Function at 0x424a00
Capabilities:
Get disk size

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x4ded9f
mov eax, dword fs:[0]
push eax
sub esp, 0x2ac
mov eax, dword [0x53d9f8]
xor eax, ebp
mov dword [ebp - 0x10], eax
push ebx
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov esi, ecx
mov eax, dword [ebp + 8]
mov ebx, dword [ebp + 0xc]
mov eax, dword [eax]
mov eax, dword [eax + 4]
cmp eax, 3
je 0x424a4e
cmp eax, 4
je 0x424a4e
cmp eax, 5
jne 0x424c2b
call fcn.00433d60
test al, al
je 0x424c2b
mov ecx, esi
call fcn.00433ca0
test al, al
jne 0x424c2b
mov eax, dword [ebp + 8]
mov eax, dword [eax]
cmp dword [eax + 0x14], 0
je 0x424c2b
push dword [0x4fef74]
call fcn.004104b0
mov ecx, eax
call fcn.00413b30
test al, al
jne 0x424c2b
mov eax, dword [esi + 0xc]
push 0x4f0da4
mov dword [ebp - 0x2ac], 0
push 4
mov ecx, dword [eax]
push eax
call dword [ecx + 0x20]
lea eax, [ebp - 0x278]
push eax
call fcn.00493830
mov ecx, eax
call fcn.00491f10
mov edi, eax
lea eax, [ebp - 0x230]
mov dword [ebp - 4], 0
push 0
push eax
call fcn.00493830
mov ecx, eax
call fcn.00491cf0
cmp dword [edi + 0x14], 8
mov byte [ebp - 4], 1
jb 0x424aea
mov edi, dword [edi]
cmp dword [eax + 0x14], 8
jb 0x424af2
mov eax, dword [eax]
lea ecx, [ebp - 0x2ac]
push ecx
push 0
push 0
push edi
push eax
push str.C_DownQuery
mov ecx, esi
call fcn.00430830
mov edx, dword [ebp - 0x21c]
mov byte [ebp - 4], 0
cmp edx, 8
jb 0x424b4b
mov ecx, dword [ebp - 0x230]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x424b41
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x424ba1
push edx
push ecx
call fcn.004bee2d
add esp, 8
mov edx, dword [ebp - 0x264]
xor eax, eax
mov dword [ebp - 0x220], 0
mov dword [ebp - 0x21c], 7
mov word [ebp - 0x230], ax
mov dword [ebp - 4], 0xffffffff
cmp edx, 8
jb 0x424bb1
mov ecx, dword [ebp - 0x278]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x424ba7
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
jbe 0x424ba7
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
push edx
push ecx
call fcn.004bee2d
add esp, 8
push dword [ebp - 0x2ac]
push str.Query_install:__i
push str.kupdate::KWpsUpdateImpl::CheckActionExecuteEnv
push 0x4f1
push str.H:_rc_v12_i18n_20231201_branchCoding_supportwpsupdateUpdateClient_srcmiscKWpsUpdateImpl.cpp
push 7
call fcn.00412750
add esp, 0x18
cmp dword [ebp - 0x2ac], 1
je 0x424c2b
push 0
push 0x4f1b88
push str.HKCUSoftwareKingsoftOffice6.0CommonupdateinfoHaveNewPatch
call fcn.0044bf70
add esp, 0xc
test eax, eax
js 0x424c05
push ebx
mov ecx, esi
call fcn.004343d0
xor al, al
jmp 0x425647
push eax
push str.Failed_set_new_patch_flag:_0x_08x.
push str.kupdate::KWpsUpdateImpl::CheckActionExecuteEnv
push 0x4f9
push str.H:_rc_v12_i18n_20231201_branchCoding_supportwpsupdateUpdateClient_srcmiscKWpsUpdateImpl.cpp
push 0
call fcn.00412750
add esp, 0x18
xor al, al
jmp 0x425647
lea eax, [ebp - 0x290]
push 0
push eax
call fcn.00416f00
add esp, 8
mov eax, dword [ebp + 8]
mov dword [ebp - 4], 2
mov eax, dword [eax]
mov eax, dword [eax + 4]
cmp eax, 3
je 0x424c5e
cmp eax, 4
je 0x424c5e
cmp eax, 5
jne 0x424da8
mov ecx, esi
call fcn.00433ca0
test al, al
jne 0x424da8
mov ecx, esi
call fcn.00433d60
test al, al
jne 0x424da8
mov ecx, 7
mov dword [ebp - 0x220], 0
xor eax, eax
mov dword [ebp - 0x21c], ecx
mov word [ebp - 0x230], ax
mov eax, dword [ebp + 8]
mov byte [ebp - 4], 3
mov eax, dword [eax]
cmp dword [eax + 0x18], 0
jne 0x424cc8
call fcn.00410410
lea edx, [ebp - 0x230]
push edx
push eax
mov ecx, dword [eax]
call dword [ecx + 0x98]
test eax, eax
jne 0x424cfd
mov ecx, dword [ebp - 0x21c]
mov eax, dword [ebp + 8]
mov eax, dword [eax]
cmp dword [eax + 0x1c], 0xffffffff
je 0x424d68
cmp dword [ebp - 0x27c], 8
lea eax, [ebp - 0x290]
mov ecx, esi
cmovae eax, dword [ebp - 0x290]
push eax
call fcn.004328d0
mov ecx, dword [ebp + 8]
mov ecx, dword [ecx]
cmp eax, dword [ecx + 0x1c]
ja 0x424d62
push str.Auto_mode__but_kso_is_running._exit.
push str.kupdate::KWpsUpdateImpl::CheckActionExecuteEnv
push 0x508
push str.H:_rc_v12_i18n_20231201_branchCoding_supportwpsupdateUpdateClient_srcmiscKWpsUpdateImpl.cpp
push 5
call fcn.00412750
mov edx, dword [ebp - 0x21c]
add esp, 0x14
cmp edx, 8
jb 0x424fcb
mov ecx, dword [ebp - 0x230]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x424d51
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x424d98
push edx
push ecx
call fcn.004bee2d
add esp, 8
xor bl, bl
jmp 0x425603
mov ecx, dword [ebp - 0x21c]
mov byte [ebp - 4], 2
cmp ecx, 8
jb 0x424da8
lea edx, [ecx*2 + 2]
mov ecx, dword [ebp - 0x230]
mov eax, ecx
cmp edx, 0x1000
jb 0x424d9e
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
jbe 0x424d9e
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
push edx
push ecx
call fcn.004bee2d
add esp, 8
mov eax, dword [ebp + 8]
mov eax, dword [eax]
cmp dword [eax + 0xc], 0
je 0x424fd2
call fcn.00452ca0
test al, al
jne 0x424fd2
push str.Need_higher_privileges.
push str.kupdate::KWpsUpdateImpl::CheckActionExecuteEnv
push 0x510
push str.H:_rc_v12_i18n_20231201_branchCoding_supportwpsupdateUpdateClient_srcmiscKWpsUpdateImpl.cpp
push 7
call fcn.00412750
add esp, 0x14
mov ecx, esi
push ebx
call fcn.004343d0
test eax, eax
js 0x424fcb
push 0x208
lea eax, [ebp - 0x218]
push 0
push eax
call sub.VCRUNTIME140.dll_memset
add esp, 0xc
lea eax, [ebp - 0x278]
push dword [0x4fef5c]
push eax
call fcn.004104b0
mov ecx, eax
call fcn.00413a10
mov esi, eax
push dword [0x4fef28]
lea eax, [ebp - 0x230]
mov byte [ebp - 4], 4
push eax
call fcn.004104b0
mov ecx, eax
call fcn.00413a10
cmp dword [esi + 0x14], 8
jb 0x424e48
mov esi, dword [esi]
cmp dword [eax + 0x14], 8
jb 0x424e50
mov eax, dword [eax]
push dword [0x4fef78]
push dword [0x4fef74]
push esi
push dword [0x4fef5c]
push eax
push dword [0x4fef28]
lea eax, [ebp - 0x218]
push str.__s_s___s_s___s_s
push 0x103
push eax
call fcn.004121c0
mov edx, dword [ebp - 0x21c]
add esp, 0x24
cmp edx, 8
jb 0x424ebf
mov ecx, dword [ebp - 0x230]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x424eb5
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x424f12
push edx
push ecx
call fcn.004bee2d
add esp, 8
mov edx, dword [ebp - 0x264]
xor eax, eax
mov dword [ebp - 0x220], 0
mov dword [ebp - 0x21c], 7
mov word [ebp - 0x230], ax
mov byte [ebp - 4], 2
cmp edx, 8
jb 0x424f22
mov ecx, dword [ebp - 0x278]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x424f18
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
jbe 0x424f18
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
push edx
push ecx
call fcn.004bee2d
add esp, 8
lea eax, [ebp - 0x278]
push eax
call fcn.00410410
mov ecx, eax
call fcn.00445ad0
cmp dword [eax + 0x14], 8
mov byte [ebp - 4], 5
jb 0x424f41
mov eax, dword [eax]
lea ecx, [ebp - 0x218]
push ecx
push eax
call fcn.00453f30
mov edx, dword [ebp - 0x264]
add esp, 8
mov byte [ebp - 4], 2
mov esi, eax
cmp edx, 8
jb 0x424f99
mov ecx, dword [ebp - 0x278]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x424f8f
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
jbe 0x424f8f
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
push edx
push ecx
call fcn.004bee2d
add esp, 8
test esi, esi
jns 0x424fcb
push esi
push 6
call fcn.0042c190
mov ecx, eax
call fcn.00413380
push esi
push str.Failed_run_wpsupdate_elevated:_0x_08x.
push str.kupdate::KWpsUpdateImpl::CheckActionExecuteEnv
push 0x51f
push str.H:_rc_v12_i18n_20231201_branchCoding_supportwpsupdateUpdateClient_srcmiscKWpsUpdateImpl.cpp
push 0
call fcn.00412750
add esp, 0x18
xor bl, bl
jmp 0x425603
mov ecx, esi
call fcn.004379b0
xor eax, eax
mov dword [ebp - 0x250], 0
mov dword [ebp - 0x24c], 7
mov word [ebp - 0x260], ax
mov eax, dword [ebp + 8]
mov byte [ebp - 4], 6
mov edx, dword [eax]
mov ecx, dword [edx + 4]
cmp ecx, 3
je 0x425015
cmp ecx, 4
je 0x425015
cmp ecx, 5
jne 0x4253b8
cmp dword [edx + 0x18], 0
jne 0x4253b8
call fcn.00410410
lea edx, [ebp - 0x260]
push edx
push eax
mov ecx, dword [eax]
call dword [ecx + 0x98]
test eax, eax
je 0x4253b5
push str.Kso_is_running.
push str.kupdate::KWpsUpdateImpl::CheckActionExecuteEnv
push 0x52e
push str.H:_rc_v12_i18n_20231201_branchCoding_supportwpsupdateUpdateClient_srcmiscKWpsUpdateImpl.cpp
push 4
call fcn.00412750
add esp, 0x14
mov dword [ebp - 0x2ac], 2
mov ecx, esi
call fcn.00433ca0
test al, al
jne 0x42507e
mov ecx, esi
call fcn.00433d60
test al, al
je 0x4251cb
mov eax, dword [esi + 0xc]
push 0x4f0da4
push 4
push eax
mov ecx, dword [eax]
call dword [ecx + 0x20]
mov edi, edi
cmp dword [ebp - 0x24c], 8
lea eax, [ebp - 0x260]
cmovae eax, dword [ebp - 0x260]
push eax
lea eax, [ebp - 0x278]
push eax
call fcn.00493830
mov ecx, eax
call fcn.00492740
mov edi, eax
lea eax, [ebp - 0x230]
mov byte [ebp - 4], 7
push 0
push eax
call fcn.00493830
mov ecx, eax
call fcn.00491cf0
cmp dword [edi + 0x14], 8
mov byte [ebp - 4], 8
jb 0x4250df
mov edi, dword [edi]
cmp dword [eax + 0x14], 8
jb 0x4250e7
mov eax, dword [eax]
lea ecx, [ebp - 0x2ac]
push ecx
push 0
push 0
push edi
push eax
push str.C_KsoRunningQuery
mov ecx, esi
call fcn.00430830
mov edx, dword [ebp - 0x21c]
mov byte [ebp - 4], 7
cmp edx, 8
jb 0x425144
mov ecx, dword [ebp - 0x230]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x42513a
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x424ba1
push edx
push ecx
call fcn.004bee2d
add esp, 8
mov edx, dword [ebp - 0x264]
xor eax, eax
mov dword [ebp - 0x220], 0
mov dword [ebp - 0x21c], 7
mov word [ebp - 0x230], ax
mov byte [ebp - 4], 6
cmp edx, 8
jb 0x4251a5
mov ecx, dword [ebp - 0x278]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x42519b
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x424ba1
push edx
push ecx
call fcn.004bee2d
add esp, 8
cmp dword [ebp - 0x2ac], 1
jne 0x4251d8
call fcn.00410410
lea edx, [ebp - 0x260]
push edx
push eax
mov ecx, dword [eax]
call dword [ecx + 0x98]
test eax, eax
jne 0x425090
cmp dword [ebp - 0x2ac], 1
je 0x4253b5
push str.Kso_is_running__exit.
push str.kupdate::KWpsUpdateImpl::CheckActionExecuteEnv
push 0x547
push str.H:_rc_v12_i18n_20231201_branchCoding_supportwpsupdateUpdateClient_srcmiscKWpsUpdateImpl.cpp
push 4
call fcn.00412750
add esp, 0x14
mov dword [ebp - 0x23c], 0
mov dword [ebp - 0x238], 0
mov dword [ebp - 0x234], 0
push str.ksorunning
lea ecx, [ebp - 0x230]
mov byte [ebp - 4], 9
call fcn.00404c50
mov ecx, dword [ebp - 0x238]
mov byte [ebp - 4], 0xa
cmp ecx, dword [ebp - 0x234]
je 0x42528d
mov eax, dword [ebp - 0x230]
mov edx, 7
mov dword [ecx + 0x10], 0
mov dword [ecx], eax
mov eax, dword [ebp - 0x22c]
mov dword [ecx + 4], eax
mov eax, dword [ebp - 0x228]
mov dword [ecx + 8], eax
mov eax, dword [ebp - 0x224]
mov dword [ecx + 0xc], eax
mov eax, dword [ebp - 0x220]
mov dword [ecx + 0x10], eax
mov eax, dword [ebp - 0x21c]
mov dword [ecx + 0x14], eax
xor eax, eax
add dword [ebp - 0x238], 0x18
mov word [ebp - 0x230], ax
jmp 0x4252a6
lea eax, [ebp - 0x230]
push eax
push ecx
lea ecx, [ebp - 0x23c]
call fcn.0040e990
mov edx, dword [ebp - 0x21c]
mov byte [ebp - 4], 9
cmp edx, 8
jb 0x4252e4
mov ecx, dword [ebp - 0x230]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x4252da
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x42539e
push edx
push ecx
call fcn.004bee2d
add esp, 8
lea eax, [ebp - 0x23c]
push eax
call fcn.0042c0f0
mov ecx, eax
call fcn.0044e5b0
mov esi, dword [ebp - 0x23c]
test esi, esi
je 0x4255a4
mov edi, dword [ebp - 0x238]
cmp esi, edi
je 0x425365
nop
mov ecx, dword [esi + 0x14]
cmp ecx, 8
jb 0x425345
mov eax, dword [esi]
lea ecx, [ecx*2 + 2]
cmp ecx, 0x1000
jb 0x42533b
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x42539e
mov eax, edx
push ecx
push eax
call fcn.004bee2d
add esp, 8
xor eax, eax
mov dword [esi + 0x10], 0
mov dword [esi + 0x14], 7
mov word [esi], ax
add esi, 0x18
cmp esi, edi
jne 0x425310
mov esi, dword [ebp - 0x23c]
mov ecx, dword [ebp - 0x234]
mov eax, 0x2aaaaaab
sub ecx, esi
imul ecx
sar edx, 2
mov eax, edx
shr eax, 0x1f
add eax, edx
lea ecx, [eax + eax*2]
mov eax, esi
shl ecx, 3
cmp ecx, 0x1000
jb 0x4253a4
mov esi, dword [esi - 4]
add ecx, 0x23
sub eax, esi
add eax, 0xfffffffc
cmp eax, 0x1f
jbe 0x4253a4
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
push ecx
push esi
call fcn.004bee2d
add esp, 8
xor bl, bl
jmp 0x4255aa
mov eax, dword [ebp + 8]
mov ecx, dword [eax]
mov eax, dword [ecx + 4]
cmp eax, 3
je 0x4253d0
cmp eax, 4
je 0x4253d0
cmp eax, 5
jne 0x4255a8
cmp dword [ecx + 0x1c], 0xffffffff
je 0x4255a8
cmp dword [ebp - 0x27c], 8
lea ecx, [ebp - 0x2b0]
push ecx
lea ecx, [ebp - 0x238]
push ecx
lea ecx, [ebp - 0x2b8]
lea eax, [ebp - 0x290]
cmovae eax, dword [ebp - 0x290]
xor edi, edi
push ecx
push eax
call dword [sym.imp.KERNEL32.dll_GetDiskFreeSpaceExW]
test eax, eax
je 0x425420
mov edi, dword [ebp - 0x2b8]
mov eax, dword [ebp - 0x2b4]
shrd edi, eax, 0x14
mov eax, dword [ebp + 8]
mov eax, dword [eax]
mov eax, dword [eax + 0x1c]
cmp edi, eax
ja 0x4255a8
push eax
push str.Not_enough_disk_space._need__u.
push str.kupdate::KWpsUpdateImpl::CheckActionExecuteEnv
push 0x554
push str.H:_rc_v12_i18n_20231201_branchCoding_supportwpsupdateUpdateClient_srcmiscKWpsUpdateImpl.cpp
push 0
call fcn.00412750
add esp, 0x18
mov ecx, esi
call fcn.00433ca0
test al, al
jne 0x425469
mov ecx, esi
call fcn.00433d60
test al, al
je 0x4255a4
push 0
push str.NotEnoughSpace
push str.HKCUSoftwareKingsoftOffice6.0CommonupdateinfocacheStatusInfowpsUpdateStatusDetail
call fcn.0044bf70
push 0
push dword [0x4ff014]
push str.HKCUSoftwareKingsoftOffice6.0CommonupdateinfocacheStatusInfowpsUpdateStatus
call fcn.0044bf70
mov eax, dword [esi + 0xc]
add esp, 0x18
mov dword [ebp - 0x2b4], 0
mov ecx, dword [eax]
push 0x4f0da4
push 4
push eax
call dword [ecx + 0x20]
lea eax, [ebp - 0x2a8]
push 0x4f7148
push eax
call fcn.00493830
mov ecx, eax
call fcn.00493110
mov edi, eax
lea eax, [ebp - 0x248]
mov byte [ebp - 4], 0xb
push 0
push eax
call fcn.00493830
mov ecx, eax
call fcn.00491cf0
cmp dword [edi + 0x14], 8
mov byte [ebp - 4], 0xc
jb 0x4254e8
mov edi, dword [edi]
cmp dword [eax + 0x14], 8
jb 0x4254f0
mov eax, dword [eax]
lea ecx, [ebp - 0x2b4]
push ecx
push 0
push 0
push edi
push eax
push str.C_NotEnoughSpace
mov ecx, esi
call fcn.00430830
mov edx, dword [ebp - 0x234]
cmp edx, 8
jb 0x425545
mov ecx, dword [ebp - 0x248]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x42553b
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x425594
push edx
push ecx
call fcn.004bee2d
add esp, 8
mov edx, dword [ebp - 0x294]
xor eax, eax
mov dword [ebp - 0x238], 0
mov dword [ebp - 0x234], 7
mov word [ebp - 0x248], ax
cmp edx, 8
jb 0x4255a4
mov ecx, dword [ebp - 0x2a8]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x42559a
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
jbe 0x42559a
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
push edx
push ecx
call fcn.004bee2d
add esp, 8
xor bl, bl
jmp 0x4255aa
mov bl, 1
mov edx, dword [ebp - 0x24c]
cmp edx, 8
jb 0x4255e6
mov ecx, dword [ebp - 0x260]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x4255dc
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x425635
push edx
push ecx
call fcn.004bee2d
add esp, 8
xor eax, eax
mov dword [ebp - 0x250], 0
mov dword [ebp - 0x24c], 7
mov word [ebp - 0x260], ax
mov edx, dword [ebp - 0x27c]
cmp edx, 8
jb 0x425645
mov ecx, dword [ebp - 0x290]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x42563b
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
jbe 0x42563b
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
push edx
push ecx
call fcn.004bee2d
add esp, 8
mov al, bl
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
call fcn.004bee49
mov esp, ebp
pop ebp
ret 8