Function at 0x4622d0
Capabilities:
Create thread

Disassembly:
push ebp
mov ebp, esp
push 0xfffffffffffffffe
push 0x6706f0
push 0x5dfbd0
mov eax, dword fs:[0]
push eax
sub esp, 8
mov eax, 0x1644
call fcn.005e00d0
mov eax, dword [0x6aae14]
xor dword [ebp - 8], eax
xor eax, ebp
mov dword [ebp - 0x1c], eax
push ebx
push esi
push edi
push eax
lea eax, [ebp - 0x10]
mov dword fs:[0], eax
mov dword [ebp - 0x18], esp
xor ebx, ebx
mov dword [ebp - 0x164c], ebx
mov dword [ebp - 4], ebx
mov dword [ebp - 0x1644], ebx
mov dword [ebp - 0x163c], ebx
mov dword [ebp - 0x165c], ebx
mov dword [ebp - 0x1638], ebx
mov byte [ebp - 0x120], bl
push 0x103
push ebx
lea eax, [ebp - 0x11f]
push eax
call fcn.005dfd60
mov byte [ebp - 0x328], bl
push 0x207
push ebx
lea ecx, [ebp - 0x327]
push ecx
call fcn.005dfd60
mov byte [ebp - 0x1634], bl
push 0xfff
push ebx
lea edx, [ebp - 0x1633]
push edx
call fcn.005dfd60
mov byte [ebp - 0x42c], bl
push 0x103
push ebx
lea eax, [ebp - 0x42b]
push eax
call fcn.005dfd60
add esp, 0x30
cmp dword [0x72d244], ebx
je 0x4623ac
mov dword [ebp - 4], 0xfffffffe
xor eax, eax
jmp 0x4629ba
mov dword [0x72d244], 1
push 0x7301a0
mov ecx, dword [ebp + 8]
push ecx
push str._Browser__Chrome__Removing_Reserved_Chrome_Extensions_FW:_u_:__s
lea edx, [ebp - 0x1634]
push edx
call fcn.005dfb23
push ebx
push 1
lea eax, [ebp - 0x1634]
push eax
push 0x6aec98
call fcn.004311c0
lea ecx, [ebp - 0x165c]
push ecx
push str.ChromeKeepOnlyExtensions
push 0x60d814
push reloc.OLEAUT32.dll_SysReAllocString
call fcn.004e02e0
add esp, 0x30
mov esi, eax
mov dword [ebp - 0x1648], esi
cmp esi, ebx
jne 0x462427
push 0x60c81c
push str.ChromeKeepOnlyExtensions
push 0x60d814
push reloc.OLEAUT32.dll_SysReAllocString
call fcn.004e7720
mov eax, dword [0x7302cc]
cmp eax, 2
jne 0x462669
cmp esi, ebx
je 0x462650
cmp byte [esi], bl
je 0x462650
push esi
push str._Browser__Chrome__Keeping_Only_Chrome_Extensions__having_string_:__s
lea edx, [ebp - 0x1634]
push edx
call fcn.005dfb23
push ebx
push 1
lea eax, [ebp - 0x1634]
push eax
push 0x6aec98
call fcn.004311c0
lea ecx, [ebp - 0x163c]
push ecx
push ebx
push ebx
push ebx
push ebx
push 0x7301a0
call fcn.005cbf30
add esp, 0x34
mov eax, dword [ebp - 0x163c]
cmp eax, ebx
je 0x46284d
cmp byte [eax], bl
je 0x46284d
mov dword [ebp - 0x1638], ebx
push 1
push ebx
push 0x2c
lea edx, [ebp - 0x1638]
push edx
lea ecx, [ebp - 0x120]
push ecx
push eax
call fcn.004e1380
add esp, 0x18
cmp dword [ebp - 0x1638], 0xffffffff
je 0x462841
mov dword [ebp - 0x1640], ebx
mov dword [ebp - 0x1654], ebx
push 0x7c
lea edx, [ebp - 0x120]
push edx
call fcn.005e0940
add esp, 8
lea edx, [eax + 1]
lea esi, [ebp - 0x328]
mov edi, edi
mov cl, byte [edx]
mov byte [esi], cl
inc edx
inc esi
cmp cl, bl
jne 0x4624f0
mov byte [eax], bl
mov edi, 1
mov esi, dword [ebp - 0x1648]
push edi
push ebx
push 0x2c
lea eax, [ebp - 0x1640]
push eax
lea ecx, [ebp - 0x530]
push ecx
push esi
call fcn.004e1380
add esp, 0x18
cmp dword [ebp - 0x1640], 0xffffffff
je 0x4625d8
push ebx
lea edx, [ebp - 0x530]
push edx
lea eax, [ebp - 0x328]
push eax
call fcn.004f5880
add esp, 0xc
cmp eax, 0xffffffff
jne 0x46257f
push ebx
push str.Chrome_Media_Router
lea ecx, [ebp - 0x328]
push ecx
call fcn.004f5880
add esp, 0xc
cmp eax, 0xffffffff
jne 0x46257f
push ebx
push str.Chrome_Web_Store
lea edx, [ebp - 0x328]
push edx
call fcn.004f5880
add esp, 0xc
cmp eax, 0xffffffff
je 0x462507
mov dword [ebp - 0x1654], edi
lea ecx, [ebp - 0x120]
push ecx
lea edx, [ebp - 0x328]
push edx
push str._Browser__Chrome__Ignoring_Extension_C:__s___s_
lea eax, [ebp - 0x1634]
push eax
call fcn.005dfb23
push ebx
push edi
lea ecx, [ebp - 0x1634]
push ecx
push 0x6aec98
call fcn.004311c0
add esp, 0x20
push edi
push ebx
push 0x2c
lea edx, [ebp - 0x1638]
push edx
lea eax, [ebp - 0x120]
push eax
mov ecx, dword [ebp - 0x163c]
push ecx
jmp 0x4624b3
cmp ebx, ebx
jne 0x462585
push str.nmmhkkegccagdldgiimedpiccmgmieda
lea edx, [ebp - 0x120]
push edx
call fcn.005f095a
add esp, 8
test eax, eax
je 0x46257f
push str.pkedcjkdefgpdelpbcmbmeomcjbeemfm
lea eax, [ebp - 0x120]
push eax
call fcn.005f095a
add esp, 8
test eax, eax
je 0x46257f
cmp ebx, ebx
jne 0x462585
push 0x43
lea ecx, [ebp - 0x1644]
push ecx
lea edx, [ebp - 0x328]
push edx
push ebx
lea eax, [ebp - 0x120]
push eax
push 0x7301a0
call fcn.00461f40
add esp, 0x18
test eax, eax
je 0x4625ba
mov dword [ebp - 0x164c], edi
jmp 0x4625ba
cmp eax, 2
jne 0x462669
mov edi, dword [str.Ultrasurf_VPN_Proxy_Hotspot_Browsec_MuzikFury_My_Search_MySearch_SrchPrivate_SeeOnScreen_NewTabTV_Tiempo]
mov edx, dword [str.egnccllcfmpcmeccejlbbnmobnaglbkaEasy_Proxy_iilpibhiihokecnbdkaminemnmecjfedProxy_for_Chrome_nlbejmccbhkncgokjcmghpfloaajcffjHotspot_Shield_dpplabbmogkhghncfbfdeeokoefdjegmProxy_Switchy_gkojfkhlekighikafcpjkiklfbnlmeioHola_VPN_mjnbclmflcpookeapghfhapeffmpodijUltrasurf_gbhodkgjhojjjggokjjlbccecdhkjjglTiempo_bihmplhobchoageeokmgbdihknkjbkndTouch_VPN_omghfjlpggmjjaagoclmmobgdodcjbohBrowsec_VPN_ckiahbcmlmkpfiijecbpflfahoimklkeGOM_VPN_ojedkepkekklpjcgdfiahladdbopboohJust_Proxy_heajfgnegopeedndeahkdjedjkjcmnpbHotspot_Shield_ogfnpoaboimnmogpddgkphgkbgooomhgSmart_Proxy_cmgnmcnlncejehjlnhaglpnoolgbflbdHide_My_Ass_fdcgdnkidjaadafnichfpabhfomcebmeZenMate_VPN_omihnninlhneakfglooiofgdbpmnhjgnFree_Proxies_for_everyone_padekgcemlokbadohgkifijomclgjgifProxy_SwitchyOmega_PANPAOLFKICGGBBPJBGFIDOIJIOLMJMGMuzikFury_oainnkcfkmggolfnhjighmhmhcpehmhkMy_Search_mombaflbfdlgghcoghfdkggidificegcSrchPrivate_efjcnbepcfpggiohjleacfpjbllccdjfSeeOnScreen_mdjndfcjcbogjflgkcajechnipbbhpgbNewTabTVdfdhngcahhplaibahkkjhdklhihbaiklKronymous_pohhhgpookhmdgjnngkgkbhklplbomppProxyCrime_pmjekkmaahglofndgafcpcaggiobeokiBanned_A_emkajaicgpjdphehdhppleonljbjiijiThePirateBay_Unblocked_mnfchpadaikneonajggpooeppnmdolhcVPNetworksLLC_Proxy_fjkmabmdepjfammlpliljpnbhleegehmWebRTC_Control_oiigbmnaadbkfbmpbfijlflahbdbdgdfScriptSafe_mdnmhbnbebabimcjggckeoibchhckemmfriGate_Light_bacakpdjpomjaelpkpkabmedhkoongbiVideo_Downloader_professional_ongbjmaomfahkjompaodmfnmbfngdjnk51VPN_pkjkehbojcndhlfcckeghclfeoimebncNOAHVPN_kgghbgkigdclmealhcgnfdokfllccdmmAccessTunnel_Free_fjpglcmmjcmnfigjjgpnajgiejppjfhaVPNHosting_ochrana_internetu_lilimpfdhphnpoakbohfafgolmefboenGecko_gocipjldfmnlngoomddhcnnmldifjmeiTNT_Stream_Unblocker_gijkmohmhpggaeehdaogomfoigeoblpeAirVPN_lmebibceegmfjcachddjmmdclfcankhaPrivacyProtectorGVN_1.2_CRX_kceedaplliiaihpoepnmbjkjhnolmifbTeddyEngine_ahnpmpelanacmcfbiedaghlhhjncafccMasky_ipkbbcamfcnlflkedfdaokofdmfgocfpMudfish___HTTP_Proxy_ekmmcigapbkblfihobadbdnadfmekfdoFastwhale_1.8.3_CRX_jelkafihejnbjnnpempgfmdkhaobhkihCloudLink_njdjpgffklilbojbobbfecfcgofebbcoEcross_kecekldmfbcpjfmnnijdjhcggpcnkpbhBanned_B_hfnbbbkabnehoejfhcbbhdicagcoobjiOkayFreedom_nabijffolhanhlbkmakkfgfeadcgkmnaAutoProxy_epaofkbaeebhpiklpcfbkhpkfhkcicbcPersonaTool_Proxy_fjdchobeoikpjadflakgacfgibmnkcfoSUSHI_Proxy_jjpnjgokjliifohebndjpjakibhhgmpePrivatoria_Proxy_fiddahcmipladlobggbjojeimokalcnjSpeedplus_VPN_abkfaffjmlmannmlnlfheoohcnciagdlBlockless_aehefioapkedlgdlebfnlgnmmklembnjBanned_C_fkkgljokpmadmmebdegnkbpgndgigcfcFree_VPN_Proxy_Service_by_Connected_Over_nkkjjehlcellolmockcplcgnmelpbkmfUltrasurf_VPN_nioogmipobkondkghccpicinfgjdokljBanned_D_bkghdibcmhbcaogjpdjonpcddpcnjeljBanned_E_ojnimdaoiapdkhjdliaijcliikjjpaalNacion_Unblock_fcakbkpmlidimpglgiaclbpgbedlmpflSpotflux_Lite_fnanjnnchncdkfmjghfnkpaonepbopeaProfile_Picture_UnBlock_for_Facebook_bebdhgdigjiiamnkcenegafmfjoghafkTunnelBear_Blocker_aajjpnimaghinaladfeongfnojpooegfUnblock_embedded_Youtube_videos_jpgljfpmoofbmlieejglhonfofmahiniFree_Residential_VPN_aglghfdhijkmlnflejehpgekkpkhicjeYournet_mpbplcofnommmbeoaphdnobpdafknbccMolaVPN_hbgdaefcalonegdjkhfaeabgodpahimoWhere_Am_I____VPN_Checker_jbhnemdhjjeheieakekfknnficfdcbbnChillGlobal_VPN_PROXY_feojgnhagmekcjbimbbgbdfiffigokboSecure_Wordpress_Admin_for_VPN_iaidohholfjjhodbgoahlkdbikokepdlUnblock_sites__bypass._BroPro_Free_VPN_Proxy_kcndmbbelllkmioekdagahekgimemejoVPN.AC_SecureProxy_bojjojmafbggldbgcohmpnedmimmicjfWallcy___100__FREE_VPN_ibmdbhboiekjjoadjahpnmmcgdmabbdfFreeVPN_Free_VPN_Proxy_cmonbbaipgkkooachioonbkjbbddclpeOpenVPN_Finder_ipkbbcamfcnlflkedfdaokofdmfgocfpMudfish___HTTP_Proxy__objpiipidagojpjngjgakijbejgbbiejProxy_for_Chrome___Install_Page_1.3.3_CRX_eocembdiaelakgjoheclffagagbgpejgAnonymous_Proxy_Browser_bojkjpnkphmkhgmpdmffcinnppaejplaInspired_DotVPN_mnfchpadaikneonajggpooeppnmdolhcVPNetworksLLC_SSL_Proxy_hghdlbnadahkknlbmckfljpcoilldcoaby_NoWall_aimpgiamifooknoiaiadogbbnbhckopmBanned_F_ccdkfnoabjihakogonbnoffpindmfgdiVersaVPN_oofgbpoabipfcfjapgnbbjjaenockbdpSetupVPN__ggmdpepbjljkkkdaklfihhngmmgmpggpP]
mov dword [ebp - 0x1640], edx
jmp 0x46267a
mov edi, dword [str.MuzikFury_My_Search_MySearch_SrchPrivate_SeeOnScreen_NewTabTV]
mov eax, dword [str.PANPAOLFKICGGBBPJBGFIDOIJIOLMJMGMuzikFury_oainnkcfkmggolfnhjighmhmhcpehmhkMy_Search_mombaflbfdlgghcoghfdkggidificegcSrchPrivate_efjcnbepcfpggiohjleacfpjbllccdjfSeeOnScreen_mdjndfcjcbogjflgkcajechnipbbhpgbNewTabTV]
mov dword [ebp - 0x1640], eax
mov dword [ebp - 0x1638], ebx
push 1
push ebx
push 0x2c
lea ecx, [ebp - 0x1638]
push ecx
lea edx, [ebp - 0x42c]
push edx
push edi
call fcn.004e1380
add esp, 0x18
cmp dword [ebp - 0x1638], 0xffffffff
je 0x462798
lea eax, [ebp - 0x163c]
push eax
push ebx
push ebx
push ebx
lea ecx, [ebp - 0x42c]
push ecx
push 0x7301a0
call fcn.005cbf30
add esp, 0x18
mov eax, dword [ebp - 0x163c]
cmp eax, ebx
je 0x462780
cmp byte [eax], bl
je 0x462780
mov dword [ebp - 0x1650], ebx
push 1
push ebx
push 0x2c
lea edx, [ebp - 0x1650]
push edx
lea ecx, [ebp - 0x120]
push ecx
push eax
call fcn.004e1380
add esp, 0x18
cmp dword [ebp - 0x1650], 0xffffffff
je 0x462780
push 0x7c
lea edx, [ebp - 0x120]
push edx
call fcn.005e0940
add esp, 8
lea edx, [eax + 1]
lea esi, [ebp - 0x328]
mov cl, byte [edx]
mov byte [esi], cl
inc edx
inc esi
cmp cl, bl
jne 0x462722
mov byte [eax], bl
push 0x41
lea eax, [ebp - 0x1644]
push eax
lea ecx, [ebp - 0x328]
push ecx
push ebx
lea edx, [ebp - 0x120]
push edx
push 0x7301a0
call fcn.00461f40
add esp, 0x18
test eax, eax
je 0x462761
mov dword [ebp - 0x164c], 1
push 1
push ebx
push 0x2c
lea eax, [ebp - 0x1650]
push eax
lea ecx, [ebp - 0x120]
push ecx
mov edx, dword [ebp - 0x163c]
push edx
jmp 0x4626f7
push 1
push ebx
push 0x2c
lea eax, [ebp - 0x1638]
push eax
lea ecx, [ebp - 0x42c]
push ecx
jmp 0x462693
mov dword [ebp - 0x1638], ebx
push 1
push ebx
push 0x2c
lea edx, [ebp - 0x1638]
push edx
lea eax, [ebp - 0x120]
push eax
mov ecx, dword [ebp - 0x1640]
push ecx
call fcn.004e1380
add esp, 0x18
cmp dword [ebp - 0x1638], 0xffffffff
je 0x462841
push 0x7c
lea edx, [ebp - 0x120]
push edx
call fcn.005e0940
add esp, 8
lea edx, [eax + 1]
lea esi, [ebp - 0x328]
mov cl, byte [edx]
mov byte [esi], cl
inc edx
inc esi
cmp cl, bl
jne 0x4627e3
mov byte [eax], bl
push 0x42
lea eax, [ebp - 0x1644]
push eax
lea ecx, [ebp - 0x328]
push ecx
push ebx
lea edx, [ebp - 0x120]
push edx
push 0x7301a0
call fcn.00461f40
add esp, 0x18
test eax, eax
je 0x462822
mov dword [ebp - 0x164c], 1
push 1
push ebx
push 0x2c
lea eax, [ebp - 0x1638]
push eax
lea ecx, [ebp - 0x120]
push ecx
mov edx, dword [ebp - 0x1640]
push edx
jmp 0x4627b8
mov eax, dword [ebp - 0x163c]
mov esi, dword [ebp - 0x1648]
cmp esi, ebx
je 0x462860
push esi
call fcn.005e0865
add esp, 4
mov eax, dword [ebp - 0x163c]
cmp eax, ebx
je 0x462873
push eax
call fcn.005e0865
add esp, 4
mov dword [ebp - 0x163c], ebx
cmp dword [ebp - 0x164c], ebx
je 0x4628be
mov dword [ebp - 0x1658], ebx
push ebx
push ebx
push ebx
push ebx
lea eax, [ebp - 0x1658]
push eax
push str.chrome.exe
call fcn.00503770
test eax, eax
je 0x4628be
push ebx
call dword [sym.imp.KERNEL32.dll_GetModuleHandleA]
push ebx
push 1
push ebx
push str.chrome.exe_chromium.exe
push eax
call fcn.0052d190
add esp, 0x14
push 0x118
call dword [sym.imp.KERNEL32.dll_Sleep]
mov eax, dword [ebp - 0x1644]
cmp eax, ebx
je 0x462922
cmp byte [eax], bl
je 0x462919
mov dword [ebp - 0x1648], ebx
push 1
push ebx
push 0x2c
lea ecx, [ebp - 0x1648]
push ecx
lea edx, [ebp - 0x634]
push edx
push eax
call fcn.004e1380
add esp, 0x18
cmp dword [ebp - 0x1648], 0xffffffff
je 0x462913
push ebx
push ebx
push ebx
push ebx
push 1
push ebx
push ebx
lea eax, [ebp - 0x634]
push eax
call fcn.0050c810
mov eax, dword [ebp - 0x1644]
jmp 0x4628d2
mov eax, dword [ebp - 0x1644]
push eax
call fcn.005e0865
add esp, 4
cmp dword [0x72d248], ebx
jne 0x46298d
cmp dword [0x7302cc], 2
jne 0x46298d
push ebx
push ebx
push 0x461b60
call fcn.005e07ac
add esp, 0xc
cmp eax, 0xffffffff
jne 0x46297e
call dword [sym.imp.KERNEL32.dll_GetLastError]
push eax
push str.Error:_beginthread_1wCH_CT__fails_with_error__d
lea ecx, [ebp - 0x530]
push ecx
call fcn.005dfb23
push ebx
push 1
lea edx, [ebp - 0x530]
push edx
push 0x6aec98
call fcn.004311c0
add esp, 0x1c
mov dword [0x72d244], ebx
jmp 0x4629ad
push ebx
push eax
push str.CBD_4Chr_CT
call fcn.00420720
add esp, 0xc
mov dword [0x72d244], ebx
jmp 0x4629ad
mov dword [ebp - 4], 0xfffffffe
mov eax, dword [ebp - 0x164c]
mov ecx, dword [ebp - 0x10]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 0x1c]
xor ecx, ebp
call fcn.005dfbbe
mov esp, ebp
pop ebp
ret