Function at 0x424e50
Capabilities:
Get disk size

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x50189f
mov eax, dword fs:[0]
push eax
sub esp, 0x2b8
mov eax, dword [0x567e00]
xor eax, ebp
mov dword [ebp - 0x10], eax
push ebx
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov ebx, ecx
mov dword [ebp - 0x2c0], ebx
mov eax, dword [ebp + 8]
mov edi, dword [ebp + 0xc]
mov eax, dword [eax]
mov eax, dword [eax + 4]
cmp eax, 3
je 0x424ea4
cmp eax, 4
je 0x424ea4
cmp eax, 5
jne 0x425081
call fcn.004349e0
test al, al
je 0x425081
mov ecx, ebx
call fcn.0040e7a0
test al, al
jne 0x425081
mov eax, dword [ebp + 8]
mov eax, dword [eax]
cmp dword [eax + 0x14], 0
je 0x425081
call fcn.00410210
push dword [0x522bb0]
mov ecx, eax
call fcn.004136a0
test al, al
jne 0x425081
mov ecx, dword [ebx + 0xc]
push 0x516c74
mov dword [ebp - 0x2b8], 0
push 4
mov eax, dword [ecx]
push ecx
call dword [eax + 0x20]
call fcn.004981f0
lea ecx, [ebp - 0x248]
push ecx
mov ecx, eax
call fcn.00496840
mov esi, eax
cmp dword [esi + 0x14], 8
mov dword [ebp - 4], 0
jb 0x424f27
mov esi, dword [esi]
call fcn.004981f0
push 0
lea ecx, [ebp - 0x230]
push ecx
mov ecx, eax
call fcn.00496610
cmp dword [eax + 0x14], 8
mov byte [ebp - 4], 1
jb 0x424f48
mov eax, dword [eax]
lea ecx, [ebp - 0x2b8]
push ecx
push 0
push 0
push esi
push eax
push str.C_DownQuery
mov ecx, ebx
call fcn.00431160
mov edx, dword [ebp - 0x21c]
mov byte [ebp - 4], 0
cmp edx, 8
jb 0x424fa1
mov ecx, dword [ebp - 0x230]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x424f97
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x424ff7
push edx
push ecx
call fcn.004c6f6f
add esp, 8
mov edx, dword [ebp - 0x234]
xor eax, eax
mov dword [ebp - 0x220], 0
mov dword [ebp - 0x21c], 7
mov word [ebp - 0x230], ax
mov dword [ebp - 4], 0xffffffff
cmp edx, 8
jb 0x425007
mov ecx, dword [ebp - 0x248]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x424ffd
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
jbe 0x424ffd
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
push edx
push ecx
call fcn.004c6f6f
add esp, 8
push dword [ebp - 0x2b8]
push str.Query_install:__i
push str.kupdate::KWpsUpdateImpl::CheckActionExecuteEnv
push 0x4d2
push str.D:_rc_bug_mas_v12_2408Coding_supportwpsupdateUpdateClient_srcmiscKWpsUpdateImpl.cpp
push 7
call fcn.00412230
add esp, 0x18
cmp dword [ebp - 0x2b8], 1
je 0x425081
push 0
push 0x517cd0
push str.HKCUSoftwareKingsoftOffice6.0CommonupdateinfoHaveNewPatch
call fcn.0044d690
add esp, 0xc
test eax, eax
js 0x42505b
push edi
mov ecx, ebx
call fcn.004350a0
xor al, al
jmp 0x425c57
push eax
push str.Failed_set_new_patch_flag:_0x_08x.
push str.kupdate::KWpsUpdateImpl::CheckActionExecuteEnv
push 0x4da
push str.D:_rc_bug_mas_v12_2408Coding_supportwpsupdateUpdateClient_srcmiscKWpsUpdateImpl.cpp
push 0
call fcn.00412230
add esp, 0x18
xor al, al
jmp 0x425c57
lea eax, [ebp - 0x290]
push 0
push eax
call fcn.00417040
add esp, 8
mov eax, dword [ebp + 8]
mov dword [ebp - 4], 2
mov eax, dword [eax]
mov eax, dword [eax + 4]
cmp eax, 3
je 0x4250b4
cmp eax, 4
je 0x4250b4
cmp eax, 5
jne 0x425208
mov ecx, ebx
call fcn.0040e7a0
test al, al
jne 0x425208
mov ecx, ebx
call fcn.004349e0
test al, al
jne 0x425208
mov ecx, 7
mov dword [ebp - 0x230], 0
xor eax, eax
mov dword [ebp - 0x220], 0
mov dword [ebp - 0x21c], ecx
mov word [ebp - 0x230], ax
mov eax, dword [ebp + 8]
mov byte [ebp - 4], 3
mov eax, dword [eax]
cmp dword [eax + 0x18], 0
jne 0x425128
call fcn.00410170
lea edx, [ebp - 0x230]
push edx
push eax
mov ecx, dword [eax]
call dword [ecx + 0x98]
test eax, eax
jne 0x42515d
mov ecx, dword [ebp - 0x21c]
mov eax, dword [ebp + 8]
mov eax, dword [eax]
cmp dword [eax + 0x1c], 0xffffffff
je 0x4251c8
cmp dword [ebp - 0x27c], 8
lea eax, [ebp - 0x290]
mov ecx, ebx
cmovae eax, dword [ebp - 0x290]
push eax
call fcn.00433240
mov ecx, dword [ebp + 8]
mov ecx, dword [ecx]
cmp eax, dword [ecx + 0x1c]
ja 0x4251c2
push str.Auto_mode__but_kso_is_running._exit.
push str.kupdate::KWpsUpdateImpl::CheckActionExecuteEnv
push 0x4e9
push str.D:_rc_bug_mas_v12_2408Coding_supportwpsupdateUpdateClient_srcmiscKWpsUpdateImpl.cpp
push 5
call fcn.00412230
mov edx, dword [ebp - 0x21c]
add esp, 0x14
cmp edx, 8
jb 0x425438
mov ecx, dword [ebp - 0x230]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x4251b1
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x4251f8
push edx
push ecx
call fcn.004c6f6f
add esp, 8
xor bl, bl
jmp 0x4258e8
mov ecx, dword [ebp - 0x21c]
mov byte [ebp - 4], 2
cmp ecx, 8
jb 0x425208
lea edx, [ecx*2 + 2]
mov ecx, dword [ebp - 0x230]
mov eax, ecx
cmp edx, 0x1000
jb 0x4251fe
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
jbe 0x4251fe
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
push edx
push ecx
call fcn.004c6f6f
add esp, 8
mov eax, dword [ebp + 8]
mov eax, dword [eax]
cmp dword [eax + 0xc], 0
je 0x42543f
call fcn.00454960
test al, al
jne 0x42543f
push str.Need_higher_privileges.
push str.kupdate::KWpsUpdateImpl::CheckActionExecuteEnv
push 0x4f1
push str.D:_rc_bug_mas_v12_2408Coding_supportwpsupdateUpdateClient_srcmiscKWpsUpdateImpl.cpp
push 7
call fcn.00412230
add esp, 0x14
mov ecx, ebx
push edi
call fcn.004350a0
test eax, eax
js 0x425438
push 0x208
lea eax, [ebp - 0x218]
push 0
push eax
call sub.VCRUNTIME140.dll_memset
mov eax, dword [0x522bb0]
add esp, 0xc
mov ebx, dword [str.elevated]
mov dword [ebp - 0x2c0], eax
call fcn.00410210
push dword [0x522b98]
lea ecx, [ebp - 0x248]
push ecx
mov ecx, eax
call fcn.00413540
mov esi, eax
cmp dword [esi + 0x14], 8
mov byte [ebp - 4], 4
jb 0x4252a0
mov esi, dword [esi]
mov edi, dword [str.guid]
call fcn.00410210
push dword [0x522b64]
lea ecx, [ebp - 0x230]
push ecx
mov ecx, eax
call fcn.00413540
cmp dword [eax + 0x14], 8
jb 0x4252c7
mov eax, dword [eax]
push ebx
push dword [ebp - 0x2c0]
push esi
push edi
push eax
push dword [0x522b64]
lea eax, [ebp - 0x218]
push str.__s_s___s_s___s_s
push 0x103
push eax
call fcn.00411c80
mov edx, dword [ebp - 0x21c]
add esp, 0x24
cmp edx, 8
jb 0x42532c
mov ecx, dword [ebp - 0x230]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x425322
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x42537f
push edx
push ecx
call fcn.004c6f6f
add esp, 8
mov edx, dword [ebp - 0x234]
xor eax, eax
mov dword [ebp - 0x220], 0
mov dword [ebp - 0x21c], 7
mov word [ebp - 0x230], ax
mov byte [ebp - 4], 2
cmp edx, 8
jb 0x42538f
mov ecx, dword [ebp - 0x248]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x425385
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
jbe 0x425385
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
push edx
push ecx
call fcn.004c6f6f
add esp, 8
call fcn.00410170
lea ecx, [ebp - 0x248]
push ecx
mov ecx, eax
call fcn.00446940
cmp dword [eax + 0x14], 8
mov byte [ebp - 4], 5
jb 0x4253ae
mov eax, dword [eax]
lea ecx, [ebp - 0x218]
push ecx
push eax
call fcn.00455cc0
mov edx, dword [ebp - 0x234]
add esp, 8
mov byte [ebp - 4], 2
mov esi, eax
cmp edx, 8
jb 0x425406
mov ecx, dword [ebp - 0x248]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x4253fc
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
jbe 0x4253fc
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
push edx
push ecx
call fcn.004c6f6f
add esp, 8
test esi, esi
jns 0x425438
call fcn.0042ca80
push esi
push 6
mov ecx, eax
call fcn.00413020
push esi
push str.Failed_run_wpsupdate_elevated:_0x_08x.
push str.kupdate::KWpsUpdateImpl::CheckActionExecuteEnv
push 0x500
push str.D:_rc_bug_mas_v12_2408Coding_supportwpsupdateUpdateClient_srcmiscKWpsUpdateImpl.cpp
push 0
call fcn.00412230
add esp, 0x18
xor bl, bl
jmp 0x4258e8
mov ecx, ebx
call fcn.00438890
xor eax, eax
mov dword [ebp - 0x260], 0
mov dword [ebp - 0x250], 0
mov dword [ebp - 0x24c], 7
mov word [ebp - 0x260], ax
mov eax, dword [ebp + 8]
mov byte [ebp - 4], 6
mov edx, dword [eax]
mov ecx, dword [edx + 4]
cmp ecx, 3
je 0x42548c
cmp ecx, 4
je 0x42548c
cmp ecx, 5
jne 0x425a58
cmp dword [edx + 0x18], 0
jne 0x425a58
call fcn.00410170
lea edx, [ebp - 0x260]
push edx
push eax
mov ecx, dword [eax]
call dword [ecx + 0x98]
test eax, eax
je 0x425a55
mov eax, dword [ebp + 8]
mov eax, dword [eax]
cmp dword [eax + 4], 5
jne 0x4255f5
call fcn.00410170
mov ecx, eax
call fcn.004478e0
test eax, eax
je 0x4255f5
mov eax, dword [ebp + 8]
mov eax, dword [eax]
mov dword [ebp - 0x2ac], eax
test eax, eax
je 0x4255f5
mov esi, dword [eax + 0x54]
cmp esi, dword [eax + 0x58]
je 0x4255f5
cmp dword [esi + 0x2c], 8
lea eax, [esi + 0x18]
jb 0x425500
mov eax, dword [eax]
push eax
lea eax, [ebp - 0x248]
push eax
call fcn.004ecbb0
add esp, 8
cmp dword [eax + 0x14], 8
mov byte [ebp - 4], 7
jb 0x42551c
mov eax, dword [eax]
push eax
lea eax, [ebp - 0x278]
push eax
call fcn.004182e0
mov edx, dword [ebp - 0x234]
add esp, 8
mov byte [ebp - 4], 6
cmp edx, 8
jb 0x425570
mov ecx, dword [ebp - 0x248]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x425566
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x424ff7
push edx
push ecx
call fcn.004c6f6f
add esp, 8
mov ebx, dword [ebp - 0x264]
lea eax, [ebp - 0x278]
mov edi, dword [ebp - 0x278]
cmp ebx, 8
push 0x14
push str._updateFromProToPlus
push 0
push dword [ebp - 0x268]
cmovae eax, edi
push eax
call fcn.00422e50
add esp, 0x14
cmp eax, 0xffffffff
jne 0x42584a
cmp ebx, 8
jb 0x4255dd
lea ecx, [ebx*2 + 2]
mov eax, edi
cmp ecx, 0x1000
jb 0x4255d3
mov edi, dword [edi - 4]
add ecx, 0x23
sub eax, edi
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x42587d
push ecx
push edi
call fcn.004c6f6f
add esp, 8
mov eax, dword [ebp - 0x2ac]
add esi, 0x30
cmp esi, dword [eax + 0x58]
jne 0x4254f5
mov ebx, dword [ebp - 0x2c0]
push str.Kso_is_running.
push str.kupdate::KWpsUpdateImpl::CheckActionExecuteEnv
push 0x52d
push str.D:_rc_bug_mas_v12_2408Coding_supportwpsupdateUpdateClient_srcmiscKWpsUpdateImpl.cpp
push 4
call fcn.00412230
add esp, 0x14
mov dword [ebp - 0x2b8], 2
mov ecx, ebx
call fcn.0040e7a0
test al, al
jne 0x425637
mov ecx, ebx
call fcn.004349e0
test al, al
je 0x425782
mov ecx, dword [ebx + 0xc]
push 0x516c74
push 4
push ecx
mov eax, dword [ecx]
call dword [eax + 0x20]
call fcn.004981f0
cmp dword [ebp - 0x24c], 8
lea ecx, [ebp - 0x260]
cmovae ecx, dword [ebp - 0x260]
push ecx
lea ecx, [ebp - 0x248]
push ecx
mov ecx, eax
call fcn.004970a0
mov esi, eax
cmp dword [esi + 0x14], 8
mov byte [ebp - 4], 8
jb 0x42567d
mov esi, dword [esi]
call fcn.004981f0
push 0
lea ecx, [ebp - 0x230]
push ecx
mov ecx, eax
call fcn.00496610
cmp dword [eax + 0x14], 8
mov byte [ebp - 4], 9
jb 0x42569e
mov eax, dword [eax]
lea ecx, [ebp - 0x2b8]
push ecx
push 0
push 0
push esi
push eax
push str.C_KsoRunningQuery
mov ecx, ebx
call fcn.00431160
mov edx, dword [ebp - 0x21c]
mov byte [ebp - 4], 8
cmp edx, 8
jb 0x4256fb
mov ecx, dword [ebp - 0x230]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x4256f1
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x424ff7
push edx
push ecx
call fcn.004c6f6f
add esp, 8
mov edx, dword [ebp - 0x234]
xor eax, eax
mov dword [ebp - 0x220], 0
mov dword [ebp - 0x21c], 7
mov word [ebp - 0x230], ax
mov byte [ebp - 4], 6
cmp edx, 8
jb 0x42575c
mov ecx, dword [ebp - 0x248]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x425752
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x424ff7
push edx
push ecx
call fcn.004c6f6f
add esp, 8
cmp dword [ebp - 0x2b8], 1
jne 0x42578f
call fcn.00410170
lea edx, [ebp - 0x260]
push edx
push eax
mov ecx, dword [eax]
call dword [ecx + 0x98]
test eax, eax
jne 0x425647
cmp dword [ebp - 0x2b8], 1
je 0x425a55
push str.Kso_is_running__exit.
push str.kupdate::KWpsUpdateImpl::CheckActionExecuteEnv
push 0x546
push str.D:_rc_bug_mas_v12_2408Coding_supportwpsupdateUpdateClient_srcmiscKWpsUpdateImpl.cpp
push 4
call fcn.00412230
add esp, 0x14
mov dword [ebp - 0x2b4], 0
mov dword [ebp - 0x2b0], 0
mov dword [ebp - 0x2ac], 0
push str.ksorunning
lea ecx, [ebp - 0x230]
mov byte [ebp - 4], 0xa
call fcn.004050b0
mov ecx, dword [ebp - 0x2b0]
mov byte [ebp - 4], 0xb
cmp ecx, dword [ebp - 0x2ac]
je 0x42592c
mov eax, dword [ebp - 0x230]
mov edx, 7
mov dword [ecx], 0
mov dword [ecx], eax
mov eax, dword [ebp - 0x22c]
mov dword [ecx + 4], eax
mov eax, dword [ebp - 0x228]
mov dword [ecx + 8], eax
mov eax, dword [ebp - 0x224]
mov dword [ecx + 0xc], eax
mov eax, dword [ebp - 0x220]
mov dword [ecx + 0x10], eax
mov eax, dword [ebp - 0x21c]
mov dword [ecx + 0x14], eax
xor eax, eax
add dword [ebp - 0x2b0], 0x18
mov word [ebp - 0x230], ax
jmp 0x425945
mov eax, dword [ebp - 0x2c0]
mov byte [eax + 0x88], 1
cmp ebx, 8
jb 0x42588d
lea ebx, [ebx*2 + 2]
mov eax, edi
cmp ebx, 0x1000
jb 0x425883
mov edi, dword [edi - 4]
add ebx, 0x23
sub eax, edi
add eax, 0xfffffffc
cmp eax, 0x1f
jbe 0x425883
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
push ebx
push edi
call fcn.004c6f6f
add esp, 8
mov bl, 1
mov edx, dword [ebp - 0x24c]
cmp edx, 8
jb 0x4258cb
mov ecx, dword [ebp - 0x260]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x4258c1
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x425926
push edx
push ecx
call fcn.004c6f6f
add esp, 8
xor eax, eax
mov dword [ebp - 0x250], 0
mov dword [ebp - 0x24c], 7
mov word [ebp - 0x260], ax
mov edx, dword [ebp - 0x27c]
cmp edx, 8
jb 0x425c55
mov ecx, dword [ebp - 0x290]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x425c4b
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
jbe 0x425c4b
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
lea eax, [ebp - 0x230]
push eax
push ecx
lea ecx, [ebp - 0x2b4]
call fcn.0040e2d0
mov edx, dword [ebp - 0x21c]
mov byte [ebp - 4], 0xa
cmp edx, 8
jb 0x425983
mov ecx, dword [ebp - 0x230]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x425979
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x425a3e
push edx
push ecx
call fcn.004c6f6f
add esp, 8
call fcn.0042c9e0
lea ecx, [ebp - 0x2b4]
push ecx
mov ecx, eax
call fcn.0044f370
mov esi, dword [ebp - 0x2b4]
test esi, esi
je 0x425c44
mov edi, dword [ebp - 0x2b0]
cmp esi, edi
je 0x425a05
mov edi, edi
mov ecx, dword [esi + 0x14]
cmp ecx, 8
jb 0x4259e5
mov eax, dword [esi]
lea ecx, [ecx*2 + 2]
cmp ecx, 0x1000
jb 0x4259db
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x425a3e
mov eax, edx
push ecx
push eax
call fcn.004c6f6f
add esp, 8
xor eax, eax
mov dword [esi + 0x10], 0
mov dword [esi + 0x14], 7
mov word [esi], ax
add esi, 0x18
cmp esi, edi
jne 0x4259b0
mov esi, dword [ebp - 0x2b4]
mov ecx, dword [ebp - 0x2ac]
mov eax, 0x2aaaaaab
sub ecx, esi
imul ecx
sar edx, 2
mov eax, edx
shr eax, 0x1f
add eax, edx
lea ecx, [eax + eax*2]
mov eax, esi
shl ecx, 3
cmp ecx, 0x1000
jb 0x425a44
mov esi, dword [esi - 4]
add ecx, 0x23
sub eax, esi
add eax, 0xfffffffc
cmp eax, 0x1f
jbe 0x425a44
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
push ecx
push esi
call fcn.004c6f6f
add esp, 8
xor bl, bl
jmp 0x42588f
mov eax, dword [ebp + 8]
mov ecx, dword [eax]
mov eax, dword [ecx + 4]
cmp eax, 3
je 0x425a70
cmp eax, 4
je 0x425a70
cmp eax, 5
jne 0x42588d
cmp dword [ecx + 0x1c], 0xffffffff
je 0x42588d
cmp dword [ebp - 0x27c], 8
lea ecx, [ebp - 0x2c4]
push ecx
lea ecx, [ebp - 0x2bc]
push ecx
lea ecx, [ebp - 0x2b0]
lea eax, [ebp - 0x290]
cmovae eax, dword [ebp - 0x290]
xor esi, esi
push ecx
push eax
call dword [sym.imp.KERNEL32.dll_GetDiskFreeSpaceExW]
test eax, eax
je 0x425ac0
mov esi, dword [ebp - 0x2b0]
mov eax, dword [ebp - 0x2ac]
shrd esi, eax, 0x14
mov eax, dword [ebp + 8]
mov eax, dword [eax]
mov eax, dword [eax + 0x1c]
cmp esi, eax
ja 0x42588d
push eax
push str.Not_enough_disk_space._need__u.
push str.kupdate::KWpsUpdateImpl::CheckActionExecuteEnv
push 0x553
push str.D:_rc_bug_mas_v12_2408Coding_supportwpsupdateUpdateClient_srcmiscKWpsUpdateImpl.cpp
push 0
call fcn.00412230
add esp, 0x18
mov ecx, ebx
call fcn.0040e7a0
test al, al
jne 0x425b09
mov ecx, ebx
call fcn.004349e0
test al, al
je 0x425c44
push 0
push str.NotEnoughSpace
push str.HKCUSoftwareKingsoftOffice6.0CommonupdateinfocacheStatusInfowpsUpdateStatusDetail
call fcn.0044d690
push 0
push dword [0x522c60]
push str.HKCUSoftwareKingsoftOffice6.0CommonupdateinfocacheStatusInfowpsUpdateStatus
call fcn.0044d690
mov ecx, dword [ebx + 0xc]
add esp, 0x18
mov dword [ebp - 0x2ac], 0
mov eax, dword [ecx]
push 0x516c74
push 4
push ecx
call dword [eax + 0x20]
call fcn.004981f0
push 0x51aa78
lea ecx, [ebp - 0x2a8]
push ecx
mov ecx, eax
call fcn.00497a80
mov esi, eax
cmp dword [esi + 0x14], 8
mov byte [ebp - 4], 0xc
jb 0x425b6f
mov esi, dword [esi]
call fcn.004981f0
push 0
lea ecx, [ebp - 0x278]
push ecx
mov ecx, eax
call fcn.00496610
cmp dword [eax + 0x14], 8
mov byte [ebp - 4], 0xd
jb 0x425b90
mov eax, dword [eax]
lea ecx, [ebp - 0x2ac]
push ecx
push 0
push 0
push esi
push eax
push str.C_NotEnoughSpace
mov ecx, ebx
call fcn.00431160
mov edx, dword [ebp - 0x264]
cmp edx, 8
jb 0x425be5
mov ecx, dword [ebp - 0x278]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x425bdb
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x425c34
push edx
push ecx
call fcn.004c6f6f
add esp, 8
mov edx, dword [ebp - 0x294]
xor eax, eax
mov dword [ebp - 0x268], 0
mov dword [ebp - 0x264], 7
mov word [ebp - 0x278], ax
cmp edx, 8
jb 0x425c44
mov ecx, dword [ebp - 0x2a8]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x425c3a
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
jbe 0x425c3a
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
push edx
push ecx
call fcn.004c6f6f
add esp, 8
xor bl, bl
jmp 0x42588f
push edx
push ecx
call fcn.004c6f6f
add esp, 8
mov al, bl
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
call fcn.004c6f8b
mov esp, ebp
pop ebp
ret 8