Function at 0x4a126a
Capabilities:
Get common file path
Get disk size
Query or enumerate registry value

Disassembly:
push 0x244
mov eax, 0x531397
call fcn.004fc737
mov edi, ecx
push 0x70b
push dword [edi + 4]
mov dword [ebp - 0x230], edi
call dword [sym.imp.USER32.dll_KillTimer]
xor esi, esi
push esi
push ecx
call int.0040b2f7
add esp, 4
call fcn.0047795e
dec eax
neg eax
sbb al, al
inc al
jne 0x4a1547
push 0x208
lea eax, [ebp - 0x218]
push esi
push eax
call fcn.004f18b0
add esp, 0xc
push 0x104
lea eax, [ebp - 0x218]
push eax
call dword [sym.imp.KERNEL32.dll_GetSystemDirectoryW]
lea eax, [ebp - 0x218]
push eax
call dword [sym.imp.SHLWAPI.dll_PathStripToRootW]
lea eax, [ebp - 0x240]
push eax
lea eax, [ebp - 0x248]
push eax
lea eax, [ebp - 0x250]
push eax
lea eax, [ebp - 0x218]
push eax
call dword [sym.imp.KERNEL32.dll_GetDiskFreeSpaceExW]
test eax, eax
je 0x4a1547
mov ecx, dword [ebp - 0x240]
mov eax, dword [ebp - 0x23c]
mov edx, dword [ebp - 0x244]
mov ebx, dword [ebp - 0x248]
mov dword [ebp - 0x228], ecx
mov dword [ebp - 0x21c], eax
mov ecx, SysReAllocString
and eax, ecx
mov dword [ebp - 0x224], eax
fild qword [ebp - 0x228]
mov eax, SysReAllocString
and dword [ebp - 0x21c], eax
mov dword [ebp - 0x220], esi
fild qword [ebp - 0x220]
mov dword [ebp - 0x21c], edx
and dword [ebp - 0x21c], eax
fchs
and edx, ecx
faddp st(1)
mov dword [ebp - 0x224], edx
mov dword [ebp - 0x228], ebx
fild qword [ebp - 0x228]
mov dword [ebp - 0x220], esi
fild qword [ebp - 0x220]
fchs
faddp st(1)
fdivp st(1)
fmul qword [0x55a158]
call fcn.0051cf90
cmp eax, 0xf
jg 0x4a1547
xor eax, eax
mov esi, str.software360TotalSecurity
mov dword [ebp - 0x224], 1
cmp eax, esi
je 0x4a1467
mov ebx, str.promo
cmp eax, ebx
je 0x4a1467
mov edi, str.LowDiskSpaceNotify
cmp eax, edi
je 0x4a1461
mov eax, dword [0x590e04]
mov ecx, 0x590e04
call dword [eax + 0xc]
add eax, 0x10
mov dword [ebp - 0x234], eax
and dword [ebp - 4], 0
push ebx
push esi
push str._s_s
lea eax, [ebp - 0x234]
call fcn.0042ee4a
and dword [ebp - 0x238], 0
add esp, 0xc
push 4
pop esi
lea eax, [ebp - 0x21c]
push eax
lea eax, [ebp - 0x224]
push eax
lea eax, [ebp - 0x238]
push eax
push edi
mov edi, dword [ebp - 0x234]
push edi
push SysReAllocString
mov bl, 1
mov dword [ebp - 0x21c], esi
call dword [sym.imp.SHLWAPI.dll_SHGetValueA]
test eax, eax
jne 0x4a144b
cmp dword [ebp - 0x238], esi
je 0x4a144d
xor bl, bl
or dword [ebp - 4], 0xffffffff
lea eax, [edi - 0x10]
call fcn.00405521
mov edi, dword [ebp - 0x230]
jmp 0x4a1469
mov edi, dword [ebp - 0x230]
xor bl, bl
test bl, bl
je 0x4a147a
cmp dword [ebp - 0x224], 0
je 0x4a1547
push 1
mov esi, edi
call fcn.004a2670
test al, al
je 0x4a1540
lea esi, [edi + 0x30]
call fcn.0047e9a0
test al, al
je 0x4a1540
push 0
push str.Q360LFFinder
call dword [sym.imp.USER32.dll_FindWindowW]
test eax, eax
jne 0x4a1547
cmp dword [edi + 0x694], eax
jne 0x4a1515
push 0x590f51
push 0x1c4
call fcn.004f5c13
pop ecx
mov esi, eax
pop ecx
mov dword [ebp - 0x234], esi
mov dword [ebp - 4], 1
test esi, esi
je 0x4a1509
push esi
call fcn.004acec4
mov dword [esi], vtable.CDiskAnalyzerReminderTip.0
mov dword [esi + 0x2c], vtable.CDiskAnalyzerReminderTip.1.0
mov dword [esi + 0x50], vtable.CDiskAnalyzerReminderTip.2.0
mov dword [esi + method.CReminderTip.virtual_0], vtable.CDiskAnalyzerReminderTip.3.0
mov byte [esi + 0x1c0], 0
jmp 0x4a150b
xor esi, esi
or dword [ebp - 4], 0xffffffff
mov dword [edi + 0x694], esi
mov edi, dword [edi + 0x694]
call fcn.004ad2c6
mov eax, dword [ebp - 0x230]
push 0
mov byte [eax + 0x1104], 1
call fcn.004f5c9c
pop ecx
push edx
push eax
push 7
call fcn.0047f0d1
jmp 0x4a1547
or dword [edi + 0x1108], 8
call fcn.004fc7ba
ret