Function at 0x411fa0
Capabilities:
Check for time delay via gettickcount

Disassembly:
push 0xffffffffffffffff
push 0x423de1
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
sub esp, 0x41c
lea ecx, [esp]
call sub.MFC42u.DLL_CString::CString_4
mov eax, dword [0x42d03c]
mov dword [esp + 0x424], 0
dec eax
cmp eax, 3
ja case.default.0x411fda
jmp dword [eax*4 + 0x41220c]
push str.http:__update.360safe.com_safe_safeup.cab
jmp 0x412031
push str.http:__updatem.360safe.com_safe_safeupm.cab
lea ecx, [esp + 4]
call sub.MFC42u.DLL_CString::operator_2
lea ecx, [esp]
push str.typetray
push ecx
call fcn.00405600
add esp, 8
jmp case.default.0x411fda
push str.http:__update.360safe.com_safe_safeup.cab
lea ecx, [esp + 4]
call sub.MFC42u.DLL_CString::operator_2
lea edx, [esp]
push str.typetray
push edx
call fcn.00405600
add esp, 8
jmp case.default.0x411fda
push str.http:__update.360safe.com_safe_urlini.cab
lea ecx, [esp + 4]
call sub.MFC42u.DLL_CString::operator_2
mov eax, dword [esp]
mov ecx, dword [eax - 8]
test ecx, ecx
je 0x4121de
mov dx, word [0x42f1ac]
push edi
mov ecx, 0x81
xor eax, eax
lea edi, [esp + 0x21a]
mov word [esp + 0x218], dx
rep stosd dword es:[edi], eax
stosw word es:[edi], ax
mov ecx, 0x81
xor eax, eax
lea edi, [esp + 0x12]
mov word [esp + 0x10], dx
rep stosd dword es:[edi], eax
push str.360safe.exe
lea ecx, [esp + 0x21c]
push 0x104
push ecx
stosw word es:[edi], ax
call fcn.00405320
lea edx, [esp + 0x1c]
push 0x208
lea eax, [esp + 0x228]
push edx
push eax
call fcn.00404e00
add esp, 0x18
lea ecx, [esp + 8]
call sub.MFC42u.DLL_CString::CString_4
mov eax, dword [0x42d03c]
mov byte [esp + 0x428], 1
cmp eax, 3
pop edi
jne 0x412156
lea ecx, [esp + 8]
call sub.MFC42u.DLL_CString::CString_4
lea ecx, [esp + 8]
mov byte [esp + 0x424], 2
push ecx
call fcn.00405860
mov edx, dword [esp + 0xc]
add esp, 4
mov eax, dword [edx - 8]
test eax, eax
lea eax, [esp + 0xc]
push eax
je 0x412124
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov ecx, dword [esp + 0xc]
push eax
push ecx
call fcn.00410660
push eax
lea edx, [esp + 0x14]
push str.m_s_st_uver_s
push edx
call sub.MFC42u.DLL_CString::Format
add esp, 0x18
jmp 0x412143
call dword [sym.imp.KERNEL32.dll_GetTickCount]
push eax
call fcn.00410660
push eax
lea ecx, [esp + 0x10]
push str.m_st_uver_s
push ecx
call sub.MFC42u.DLL_CString::Format
add esp, 0x14
lea ecx, [esp + 8]
mov byte [esp + 0x424], 1
call sub.MFC42u.DLL_CString::CString
jmp 0x41217a
lea edx, [esp + 0xc]
push edx
call dword [sym.imp.KERNEL32.dll_GetTickCount]
push eax
call fcn.00410660
push eax
lea eax, [esp + 0x10]
push str.m_st_uver_s
push eax
call sub.MFC42u.DLL_CString::Format
add esp, 0x14
push esi
mov esi, dword [esp + 0x430]
lea ecx, [esp + 4]
push ecx
mov ecx, esi
call sub.MFC42u.DLL_CString::operator_1
mov edx, dword [esp + 8]
push edx
push esi
call fcn.00405600
add esp, 8
lea ecx, [esp + 8]
mov byte [esp + 0x428], 0
call sub.MFC42u.DLL_CString::CString
lea ecx, [esp + 4]
mov dword [esp + 0x428], 0xffffffff
call sub.MFC42u.DLL_CString::CString
mov eax, 1
pop esi
mov ecx, dword [esp + 0x41c]
mov dword fs:[0], ecx
add esp, 0x428
ret 4
lea ecx, [esp]
mov dword [esp + 0x424], 0xffffffff
call sub.MFC42u.DLL_CString::CString
mov ecx, dword [esp + 0x41c]
xor eax, eax
mov dword fs:[0], ecx
add esp, 0x428
ret 4