Function at 0x499330
Capabilities:
Get common file path
Get disk size
Query or enumerate registry value

Disassembly:
push 0x244
mov eax, 0x525b4c
call fcn.004f21c7
mov edi, ecx
push 0x70b
push dword [edi + 4]
mov dword [ebp - 0x230], edi
call dword [sym.imp.USER32.dll_KillTimer]
xor esi, esi
push esi
push ecx
call fcn.00408c5f
add esp, 4
call fcn.004707db
dec eax
neg eax
sbb al, al
inc al
jne 0x49960d
push 0x208
lea eax, [ebp - 0x218]
push esi
push eax
call fcn.004e7380
add esp, 0xc
push 0x104
lea eax, [ebp - 0x218]
push eax
call dword [sym.imp.KERNEL32.dll_GetSystemDirectoryW]
lea eax, [ebp - 0x218]
push eax
call dword [sym.imp.SHLWAPI.dll_PathStripToRootW]
lea eax, [ebp - 0x240]
push eax
lea eax, [ebp - 0x248]
push eax
lea eax, [ebp - 0x250]
push eax
lea eax, [ebp - 0x218]
push eax
call dword [sym.imp.KERNEL32.dll_GetDiskFreeSpaceExW]
test eax, eax
je 0x49960d
mov ecx, dword [ebp - 0x240]
mov eax, dword [ebp - 0x23c]
mov edx, dword [ebp - 0x244]
mov ebx, dword [ebp - 0x248]
mov dword [ebp - 0x228], ecx
mov dword [ebp - 0x21c], eax
mov ecx, SysReAllocString
and eax, ecx
mov dword [ebp - 0x224], eax
fild qword [ebp - 0x228]
mov eax, SysReAllocString
and dword [ebp - 0x21c], eax
mov dword [ebp - 0x220], esi
fild qword [ebp - 0x220]
mov dword [ebp - 0x21c], edx
and dword [ebp - 0x21c], eax
fchs
and edx, ecx
faddp st(1)
mov dword [ebp - 0x224], edx
mov dword [ebp - 0x228], ebx
fild qword [ebp - 0x228]
mov dword [ebp - 0x220], esi
fild qword [ebp - 0x220]
fchs
faddp st(1)
fdivp st(1)
fmul qword [0x54e3f0]
call fcn.00512a30
cmp eax, 0xf
jg 0x49960d
xor eax, eax
mov esi, str.software360TotalSecurity
mov dword [ebp - 0x224], 1
cmp eax, esi
je 0x49952d
mov ebx, str.promo
cmp eax, ebx
je 0x49952d
mov edi, str.LowDiskSpaceNotify
cmp eax, edi
je 0x499527
mov eax, dword [0x582d44]
mov ecx, 0x582d44
call dword [eax + 0xc]
add eax, 0x10
mov dword [ebp - 0x234], eax
and dword [ebp - 4], 0
push ebx
push esi
push str._s_s
lea eax, [ebp - 0x234]
call fcn.00429c50
and dword [ebp - 0x238], 0
add esp, 0xc
push 4
pop esi
lea eax, [ebp - 0x21c]
push eax
lea eax, [ebp - 0x224]
push eax
lea eax, [ebp - 0x238]
push eax
push edi
mov edi, dword [ebp - 0x234]
push edi
push SysReAllocString
mov bl, 1
mov dword [ebp - 0x21c], esi
call dword [sym.imp.SHLWAPI.dll_SHGetValueA]
test eax, eax
jne 0x499511
cmp dword [ebp - 0x238], esi
je 0x499513
xor bl, bl
or dword [ebp - 4], 0xffffffff
lea eax, [edi - 0x10]
call fcn.0040557a
mov edi, dword [ebp - 0x230]
jmp 0x49952f
mov edi, dword [ebp - 0x230]
xor bl, bl
test bl, bl
je 0x499540
cmp dword [ebp - 0x224], 0
je 0x49960d
push 1
mov esi, edi
call fcn.0049a736
test al, al
je 0x499606
lea esi, [edi + 0x30]
call fcn.0047769b
test al, al
je 0x499606
push 0
push str.Q360LFFinder
call dword [sym.imp.USER32.dll_FindWindowW]
test eax, eax
jne 0x49960d
cmp dword [edi + 0x694], eax
jne 0x4995db
push 0x582e91
push 0x1c4
call fcn.004eb6e3
pop ecx
mov esi, eax
pop ecx
mov dword [ebp - 0x234], esi
mov dword [ebp - 4], 1
test esi, esi
je 0x4995cf
push esi
call fcn.004a4107
mov dword [esi], vtable.CDiskAnalyzerReminderTip.0
mov dword [esi + 0x2c], vtable.CDiskAnalyzerReminderTip.1.0
mov dword [esi + 0x50], vtable.CDiskAnalyzerReminderTip.2.0
mov dword [esi + method.CReminderTip.virtual_0], vtable.CDiskAnalyzerReminderTip.3.0
mov byte [esi + 0x1c0], 0
jmp 0x4995d1
xor esi, esi
or dword [ebp - 4], 0xffffffff
mov dword [edi + 0x694], esi
mov edi, dword [edi + 0x694]
call fcn.004a4509
mov eax, dword [ebp - 0x230]
push 0
mov byte [eax + 0x1104], 1
call fcn.004eb76c
pop ecx
push edx
push eax
push 7
call fcn.00477dcc
jmp 0x49960d
or dword [edi + 0x1108], 8
call fcn.004f224a
ret