Function at 0x436310
Capabilities:
Resume thread
Set registry value

Disassembly:
mov eax, dword fs:[0]
push 0xffffffffffffffff
push 0x53a561
push eax
mov eax, dword [esp + 0x10]
mov dword fs:[0], esp
sub esp, 0x5bc
push ebp
push esi
push edi
mov ebp, ecx
mov esi, str.install
mov dl, byte [eax]
mov cl, dl
cmp dl, byte [esi]
jne 0x43635d
test cl, cl
je 0x436359
mov dl, byte [eax + 1]
mov cl, dl
cmp dl, byte [esi + 1]
jne 0x43635d
add eax, 2
add esi, 2
test cl, cl
jne 0x436339
xor eax, eax
jmp 0x436362
sbb eax, eax
sbb eax, 0xffffffff
test eax, eax
jne 0x4363f8
call fcn.0042eff0
mov ecx, eax
call fcn.0043d090
test eax, eax
je 0x4363df
mov edi, 0x58ab58
or ecx, 0xffffffff
xor eax, eax
lea edx, [esp + 0x148]
repne scasb al, byte es:[edi]
not ecx
sub edi, ecx
mov eax, ecx
mov esi, edi
mov edi, edx
shr ecx, 2
rep movsd dword es:[edi], dword [esi]
mov ecx, eax
and ecx, 3
rep movsb byte es:[edi], byte [esi]
lea ecx, [esp + 0x14]
push ecx
push str.SOFTWAREClassesCLSIDE0E899AB_F487_11D5_8D29_0050BA6940E3
push reloc.FGBTCORE.dll_Ordinal_2
call dword [sym.imp.ADVAPI32.dll_RegOpenKeyA]
test eax, eax
jne 0x4363df
lea edx, [esp + 0x148]
push 5
push edx
push 1
push eax
mov eax, dword [esp + 0x24]
push eax
call dword [sym.imp.ADVAPI32.dll_RegSetValueA]
mov ecx, dword [esp + 0x14]
push ecx
call dword [sym.imp.ADVAPI32.dll_RegCloseKey]
mov edx, dword [esp + 0x5dc]
mov ecx, ebp
push edx
push str.Version
push 0x588a34
call fcn.0051d7f2
mov eax, dword [esp + 0x5d8]
mov esi, str.install
mov dl, byte [eax]
mov cl, dl
cmp dl, byte [esi]
jne 0x436428
test cl, cl
je 0x436424
mov dl, byte [eax + 1]
mov cl, dl
cmp dl, byte [esi + 1]
jne 0x436428
add eax, 2
add esi, 2
test cl, cl
jne 0x436404
xor eax, eax
jmp 0x43642d
sbb eax, eax
sbb eax, 0xffffffff
test eax, eax
jne 0x436451
mov edi, str.http:__stat.flashget.com_clientaction_install
or ecx, 0xffffffff
repne scasb al, byte es:[edi]
not ecx
sub edi, ecx
mov eax, ecx
mov esi, edi
mov edi, 0x596698
shr ecx, 2
rep movsd dword es:[edi], dword [esi]
mov ecx, eax
jmp 0x4364ca
mov eax, dword [esp + 0x5d8]
mov esi, str.uninstall
mov dl, byte [eax]
mov cl, dl
cmp dl, byte [esi]
jne 0x436481
test cl, cl
je 0x43647d
mov dl, byte [eax + 1]
mov cl, dl
cmp dl, byte [esi + 1]
jne 0x436481
add eax, 2
add esi, 2
test cl, cl
jne 0x43645d
xor eax, eax
jmp 0x436486
sbb eax, eax
sbb eax, 0xffffffff
test eax, eax
jne 0x4364aa
mov edi, str.http:__stat.flashget.com_clientaction_uninstall
or ecx, 0xffffffff
repne scasb al, byte es:[edi]
not ecx
sub edi, ecx
mov eax, ecx
mov esi, edi
mov edi, 0x596698
shr ecx, 2
rep movsd dword es:[edi], dword [esi]
mov ecx, eax
jmp 0x4364ca
mov edi, str.http:__stat.flashget.com_clientaction_clickrun
or ecx, 0xffffffff
xor eax, eax
repne scasb al, byte es:[edi]
not ecx
sub edi, ecx
mov edx, ecx
mov esi, edi
mov edi, 0x596698
shr ecx, 2
rep movsd dword es:[edi], dword [esi]
mov ecx, edx
and ecx, 3
xor eax, eax
rep movsb byte es:[edi], byte [esi]
mov edi, str._flashget
or ecx, 0xffffffff
repne scasb al, byte es:[edi]
not ecx
sub edi, ecx
mov esi, edi
mov edx, ecx
mov edi, 0x596698
or ecx, 0xffffffff
repne scasb al, byte es:[edi]
mov ecx, edx
dec edi
shr ecx, 2
rep movsd dword es:[edi], dword [esi]
mov ecx, edx
and ecx, 3
rep movsb byte es:[edi], byte [esi]
mov edi, str._flashget
or ecx, 0xffffffff
repne scasb al, byte es:[edi]
not ecx
sub edi, ecx
mov esi, edi
mov edx, ecx
mov edi, 0x596698
or ecx, 0xffffffff
repne scasb al, byte es:[edi]
mov ecx, edx
dec edi
shr ecx, 2
rep movsd dword es:[edi], dword [esi]
mov eax, dword [esp + 0x5d8]
mov ecx, edx
and ecx, 3
rep movsb byte es:[edi], byte [esi]
mov esi, str.install
mov dl, byte [eax]
mov cl, dl
cmp dl, byte [esi]
jne 0x436557
test cl, cl
je 0x436553
mov dl, byte [eax + 1]
mov cl, dl
cmp dl, byte [esi + 1]
jne 0x436557
add eax, 2
add esi, 2
test cl, cl
jne 0x436533
xor eax, eax
jmp 0x43655c
sbb eax, eax
sbb eax, 0xffffffff
test eax, eax
je 0x436622
mov eax, dword [esp + 0x5d8]
mov esi, str.uninstall
mov dl, byte [eax]
mov cl, dl
cmp dl, byte [esi]
jne 0x436594
test cl, cl
je 0x436590
mov dl, byte [eax + 1]
mov cl, dl
cmp dl, byte [esi + 1]
jne 0x436594
add eax, 2
add esi, 2
test cl, cl
jne 0x436570
xor eax, eax
jmp 0x436599
sbb eax, eax
sbb eax, 0xffffffff
test eax, eax
je 0x436622
mov edi, 0x588690
or ecx, 0xffffffff
xor eax, eax
repne scasb al, byte es:[edi]
not ecx
sub edi, ecx
mov esi, edi
mov edx, ecx
mov edi, 0x596698
or ecx, 0xffffffff
repne scasb al, byte es:[edi]
mov ecx, edx
dec edi
shr ecx, 2
rep movsd dword es:[edi], dword [esi]
mov ecx, edx
lea eax, [ebp + 0x118]
and ecx, 3
push eax
rep movsb byte es:[edi], byte [esi]
push str.Version
lea ecx, [esp + 0x1c]
push 0x588a34
push ecx
mov ecx, ebp
call fcn.0052be1f
mov edi, dword [esp + 0x14]
or ecx, 0xffffffff
xor eax, eax
repne scasb al, byte es:[edi]
not ecx
sub edi, ecx
mov esi, edi
mov edx, ecx
mov edi, 0x596698
or ecx, 0xffffffff
repne scasb al, byte es:[edi]
mov ecx, edx
dec edi
shr ecx, 2
rep movsd dword es:[edi], dword [esi]
mov ecx, edx
and ecx, 3
rep movsb byte es:[edi], byte [esi]
lea ecx, [esp + 0x14]
call fcn.0050d3fd
jmp 0x43667c
mov edi, 0x588690
or ecx, 0xffffffff
xor eax, eax
repne scasb al, byte es:[edi]
not ecx
sub edi, ecx
mov esi, edi
mov edx, ecx
mov edi, 0x596698
or ecx, 0xffffffff
repne scasb al, byte es:[edi]
mov ecx, edx
dec edi
shr ecx, 2
rep movsd dword es:[edi], dword [esi]
mov ecx, edx
and ecx, 3
rep movsb byte es:[edi], byte [esi]
mov edi, dword [esp + 0x5dc]
or ecx, 0xffffffff
repne scasb al, byte es:[edi]
not ecx
sub edi, ecx
mov esi, edi
mov edx, ecx
mov edi, 0x596698
or ecx, 0xffffffff
repne scasb al, byte es:[edi]
mov ecx, edx
dec edi
shr ecx, 2
rep movsd dword es:[edi], dword [esi]
mov ecx, edx
and ecx, 3
rep movsb byte es:[edi], byte [esi]
mov ecx, 8
xor eax, eax
lea edi, [esp + 0x1c]
rep stosd dword es:[edi], eax
lea eax, [esp + 0x1c]
mov ecx, ebp
push eax
call fcn.00435b10
lea ecx, [esp + 0x5c]
call fcn.00401000
push 0
push str.InstallDate
push 0x588a34
mov dword [esp + 0x5dc], 0
call fcn.0042eff0
mov ecx, eax
call fcn.0052bdb3
lea ecx, [esp + 0x3c]
push 0xa
push ecx
push eax
call fcn.004ef202
or ecx, 0xffffffff
mov edi, 0x588690
xor eax, eax
add esp, 0xc
repne scasb al, byte es:[edi]
not ecx
sub edi, ecx
mov edx, ecx
mov esi, edi
or ecx, 0xffffffff
mov edi, 0x596698
repne scasb al, byte es:[edi]
mov ecx, edx
dec edi
shr ecx, 2
rep movsd dword es:[edi], dword [esi]
mov ecx, edx
and ecx, 3
rep movsb byte es:[edi], byte [esi]
lea edi, [esp + 0x3c]
or ecx, 0xffffffff
repne scasb al, byte es:[edi]
not ecx
sub edi, ecx
mov esi, edi
mov edx, ecx
mov edi, 0x596698
or ecx, 0xffffffff
repne scasb al, byte es:[edi]
mov ecx, edx
dec edi
shr ecx, 2
rep movsd dword es:[edi], dword [esi]
mov ecx, edx
and ecx, 3
rep movsb byte es:[edi], byte [esi]
mov edi, 0x58aa6c
or ecx, 0xffffffff
repne scasb al, byte es:[edi]
not ecx
sub edi, ecx
mov esi, edi
mov edx, ecx
mov edi, 0x596698
or ecx, 0xffffffff
repne scasb al, byte es:[edi]
mov ecx, edx
dec edi
shr ecx, 2
rep movsd dword es:[edi], dword [esi]
mov ecx, edx
and ecx, 3
rep movsb byte es:[edi], byte [esi]
lea edi, [esp + 0x1c]
or ecx, 0xffffffff
repne scasb al, byte es:[edi]
not ecx
dec ecx
push ecx
lea eax, [esp + 0x20]
lea ecx, [esp + 0x10]
push eax
push ecx
lea ecx, [esp + 0x68]
call fcn.00401d10
mov edi, dword [eax]
or ecx, 0xffffffff
xor eax, eax
repne scasb al, byte es:[edi]
not ecx
sub edi, ecx
mov esi, edi
mov edx, ecx
mov edi, 0x596698
or ecx, 0xffffffff
repne scasb al, byte es:[edi]
mov ecx, edx
dec edi
shr ecx, 2
rep movsd dword es:[edi], dword [esi]
mov ecx, edx
and ecx, 3
rep movsb byte es:[edi], byte [esi]
lea ecx, [esp + 0xc]
call fcn.0050d3fd
push 0x596660
push str.PrePartner
lea eax, [esp + 0x18]
push 0x588a34
push eax
mov ecx, ebp
call fcn.0052be1f
mov edx, dword [esp + 0x10]
lea ecx, [esp + 0x1c8]
push 0xa
push ecx
push edx
mov byte [esp + 0x5dc], 1
call fcn.004ee2a9
add esp, 4
push eax
call fcn.004ef179
mov eax, dword [esp + 0x1c]
push 0x596660
push eax
call fcn.004ee0f0
add esp, 0x14
test eax, eax
jne 0x436803
mov edi, 0x58aa5c
jmp 0x436837
mov edi, 0x588690
or ecx, 0xffffffff
xor eax, eax
repne scasb al, byte es:[edi]
not ecx
sub edi, ecx
mov esi, edi
mov edx, ecx
mov edi, 0x596698
or ecx, 0xffffffff
repne scasb al, byte es:[edi]
mov ecx, edx
dec edi
shr ecx, 2
rep movsd dword es:[edi], dword [esi]
mov ecx, edx
and ecx, 3
rep movsb byte es:[edi], byte [esi]
lea edi, [esp + 0x1c8]
or ecx, 0xffffffff
xor eax, eax
repne scasb al, byte es:[edi]
not ecx
sub edi, ecx
push 0x596660
mov esi, edi
mov edx, ecx
mov edi, 0x596698
or ecx, 0xffffffff
repne scasb al, byte es:[edi]
mov ecx, edx
dec edi
shr ecx, 2
rep movsd dword es:[edi], dword [esi]
mov ecx, edx
push str.PrePartner1
and ecx, 3
lea eax, [esp + 0x20]
rep movsb byte es:[edi], byte [esi]
push 0x588a34
push eax
mov ecx, ebp
call fcn.0052be1f
mov edx, dword [esp + 0x18]
lea ecx, [esp + 0x1c8]
push 0xa
push ecx
push edx
mov byte [esp + 0x5dc], 2
call fcn.004ee2a9
add esp, 4
push eax
call fcn.004ef179
mov eax, dword [esp + 0x1c]
push 0x596660
push eax
call fcn.004ee0f0
add esp, 0x14
test eax, eax
jne 0x4368bc
mov edi, 0x58aa5c
jmp 0x4368f0
mov edi, 0x588690
or ecx, 0xffffffff
xor eax, eax
repne scasb al, byte es:[edi]
not ecx
sub edi, ecx
mov esi, edi
mov edx, ecx
mov edi, 0x596698
or ecx, 0xffffffff
repne scasb al, byte es:[edi]
mov ecx, edx
dec edi
shr ecx, 2
rep movsd dword es:[edi], dword [esi]
mov ecx, edx
and ecx, 3
rep movsb byte es:[edi], byte [esi]
lea edi, [esp + 0x1c8]
or ecx, 0xffffffff
xor eax, eax
repne scasb al, byte es:[edi]
not ecx
sub edi, ecx
mov esi, edi
mov edx, ecx
mov edi, 0x596698
or ecx, 0xffffffff
repne scasb al, byte es:[edi]
mov ecx, edx
dec edi
shr ecx, 2
rep movsd dword es:[edi], dword [esi]
mov ecx, edx
and ecx, 3
rep movsb byte es:[edi], byte [esi]
mov edi, 0x588690
or ecx, 0xffffffff
repne scasb al, byte es:[edi]
not ecx
sub edi, ecx
mov esi, edi
mov edx, ecx
mov edi, 0x596698
or ecx, 0xffffffff
repne scasb al, byte es:[edi]
mov ecx, edx
dec edi
shr ecx, 2
rep movsd dword es:[edi], dword [esi]
mov ecx, edx
and ecx, 3
rep movsb byte es:[edi], byte [esi]
lea edi, [esp + 0x1c]
or ecx, 0xffffffff
repne scasb al, byte es:[edi]
not ecx
dec ecx
lea eax, [esp + 0x1c]
push ecx
lea ecx, [esp + 0x10]
push eax
push ecx
lea ecx, [esp + 0x68]
call fcn.00401d10
mov edi, dword [eax]
or ecx, 0xffffffff
xor eax, eax
repne scasb al, byte es:[edi]
not ecx
sub edi, ecx
mov esi, edi
mov edx, ecx
mov edi, 0x596698
or ecx, 0xffffffff
repne scasb al, byte es:[edi]
mov ecx, edx
dec edi
shr ecx, 2
rep movsd dword es:[edi], dword [esi]
mov ecx, edx
and ecx, 3
rep movsb byte es:[edi], byte [esi]
lea ecx, [esp + 0xc]
call fcn.0050d3fd
mov eax, dword [esp + 0x5d8]
mov esi, str.firstRun
mov dl, byte [eax]
mov cl, dl
cmp dl, byte [esi]
jne 0x4369c6
test cl, cl
je 0x4369c2
mov dl, byte [eax + 1]
mov cl, dl
cmp dl, byte [esi + 1]
jne 0x4369c6
add eax, 2
add esi, 2
test cl, cl
jne 0x4369a2
xor eax, eax
jmp 0x4369cb
sbb eax, eax
sbb eax, 0xffffffff
test eax, eax
jne 0x436a36
mov edi, 0x588690
or ecx, 0xffffffff
repne scasb al, byte es:[edi]
not ecx
sub edi, ecx
mov esi, edi
mov edx, ecx
mov edi, 0x596698
or ecx, 0xffffffff
repne scasb al, byte es:[edi]
mov ecx, edx
dec edi
shr ecx, 2
rep movsd dword es:[edi], dword [esi]
mov ecx, edx
and ecx, 3
rep movsb byte es:[edi], byte [esi]
mov eax, dword [ebp + 0xcc]
mov edi, 0x58aa40
test eax, eax
jne 0x436a0e
mov edi, 0x58aa3c
or ecx, 0xffffffff
xor eax, eax
repne scasb al, byte es:[edi]
not ecx
sub edi, ecx
mov esi, edi
mov edx, ecx
mov edi, 0x596698
or ecx, 0xffffffff
repne scasb al, byte es:[edi]
mov ecx, edx
dec edi
shr ecx, 2
rep movsd dword es:[edi], dword [esi]
mov ecx, edx
and ecx, 3
rep movsb byte es:[edi], byte [esi]
mov eax, dword [esp + 0x5d8]
mov esi, str.firstRun
mov dl, byte [eax]
mov cl, dl
cmp dl, byte [esi]
jne 0x436a66
test cl, cl
je 0x436a62
mov dl, byte [eax + 1]
mov cl, dl
cmp dl, byte [esi + 1]
jne 0x436a66
add eax, 2
add esi, 2
test cl, cl
jne 0x436a42
xor eax, eax
jmp 0x436a6b
sbb eax, eax
sbb eax, 0xffffffff
test eax, eax
jne 0x436a9a
push eax
push 4
push eax
push eax
push 0x596698
push 0x436bc0
call fcn.0050ec77
test eax, eax
je 0x436b6d
mov eax, dword [eax + 0x28]
push eax
call dword [sym.imp.KERNEL32.dll_ResumeThread]
jmp 0x436b6d
push 0x596698
mov ecx, ebp
call fcn.00445f90
test eax, eax
lea edx, [esp + 0xc8]
mov edi, 0x58aa3c
jne 0x436abb
mov edi, 0x58aa40
or ecx, 0xffffffff
xor eax, eax
repne scasb al, byte es:[edi]
not ecx
sub edi, ecx
mov eax, ecx
mov esi, edi
mov edi, edx
shr ecx, 2
rep movsd dword es:[edi], dword [esi]
mov ecx, eax
mov eax, dword [esp + 0x5d8]
and ecx, 3
rep movsb byte es:[edi], byte [esi]
mov esi, str.install
mov dl, byte [eax]
mov cl, dl
cmp dl, byte [esi]
jne 0x436b08
test cl, cl
je 0x436b04
mov dl, byte [eax + 1]
mov cl, dl
cmp dl, byte [esi + 1]
jne 0x436b08
add eax, 2
add esi, 2
test cl, cl
jne 0x436ae4
xor eax, eax
jmp 0x436b0d
sbb eax, eax
sbb eax, 0xffffffff
test eax, eax
jne 0x436b6d
lea eax, [esp + 0xc]
push eax
push str.SoftwareJetCarJetCarGeneral
push reloc.FGBTCORE.dll_Ordinal_1
call dword [sym.imp.ADVAPI32.dll_RegOpenKeyA]
test eax, eax
jne 0x436b6d
mov edx, dword [esp + 0xc]
mov esi, dword [sym.imp.ADVAPI32.dll_RegSetValueExA]
lea ecx, [esp + 0xc8]
push 2
push ecx
push 1
push eax
push str.PakageVersion
push edx
call esi
mov edx, dword [esp + 0x5dc]
or ecx, 0xffffffff
mov edi, edx
xor eax, eax
repne scasb al, byte es:[edi]
not ecx
dec ecx
push ecx
push edx
push 1
push eax
mov eax, dword [esp + 0x1c]
push str.Version
push eax
call esi
lea ecx, [esp + 0x18]
mov byte [esp + 0x5d0], 1
call fcn.0050d3fd
lea ecx, [esp + 0x10]
mov byte [esp + 0x5d0], 0
call fcn.0050d3fd
lea ecx, [esp + 0x5c]
mov dword [esp + 0x5d0], 0xffffffff
call fcn.00401060
mov ecx, dword [esp + 0x5c8]
pop edi
pop esi
pop ebp
mov dword fs:[0], ecx
add esp, 0x5c8
ret 8