Function at 0x446d38
Capabilities:
Contain obfuscated stackstrings

Disassembly:
push ebp
mov ebp, esp
push edi
push esi
lea edi, [ebp - 0x11c]
lea esi, [ebp - 0x11c]
push ebx
sub esp, 0x16c
call dword [sym.imp.KERNEL32.DLL_GetTickCount64]
mov dword [ebp - 0x142], 0x75667552
mov ecx, edx
mov dword [ebp - 0x14c], eax
mov edx, eax
xor eax, eax
mov ebx, ecx
mov ecx, 0x41
cmp dword [0x525a6c], 0
mov dword [ebp - 0x13e], 0x78652e73
rep stosd dword es:[edi], eax
mov dword [ebp - 0x150], edx
lea edi, [ebp - 0x138]
mov word [ebp - 0x13a], 0x65
je 0x446de0
mov dword [esp + 0xc], edx
mov dword [esp + 0x10], ebx
mov dword [esp + 8], str._I64i
mov dword [esp + 4], 0x18
mov dword [esp], edi
call dword [sym.imp.msvcrt.dll__snprintf]
mov eax, dword [0x525a6c]
mov byte [ebp - 0x121], 0
mov dword [esp + 4], edi
mov dword [esp + 8], eax
mov dword [esp], str.CommCheck64
call fcn.004280dd
jmp 0x446e0a
mov eax, dword [ebp - 0x14c]
mov dword [ebp - 0x134], ebx
mov ecx, edi
mov edx, 0xb
mov dword [ebp - 0x138], eax
mov eax, str.CommCheck64
mov dword [esp], 8
call fcn.0044174b
mov eax, dword [0x525a6c]
test eax, eax
je 0x446e66
mov dword [esp + 8], 1
mov dword [esp + 4], eax
mov dword [esp], str.CommCheck64
call fcn.00427fbf
mov edi, eax
test eax, eax
je 0x446e99
xor eax, eax
mov dword [esp], edi
mov dword [esp + 8], eax
mov dword [esp + 4], eax
call dword [sym.imp.msvcrt.dll__strtoi64]
mov dword [ebp - 0x154], eax
mov dword [ebp - 0x14c], edx
mov dword [esp], edi
call sub.msvcrt.dll_free
mov edx, dword [ebp - 0x14c]
mov eax, dword [ebp - 0x154]
jmp 0x446e9d
lea eax, [ebp - 0x138]
mov edx, str.CommCheck64
mov ecx, 0xb
mov dword [esp + 4], 8
mov dword [esp], eax
mov eax, 0x80000001
call fcn.004418d9
mov eax, dword [ebp - 0x138]
mov edx, dword [ebp - 0x134]
jmp 0x446e9d
xor eax, eax
xor edx, edx
cmp ebx, edx
jne 0x447008
cmp dword [ebp - 0x150], eax
jne 0x447008
call fcn.00441b18
test eax, eax
jne 0x447029
mov dword [esp + 4], 2
mov dword [esp], 0x104
call sub.msvcrt.dll_calloc
mov dword [esp + 8], 0x104
mov dword [esp + 4], eax
mov ebx, eax
xor eax, eax
mov dword [esp], eax
call dword [sym.imp.KERNEL32.DLL_GetModuleFileNameW]
mov edi, dword [sym.imp.KERNEL32.DLL_GetLastError]
mov dword [ebp - 0x150], eax
sub esp, 0xc
call edi
mov edx, dword [ebp - 0x150]
mov dword [ebp - 0x14c], eax
test edx, edx
je 0x446f50
xor ecx, ecx
xor eax, eax
mov dword [esp + 0x10], esi
mov dword [esp + 0x1c], ecx
mov dword [esp + 0x18], ecx
mov dword [esp + 0x14], 0x104
mov dword [esp + 0xc], 0xffffffff
mov dword [esp + 8], ebx
mov dword [esp + 4], eax
mov dword [esp], 0xfde9
call dword [sym.imp.KERNEL32.DLL_WideCharToMultiByte]
sub esp, 0x20
test eax, eax
jne 0x446f50
call edi
mov dword [ebp - 0x14c], eax
test ebx, ebx
je 0x446f5c
mov dword [esp], ebx
call sub.msvcrt.dll_free
mov eax, dword [ebp - 0x14c]
lea edi, [ebp - 0x142]
mov dword [esp], eax
call dword [sym.imp.KERNEL32.DLL_SetLastError]
push edx
mov dword [esp], esi
call sub.msvcrt.dll_strlen
mov dword [esp], edi
mov ebx, eax
call sub.msvcrt.dll_strlen
cmp eax, ebx
jae 0x446fab
sub ebx, eax
mov dword [esp + 4], edi
add esi, ebx
mov dword [esp], esi
call dword [sym.imp.msvcrt.dll__stricmp]
test eax, eax
jne 0x446fab
mov dword [esp], str.Short_name_used___Disabling_initial_update_policy_prompt_n
call fcn.0043efa9
jmp 0x44700c
mov word [ebp - 0x138], 0x6b
mov dword [ebp - 0x134], 0x444cc5
mov dword [esp], 0xbbd
call fcn.0042291e
mov dword [esp], 0xbbc
mov ebx, eax
call fcn.0042291e
mov dword [esp + 0x10], ebx
mov dword [esp + 0xc], eax
lea eax, [ebp - 0x138]
mov dword [esp + 8], eax
xor eax, eax
mov dword [esp + 4], eax
mov dword [esp], 3
call fcn.00446bcc
test eax, eax
jne 0x44700c
or eax, 0xffffffff
call fcn.00441b7e
xor eax, eax
jmp 0x447033
call fcn.00441b18
test eax, eax
jne 0x447021
mov eax, 0x15180
call fcn.00441b7e
jmp 0x447029
call fcn.00441b18
inc eax
je 0x447015
call fcn.00442c10
mov eax, 1
lea esp, [ebp - 0xc]
pop ebx
pop esi
pop edi
pop ebp
ret