Function at 0x89bdb0
Capabilities:
Check for time delay via gettickcount
Read .ini file

Disassembly:
push ebp
mov ebp, esp
push 0xfffffffffffffffe
push 0xb14b50
push 0xa847a0
mov eax, dword fs:[0]
push eax
sub esp, 0x658
mov eax, dword [0xb196ec]
xor dword [ebp - 8], eax
xor eax, ebp
mov dword [ebp - 0x1c], eax
push ebx
push esi
push edi
push eax
lea eax, [ebp - 0x10]
mov dword fs:[0], eax
mov dword [ebp - 0x18], esp
xor eax, eax
mov dword [ebp - 4], eax
mov dword [ebp - 0x658], eax
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [ebp - 0x65c], eax
push str.DCEx2f
test byte [0xb5658c], 2
je 0x89be1b
call fcn.0085ded0
add esp, 4
jmp 0x89c29e
xor ebx, ebx
xor esi, esi
call fcn.0085df20
add esp, 4
mov eax, dword [0xb4390c]
cmp eax, ebx
je 0x89c0c8
cmp dword [0xb54194], ebx
jne 0x89be46
mov dword [ebp - 0x658], 1
cmp eax, ebx
je 0x89c0c8
cmp dword [0xb54194], ebx
je 0x89c0c8
mov byte [ebp - 0x244], bl
push 0x103
push ebx
lea eax, [ebp - 0x243]
push eax
call fcn.00a7ffb0
mov byte [ebp - 0x550], bl
push 0x103
push ebx
lea ecx, [ebp - 0x54f]
push ecx
call fcn.00a7ffb0
add esp, 0x18
push 0xb55f40
push 0x104
lea edx, [ebp - 0x550]
push edx
push 0xaa1543
push str.HTTPHost
push str.Config
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileStringA]
lea esi, [ebp - 0x244]
call fcn.00956c70
test eax, eax
jne 0x89bee6
cmp byte [ebp - 0x244], bl
je 0x89bee2
push ebx
mov eax, esi
push eax
lea ecx, [ebp - 0x550]
push ecx
call fcn.0095c8c0
add esp, 0xc
cmp eax, 0xffffffff
jne 0x89bee6
xor esi, esi
jmp 0x89bef0
mov esi, 1
jmp 0x89bef0
mov byte [ebp - 0x140], bl
push 0x103
push ebx
lea edx, [ebp - 0x13f]
push edx
call fcn.00a7ffb0
add esp, 0xc
cmp esi, ebx
jne 0x89bf6a
mov byte [str.8d18e6d0_6a31_4762_b5f3_84c6240ed7ec], bl
mov dword [ebp - 0x660], 0x104
push str.LogMcst
lea eax, [ebp - 0x660]
mov edi, str.8d18e6d0_6a31_4762_b5f3_84c6240ed7ec
mov ecx, str.SOFTWAREMicroWorldeScan_for_Windows
mov edx, 0x80000002
call fcn.0094c020
mov dword [ebp - 0x660], 0x104
push str.LogVers
lea eax, [ebp - 0x660]
lea edi, [ebp - 0x140]
mov ecx, str.SOFTWAREMicroWorldeScan_for_Windows
mov edx, 0x80000002
call fcn.0094c020
jmp 0x89bfaf
lea ecx, [ebp - 0x244]
mov edx, str.8d18e6d0_6a31_4762_b5f3_84c6240ed7ec
mov al, byte [ecx]
mov byte [edx], al
inc ecx
inc edx
cmp al, bl
jne 0x89bf75
mov eax, dword [str.11.0.2.370]
mov dword [ebp - 0x140], eax
mov ecx, dword [0xac0424]
mov dword [ebp - 0x13c], ecx
mov dx, word [0xac0428]
mov word [ebp - 0x138], dx
mov al, byte [0xac042a]
mov byte [ebp - 0x136], al
cmp byte [ebp - 0x140], bl
je 0x89c07d
cmp byte [str.8d18e6d0_6a31_4762_b5f3_84c6240ed7ec], bl
je 0x89c07d
mov dword [ebp - 0x668], ebx
mov dword [ebp - 0x664], ebx
mov byte [ebp - 0x3c], bl
xor eax, eax
mov dword [ebp - 0x3b], eax
mov dword [ebp - 0x37], eax
mov dword [ebp - 0x33], eax
mov dword [ebp - 0x2f], eax
mov dword [ebp - 0x2b], eax
mov dword [ebp - 0x27], eax
mov dword [ebp - 0x23], eax
mov word [ebp - 0x1f], ax
mov byte [ebp - 0x1d], al
push 0xb55f40
push 0x20
push str.Config
lea edi, [ebp - 0x3c]
mov edx, 0xaa1543
mov ecx, str.HighBandwidth
call fcn.00970690
add esp, 0xc
lea ebx, [ebp - 0x664]
lea edi, [ebp - 0x668]
lea esi, [ebp - 0x140]
call fcn.00989fe0
mov eax, dword [ebp - 0x668]
cmp eax, 0xb0000
ja 0x89c06f
jne 0x89c047
cmp dword [ebp - 0x664], 0x20023
jae 0x89c06f
mov eax, 0xac042c
lea ecx, [ebp - 0x140]
call fcn.0094c3e0
test eax, eax
je 0x89c06f
xor ebx, ebx
cmp byte [ebp - 0x3c], 0x31
jne 0x89c090
mov dword [ebp - 0x658], 1
jmp 0x89c090
mov dword [ebp - 0x658], 1
xor ebx, ebx
jmp 0x89c090
call dword [sym.imp.KERNEL32.dll_GetTickCount]
sub eax, dword [ebp - 0x65c]
cmp eax, 0x927c0
jbe 0x89c0b8
mov esi, dword [sym.imp.KERNEL32.dll_GetTickCount]
mov edi, dword [ebp - 0x65c]
lea esp, [esp]
call esi
sub eax, edi
cmp eax, 0x3a980
jae 0x89c0c8
push 0x4e20
call dword [sym.imp.KERNEL32.dll_Sleep]
jmp 0x89c0a0
push 0x4e20
call dword [sym.imp.KERNEL32.dll_Sleep]
jmp 0x89bef0
mov eax, dword [ebp - 0x658]
cmp eax, ebx
jne 0x89c0dc
mov dword [0xbdd82c], 1
push 0xb55918
push eax
mov ecx, 0xbdd82c
mov edx, str.8d18e6d0_6a31_4762_b5f3_84c6240ed7ec
call 0x8818e0
add esp, 8
cmp dword [0xbe4194], ebx
je 0x89c29e
mov ecx, str.8d18e6d0_6a31_4762_b5f3_84c6240ed7ec
xor edx, edx
xor eax, eax
lea esi, [ebp - 0x654]
call 0x881690
push 0x80000002
lea eax, [ebp - 0x65c]
mov ecx, 1
mov edx, esi
call fcn.0097f000
add esp, 4
test eax, eax
jne 0x89c1c4
mov ecx, dword [ebp - 0x65c]
push ecx
call dword [sym.imp.ADVAPI32.dll_RegCloseKey]
push str.8d18e6d0_6a31_4762_b5f3_84c6240ed7ec
call 0x882fa0
add esp, 4
cmp dword [0xbd04f4], ebx
je 0x89c164
cmp dword [0xbd04f8], ebx
je 0x89c1f2
push ebx
push ebx
push 0x89c2d0
call fcn.00a791b2
add esp, 0xc
cmp eax, 0xffffffff
jne 0x89c1e1
mov byte [ebp - 0x348], bl
push 0x103
push ebx
lea eax, [ebp - 0x347]
push eax
call fcn.00a7ffb0
add esp, 0xc
call dword [sym.imp.KERNEL32.dll_GetLastError]
push eax
push str.Error:_beginthread_1__fails_with_error__d
lea ecx, [ebp - 0x348]
push ecx
call fcn.00a78f30
push ebx
push 1
lea edx, [ebp - 0x348]
push edx
push 0xb54ce8
call fcn.008808e0
add esp, 0x1c
jmp 0x89c1f2
push str.8d18e6d0_6a31_4762_b5f3_84c6240ed7ec
push ebx
push ebx
push 1
mov edx, dword [0xbe4194]
push edx
call 0x881640
add esp, 0x14
jmp 0x89c150
push str.CBD_5a
xor ebx, ebx
mov esi, eax
call fcn.0085df20
add esp, 4
call fcn.00968110
test eax, eax
je 0x89c29e
cmp dword [0xbd04f4], ebx
je 0x89c213
cmp dword [0xbd04f8], ebx
je 0x89c29e
push ebx
push ebx
push 0x89c500
call fcn.00a791b2
add esp, 0xc
cmp eax, 0xffffffff
jne 0x89c273
mov byte [ebp - 0x44c], bl
push 0x103
push ebx
lea eax, [ebp - 0x44b]
push eax
call fcn.00a7ffb0
add esp, 0xc
call dword [sym.imp.KERNEL32.dll_GetLastError]
push eax
push str.Error:_beginthread_2__fails_with_error__d
lea ecx, [ebp - 0x44c]
push ecx
call fcn.00a78f30
push ebx
push 1
lea edx, [ebp - 0x44c]
push edx
push 0xb54ce8
call fcn.008808e0
add esp, 0x1c
jmp 0x89c29e
push str.CBD_5b
xor ebx, ebx
mov esi, eax
call fcn.0085df20
add esp, 4
jmp 0x89c29e
mov dword [ebp - 4], 0xfffffffe
mov ecx, dword [ebp - 0x10]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 0x1c]
xor ecx, ebp
call fcn.00a78f21
mov esp, ebp
pop ebp
ret