Function at 0x408870
Capabilities:
Copy file
Query or enumerate registry value
Set registry value

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x624
mov eax, dword [0x41d84c]
xor eax, ebp
mov dword [ebp - 4], eax
mov eax, dword [ebp + 0xc]
push esi
push edi
cmp eax, 4
ja case.default.0x408891
jmp dword [eax*4 + 0x408d60]
mov eax, dword [str.Bang__Olufsen]
mov ecx, dword [0x41809c]
mov edx, dword [0x4180a0]
mov dword [ebp - 0x108], eax
mov ax, word [0x4180a4]
mov dword [ebp - 0x104], ecx
mov cl, byte [0x4180a6]
mov dword [ebp - 0x100], edx
mov dx, word [0x418094]
mov word [ebp - 0xfc], ax
mov al, byte [0x418096]
mov byte [ebp - 0xfa], cl
mov word [ebp - 0x20c], dx
mov byte [ebp - 0x20a], al
jmp case.default.0x408891
movzx eax, byte [0x418090]
mov ecx, dword [str.BO_Play]
mov edx, dword [0x41808c]
mov byte [ebp - 0x100], al
movzx eax, byte [0x418086]
mov dword [ebp - 0x108], ecx
mov ecx, dword [str.BOPlay]
mov dword [ebp - 0x104], edx
mov dx, word [0x418084]
mov dword [ebp - 0x20c], ecx
mov word [ebp - 0x208], dx
mov byte [ebp - 0x206], al
jmp case.default.0x408891
mov edx, dword [0x41807c]
mov ecx, 8
mov esi, str.Bang__Olufsen_Audio_Control_Panel
lea edi, [ebp - 0x108]
rep movsd dword es:[edi], dword [esi]
mov ecx, dword [str.BOAudio]
movsw word es:[edi], word [esi]
movsb byte es:[edi], byte [esi]
mov dword [ebp - 0x20c], ecx
mov dword [ebp - 0x208], edx
jmp case.default.0x408891
mov eax, dword [str.DTS_Audio_Control_Panel]
mov ecx, dword [0x418040]
mov edx, dword [0x418044]
mov dword [ebp - 0x108], eax
mov eax, dword [0x418048]
mov dword [ebp - 0x104], ecx
mov ecx, dword [0x41804c]
mov dword [ebp - 0x100], edx
mov edx, dword [0x418050]
mov dword [ebp - 0xfc], eax
mov dword [ebp - 0xf8], ecx
mov dword [ebp - 0xf4], edx
mov dword [ebp - 0x20c], 0x535444
jmp case.default.0x408891
mov eax, dword [str.HP_Audio]
mov ecx, dword [0x418034]
mov dl, byte [0x418038]
mov dword [ebp - 0x108], eax
mov ax, word [0x41802c]
mov dword [ebp - 0x104], ecx
mov cl, byte [0x41802e]
mov byte [ebp - 0x100], dl
mov word [ebp - 0x20c], ax
mov byte [ebp - 0x20a], cl
mov esi, dword [sym.imp.ADVAPI32.dll_RegOpenKeyExA]
lea edx, [ebp - 0x620]
push edx
push 0x20106
push 0
push str.CLSID406cac73_8f2b_4d98_8357_8e324fbde13a
push SysReAllocString
call esi
test eax, eax
jne 0x408a61
lea eax, [ebp - 0x108]
lea edx, [eax + 1]
mov cl, byte [eax]
inc eax
test cl, cl
jne 0x408a30
mov ecx, dword [ebp - 0x620]
sub eax, edx
push eax
lea eax, [ebp - 0x108]
push eax
push 1
push 0
push 0
push ecx
call dword [sym.imp.ADVAPI32.dll_RegSetValueExA]
mov edx, dword [ebp - 0x620]
push edx
call dword [sym.imp.ADVAPI32.dll_RegCloseKey]
lea eax, [ebp - 0x620]
push eax
push 0x20119
push 0
push str.SoftwareMicrosoftWindowsCurrentVersion
push reloc.OLEAUT32.dll_SysReAllocString
mov dword [ebp - 0x624], 0x104
call esi
test eax, eax
jne 0x408d4c
lea ecx, [ebp - 0x624]
push ecx
lea edx, [ebp - 0x61c]
push edx
push eax
push eax
mov eax, dword [ebp - 0x620]
push str.ProgramFilesDir
push eax
call dword [sym.imp.ADVAPI32.dll_RegQueryValueExA]
test eax, eax
jne 0x408d4c
jmp 0x408ac0
mov cl, byte [ebp + eax - 0x61c]
mov byte [ebp + eax - 0x518], cl
inc eax
test cl, cl
jne 0x408ac0
lea edi, [ebp - 0x518]
dec edi
lea ebx, [ebx]
mov al, byte [edi + 1]
inc edi
test al, al
jne 0x408ae0
mov ecx, 7
mov esi, str.CONEXANTSA3HP_NB_AIOUX_
lea eax, [ebp - 0x20c]
rep movsd dword es:[edi], dword [esi]
mov edx, eax
lea esp, [esp]
mov cl, byte [eax]
inc eax
test cl, cl
jne 0x408b00
lea edi, [ebp - 0x518]
sub eax, edx
dec edi
mov cl, byte [edi + 1]
inc edi
test cl, cl
jne 0x408b10
mov ecx, eax
shr ecx, 2
mov esi, edx
rep movsd dword es:[edi], dword [esi]
mov ecx, eax
and ecx, 3
rep movsb byte es:[edi], byte [esi]
xor eax, eax
lea ebx, [ebx]
mov cl, byte [ebp + eax - 0x61c]
mov byte [ebp + eax - 0x20c], cl
inc eax
test cl, cl
jne 0x408b30
lea eax, [ebp - 0x20c]
dec eax
lea ebx, [ebx]
mov cl, byte [eax + 1]
inc eax
test cl, cl
jne 0x408b50
mov ecx, dword [str.CONEXANTSA3HP_NB_AIO]
mov edx, dword [0x417f40]
mov dword [eax], ecx
mov ecx, dword [0x417f44]
mov dword [eax + 4], edx
mov edx, dword [0x417f48]
mov dword [eax + 8], ecx
mov ecx, dword [0x417f4c]
mov dword [eax + 0xc], edx
mov edx, dword [0x417f50]
mov dword [eax + 0x10], ecx
mov dword [eax + 0x14], edx
xor eax, eax
nop
mov cl, byte [ebp + eax - 0x518]
mov byte [ebp + eax - 0x414], cl
inc eax
test cl, cl
jne 0x408b90
lea eax, [ebp - 0x414]
dec eax
lea ebx, [ebx]
mov cl, byte [eax + 1]
inc eax
test cl, cl
jne 0x408bb0
mov edx, dword [str.SADefaultIcon.ico]
mov esi, dword [0x417fd0]
mov edi, dword [0x417fd4]
mov cx, word [0x417fdc]
mov dword [eax], edx
mov dword [eax + 4], esi
mov dword [eax + 8], edi
push ebx
mov ebx, dword [0x417fd8]
mov dword [eax + 0xc], ebx
mov word [eax + 0x10], cx
mov cl, byte [0x417fde]
mov byte [eax + 0x12], cl
xor eax, eax
jmp 0x408c00
mov cl, byte [ebp + eax - 0x20c]
mov byte [ebp + eax - 0x310], cl
inc eax
test cl, cl
jne 0x408c00
lea eax, [ebp - 0x310]
dec eax
lea ebx, [ebx]
mov cl, byte [eax + 1]
inc eax
test cl, cl
jne 0x408c20
mov cl, byte [0x417fde]
mov dword [eax], edx
mov dx, word [0x417fdc]
mov dword [eax + 4], esi
mov dword [eax + 8], edi
mov dword [eax + 0xc], ebx
mov word [eax + 0x10], dx
push 0
lea edx, [ebp - 0x310]
mov byte [eax + 0x12], cl
push edx
lea eax, [ebp - 0x414]
push eax
call dword [sym.imp.KERNEL32.dll_CopyFileA]
call fcn.004084e0
test eax, eax
je 0x408d37
push 0x3e8
call dword [sym.imp.KERNEL32.dll_Sleep]
xor eax, eax
jmp 0x408c80
mov cl, byte [ebp + eax - 0x518]
mov byte [ebp + eax - 0x414], cl
inc eax
test cl, cl
jne 0x408c80
lea eax, [ebp - 0x414]
dec eax
lea ebx, [ebx]
mov cl, byte [eax + 1]
inc eax
test cl, cl
jne 0x408ca0
mov edx, dword [str.SmartAudio3.exe]
mov esi, dword [0x417fbc]
mov edi, dword [0x417fc0]
mov ebx, dword [0x417fc4]
mov cl, byte [0x417fc8]
mov dword [eax], edx
mov dword [eax + 4], esi
mov dword [eax + 8], edi
mov dword [eax + 0xc], ebx
mov byte [eax + 0x10], cl
xor eax, eax
jmp 0x408ce0
mov cl, byte [ebp + eax - 0x20c]
mov byte [ebp + eax - 0x310], cl
inc eax
test cl, cl
jne 0x408ce0
lea eax, [ebp - 0x310]
dec eax
lea ebx, [ebx]
mov cl, byte [eax + 1]
inc eax
test cl, cl
jne 0x408d00
mov dword [eax], edx
mov dl, byte [0x417fc8]
mov dword [eax + 4], esi
mov dword [eax + 8], edi
mov dword [eax + 0xc], ebx
mov byte [eax + 0x10], dl
push 0
lea eax, [ebp - 0x310]
push eax
lea ecx, [ebp - 0x414]
push ecx
call dword [sym.imp.KERNEL32.dll_CopyFileA]
call fcn.00408650
pop ebx
pop edi
xor eax, eax
pop esi
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.0040a7a3
mov esp, ebp
pop ebp
ret 8
mov ecx, dword [ebp - 4]
pop edi
xor ecx, ebp
xor eax, eax
pop esi
call fcn.0040a7a3
mov esp, ebp
pop ebp
ret 8