00405330
add esp, 4
xor edx, edx
push 0x206
push edx
lea eax, [esp + 0xa6]
push eax
mov word [esp + 0xa8], dx
call fcn.00493520
add esp, 0xc
push ebx
push 0x23
lea ecx, [esp + 0xa4]
push ecx
push 0
call dword [sym.imp.SHELL32.dll_SHGetSpecialFolderPathW]
test eax, eax
je 0x427cf7
lea edx, [esp + 0x2c]
push edx
lea ecx, [esp + 0xa0]
call fcn.00402b20
lea eax, [esp + 0x2c]
push eax
lea ecx, [esp + 0x28]
push ecx
mov ebx, str.BaofengVideoStormPlayer9Profiles
mov dword [esp + 0x1f10], 7
call fcn.00404f20
push eax
lea edx, [esp + 0x20]
push edx
mov ebx, str._skinlist.xml
mov byte [esp + 0x1f18], 8
call fcn.00404f20
add esp, 0x10
mov byte [esp + 0x1f08], 0xa
mov eax, dword [esp + 0x24]
add eax, 0xfffffff0
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x427c75
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov ecx, dword [esp + 0x14]
push ecx
call dword [sym.imp.SHLWAPI.dll_PathFileExistsW]
test eax, eax
je 0x427ca4
mov eax, dword [esp + 0x14]
push ecx
add eax, 0xfffffff0
mov dword [esp + 0x14], esp
mov esi, esp
call fcn.004050f0
add eax, 0x10
mov dword [esi], eax
call fcn.004044a0
add esp, 4
mov byte [esp + 0x1f08], 7
mov eax, dword [esp + 0x14]
add eax, 0xfffffff0
lea edx, [eax + 0xc]
or ecx, 0xffffffff
lock xadd dword [edx], ecx
dec ecx
test ecx, ecx
jg 0x427ccc
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov dword [esp + 0x1f08], 0xffffffff
mov eax, dword [esp + 0x2c]
add eax, 0xfffffff0
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x427cf7
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov esi, dword [sym.imp.SHELL32.dll_SHGetSpecialFolderPathW]
lea ecx, [esp + 0x2a4]
push ecx
call dword [sym.imp.SHLWAPI.dll_PathFileExistsW]
test eax, eax
je 0x427e13
cmp byte [esp + 0x1a], 0
je 0x427e13
push str.WaitUninst
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_CreateEventW]
lea edx, [esp + 0x14]
push edx
mov ecx, 0x4ba358
mov esi, eax
call fcn.00402b20
lea eax, [esp + 0x2a4]
push eax
push str.__s___Silence__frominstall
lea edi, [esp + 0x1c]
mov dword [esp + 0x1f10], 0xb
call fcn.00402d60
mov eax, dword [esp + 0x1c]
add esp, 8
cmp dword [eax - 4], 1
jle 0x427d7e
mov ecx, dword [eax - 0xc]
push ecx
mov edx, edi
push edx
call fcn.00402bc0
mov eax, dword [esp + 0x14]
push eax
push 0
call fcn.00401560
add esp, 8
push 0x7530
push esi
call dword [sym.imp.KERNEL32.dll_WaitForSingleObject]
mov eax, dword [esp + 0x14]
mov ecx, dword [eax - 8]
push ecx
push eax
call fcn.004907a5
add esp, 8
test eax, eax
js 0x427e09
mov ecx, dword [esp + 0x14]
cmp eax, dword [ecx - 8]
jg 0x427e09
mov dword [ecx - 0xc], eax
mov edx, dword [esp + 0x14]
xor ecx, ecx
mov word [edx + eax*2], cx
mov ecx, str.B9_Uninst.exe
call fcn.00401920
test esi, esi
je 0x427dd5
push esi
call dword [sym.imp.KERNEL32.dll_CloseHandle]
mov dword [esp + 0x1f08], 0xffffffff
mov eax, dword [esp + 0x14]
add eax, 0xfffffff0
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x4288ba
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
jmp 0x4288ba
push 0x80070057
call fcn.004035c0
lea ecx, [esp + 0x2a4]
push 0x5c
push ecx
call fcn.00490c12
xor edx, edx
mov word [eax], dx
add esp, 8
lea eax, [esp + 0x20]
push eax
lea ecx, [esp + 0x2a8]
call fcn.00402b20
push 0
push str.BaofengPlatform_BF9_NINE
mov dword [esp + 0x1f10], 0xc
call dword [sym.imp.USER32.dll_FindWindowW]
test eax, eax
je 0x427e6d
push 0
push 0x7d0
push 0
push 0
push 0
push 0x10
push eax
call dword [sym.imp.USER32.dll_SendMessageTimeoutW]
mov ecx, 0x4bdf30
call fcn.00401920
mov ecx, 0x4bdf5c
call fcn.00401920
mov ecx, 0x4bdf84
call fcn.00401920
mov ecx, str.bfscr.exe
call fcn.00401920
mov ecx, str.tbb.exe
call fcn.00401920
push 1
push 0x25
lea ecx, [esp + 0x6bc]
push ecx
push 0
call esi
test eax, eax
jne 0x427ee5
mov dword [esp + 0x1f08], 0xffffffff
mov eax, dword [esp + 0x20]
add eax, 0xfffffff0
lea edx, [eax + 0xc]
or ecx, 0xffffffff
lock xadd dword [edx], ecx
dec ecx
test ecx, ecx
jg 0x427ede
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
xor eax, eax
jmp 0x4288bf
push 1
push 0x23
lea ecx, [esp + 0x10e4]
push ecx
push 0
call esi
test eax, eax
je 0x427eb3
push 1
push 0
lea ecx, [esp + 0xcd4]
push ecx
push 0
call esi
test eax, eax
jne 0x427f1d
lea ecx, [esp + 0x20]
call fcn.00402760
xor eax, eax
jmp 0x4288bf
push 1
push 0x10
lea edx, [esp + 0x14f4]
push edx
push 0
call esi
test eax, eax
je 0x427f0d
push 1
push 0x19
lea eax, [esp + 0x8c4]
push eax
push 0
call esi
test eax, eax
je 0x427f0d
push 1
push 0x17
lea ecx, [esp + 0xacc]
push ecx
push 0
call esi
test eax, eax
je 0x427f0d
lea eax, [esp + 0xed4]
call fcn.0043dbc0
test eax, eax
je 0x427f0d
lea eax, [esp + 0x12e4]
call fcn.0043dc10
test eax, eax
je 0x427f0d
lea edx, [esp + 0x24]
push edx
lea ecx, [esp + 0x6b8]
call fcn.00402b20
lea eax, [esp + 0x38]
push eax
lea ecx, [esp + 0x10e0]
mov byte [esp + 0x1f0c], 0xd
call fcn.00402b20
lea ecx, [esp + 0x48]
push ecx
lea ecx, [esp + 0xcd0]
mov byte [esp + 0x1f0c], 0xe
call fcn.00402b20
lea edx, [esp + 0x44]
push edx
lea ecx, [esp + 0x14f0]
mov byte [esp + 0x1f0c], 0xf
call fcn.00402b20
lea eax, [esp + 0x4c]
push eax
lea ecx, [esp + 0x8c0]
mov byte [esp + 0x1f0c], 0x10
call fcn.00402b20
lea ecx, [esp + 0x34]
push ecx
lea ecx, [esp + 0xac8]
mov byte [esp + 0x1f0c], 0x11
call fcn.00402b20
lea edx, [esp + 0x28]
push edx
lea ecx, [esp + 0xed8]
mov byte [esp + 0x1f0c], 0x12
call fcn.00402b20
lea eax, [esp + 0x3c]
push eax
lea ecx, [esp + 0x12e8]
mov byte [esp + 0x1f0c], 0x13
call fcn.00402b20
mov byte [esp + 0x1f08], 0x14
call fcn.004057d0
test al, al
je 0x42824c
call fcn.004058a0
test al, al
jne 0x42824c
lea ecx, [esp + 0x34]
push ecx
lea edx, [esp + 0x18]
push edx
mov ebx, 0x4bdfc4
call fcn.00404f20
add esp, 8
push 0
push 0
mov byte [esp + 0x1f10], 0x15
mov eax, dword [esp + 0x1c]
mov esi, dword [sym.imp.SHELL32.dll_ShellExecuteW]
push 0
push eax
push str.taskbarunpin
push 0
call esi
lea ecx, [esp + 0x34]
push ecx
lea edx, [esp + 0x14]
push edx
mov ebx, 0x4be008
call fcn.00404f20
add esp, 8
lea edi, [esp + 0x14]
mov byte [esp + 0x1f08], 0x16
call fcn.00405000
lea ecx, [esp + 0x10]
mov byte [esp + 0x1f08], 0x15
call fcn.00402760
mov eax, dword [esp + 0x14]
push 0
push 0
push 0
push eax
push str.taskbarunpin
push 0
call esi
lea ecx, [esp + 0x28]
push ecx
lea edx, [esp + 0x14]
push edx
mov ebx, 0x4be038
call fcn.00404f20
add esp, 8
mov byte [esp + 0x1f08], 0x17
call fcn.00405000
lea ecx, [esp + 0x10]
mov byte [esp + 0x1f08], 0x15
call fcn.00402760
mov eax, dword [esp + 0x14]
push 0
push 0
push 0
push eax
push str.taskbarunpin
push 0
call esi
lea ecx, [esp + 0x4c]
push ecx
lea edx, [esp + 0x14]
push edx
call fcn.00404f20
add esp, 8
mov byte [esp + 0x1f08], 0x18
call fcn.00405000
lea ecx, [esp + 0x10]
mov byte [esp + 0x1f08], 0x15
call fcn.00402760
mov eax, dword [esp + 0x14]
push 0
push 0
push 0
push eax
push str.taskbarunpin
push 0
call esi
lea ecx, [esp + 0x48]
push ecx
lea edx, [esp + 0x14]
push edx
call fcn.00404f20
add esp, 8
mov byte [esp + 0x1f08], 0x19
call fcn.00405000
lea ecx, [esp + 0x10]
mov byte [esp + 0x1f08], 0x15
call fcn.00402760
mov eax, dword [esp + 0x14]
push 0
push 0
push 0
push eax
push str.taskbarunpin
push 0
call esi
lea ecx, [esp + 0x44]
push ecx
lea edx, [esp + 0x14]
push edx
call fcn.00404f20
add esp, 8
mov byte [esp + 0x1f08], 0x1a
call fcn.00405000
lea ecx, [esp + 0x10]
mov byte [esp + 0x1f08], 0x15
call fcn.00402760
mov eax, dword [esp + 0x14]
push 0
push 0
push 0
push eax
push str.taskbarunpin
push 0
call esi
lea ecx, [esp + 0x3c]
push ecx
lea edx, [esp + 0x30]
push edx
call fcn.00404f20
mov byte [esp + 0x1f10], 0x1b
mov eax, dword [esp + 0x34]
add esp, 4
add eax, 0xfffffff0
mov dword [esp + 0x14], esp
mov esi, esp
call fcn.004050f0
add eax, 0x10
mov dword [esi], eax
call fcn.004044a0
add esp, 4
lea ecx, [esp + 0x2c]
call fcn.00402760
mov ecx, edi
mov byte [esp + 0x1f08], 0x14
call fcn.00402760
jmp 0x4282eb
call fcn.004058a0
test al, al
je 0x4282eb
lea eax, [esp + 0x28]
push eax
lea ecx, [esp + 0x14]
push ecx
mov ebx, 0x4be050
call fcn.00404f20
add esp, 8
lea edx, [esp + 0x14]
mov byte [esp + 0x1f08], 0x1c
mov ecx, dword [eax]
push edx
call fcn.004097e0
lea ecx, [esp + 0x10]
mov byte [esp + 0x1f08], 0x1e
call fcn.00402760
mov eax, dword [esp + 0x14]
push 0
push eax
call fcn.00492b2c
add esp, 8
cmp eax, 0xffffffff
je 0x4282da
lea ecx, [esp + 0x2c]
push ecx
mov ecx, 0x4be090
call fcn.00402b20
mov byte [esp + 0x1f08], 0x1f
mov edx, dword [esp + 0x28]
mov ecx, dword [esp + 0x2c]
push edx
call fcn.00401ca0
add esp, 4
lea ecx, [esp + 0x2c]
call fcn.00402760
lea eax, [esp + 0x14]
mov byte [esp + 0x1f08], 0x14
call fcn.004098f0
mov eax, dword [esp + 0x38]
push ecx
add eax, 0xfffffff0
mov dword [esp + 0x14], esp
mov esi, esp
call fcn.004050f0
add eax, 0x10
mov dword [esi], eax
mov byte [esp + 0x1f0c], 0x20
mov eax, dword [esp + 0x28]
push ecx
add eax, 0xfffffff0
mov dword [esp + 0x34], esp
mov esi, esp
call fcn.004050f0
add eax, 0x10
mov dword [esi], eax
mov byte [esp + 0x1f10], 0x21
mov eax, dword [esp + 0x28]
push ecx
add eax, 0xfffffff0
mov dword [esp + 0x20], esp
mov esi, esp
call fcn.004050f0
add eax, 0x10
mov dword [esi], eax
mov byte [esp + 0x1f14], 0x14
call fcn.0042bcd0
lea eax, [esp + 0x48]
push eax
lea ecx, [esp + 0x20]
push ecx
mov ebx, 0x4be038
call fcn.00404f20
mov byte [esp + 0x1f10], 0x22
mov eax, dword [esp + 0x24]
add esp, 4
add eax, 0xfffffff0
mov dword [esp + 0x14], esp
mov esi, esp
call fcn.004050f0
add eax, 0x10
mov dword [esi], eax
call fcn.004044a0
add esp, 4
lea edx, [esp + 0x44]
push edx
lea eax, [esp + 0x14]
push eax
call fcn.00404f20
add esp, 8
lea edi, [esp + 0x1c]
mov byte [esp + 0x1f08], 0x23
call fcn.00405000
lea ecx, [esp + 0x10]
mov byte [esp + 0x1f08], 0x22
call fcn.00402760
mov eax, dword [esp + 0x1c]
push ecx
add eax, 0xfffffff0
mov dword [esp + 0x14], esp
mov esi, esp
call fcn.004050f0
add eax, 0x10
mov dword [esi], eax
call fcn.004044a0
add esp, 4
lea ecx, [esp + 0x4c]
push ecx
lea edx, [esp + 0x14]
push edx
call fcn.00404f20
add esp, 8
mov byte [esp + 0x1f08], 0x24
call fcn.00405000
mov byte [esp + 0x1f08], 0x22
lea ecx, [esp + 0x10]
call fcn.00402760
mov eax, dword [esp + 0x1c]
push ecx
add eax, 0xfffffff0
mov dword [esp + 0x14], esp
mov esi, esp
call fcn.004050f0
add eax, 0x10
mov dword [esi], eax
call fcn.004044a0
add esp, 4
lea eax, [esp + 0x34]
push eax
lea ecx, [esp + 0x14]
push ecx
mov ebx, 0x4be0a8
call fcn.00404f20
add esp, 8
mov byte [esp + 0x1f08], 0x25
call fcn.00405000
lea ecx, [esp + 0x10]
mov byte [esp + 0x1f08], 0x22
call fcn.00402760
mov edx, dword [esp + 0x1c]
push 0
push edx
call fcn.00404890
lea eax, [esp + 0x3c]
push eax
lea ecx, [esp + 0x1c]
push ecx
call fcn.00404f20
add esp, 0x10
mov byte [esp + 0x1f08], 0x26
call fcn.00405000
lea ecx, [esp + 0x10]
mov byte [esp + 0x1f08], 0x22
call fcn.00402760
mov edx, dword [esp + 0x1c]
push 0
push edx
call fcn.00404890
lea eax, [esp + 0x3c]
push eax
lea ecx, [esp + 0x1c]
push ecx
mov ebx, 0x4be0bc
call fcn.00404f20
add esp, 0x10
mov byte [esp + 0x1f08], 0x27
call fcn.00405000
lea ecx, [esp + 0x10]
mov byte [esp + 0x1f08], 0x22
call fcn.00402760
mov edx, dword [esp + 0x1c]
push 0
push edx
call fcn.00404890
lea eax, [esp + 0x30]
push eax
lea ecx, [esp + 0x1c]
push ecx
mov ebx, 0x4be038
call fcn.00404f20
add esp, 0x10
mov byte [esp + 0x1f08], 0x28
call fcn.00405000
lea ecx, [esp + 0x10]
mov byte [esp + 0x1f08], 0x22
call fcn.00402760
mov eax, dword [esp + 0x1c]
push ecx
add eax, 0xfffffff0
mov dword [esp + 0x14], esp
mov esi, esp
call fcn.004050f0
add eax, 0x10
mov dword [esi], eax
call fcn.004044a0
add esp, 4
lea edx, [esp + 0x30]
push edx
mov ecx, str.SoftwareBaofengVideoStormPlayer9UserConfigDirectShow
call fcn.00402b20
mov esi, dword [sym.imp.SHLWAPI.dll_SHGetValueW]
mov eax, 4
mov dword [esp + 0x40], eax
mov dword [esp + 0x50], eax
lea eax, [esp + 0x40]
push eax
mov eax, dword [esp + 0x34]
lea ecx, [esp + 0x60]
push ecx
lea edx, [esp + 0x58]
push edx
push str.BHDState
push eax
xor edi, edi
push SysReAllocString
xor bl, bl
mov dword [esp + 0x74], edi
call esi
test eax, eax
jne 0x428595
mov bl, 1
lea ecx, [esp + 0x40]
push ecx
mov ecx, dword [esp + 0x34]
lea edx, [esp + 0x5c]
push edx
lea eax, [esp + 0x58]
push eax
push str.EnableHRTF
push ecx
push SysReAllocString
mov byte [esp + 0x32], 0
mov dword [esp + 0x70], edi
call esi
test eax, eax
jne 0x4285c7
mov byte [esp + 0x1a], 1
lea edx, [esp + 0x40]
push edx
mov edx, dword [esp + 0x34]
lea eax, [esp + 0x58]
push eax
lea ecx, [esp + 0x58]
push ecx
push str.HRTFBtnState
push edx
push SysReAllocString
mov byte [esp + 0x33], 0
mov dword [esp + 0x6c], edi
call esi
cmp eax, edi
jne 0x4285f9
mov byte [esp + 0x1b], 1
mov esi, dword [esp + 0x30]
push esi
push SysReAllocString
call dword [sym.imp.SHLWAPI.dll_SHDeleteKeyW]
cmp eax, 5
jne 0x428674
lea eax, [esp + 0x10]
push eax
lea ecx, [esp + 0xa0]
push ecx
mov dword [esp + 0x18], 0x202
call dword [sym.imp.ADVAPI32.dll_GetUserNameW]
push esi
push str.CURRENT_USER
push str._s_s
lea edx, [esp + 0x1700]
push 0x800
push edx
call fcn.00490c40
add esp, 0x14
push 0xf003f
lea eax, [esp + 0xa0]
push eax
push 2
lea edi, [esp + 0x1700]
call fcn.00405b90
test eax, eax
je 0x428674
push esi
push SysReAllocString
call dword [sym.imp.SHLWAPI.dll_SHDeleteKeyW]
test bl, bl
je 0x42868e
mov ecx, dword [esp + 0x5c]
mov esi, dword [esp + 0x30]
push ecx
mov ebx, str.BHDState
call fcn.004051f0
add esp, 4
cmp byte [esp + 0x1a], 0
je 0x4286ab
mov edx, dword [esp + 0x58]
mov esi, dword [esp + 0x30]
push edx
mov ebx, str.EnableHRTF
call fcn.004051f0
add esp, 4
cmp byte [esp + 0x1b], 0
je 0x4286c8
mov eax, dword [esp + 0x54]
mov esi, dword [esp + 0x30]
push eax
mov ebx, str.HRTFBtnState
call fcn.004051f0
add esp, 4
push str.RememberSubtitleSettings
mov esi, str.SoftwareBaofengVideoStormPlayer9UserConfig
mov edi, SysReAllocString
call fcn.00405330
add esp, 4
push str.ShowMode
call fcn.00405330
add esp, 4
push str.M_FontName
call fcn.00405330
add esp, 4
push str.M_FontSize
call fcn.00405330
add esp, 4
push str.M_FontColor
call fcn.00405330
add esp, 4
push str.M_FontBColor
call fcn.00405330
add esp, 4
push str.M_FontSColor
call fcn.00405330
add esp, 4
push str.M_Position
call fcn.00405330
add esp, 4
push str.V_FontName
call fcn.00405330
add esp, 4
push str.V_FontSize
call fcn.00405330
add esp, 4
push str.V_FontColor
call fcn.00405330
add esp, 4
push str.V_FontBColor
call fcn.00405330
add esp, 4
push str.V_FontSColor
call fcn.00405330
add esp, 4
push str.V_Position
call fcn.00405330
add esp, 4
push str.PLShowType
call fcn.00405330
add esp, 4
push str.FirstUserCustomPictureSkin
call fcn.00405330
add esp, 4
push str.PlayOrder
call fcn.00405330
add esp, 4
lea esi, [esp + 0x14]
call fcn.00402740
lea ecx, [esp + 0x38]
push ecx
lea edx, [esp + 0x14]
push edx
mov ebx, str.BaofengVideoStormPlayer9_tempBFVCenter__yf25__.exe
mov byte [esp + 0x1f10], 0x2a
call fcn.00404f20
add esp, 8
mov edi, esi
mov byte [esp + 0x1f08], 0x2b
call fcn.00405000
lea ecx, [esp + 0x10]
mov byte [esp + 0x1f08], 0x2a
call fcn.00402760
mov eax, dword [esp + 0x14]
push ecx
add eax, 0xfffffff0
mov dword [esp + 0x14], esp
mov esi, esp
call fcn.004050f0
add eax, 0x10
mov dword [esi], eax
call fcn.004044a0
add esp, 4
push str.FullScreenADDate
mov esi, str.SoftwareBaofengVideoStormPlayer9UserConfig
mov edi, SysReAllocString
call fcn.00405330
add esp, 4
call fcn.00405780
test al, al
jne 0x42884e
call fcn.004057d0
test al, al
je 0x42884e
call fcn.004058a0
test al, al
jne 0x42884e
call fcn.004058f0
lea ecx, [esp + 0x14]
call fcn.00402760
lea ecx, [esp + 0x30]
call fcn.00402760
lea ecx, [esp + 0x1c]
call fcn.00402760
lea ecx, [esp + 0x3c]
call fcn.00402760
lea ecx, [esp + 0x28]
call fcn.00402760
lea ecx, [esp + 0x34]
call fcn.00402760
lea ecx, [esp + 0x4c]
call fcn.00402760
lea ecx, [esp + 0x44]
call fcn.00402760
lea ecx, [esp + 0x48]
call fcn.00402760
lea ecx, [esp + 0x38]
call fcn.00402760
lea ecx, [esp + 0x24]
call fcn.00402760
lea ecx, [esp + 0x20]
call fcn.00402760
mov eax, 1
mov ecx, dword [esp + 0x1f00]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [esp + 0x1ee8]
xor ecx, esp
call fcn.0048f6cb
mov esp, ebp
pop ebp
ret