Function at 0x496630
Capabilities:
Check for time delay via gettickcount
Delete file

Disassembly:
push ebp
lea ebp, [esp - 0x65c]
sub esp, 0x65c
push 0xffffffffffffffff
push 0x58b964
mov eax, dword fs:[0]
push eax
sub esp, 0x14
mov eax, dword [0x5f4760]
xor eax, ebp
mov dword [ebp + 0x658], eax
push ebx
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov dword [ebp - 0x10], esp
xor esi, esi
lea eax, [ebp - 0x14]
push eax
call fcn.004030f0
mov dword [ebp - 4], esi
mov ecx, dword [0x603dfc]
push ecx
push str._sNet_Status.html
lea edi, [ebp - 0x14]
call fcn.00402e20
add esp, 8
mov edx, dword [ebp + 0x664]
mov dword [ebp - 0x20], edx
mov eax, dword [ebp - 0x20]
call fcn.004577f0
test al, al
jne 0x4969f3
push 0x14
call dword [sym.imp.KERNEL32.dll_Sleep]
call dword [sym.imp.KERNEL32.dll_GetTickCount]
cmp eax, esi
jb 0x4966c9
test esi, esi
je 0x4966c9
sub eax, esi
cmp eax, 0x6ddd00
jbe 0x49669a
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov esi, eax
mov dword [ebp - 0x1c], esi
lea eax, [ebp - 0x18]
push eax
mov ecx, str.http:__updatem.360safe.com_v3_safeup_miniup64.cab
call fcn.00402fe0
mov ebx, 1
mov byte [ebp - 4], bl
mov eax, 2
cmp dword [0x604340], eax
jne 0x4969c7
cmp dword [0x604344], 0
je 0x4969c7
mov byte [ebp - 4], al
mov ecx, 0x6038b8
call fcn.0042f4b0
test eax, eax
je 0x49681e
mov ecx, dword [ebp - 0x14]
push ecx
call dword [sym.imp.KERNEL32.dll_DeleteFileA]
push 0x658
push 0
lea edx, [ebp]
push edx
call fcn.004add60
push 0x103
mov eax, dword [0x60432c]
push eax
lea ecx, [ebp + 0x50c]
push ecx
call fcn.004a5b40
movzx edx, word [0x604330]
mov dword [ebp + 0x610], edx
push 0x1f
mov eax, dword [0x604334]
push eax
lea ecx, [ebp + 0x614]
push ecx
call fcn.004a5b40
push 0x1f
mov edx, dword [0x604338]
push edx
lea eax, [ebp + 0x634]
push eax
call fcn.004a5b40
push 0x3ff
mov ecx, dword [ebp - 0x18]
push ecx
lea edx, [ebp]
push edx
call fcn.004a5b40
push 0x103
mov eax, dword [ebp - 0x14]
push eax
lea ecx, [ebp + 0x400]
push ecx
call fcn.004a5b40
add esp, 0x48
mov dword [ebp + 0x504], 0x1e
mov dword [ebp + 0x508], 3
mov dword [ebp + 0x654], 0
lea edx, [ebp]
push edx
call dword [0x6038c0]
add esp, 4
test eax, eax
jne 0x4967fe
mov dword [0x601fd4], ebx
mov eax, dword [ebp - 0x14]
push eax
push str.EntProxyNetCheck_download__s_success.
mov ecx, 0x603b54
call fcn.0040af00
add esp, 8
mov dword [ebp - 4], ebx
jmp 0x496853
mov ecx, dword [ebp - 0x14]
push ecx
push str.EntProxyNetCheck
mov ebx, 3
mov ecx, 0x604408
call fcn.00446e90
mov ebx, 1
add esp, 8
mov dword [ebp - 4], ebx
jmp 0x496853
cmp dword [0x601fd4], 0
jne 0x4969c7
push str.http:__softm.update.360safe.com_safeupv3.cab
mov edi, 0x2c
lea eax, [ebp - 0x18]
call fcn.004033b0
mov byte [ebp - 4], 4
mov ecx, 0x6038b8
call fcn.0042f4b0
test eax, eax
je 0x496997
mov eax, dword [ebp - 0x14]
push eax
call dword [sym.imp.KERNEL32.dll_DeleteFileA]
push 0x658
push 0
lea ecx, [ebp]
push ecx
call fcn.004add60
add esp, 0xc
push 0x103
mov edx, dword [0x60432c]
push edx
lea eax, [ebp + 0x50c]
push eax
call fcn.004a5b40
add esp, 0xc
movzx ecx, word [0x604330]
mov dword [ebp + 0x610], ecx
push 0x1f
mov edx, dword [0x604334]
push edx
lea eax, [ebp + 0x614]
push eax
call fcn.004a5b40
add esp, 0xc
push 0x1f
mov ecx, dword [0x604338]
push ecx
lea edx, [ebp + 0x634]
push edx
call fcn.004a5b40
add esp, 0xc
push 0x3ff
mov eax, dword [ebp - 0x18]
push eax
lea ecx, [ebp]
push ecx
call fcn.004a5b40
add esp, 0xc
push 0x103
mov edx, dword [ebp - 0x14]
push edx
lea eax, [ebp + 0x400]
push eax
call fcn.004a5b40
mov dword [ebp + 0x504], 0x1e
mov dword [ebp + 0x508], 3
mov dword [ebp + 0x654], 0
lea ecx, [ebp]
push ecx
call dword [0x6038c0]
add esp, 0x10
test eax, eax
jne 0x496977
mov dword [0x601fd4], ebx
mov edx, dword [ebp - 0x14]
push edx
push str.EntProxyNetCheck_download__s_success.
mov ecx, 0x603b54
call fcn.0040af00
add esp, 8
mov dword [ebp - 4], ebx
jmp 0x4969c7
mov eax, dword [ebp - 0x14]
push eax
push str.EntProxyNetCheck
mov ebx, 3
mov ecx, 0x604408
call fcn.00446e90
mov ebx, 1
add esp, 8
mov dword [ebp - 4], ebx
jmp 0x4969c7
mov byte [ebp - 4], 0
mov eax, dword [ebp - 0x18]
add eax, 0xfffffff0
lea edx, [eax + 0xc]
or ecx, 0xffffffff
lock xadd dword [edx], ecx
dec ecx
test ecx, ecx
jg 0x49669a
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
jmp 0x49669a
mov dword [ebp - 4], 0xffffffff
mov eax, dword [ebp - 0x14]
add eax, 0xfffffff0
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x496a19
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
xor eax, eax
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [ebp + 0x658]
xor ecx, ebp
call fcn.004a314d
add ebp, 0x65c
mov esp, ebp
pop ebp
ret 4